Security for "Deep Links"

As far as I know, deep links do not provide the security context of the calling Web page. This probably means that phishing attacks are possible. Due to that the Google wallet uses another interface which also have the advantage that it can return a value to the Web page as well. Although this interface is intended for payment wallets, it can actually be used for any local application.

https://cyberphone.github.io/doc/web/calling-apps-from-the-web.pdf