Notification that payments from this device are not secure can take the owner by surprise at the store’s checkout at the most inopportune moment. This system error blocks Google Pay and Mi Pay services, making it impossible to conduct transactions through NFC. Google’s security system, known as SafetyNet or its newer version of the Play Integrity API, detects potential vulnerabilities in your gadget’s software.
Most often, the problem is changing system files or having superuser rights that were obtained earlier. Even if you didn't do complex manipulations, residual traces from unlocking the bootloader can trigger protection. Data security in modern smartphones is the first priority, so banking applications and payment systems react instantly to any deviations from the reference state of the software.
Don’t panic, as in most cases, the situation can be corrected by software methods without contacting the service center.You will need to consistently check the system settings, account status and the presence of hidden threats. Below we will discuss in detail all possible causes of the error and provide step-by-step instructions for their elimination.
Reasons to block payments on Xiaomi
The main reason Xiaomi reports that the device is unsafe is because of Root rights.Getting full access to the Android file system violates the integrity of the security, which automatically marks the phone as compromised. Even if you have already deleted the superuser rights, there may be traces in the system that continue to block the work. NFC-pay-off.
The second common reason is an unlocked bootloader: When trying to get root rights or install custom firmware, users often unlock Bootloader, which leaves a special flag in the system, banking applications scan this status at each start-up and block functionality if they see an open door to the system.
⚠️ Note: Using modified firmware or installing applications from unknown sources can permanently block the ability to use banking services on the device.
Also, the problem can be caused by installed modules Xposed or Magisk, which change the behavior of the operating system. Even if you use them to change the interface, the payment system regards this as interference with the operation of the OS. The presence of viruses or malware masquerading as system processes is also a critical risk factor.
SafetyNet and Play Integrity status check
Before you start taking action, you need to diagnose the current state of the security system, and for this, the best way to do this is to use specialized utilities such as AIDA64 or YASNAC. These applications will show whether your device passes integrity check and is certified by Google.
Run a check and look at the status of CtsProfileMatch, which means that if it's negative, it's seeing changes that don't meet standard security requirements, and then the usual cache cleaning methods won't help, and you'll need to do more in-depth tweaking.
What do the statuses of verification mean?
It is also important to check if the device is certified in the Google Play Store. To do this, open the store app, click on the profile icon and select Settings. In the About section, a green icon should be on that says Certified. If it says Not Certified, Google Play Protect will block the protected applications.
Disabling root rights and restoring the system
If the diagnostics show that superuser rights exist, they must be completely removed. For Magisk users, there is a built-in full delete feature. Go to Magisk, click on the delete button and select "Full delete." This action will return the system partition to its original state.
Once the superuser rights are removed, the phone needs to be rebooted. In some cases, deleting alone is not enough, as the /system partition may still have modified files. If simple deletion doesn't work, you'll need to flash stock recovery instead of custom TWRP.
☑️ Checklist to remove Root
It is worth considering that some banking applications can cache information about the presence of root rights. After they are deleted, it is recommended to clear the data of the banking applications themselves through the Settings menu → Apps → All applications. Find the desired application, click Clear Data and try to run it again.
Locking the bootloader (Bootloader)
Having an unlocked Bootloader is one of the most difficult problems to solve, as it requires a formal closing procedure. On Xiaomi smartphones, unlocking leaves a mark on Fuse memory that some banks can detect even after closing.
To lock you will need a computer, a USB cable and the official Mi Flash Tool. It is important to understand that the process of locking the bootloader requires stock firmware. If the phone has a custom build installed, locking can lead to a "brick" of the device, so be extremely careful.
| Action. | Risks. | Essential tools |
|---|---|---|
| Unlocking Bootloader | Erasure of all data | Mi Unlock Tool |
| Blocking Bootloader | Possible bootloop with custom firmware | Mi Flash Tool, Stock Firmware |
| Status check | No. | Fastboot Oem Device-info |
⚠️ Warning: Locking the bootloader on custom firmware will make it impossible to boot the system. MIUI/HyperOS.
The process is this: plug your phone in Fastboot mode (clambing the volume button when turned on), plug it into your PC and type a command into the console. If Device unlocked: true, the bootloader is open. The fastboot oem lock command is used to close, but only after you have installed the stock image.
💡
Before blocking the bootloader, be sure to make a full backup of the data to an external medium, as the process is guaranteed to remove all information from the internal storage.
NFC settings and Google security
Sometimes the problem isn't deep system changes, but the trivial NFC settings or Google's cache. First, check if the short-range contactless module is on. Go to Settings → Connection and Sharing → NFC and make sure the switch is active.
You also need to check your Google Pay and Wallet settings. Remove the card from the app and add it again. This will update the security tokens and may remove the lock. In some cases, clearing the Google Play cache helps: go to the app settings, find Google Play Services and click Clear Cache.
Remember to check the date and time on your device. Incorrect timestamps can cause security certificate errors, which will make the system consider the connection unsafe. Set automatic time synchronization through the network in the Settings menu → Additional → Date and time.
💡
In 80% of cases, the problem is solved by removing the Root rights or re-associating the bank card in the application after cleaning the cache of Google services.
What to do if nothing helps
If all of the above methods fail, the radical but effective way is to completely reset to factory settings (Wipe Data), which will delete all user data, applications and settings, returning the phone to the “out of the box” state.
Resets can be done via the Recovery Mode menu. Turn off the phone, press the power and volume button (the combination depends on the model), select a language and press Wipe Data. Once the phone is restarted, the probability of software conflicts will be reduced to zero.
In rare cases, the problem may be on the bank’s side: Some financial institutions block devices with certain versions of Android or MIUI firmware. Contact the bank and check if there are restrictions on your smartphone model.