Ukrainian govю apps (Diia, Rezerv+) and contactless payments

Entoni

Hi everyone. I'm in Ukraine and considering buying a Pixel 10a specifically to run GrapheneOS. Before I spend the money I'd like to confirm a few things, because two of these apps are effectively mandatory here — without them the device isn't usable for daily life, regardless of how good the OS is.

I've searched the forum and the privsec.dev compatibility list. Privat24 is confirmed working and monobank is listed, but I found nothing conclusive on the two government apps.

1. Diia (ua.gov.diia.app) — digital ID / government services

I found an older thread suggesting Diia detects sideloaded installs and silently exits, and that installing from the Play Store (or Aurora + Shizuku) resolves it. Can anyone confirm this still holds in 2026?

More importantly: has anyone successfully activated and used Diia.Signature (the built-in qualified electronic signature)? Since early 2026 activation requires NFC-reading a biometric ID document plus face recognition, so I suspect it may be stricter than simply viewing documents. This is the part I actually need for work.

2. Rezerv+ — Ministry of Defence military registration app

This one officially refuses to run on rooted devices — the developers confirmed this publicly. GrapheneOS isn't rooted and verified boot can be relocked with GrapheneOS keys, so in principle it should pass, but I can't find a single report either way.

Has anyone run Rezerv+ on GrapheneOS? If yes, did it need any per-app compatibility toggles (e.g. disabling secure app spawning or exploit protection)?

3. Contactless payments with a Ukrainian-issued card

I understand Google Wallet will never work. I've seen the report of Curve Pay working on GrapheneOS with a UK card — does anyone know whether Curve accepts Ukrainian-issued Visa/Mastercard? And is there any other approach that works with a non-EU card?

What would help most

If you've run any of these, could you include: device model, GrapheneOS build, whether you use sandboxed Google Play, which profile, and any compatibility toggles you changed?

A "doesn't work" answer is just as valuable to me as "works" — it saves me from buying the wrong phone. Thanks.

keycap_puller

Pixel 9
2026071500

My default settings:
Hardened memory allocator - Enabled
Memory tagging - Enabled
Secure app spawning - Enabled
Native code debugging - Blocked
WebView JIT - Disabled
Dynamic code loading via memory - Restricted
Dynamic code loading via storage - Restricted

Secondary profile
No Google Play Services and Play Store, installed the apps from Aurora.

ua.gov.diia.app
versionCode 2850
version 4.34.3.2850
The app demonstrated the following behavior. Crashed and displayed a notification Dia tried to use native code debugging, then I switched the toggle from Blocked to Allowed. Opened. Crashed again with a notification Dia tried to perform DCL via memory, so I changed that setting to Allow. Crashed once again without showing any notifications. I tried adjusting various toggles, but nothing worked. Since I don't have a google account for Google Play Store, I couldn't test any further.

ua.gov.reserveplus
versionCode 83
version 2.3.2
Runs with no issues, but I don't have a ukranian bank account to sign in.

kauyafrotrauci-4115

https://discuss.grapheneos.org/d/32621-does-diia-app-work-for-anyone/14

Novaliss

Entoni More importantly: has anyone successfully activated and used Diia.Signature (the built-in qualified electronic signature)? Since early 2026 activation requires NFC-reading a biometric ID document plus face recognition, so I suspect it may be stricter than simply viewing documents. This is the part I actually need for work.

I'm not sure, but it seems to me like it has some options besides the NFC-thing:
https://imgur.com/a/e4jtrOc
https://imgur.com/a/dSZXM8X

Update:longer screenshot
https://imgur.com/a/OF5DWuT

Novaliss

Entoni Also, I got that far without crashing ua.gov.diia.app, by disabling all explot protection options except hardened malloc, and allowed the app its verified link.

Allowed Phone, Nearby devices, Network, and Notifications permissions.

I installed from Sandboxed Google Play

elliasdev

Pixel 8a, GOS, latest stable, sandboxed Google stuff installed.
Diia and Rezerv+ work as intended, so are Privat24 and Mono.
Google Pay doesn't work on GrapheneOS, however NFC payment CAN work if implemented by banks' respective apps, if I understand it right.

kauyafrotrauci-4115

elliasdev Diia and Rezerv+ work as intended

Can you sign documents using diia?

elliasdev

kauyafrotrauci-4115 Did't try yet

kauyafrotrauci-4115

elliasdev Did't try yet

Then you don't know if "Diia... work as intended" till then. Signing is an important feature, as it allows to ID you in other services that requires your actual signature (banks, etc)

munch

I’m running Diia and Monobank in a Private Space with sandboxed Google Play Services on my Pixel 10a. I don’t have Rezerv+, so I can’t say whether it works.

In my experience, both Diia and Monobank have to be installed from the Play Store. They wouldn’t launch when I installed them via Aurora Store, so I just created a separate Google account for those apps.

I should be using the Diia signature feature sometime next week, so I’ll update this comment once I’ve had a chance to test whether it works.

Johnnyloans

kauyafrotrauci-4115

They provided helpful info. That was good of you to ask about the signing feature, but you don't have to chastise them. 2 our of 2 people say they haven't used this feature yet, so it may be important but not common for day-to-day usage. I haven't used 66% of the menus in my banking apps and I'd say they work. I'm not being deceptive or something.