[How To] Bypass Lloyds and Santander Root Detection

Search This thread

tyler19820201

Senior Member
Jun 19, 2011
434
84
London
Other as you being on magisk stable 25 what other differences is there with our setups? Interesting that on mine syscall is all hidden only the magisk app is found (even though its been renamed)
I use 5 modules (Safetynetfix is the newer not what u see on the screenshot. The same u use) and 3 (on the screenshot is two only Update Checker is newly added to avoid update Barclays
) LSPosedZygisk modules now. Nothing else. I dont know what modules are u using.
 

Attachments

  • Screenshot_20230217-112831_Shell.png
    Screenshot_20230217-112831_Shell.png
    144 KB · Views: 158
  • Screenshot_20230216-073619_Titkos.png
    Screenshot_20230216-073619_Titkos.png
    207.1 KB · Views: 161
  • Screenshot_20230215-003901_Titkos.png
    Screenshot_20230215-003901_Titkos.png
    208.6 KB · Views: 161

bombadier

Senior Member
Jul 3, 2010
3,645
3,562
The Burgh
LG G Watch R
Samsung Galaxy Tab S2
I use 5 modules (Safetynetfix is the newer not what u see on the screenshot. The same u use) and 3 (on the screenshot is two only Update Checker is newly added to avoid update Barclays
) LSPosedZygisk modules now. Nothing else. I dont know what modules are u using.
Only other modules I use are Viper4android, audio modifcation library, audio compatibility patch( probably dont need those two) systemless hosts, a custom font and Zgisk LS Exposed (only needed that for Hidemyapplist) can't see any of these being an issue, guessing the issue is that the magisk app is showing which is why I used Hidemyapplist, that hide magisk but then it was getting found which may be the problem, magisk is successfully hidden for you, guessing Halifax doesn't care about the updater that root checker finds
 

WigBaM

New member
Jan 8, 2011
2
1
Has anybody maanged to get Lloyds app working recently. I have tried everything with no avail.

Phone: Asus Zenfone 8 ZS590KS
OS: Lineage 19 (20221119)
Magisk: 25.2 (package renamed)
+ Universal SafetyNet Fix
+ Zygisk - LSPosed

Lloyds Bank Mobile Banking: 109.22.

- All Lloyds packages are in Magisk DenyList.
- Hide My Applist is installed and all root-related apps are hidden for Lloyds.
- Applist Detector does not find anything suspicious at all.
- Adaway is installed with the following hosts blocked:
cem.lloydsbank.co.uk
crashlytics.com
dyknreymc91ut.cloudfront.net
fins.trusteer.com
mupdates.trusteer.com
omtrdc.net
sc.omtrdc.net
trusteer.com


But as soon as memorable information is entered the Lloyds app says that it detected a jailbrake on the device and fails to proceed.

Any suggestions here?
 

suby97

Member
Jan 21, 2019
40
11
Only other modules I use are Viper4android, audio modifcation library, audio compatibility patch( probably dont need those two) systemless hosts, a custom font and Zgisk LS Exposed (only needed that for Hidemyapplist) can't see any of these being an issue, guessing the issue is that the magisk app is showing which is why I used Hidemyapplist, that hide magisk but then it was getting found which may be the problem, magisk is successfully hidden for you, guessing Halifax doesn't care about the updater that root checker finds
I am unrooted on a custom rom and Halifax app doesn't work for me either. So don't think its anything to do with root. Was finally forced to update the app and no longer launches :( Just shows splash screen and closes.
 

smegbat

Member
Feb 5, 2015
27
5
Has anybody maanged to get Lloyds app working recently. I have tried everything with no avail.

Phone: Asus Zenfone 8 ZS590KS
OS: Lineage 19 (20221119)
Magisk: 25.2 (package renamed)
+ Universal SafetyNet Fix
+ Zygisk - LSPosed

Lloyds Bank Mobile Banking: 109.22.

- All Lloyds packages are in Magisk DenyList.
- Hide My Applist is installed and all root-related apps are hidden for Lloyds.
- Applist Detector does not find anything suspicious at all.
- Adaway is installed with the following hosts blocked:
cem.lloydsbank.co.uk
crashlytics.com
dyknreymc91ut.cloudfront.net
fins.trusteer.com
mupdates.trusteer.com
omtrdc.net
sc.omtrdc.net
trusteer.com


But as soon as memorable information is entered the Lloyds app says that it detected a jailbrake on the device and fails to proceed.

Any suggestions here?
I am having the same issue and have the same setup as you apart from using SD Maid to freeze the renamed Magisk. Please post of you find a solution 👍
 

en666

Senior Member
Apr 23, 2011
101
68
Sharing here my experience.
For me LL works. I am using the app since ages now without interruptions on los18.1.
I've been using two things: the magisk 23 (the latest version that still has the built-in 'hide') and the 'disable the magisk app' trick.
For easily toggling the magisk app disable/enable status, I've created an Automate flow I've shared in this thread a while ago, which is still valid for me.
Hope to have been useful!
 

Lagartixo

Member
Nov 4, 2013
21
8
Santander v.23.3.4 (Brazil)
Xiaomi MI 9
EvolutionX 7.8 (13)
Magisk Delta 25.2
+ Zygisk - LSPosed
+ Magisk Hide (gms and appbank)
HideMyApp (black or white list)

My custom ROM pass safetynet (Yasnac, Integrity Check) by default. After only the Magisk APK is installed continues to pass on Safetynet, but the Santander app detects root, so the bank app identifies some installed package even renamed the Magisk. HidemyApp (HMA) didn't solve the problem in standard Magisk 26.1, but worked with Magisk Delta 25.2.
 

OrionBG

Senior Member
Sep 21, 2004
1,509
286
London, UK
Xiaomi Mix Fold 2
Hey guys,
I have a Xiaomi MIX Fold 2 that has Unlocked Bootloader and is Rooted.
On MIUI14 now (Android 13) and somehow the Lloyds app is working almost fine with minimal effort.
What I did is:
Magisk 26.1 (latest official)
Systemless Hosts Enabled (for Ad-Away)
Universal Safety Net Fix MOD 2.4.0 (the standard one has issues)

I have hidden Magisk from within its own DenyList and that's it.
No hosts added in AdAway, no other modules to hide things... How and why it is working now, I have no idea.
The only thing not working (and it might be related to other factors) is the Fingerprint unlock for the Lloyds app. It just gives a quick error and goes to the memorable word to enter the letters. The app itself is fully functional...
 

jimger

Senior Member
Dec 13, 2012
249
36
Cambridge,UK
OnePlus 8 Pro
Lloyds and Halifax and Santander work for me great. Oxygen OS latest android 13. Latest magisk 26.1, hidemyapps, xposed installed. Barclay's detects root though... Also magisk manager renamed and frozen
 

DTIVKITT

New member
Apr 26, 2023
1
1
Santander v.23.3.4 (Brazil)
Xiaomi MI 9
EvolutionX 7.8 (13)
Magisk Delta 25.2
+ Zygisk - LSPosed
+ Magisk Hide (gms and appbank)
HideMyApp (black or white list)

My custom ROM pass safetynet (Yasnac, Integrity Check) by default. After only the Magisk APK is installed continues to pass on Safetynet, but the Santander app detects root, so the bank app identifies some installed package even renamed the Magisk. HidemyApp (HMA) didn't solve the problem in standard Magisk 26.1, but worked with Magisk Delta 25.2.
THANK YOU Lagartixo !!!

Santander v.23.3.4 (Brazil)
Xiaomi Poco F1
MIUI 12.0.3
Android 10
Magisk Delta 25.210
Hidden app package and name
Zygisk enabled
Bootloop Protection enabled
+ Zygisk - LSPosed
+ Magisk Hide
-> com.google.android.gms - Google Play services
-> com.santander.app - Santander (Banking App)

HideMyApplist blacklist
->com.tsng.hidemyapplist - HideMyApplist
->the renamed Magisk Delta app
->DONT BLACKLIST gms HERE, OR SANTANDER WILL NOT WORK, JUST ADD gms TO MAGISK HIDE

I was having a week of headaches trying to make Santander to work, until I came across this post. THANK YOU !!!

Magisk 26.1 (the oficial one) with Zygisk LSPosed and HideMyApplist DID NOT WORK FOR ME
I had to completely unroot (uninstall Magisk oficial via app) and install Magisk Delta.
Then I followed the same steps as before and it worked.
The only difference was I replaced Magisk Oficial with Magisk Delta.

In case this is useful to anyone, here is what I tried BEFORE testing Magisk Delta
Freezing Magisk, HideMyApplist and Santander with Hail (F-Droid) - DIDNT WORK
Removed all the Magisk modules and rebooted - DIDNT WORK
Removed Magisk APK and rebooted (did NOT unroot, just removed the APP) - DIDNT WORK
Removed HideMyApplist and rebooted - DIDNT WORK TOO
The only way was to completely uninstall magisk oficial (unroot) and root again with Magisk Delta
 
  • Like
Reactions: marchetti87
Feb 18, 2022
17
4
UK
None of that is necessary for Halifax, regardless of their update - you just need to use Shamiko to manager the deny list, then block some domains through your favourite ad blocker.

I've attached my adblock backup, can't remember which domains it was for Halifax.

Never used the Santander app.
After updating the Lloyds app it stopped working and showed the rooted message.
After reading the above message I installed Shamiko module in Magisk (also had to update Magisk before installing shamiko). After cleared cash of banking app, rebooted and it worked. Also had to make sure that enforce deny list is off in Magisk. And it works again😜.
I have the added domains in adaway add blocking software, the same as before,.
But seems like Shamiko was the missing ingredient since the banking app update.
And I don't have to freeze the banking app.
 

seitanraki

New member
Apr 29, 2023
1
0
OK so I have been using Magisk, Xposed/LSposed and Xprivacy for years, and the main reason was for Xprivacy. Until recently I never had any requirement for banking apps and never had to use Magiskhide or anything so I never tried to find out how it works until now. Now I want to use a banking app for the first time and it refuses to run. So I have tested the Denylist which is what replaces the original Magiskhide (is that correct?) and found out that it effectively disables Magisk for that app. So app now works, but I lost all the protection from Xprivacy when I'm using that app which defeats the point of having a rooted phone. Is there any other workaround for this? Basically I want to be able to use apps that detect root or Magisk or whatever, but also have Xprivacy or other modules working on them. Not sure if that's possible, or ever has been?
 

marchetti87

Member
Apr 6, 2018
15
30
Santander v.23.3.4 (Brazil)
Xiaomi MI 9
EvolutionX 7.8 (13)
Magisk Delta 25.2
+ Zygisk - LSPosed
+ Magisk Hide (gms and appbank)
HideMyApp (black or white list)

My custom ROM pass safetynet (Yasnac, Integrity Check) by default. After only the Magisk APK is installed continues to pass on Safetynet, but the Santander app detects root, so the bank app identifies some installed package even renamed the Magisk. HidemyApp (HMA) didn't solve the problem in standard Magisk 26.1, but worked with Magisk Delta 25.2.
Santander worked here, thanks!

Santander v.23.2.4.0 (Brazil)
Moto G7 Plus
Android 10 (stock rom)
Magisk Delta 25.2
+ Zygisk - LSPosed
+ Magisk Hide (gms and appbank)
HideMyApp (black or white list) - This app was not needed.
 
Last edited:

Top Liked Posts

  • There are no posts matching your filters.
  • 24
    Hi All,

    I've seen mention of Santander but not of Lloyds bypassing the root detection. After much trial and error it's quite simple and my method will bypass both Santander and Lloyds. If bypassing Santander just do the same for the Santander app as ive said to do with Lloyds.

    <--Update 08/06/19-->

    Having flashed a new rom and following my steps again I received the detection message again but was resolved by using the Canary build of Magisk Manager.

    To get Magisk Manager Canary click the link below:

    https://github.com/topjohnwu/magisk_...pp-release.apk

    Once installed, open Magisk Manager and go to

    settings > Update Channel > Canary

    Go back to Magisk home screen and swipe down to check for updates, you'll receive an update for the canary build. Once you update follow the guides original steps below.

    <--End of update-->

    In Magisk Manager Settings:
    Enable Magisk Hide
    Enable Sytemless Host
    And if the option is available select "Hide Magisk"

    In Adaway:

    Download my exported blacklist from:

    https://drive.google.com/file/d/1xCBB4iVA65gJTTYqbhU1qTlghVYyAL1S/view?usp=drivesdk

    Then in adaway click the 3 dots in the top right to open the menu, select "Your Lists" then press the menu button again in the top right and press "Import all lists" and select the file you downloaded.

    With the urls added go back to the adaway main screen and press "Download Files and Apply ad blocking" and Reboot device. If "Download Files and Apply Ad Blocking" doesn't appear, click "check for updates" and then download them which will do the same thing.

    Once your phone has restarted install the Lloyds Banking app but don't open it. Go into Magisk Manager and select Magisk Hide from the menu and tick the Lloyds Banking app. Reboot phone and Lloyds should work perfectly!

    I managed to do this from researching other threads and adding my own bits in so credit due elsewhere as well, as usual you can follow this guide but do so at your own risk, i take no responsibility :D
    5
    I think we should start leaving bad reviews on the play store for apps that go to extreme lengths to detect root/custom recovery, especially in the case of apps that treat you like a criminal just for having a custom recovery, when you aren't even rooted.
    If an app still detects that you've been "jailbroken" (eugh) when you've tried everything possible to hide it, then whatever it's doing in your file system is extremely intrusive, and that's a good enough reason to try and knock a star off their review score if you ask me.
    Apologies if this is off topic, but it's really pissing me off that so many app developers treat people like criminals just for wanting to have full control of our own devices, or to get a bit more life out of phones that would otherwise succumb to planned obsolescence when the official firmware updates dry up. Screw these guys.
    4
    This app (Santander UK) is using Isolated Process and a scan of your installed apps to detect root.

    Just use latest Magisk Canary + Repack of Manager + Riru Core v. 23.9 + Unshare Module (to enable Magisk Hide for Isolated Process) and this app will work perfectly with root. I tested on my device. (Mi 9T Pro + MIUI 12.5 - A11)

    Riru Core v. 23.9 can be downloaded from Magisk Repo.

    Download Riru Unshare Module from the link below:


    Enable Magisk Hide for the app and its processes (uk.co.santander.santanderUK and uk.co.santander.santanderUK : oa.UB)

    If the app FC right after starting you need to search for a possible installed app triggering the detection or simple revoke the permission "Get info about installed apps" at app settings (this can differ from device to device)

    After every update of the app the Isolated Process name can be different so just re-add it to Magisk Hide again and everything should be fine.

    More info about the exploit (Isolated Process) used by a large numbers of banks to detect Magisk:

    4
    Santander v.23.3.4 (Brazil)
    Xiaomi MI 9
    EvolutionX 7.8 (13)
    Magisk Delta 25.2
    + Zygisk - LSPosed
    + Magisk Hide (gms and appbank)
    HideMyApp (black or white list)

    My custom ROM pass safetynet (Yasnac, Integrity Check) by default. After only the Magisk APK is installed continues to pass on Safetynet, but the Santander app detects root, so the bank app identifies some installed package even renamed the Magisk. HidemyApp (HMA) didn't solve the problem in standard Magisk 26.1, but worked with Magisk Delta 25.2.
    3
    For anyone having trouble with Santander, even after hiding it in Magisk - rename the TWRP folder in your internal storage/SD card to something different, delete Santander's app storage & cache and try running it again. Apparently Santander's app is checking multiple things to detect if you're rooted or not. Having TWRP folder seems to be one of them.