[Discussion] Google Pay Magisk Discussion Thread

Search This thread

Fishawy

Senior Member
Mar 26, 2010
3,364
666
Melbourne
OnePlus 9 Pro
Google Pixel 7 Pro
Where do I get the mod 3.0 version from?
And should I be using 2.3.1 mod 3 from Displax or 2.4.0 from kdrag0n? It stopped working for me recently.
 
  • Like
Reactions: Fishawy

qetuol

Senior Member
Oct 16, 2010
132
11
Just a quick update for you guys. The "Enforce Denylist" option must be turned OFF, otherwise gpay won't work. I tried and tested this. Don't worry if you don't pass device integrity, as long as you have a checkmark for "your phone meets security requirements" you are good to go (see image).
Screenshot_2023-03-03-15-31-52-292_com.google.android.gms.jpg
 
  • Like
Reactions: wtosta

rodken

Senior Member
Jan 11, 2010
1,651
728
Just a quick update for you guys. The "Enforce Denylist" option must be turned OFF, otherwise gpay won't work. I tried and tested this. Don't worry if you don't pass device integrity, as long as you have a checkmark for "your phone meets security requirements" you are good to go (see image).
I beg to differ.
-- Most if not all OnePlus devices can have Enforce Denylist enabled and still have GPay functional.
 

Virnik0

Senior Member
Sep 14, 2010
1,973
443
Prague
blog.nutcracker.cz
This is so weird. I have Galaxy S22 and Galaxy S20+, both with latest stock firmware + Magisk 25.2, I have all google apps in DenyList. Also, the ROM is heavily modified: I disable almost all Samsung Apps (except for system-critical). SafetyNetFix of latest Git-downloaded version installed, TWRP also of latest available (corsicanu's build). Everything works, but Google Wallet sometimes throws a pop-up warning about root. I usually kill the app, wipe it's cache, start it again and I can again pay without problem. Also, no matter what, contact-less payment have all checks green, despite prior toast warning. Reboot also fixes the issue (making payments possible again, in cases where cache wipe or app-kill won't work).
 

Fishawy

Senior Member
Mar 26, 2010
3,364
666
Melbourne
OnePlus 9 Pro
Google Pixel 7 Pro
This is so weird. I have Galaxy S22 and Galaxy S20+, both with latest stock firmware + Magisk 25.2, I have all google apps in DenyList. Also, the ROM is heavily modified: I disable almost all Samsung Apps (except for system-critical). SafetyNetFix of latest Git-downloaded version installed, TWRP also of latest available (corsicanu's build). Everything works, but Google Wallet sometimes throws a pop-up warning about root. I usually kill the app, wipe it's cache, start it again and I can again pay without problem. Also, no matter what, contact-less payment have all checks green, despite prior toast warning. Reboot also fixes the issue (making payments possible again, in cases where cache wipe or app-kill won't work).
If you're using the original Universal SafetyNet Fix by kdrag0n, you might wanna switch to the Displax fork linked a couple of posts above and test.

Hope this helps.
 
  • Like
Reactions: Virnik0 and pndwal

DineshValor

Senior Member
Jan 29, 2022
52
17
I'm using rooted android 10 with Safetynet Pass & Play Store -Certified, but I'm still not able to activate tap to pay on Paytm app.


It's gives me a error - "This functionality is not available due to security concerns with your device."

How can I fix it?
Requirements:-
- Magisk v25.2
- LSPosed v1.8.6
- PrivacySpace v1.3.7 (LSPosed module app)
- Enable Zygisk (Enforce DenyList - Disabled) under Magisk (+ download some Magisk module as shown in screenshot¹)
Screenshot_2023-03-18-17-10-02-79_9d1fb82a3633e78ac9c37e5a64e38237.jpg

Follow below steps to fix "This functionality is not available due to security concerns with your device" in Paytm (Tap to Tay):-
1. Download frest original Paytm app or clear data & force stop.
2. Open PrivacySpace app/module under LSPosed.
3. Hidden Apps > select Paytm (+ all other modules such as Lucky Patcher, etc as show in screenshot²).
Screenshot_2023-03-18-17-20-27-10_30686f06bc9783668a8afa418b45660d.jpg
4. Blacklist > select Paytm.
Note: If u want to recieve Paytm app update in Play Store then select Play Store in "Connected with Others" to unhide Paytm app for Play Store.
Screenshot_2023-03-18-17-27-19-47_30686f06bc9783668a8afa418b45660d.jpg
5. All Set, Try your Luck Now, and do not forget to let me know if it's work for you too.
 
Last edited:

varunpilankar

Senior Member
Jul 8, 2012
258
67
Sony Xperia SP
Moto X
Requirements:-
- Magisk v25.2
- LSPosed v1.8.6
- PrivacySpace v1.3.7 (LSPosed module app)
- Enable Zygisk (Enforce DenyList - Disabled) under Magisk (+ download some Magisk module as shown in screenshot¹)
View attachment 5865833

Follow below steps to fix "This functionality is not available due to security concerns with your device" in Paytm (Tap to Tay):-
1. Download frest original Paytm app or clear data & force stop.
2. Open PrivacySpace app/module under LSPosed.
3. Hidden Apps > select Paytm (+ all other modules such as Lucky Patcher, etc as show in screenshot²).
View attachment 5865841
4. Blacklist > select Paytm.
Note: If u want to get Paytm app update in Play Store then select Play Store in "Connected with Others" to unhide Paytm app from Play Store.
View attachment 5865845
5. All Set, Try your Luck Now, and do not forget to let me know if it's work for you too.


I was still using hide my Applist xposed module.. How is PrivacySpace different from it?
 

DineshValor

Senior Member
Jan 29, 2022
52
17
I'm guessing it's the same..right?

So far able to get the Paytm app to work but when ever I trying to register the card for tap to pay, it fails.

It was not the case in the past.. Happening from recent app update onwards.
I'm the victim with same issue few weeks ago and try to found solution on google but didn't found rather than your post in Magisk thread,
and later one day try to solve the issue by own and actually worked for me, & successfully rid out of Paytm "Tap to Pay" issue "This functionality... on your device!" warning message.
 

varunpilankar

Senior Member
Jul 8, 2012
258
67
Sony Xperia SP
Moto X
I'm the victim with same issue few weeks ago and try to found solution on google but didn't found rather than your post in Magisk thread,
and later one day try to solve the issue by own and actually worked for me, & successfully rid out of Paytm "Tap to Pay" issue "This functionality... on your device!" warning message.

Let me try it again using HMA in this week.. Will get back to you.
 

DineshValor

Senior Member
Jan 29, 2022
52
17
@DineshValor doesn't work with HMA, my card is still showing pending to be added.

Any good brief guide to replace HMA with PrivacySpace?

If u wise to keep using HMA, there is no need to move on PrivacySpace, u can try it on another hand, if it's sork with your paytm issue then thinks once again to migrate from HMA to PrivacySpace. Everyone have there own right to choice/decision. 😇

Additionally, u can use Google Pay, I'm personally using GPay just for NFC payment and it's feel better than Paytm "Tap to Pay" + support more bank debit/credit card.
 

pndwal

Senior Member
I don't prefer G Pay for anything.. Will like to stick with Paytm and try to work on fixing tap to pay
I see you said you pass SafetyNet... But of course that's deprecated; most banks have migrated to new Play Integrity API now... Are you passing PI deviceIntegrity?...If not official Universal SafetyNet Fix will likely not help as it currently has issues... You'll need @Displax's up-to-date fork with fixes...

Also, did you install Shamiko for proper root hiding as suggested more than once above?

🤠 PW
 
  • Like
Reactions: DineshValor

m0han

Senior Member
Apr 30, 2012
5,575
2,693
Does anyone happen to know why GPay 'Check bank balance' is not working? When I tap on the account on the 'Select account' screen, a line flashes above and disappears. Nothing else happens. Hope this is not OT here.
 

Attachments

  • SS_20230325_114521.jpg
    SS_20230325_114521.jpg
    79.6 KB · Views: 37

DineshValor

Senior Member
Jan 29, 2022
52
17
Does anyone happen to know why GPay 'Check bank balance' is not working? When I tap on the account on the 'Select account' screen, a line flashes above and disappears. Nothing else happens. Hope this is not OT here.
I'm using same version GPay and didn't face such issue, probably it's your device app bug or something in your device. There no traces related magisk. Kindly confirm your side.
 
  • Like
Reactions: m0han

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    You have updated USNF from this thread or the newer/better/modded version from another thread (please don't ask which thread - every second post is about, just scroll back, where, why, etc)

    I didn't know there were two different variants. I got it from kdrag0n's github. is there a new better one?
    (I'll take a look in the meantime)

    edit: it worked, omg thank you so much.

    here's the thread with the other, working version of USNF, for convenience for anyone bumping into this post:

    1
    USNF v2.4.0

    I see a weird thing with GSF though, it keeps getting unticked . Any time I open the denylist, it's unticked, even though last time I definitely made sure both gapps and gservices sub-items were ticked
    Not weird. Mentioned here and elsewhere that USNF removes GFS from DenyList (it takes care by itself, and it has been that since the beginnings of USNF). You can find how it removes from the USNF scripts

    Btw, make sure to use the newer and modded safetynet-fix-v2.4.0-MOD_1.2.zip
    1
    Installing the modified USNF appears to have fixed it, Wallet is back in action, thanks!
    Not weird. Mentioned here and elsewhere that USNF removes GFS from DenyList (it takes care by itself, and it has been that since the beginnings of USNF). You can find how it removes from the USNF scripts

    Btw, make sure to use the newer and modded safetynet-fix-v2.4.0-MOD_1.2.zip
    1
    This sucks, tomorrow (in a few hours actually) I'll go on a trip and since two days ago google pay (or google wallet) started telling me that my phone doesn't meet security requirements... I'd really like being able to pay with the phone again...
    google wallet, google play services, google play and (for what it's worth) google services framework are all in the denylist. my bank's app too.
    I've updated magisk to the latest (stable) version, updated the universal safety-net fix to the latest ver and installed both shamiko and MagiskHide Props Config. I did disable "enforce denylist" after installing shamiko.
    I've cleared all data from google play, google play services and google wallet and then rebooted.

    nothing worked.

    what else can I try?
    Have you updated USNF from this thread or the newer/better/modded version from another thread (please don't ask which thread - every second post is about, just scroll back, where, why, etc)
    1
    Yep, the patched Universal SafetyNet fix solved the issue.
  • 63
    The new Google Play services update caused this.

    Temporary workaround:

    1. Disable Google Pay/Find My Device as Device Administrators in Settings > Security & location > Device Administrators.

    2. Search "Google Play services" in the Settings search bar.

    3. Press the three dots and press "Uninstall previous updates".

    4. Download this update - https://www.apkmirror.com/apk/google-inc/google-play-services/google-play-services-14-7-99-release/
    Pick your needed edition (arm or arm64, etc.), download it and install it.

    5. Disable Background data access for Google Play Services and Google Play in their respective App Info pages.

    6. Download Google Pay from the Play Store.

    7. Set up your cards. Enjoy!

    Never EVER update Google Play services manually, until a Magisk update is available that bypasses the upgraded SafetyNet. Note that Google Play services is responsible for adding/verifying the card, not the Google Pay app! Hence why there seems to be an overlay when adding a card/verifying an existing one.

    Tested Google Pay versions:

    2.79.x-2.83.235070858 - working

    Tested Google Play services versions:

    14.7.99, 16.0.86 - working with Magisk 18.1

    14.8.49-16.x- working with Magisk 18.2 Canary
    33
    This thread is inspired by the PoGo Magisk discussion thread. It's meant to keep the clutter of "Google Pay doesn't work" posts out of the main Magisk threads.

    Please use this to discuss issues with Google Pay and possible solutions.


    There's a working solution here:
    https://forum.xda-developers.com/t/magisk-module-universal-safetynet-fix-2-3-1.4217823/post-87198517


    For general tips on first getting SafetyNet to pass fully, check here:
    https://www.didgeridoohan.com/magisk/MagiskHide#hn_SafetyNet
    29
    Ok. I tried this and it worked on gms 17.1.22, allowing one to add cards and pay in store. Warning YMMV, but this is the process I did to get this working. One caveat is that Google pay does not register the "recent transactions" on the Google pay app. Another caveat is that I suspect users will have to reverse some step if gms is updated and then reapply, but this still needs to be confirmed

    Without further ado, here is my process:

    1) download a SQL database editor. I used

    https://play.google.com/store/apps/details?id=com.tomminosoftware.sqliteeditor&hl=en_US

    2) download a terminal emulator program. I used terminus but any terminal emulator should work.

    3) make sure Google pay is forced close, if it is open.

    4) open SQL editor. Navigate to /data/data/com.google.android.gms/databases

    5) open dg.db

    6) change any value that lists "attest" in the name (first column) to 0 in the third column. Mine was showing a value of 10 in the third column for each of these values. (Column c for sqlite databse editor I used)

    7) open the terminal emulator.

    8) get root access (su)

    9) cd /data/data/com.google.android.gms/databases

    10) type: chmod 440 dg.db
    This makes dg.db read only (for owner and group, and no access for world.)

    11) reboot

    I suspect when gms is updated, one will have to go back to steps 10 and 11 and chmod 660 dg.db to allow new keys to be written to the database, and then go back and redo all these steps to reset the attestation values back to 0.

    If there is still an error, verify in sqlite database editor that all attest release keys values in dg.db are 0 when dg.db is read only (owner and group).

    Again, YMMV but this worked for me, so I give it back to the community now.

    Edit: recent activities did show up soon afterwards for the payment method.

    Cheers,
    B.D.
    28
    The app is finally public! (thanks Google for taking a week to approve this 🤦)
    I made it beta testing since I haven't tested it on much devices. If you find any problem, please open an issue here and I'll take a look at them once I return from vacation.


    Source code:

    If you are curious, the possible outcomes I've seen are:
    • 3 ticks (unrooted samsung)
    • tick/tick/x (unrooted redmi note 4 with unlocked bootloader)
    • x/tick/x (my rooted a11 op7t)
    23
    UPDATE 1/8/2022
    This app is officially discontinued in favor of a new app I published on Play Store. Read more here:

    ====================
    ORIGINAL MESSAGE:

    I just made this simple app which tells you if your device passes the new Play Integrity API (which is presumably what Google Pay and Play Store use to detect root now). If you don't trust random apks from the internet feel free not to use this. I'll upload the source code at a later time since it's very junk now (probably on github).
    You can use it to play around and see if you manage to get it to pass without having to mess with Google Pay. There are screenshots of the 2 possible outputs (pass screenshot is from an online emulator).
    Also I didn't test it much since I don't have many devices that can pass. Hope it works fine 🤞

    Hope this helps someone find a solution :)

    EDIT:
    Here is a quote from Google of what exactly "Does not meet device integrity" mean:
    The app is running on a device that has signs of attack (such as API hooking) or system compromise (such as being rooted), or the app is not running on a physical device (such as an emulator that does not pass Google Play integrity checks).
    ...
    If you are having problems with your testing device meeting device integrity, make sure the factory ROM is installed (for example, by resetting the device) and that the bootloader is locked.