APK downloads are the option for operators that have not published a Play Store app. The APK distribution page walks through the integrity check; the SHA-256 hash is the deciding factor. A mismatched hash is a sign that the APK has been tampered with; do not install it.
The download link
The APK download page on the operator's site is the legitimate source. Download the APK from that page only. Do not download APKs from third-party sites or from links sent via SMS or WhatsApp — those are common phishing vectors.
The download is a single .apk file, typically 50–100 MB. The download time depends on your network speed; the desk recommends a Wi-Fi connection for the first download.
SHA-256 integrity check
The operator publishes a SHA-256 hash on the APK download page. After downloading the APK, compute its SHA-256 hash using a hash tool (Android has built-in hash tools in the file manager, or you can use a third-party tool). Compare your hash to the operator's published hash. If they match, the APK is authentic; if they do not, do not install it.
The hash is a 64-character hexadecimal string. A single character difference means the APK has been modified — most likely by a malicious actor injecting malware or by a corrupted download. Re-download and re-check; if the mismatch persists, contact the operator.
Install from unknown sources
Android blocks APK installs from unknown sources by default. To install the verified APK, enable the install-from-unknown-sources setting for the file manager or browser you used to download the APK. The setting is in Settings → Apps → Special access → Install unknown apps.
After the install completes, disable the install-from-unknown-sources setting. The setting should be on only for the duration of the install; leaving it on permanently is a security risk.
First launch
The first launch walks through the same onboarding as the Play Store version: language selection, notification permissions, camera permissions, and (optionally) a quick tutorial. The KYC flow is identical — documents uploaded on the APK version are reused across desktop and mobile.
The APK version does not auto-update through the Play Store. The operator publishes APK updates on the same download page; the desk recommends enabling in-app update notifications so you are notified when a new version is available.
Integrity check questions, answered
How do I verify the APK integrity?
Compute the SHA-256 hash of the downloaded APK and compare it to the operator's published hash on the APK download page.
Is it safe to install from unknown sources?
Yes, after verifying the SHA-256 hash. Disable the install-from-unknown-sources setting after the install completes.
How do I update the APK?
The operator publishes APK updates on the same download page; the in-app update notification alerts you to new versions.