Is it possible to show that the bootloader is locked and that it isn't using a custom recovery? Twrp installer has the ability to see what recovery version you have so it'd be safe to assume that Pay can also. An unlocked bootloader would trip safety net if I'm not mistaken.