Fix for wallet, play store, banks and gov. apps for anyone update 18.10.2026

[Eclipse1991]

so you don't have to use the new key but kow7

It is the same 2 Keyboxes, which you will find in the circulating modules and known public TG Groups.

 

[SuediFox]

It is the same 2 Keyboxes, which you will find in the circulating modules and known public TG Groups.

KOW 7 gives all green in Tee Simulator, KOW 8 & Yuri throws warning that keys are revoked by google. Regarding Evokerr keys Im unsure.

 

[jim.androidis]

Sharing my working setup in case it helps someone. Google Wallet, all my Greek banking apps (Eurobank, Piraeus, Alpha Bank, NBG) and Revolut all work.
Device: Xiaomi 12S Pro (unicorn), bootloader unlocked, latest xiaomi.eu Android 15 rom, GKI root KernelSU Next + Wild Kernel (SUSFS).

Google Wallet + Banking Apps + Revolut — KernelSU Next setup​

Step 1 – Install modules​

Open the KernelSU Next app → Modules → Install and flash in this order:

#	Module
1	Zygisk Next (latest version) → Reboot
2	BRENE (latest version)
3	TEESimulator-RS (latest version)
4	PlayIntegrityFork (latest version)
5	Specter (latest version)
6	HMA-OSS Zygisk (latest version) → Reboot

Step 2 – KernelSU Next​

Open the KernelSU Next app:

Where	Setting
Settings	Hide SELinux modification: On
Superuser	Root only for MiXplorer and Termux

Step 3 – Zygisk Next (WebUI)​

Open KernelSU Next → Modules → Zygisk Next → tap the module to open its WebUI:

Setting	Value
DenyList policy	Disabled
Use anonymous memory	On
Everything else	Default

Step 4 – Specter (WebUI)​

Open KernelSU Next → Modules → Specter → tap the module to open its WebUI:

Where	Setting	Value
Control	Boot Spoofing	On
Control	ROM Cleaner	On
Control	ADB Lock	Off
Control	Auto PIF (Fingerprint)	Off
Control	Auto Keybox	Off
Control	Auto-Targeting	On
Tools	Set Custom Keybox	Import File → select your keybox.xml (gathered from the known sources)
Tools	Choose PIF Device	Pixel 6a
Tools	Get New Fingerprint	Press once
Tools	Set HMA-OSS Configs	Press once

Reboot

Step 5 – security_patch.txt​

Open MiXplorer, go to /data/adb/tricky_store/security_patch.txt, open it and replace everything with:

all=prop
[com.google.android.gms]
system=no

Reboot

Step 6 – HMA-OSS​

Open the HMA-OSS app → check the blacklist template Specter created → add any missing patched apps. User apps only, no system apps.

Step 7 – Check​

Check integrity via the Play Store: you should see BASIC, DEVICE and STRONG integrity.
Open the Key Attestation app and confirm it shows Google hardware attestation with the bootloader locked.
Open the Native Detector app, which should report that the environment is normal.
Log in to your banking apps and Revolut as usual. If Revolut doesn’t work, clear its data and re-test.

Add a card in Google Wallet and try tap to pay. If Wallet still refuses, either do the date-ahead trick and test again, or clear data for:
Google Wallet
Google Play Services (tap clear cache twice)
Google Play Store
Google Services Framework

Then test Google Wallet again.

 

[Viking Hogar Strasni]

I also confirm that both Google Wallet and the latest Revolut app are working on my Xiaomi 12S Pro running the latest Xiaomi.eu HyperOS 3 (Android 15) ROM.

Integrity passes Basic + Device + Strong.

For Revolut, the latest version requires an new active shared Strong keybox.

At the moment, Google Wallet works ONLY with the Pixel 6a Canary fingerprint. This is currently the only publicly available Canary/Beta fingerprint where Wallet works, all others fail.

Not true

 

[Viking Hogar Strasni]

Sharing my working setup in case it helps someone. Google Wallet, all my Greek banking apps (Eurobank, Piraeus, Alpha Bank, NBG) and Revolut all work.
Device: Xiaomi 12S Pro (unicorn), bootloader unlocked, latest xiaomi.eu Android 15 rom, GKI root KernelSU Next + Wild Kernel (SUSFS).

Google Wallet + Banking Apps + Revolut — KernelSU Next setup​

Step 1 – Install modules​

Open the KernelSU Next app → Modules → Install and flash in this order:

#	Module
1	Zygisk Next (latest version) → Reboot
2	BRENE (latest version)
3	TEESimulator-RS (latest version)
4	PlayIntegrityFork (latest version)
5	Specter (latest version)
6	HMA-OSS Zygisk (latest version) → Reboot

Step 2 – KernelSU Next​

Open the KernelSU Next app:

Where	Setting
Settings	Hide SELinux modification: On
Superuser	Root only for MiXplorer and Termux

Step 3 – Zygisk Next (WebUI)​

Open KernelSU Next → Modules → Zygisk Next → tap the module to open its WebUI:

Setting	Value
DenyList policy	Disabled
Use anonymous memory	On
Everything else	Default

Step 4 – Specter (WebUI)​

Open KernelSU Next → Modules → Specter → tap the module to open its WebUI:

Where	Setting	Value
Control	Boot Spoofing	On
Control	ROM Cleaner	On
Control	ADB Lock	Off
Control	Auto PIF (Fingerprint)	Off
Control	Auto Keybox	Off
Control	Auto-Targeting	On
Tools	Set Custom Keybox	Import File → select your keybox.xml (gathered from the known sources)
Tools	Choose PIF Device	Pixel 6a
Tools	Get New Fingerprint	Press once
Tools	Set HMA-OSS Configs	Press once

Reboot

Step 5 – security_patch.txt​

Open MiXplorer, go to /data/adb/tricky_store/security_patch.txt, open it and replace everything with:

all=prop
[com.google.android.gms]
system=no

Reboot

Step 6 – HMA-OSS​

Open the HMA-OSS app → check the blacklist template Specter created → add any missing patched apps. User apps only, no system apps.

Step 7 – Check​

Check integrity via the Play Store: you should see BASIC, DEVICE and STRONG integrity.
Open the Key Attestation app and confirm it shows Google hardware attestation with the bootloader locked.
Open the Native Detector app, which should report that the environment is normal.
Log in to your banking apps and Revolut as usual. If Revolut doesn’t work, clear its data and re-test.

Add a card in Google Wallet and try tap to pay. If Wallet still refuses, either do the date-ahead trick and test again, or clear data for:
Google Wallet
Google Play Services (tap clear cache twice)
Google Play Store
Google Services Framework

Then test Google Wallet again.

Install NoMount first
It will remove all traces of module installation

 

[SuediFox]

Oops!
Softban on attestation side on google servers according to the tech I talked to.

If I want to switch to GKI SuSfs root instead - whats the proper way to remove LKM root?

 

[MASTINO]

I can't install Brene because of my kernel version; I can't find the right file for my version. I have a Xiaomi 17 Pro Max.

 

[SuediFox]

I can't install Brene because of my kernel version; I can't find the right file for my version. I have a Xiaomi 17 Pro Max.

Wild Kernel 3 for Kernel 6.12.23 and for KernelSU-Next

https://github.com/WildKernels/GKI_KernelSU_SUSFS/releases/download/r21/6.12.23-android16-2025-06-KernelSU-Next-AnyKernel3.zip

 

[MASTINO]

Sharing my working setup in case it helps someone. Google Wallet, all my Greek banking apps (Eurobank, Piraeus, Alpha Bank, NBG) and Revolut all work.
Device: Xiaomi 12S Pro (unicorn), bootloader unlocked, latest xiaomi.eu Android 15 rom, GKI root KernelSU Next + Wild Kernel (SUSFS).

Google Wallet + Banking Apps + Revolut — KernelSU Next setup​

Step 1 – Install modules​

Open the KernelSU Next app → Modules → Install and flash in this order:

#	Module
1	Zygisk Next (latest version) → Reboot
2	BRENE (latest version)
3	TEESimulator-RS (latest version)
4	PlayIntegrityFork (latest version)
5	Specter (latest version)
6	HMA-OSS Zygisk (latest version) → Reboot

Step 2 – KernelSU Next​

Open the KernelSU Next app:

Where	Setting
Settings	Hide SELinux modification: On
Superuser	Root only for MiXplorer and Termux

Step 3 – Zygisk Next (WebUI)​

Open KernelSU Next → Modules → Zygisk Next → tap the module to open its WebUI:

Setting	Value
DenyList policy	Disabled
Use anonymous memory	On
Everything else	Default

Step 4 – Specter (WebUI)​

Open KernelSU Next → Modules → Specter → tap the module to open its WebUI:

Where	Setting	Value
Control	Boot Spoofing	On
Control	ROM Cleaner	On
Control	ADB Lock	Off
Control	Auto PIF (Fingerprint)	Off
Control	Auto Keybox	Off
Control	Auto-Targeting	On
Tools	Set Custom Keybox	Import File → select your keybox.xml (gathered from the known sources)
Tools	Choose PIF Device	Pixel 6a
Tools	Get New Fingerprint	Press once
Tools	Set HMA-OSS Configs	Press once

Reboot

Step 5 – security_patch.txt​

Open MiXplorer, go to /data/adb/tricky_store/security_patch.txt, open it and replace everything with:

all=prop
[com.google.android.gms]
system=no

Reboot

Step 6 – HMA-OSS​

Open the HMA-OSS app → check the blacklist template Specter created → add any missing patched apps. User apps only, no system apps.

Step 7 – Check​

Check integrity via the Play Store: you should see BASIC, DEVICE and STRONG integrity.
Open the Key Attestation app and confirm it shows Google hardware attestation with the bootloader locked.
Open the Native Detector app, which should report that the environment is normal.
Log in to your banking apps and Revolut as usual. If Revolut doesn’t work, clear its data and re-test.

Add a card in Google Wallet and try tap to pay. If Wallet still refuses, either do the date-ahead trick and test again, or clear data for:
Google Wallet
Google Play Services (tap clear cache twice)
Google Play Store
Google Services Framework

Then test Google Wallet again.

Thanks, it worked for me.

 

[Viking Hogar Strasni]

Oops!
Softban on attestation side on google servers according to the tech I talked to.

If I want to switch to GKI SuSfs root instead - whats the proper way to remove LKM root?

read my tutorial post #1
You have all tutorial for everything separated in spoilers

 

[SuediFox]

read my tutorial post #1
You have all tutorial for everything separated in spoilers

These steps, right?
"After you install anykernel3 in root manager and reboot,
you must reflash init_boot or vendor_boot!
If you dont do it, probably you will easy detected by Google here is commands(flash boot if you dont know):
fastboot flash init_boot_ab images/init_boot.img
fastboot flash vendor_boot_ab images/vendor_boot.img fastboot reboot"

 

[J_Ark]

No luck so far. Unsinstalled, installed NeoZ, reboot, run action of NeoZ, run action of Integrity, run repair, reboot to clean dalvik cache + cache. Revolut just works like a charm.

If I came from this situation (see attachments on the replied post) on a 12T Pro with Xiaomi.eu 3.0.3.0 stable. I undertand I need to do

Install in following order
1. KernelSu Next
2. Nomount, reboot
3. ZygiskNext, reboot
4. Specter+PlayIntegrityFork
5. Tee Simulator Rs
6. Tricky AddOn Enchanced
7. ReSuSFS
8. Reboot
9. Start Root manager, start TeeSimulator-RS, (auto selection, no manual selection), action or just start "Specter". Same as TeeSimulator, auto config
10. Exit Root Manager and Test

I don't know the best way to do it, uninstall all the modules and install in that order? I shouldn't reflash anything so everything was working fine until last month, isnt it?

Thanks for the help @Viking Hogar Strasni

 

[Edo Yehezkel]

Yes, that's how I check if it works. Setting the device as a Pixel 6a was crucial for me it seems.

Just tested tap to pay at Mc Donalds& works.

Can confirm it too, when it was set to pixel 6a it started to work..

 

[Viking Hogar Strasni]

These steps, right?
"After you install anykernel3 in root manager and reboot,
you must reflash init_boot or vendor_boot!
If you dont do it, probably you will easy detected by Google here is commands(flash boot if you dont know):
fastboot flash init_boot_ab images/init_boot.img
fastboot flash vendor_boot_ab images/vendor_boot.img fastboot reboot"

yes

 

[Viking Hogar Strasni]

If I came from this situation (see attachments on the replied post) on a 12T Pro with Xiaomi.eu 3.0.3.0 stable. I undertand I need to do

Install in following order
1. KernelSu Next
2. Nomount, reboot
3. ZygiskNext, reboot
4. Specter+PlayIntegrityFork
5. Tee Simulator Rs
6. Tricky AddOn Enchanced
7. ReSuSFS
8. Reboot
9. Start Root manager, start TeeSimulator-RS, (auto selection, no manual selection), action or just start "Specter". Same as TeeSimulator, auto config
10. Exit Root Manager and Test

I don't know the best way to do it, uninstall all the modules and install in that order? I shouldn't reflash anything so everything was working fine until last month, isnt it?

Thanks for the help @Viking Hogar Strasni

Install in following order
Nomount remove module installation trace, that why it 1
Zygisk Next is second because lots of module require it
All other is free will
But in this order works

 

[SuediFox]

Anyone tried this one?
Im getting full integrity & Revolut works but I can't test G-wallet because Im soft banned still.

Regarding KernelSU-next settings, should Kernel unount be on or off?
Components, documentsui & wallet set to custom & umount enabled?

 

[J_Ark]

Install in following order
Nomount remove module installation trace, that why it 1
Zygisk Next is second because lots of module require it
All other is free will
But in this order works

No luck for now. Wallet says my device doesn't comply. Revolut works tough. Dit action + repair with integrity box after uninstall, install and reboot.

 

[SuediFox]

"Step 6 – HMA-OSS​

Open the HMA-OSS app → check the blacklist template Specter created → add any missing patched apps. User apps only, no system apps."

Specter doesnt create a blacklist template? If it does, in what menu and which name inside HMA-OSS?

 

[SuediFox]

Google wallet up and running again - my main google account is soft banned by google so switched to my other account and tried adding my cards and it worked just fine.

GKI root w AnyKernel3 Using Specters keybox: KOW Device: 6a Placed documentsui, modulemetadata, gwallet & gplay in custom profile with umount module option enabled inside KernelSU-Next Modded security_patch.txt, followed steps regarding settings in ZygiskNext according to what jim.androidis wrote

 

[Viking Hogar Strasni]

No luck for now. Wallet says my device doesn't comply. Revolut works tough. Dit action + repair with integrity box after uninstall, install and reboot.

I dont see integrity box in my recomended tutorial at this moment
Maybe I dont know what I recomend
Also, you use old Anykernel, old root manager

 

[J_Ark]

I dont see integrity box in my recomended tutorial at this moment
Maybe I dont know what I recomend
Also, you use old Anykernel, old root manager

You said earlier

 Install in following order
Nomount remove module installation trace, that why it 1
Zygisk Next is second because lots of module require it
All other is free will
But in this order works

I will uninstall integrity box and update anykernel

 

[bariihh]

Yes, that's how I check if it works. Setting the device as a Pixel 6a was crucial for me it seems.

Just tested tap to pay at Mc Donalds& works.

How did you specifically select Pixel 6a? Was this through Specter, or did you import a custom pif.prop file? If possible, could you share the Pixel 6a fingerprint configuration and the relevant PIF settings you used? No keybox/private key needed.

 

[SuediFox]

How did you specifically select Pixel 6a? Was this through Specter, or did you import a custom pif.prop file? If possible, could you share the Pixel 6a fingerprint configuration and the relevant PIF settings you used? No keybox/private key needed.

Using Specter to set fingerprint device is easiest.
Currently no custom Pif settings, just default values. If you are using Play Integrity Fix [Inject] you simply set 6a in there and in Specter and run action. Default pif values.

Not sure if it's correct but running LKM root and Specter doesnt seem optimal. I had issues aito fetching a valid Keybox. Was lucky to get a valid KOW 7 but eventually it broke.

Now when running GKI root and Specter it fetched a valid KOW 11. If you have a valid one on file - import it instead!

 

[Viking Hogar Strasni]

You said earlier

 Install in following order
Nomount remove module installation trace, that why it 1
Zygisk Next is second because lots of module require it
All other is free will
But in this order works

I will uninstall integrity box and update anykernel

read importmant in post #1

How did you specifically select Pixel 6a? Was this through Specter, or did you import a custom pif.prop file? If possible, could you share the Pixel 6a fingerprint configuration and the relevant PIF settings you used? No keybox/private key needed.

in specter wrench icon, Press "Choose Pif Device"

 

[Viking Hogar Strasni]

You said earlier

 Install in following order
Nomount remove module installation trace, that why it 1
Zygisk Next is second because lots of module require it
All other is free will
But in this order works

I will uninstall integrity box and update anykernel

read post #1, Spoiler "Importmant"
somentimes you must change something for continues work
I dont have time or wish to check infinit number of combination
Probably in next few days, weeks will be new version of AnyKernel by Wild James
ReSusFs today have 2 update
I dont know why and Im not interested why
Also, I dont know what module will attack google developers or their AI
Every time check all Spoilers or just Recomended