Sign-up Fraud Check: Email, Phone & IP Risk Score

Use when…

• You need to vet a new account sign-up before granting a trial, credit or free tier.
• A fraud, onboarding or growth agent needs one tool call returning pass / review / fail plus a 0-100 risk score.
• You want disposable-email, MX, phone validity/VoIP, IP country, Tor and VPN/datacenter checks without wiring each source.

Try this input

Copy-paste this JSON as the Actor input (it matches a successful run / the default schema):

{
  "requests": [
    {
      "email": "jane.doe@bbc.co.uk",
      "phone": "+44 20 7946 0958",
      "ip": "81.2.69.142",
      "country": "GB"
    }
  ]
}

Sample output (real run 2026-10-27)

One dataset item, shortened:

{
  "email": "jane.doe@bbc.co.uk",
  "phone": "+44 20 7946 0958",
  "ip": "81.2.69.142",
  "verdict": "pass",
  "risk_score": 0,
  "fail_reasons": [],
  "review_reasons": [],
  "pass_reasons": [
    "email domain accepts mail",
    "phone valid (GB, fixed_line)",
    "…"
  ],
  "evidence": {
    "email": {
      "email": "jane.doe@bbc.co.uk",
      "normalized": "jane.doe@bbc.co.uk",
      "valid_syntax": true,
      "domain": "bbc.co.uk",
      "…": "+12 more keys"
    },
    "phone": {
      "phone": "+44 20 7946 0958",
      "valid": true,
      "possible": true,
      "country_code": "GB",
      "…": "+11 more keys"
    },
    "ip": {
      "ip": "81.2.69.142",
      "host": null,
      "version": 4,
      "country_code": "GB",
      "…": "+14 more keys"
    }
  },
  "checked_at": "2026-10-27T19:40:42+00:00",
  "sources": {
    "disposable-email-domains": "CC0",
    "Google libphonenumber": "Apache 2.0",
    "DB-IP Lite": "CC BY 4.0 (IP Geolocation by DB-IP)",
    "Tor Project exit list": "public",
    "…": "+2 more keys"
  },
  "note": "Risk aid from public data (no SMTP probing, no paid IP-reputation feeds). VPNs on residential IPs may not be detected.",
  "…": "+1 more keys"
}

One call per new customer sign-up. Give email plus optional phone, ip and country; get back pass / review / fail, a 0-100 risk score and plain-English reasons.

What it checks

• Email: syntax, domain exists and accepts mail (MX), disposable domains, typo domains (did you mean), role addresses, very new email domains (RDAP).
• Phone: validity, line type (mobile, landline, VoIP...), country.
• IP: country, Tor exit nodes, hosting/datacenter networks (likely VPN, proxy or bot).
• Mismatches: phone vs IP vs stated country.

Quick start

Leave the default input (it is prefilled) and click Start:

{"requests": [{"email": "jane.doe@bbc.co.uk", "phone": "+44 20 7946 0958", "ip": "81.2.69.142", "country": "GB"}]}

Sample output (real run, 26 Oct 2026, default input)

email	phone	ip	verdict	risk_score	pass_reasons
jane.doe@bbc.co.uk	+44 20 7946 0958	81.2.69.142	pass	0	email domain accepts mail; phone valid (GB, fixed_line); IP located in United Kingdom

Each row also has fail_reasons, review_reasons, full evidence (email, phone, IP incl. ASN, hosting flag, Tor exit), sources, note and checked_at.

Use cases

• Score new sign-ups before giving free trials or credits.
• Flag disposable emails and datacenter IPs on referral or promo sign-ups.
• Route risky sign-ups to manual review instead of blocking everyone.
• Clean a list of existing accounts for obvious fakes.

Pricing

Pay per event: $0.02 per sign-up checked. No subscription.

FAQ

Does it send an email or ping the mailbox? No. There is no SMTP probing (unreliable and often treated as abuse).

Do I need any API keys? No. It uses free and open data only.

Can I check many sign-ups? Yes, put them all in requests.

Limits & failure modes

• No paid IP-reputation feeds: VPNs and proxies on residential IPs may not be detected.
• Email checks do not prove the mailbox exists or belongs to the person.
• IP location is a city-level estimate and can be wrong for mobile and corporate networks.
• Disposable-domain lists are never complete; brand-new throwaway domains can slip through.
• Verify before consequential decisions. This is an automated aid built from public data, not legal, credit, fraud or compliance advice. Check the evidence (and any sanctions match against the official list) before refusing, onboarding, paying or reporting anyone.

Last tested: 26 Oct 2026, run OK (default input, Apify cloud).

Sources and licences

disposable-email-domains (CC0), Google libphonenumber (Apache 2.0), IP Geolocation by DB-IP (CC BY 4.0), Tor Project exit list (public), RDAP and DNS (public).

Use from AI agents (MCP)

Add it to any MCP client via https://mcp.apify.com?actors=tudorlane/signup-check, or call the Apify API / run-sync endpoint.