Sender Registry Signals API

Stop fake signups before they happen.

One API call at registration checks an email address and IP against the network: disposable email, Tor exit node, risky top-level domain, and senders our network has confirmed as bulk or malicious. Clean data at the front door.

Start free Read the docs

100 checks a month free. No card needed.

GET /api/v1/check?email=foo@mailinator.com&ip=185.220.101.1
200 OK
{
  "disposable":        true,
  "tor_exit":          true,
  "risky_tld":         false,
  "bulk_sender":       { "flagged": false },
  "known_malicious":   { "flagged": false },
  "sentinel":          { "flagged": false },
  "ip_reputation":     { "flagged": true, "sources_agreeing": 4 },
  "domain_reputation": { "flagged": false },
  "spoofable":         { "spoofable": false, "grade": "A", "spf": "strict", "dmarc": "reject" },
  "mx":                { "valid": true, "reason": "mx_found" },
  "role_account":      { "flagged": false }
}

Eleven signals, one request.

One call returns all eleven, grouped below by what you send us. Scoped keys shown once, a live usage view, and an honest answer for every signal.

From an email address

What the address itself looks like, then what the network already knows about it.

Free

Disposable email

Throwaway and temporary email domains, from a list refreshed continuously.

Starter

Risky TLD

Emails on top-level domains disproportionately used for scams.

Starter

Role account

Shared mailboxes like info@, and send-only addresses like noreply@, returned as separate categories.

Growth

Bulk-sender reputation

Senders multiple independent organisations have flagged as unwanted bulk mail, with corroboration counts.

Growth

Known-malicious reputation

Senders and domains our network has confirmed as malicious. Intelligence you cannot get from a free list.

From an IP address

Where the request came from, from the public lists through to our own traps.

Free

Tor exit node

IP addresses exiting the Tor network, a common signal for anonymous abuse.

Starter

IP reputation

IP addresses on multiple independent abuse blocklists, returned with how many sources agree.

Growth

Sentinel Network

IP addresses our own network of decoy-trapped sites has caught in the act, before they reach any public list.

From a domain

Live DNS, cached for 24 hours.

Free

Domain spoofability

Whether a domain can be impersonated: weak or missing SPF and DMARC, with its A to F grade.

Starter

Mail deliverability

Whether the domain can receive email at all. Catches typos and fabricated domains before they reach your database.

Starter

Domain reputation

Whether the domain has been reported as a scam site, and how long it has been listed.

Fraud payee check

Check a payee before money moves.

One more endpoint answers a different question: is this bank account, crypto wallet, phone number or payment handle a network-confirmed fraud money target? Verify a payee inside your own payment or onboarding flow, before the money leaves. No-store: the value is hashed and discarded, and the response bands the count so it never fingerprints one source. Growth and above.

Read the payee-check reference →

POST /api/v1/payee-check
{ "value": "GB29 NWBK 6016 1331 9268 19",
  "type": "bank_account" }
200 OK
{
  "flagged": true,
  "status": "confirmed",
  "entity_type": "bank_account",
  "fraud_sightings": "2-5",
  "first_seen": "2026-08-21"
}

Simple, usage-based pricing.

Start free. Move up a tier for more signals and more checks. Save 20% paid annually.

Free

Get started. No card needed.

Free

100 checks / month

  • Disposable email check
  • Tor exit IP check
  • Domain spoofability check
Start free

Starter

For a small app or side project.

£25 / $32 per month
Save 20% annually: £240 / $307 per year

1,500 checks / month

  • Everything in Free
  • IP reputation check
  • Domain reputation check
  • Mail deliverability check
  • Role account detection
  • Risky TLD check
Start free
Most popular

Growth

Network reputation, where the real value is.

£79 / $99 per month
Save 20% annually: £758 / $950 per year

15,000 checks / month

  • Everything in Starter
  • Bulk-sender reputation
  • Known-malicious reputation
  • Sentinel Network intelligence
Start free

Scale

High volume for production traffic.

£199 / $249 per month
Save 20% annually: £1910 / $2390 per year

150,000 checks / month

  • Everything in Growth
  • Higher rate limit
  • Priority email support
Start free

Already a Sender Registry customer? Integrate your account.

Query your own intelligence, submit reports, and receive webhooks with the account API included in your plan.

Registry & assessment API

Look up domains, senders and URLs, retrieve your assessments and campaigns, and submit reports programmatically.

Webhooks with delivery history

Choose the events you want, test before relying on them, and see every delivery attempt with its response status and automatic retries.

The same evidence, not a stripped model

Risk, Confidence and Network Confirmation as separate fields, plain-English summaries, and related-object references.

Not a developer? See Sender Registry plans.