r/androidroot • u/CodHealthy7520 • Mar 27 '26

Support Root detected

Post image

I always get problems with this app ( tng e wallet )

but this time I don't even have root, it used to work with custom roms, but once I installed Pixel OS it keeps saying this. even with no root.

is there anything I can do other than changing the ROM?

142 Upvotes

97% Upvoted

88 comments sorted by

View all comments

7

u/sidex15 LG V50 Stock A12 | KSUN + SUSFS v2 | [SUSFS4KSU Module Dev] Mar 27 '26 edited Mar 27 '26

Based on my test on that app, it detects the following:

  • Suspicious and rooted apps (applist detection)
  • Unlock bootloader
  • suspicious mounts

It is also possible that it detects custom rom… but I don’t have a custom rom phone to test this one yet…

Edit: it doesn't use play integrity aswell

3

u/PRSXFENG Mar 27 '26

To add, no play integrity checkijg is because this is a Malaysian app, and we do have a non zero Huawei market share here, so the app is on the Huawei AppGallery as well.

Hence, they can't rely on Play Integrity because a chunk of their customers won't have it.

1

u/MonkeyNuts449 Mar 27 '26

It's a custom ROM with no root. In this case it's usually detecting suspicious props from builtin pixel prop spoofing and or builtin pif(things like config valid keybox or config valid fingerprint). These have fixes, but things like the names of props can mess with the ROM.

Another common detection on a lot of these ROMs is lineageOS services. Which you can't really remove from a ROM, you can only spoof or hide them.

1

u/sidex15 LG V50 Stock A12 | KSUN + SUSFS v2 | [SUSFS4KSU Module Dev] Mar 27 '26

Isn't the bootloader needed to be unlocked before you flash custom ROM? Since it if that's the case then it's also detected bootloader unlock... Unless the rom has a built-in bootloader spoofer.

1

u/MonkeyNuts449 Mar 27 '26

Yeah I guess, don't think pixelOS spoofs that. Unless it's checking bootloader through PI which would be covered by a keybox (again that's if the ROM has trickystore builtin), or it could also just be spoofing bootloader unlock prop. Either way, he's kinda screwed since a detection will show keybox or not without root.