Mobile App at Exchange Bank: iOS and Android Banking
The Exchange Bank mobile app turns an iPhone or Android phone into a full-feature branch. Biometric sign-in with Face ID, Touch ID or the Android biometric prompt, mobile cheque deposit via the camera, card lock/unlock, push alerts, Zelle person-to-person payments, spending categorisation and WCAG 2.2 AA accessibility come standard. The app is free for all digital-banking enrolled customers.
This Exchange Bank platform profile documents supported operating systems, biometric hardware, feature parity with the web portal, and accessibility posture. Deposits remain FDIC-insured regardless of channel.
Install the App Compare With Web
Platform Profile: iOS and Android Support
Hardware and OS baseline for the Exchange Bank mobile app.
The Exchange Bank mobile app supports iOS 16 and later on iPhone 11 or newer, and Android 13 and later on devices running Play Services with a hardware-backed keystore. Older iOS and Android versions receive a reduced-feature legacy client without biometric sign-in, which is scheduled for retirement in 2027 in line with platform-vendor security policy.
The app is distributed only through Apple App Store and Google Play. Side-loading, APKMirror builds and third-party wrappers are not supported and will fail integrity checks at launch. Exchange Bank never asks a customer to enable "install from unknown sources" or "developer mode" — any such request is a phishing attempt and should be reported to 1-800-995-4066 and to the FTC consumer complaint portal.
Feature Brief: Platform Parity Matrix
| Feature | iOS | Android | Web Parity |
|---|---|---|---|
| Biometric sign-in (Face ID / Touch ID / fingerprint) | Yes | Yes | No (WebAuthn/passkey on web) |
| Mobile cheque deposit via camera | Yes | Yes | No |
| Card lock/unlock (debit card) | Yes | Yes | Yes |
| Push alerts for transactions and security events | Yes (APNs) | Yes (FCM) | Email/SMS on web |
| Zelle person-to-person payments | Yes | Yes | Yes |
| Spending categorisation and budget insights | Yes | Yes | Yes |
Experience Profile: Biometrics, Deposit and Card Controls
Biometric sign-in reads a hardware-backed assertion from the operating system. Exchange Bank never receives a face scan, fingerprint template or any biometric characteristic — only a signed yes/no from the Secure Enclave (iOS) or TrustZone/Keystore (Android). If biometric hardware fails, the app falls back to the User ID + password + MFA flow without compromising security.
Mobile cheque deposit at Exchange Bank uses on-device image quality detection. The camera framework auto-detects cheque edges, prompts retake on blur or glare, and confirms the endorsement line. Daily mobile deposit limit is $5,000 per customer. Cheques over $5,000 are accepted in-branch or via the lockbox service for commercial clients. Funds post same-business-day for deposits before 4:00pm Pacific Time; after the cutoff, next business day.
Card lock/unlock is instant and bi-directional. Tap the debit card tile, toggle Lock. Attempted authorisations decline with a POS code 05. Unlock to resume. Travel notifications pre-authorise foreign transactions for a defined window; without a notification, card-present transactions outside California require a step-up push notification confirmation.
Access Profile: Zelle, Alerts and Categorisation
Zelle at Exchange Bank sends funds to any US mobile number or email registered with Zelle. Daily send limit is $1,000 with a 30-day rolling cap of $5,000. Funds typically arrive within minutes between participating banks. Zelle payments are irrevocable once sent; customers should only send to people they know and trust, per CFPB Zelle-fraud guidance.
Push alerts cover transaction posting, debit-card authorisation, balance thresholds, new device sign-in, password change, large ACH deposit and statement availability. Customers can tune each alert type by channel (push / SMS / email) and by threshold. Silent hours can be configured to suppress non-security alerts overnight.
Spending categorisation at Exchange Bank sorts debit-card and ACH activity into 14 categories (groceries, dining, fuel, utilities, rent, etc.). Category tags are user-editable. Monthly summaries support budget-variance review and appear as push notifications on the first of each month.
Compliance Snapshot: Accessibility and Privacy
The Exchange Bank mobile app targets WCAG 2.2 Level AA accessibility. VoiceOver on iOS and TalkBack on Android are fully supported. Dynamic Type and Android font-scale settings propagate throughout the UI. Minimum contrast ratios meet 4.5:1 for body text and 3:1 for large text. Haptic feedback accompanies confirmations, errors and sign-in.
The app requests only the permissions it uses: camera (for cheque deposit), push notifications (for alerts), biometric (for sign-in), location (coarse, optional, for branch finder). Microphone, contacts and always-on location are not requested. All network traffic is TLS 1.3 certificate-pinned; a compromised or unusual certificate chain terminates the session immediately.