Android UPI Authentication Security Research

**Title: Android Reverse Engineering & UPI Authentication Security Research Expert**

I am looking for an experienced Android security researcher with expertise in:

- Android Root Detection and Security Analysis
- APK Reverse Engineering
- Frida and JADX
- Android Device Binding Mechanisms
- OTP Authentication Flow Analysis
- Android SMS and Telephony Framework
- UPI App Authentication Architecture

**Project Objective:**

I want to understand how certain rooted Android devices can log in to Google Pay or Paytm without a physical SIM card installed, by entering a mobile number and manually submitting an OTP.

I need a detailed technical investigation explaining:

1. How the OTP authentication process works.
2. How SIM verification and device binding work.
3. Whether the observed login is an existing session or fresh authentication.
4. What role Android root access plays in the observed behaviour.
5. Whether OTP login and UPI activation are separate processes.
6. A technical report explaining the findings with evidence from authorized test devices.

**Required Skills:** Android Reverse Engineering, Mobile Application Security, JADX, Frida, ADB and Android Internals.

**Important:** Research must use authorized test accounts and devices. No unauthorized account access, OTP interception, or bypassing payment security.

Please share your previous Android security research experience and estimated project cost.