SignCare

Email Fraud Check

1 endpoint · Core API

API is a powerful tool designed to detect and prevent email fraud and phishing attacks. It analyzes email addresses and associated metadata to identify potential threats and suspicious activities, safeguarding users, and organizations from cyber threats.

Benefits

  • 1. Proactive Threat Detection: Identifies email fraud attempts in real-time, preventing potential security breaches.
  • 2. Enhanced Security: Protects users' sensitive information and confidential data from phishing attacks and email scams.
  • 3. Cost Savings: Reduces the risk of financial losses associated with email fraud incidents.
  • 4. Compliance Assurance: Helps organizations maintain regulatory compliance by mitigating email fraud risks effectively.

What you can do

API designed to evaluate fraud and risk levels associated with email, domain, and IP address for enhanced security measures.

POST

/api/v1/email/fraud-check

#

Get Email Fraud Check details

docs.signcare.io/core/api/email/email-fraud-check/#post-api-v1-email-fraud-check

Headers

  • X-API-KEY
    stringrequired
    Your secret API key for the environment you are calling (Stage and Live use different keys).
  • X-API-APP-ID
    stringrequired
    The App ID issued together with the key.
  • Content-Type
    stringrequired
    application/json

Body parameters

application/json
  • email
    string (email)required
    Required. Email address to check for fraud risk. Must be a valid email address.
    minLength 1default support@signcare.io
  • ipAddress
    stringoptional
    Optional. IP address of the email owner, used for risk analysis (for example, 141.161.19.1).
    nullabledefault 141.161.19.1
  • firstName
    stringrequired
    Required. First name of the email account holder.
    minLength 1default John
  • lastName
    stringrequired
    Required. Last name of the email account holder.
    minLength 1default Doe
  • consent
    stringrequired
    Required. Consent of the email owner to perform the fraud check: Y or N (case-insensitive).
    minLength 1pattern ^[YyNn]{1}$default Y
  • request_id
    stringoptional
    Optional. Your own unique ID to track this request. A UUID is generated if omitted.
    nullable
Sample request body
{ "email": "support@signcare.io", "ipAddress": "141.161.19.1", "firstName": "John", "lastName": "Doe", "consent": "Y" }

Responses

200OK
  • success
    booleanoptional
    No description.
  • statusCode
    integer (int32)optional
    No description.
    default 200
  • message
    stringoptional
    No description.
    nullabledefault XXXXX
  • data
    array<object>optional
    No description.
    nullable
    Each item: 8 fields
    • emailOwnerDetails
      objectoptional
      Details about the owner of the email address.
      6 fields
      • email
        stringoptional
        Email address that was checked.
        nullable
      • name
        stringoptional
        Name associated with the email account.
        nullable
      • nameMatch
        stringoptional
        Indicates whether the provided name matches the email account name.
        nullable
      • company
        stringoptional
        Company associated with the email account owner.
        nullable
      • title
        stringoptional
        Job title of the email account owner.
        nullable
      • location
        stringoptional
        Geographic location of the email account owner.
        nullable
    • domainDetails
      objectoptional
      Details about the email's domain.
      6 fields
      • domainName
        stringoptional
        Domain name of the email address.
        nullable
      • domainCompany
        stringoptional
        Company that owns the domain.
        nullable
      • country
        stringoptional
        Country where the domain is registered.
        nullable
      • domainCountryName
        stringoptional
        Full name of the domain's registered country.
        nullable
      • domainCategory
        stringoptional
        Category classification of the domain (e.g., business, personal).
        nullable
      • domainCorporate
        stringoptional
        Indicates whether the domain is a corporate domain.
        nullable
    • socialMediaDetails
      objectoptional
      Social media presence details linked to the email address.
      3 fields
      • smlinks
        array<object>optional
        List of social media profile links associated with the email.
        nullable
        Each item: 2 fields
        • source
          stringoptional
          Name of the social media platform.
          nullable
        • link
          stringoptional
          URL of the social media profile.
          nullable
      • smfriends
        stringoptional
        Number of social media friends or connections found.
        nullable
      • image
        stringoptional
        Profile image URL from social media accounts.
        nullable
    • emailAndDomainValidationDetails
      objectoptional
      Validation details for the email address and its domain.
      13 fields
      • emailExists
        stringoptional
        Indicates whether the email address exists.
        nullable
      • domainAge
        stringoptional
        Age of the domain since registration.
        nullable
      • domainCreationDays
        stringoptional
        Number of days since the domain was created.
        nullable
      • emailAge
        stringoptional
        Age of the email address.
        nullable
      • emailCreationDays
        stringoptional
        Number of days since the email was created.
        nullable
      • firstVerificationDate
        stringoptional
        Date when the email was first verified.
        nullable
      • firstSeenDays
        stringoptional
        Number of days since the email was first seen.
        nullable
      • lastVerificationDate
        stringoptional
        Date when the email was last verified.
        nullable
      • totalHits
        stringoptional
        Total number of times the email has been queried.
        nullable
      • uniqueHits
        stringoptional
        Number of unique queries for the email.
        nullable
      • statusId
        stringoptional
        Status identifier code for the email validation.
        nullable
      • status
        stringoptional
        Descriptive validation status of the email.
        nullable
      • domainExists
        stringoptional
        Indicates whether the domain exists and is active.
        nullable
    • emailAndDomainRiskDetails
      objectoptional
      Risk assessment details for the email and its domain.
      16 fields
      • score
        stringoptional
        Overall fraud risk score.
        nullable
      • fraudRisk
        stringoptional
        Fraud risk classification.
        nullable
      • reasonId
        stringoptional
        Identifier for the reason behind the risk assessment.
        nullable
      • reason
        stringoptional
        Descriptive reason for the risk assessment.
        nullable
      • adviceId
        stringoptional
        Identifier for the recommended action.
        nullable
      • advice
        stringoptional
        Recommended action based on the fraud risk analysis.
        nullable
      • riskBandId
        stringoptional
        Identifier for the risk band level.
        nullable
      • riskBand
        stringoptional
        Risk band classification (e.g., low, medium, high).
        nullable
      • sourceIndustry
        stringoptional
        Industry source of the fraud risk data.
        nullable
      • fraudType
        stringoptional
        Type of fraud detected.
        nullable
      • lastFlaggedOn
        stringoptional
        Date when the email was last flagged for fraud.
        nullable
      • domainRiskLevelId
        stringoptional
        Identifier for the domain risk level.
        nullable
      • domainRiskLevel
        stringoptional
        Risk level classification of the domain.
        nullable
      • domainRiskLevelInfoId
        stringoptional
        Identifier for the domain risk level information category.
        nullable
      • domainRiskLevelInfo
        stringoptional
        Descriptive information about the domain risk level.
        nullable
      • domainRiskCountry
        stringoptional
        Country associated with the domain risk assessment.
        nullable
    • ipDetails
      objectoptional
      IP address details and associated risk indicators.
      10 fields
      • ipAddress
        stringoptional
        IP address that was analyzed.
        nullable
      • ipReputation
        stringoptional
        Reputation score or classification of the IP address.
        nullable
      • ipAnonymousDetected
        stringoptional
        Indicates whether the IP is detected as anonymous (e.g., VPN, Tor).
        nullable
      • ipProxyType
        stringoptional
        Type of proxy if the IP is using one.
        nullable
      • ipProxyDescription
        stringoptional
        Description of the proxy associated with the IP.
        nullable
      • ipIsp
        stringoptional
        Internet Service Provider of the IP address.
        nullable
      • ipOrg
        stringoptional
        Organization that owns the IP address.
        nullable
      • ipUserType
        stringoptional
        Type of user associated with the IP (e.g., residential, commercial).
        nullable
      • ipNetSpeedCell
        stringoptional
        Network speed classification of the IP (e.g., broadband, cellular).
        nullable
      • ipCorporateProxy
        stringoptional
        Indicates whether the IP is a corporate proxy.
        nullable
    • ipLocationDetails
      objectoptional
      Geographic location details derived from the IP address.
      8 fields
      • ipLatitude
        stringoptional
        Latitude of the IP address location.
        nullable
      • ipLongitude
        stringoptional
        Longitude of the IP address location.
        nullable
      • ipRegion
        stringoptional
        Region or state of the IP address location.
        nullable
      • ipCity
        stringoptional
        City of the IP address location.
        nullable
      • ipRegionConf
        stringoptional
        Confidence level of the region detection.
        nullable
      • ipCityConf
        stringoptional
        Confidence level of the city detection.
        nullable
      • ipPostalCode
        stringoptional
        Postal code of the IP address location.
        nullable
      • ipPostalConf
        stringoptional
        Confidence level of the postal code detection.
        nullable
    • ipAndDeviceDetails
      objectoptional
      IP and device risk assessment details.
      6 fields
      • ipRiskLevelId
        stringoptional
        Identifier for the IP risk level.
        nullable
      • ipRiskLevel
        stringoptional
        Risk level classification of the IP address.
        nullable
      • ipRiskReasonId
        stringoptional
        Identifier for the IP risk reason.
        nullable
      • ipRiskReason
        stringoptional
        Descriptive reason for the IP risk assessment.
        nullable
      • ipRiskCountry
        stringoptional
        Country associated with the IP risk.
        nullable
      • deviceRiskLevel
        stringoptional
        Risk level classification of the device.
        nullable
  • messages
    array<string>optional
    No description.
    nullable
  • request_id
    stringoptional
    No description.
    nullable
  • isBillable
    booleanoptional
    Whether this request was charged: true if it was, false if not. Errors always show false. Flows that finish later (ITR Fetch, SHCIL eStamp, DigiLocker, eSign) show false here, because the charge is made when the result is ready. eSign charges each signer when they complete signing. DigiLocker deducts the credit when the link is created and refunds it automatically if the link expires before the user completes it.
Example
{ "success": false, "statusCode": 200, "message": "XXXXX", "data": [ { "emailOwnerDetails": { "email": "string", "name": "string", "nameMatch": "string", "company": "string", "title": "string", "location": "string" }, "domainDetails": { "domainName": "string", "domainCompany": "string", "country": "string", "domainCountryName": "string", "domainCategory": "string", "domainCorporate": "string" }, "socialMediaDetails": { "smlinks": [ { "source": "string", "link": "string" } ], "smfriends": "string", "image": "string" }, "emailAndDomainValidationDetails": { "emailExists": "string", "domainAge": "string", "domainCreationDays": "string", "emailAge": "string", "emailCreationDays": "string", "firstVerificationDate": "string", "firstSeenDays": "string", "lastVerificationDate": "string", "totalHits": "string", "uniqueHits": "string", "statusId": "string", "status": "string", "domainExists": "string" }, "emailAndDomainRiskDetails": { "score": "string", "fraudRisk": "string", "reasonId": "string", "reason": "string", "adviceId": "string", "advice": "string", "riskBandId": "string", "riskBand": "string", "sourceIndustry": "string", "fraudType": "string", "lastFlaggedOn": "string", "domainRiskLevelId": "string", "domainRiskLevel": "string", "domainRiskLevelInfoId": "string", "domainRiskLevelInfo": "string", "domainRiskCountry": "string" }, "ipDetails": { "ipAddress": "string", "ipReputation": "string", "ipAnonymousDetected": "string", "ipProxyType": "string", "ipProxyDescription": "string", "ipIsp": "string", "ipOrg": "string", "ipUserType": "string", "ipNetSpeedCell": "string", "ipCorporateProxy": "string" }, "ipLocationDetails": { "ipLatitude": "string", "ipLongitude": "string", "ipRegion": "string", "ipCity": "string", "ipRegionConf": "string", "ipCityConf": "string", "ipPostalCode": "string", "ipPostalConf": "string" }, "ipAndDeviceDetails": { "ipRiskLevelId": "string", "ipRiskLevel": "string", "ipRiskReasonId": "string", "ipRiskReason": "string", "ipRiskCountry": "string", "deviceRiskLevel": "string" } } ], "messages": [ "string" ], "request_id": "string", "isBillable": false }
400Bad Request
  • data
    objectoptional
    No description.
  • messages
    array<string>optional
    No description.
    nullable
  • request_id
    stringoptional
    No description.
    nullable
  • success
    booleanoptional
    No description.
    default false
  • message
    stringoptional
    No description.
    nullabledefault XXXXX
  • isBillable
    booleanoptional
    No description.
  • statusCode
    integer (int32)optional
    No description.
    default 400
Example
{ "data": {}, "messages": [ "string" ], "request_id": "string", "success": false, "message": "XXXXX", "isBillable": false, "statusCode": 400 }
401Unauthorized
  • data
    objectoptional
    No description.
  • messages
    array<string>optional
    No description.
    nullable
  • request_id
    stringoptional
    No description.
    nullable
  • success
    booleanoptional
    No description.
    default false
  • message
    stringoptional
    No description.
    nullabledefault XXXXX
  • isBillable
    booleanoptional
    No description.
  • statusCode
    integer (int32)optional
    No description.
    default 401
Example
{ "data": {}, "messages": [ "string" ], "request_id": "string", "success": false, "message": "XXXXX", "isBillable": false, "statusCode": 401 }
500Internal Server Error
  • data
    objectoptional
    No description.
  • messages
    array<string>optional
    No description.
    nullable
  • request_id
    stringoptional
    No description.
    nullable
  • success
    booleanoptional
    No description.
    default false
  • message
    stringoptional
    No description.
    nullabledefault XXXXX
  • isBillable
    booleanoptional
    No description.
  • statusCode
    integer (int32)optional
    No description.
    default 500
Example
{ "data": {}, "messages": [ "string" ], "request_id": "string", "success": false, "message": "XXXXX", "isBillable": false, "statusCode": 500 }
Code samplescurl · Node.js · Python
Stage: uat-ext.signcare.io
curl -X POST 'https://uat-ext.signcare.io/api/v1/email/fraud-check' \ -H 'X-API-KEY: YOUR_API_KEY' \ -H 'X-API-APP-ID: YOUR_APP_ID' \ -H 'Content-Type: application/json' \ -d '{ "email": "support@signcare.io", "ipAddress": "141.161.19.1", "firstName": "John", "lastName": "Doe", "consent": "Y" }'
All Email Verification pages