Skip to content
RZ.

System 03

Mobile Security

Device Binding · SafetyNet · VPN Detection · vKYC

Security hardening across device binding, KYC, and screen-sharing surfaces to close abuse vectors on Android and iOS.

Components

Root Detection
Device integrity checks gating sensitive payment and KYC flows.
Play Integrity
Upgraded SafetyNet with enriched harmful-app diagnostics.
Frida/RASP
Runtime application self-protection against tampering and instrumentation tooling.
SSL Pinning
Certificate pinning to prevent interception of API traffic.

Problem

Payment and KYC flows are high-value targets for device tampering, screen mirroring, and VPN-based location spoofing — surfaces that needed hardening beyond baseline device binding checks.

Constraints

  • Security controls can't add meaningful friction to legitimate users completing KYC or payments.
  • Detection signals (SafetyNet, VPN, screen mirroring) shift as OS platforms change; iOS 18 introduced iPhone Mirroring as a new vector.
  • False positives on device or security checks directly block revenue-generating flows.

Architecture

Blocked iPhone Mirroring on iOS to prevent screen-sharing based session exposure, and added a VPN detection gate to vKYC to prevent location-based KYC circumvention.

Upgraded SafetyNet, adding enriched harmful-app diagnostics to the device integrity signal used to gate sensitive flows.

Paired with SIM mismatch kill switches from the device binding pipeline, these controls form the security gate in front of KYC and payment flows.

Decisions

Block new OS-level vectors quickly

iOS 18 introduced iPhone Mirroring as a new screen-sharing surface. Blocked it for the app rather than treating it as an edge case.

Gate KYC location, not just identity

Added a VPN detection gate to vKYC so location-based circumvention is caught at the point of verification rather than downstream.

Keep the device-integrity signal current

Upgraded SafetyNet for enriched harmful-app diagnostics, keeping the device integrity signal gating sensitive flows current with the latest detection capability.

Impact

  • Blocked iPhone Mirroring on iOS as a new screen-sharing attack surface.
  • Added a VPN detection gate to vKYC to close a location-based circumvention path.
  • Upgraded SafetyNet with enriched harmful-app diagnostics.
  • Implemented SIM mismatch kill switches to reduce false-positive device binding failures.