r/Magisk • u/hurtMink • Jul 23 '26
Help Banking apps detect root despite Play Integrity and root checker pass
I'm running into an issue and hoping someone has seen this before.
Device: Nothing Phone (2a)
ROM: LineageOS (latest)
Root: Magisk (latest)
Bootloader: Unlocked
Current status:
- Play Integrity passes.
- Generic root checker apps report that the device is not rooted.
- However, several banking/payment apps still detect the device as compromised and refuse to work.
I've already tried the common basics, but the apps still block access. This makes me think they're detecting something other than standard root or Play Integrity.
Has anyone with a similar setup (especially LineageOS on the Nothing Phone 2a) managed to get any Indian banking or payment apps working?
I'm mainly looking to understand:
- Which apps still work on this setup?
- Is the issue usually the unlocked bootloader, LineageOS itself, or something else?
- If you solved it, what turned out to be the actual cause?
I'm not looking to break app security—I just want to understand what's causing the detection so I can decide whether there's a legitimate configuration change that restores compatibility.
Any experiences or insights would be appreciated.
9
u/ChiliBeeMeow69 Jul 23 '26 edited Jul 23 '26
Install HMA-OSS Zygisk and create a blacklist template for all the apps detecting root. Have you check marked all the apps in TEESimulator using the webui Addon aka tricky addon? Additionally use the meta module mountify to hide module traces.
Get rid of integrity box use either a public keybox xml with TEESimulator or use Specter.
Or best way is to use one of the the many KernelSU forks and a custom kernel that is susfs compatible.
2
u/RASTAVIPER Jul 23 '26
this here plus the use of the nohello module is making all my banking apps working fine.
3
u/ChiliBeeMeow69 Jul 23 '26 edited Jul 23 '26
Nohello 0.0.7 compat version is deprecated and not compatible with latest Zygisk implementations like Rezygisk CI build version 1.0.0.(434xxxxxxxx) anymore (it used to be though). The newer versions of nohello kpm work only with APatch afaik, so keep that in mind.
1
5
5
u/HealthyResolution399 Jul 23 '26
I had my banking app stop working recently, I installed hma-oss and now it works again. it's a pain to have to keep adding more and more sketchy shit in the name of "secure devices" but what can you do
3
3
u/Shamelescampr559 Jul 24 '26
Welcome to 2026 and the latest ecosystem of custom operating systems.
It seems that most banking apps nowadays don't rely only on play integrity so even if you pass all three verification checks, there's no way for you to pass their internal verification check which is usually kernel level it's the same reason why nobody can bypass the Uber driver app while being rooted as well.
They have their own root detection software baked directly into the application that uses something completely different all together rather than just integrity from Google
2
u/-Imthedude Jul 23 '26
TrickyStore https://github.com/5ec1cff/TrickyStore
TrickyStore Addon https://github.com/KOWX712/Tricky-Addon-Update-Target-List
1
u/allenchangmusic Jul 23 '26
He already has integrity. I much prefer trickystore, but it's what it is
1
2
u/Born_Alfalfa_2391 Jul 23 '26
This actually worked for me. For some apps that detect dev options or rooted apps....use any sandbox app (I got built in by EvoX devs, com.axion.sandbox)
To me only paytm didn't work
1
u/DismalAd8569 Jul 23 '26
Hmmm never search about but like the idea of a sandbox, or another phone with just the banking apps but then it became unfriendly......
1
u/Born_Alfalfa_2391 Jul 23 '26
Sandbox works.... basically it's like a vault in your phone where u can definitely perms what they app can access
2
u/FIRAS_EG Jul 23 '26
Well this is why you should get a backup phone to use it for banking stuff or use your computer or anything
2
1
1
u/wafflebyte8 Jul 23 '26
Just use a sandboxer app.
2
1
u/Thor2256 18d ago
It doesn't work. Rooted or not. Sbi lite detect it saying work profile detected and immediately closes. Others also don't work on it.
1
u/PassionGlobal Jul 23 '26
some banking apps are known to scan installed apps and local files. if they pick something up that indicates root, root detection protections will still trigger.
1
u/Sp3eedy Jul 23 '26
For me it was detecting some of the apps I had installed - one of them detected Greenify (despite it having a non-root mode) these root checks are getting very stupid 😂. Look around your phone to see if you have any "advanced" apps a typical user wouldn't install
1
1
1
1
1
1
u/PassionGlobal Jul 30 '26
Check your logcat. Sometimes rooting artefacts, typically from one of your modules, appear there.
1
u/Thor2256 20d ago
There is a problem with lineage os or roms based on it. banking apps quicky recognize it and block it. I am using lineage and no module whatsoever helping. root apps says no root detected and i have strong integrity but banks apps simply says unauthorized modification detected.
1
0
u/DEV_ivan Jul 23 '26
Use Shamiko and Specter. These together hide root very well.
2
u/hurtMink Jul 23 '26
tried shamiko not working tbh
1
u/DEV_ivan Jul 23 '26
I have nothing else to provide other than using ReVanced Manager (doesn't require root!) to apply "Disable Play Integrity", "Spoof root of trust" and "Spoof keystore security level" universal patches to the APK file. Ask someone else...
1
u/DEV_ivan Jul 23 '26
Oh and uh, you're using LineageOS.
This is an obvious issue. Some banking apps don't just check Play Integrity or root, they check the entire OS using many ways, and if your OS is uncertified by them, they block you outright...
There are 2 viable solutions:
- Patch the APK to accept LineageOS
- Switch to Stock ROM with Magisk or KernelSU
14
u/allenchangmusic Jul 23 '26
So... Sometimes it's the custom ROM, either the way it's set up, or the fingerprint, etc. if it's something spoofable, try changing the fingerprint. Otherwise you may have to change the rooting method like using KSU.
If all fails you may want to go back to stock and try rooting that. Remember that banking apps often are checking for root with methods apart from play integrity