BNZ Mandatory Data Collection

Please note this sub-forum does not provide professional finance advice. You should seek advice from a licensed financial advisor.

To post in this sub-forum you must have made 100 posts or have Trust status or have completed our ID Verification.

If investing please consider our affiliate link for new accounts: Sharesies.

Forums › Finance and wealth management › BNZ Mandatory Data Collection

1 | 2 | 3 | 4 | 5

meow
13732 posts

Uber Geek
+1 received by user: 11151

Moderator

ID Verified

Trusted

Lifetime subscriber

#3458643 4-Feb-2026 11:31

richms: Already seeing people have other banking apps overseas refuse to open based on other apps being installed from non play store sources on their device. Its none of the banks business what else I use the device for.

You can always use internet banking in your browser if it bothers you that much? But those analytics are what saved somebody's grandparents their life savings and I've seen both sides and the impact of this fraud where somebody has lost their life savings and somebody has also been prevented from transferring their life savings via fraud analytics.

Android allowing sideloaded apps is a huge risk to customers. You and I being technical people know about these risks but many people do not and this is what these analytics and restrictions target. I've seen it time and time again people unknowingly sideload malware via compromised ads / sites and even social engineering and it is more common than you may think.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup) | Starlink

NZ Politics 2026 Tracking & Quiz: https://nzpol.nz

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

freitasm

BDFL - Memuneh
81342 posts

Uber Geek
+1 received by user: 42683

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3458656 4-Feb-2026 12:39

Lias:

To quote a news article. "For Westpac NZ and ANZ, deploying BioCatch Trust is not just a defensive move—it's a strategic play to reduce operational costs tied to scam-related claims and preserve customer trust, a cornerstone of long-term profitability. "

This is not about customer security, it's about invading privacy to ensure bank profits remain high. This should be stomped on by the relevant regulatory bodies hard and fast.

You are right. It's not about security. It's about trust.

A trusted bank is profitable. Nothing wrong with that. I don't like profits gained from profiteering. But from trust? Sure.

I wonder if people rather have a non-profitable institution, known for allowing scammers to take advantage of retired pensioners.

There's a huge difference between collecting data to ensure safe use of a service, and collecting data to oppress. I think people wrongly lump those two together.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

LEGAL video, movies and TV download and streaming options in New Zealand

Talkiet

4823 posts

Uber Geek
+1 received by user: 3947

Trusted

#3458765 4-Feb-2026 15:30

Lias:

michaelmurfy:

Yes.

This is a service most banks are implementing called Biocatch - https://www.biocatch.com/

What it does is learns from what you commonly do in the app and on Internet Banking and is able to determine if something isn't quite right. It also will request phone permissions on the mobile app to determine if you're on the phone (it doesn't know who to - but it can then challenge a transaction or simply tell you that you're not in a call with BNZ).

It's a part of a push to put a stop to scammers / fraud and also raise awareness around fraud. The "installed applications" part is to determine if your Android device is potentially running malicious apps.

You've got nothing at all to worry about. It isn't collecting stuff that things like Dynatrace isn't already collecting already in your internet banking session.

To quote a news article. "For Westpac NZ and ANZ, deploying BioCatch Trust is not just a defensive move—it's a strategic play to reduce operational costs tied to scam-related claims and preserve customer trust, a cornerstone of long-term profitability. "

This is not about customer security, it's about invading privacy to ensure bank profits remain high. This should be stomped on by the relevant regulatory bodies hard and fast.

It sounds like the OP is exactly the privacy conscious person the bank was thinking about when pointing out there are other ways to bank if they're uncomfortable sharing the information the bank wants to use. The bank has informed OP before collecting the info and provided a link telling them what information is going to be collected.

Cheers - N

Please note all comments are from my own brain and don't necessarily represent the position or opinions of my employer, previous employers, colleagues, friends or pets.

eracode

Smpl Mnmlst
9584 posts

Uber Geek
+1 received by user: 6560

ID Verified

Trusted

Lifetime subscriber

#3458779 4-Feb-2026 16:27

Lias:

Am I overreacting in thinking it's time to find a new bank?

What will you do if you keep jumping banks to stay ahead of this - and then you get to the ‘last bank standing’ and they’re all doing it?

Sometimes I just sit and think. Other times I just sit.

mdf

mdf
3599 posts

Uber Geek
+1 received by user: 1544

Trusted

Lifetime subscriber

#3458781 4-Feb-2026 16:34

I thought BNZ did an okay job of explaining this, but @michaelmurfy did a better job.

For those that haven't seen it, part of the reason behind this specific disclosure is the new Biometric Processing Privacy Code. Generally there are pretty good rules about New Zealand agencies collecting your personal information. You are of course reliant on organisations subject to those rules actually following those rules, but banks are pretty compliance focussed. The risk of hacking / data breaches never goes away, but it is definitely better than giving the same permissions to some US data broker masquerading as a "free and helpful" app.

mattwnz

20659 posts

Uber Geek
+1 received by user: 4917

#3458790 4-Feb-2026 17:27

It is perhaps a good reason to use an iphone or iOS devices for banking apps.

Dell

Shop now for Dell laptops and other devices (affiliate link).

Lias

5696 posts

Uber Geek
+1 received by user: 4016

ID Verified

Trusted

Lifetime subscriber

#3458886 4-Feb-2026 22:36

michaelmurfy:

You can always use internet banking in your browser if it bothers you that much?

I'm seeing the notification in a desktop browser, which suggests it's not just applying to Android users.

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup. Opinions are my own and not the views of my employer.

michaelmurfy

meow
13732 posts

Uber Geek
+1 received by user: 11151

Moderator

ID Verified

Trusted

Lifetime subscriber

#3458897 5-Feb-2026 00:31

Lias: I'm seeing the notification in a desktop browser, which suggests it's not just applying to Android users.

OK? And what privacy are you giving up that realtime user monitoring via Dynatrace (which is also present) along with fraud analytics they've always run isn't already providing? You do know that internet banking can't get your installed apps for example or other information that browser API's don't provide to them.

I can tell you now all banks are doing fraud analysis as well as RUM in internet banking and their mobile apps. This isn't a new thing. It's in their best interest to in order to protect their customers and also protect their own bottom line and reputation. Lots of investment goes into fraud detection.

I get you're privacy conscious but you may be surprised to know many sites are already collecting this sort of information without you even knowing in order to fingerprint you. At-least your bank is fingerprinting you to prevent fraud and has a legitimate reason to outside of ad tracking plus is also transparent about it.

Your bank is legitimately keeping you safe. This data isn't used for anything else.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup) | Starlink

mudguard

2395 posts

Uber Geek
+1 received by user: 1303

#3458902 5-Feb-2026 06:36

I'm no longer in the bank, still in the industry and caught up with a friend in card fraud. It's absolutely bonkers, and unrelenting. I saw the BNZ thing and grumbled a bit, my partner didn't want a bar of it so she's removed the app.

The irony was I thought, how often have I been on a call an used my internet banking at the same time, well I had to tell my partner what was in the joint account while we were on the phone!

Lias

5696 posts

Uber Geek
+1 received by user: 4016

ID Verified

Trusted

Lifetime subscriber

#3458962 5-Feb-2026 10:06

michaelmurfy:

OK? And what privacy are you giving up that realtime user monitoring via Dynatrace (which is also present) along with fraud analytics they've always run isn't already providing? You do know that internet banking can't get your installed apps for example or other information that browser API's don't provide to them.

BioCatch works by continuously monitoring how each customer interacts to build a unique behavioral profile per user. That goes beyond traditional monitoring tools like Dynatrace, which focus on application performance and technical telemetry rather than constructing persistent behavioral ‘signatures’ of individuals. BioCatch say they rely on techniques like hashing, anonymization and pattern‑based profiling instead of direct identifiers, but there is little independent, public evidence about how robust that anonymization is in practice or how resistant it is to re‑identification over time. Given that re‑identification of supposedly anonymous profiles is a well‑known problem in data privacy, it’s reasonable to be sceptical. In addition, the company was founded by former IDF Military Intelligence operatives, which doesn't exactly engender trust.

michaelmurfy:

I can tell you now all banks are doing fraud analysis as well as RUM in internet banking and their mobile apps. This isn't a new thing. It's in their best interest to in order to protect their customers and also protect their own bottom line and reputation. Lots of investment goes into fraud detection.

Banks have reasons to invest in fraud detection and user monitoring, and those tools can help protect both customers and the bank’s bottom line. That doesn’t mean every new tool or technique is in my best interests, particularly when it expands the amount of data captured about how I behave online rather than just what transactions I perform. I don’t expect anonymous banking, but I do think banks should limit data collection to the minimum necessary to satisfy legal obligations such as AML.

michaelmurfy:

I get you're privacy conscious but you may be surprised to know many sites are already collecting this sort of information without you even knowing in order to fingerprint you. At-least your bank is fingerprinting you to prevent fraud and has a legitimate reason to outside of ad tracking plus is also transparent about it.

Your bank is legitimately keeping you safe. This data isn't used for anything else.

That sounds suspiciously like a bandwagon fallacy..

Saying lots of sites already fingerprint users doesn’t make it acceptable for banks to do so.

MikeB4

MikeB4
18952 posts

Uber Geek
+1 received by user: 13158

ID Verified

Trusted

Subscriber

#3458970 5-Feb-2026 10:33

As I iterated in my previous post my concerns are about the how and not so much the intention. From a disability perspective the process of detecting the following has the potential of causing a great deal of hassle, stress and anxiety for disabled folk. I have enough of that already in my life I dont need my bank piling it on.

typing - how fast you type, your rhythm, and common errors
mouse - how you move it, click, and scroll
device use - how you hold, tilt, or move it.

A world that has gone totally insane.

Apple TV

Stream your favourite shows now on Apple TV (affiliate link).

michaelmurfy

meow
13732 posts

Uber Geek
+1 received by user: 11151

Moderator

ID Verified

Trusted

Lifetime subscriber

#3458973 5-Feb-2026 10:47

I do know full well how Biocatch is used, what data is provided to banks, and how this data is used. I can still safely say you, and others here are still overreacting and this data isn't used for anything else at all. It'll be a reputational nightmare if it were. This information has been also collected for quite some times via other means and fingerprinting techniques have always been there.

Lias: Saying lots of sites already fingerprint users doesn’t make it acceptable for banks to do so.

So you're saying banks shouldn't fingerprint users to keep them safe from fraud?

If you got compromised and your bank account was accessed and your bank wasn't doing any of this causing your account to be fully drained then whos fault is it? I'm sure you'll still have the expectation that fraud detection would put a stop to this.

And if a bank was known to not be taking preventive action on fraud then who do you think scammers would target?

@MikeB4 You're thinking too much into it and seriously have nothing to worry about.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup) | Starlink

geek3001

537 posts

Ultimate Geek
+1 received by user: 927

ID Verified

Subscriber

#3458974 5-Feb-2026 10:52

Reading between the lines, I see the banks using any and all technology they have access to, to help prove I am me when I am using Internet Banking on a web browser, or their banking app on my smart device.

This is to ensure among other things they comply with their fiduciary responsibility to protect my deposits with them.

Those of us old enough to remember when we actually had to physically visit a bank branch to complete even the simplest transactions would remember the requirement to prove our ID face-to-face in front of a teller, either by way of our signature on a paper bank slip needing to match a specimen signature on file, or by showing government-issued photo ID.

Due to dwindling foot traffic, and with increasing bricks and mortar costs, etc, banks are closing more and more branches, thus the need for ways to prove your identity when you're banking electronically as getting to a physical branch is no longer convenient in many cases and adds cost as you often need to pay a fee for remaining face-to-face service.

I'm surprised that the banks aren't using the camera on a smart device to routinely verify our identity during a transaction.

I'd like to see them using VOIP or similar to enable voice calls between them and the customer, via their app, instead of relying on landline / mobile phone calls made by them to us, which is far from secure given inbound CLI spoofing.

freitasm

BDFL - Memuneh
81342 posts

Uber Geek
+1 received by user: 42683

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3458975 5-Feb-2026 10:53

michaelmurfy:

Lias: Saying lots of sites already fingerprint users doesn’t make it acceptable for banks to do so.

So you're saying banks shouldn't fingerprint users to keep them safe from fraud?

If you got compromised and your bank account was accessed and your bank wasn't doing any of this causing your account to be fully drained then whos fault is it? I'm sure you'll still have the expectation that fraud detection would put a stop to this.

I think there should be a form with a box saying "I decline for this technology to be used on my account. I assume full responsibility for all uses of my account, including unauthorised access to this account including but not limited to use with intent of fraud as a money mule, overseas money transfer to my newfound long distance love of my life and buying gift cards for tax payments."

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

LEGAL video, movies and TV download and streaming options in New Zealand

freitasm

BDFL - Memuneh
81342 posts

Uber Geek
+1 received by user: 42683

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#3458976 5-Feb-2026 10:56

@geek3001:

I'm surprised that the banks aren't using the camera on a smart device to routinely verify our identity during a transaction.

Revolut does it. If I am using a new device it will only accept my login after it scans my face.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

LEGAL video, movies and TV download and streaming options in New Zealand

1 | 2 | 3 | 4 | 5