diff --git a/README.md b/README.md
index dd363de..30024d0 100644
--- a/README.md
+++ b/README.md
@@ -85,6 +85,8 @@ On start, lexipwn GUI will read the above tags into corresponding fields of the
 
 If you have altered the IMEI values in devinfo and then rebooted, the device will most probably report 000000000000000 for both IMEI numbers to `*#06#` and to the network. In order to fix this, you need to first boot into the factory mode (set the `bootmode` PS tag to `factory`, save the devinfo partition and reboot the phone), then press the "Fix IMEI CPSHA" button in the lexipwn GUI or run `lexipwn fiximeisha` in the CLI. Then you can (optionally) revert back to the normal boot mode and the new IMEIs will become visible upon reboot.
 
+**N.B.: in case cellular radio doesn't work after the CPSHA fix, it is advised to return from the factory mode back to normal first.**
+
 ### Randomizing IMEIs (CLI)
 
 Just run `lexipwn genimei [prefix]`. The prefix can be any combination from 0 to 14 digits. Without the prefix, the IMEI will be fully random. You can use the output to substitute into another command, e.g. `lexipwn setpsval imei2 $(lexipwn genimei)` which will fully randomize IMEI2 value.