Investing on Mintos via the Mobile App: What to Know in 2026

Account Access and Login

The Mintos mobile app uses the same credentials as the web platform. After downloading the app from the App Store or Google Play, enter your registered email and password. If you have enabled two-factor authentication - a mandatory step for securing any investment account - the app will prompt for the six-digit code from your authenticator app or SMS each time you log in from a new device.

MiFID II requires regulated platforms to verify user identity before any funds are deposited or withdrawn. Mintos applies this requirement to both desktop and mobile sessions. If your account is already verified, mobile login grants immediate access to your portfolio, transaction history and investment options. If verification is incomplete or has expired, the app will block fund movements until you complete the required checks.

Device sessions remain active until you manually log out or the platform expires the token after a period of inactivity - typically a few weeks. Review logged-in devices regularly within your account settings and remove any session you do not recognise. A compromised session on a lost or stolen phone poses a direct risk to your capital.

KYC Re-Verification on Mobile

Know Your Customer checks are a regulatory obligation under EU anti-money laundering directives. MiFID II firms like Mintos must re-verify identity documents periodically or when account activity flags a manual review. Many platforms now support mobile KYC through in-app document upload and biometric identity checks, matching a live selfie against the photo on a passport or national ID card.

If the Mintos app prompts you to re-verify, follow the on-screen instructions. Ensure your documents are current - an expired passport or ID card will be rejected. Take clear, well-lit photos with all text readable and no glare. Poor image quality delays verification and may trigger a manual review, adding days to the process. Some users find desktop KYC smoother when dealing with large files or slow mobile connections, but the mobile flow is designed to be self-contained.

Verification status affects withdrawals. If your KYC lapses while you hold active investments, the platform will prevent any outbound transfer until the process is complete. This is a regulatory requirement, not a platform policy choice. Plan ahead: start verification at least a week before you intend to withdraw funds, especially if you are investing from a non-EU country or using a document type the automated system flags for manual review.

Viewing Originator Ratings on a Smaller Screen

Mintos publishes originator-level risk data - internal ratings, historical default rates, buyback performance - in the loan listings and originator profile pages. On desktop, this data appears in multi-column tables. On mobile, screen size forces a condensed layout. Swipe horizontally to reveal additional columns, or tap an originator name to expand its full profile in a separate view.

The Mintos originator rating system assigns letter grades based on quantitative factors: payment history, loan book composition, audited financials. These ratings are visible in the app alongside each investment opportunity. Check the rating before committing funds. A lower-rated originator may offer higher returns but carries a correspondingly higher default risk. Mintos does not apply a universal buyback guarantee - the presence or absence of buyback is an originator-specific term, disclosed in the loan details.

If the mobile view truncates a table, use the "full details" or "view more" link to load the complete dataset. Missing one column - such as the buyback status or the originator's country of operation - can lead to an uninformed investment decision. Cross-check originator data on desktop if you find the mobile interface unclear or if you are evaluating a large commitment.

Security Practices for Mobile Investing

Two-factor authentication is non-negotiable. Enable it in your Mintos account settings if you have not already done so. An authenticator app - Google Authenticator, Authy, or similar - is more secure than SMS, which can be intercepted via SIM-swap attacks. Once 2FA is active, every login from a new device or after a session timeout requires the six-digit code. This layer stops an attacker who has stolen your password but does not have physical access to your phone.

Use a strong password unique to your Mintos account. Avoid reusing passwords across multiple platforms. A password manager simplifies this practice and reduces the risk of credential stuffing attacks, where a breach on one site exposes your login on another. Change your password immediately if you suspect unauthorised access or if Mintos notifies you of a security incident.

Keep your device operating system and the Mintos app updated. Security patches close vulnerabilities that malware or remote exploits can target. Outdated software is a common vector for account compromise. Set automatic updates where possible, or check manually each week.

Avoid public Wi-Fi for account access. Open networks at cafes, airports or hotels can be monitored by attackers running packet sniffers or rogue hotspots. If you must use public Wi-Fi, route traffic through a reputable VPN to encrypt the connection between your device and the internet. Even with a VPN, prefer mobile data for sensitive actions like large deposits or withdrawal requests.

Enable a device lock - PIN, fingerprint or face recognition. A lost or stolen phone without a lock grants an attacker direct access to any app you have left logged in. Most modern phones offer biometric authentication that balances security and convenience. Configure lock-out after multiple failed attempts, and enable remote wipe through your device's cloud service in case of theft.

Device Management and Session Control

Your Mintos account dashboard lists every active device session: the device type, operating system, IP address and login timestamp. Review this list monthly. If you see a session you do not recognise - a device you have never used or a location where you have never been - terminate it immediately and change your password. An unexplained session is evidence of unauthorised access.

When you sell or discard an old phone, log out of the Mintos app before the device leaves your possession. Factory reset the phone to erase all stored credentials. Even after a reset, prudent practice is to remove the device session from your account dashboard as a secondary safeguard.

MiFID II platforms are required to monitor for suspicious activity and may disable your account if they detect a pattern consistent with fraud or money laundering. Multiple logins from different countries within a short timeframe, rapid deposits followed by immediate withdrawals, or IP addresses linked to known fraud networks can all trigger a freeze. If this happens, contact Mintos support with identification documents to prove account ownership. Resolution can take several days, during which you cannot access your funds.

Auto-Invest and Portfolio Monitoring

The Mintos app supports auto-invest configuration - the same feature available on desktop. Define your investment criteria: loan type, originator rating range, target return, diversification across multiple originators. The platform then allocates incoming funds automatically according to those rules. Auto-invest is convenient for mobile users who do not want to review each loan manually, but it does not eliminate the need to monitor performance.

Check your portfolio at least weekly. The app displays current balance, accrued interest, loans in arrears and originator performance. A sudden spike in late payments or a downgrade in an originator's rating is a signal to reduce exposure or pause auto-invest. The auto-invest guide covers strategy in more detail, but the core principle applies equally on mobile: automated allocation does not mean passive neglect.

The secondary market feature, if available in the app, allows you to sell loans before maturity. List a loan for sale at face value or with a discount to encourage faster liquidity. Mobile screen size may limit the number of listings you can review at once, so filter by originator or return range to narrow the list. Selling below face value incurs a loss, but it may be necessary if you need to exit a position quickly or if an originator's credit quality deteriorates.

Deposits and Withdrawals on Mobile

The Mintos app supports bank transfer deposits and withdrawals. Navigate to the "deposit" or "withdraw" section, select your payment method and enter the amount. Minimum deposit is EUR 50; minimum withdrawal is typically EUR 10, though the platform may adjust these thresholds. Bank transfers from a verified account in your name are the standard method. Some platforms also support card deposits, but verify any associated fees before proceeding.

Deposit times vary by bank and country. SEPA transfers within the eurozone usually clear in one to two business days. Transfers from non-SEPA countries can take three to five days. Withdrawals follow a similar timeline. If you have enabled 2FA, the platform will require a code before processing a withdrawal - an additional security layer to prevent unauthorised transfers.

If a withdrawal request is rejected, check your KYC status. An expired document or a manual review flag will block all outbound payments until resolved. Contact support if the rejection message does not clarify the reason. Do not attempt to circumvent the block by creating a second account - MiFID II rules prohibit multiple accounts for the same individual, and attempting to do so will result in a permanent ban from the platform.

When to Use Desktop Instead

Mobile access is sufficient for routine tasks: checking balances, reviewing returns, making small adjustments to auto-invest settings. For more complex decisions - comparing a dozen originators, evaluating a large manual investment, or interpreting detailed payment schedules - desktop offers a clearer view. Multi-column tables, side-by-side originator profiles and the ability to open multiple browser tabs for cross-referencing data all favour the larger screen.

KYC uploads that require high-resolution scans or large files are often smoother on desktop. If your mobile camera produces low-quality images or if your internet connection is slow, switch to desktop to avoid repeated upload failures. The same applies to downloading annual statements or transaction CSVs - desktop file management is more reliable for bulk exports.

Security audits - reviewing device sessions, updating passwords, checking transaction history for anomalies - are easier on desktop. The full account settings panel displays more information at once, reducing the need to scroll or navigate through multiple sub-menus. Treat mobile as the convenience layer and desktop as the control centre.