[Discussion] Google Pay Magisk Discussion Thread

[m0han]

.... device app bug or something in your device.... confirm your side.

Yes. Cleared cache & data and set everything up afresh. All fine now.

 

[varunpilankar]

@DineshValor does Privacy Space support android 10 with Lsposed? Also can share the link to download the module? I'm finding a old one which mentioned support for Android 9

 

[DineshValor]

@DineshValor does Privacy Space support android 10 with Lsposed? Also can share the link to download the module? I'm finding a old one which mentioned support for Android 9

It's supported upto android 13 and currently I'm using LSposed with android 12.
Here is the link:

GitHub - LSPosed/LSPosed: LSPosed Framework

LSPosed Framework. Contribute to LSPosed/LSPosed development by creating an account on GitHub.

github.com

Release 1.3.7 · Xposed-Modules-Repo/cn.geektang.privacyspace

1、修复在Android9上不生效的问题； 2、适配Pixel、一加手机的设置页面； 3、修复了一些已知bug。

github.com

 

[varunpilankar]

Requirements:-
- Magisk v25.2
- LSPosed v1.8.6
- PrivacySpace v1.3.7 (LSPosed module app)
- Enable Zygisk (Enforce DenyList - Disabled) under Magisk (+ download some Magisk module as shown in screenshot¹)
View attachment 5865833

Follow below steps to fix "This functionality is not available due to security concerns with your device" in Paytm (Tap to Tay):-
1. Download frest original Paytm app or clear data & force stop.
2. Open PrivacySpace app/module under LSPosed.
3. Hidden Apps > select Paytm (+ all other modules such as Lucky Patcher, etc as show in screenshot²).
View attachment 5865841
4. Blacklist > select Paytm.
Note: If u want to recieve Paytm app update in Play Store then select Play Store in "Connected with Others" to unhide Paytm app for Play Store.
View attachment 5865845
5. All Set, Try your Luck Now, and do not forget to let me know if it's work for you too.

following this guide, landed me into bootloop. Is there a brief guide - blog or video?

 

[DineshValor]

following this guide, landed me into bootloop. Is there a brief guide - blog or video?

Sorry about that issue, but right now I'm busy in some other stuff, i will make sure to create a brief video as a demo, plz grant me some time.

 

[varunpilankar]

Sorry about that issue, but right now I'm busy in some other stuff, i will make sure to create a brief video as a demo, plz grant me some time.

Sure, take your time.. Can you cover Paytm Tap to pay setup in your guide.. That would be very helpful.

 

[Master_T]

Hi everyone
I've had to factory reset my phone (Xiaomi Mi 9T) recently, and since then I am unable to verify my payment cards for contactless payment on Google Wallet, on any rom that I tried (even the ones that pass SafetyNet by default).

The weird thing is that I don't get any error messages or security warning, but the verification process simply goes in an infinite loop:
1) I add a card
2) The Wallet app says it needs to verify the card with the bank, it asks me how I want to verify
3) I chose "use the bank's app"
4) The bank's app opens, I verify the card, it says everything is good and the card can now be used for contactless payments
5) I go back to Wallet and... it asks me how do I want to verify the card again! (in other words: I'm back at step 2)

Has anyone here experienced something like this? I've been tinkering for hours now, switching roms, installing magisk and various combinations of modules, but to no avail. Any suggestions?

 

[pndwal]

Hi everyone
I've had to factory reset my phone (Xiaomi Mi 9T) recently, and since then I am unable to verify my payment cards for contactless payment on Google Wallet, on any rom that I tried (even the ones that pass SafetyNet by default).

The weird thing is that I don't get any error messages or security warning, but the verification process simply goes in an infinite loop:
1) I add a card
2) The Wallet app says it needs to verify the card with the bank, it asks me how I want to verify
3) I chose "use the bank's app"
4) The bank's app opens, I verify the card, it says everything is good and the card can now be used for contactless payments
5) I go back to Wallet and... it asks me how do I want to verify the card again! (in other words: I'm back at step 2)

Has anyone here experienced something like this? I've been tinkering for hours now, switching roms, installing magisk and various combinations of modules, but to no avail. Any suggestions?

Can't say I've had exactly that behaviour... My bank app doesn't get opened to verify...

However SafetyNet API is of course now deprecated, so are your ROMs up to date and passing new Play Integrity API's deviceIntegrity verdict?

Nb. If using Magisk, late official Universal SafetyNet Fix module is broken... You need @Displax's fork... PW

 

[Master_T]

Can't say I've had exactly that behaviour... My bank app doesn't get opened to verify...

However SafetyNet API is of course now deprecated, so are your ROMs up to date and passing new Play Integrity API's deviceIntegrity verdict?

Nb. If using Magisk, late official Universal SafetyNet Fix module is broken... You need @Displax's fork... PW

Thanks for the info, is there an app I can use to check the status of Play Integrity?

 

[zgfg]

Thanks for the info, is there an app I can use to check the status of Play Integrity?

Of course. It has been described in this thread

Search for Play Integrity on the Play Store and you will find the PI API Checker

Or, Google Play Store app itself (Developer options) can be used

 

[m0han]

Of course....

Or TB Checker, which has a few more things to, well, check.

 

[Master_T]

Of course. It has been described in this thread

Search for Play Integrity on the Play Store and you will find the PI API Checker

Or, Google Play Store app itself (Developer options) can be used

Thanks a lot for your help.
Indeed, the strong Integrity check is failing, only the basic and device ones are passing. I'll try to install magisk and the modded module and see if it helps. Should I use original magisk? I've seen the Delta version recommend elsewhere

 

[zgfg]

Thanks a lot for your help.
Indeed, the strong Integrity check is failing, only the basic and device ones are passing. I'll try to install magisk and the modded module and see if it helps. Should I use original magisk? I've seen the Delta version recommend elsewhere

Strong Integrity is not relevant and you will never be able to pass with the Bootloader unlocked

Again, before posting/,asking, please read and be familiar with the common facts

 

[Master_T]

Strong Integrity is not relevant and you will never be able to pass with the Bootloader unlocked

Again, before posting/,asking, please read and be familiar with the common facts

Sorry, I've been reading about this stuff all day but a lot of the information out there is at times contradictory and I have yet to find a single case similar to mine (i.e: where no error occurs but the Wallet app simply refuses to advance to the next step of the verification wizard).
This is what I find strange, all apps (integrity checkers, my bank's app, etc.) report everything is ok but for some reason I just cannot complete the verification process

 

[raphytaffy]

Can P7P users with GPay working please chime in with the following:

OTA version:
Magisk version:
Universal SafetyNet Fix version:
+any other relevant info

Thank you in advance!

 

[pndwal]

Can P7P users with GPay working please chime in with the following:

OTA version:
Magisk version:
Universal SafetyNet Fix version:
+any other relevant info

Thank you in advance!

Ask here?:
https://forum.xda-developers.com/t/...r-root-pixel-7-pro-cheetah-safetynet.4502805/ PW

 

[nicky-xda]

Can P7P users with GPay working please chime in with the following:

OTA version:
Magisk version:
Universal SafetyNet Fix version:
+any other relevant info

Thank you in advance!

gpay / wallet working here on xiaomi mi9 / crDroid 9 with: magisk 26.1, safetynet 2.4.mod.1.1, shamiko 0.7.x

 

[wtosta]

Just a quick update for you guys. The "Enforce Denylist" option must be turned OFF, otherwise gpay won't work. I tried and tested this. Don't worry if you don't pass device integrity, as long as you have a checkmark for "your phone meets security requirements" you are good to go (see image). View attachment 5852701

With the deny list enforcement disabled in Magisk manager, e.g. Revolut does not work. Therefore, when you are adding payment cards to Google Wallet, the "Enforce Denylist" option in Magisk manager must be disabled, and after adding your cards to the wallet, you can re-enable it for the Revolut application to work. A very simple trick ;-)

 

[pndwal]

With the deny list enforcement disabled in Magisk manager, e.g. Revolut does not work. Therefore, when you are adding payment cards to Google Wallet, the "Enforce Denylist" option in Magisk manager must be disabled, and after adding your cards to the wallet, you can re-enable it for the Revolut application to work. A very simple trick ;-)

Denylist is not proper root hiding; it's a little of MagiskHide code repurposed for the purpose of reverting/preventing Magisk modifications in listed processes... This is no longer a function for the general modder, but for the Android developer, security researcher etc...

Anyway, there's no issue using denylist (or enforced) for hiding root from GPay/Wallet... I don't know why any think this...

It isn't enough to hide root from apps that do more than superficial checks for root, eg looking for Zygisk injection or memory leaks etc... For this we need proper root-hiding modules like Shamiko... These might use the denylist (hijack it) for convenience, but it is NO LONGER used as denylist... It no longer prevents Magisk modifications (Zygisk injection into an app's zygote for instance) so doesn't interfere with hiding modules ... Denylist is now actually a hide list (as long as DenyList is disabled, ie. not enforced) per old MagiskHide but much improved in the case of Shamiko...

So for those wanting proper root hiding, Denylist must necessarily be disabled and a suitable hiding module utilised... This mode works well for GPay/Wallet and much better to bypass detections in other bank apps etc.

Nb. Shamiko has already been updated to hide new Native Bridge Zygisk loading implementation currently being tested for Magisk 27.0 by making /proc/maps string memory anonymous... This coming change is not being detected by banks at present as far as I've tested, but it appears that Shamiko is already configured in anticipation of this event...

PW

 

[wtosta]

So for those wanting proper root hiding, Denylist must necessarily be disabled and a suitable hiding module utilised... This mode works well for GPay/Wallet and much better to bypass detections in other bank apps etc.

Unfortunately Revolut Bank app says that it won't work on rooted phones when Enforce Denylist option is disabled. I must confess that I'm still using Magisk 25.2 with application name changed. Because some dumb apps find rooted phone based on an installed app called "Magisk". Also, is Magisk 26.1 fundamentally better than version 25.2?