How to track expenses from your bank's SMS in the UAE

Can an app read my bank messages without my bank login?

Yes, and it works differently from what most people picture. Nothing connects to your bank. The app reads the alert your bank has already sent to your phone, on the phone, and turns the amount and the shop name into an expense you confirm.

There are only two routes an app can legitimately take, and they differ by platform:

• iPhone — you build a Shortcuts automation that hands the message text to the app.
• Android — you grant notification access and pick which apps the tracker may watch.

Neither route ever sees your online banking credentials, your card number or your statement. That matters, because the alternative — handing a third party your bank login — is the thing most people are right to hesitate over.

How does it work on iPhone?

You create an automation in Apple's own Shortcuts app that runs when a message arrives from your bank, and passes the text to the expense tracker. Apple does not let any app read your Messages, so you build the rule yourself and it stays under your control.

1. Open Shortcuts → Automation → New.
2. Choose Message as the trigger, and set it to run when a message contains a word your bank always uses — "purchase", "debited", or the card wording your bank sends.
3. Set it to Run Immediately, so nothing needs tapping when an alert lands.
4. Add the expense tracker's action and pass the message text into it.

How does it work on Android?

You grant the tracker notification access and choose which apps it may watch — normally just your Messages app, plus a wallet app if your card alerts arrive there. When a bank alert appears in the notification shade, the tracker parses it and drops the result in the same review inbox.

Android's route captures a little more than iPhone's, because a notification carries the sender name. That is what lets an Android tracker tell one bank from another, and mute a sender that only ever sends marketing.

What actually gets captured from an alert?

The amount, the currency, the shop or merchant name, and whether money went out or came in. A reshaped example of the shape a UAE bank alert takes:

From that, a tracker should read 137.50, AED, Blue Cup Cafe, and money out. What it cannot know is which budget category you want it in — that stays your choice, and a good tracker remembers the choice for next time.

Two honest limits. On iPhone the sender cannot be identified, because the Shortcuts trigger does not expose it — so per-bank muting is an Android-only ability. And a bank that writes its alerts in an unusual order will occasionally read the wrong number; that is a format we have not seen yet rather than a permanent failure.

Should I just connect my bank account instead?

You can, and in some countries it is genuinely smoother. It is a different trade, though, and worth seeing side by side.

Manual entry remains the third option, and it is the most accurate of the three for exactly as long as you keep doing it. The reason alert-reading exists is that most people stop within a fortnight.