I run a small business and I would like to accept credit / debit card payments on my Android phone running #GrapheneOS

I run a small business and I would like to accept credit / debit card payments on my Android phone running #GrapheneOS

Does anyone know of an app or paired terminal which will work?

SumUp asked me to turn off Developer Tools, but still said the device didn't meet the security requirements for accepting payments.
They offer a Bluetooth paired card reader - but I don't want to spend £30 if it won't work with Graphene.
Anyone have experience *receiving* tap-to-pay on their GrapheneOS device?

@Edent Yeah, I have developer tools turned on so I can switch off WiFi scan throttling. For some reason this means SumUp decides I can't use NFC for charging. But actually a bigger problem for me is their permissions model which means only the main email address can authorise charges and raise support tickets.

@sborrill so you're able to use it on GrapheneOS?

I run a small business and I would like to accept credit / debit card payments on my Android phone running #GrapheneOS

Does anyone know of an app or paired terminal which will work?

SumUp asked me to turn off Developer Tools, but still said the device didn't meet the security requirements for accepting payments.
They offer a Bluetooth paired card reader - but I don't want to spend £30 if it won't work with Graphene.
Anyone have experience *receiving* tap-to-pay on their GrapheneOS device?

I run a small business and I would like to accept credit / debit card payments on my Android phone running #GrapheneOS

Does anyone know of an app or paired terminal which will work?

SumUp asked me to turn off Developer Tools, but still said the device didn't meet the security requirements for accepting payments.
They offer a Bluetooth paired card reader - but I don't want to spend £30 if it won't work with Graphene.
Anyone have experience *receiving* tap-to-pay on their GrapheneOS device?

@Edent Sorry no, not got that far. It's bad enough with stock Android or even just as not the main email address in a web browser.

@Edent I am going to assume that the pedophile class will not allow you to receive payments though a device they can't spy on you from.

Your best move is probably one of those tablet cash register situations. That way you can keep all of their spyware on that device.

Of you could buy a used ATM, set it up in your shop and charge them a fee to get cash. It could save you on credit card fees...

I run a small business and I would like to accept credit / debit card payments on my Android phone running #GrapheneOS

Does anyone know of an app or paired terminal which will work?

SumUp asked me to turn off Developer Tools, but still said the device didn't meet the security requirements for accepting payments.
They offer a Bluetooth paired card reader - but I don't want to spend £30 if it won't work with Graphene.
Anyone have experience *receiving* tap-to-pay on their GrapheneOS device?

@Edent If it helps, SumUp sell standalone terminals (which are more expensive) but work very well. We use them unattended across the hackspace.

If you wanted to try a £30 terminal, Screwfix sell them and have a pretty generous returns policy.

@Edent A buddy who was using Square and a Pixel 6a (that he had been using to test Android apps) ran into this a few months ago. This isn't the answer you are looking for, but he ended up keeping one phone for Square at craft fairs and another for testing his Flutter apps.

@joe I'm gonna end up with a drawer full of phones, aren't I

@sborrill I'm not being funny, but I'm struggling to understand why you replied to me then?

@thedarkener What are the names of the people behind GrapheneOS and what sort of liability have they agreed to?

@Edent What?

@thedarkener how do you know that Graphene is more secure?
If you're a bank and having to deal with huge amounts of fraud, how would you verify that Graphene meets your security requirements?

Like, I'm quite happy to use it. But I'm not going to lose millions if they get compromised.

@Edent Dude, are you trolling or what?

Your profile shows that you're into F/OSS. You should already know the answers to these questions.

@thedarkener
I *do* know the answers to these questions. I've written extensively about it.

See, for example, https://shkspr.mobi/blog/2023/05/the-limits-of-general-purpose-computation/

Just because the OS is "built with security in mind" doesn't mean that it needs the regulatory needs of a bank.

@Edent

1) Security
2) Regulatory needs of a bank

These two things are not synonymous.