User Screening API: Pre-Onboarding Risk Check

Screen a user by name, DOB, email, phone, and IP before onboarding. Runs AML checks against PEP, OFAC, sanctions, and adverse media across 200+ countries and 42,800+ databases.

Request

[GET]

{{baseUrl}}api/v1/fraud/user

Parameter	Type	Description	Required
first_name *	string	First Name	required
last_name *	string	Last Name	required
middle_name	string	Middle Name	optional
date_of_birth *	string		required
email	string	Email	optional
phone	string	Phone No	optional
ip_address	string	IP Address	optional

Sample response

Response

{
  "entity": {
    "overall_risk_score": 80,
    "phone_check_result": {
      "account_details_registered": [
        "skype",
        "angelist",
        "instagram"
      ],
      "carrier": "T-MOBILE USA, INC",
      "country": "US",
      "disposable": false,
      "flags": [],
      "number": 16502969060,
      "score": 4,
      "type": "mobile",
      "valid": true
    },
    "aml_screening_result": [
      {
        "match_type": "Individual",
        "name": "John Asake Doe",
        "nameMatchScore": 80,
        "profileId": "WC2095906"
      }
    ],
    "email_check_result": {
      "account_details_registered": [
        "skype",
        "angelist",
        "instagram"
      ],
      "breach_details": {
        "first_breach": null,
        "haveibeenpwned_listed": false,
        "number_of_breaches": 0
      },
      "domain_details": {
        "accept_all": false,
        "created": "2004-09-27 18:06:20",
        "custom": true,
        "disposable": false,
        "dmarc_enforced": false,
        "domain": "example.com",
        "expires": "2023-09-27 18:06:20",
        "free": false,
        "registered": true,
        "registered_to": "NameFind LLC",
        "registrar_name": "GoDaddy.com, LLC",
        "spf_strict": false,
        "suspicious_tld": false,
        "tld": ".com",
        "updated": "2022-08-16 04:46:10",
        "valid_mx": false,
        "website_exists": true
      },
      "deliverable": false,
      "email": "[e-mail]",
      "score": 4,
      "type": "mobile",
      "valid": true
    },
    "ip_check_result": {
      "ip": "2.58.56.101",
      "blacklists": {
        "detections": 11,
        "engines_count": 85,
        "detection_rate": "13%"
      },
      "ip_details": {
        "reverse_dns": "powered.by.rdp.sh",
        "continent_code": "EU",
        "continent_name": "Europe",
        "country_code": "DE",
        "country_name": "Germany",
        "country_currency": "EUR",
        "country_calling_code": "49",
        "region_name": "Hamburg",
        "city_name": "Hamburg",
        "latitude": 53.575321197509766,
        "longitude": 10.015339851379395,
        "isp": "1337 Services GmbH",
        "asn": "AS210558"
      },
      "anonymity": {
        "is_proxy": false,
        "is_webproxy": false,
        "is_vpn": false,
        "is_hosting": false,
        "is_tor": true
      },
      "risk_score": {
        "result": 100
      }
    }
  },
  "uuid": "41f963a5-3d6b-41ec-aac8-bbc5247a4966"
}

Response Fields

Field	Type	Description
entity	object	Contains the full user screening result
entity.overall_risk_score	integer	Combined risk score from 0 (no risk) to 100 (highest risk) across all checks
entity.phone_check_result	object	Phone number risk assessment results
entity.phone_check_result.account_details_registered	array	List of online platforms where the phone number has registered accounts
entity.phone_check_result.carrier	string	Name of the telecom carrier for the phone number
entity.phone_check_result.country	string	ISO country code where the phone number is registered
entity.phone_check_result.disposable	boolean	true if the phone number is from a disposable or virtual phone service
entity.phone_check_result.flags	array	List of risk flags associated with the phone number
entity.phone_check_result.number	integer	The phone number that was checked
entity.phone_check_result.score	integer	Risk score for the phone number check
entity.phone_check_result.type	string	Line type (e.g., “mobile”, “landline”, “voip”)
entity.phone_check_result.valid	boolean	true if the phone number is valid and properly formatted
entity.aml_screening_result	array	List of AML (Anti-Money Laundering) screening matches
entity.aml_screening_result[].match_type	string	Type of match found (e.g., “Individual”, “Entity”)
entity.aml_screening_result[].name	string	Name of the matched individual or entity
entity.aml_screening_result[].nameMatchScore	integer	Similarity score between the input name and matched name (0–100)
entity.aml_screening_result[].profileId	string	Unique profile identifier for the matched record
entity.email_check_result	object	Email address risk assessment results
entity.email_check_result.account_details_registered	array	List of online platforms where the email has registered accounts
entity.email_check_result.breach_details	object	Data breach information for the email
entity.email_check_result.breach_details.first_breach	string/null	Date of the first known breach, or null if none found
entity.email_check_result.breach_details.haveibeenpwned_listed	boolean	true if the email appears in the Have I Been Pwned database
entity.email_check_result.breach_details.number_of_breaches	integer	Total number of known data breaches involving this email
entity.email_check_result.domain_details	object	Details about the email’s domain
entity.email_check_result.domain_details.accept_all	boolean	true if the mail server accepts all emails regardless of address
entity.email_check_result.domain_details.created	string	Domain creation date and time
entity.email_check_result.domain_details.custom	boolean	true if the email uses a custom domain (not a free provider)
entity.email_check_result.domain_details.disposable	boolean	true if the domain is a disposable or temporary email service
entity.email_check_result.domain_details.dmarc_enforced	boolean	true if the domain enforces DMARC authentication
entity.email_check_result.domain_details.domain	string	The domain part of the email address
entity.email_check_result.domain_details.expires	string	Domain expiration date and time
entity.email_check_result.domain_details.free	boolean	true if the email uses a free provider (e.g., Gmail, Yahoo)
entity.email_check_result.domain_details.registered	boolean	true if the domain is currently registered
entity.email_check_result.domain_details.registered_to	string	Name of the domain registrant
entity.email_check_result.domain_details.registrar_name	string	Name of the domain registrar
entity.email_check_result.domain_details.spf_strict	boolean	true if the domain has strict SPF records
entity.email_check_result.domain_details.suspicious_tld	boolean	true if the TLD is commonly associated with abuse
entity.email_check_result.domain_details.tld	string	Top-level domain of the email address
entity.email_check_result.domain_details.updated	string	Date the domain registration was last updated
entity.email_check_result.domain_details.valid_mx	boolean	true if the domain has valid mail exchange records
entity.email_check_result.domain_details.website_exists	boolean	true if the domain hosts an active website
entity.email_check_result.deliverable	boolean	true if the email address can receive messages
entity.email_check_result.email	string	The email address that was checked
entity.email_check_result.score	integer	Risk score for the email check
entity.email_check_result.type	string	Type of email account
entity.email_check_result.valid	boolean	true if the email address is valid
entity.ip_check_result	object	IP address risk assessment results
entity.ip_check_result.ip	string	The IP address that was checked
entity.ip_check_result.blacklists	object	Blacklist detection results
entity.ip_check_result.blacklists.detections	integer	Number of engines that flagged the IP
entity.ip_check_result.blacklists.engines_count	integer	Total number of threat intelligence engines queried
entity.ip_check_result.blacklists.detection_rate	string	Percentage of engines that flagged the IP
entity.ip_check_result.ip_details	object	Geolocation and network information for the IP
entity.ip_check_result.ip_details.reverse_dns	string	Reverse DNS hostname for the IP
entity.ip_check_result.ip_details.continent_code	string	Two-letter continent code
entity.ip_check_result.ip_details.continent_name	string	Full name of the continent
entity.ip_check_result.ip_details.country_code	string	ISO country code
entity.ip_check_result.ip_details.country_name	string	Full name of the country
entity.ip_check_result.ip_details.country_currency	string	Currency code of the country
entity.ip_check_result.ip_details.country_calling_code	string	International calling code for the country
entity.ip_check_result.ip_details.region_name	string	Name of the region or state
entity.ip_check_result.ip_details.city_name	string	Name of the city
entity.ip_check_result.ip_details.latitude	number	Geographic latitude coordinate
entity.ip_check_result.ip_details.longitude	number	Geographic longitude coordinate
entity.ip_check_result.ip_details.isp	string	Internet Service Provider name
entity.ip_check_result.ip_details.asn	string	Autonomous System Number
entity.ip_check_result.anonymity	object	Anonymity and proxy detection results
entity.ip_check_result.anonymity.is_proxy	boolean	true if the IP is a proxy server
entity.ip_check_result.anonymity.is_webproxy	boolean	true if the IP is a web-based proxy
entity.ip_check_result.anonymity.is_vpn	boolean	true if the IP is a VPN endpoint
entity.ip_check_result.anonymity.is_hosting	boolean	true if the IP belongs to a hosting or data center provider
entity.ip_check_result.anonymity.is_tor	boolean	true if the IP is a known Tor exit node
entity.ip_check_result.risk_score	object	IP risk assessment
entity.ip_check_result.risk_score.result	integer	Risk score from 0 (no risk) to 100 (highest risk)
uuid	string	Unique identifier for this screening request