PayLens
Paste the bill-pay link you're about to click, and PayLens tells you — before you type a card number — whether it's the real biller or a fee-adding middleman.
PayLens
Paste the bill-pay link you're about to click, and PayLens tells you — before you type a card number — whether it's the real biller or a fee-adding middleman.
Problem
On August 17, 2026, the FTC settled with Doxo for $2.1 million over search ads that made a third-party bill-pay platform look like the biller's own portal, logos and all, while tacking on undisclosed "delivery fees" and enrolling people in a subscription they hadn't asked for. The FTC's own August 2026 consumer alert says this isn't a one-company problem: sponsored results for "pay [utility] bill" routinely lead somewhere other than the biller. Nobody checks a domain when they're trying to get a bill off their plate before the due date.
Target user
Someone paying a recurring bill — electric, phone, medical, toll, an auto loan — who starts from a search engine because they never bookmarked the actual portal. What they want, in that moment: before I type my card number, tell me if this is really the company's payment page or a middleman about to add a fee I didn't agree to.
MVP scope
- Link check: paste a URL or type the biller's name; match it against a curated registry of confirmed official payment domains, starting with major utilities, telecoms, hospital systems, tollways, and loan servicers.
- Known-middleman list: a tracked set of fee-adding third-party processors (Doxo and similar platforms), described by what they actually charge and how they present themselves, sourced from FTC filings and user reports — not accused of anything they weren't charged with.
- Unconfirmed-domain scoring: for anything not yet in the registry, a heuristic pass — domain age, brand-name mismatch, redirect chains, a "convenience fee" line appearing before checkout — that returns a caution score instead of a false all-clear.
- Three-state verdict: confirmed official, known middleman (with the real link, if we have it), or unconfirmed — no fourth option that quietly means "we don't know."
- Report button: one tap sends a new URL into a review queue so the registry grows from actual near-misses, not just the ones staff find.
- Saved billers: a returning user's confirmed list surfaces first, so the search-engine detour stops happening after the first payment.
Monetization
Freemium. Lookups and the registry itself stay free — that's the safety feature, and charging for it defeats the point. A $3/month tier adds a synced saved-biller vault across devices, due-date reminders that link only to verified pages, and shared access for a family or an aging parent's bills.
Why now
The Doxo settlement is eight days old as of this writing and hands the idea something rare: a federal complaint that spells out exactly how the deception worked, plus a companion consumer alert telling people what to watch for. Most scam patterns only have anecdotes behind them. This one has an FTC docket.
Risks & open questions
- Coverage gap at launch: thousands of local utilities, hospitals, and municipal billers exist. Most early searches will land on "unconfirmed," which is the opposite of reassuring for a tool whose whole pitch is certainty.
- Domain whack-a-mole: doppelganger sites can register new domains faster than a crowdsourced registry can catch them. This is a standing maintenance cost, not a one-time build.
- Will anyone bother? The FTC's own advice — scroll past the sponsored result — already solves this for free. PayLens has to be faster than that habit, not just more thorough.
- Legal exposure: calling a legitimate-but-unfamiliar third-party processor a "middleman" needs a real evidentiary bar, or PayLens becomes the next company getting a strongly worded letter.
- Doxo is still legal: the settlement bars misrepresentation, not the business itself. The registry has to describe what a processor charges, not imply it's a scam.
Next step
Build a 20-biller registry from the utilities and hospital systems named in local FTC complaints, then run a landing page against a handful of "pay [utility] bill" search terms to see if anyone pastes a link before they'd otherwise just pay.
Sources
- https://www.ftc.gov/news-events/news/press-releases/2026/08/bill-payment-firm-doxo-pay-21-million-settle-ftc-allegations-it-deceived-consumers-charged-them-add — FTC press release on the $2.1M Doxo settlement, the search-ad impersonation, and the undisclosed fees.
- https://www.paymentsdive.com/news/doxo-to-pay-21m-settlement/828154/ — corroborating settlement details, including the district court filing and the specific deceptive practices.