• After 15+ years, we've made a big change: Android Forums is now Early Bird Club. Learn more here.

Android Market extremely insecure!

R

rawalanche

Lurker
Hi,

i recently got a new Android phone, and i decided to buy a paid app via Android market. I proceeded so, and once i hit the button, a google wallet screen opened where i had to enter my credit card info and personal info.

I proceeded to enter my CC and personal info, saved it, and application got paid and downloaded. Everything worked as expected.

Then i discovered something horrifying. I proceeded to try to buy another app, and when i hit buy button, it just accepted payment without requiring to go through any security measure.

I read about google wallet before entering my CC and personal info here, and on google page they say its secured with pin.

Now if anyone stole my phone, they got easy access to my credit card account via Android market! They can buy any app they want for my money. No need to enter any pin or password. Credit card info is simply still there open and insecure!

That is so extremely frustrating! I thought Google takes security seriously!

How do i remove all the data i entered. I cant find any google wallet related things in Android settings.
 
Welcome to the forums!

I don't have an answer for you, but I have taken the liberty of moving this to where more folks will see it and will pitch in to help. :)
 
Yes the market does save the credit card info . Just this week I purchased some themes and it charged the credit card right away I didn't remember saving my cc info so when i received the receipt it charged my sister in-law cc which I used once a longgg time ago to buy a tethering app. I called her to apologize luckily she's a super sweet girl and didn't mind the incident but yeshhh it's not very safe or secure
 
Put a lock on your phone. Then put a PIN lock for purchasing apps. Also a security app that can remotely lock/track/wipe data from your phone should be enough of a failsafe. If you are that worried about it, then by all means enter your CC info everytime you buy an app. However between the phone lock, PIN lock, and a good security app you should not let it bother you. That way if your phone happens to go missing you have two passlocks and an app that can remotely wipe your phone. Just don't lose your phone and you'll be fine. :)
But if you do, you have the means to wipe it clean. ;)
 
Adauth said:
Put a lock on your phone. Then put a PIN lock for purchasing apps. Also a security app that can remotely lock/track/wipe data from your phone should be enough of a failsafe. If you are that worried about it, then by all means enter your CC info everytime you buy an app. However between the phone lock, PIN lock, and a good security app you should not let it bother you. That way if your phone happens to go missing you have two passlocks and an app that can remotely wipe your phone. Just don't lose your phone and you'll be fine. :)
But if you do, you have the means to wipe it clean. ;)
Click to expand...

Just to add a quick addition to this post: The PIN lock for the market and setting for PIN lock before purchasing apps is in the market's settings. You can also screen lock your phone in Settings > Security.
 
@rawalanche

You have to manually set up PIN protection for purchases on Android Market which will then prompt you for a PIN after you press 'Accept & buy' for each item thereafter.

In Android Market > Menu > Settings > Use PIN for purchases. (Market v 3.4.4)

To delete your credit card details completely from Google Checkout/Wallet, follow valorian's post.

Edit: And what jerofld said!
 
rawalanche said:
Now if anyone stole my phone, they got easy access to my credit card account via Android market! They can buy any app they want for my money. No need to enter any pin or password. Credit card info is simply still there open and insecure!
Click to expand...

In addition to putting a PIN on your phone and/or market access, bear in mind that the market does not reveal your credit card number - just the last four digits. And any purchases will just get tied to your own account, so there's little incentive for anyone to buy an app - unless the thief happens to be a developer.
 
My understanding is that when you buy apps, the developer of the app does not see your credit card info--only Google does. Nothing you described in the OP contradicts that.
 
aysiu said:
My understanding is that when you buy apps, the developer of the app does not see your credit card info--only Google does. Nothing you described in the OP contradicts that.
Click to expand...

^ You clearly did not understand my post at all.

To the rest of you: Thank you very much! I found the PIN setup, i only wonder it is not active by default as it is very hazardous to link your CC with Android Market and have it unsecured by default. I will also look at some of those failsafe apps. Thanks!
 
You must log in or register to reply here.
Back
Top Bottom