Question Instapay banking app detects root help please

Search This thread

xxqxpxx

Senior Member
Oct 14, 2014
402
38
Hello everyone,

So my banking app instapay is a harsh one when it comes to root, I've tried everything to hide it but failed. I have magisk 24.3, zygisk and lsposed installed. Stock may update pixel 6

I have tried to enforce deny list and normal, also installed a bunch of hiding tools like Enhance mode for HideMyApplist, Shamiko , Universal SafetyNet Fix, xprivcylua and all failed.

I would appreciate your help the app would crash on first start. Im also okay with any virtual space solution that would work as well i tried island with work profile and parallel space both failed too

 

Strephon Alkhalikoi

Senior Member
Aug 3, 2010
7,401
3,422
Vulcan
Samsung Galaxy S4
Nexus 6
Not sure if anyone here is going to have a solution, especially where you have tried all the standard solutions. You may simply have to deal with not using the app on your device.

The only thing I can suggest is getting rid of your Xposed clone. The app I believe is almost certainly detecting it.
 

tom1807

Senior Member
Similar situation for me recently with Citibank, I have only Universal SafetyNet Fix and MagiskHide Props Config installed as modules, nothing else.
Magisk 24.3 was hidden, Citibank worked until May 14. This day it suddenly detected Magisk and told me me right out your mobile is rooted with Magisk or any other app.
I added a second user, installed Citibank for the second user and it worked. (seems it doesn't care that the bootloader is unlocked).
Then, I tried the following as Main user::
1. deleted Data and Cache from Citibank
2. Unhide Magisk, Hide it again but this time a new name (not the standard suggestion "Settings")
3. Opened Citibank again, logged in and it worked.
4. Deleted the second user again (optional)
Why? Can't give a specific reason, but a possibility is, that 2 x Settings in the AppDrawer was flagged as suspicious.
So you could try to have a second profile on your mobile or try the steps above.

Cheers
Tom
 

spida_singh

Senior Member
Mar 3, 2011
584
214
If you are using adaway to block ads via root, run the DNS log to see what urls the app is trying to connect to.

I had this issue with a UK Halifax banking app, all was working fine until middle of May, and then i found a new URL the app was connecting to, when i blocked it, it worked OK,

Moe information on this here:-

 

shoey63

Recognized Contributor
@xxqxpxx
Instapay detects zygisk
Only way around is Magisk Alpha with magisk hide activated (It's on Telegram)
Riru, Riru Universal Safetynet fix and Riru xposed (if needed).
Configure the deny list as per screenshot.
Reboot and you're good to go Screenshot_20220526-085914.png
 
Last edited:

xxqxpxx

Senior Member
Oct 14, 2014
402
38
This is what they use : any ideas?

public static boolean isRooted(Context context) {
String str = Build.TAGS;
if ((!isEmulator && str != null && str.contains("test-keys")) || new File("/system/app/Superuser.apk").exists()) {
return true;
}
return !isEmulator && new File("/system/xbin/su").exists();
}
 

Roidred

Senior Member
Sep 4, 2012
242
52
This is what they use : any ideas?

public static boolean isRooted(Context context) {
String str = Build.TAGS;
if ((!isEmulator && str != null && str.contains("test-keys")) || new File("/system/app/Superuser.apk").exists()) {
return true;
}
return !isEmulator && new File("/system/xbin/su").exists();
}
This is common check most apps will have it.

i tried the app. i belive its Egpt instapay. i was able to run it without error but cant see the login page.
 
Similar situation for me recently with Citibank, I have only Universal SafetyNet Fix and MagiskHide Props Config installed as modules, nothing else.
Magisk 24.3 was hidden, Citibank worked until May 14. This day it suddenly detected Magisk and told me me right out your mobile is rooted with Magisk or any other app.
I added a second user, installed Citibank for the second user and it worked. (seems it doesn't care that the bootloader is unlocked).
Then, I tried the following as Main user::
1. deleted Data and Cache from Citibank
2. Unhide Magisk, Hide it again but this time a new name (not the standard suggestion "Settings")
3. Opened Citibank again, logged in and it worked.
4. Deleted the second user again (optional)
Why? Can't give a specific reason, but a possibility is, that 2 x Settings in the AppDrawer was flagged as suspicious.
So you could try to have a second profile on your mobile or try the steps above.

Cheers
Tom
One thing I noticed whenever I updated the Citibank app is that it always turns off something in DenyList that was previously turned on, causing it to catch root. All I do now is whenever I updated the Citibank app, I check DenyList to make sure none of the Citibank files have been turned off. If so, I just turn it back on and all is good.
 

Nightf0x_007

Senior Member
Nov 5, 2012
805
88
Its working for me here, and thats my setup: magisk delta (google it) using riru & magiskhide (the old root hiding way) with modules: USNF, riru momohider, riru lsposed, riru enhanced mode for magisk hide, MHPC, initrchider & hiding the app in magisk via magiskhide
 

mero3omar

Member
Oct 25, 2013
24
13
The latest Update (1.5.4) Requires More work to hide root it includes most of work done here in this thread but will be explained without reading all comments

1) Update Magisk Alpha to v26 and Enable Zygisk

2)Install Universal SafteyNetFix Mod (You Should use this )


3) Install Shamiko latest update

4) Dont Enfore Zygisk and Add InstaPay to Denylist
5) Clear Data to G Play Services ,Reboot and Enjoy
 
Last edited:

SAM209

Senior Member
Mar 23, 2012
139
12
The latest Update (1.5.4) Requires More work to hide root it includes most of work done here in this thread but will be explained without reading all comments

1) Update Magisk Alpha to v26 and Enable Zygisk

2)Install Universal SafteyNetFix Mod (You Should use this )


3) Install Shamiko latest update

4) Dont Enfore Zygisk and Add InstaPay to Denylist
5) Clear Data to G Play Services ,Reboot and Enjoy
Did all those steps and the latest version is still not working unfortunately..
Can anyone share the 1.5.3 or 1.5.2 apk since it was working with me but I accidentally updated it
 

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    any special settings for magisk delta for instapay?
    I am using magisk delta on android 9 Oneplus 5 (with shamiko and safetynet) and it closes immediately (on instapay 1.6, but last working version was 1.4.x).
    I tried disabling zygisk and it isn't working as well.
    Something I missed to tell:

    Just install Magisk Delta (stable) v 26.1 only from here : Delta 26.1 stable

    and follow other steps in my OP

    Other beta or canary versions are not working with instapay
    1
    Now you can run all banking apps with latest bulid of Magisk Delta, Shamiko, Safetynet fix MOD,
    I confirm cib,instapay,myfawry,cib smart wallet all works, very useful post. Thanks all!
  • 3
    The latest Update (1.5.4) Requires More work to hide root it includes most of work done here in this thread but will be explained without reading all comments

    1) Update Magisk Alpha to v26 and Enable Zygisk

    2)Install Universal SafteyNetFix Mod (You Should use this )


    3) Install Shamiko latest update

    4) Dont Enfore Zygisk and Add InstaPay to Denylist
    5) Clear Data to G Play Services ,Reboot and Enjoy
    3
    Update:

    Now you can run all banking apps with latest stable bulid of Magisk Delta v 26.1 (beta or canary versions are not hiding root), Shamiko, Safetynet fix MOD,

    Some apps like (NBE phone cash) needs to turn off developer options and till now no working module can hide developer options

    Other apps like CIB need to detect that your Bootloader is LOCKED, So there is LSposed module called BootloaderSpoofer is working well with that case but it is not working with some devices like Oneplus and part of Xiaomi ones
    2
    If you are using adaway to block ads via root, run the DNS log to see what urls the app is trying to connect to.

    I had this issue with a UK Halifax banking app, all was working fine until middle of May, and then i found a new URL the app was connecting to, when i blocked it, it worked OK,

    Moe information on this here:-

    2
    This means both apps use different methods for integrity checks?
    Indeed As cib uses local and not sure but instapay uses the strong integrity with google servers so it needs another workaround
    2
    I used the below module and it solved the instapay problem along with the latest myfawry update issue with root




    Only Install it and disable deny list
    Thanks bro this really helped me 🙂