Products
Eight capabilities behind one API key and one consistent response shape: a 0–100 risk score, an allow / review / block verdict, and the signals that produced it. Use one endpoint or all of them — the same key works everywhere, and the free tier covers every product.
Unified Signup Score
Every signal, one verdict, one call.
Send whatever you have from a signup and get a single 0–100 score with an allow / review / block verdict, plus each component scored individually so you can see what drove it. This is the endpoint most integrations use, and the only one you need to start.
- Weighted score across all five signals
- Per-component breakdown, not a black box
- Top signals named in plain language
- One explicit block rule forces a block outright
- Partial input is fine — send what you have
IP Intelligence
Uncover risky addresses before they reach you.
Detects the anonymisation layer someone is hiding behind, and returns the geo and network context around it. Built on live Tor exit-node feeds, datacenter ASN ranges, published VPN and proxy ranges, and reputation gathered across the LayerCall network.
- Commercial VPN detection
- Proxy and residential-proxy egress
- Tor exit nodes (IPv4 and IPv6)
- Datacenter and hosting ASNs
- Country, city, ASN and ISP
- Abuse reputation across the network
Email Validation
Catch throwaway inboxes before they cost you.
Validates the address really exists and classifies what kind it is. Disposable domains are the single strongest predictor of free-trial abuse, and the list is refreshed continuously rather than shipped static.
- Disposable and temporary providers
- Live MX and mailbox verification
- Role accounts (info@, admin@, support@)
- Homograph and lookalike domains
- Typo correction (did-you-mean)
- Catch-all domain detection
Phone Validation
Validate any number worldwide, offline and instantly.
Checks a number against its country's actual numbering plan rather than merely counting digits, and identifies the line type. Runs on Google's libphonenumber metadata, so there is no carrier lookup fee and no network round trip.
- Real allocation, not just correct length
- VoIP and disposable numbers
- Premium-rate numbers
- Toll-free and shared-cost lines
- E.164 normalisation, 240+ countries
- NANP area-code allocation
Domain Intelligence
Age is the one thing a fraudster cannot fake.
Registration age, mail configuration and security posture for any domain. Fraud infrastructure is disposable by design, so it is almost always young — and age is the single signal an attacker can only wait out, never forge.
- Registration age via RDAP (ICANN official)
- Newly-registered domains
- MX, SPF and DMARC posture
- Disposable and risky TLDs
- Homograph and lookalike spoofs
- Registrar intelligence
Device Intelligence
Recognise the machine, not the address it hides behind.
A blocked fraudster switches to a VPN and a fresh disposable inbox — both free, both already caught by the other endpoints. What they do not change is the machine in front of them. Drop one script tag on your signup page to get a stable device id that survives incognito and cleared storage, because it uses no cookie and writes nothing to the device.
- Repeat devices across accounts
- Headless browsers and automation frameworks
- Bot probability, scored separately from risk
- Timezone that disagrees with the IP's country
- Device abuse history across the network
- Selenium, Puppeteer and Playwright markers
Custom Rules
Your lists always win.
Rules override the computed score outright — an allow forces 0 and a block forces 100 — and the response names the rule that fired, so a surprising verdict is never a mystery. Rule management calls are free and do not count against your quota.
- Allow your own office network and QA devices
- Block known bad actors permanently
- CIDR and ASN ranges, not just single values
- Block always beats allow on a conflict
- Bulk import from another provider's export
Fraud Reporting Network
Our own data, built from real fraud.
Report a value you caught committing fraud and it feeds the shared reputation network — so the next time anyone, including you, scores that value, it carries the history. This is data we own rather than licence: no third-party feeds, no stale lists. Reporting is free, because it makes the product better for everyone.
- First-seen and times-seen for every value
- Confirmed-fraud reports from distinct accounts
- Velocity — rate of appearance, not raw count
- Works across IP, email, phone, domain and device
Every product on every plan
Nothing is gated behind a tier. Plans differ only in how many lookups they include and what you pay beyond that — so you never discover mid-integration that the signal you need costs more.