
In order to ensure a safe, secure and predictable environment, these applications should be tamper-proof, well identified (signed), well tested and understood. These applications are always certified by an independent body and many external controls are built into the system to ensure integrity and balance.
It is most likely that mobile phones will be used to perform many of these payment functions (retail payments, cash disbursement etc.). As a matter of fact, mobile phones would be doing the bulk of these transactions as well as payment transactions that were never possible before. Utilising applications on mobile phones that break down the principles needed for security, predictability and transparency is dangerous and irresponsible to say the least.
The Android operating system is probably the most open operating system for mobile phones today with extremely rich features. With Android it is now possible for anyone to build applications and trick others to load it on their phone. These applications (quite unique to Android) can easily be loaded on the phone in a (relatively) uncontrolled way, can run in the background (unique to Android), can interact with applications residing on other devices (remote from the actual phone) and can launch other applications (unique to Android) with no information to the consumer.
I am not the best hacker that I know, but I can tell you this: Android is the perfect platform to build the perfect application with ill intent, and those applications will be built.
The big pity is that a few unfortunate incidents created in this way, will lead to immeasurable damage to the trust in mobile money solutions in the eye of the man in the street.