For banks, insurers & partners

Stop scam payments before they leave your customers' accounts.

Every subscription trap, scam shop and fake site ends the same way: your customer pays, then calls you. Small Print steps in on the checkout page itself, in any app, before the card details go in. No customer data ever reaches us or you.

Why it matters to you

You pay for scams after the money has gone.

Scam reimbursementUK rules now make banks share the cost of authorised push payment scams, up to £85,000 per claim.
Disputes & chargebacksEvery "I didn't agree to a subscription" is a dispute, a call and an operations cost.
Consumer DutyThe FCA expects firms to act to prevent foreseeable harm, especially to customers in vulnerable circumstances.
TrustCustomers blame the bank, even when the scam happened on someone else's website.

Your fraud tools see the payment. Small Print sees the page your customer is looking at, before anything is paid, and that page never leaves their phone.

What it does

The whole scam lifecycle, in one app.

SpotSubscription traps, scam shops, fake bank & courier sites, scam texts, copycat apps.
StopA full-screen warning with the real yearly cost, before payment. Continuing takes a deliberate press-and-hold.
CatchIf they paid anyway: a small payment to a new merchant prompts "was that a trial?"
RecoverCancellation letters, follow-ups until confirmed, chargeback guidance.
LearnReports become a human-verified, signed warning list with a full evidence trail.

Ways to work together

Three ways in.

Pilot

Offer Small Print to a customer group, such as over-65s or vulnerable-customer cases, for three months.

  • Measured with anonymous impact counts: warnings, scams avoided, money protected
  • Compare against your disputes for the same group
  • No customer data shared, no integration needed

Co-branded app

"Protected by your bank, powered by Small Print" for your customers, with your support numbers in the cancel and recovery flows.

  • Your brand on the warning and home screen
  • Your bank's own numbers in "call your bank" steps
  • Same privacy promise: nothing leaves the phone

Threat-intelligence feed

The Small Print warning list as a signed API feed, for your own fraud and payments controls.

  • Human-reviewed entries with neutral labels
  • Evidence log behind every entry, plus an appeals process
  • Signed with ECDSA P-256 so it can't be tampered with

Safe to adopt

Built to pass due diligence.

Privacy by design

Detection runs entirely on the phone. Page text, messages and payments are never sent anywhere. The only optional network calls are a website address lookup, a list download and user-initiated reports.

Defensible decisions

No automatic blocking. Every listing has a named reviewer, a reason, a full snapshot in an append-only evidence log, and a public appeals route.

Engineered properly

Signed releases with obfuscated code, 60+ automated tests across detection, parsing and signing, Google Play policy compliance, and a UK-registered company: Zigazag Limited, no. 17378424.

For your engineers

The feed in one request.

Partners get an API key on request. The response is a signed envelope: verify sig over the exact payload string with our public key, then parse payload.

curl -H "x-api-key: sp_live_…" https://www.thesmallprint.app/api/feed

{ "payload": "{\"version\":12,\"generated_at\":\"2026-10-02T10:40:00Z\",
               \"entries\":[{\"domain\":\"example-trap.com\",
               \"label\":\"Flagged: deceptive subscription billing\",
               \"severity\":\"block\",\"added_at\":\"...\"}]}",
  "sig": "MEYCIQ…" }       // ECDSA P-256 / SHA-256, base64 DER

Public key (SPKI, base64):

MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE/qCwwD1+j2VOjOlJLu44DgZhCekSUiFQCBBoMDbGVzniCgzZH4qrGQminDn2X3Cb9YzftX2qOi8CL/kzbHQoGA==

Supports If-None-Match (ETag). Poll every few hours. Keep your last good copy if a signature ever fails to verify.

Let's talk.

A 30-minute call to see Small Print stop a live trap page, and decide whether a small pilot makes sense for your customers.