Vet a signup before it costs you.

Chain five checks into one gate that scores every new registration — real email, not disposable, valid phone, and an IP that isn't hiding behind a VPN.

Get an API key→Browse all APIs

5-step workflow

56 crTotal cost per run, across 5 APIs

Email Validator20 cr
Disposable Email Checker6 cr
Phone Number Validator10 cr
IP Lookup10 cr
VPN Proxy Detector10 cr

The problem

Fake and throwaway signups pollute your metrics, burn free-tier resources, and hide fraud. Catching them after the fact is expensive; catching them at the door is a few API calls.

What you get

A single allow / review / block verdict you can compute at registration, before you ever send a welcome email.

The workflow

How the calls chain together

Every response below is a live sample from the actual API — nothing mocked.

Email ValidatorGET /v1/emailvalidator20 cr

Validate the email

Confirm the address is real, well-formed, and has live mail records — and flag free providers.

isValidtrueisMxValidtrueisFreeEmailfalse

Sample response

{
  "email": "support@myspace.com",
  "domain": "myspace.com",
  "username": "support",
  "isRegexValid": true,
  "hasTypo": false,
  "isMxValid": true,
  "isValid": true,
  "isFreeEmail": false,
  "isCompanyEmail": true,
  "isDisposable": false,
  "isRoleAccount": true,
  "mxRecord": "mxa-00ac0e01.gslb.pphosted.com",
  "isNullMx": false,
  "canReceiveMail": true,
  "hasSpf": true,
  "hasDmarc": true,
  "isSubaddressed": false,
  "normalizedEmail": "support@myspace.com",
  "suggestedCorrection": null,
  "mailProvider": "Proofpoint",
  "isSecurityGateway": true,
  "riskScore": 10,
  "riskLevel": "low"
}

↓ passes the email domain to the next step

Disposable Email CheckerGET /v1/emaildisposablechecker6 cr

Rule out throwaways

Check the domain against a database of disposable and temporary email providers.

isDisposablefalsedomainmyspace.com

Sample response

{
  "isDisposable": false,
  "email": "support@myspace.com",
  "domain": "myspace.com",
  "isRelay": false,
  "relayService": null,
  "isDisposableMx": false
}

↓ passes a clean-domain signal to the next step

Phone Number ValidatorGET /v1/phonenumbervalidator10 cr

Verify the phone

Validate format and country, and confirm it's a real, reachable line type.

isMobiletruetypefixed_line_or_mobile

Sample response

{
  "country": "US",
  "detectedCountry": "US",
  "countryName": "United States",
  "countrycode": 1,
  "numberNational": 8165551017,
  "extension": null,
  "isValid": true,
  "isMobile": true,
  "isVoip": false,
  "isDisposable": false,
  "type": "fixed_line_or_mobile",
  "isValidNumber": true,
  "nationalSignificantNumber": "8165551017",
  "location": "Missouri",
  "carrier": null,
  "timezones": [
    "America/Chicago"
  ],
  "formatted": {
    "international": "+1 816-555-1017",
    "national": "(816) 555-1017",
    "rfc": "tel:+1-816-555-1017",
    "e164": "+18165551017"
  },
  "riskScore": 0,
  "riskLevel": "low"
}

↓ passes a verified contact to the next step

IP LookupGET /v1/iplookup10 cr

Locate the IP

Resolve the signup IP to a country and city to sanity-check against the stated location.

countryNameUnited StatescityLincoln

Sample response

{
  "ip": "173.172.81.20",
  "country": "US",
  "countryName": "United States",
  "region": "NE",
  "regionName": "Nebraska",
  "city": "Lincoln",
  "continent": "NA",
  "continentName": "North America",
  "timezone": "America/Chicago",
  "coordinates": [
    40.7579,
    -96.6962
  ],
  "postalCode": "68512",
  "accuracyRadius": 20,
  "isEU": false,
  "asn": "AS11427",
  "asnName": "TWC-11427-TEXAS",
  "ipVersion": 4,
  "isPublic": true,
  "reservedType": null,
  "countryCode3": "USA",
  "capital": "Washington D.C.",
  "callingCode": "+1",
  "currency": {
    "code": "USD",
    "name": "United States dollar",
    "symbol": "$"
  },
  "languages": [
    "English"
  ],
  "flag": "🇺🇸",
  "tld": ".us",
  "utcOffset": "-05:00",
  "localTime": "2026-10-26T20:28:33-05:00",
  "isDst": true,
  "hostname": "syn-173-172-081-020.res.spectrum.com"
}

↓ passes the visitor's IP to the next step

VPN Proxy DetectorGET /v1/vpndetector10 cr

Check for evasion

Detect whether the IP is a VPN, proxy, or datacenter — a common fraud signal.

is_vpnfalserisk_levelModerate

Sample response

{
  "ip": "103.62.49.210",
  "is_vpn": false,
  "is_datacenter": true,
  "is_tor": false,
  "is_relay": false,
  "is_public": true,
  "asn": "AS137409",
  "asn_name": "GSLNETWORKS-AS-AP GSL Networks Pty LTD",
  "hosting_provider": null,
  "checked_on": "2026-10-26",
  "risk_level": "Moderate",
  "threat_level": "Low"
}

Recipe questions.

What to know before you wire it up.

Talk to the team →

How many credits does one signup check cost?

It's the sum of the steps you run — in this recipe, email validation, disposable check, phone validation, IP lookup, and VPN detection. You can drop steps you don't need to lower the cost per signup.

Can I run only some of these checks?

Yes. Each API is independent, so you can start with just email + disposable detection and add phone or IP checks as your fraud needs grow.

Is this enough to stop all fraud?

No single gate is, but combining identity, contact, and network signals catches the large majority of low-effort fake signups cheaply, so your heavier review is reserved for genuinely ambiguous cases.

Vet a signup before it costs you.

How the calls chain together

Validate the email

Rule out throwaways

Verify the phone

Locate the IP

Check for evasion

Recipe questions.

Cook this in an afternoon. Every API in this recipe shares one key, one response shape, and one bill.

Swap in your own APIs