PrivSec-dev
Oplati (Оплати)
Is there an existing issue for this?
- [x] I have searched the existing issues
App name
Oplati
Link to app
https://play.google.com/store/apps/details?id=by.lwo.oplati
App version
1.31.0
Country of the app
Belarus
Build Number
2025102800
Device list
Pixel 8 Pro
Profile app tested in
Private Space
Google Play installed?
Installed
Where did you install this app from?
Google Play Store
Native code debugging
- [ ] Allowed
- [x] Blocked
Exploit protection compatibility mode
- [ ] Enabled
- [x] Disabled
Memory tagging
- [x] Enabled
- [ ] Disabled
- [ ] N/A
Dynamic code loading via memory
- [x] Restricted
- [ ] Allowed
Dynamic code loading via storage
- [ ] Restricted
- [x] Allowed
Does the app use the Play Integrity API?
- [ ] Yeah
- [ ] Yea, blocked
- [x] Nope
NFC payments
- [ ] Works
- [ ] Works but requires another service
- [ ] Does not work
- [x] N/A (Not supported by app)
- [ ] Not tested
Description of the app's functionality
Oplati - official way to pay for public transport (purchase of a virtual ticket) in Belarus. However this app requires KYC and tied to Belinvestbank (proof for that can at the bottom of the official website https://www.o-plati.by) and allows other banking-like functionality (banking transfers and etc). Seems that app is alternative/additional client for Belinvestbank (official client report is here #791)
Are there any extra notes you think users should know about?
No response
ADB logcat of the app if necessary
@spring-onion can you add label "Belarus" and remove "status-unconfirmed"? Or some additional details must be provided?