Discovery only · iPhone

Bank link
lab.

Tap a link only after a user gesture. Do not confirm/send payment. “Opened app” is not field-prefill success.

Sber

Observed Flexipay schemes. On one tested device, three marked schemes opened foreign transfer; rich fields stayed empty. Other schemes remain candidates.

Minimal foreign-bank route — no fields expected

Rich foreign-bank route — research probe

HTTPS/browser fallbacks

Alfa

Current phone route verified on Android. On one tested kittycash app, legacy route opened international transfer while current route opened app only.

International transfer by phone

Legacy international screen — no fields expected

HTTPS/browser fallbacks

What is under every button?