Email Check API

Use POST /email/check when you need mailbox-specific signals without running a full fraud assessment.

Endpoint

POST /email/check

Authentication is required unless your account has a public-use configuration.

Request

{
  "email": "user@example.com"
}

Response

{
  "email": "user@example.com",
  "domain": "example.com",
  "risk_score": 12,
  "risk_level": "low",
  "disposable": false,
  "free": false,
  "role": false,
  "domain_age_days": 10227,
  "suggested_action": "allow",
  "checked_at": "2026-05-18T12:00:00.000Z"
}

Signals

Signal	Meaning
disposable	The mailbox domain is associated with temporary inbox services.
free	The mailbox uses a common free email provider.
role	The local part appears to be a shared role account such as admin or support.
domain_age_days	Approximate age of the email domain when available.

For signup, login, checkout, and form decisions, prefer Fraud Decisioning so RequestGuard can combine email, IP, device, domain, and behavior signals.