For banks, insurers & partners
Stop scam payments before they leave your customers' accounts.
Every subscription trap, scam shop and fake site ends the same way: your customer pays, then calls you. Small Print steps in on the checkout page itself, in any app, before the card details go in. No customer data ever reaches us or you.
Why it matters to you
You pay for scams after the money has gone.
Your fraud tools see the payment. Small Print sees the page your customer is looking at, before anything is paid, and that page never leaves their phone.
What it does
The whole scam lifecycle, in one app.
Ways to work together
Three ways in.
Pilot
Offer Small Print to a customer group, such as over-65s or vulnerable-customer cases, for three months.
- Measured with anonymous impact counts: warnings, scams avoided, money protected
- Compare against your disputes for the same group
- No customer data shared, no integration needed
Co-branded app
"Protected by your bank, powered by Small Print" for your customers, with your support numbers in the cancel and recovery flows.
- Your brand on the warning and home screen
- Your bank's own numbers in "call your bank" steps
- Same privacy promise: nothing leaves the phone
Threat-intelligence feed
The Small Print warning list as a signed API feed, for your own fraud and payments controls.
- Human-reviewed entries with neutral labels
- Evidence log behind every entry, plus an appeals process
- Signed with ECDSA P-256 so it can't be tampered with
Safe to adopt
Built to pass due diligence.
Privacy by design
Detection runs entirely on the phone. Page text, messages and payments are never sent anywhere. The only optional network calls are a website address lookup, a list download and user-initiated reports.
Defensible decisions
No automatic blocking. Every listing has a named reviewer, a reason, a full snapshot in an append-only evidence log, and a public appeals route.
Engineered properly
Signed releases with obfuscated code, 60+ automated tests across detection, parsing and signing, Google Play policy compliance, and a UK-registered company: Zigazag Limited, no. 17378424.
For your engineers
The feed in one request.
Partners get an API key on request. The response is a signed envelope: verify sig over the exact payload string with our public key, then parse payload.
curl -H "x-api-key: sp_live_…" https://www.thesmallprint.app/api/feed
{ "payload": "{\"version\":12,\"generated_at\":\"2026-10-02T10:40:00Z\",
\"entries\":[{\"domain\":\"example-trap.com\",
\"label\":\"Flagged: deceptive subscription billing\",
\"severity\":\"block\",\"added_at\":\"...\"}]}",
"sig": "MEYCIQ…" } // ECDSA P-256 / SHA-256, base64 DER
Public key (SPKI, base64):
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE/qCwwD1+j2VOjOlJLu44DgZhCekSUiFQCBBoMDbGVzniCgzZH4qrGQminDn2X3Cb9YzftX2qOi8CL/kzbHQoGA==
Supports If-None-Match (ETag). Poll every few hours. Keep your last good copy if a signature ever fails to verify.
Let's talk.
A 30-minute call to see Small Print stop a live trap page, and decide whether a small pilot makes sense for your customers.