Project Update: Fintech Mobile App Part 1 of 2 Continued development on the mobile version of the...Project Update: Fintech Mobile App Part 1 of 2 Continued development on the mobile version of the...
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started
Project Update: Fintech Mobile App Part 1 of 2
Continued development on the mobile version of the fintech platform. This update covers:
Onboarding flow: 3 chapters intro sequence
Authentication: Sign up, sign in, and OTP verification
Home dashboard: Balance, quick actions and transaction history
Pay hub: Airtime, data, electricity, cable TV, betting, and bank transfers
Buy Airtime: Full transaction flow from start to finish
Part 2 Save, Crypto and Profile
Currently open to new freelance projects. If you're building something similar or need help bringing your idea to reality, feel free to reach out.
Post image
Post image
Post image
Post image
Saad's avatar
The OTP step is where these apps quietly leak or annoy. On Android the SMS Retriever API fills the code without READ_SMS, and a resend timer with backoff stops users hammering it. Worth checking sign-in errors too, a distinct "no account" message hands an attacker a list of valid numbers.
Ugo's avatar
Absolutely, that’s a good point. Especially around OTP rate limiting, resend backoff, and making sure our sign-in errors don’t expose whether an account exists. I’ll definitely review those areas.
Saad's avatar
The sign-in error one is the easy miss, it usually gets written as a helpful message and never flagged in review. Same trap on the forgot-password screen if it confirms whether the email exists.
Ugo's avatar
Good point. That’s definitely something worth checking on the forgot-password flow too. Appreciate the heads-up.
Saad's avatar
The clean version is one response for both cases on forgot-password, if an account matches we send the link, and the screen says that either way with the same timing. Kills the enumeration check without making real users guess.
Ugo's avatar
You're right; thanks so much for the knowledge shared.
Back to feed
The network for creativity
Join 1.25M professional creatives like you
Connect with clients, get discovered, and run your business 100% commission-free
Creatives on Contra have earned over $150M and we are just getting started