Chase App Error on Latest Graphene Version

LuthenRael

I know banking apps get discussed quite a bit, but I ran into something yesterday that I wanted to share.

On the latest Graphene version the Chase app started giving me fits, instantly crashing and all the typical behaviors people have complained about. I had to uninstall it and then reinstall and turn off all protections to get it to work. Fine, whatever.

Today I was going to check my credit score through the app and when I clicked the credit score button it throws this error message:

For your security, the Chase Mobile app is unavailable on devices that have been "rooted" or contain malware.

I am able to navigate the entire app without problems, it is only clicking the credit score button that I've seen this.

Just thought I'd pass this along. Perhaps it will be helpful to the developers.

moonlitmartyr

LuthenRael it's funny that their explanation for why it won't support GrapheneOS is the very opposite of what GrapheneOS is.

Johnnyloans

GrapheneOS

Maybe it's only chase UK?
Chase USA works fine for me, no vpn. (Except for checking credit score as LuthenRael mentioned. "Rooted" message for that 1 menu)

version 4.762

com.chase.sig.android
versionCode 476207208

2026071101

All protections disabled except for:

app compatibility mode off
webview JIT: disabled

(It used to work with the global secure app spawning on. Now it needs the individual toggle to disable secure spawn)

RiverFox7

LuthenRael I just use it in Vanadium.

n2gwtl

LuthenRael I have had no problems with the Chase app since the update. I have "exploit compatibility' mode" enabled and a VPN enabled (same country as I am in) as always and no problems. I tried checking my credit score and everything is working fine.

The Amex app has been annoying (no change before and after update). It uses the play integrity api and won't allow me to register my device (it says unable to trust my device). I always need a 2nd factor (email or text) to login.

Laborer4038

Finding a similar thing with the Chase UK app. It reports that "Sorry you can't use Chase on this device because it doesn't meet security standards". It's only just started doing it.

Shirt

Laborer4038 yes, I'm getting the same. I dont know if this was Chase (UK) or the latest graphene update. Either way its now unusable. I have emailed their new customer team as they don't use their app support email, and am waiting for a response. I've indicated it may be due to attestation, and that they should look at this. Its the same with Santander, and the Amex app, while it works it requires a 2fa sms every time i log in. Its a shame banks don't align with Grapheneos - presumably banks do have high risk customers, or just people who are a little more security and privacy conscious than others. I wonder if this banking problem will continue when the Motorola phones are released.

Laborer4038

Looks like the Chase UK app was last updated on the 6th of July. It worked last night. Phone updated. Now broken. Strongly suggests that this update caused it to break. Bit more detail, I previously had it installed from Aurora with no play services installed. Now I've tried with and without services, exploit mode on and off and with it downloaded from Aurora and Play store. I'm using a Pixel 6a.

oh_no

Just confirming similar to above, the app was working prior to reboot to update to latest graphene and now says
'Sorry, you can't use Chase on this device
This is because your device doesn't meet our security standards'

The TSB application which I've also not updated has always complained about a lack of Google Play services but continued to work after ignoring the message, this now automatically closes and is now unusable.

Not sure what changed or if it is even reversible.
Thanks

oh_no

Just a quick follow up, disabling 'Secure app spawning' resolved the issue with the TSB app, haven't found a combination of disabled exploit protections that work with Chase though.

Laborer4038

Okay, weird work around. If I enable Mullvad VPN and set it to another country (I chose Chile), I don't see the issue BUT the app is noticeably slower

slates

Laborer4038 good find, I get the same result with NordVPN/Chile/Argentina, Chase UK app works.

shadow_jack

Laborer4038 Nice one! Chase UK also works with ProtonVPN set to Chile.

Johnnyloans

shadow_jack

slates

Laborer4038

I'm curious if any of you can get the chase app to work while the vpn is set to the country you currently reside in.

It'd be useful info for looking into this. :)

Johnnyloans

oh_no

gowthamcb

There is another post titled chase bank app not working after most recent update.
For some, disabling secure app spawning fixes it. (It's a per app toggle now)

Several users are reporting that a vpn fixes the "rooted" message. @GrapheneOS

slates good find, I get the same result with NordVPN/Chile/Argentina, Chase UK app works.

GrapheneOS

We'll get the root problem solved. The new secure spawning implementation may have improved compatibility with the anti-tampering code in a way that enabled it to ban GrapheneOS. Enabling a VPN is likely breaking their code in another way which stops it banning GrapheneOS. We'll need to figure out what's happening in Chase and other apps with new compatibility issues to solve that as we did many other issues already.

n2gwtl

n2gwtl after the latest chase app update, I too, have the same issue when clicking credit score. Seems like security changes were included in their latest update.

GrapheneOS

We solved the recent regression in compatibility with a small subset of banking apps. It was caused by the V-KEY V-OS Mobile App Protection SDK. It checks Linux mount IDs and breaks if mount namespaces are created after early boot. We've started builds for a new release already.

cj_0

Sounds hopeful as same issue with latest update and Bangkok Bank