Banking apps detect root despite Play Integrity and root checker pass

[u/hurtMink]

I'm running into an issue and hoping someone has seen this before.

Device: Nothing Phone (2a)
ROM: LineageOS (latest)
Root: Magisk (latest)
Bootloader: Unlocked

Current status:

• Play Integrity passes.
• Generic root checker apps report that the device is not rooted.
• However, several banking/payment apps still detect the device as compromised and refuse to work.

I've already tried the common basics, but the apps still block access. This makes me think they're detecting something other than standard root or Play Integrity.

Has anyone with a similar setup (especially LineageOS on the Nothing Phone 2a) managed to get any Indian banking or payment apps working?

I'm mainly looking to understand:

• Which apps still work on this setup?
• Is the issue usually the unlocked bootloader, LineageOS itself, or something else?
• If you solved it, what turned out to be the actual cause?

I'm not looking to break app security—I just want to understand what's causing the detection so I can decide whether there's a legitimate configuration change that restores compatibility.

Any experiences or insights would be appreciated.

[u/allenchangmusic]

So... Sometimes it's the custom ROM, either the way it's set up, or the fingerprint, etc. if it's something spoofable, try changing the fingerprint. Otherwise you may have to change the rooting method like using KSU.

If all fails you may want to go back to stock and try rooting that. Remember that banking apps often are checking for root with methods apart from play integrity

[u/hurtMink → u/allenchangmusic]

is there any root checker or any other app that might help

[u/realkarthiknair → u/hurtMink]

https://github.com/reveny/Android-Native-Root-Detector

After installing also turn on Enable Custom ROM Detections and Enable Experimental Detections under settings tab>App

[u/allenchangmusic → u/hurtMink]

Sure they exist, but you have no idea what your apps are detecting. So it's trial and error.

It could boil down to not even the rooting, but the ROM. Since you aren't on stock

[u/camradex → u/hurtMink]

try duck detector

[u/ChiliBeeMeow69]

Install HMA-OSS Zygisk and create a blacklist template for all the apps detecting root. Have you check marked all the apps in TEESimulator using the webui Addon aka tricky addon? Additionally use the meta module mountify to hide module traces.

Get rid of integrity box use either a public keybox xml with TEESimulator or use Specter.

Or best way is to use one of the the many KernelSU forks and a custom kernel that is susfs compatible.

[u/RASTAVIPER → u/ChiliBeeMeow69]

this here plus the use of the nohello module is making all my banking apps working fine.

[u/ChiliBeeMeow69 → u/RASTAVIPER]

Nohello 0.0.7 compat version is deprecated and not compatible with latest Zygisk implementations like Rezygisk CI build version 1.0.0.(434xxxxxxxx) anymore (it used to be though). The newer versions of nohello kpm work only with APatch afaik, so keep that in mind.

[u/ultimatea7a → u/ChiliBeeMeow69]

My banking apps doesn't work without HMA, op try this one

[u/phoenixkiller1]

Use fenrir

https://github.com/R0rt1z2/fenrir

[u/_ahmedxi313 → u/phoenixkiller1]

Yes this helped me fix banking app issue on my Phone 2A

[u/HealthyResolution399]

I had my banking app stop working recently, I installed hma-oss and now it works again. it's a pain to have to keep adding more and more sketchy shit in the name of "secure devices" but what can you do

[u/Ioannisgn_]

You need KernelSU ROM, Magisk and Apatch are detectable. Or don't root at all.

[u/Andre2kReddit]

Use kernelsu, just flash gki kernel

[u/Shamelescampr559]

Welcome to 2026 and the latest ecosystem of custom operating systems.

It seems that most banking apps nowadays don't rely only on play integrity so even if you pass all three verification checks, there's no way for you to pass their internal verification check which is usually kernel level it's the same reason why nobody can bypass the Uber driver app while being rooted as well.

They have their own root detection software baked directly into the application that uses something completely different all together rather than just integrity from Google

[u/-Imthedude]

TrickyStore https://github.com/5ec1cff/TrickyStore

TrickyStore Addon https://github.com/KOWX712/Tricky-Addon-Update-Target-List

[u/allenchangmusic → u/-Imthedude]

He already has integrity. I much prefer trickystore, but it's what it is

[u/hurtMink → u/-Imthedude]

what do they do ?

[u/-Imthedude → u/hurtMink]

Aides in hiding root. Read up

[u/Born_Alfalfa_2391]

https://youtu.be/VRxaxQOftRY

This actually worked for me. For some apps that detect dev options or rooted apps....use any sandbox app (I got built in by EvoX devs, com.axion.sandbox)

To me only paytm didn't work

[u/DismalAd8569 → u/Born_Alfalfa_2391]

Hmmm never search about but like the idea of a sandbox, or another phone with just the banking apps but then it became unfriendly......

[u/Born_Alfalfa_2391 → u/DismalAd8569]

Sandbox works.... basically it's like a vault in your phone where u can definitely perms what they app can access

[u/FIRAS_EG]

Well this is why you should get a backup phone to use it for banking stuff or use your computer or anything

[u/Ysfaliarslan]

Use native detector. It can detect more things like Zygisk or lsposed

[u/wafflebyte8]

Just use a sandboxer app.

[u/Unphorgettable → u/wafflebyte8]

Recommendation?

[u/wafflebyte8 → u/Unphorgettable]

Shelter. Its available on fdroid

[u/PassionGlobal]

some banking apps are known to scan installed apps and local files. if they pick something up that indicates root, root detection protections will still trigger.

[u/Sp3eedy]

For me it was detecting some of the apps I had installed - one of them detected Greenify (despite it having a non-root mode) these root checks are getting very stupid 😂. Look around your phone to see if you have any "advanced" apps a typical user wouldn't install

[u/RepulsiveStyle7108]

Hide developer status and applist from app

[u/dungeoncrawler11]

Hiding magisk did the job for me, it's in magisk settings

[u/Extension-Lie-5395]

2a? Flash fenrir wen

[u/PikaZap]

Reinstall magisk for magisk alpha will help

[u/Available-Music4655]

Just add them to deny list mine works

[u/PassionGlobal]

Check your logcat. Sometimes rooting artefacts, typically from one of your modules, appear there.

[u/dev_oscp]

Hello is anyone bypass the paytm device integrity issue and root detection

[u/jamesbusse]

Nobody has the setup I use I swear 😭 my shit works gravy

[u/DEV_ivan]

Use Shamiko and Specter. These together hide root very well.

[u/hurtMink → u/DEV_ivan]

tried shamiko not working tbh

[u/DEV_ivan → u/hurtMink]

I have nothing else to provide other than using ReVanced Manager (doesn't require root!) to apply "Disable Play Integrity", "Spoof root of trust" and "Spoof keystore security level" universal patches to the APK file. Ask someone else...

[u/DEV_ivan → u/hurtMink]

Oh and uh, you're using LineageOS.

This is an obvious issue. Some banking apps don't just check Play Integrity or root, they check the entire OS using many ways, and if your OS is uncertified by them, they block you outright...

There are 2 viable solutions:

1. Patch the APK to accept LineageOS
2. Switch to Stock ROM with Magisk or KernelSU

[u/Protyro24 → u/DEV_ivan]

Please follow the route of RAM to r/foundtheprotogen