{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T15:53:03Z","timestamp":1783007583301,"version":"3.54.5"},"reference-count":65,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2017,8,11]],"date-time":"2017-08-11T00:00:00Z","timestamp":1502409600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"US National Science Foundation","doi-asserted-by":"crossref","award":["CNS-1526718, CNS-1540217 and CNS-1617474"],"award-info":[{"award-number":["CNS-1526718, CNS-1540217 and CNS-1617474"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Priv. Secur."],"published-print":{"date-parts":[[2017,8,31]]},"abstract":"<jats:p>Mobile money, also known as branchless banking, leverages ubiquitous cellular networks to bring much-needed financial services to the unbanked in the developing world. These services are often deployed as smartphone apps, and although marketed as secure, these applications are often not regulated as strictly as traditional banks, leaving doubt about the truth of such claims. In this article, we evaluate these claims and perform the first in-depth measurement analysis of branchless banking applications. We first perform an automated analysis of all 46 known Android mobile money apps across the 246 known mobile money providers from 2015. We then perform a comprehensive manual teardown of the registration, login, and transaction procedures of a diverse 15% of these apps. We uncover pervasive vulnerabilities spanning botched certification validation, do-it-yourself cryptography, and other forms of information leakage that allow an attacker to impersonate legitimate users, modify transactions, and steal financial records. These findings show that the majority of these apps fail to provide the protections needed by financial services. In an expanded re-evaluation one year later, we find that these systems have only marginally improved their security. Additionally, we document our experiences working in this sector for future researchers and provide recommendations to improve the security of this critical ecosystem. Finally, through inspection of providers\u2019 terms of service, we also discover that liability for these problems unfairly rests on the shoulders of the customer, threatening to erode trust in branchless banking and hinder efforts for global financial inclusion.<\/jats:p>","DOI":"10.1145\/3092368","type":"journal-article","created":{"date-parts":[[2017,8,11]],"date-time":"2017-08-11T12:17:17Z","timestamp":1502453837000},"page":"1-31","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":49,"title":["Mo(bile) Money, Mo(bile) Problems"],"prefix":"10.1145","volume":"20","author":[{"given":"Bradley","family":"Reaves","sequence":"first","affiliation":[{"name":"University of Florida"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jasmine","family":"Bowers","sequence":"additional","affiliation":[{"name":"University of Florida"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nolen","family":"Scaife","sequence":"additional","affiliation":[{"name":"University of Florida"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Adam","family":"Bates","sequence":"additional","affiliation":[{"name":"University of Illinois at Urbana-Champaign"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Arnav","family":"Bhartiya","sequence":"additional","affiliation":[{"name":"University of Florida"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick","family":"Traynor","sequence":"additional","affiliation":[{"name":"University of Florida"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kevin R. B.","family":"Butler","sequence":"additional","affiliation":[{"name":"University of Florida"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2017,8,11]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813707"},{"key":"e_1_2_1_2_1","volume-title":"Airtel Money: Terms and Conditions of Usage.","author":"Airtel","year":"2015","unstructured":"Airtel TOS. 2015 . Airtel Money: Terms and Conditions of Usage. Retrieved from http:\/\/www.airtel.in\/personal\/money\/terms-of-use. Airtel TOS. 2015. Airtel Money: Terms and Conditions of Usage. Retrieved from http:\/\/www.airtel.in\/personal\/money\/terms-of-use."},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2013.90"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/168588.168615"},{"key":"e_1_2_1_5_1","unstructured":"Apktool. 2016. android-apktool: A Tool for Reverse Engineering Android APK Files. Retrieved from https:\/\/ibotpeaches.github.io\/Apktool\/.  Apktool. 2016. android-apktool: A Tool for Reverse Engineering Android APK Files. Retrieved from https:\/\/ibotpeaches.github.io\/Apktool\/."},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660338"},{"key":"e_1_2_1_7_1","unstructured":"Nick Berry. 2012. PIN analysis. Retrieved from http:\/\/www.datagenetics.com\/blog\/september32012\/.  Nick Berry. 2012. PIN analysis. Retrieved from http:\/\/www.datagenetics.com\/blog\/september32012\/."},{"key":"e_1_2_1_8_1","unstructured":"Bill 8 Melinda Gates Foundation. 2016. Financial Services for the Poor: Strategy Overview. Retrieved from http:\/\/www.gatesfoundation.org\/What-We-Do\/Global-Development\/Financial-Services-for-the-Poor.  Bill 8 Melinda Gates Foundation. 2016. Financial Services for the Poor: Strategy Overview. Retrieved from http:\/\/www.gatesfoundation.org\/What-We-Do\/Global-Development\/Financial-Services-for-the-Poor."},{"key":"e_1_2_1_9_1","unstructured":"Bouncy Castle. 2014. The Legion of the Bouncy Castle. Retrieved from https:\/\/www.bouncycastle.org\/.  Bouncy Castle. 2014. The Legion of the Bouncy Castle. Retrieved from https:\/\/www.bouncycastle.org\/."},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2996358"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3001913.3001919"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/2568225.2568286"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/1999995.2000018"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1596\/978-0-8213-8745-0"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38631-2_19"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-33167-1_12"},{"key":"e_1_2_1_18_1","volume-title":"Proc. of Black Hat Abu Dhabi.","author":"Desnos Anthony","year":"2011","unstructured":"Anthony Desnos and Geoffroy Gueguen . 2011 . Android: From reversing to decompilation . Proc. of Black Hat Abu Dhabi. Retrieved from http:\/\/media.blackhat.com\/bh-ad-11\/Desnos\/bh-ad-11-DesnosGueguen-Andriod-Reversing_to_Decompilation_WP.pdf. Anthony Desnos and Geoffroy Gueguen. 2011. Android: From reversing to decompilation. Proc. of Black Hat Abu Dhabi. Retrieved from http:\/\/media.blackhat.com\/bh-ad-11\/Desnos\/bh-ad-11-DesnosGueguen-Andriod-Reversing_to_Decompilation_WP.pdf."},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516693"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/2619091"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.5555\/2028067.2028088"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102171"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382205"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516655"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/2046707.2046779"},{"key":"e_1_2_1_26_1","unstructured":"GCash TOS. 2015. GCash Terms and Conditions. Retrieved from http:\/\/www.globe.com.ph\/gcash-terms-and-conditions.  GCash TOS. 2015. GCash Terms and Conditions. Retrieved from http:\/\/www.globe.com.ph\/gcash-terms-and-conditions."},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382204"},{"key":"e_1_2_1_28_1","unstructured":"Google. 2014a. Dashboards\u2014Android Developers. Retrieved from https:\/\/developer.android.com\/about\/dashboards\/index.html.  Google. 2014a. Dashboards\u2014Android Developers. Retrieved from https:\/\/developer.android.com\/about\/dashboards\/index.html."},{"key":"e_1_2_1_29_1","unstructured":"Google. 2014b. Log\u2014Android Developers. Retrieved from https:\/\/developer.android.com\/reference\/android\/util\/Log.html.  Google. 2014b. Log\u2014Android Developers. Retrieved from https:\/\/developer.android.com\/reference\/android\/util\/Log.html."},{"key":"e_1_2_1_30_1","volume-title":"https:\/\/developer.android.com\/reference\/java\/util\/Random.html. (Nov","author":"Developers Random\u2014Android","year":"2014","unstructured":"Google. 2014c. Random\u2014Android Developers . https:\/\/developer.android.com\/reference\/java\/util\/Random.html. (Nov . 2014 ). Google. 2014c. Random\u2014Android Developers. https:\/\/developer.android.com\/reference\/java\/util\/Random.html. (Nov. 2014)."},{"key":"e_1_2_1_31_1","unstructured":"Google. 2016. App Security Improvement Program. Retrieved from https:\/\/developer.android.com\/google\/play\/asi.html.  Google. 2016. App Security Improvement Program. Retrieved from https:\/\/developer.android.com\/google\/play\/asi.html."},{"key":"e_1_2_1_32_1","unstructured":"GSMA. 2014. MMU Deployment Tracker. Retrieved from http:\/\/www.gsma.com\/mobilefordevelopment\/programmes\/mobile-money-for-the-unbanked\/insights\/tracker.  GSMA. 2014. MMU Deployment Tracker. Retrieved from http:\/\/www.gsma.com\/mobilefordevelopment\/programmes\/mobile-money-for-the-unbanked\/insights\/tracker."},{"key":"e_1_2_1_33_1","volume-title":"Technology 8 Arts 8, 3","author":"Harris Andrew","year":"2013","unstructured":"Andrew Harris , Seymour Goodman , and Patrick Traynor . 2013. Privacy and security concerns associated with mobile money applications in Africa. Washington Journal of Law , Technology 8 Arts 8, 3 ( 2013 ). Andrew Harris, Seymour Goodman, and Patrick Traynor. 2013. Privacy and security concerns associated with mobile money applications in Africa. Washington Journal of Law, Technology 8 Arts 8, 3 (2013)."},{"key":"e_1_2_1_34_1","volume-title":"More than 60 Percent of Kenyan GDP Came From Mobile Money","author":"Highfield Vaughn","year":"2012","unstructured":"Vaughn Highfield . 2012. More than 60 Percent of Kenyan GDP Came From Mobile Money in June 2012 , a New Survey Shows. Retrieved from http:\/\/www.totalpayments.org\/2013\/03\/01\/60-cent-kenyan-gdp-mobile-money-june-2012-survey-shows\/. Vaughn Highfield. 2012. More than 60 Percent of Kenyan GDP Came From Mobile Money in June 2012, a New Survey Shows. Retrieved from http:\/\/www.totalpayments.org\/2013\/03\/01\/60-cent-kenyan-gdp-mobile-money-june-2012-survey-shows\/."},{"key":"e_1_2_1_35_1","unstructured":"Internet Security Research Group (ISRG). 2016. Let\u2019s Encrypt. Retrieved from https:\/\/letsencrypt.org\/.  Internet Security Research Group (ISRG). 2016. Let\u2019s Encrypt. Retrieved from https:\/\/letsencrypt.org\/."},{"key":"e_1_2_1_36_1","unstructured":"JEB Decompiler. 2014. JEB Decompiler. Retrieved from http:\/\/www.android-decompiler.com\/.  JEB Decompiler. 2014. JEB Decompiler. Retrieved from http:\/\/www.android-decompiler.com\/."},{"key":"e_1_2_1_37_1","unstructured":"Janet Kamana. 2014. M-PESA: How Kenya Took the Lead in Mobile Money. Retrieved from http:\/\/www.mobiletransaction.org\/m-pesa-kenya-the-lead-in-mobile-money\/.  Janet Kamana. 2014. M-PESA: How Kenya Took the Lead in Mobile Money. Retrieved from http:\/\/www.mobiletransaction.org\/m-pesa-kenya-the-lead-in-mobile-money\/."},{"key":"e_1_2_1_38_1","volume-title":"Technology 8 Arts 8, 3","author":"de Almeida Gilberto Martins","year":"2013","unstructured":"Gilberto Martins de Almeida . 2013. M-payments in Brazil: Notes on how a country\u2019s background may determine timing and design of a regulatory model. Washington Journal of Law , Technology 8 Arts 8, 3 ( 2013 ). Gilberto Martins de Almeida. 2013. M-payments in Brazil: Notes on how a country\u2019s background may determine timing and design of a regulatory model. Washington Journal of Law, Technology 8 Arts 8, 3 (2013)."},{"key":"e_1_2_1_39_1","unstructured":"mCoin TOS. 2015. mCoin: Terms and Conditions. Retrieved from http:\/\/www.mcoin.co.id\/syarat-dan-ketentuan.  mCoin TOS. 2015. mCoin: Terms and Conditions. Retrieved from http:\/\/www.mcoin.co.id\/syarat-dan-ketentuan."},{"key":"e_1_2_1_40_1","unstructured":"Christopher Mims. 2013. 31% of Kenya\u2019s GDP is Spent Through Mobile Phones. Retrieved from http:\/\/qz.com\/57504\/31-of-kenyas-gdp-is-spent-through-mobile-phones\/  Christopher Mims. 2013. 31% of Kenya\u2019s GDP is Spent Through Mobile Phones. Retrieved from http:\/\/qz.com\/57504\/31-of-kenyas-gdp-is-spent-through-mobile-phones\/"},{"key":"e_1_2_1_41_1","unstructured":"Money on Mobile TOS. 2015. Money on Mobile Sign-Up: Terms and Conditions. Retrieved from http:\/\/www.money-on-mobile.com\/?page_id&equals;930.  Money on Mobile TOS. 2015. Money on Mobile Sign-Up: Terms and Conditions. Retrieved from http:\/\/www.money-on-mobile.com\/?page_id&equals;930."},{"key":"e_1_2_1_42_1","unstructured":"mPay TOS. 2015. mPAY: Terms and Conditions. Retrieved from http:\/\/www.ais.co.th\/mpay\/Condition.html.  mPay TOS. 2015. mPAY: Terms and Conditions. Retrieved from http:\/\/www.ais.co.th\/mpay\/Condition.html."},{"key":"e_1_2_1_43_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.33"},{"key":"e_1_2_1_44_1","first-page":"4","article-title":"Enhanced security model for mobile banking systems in Tanzania","volume":"1","author":"Nyamtiga Baraka W.","year":"2013","unstructured":"Baraka W. Nyamtiga , Anael Sam , and Loserian S. Laizer . 2013 a. Enhanced security model for mobile banking systems in Tanzania . Intl. Jour. Tech. Enhancements and Emerging Engineering Research 1 , 4 (2013), 4 -- 20 . Baraka W. Nyamtiga, Anael Sam, and Loserian S. Laizer. 2013a. Enhanced security model for mobile banking systems in Tanzania. Intl. Jour. Tech. Enhancements and Emerging Engineering Research 1, 4 (2013), 4--20.","journal-title":"Intl. Jour. Tech. Enhancements and Emerging Engineering Research"},{"key":"e_1_2_1_45_1","first-page":"38","article-title":"Security perspectives for USSD versus SMS in conducting mobile transactions: A case study of Tanzania","volume":"1","author":"Nyamtiga Baraka W.","year":"2013","unstructured":"Baraka W. Nyamtiga , Anael Sam , and Loserian S. Laizer . 2013 b. Security perspectives for USSD versus SMS in conducting mobile transactions: A case study of Tanzania . Intl. Jour. Tech. Enhancements and Emerging Engineering Research 1 , 3 (2013), 38 -- 43 . Baraka W. Nyamtiga, Anael Sam, and Loserian S. Laizer. 2013b. Security perspectives for USSD versus SMS in conducting mobile transactions: A case study of Tanzania. Intl. Jour. Tech. Enhancements and Emerging Engineering Research 1, 3 (2013), 38--43.","journal-title":"Intl. Jour. Tech. Enhancements and Emerging Engineering Research"},{"key":"e_1_2_1_46_1","volume-title":"http:\/\/thenextweb.com\/google\/2014\/07\/31\/android-reached-record-85-smartphone-market-share-q2-2014-report\/. (July","author":"Ong Josh","year":"2014","unstructured":"Josh Ong . 2014. Android Achieved 85% Smartphone Market Share in Q2. http:\/\/thenextweb.com\/google\/2014\/07\/31\/android-reached-record-85-smartphone-market-share-q2-2014-report\/. (July 2014 ). Josh Ong. 2014. Android Achieved 85% Smartphone Market Share in Q2. http:\/\/thenextweb.com\/google\/2014\/07\/31\/android-reached-record-85-smartphone-market-share-q2-2014-report\/. (July 2014)."},{"key":"e_1_2_1_47_1","unstructured":"Oracle. 2014. Random - Java Platform SE 7. Retrieved from https:\/\/docs.oracle.com\/javase\/7\/docs\/api\/java\/util\/Random.html.  Oracle. 2014. Random - Java Platform SE 7. Retrieved from https:\/\/docs.oracle.com\/javase\/7\/docs\/api\/java\/util\/Random.html."},{"key":"e_1_2_1_48_1","volume-title":"Oxigen Wallet: Terms and Conditions.","author":"Oxigen","year":"2015","unstructured":"Oxigen TOS. 2015 . Oxigen Wallet: Terms and Conditions. Retrieved from https:\/\/www.oxigenwallet.com\/terms-conditions. Oxigen TOS. 2015. Oxigen Wallet: Terms and Conditions. Retrieved from https:\/\/www.oxigenwallet.com\/terms-conditions."},{"key":"e_1_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/1734583.1734597"},{"key":"e_1_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/2184489.2184496"},{"key":"e_1_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.1145\/1837110.1837116"},{"key":"e_1_2_1_52_1","unstructured":"PCI DSS. 2016. Data Security Standard\u2014Requirements and Security Assessment Procedures. Retrieved from https:\/\/www.pcisecuritystandards.org\/documents\/PCI_DSS_v3.pdf.  PCI DSS. 2016. Data Security Standard\u2014Requirements and Security Assessment Procedures. Retrieved from https:\/\/www.pcisecuritystandards.org\/documents\/PCI_DSS_v3.pdf."},{"key":"e_1_2_1_53_1","volume-title":"Mobile Financial Services for the Unbanked: State of the Industry","author":"Penicaud Claire","year":"2013","unstructured":"Claire Penicaud and Arunjay Katakam . 2014. Mobile Financial Services for the Unbanked: State of the Industry 2013 . Technical Report. GSMA. Claire Penicaud and Arunjay Katakam. 2014. Mobile Financial Services for the Unbanked: State of the Industry 2013. Technical Report. GSMA."},{"key":"e_1_2_1_54_1","unstructured":"Qualys. 2014. SSL Server Test. Retrieved from https:\/\/www.ssllabs.com\/ssltest\/.  Qualys. 2014. SSL Server Test. Retrieved from https:\/\/www.ssllabs.com\/ssltest\/."},{"key":"e_1_2_1_55_1","volume-title":"Proceedings of the 24th USENIX Security Symposium (USENIX Security 15)","author":"Reaves Bradley","unstructured":"Bradley Reaves , Nolen Scaife , Adam Bates , Patrick Traynor , and Kevin R. B. Butler . 2015. Mo(bile) money, mo(bile) problems: Analysis of branchless banking applications in the developing world . In Proceedings of the 24th USENIX Security Symposium (USENIX Security 15) . USENIX Association, Washington, D.C., 17--32. Bradley Reaves, Nolen Scaife, Adam Bates, Patrick Traynor, and Kevin R. B. Butler. 2015. Mo(bile) money, mo(bile) problems: Analysis of branchless banking applications in the developing world. In Proceedings of the 24th USENIX Security Symposium (USENIX Security 15). USENIX Association, Washington, D.C., 17--32."},{"key":"e_1_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.28"},{"key":"e_1_2_1_58_1","volume-title":"AML standards, CFT, Obligation of banks under PMLA","author":"India Reserve Bank","year":"2002","unstructured":"Reserve Bank of India . 2013. Master Circular - KYC norms , AML standards, CFT, Obligation of banks under PMLA , 2002 . Retrieved from http:\/\/rbidocs.rbi.org.in\/rdocs\/notification\/PDFs\/94CF010713FL.pdf. Reserve Bank of India. 2013. Master Circular - KYC norms, AML standards, CFT, Obligation of banks under PMLA, 2002. Retrieved from http:\/\/rbidocs.rbi.org.in\/rdocs\/notification\/PDFs\/94CF010713FL.pdf."},{"key":"e_1_2_1_59_1","unstructured":"Safaricom. 2014. Relax you have got M-PESA. Retrieved from http:\/\/www.safaricom.co.ke\/personal\/m-pesa\/m-pesa-services-tariffs\/relax-you-have-got-m-pesa.  Safaricom. 2014. Relax you have got M-PESA. Retrieved from http:\/\/www.safaricom.co.ke\/personal\/m-pesa\/m-pesa-services-tariffs\/relax-you-have-got-m-pesa."},{"key":"e_1_2_1_60_1","volume-title":"Proceedings of the 3rd ACM Workshop on Networked Systems for Developing Regions.","author":"Sharma Ashlesh","year":"2009","unstructured":"Ashlesh Sharma , Lakshmi Subramanian , and Dennis Shasha . 2009 . Secure branchless banking . In Proceedings of the 3rd ACM Workshop on Networked Systems for Developing Regions. Ashlesh Sharma, Lakshmi Subramanian, and Dennis Shasha. 2009. Secure branchless banking. In Proceedings of the 3rd ACM Workshop on Networked Systems for Developing Regions."},{"key":"e_1_2_1_61_1","doi-asserted-by":"publisher","DOI":"10.1145\/2556288.2557377"},{"key":"e_1_2_1_62_1","unstructured":"Smali. 2014. smali: An assembler\/disassembler for Android\u2019s dex format. Retrieved from https:\/\/code.google.com\/p\/smali\/.  Smali. 2014. smali: An assembler\/disassembler for Android\u2019s dex format. Retrieved from https:\/\/code.google.com\/p\/smali\/."},{"key":"e_1_2_1_63_1","unstructured":"The GSM Association (GSMA). 2016. State of the Industry Report: Mobile Money. Retrieved from http:\/\/www.gsma.com\/mobilefordevelopment\/wp-content\/uploads\/2016\/04\/SOTIR_2015.pdf.  The GSM Association (GSMA). 2016. State of the Industry Report: Mobile Money. Retrieved from http:\/\/www.gsma.com\/mobilefordevelopment\/wp-content\/uploads\/2016\/04\/SOTIR_2015.pdf."},{"key":"e_1_2_1_64_1","unstructured":"The MITRE Corporation. 2014. CWE - Common Weakness Enumeration. Retrieved from http:\/\/cwe.mitre.org\/.  The MITRE Corporation. 2014. CWE - Common Weakness Enumeration. Retrieved from http:\/\/cwe.mitre.org\/."},{"key":"e_1_2_1_65_1","volume-title":"Security for Telecommunications Networks","author":"Traynor Patrick","unstructured":"Patrick Traynor , Patrick McDaniel , and Thomas La Porta . 2008. Security for Telecommunications Networks . Springer . Patrick Traynor, Patrick McDaniel, and Thomas La Porta. 2008. Security for Telecommunications Networks. Springer."},{"key":"e_1_2_1_66_1","unstructured":"Jennifer Valentino-Devries. 2015. Wall Street Journal - Researchers Find Security Flaws in Developing-World Money Apps. Retrieved from http:\/\/blogs.wsj.com\/digits\/2015\/08\/11\/researchers-find-security-flaws-in-developing-world-money-apps\/.  Jennifer Valentino-Devries. 2015. Wall Street Journal - Researchers Find Security Flaws in Developing-World Money Apps. Retrieved from http:\/\/blogs.wsj.com\/digits\/2015\/08\/11\/researchers-find-security-flaws-in-developing-world-money-apps\/."},{"key":"e_1_2_1_67_1","volume-title":"Zuum: Termos e Condi\u00e7\u00f5es.","author":"Zuum","year":"2015","unstructured":"Zuum TOS. 2015 . Zuum: Termos e Condi\u00e7\u00f5es. Retrieved from http:\/\/www.zuum.com.br\/institucional\/termos. Zuum TOS. 2015. Zuum: Termos e Condi\u00e7\u00f5es. Retrieved from http:\/\/www.zuum.com.br\/institucional\/termos."}],"container-title":["ACM Transactions on Privacy and Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3092368","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3092368","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T03:03:08Z","timestamp":1750215788000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3092368"}},"subtitle":["Analysis of Branchless Banking Applications"],"short-title":[],"issued":{"date-parts":[[2017,8,11]]},"references-count":65,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2017,8,31]]}},"alternative-id":["10.1145\/3092368"],"URL":"https:\/\/doi.org\/10.1145\/3092368","relation":{},"ISSN":["2471-2566","2471-2574"],"issn-type":[{"value":"2471-2566","type":"print"},{"value":"2471-2574","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,8,11]]},"assertion":[{"value":"2016-08-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2017-05-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2017-08-11","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}