[Magisk] pndwal:
@brambles1234, @Nekromantik, @cescman, others searching, here's a little Summary / Guide:

Current fixes needed for Google Pay / Wallet

These days we need passing deviceIntegrity in new Play Integrity API. (Don't worry about strong integrity; few if any apps will use this at present as that would exclude users/customers using any device launched with Android 7 or earlier even if on latest Android as well as a number of newer devices with broken keymaster implementations.) Nb. While Safety net API is already depreciated, it's attestation must all be passing and Evaluation type showing BASIC for PI deviceIntegrity to pass since the same signals (plus more) are used by PI...

To check these, use YASNAC (S/N) and Play Integrity API Checker (PI) from Play Store...

Many devices passing S/N CTS Profile match, especially those running Android 11+, won't pass PI deviceIntegrity verdict with current official Universal SafetyNet Fix alone. @Displax's safetynet-fix-xxxx-MOD is the current solution:

https://xdaforums.com/t/magisk-module-universal-safetynet-fix-2-3-1.4217823/post-87198517

- See my notes in post above for technical details, incl. why this solution also negates the need for setting a fingerprint in MagiskHide Props Config module for ROMs not passing CTS Profile match (China region, Beta, Developer, many custom ROMS)...

- Also note Usage: Delete/disable/reset MHPC (if installed / spoofing fingerprint).

- Note that Zygisk should be enabled and working, and only Google Pay/Wallet needs to be in denylist whether enforced or disabled with Shamiko etc active; no need for Play Store, Google Play Services processes etc when using any Zygisk-USNF builds...

Once PI deviceIntegrity is restored / passing, Google Pay/Wallet security requirements may pass again after some days (could take a week!) if simply left... Clearing Google Play Services and Google Pay/Wallet data should fix this immediately but you will need to set up cards again... Nb. Be sure to reboot immediately after clearing Google Pay/Wallet data (before opening app) to avoid issues (eg. app works but Activity list fails to populate).

Clearing Play Store data may be needed to restore Play Protect 'Device is certified' in Play Store Settings, About... This will affect whether Google Pay and other apps calling S/N or PI APIs appear in the Store...

Related Issues:

A number of users have experienced

contactless payment failure with Google Pay / Wallet stating "Your phone does not meet the security requirements"

irrespective of SafetyNet or Play Integrity status. (Several of us experienced this suddenly, and it predated both new Wallet upgrade an Play Integrity implementation.)...

Further, in tackling this I experienced two issues restoring a working setup;

- Issue where '

Google Pay/Wallet is currently updating' fails to complete

, and

- After restoring app,

Activity list fails to populate

.

I put steps to fix these here:

Initial fix:

https://xdaforums.com/t/...agisk-discussion-thread.3906703/post-86981221

Resolved Activity list won't populate:

https://xdaforums.com/t/...agisk-discussion-thread.3906703/post-86991951

Summary (scroll to 'In short...'):

https://xdaforums.com/t/...agisk-discussion-thread.3906703/post-86992241

Hope this helps those concerned. 🤠 PW