Email Validate (Emailage)

---

Introduction

Email Validate is a service that provides fraud intelligence services using the email address (and, optionally, the IP address) as a key data point to generate a risk score and other data points which can be used to assess the risk of the email address and IP address.

Users can search by email address alone, or by a combination of email and IP address.

This service does not leave a credit search footprint.

The service accepts these properties for the request:

Property Name	Type	Length	Optional/Mandatory	Notes
Email	String	300	Mandatory
IP	String	40	Optional	IPv4

---

Risk Bands

An essential part of the service response is the risk band information.

When a call is made to Emailage the data intelligence is summarized into an easy-to-digest risk score. 

The scores range from 1-999: 1 being the lowest risk, and 999 being the highest. 

---

Risk Categories

Risk Band 6: 900-999 – Very High Risk

Transactions that land in this category are either confirmed fraud from our network, or associated with a high level of risky signals Emailage recommends these transactions to be manually reviewed or rejected.

Risk Band 5: 800-899 – High Risk

Typically, the queries in Risk Band 5 have been deemed risky due to; velocity patterns, signals from known Risky IP, or the transaction details reflect a history of Suspected Fraud on our network.

Risk Band 4: 601-799 – Correct Customer Record

Customers occasionally mistype, or misspell their email address, rendering them invalid or incorrect. These emails are reported in risk band 4. In most cases, this is a good customer who has simply entered their email incorrectly, so we recommend that you contact the customer to have them correct the information before proceeding.

Risk Band 3: 301-600 – Neutral Risk

When a transaction falls into this category, it simply means that we couldn’t find anything negative associated with that information, however, we were unable to find enough positive signals to push it into Risk Bands 1 or 2.

Risk Band 2: 101-300 – Minimal Risk

These transactions have been around for a year or two, have other positive signals associated with an IP, or another variable that is passed to us. These pose very little risk to you, and we advise that you consider approving them, based on the rest of the circumstances surrounding the transaction or customer.

Risk Band 1: 0-100 – Lowest Risk

Queries that land in this category, typically contain emails that have existed for at least 4 years, and have established a pattern of positive signals across our network. These are the customers we recommend considering putting through the fast track or auto-approving in your system.

---

Email Relevant Info (EAReasonID)

Another essential part of the response that will help to determine the interpretation of the result.

The EAReason provides relevant information to understand the Fraud Score. 

Please find below the codes for the possible EAReason values with explanations about each one:

Code	Definition
1 - Fraud Level X	Describes how many unique customers in the Emailage Network that have marked the email as Fraud. Examples: - Fraud Level 1: One customer has identified the email as Fraud - Fraud Level 3: Three customers have identified the email as Fraud
2 - Email does not exist / Email does not exist anymore	It has been confirmed that the email address does not exist or no longer exists.
3 - Domain does not exist	Domain is not found in registry.
4 - Risky Domain	Domains which have particularly high fraud rate. Emailage tracks all fraud that has taken place on a particular domain and is able to flag domains that are risky based on that data.
5 - Risky Country	Email owner location, domain location or IP location coming from a country on the list of risky countries. Risky countries are defined by the default Emailage list or has been customized by the customer.
6 - Risky Email Syntax	Certain email patterns that have been found to be associated to fraud based on Emailage Global Fraud Database.
7 - Numeric Email	Email address handle contains numeric email patterns.
8 - Limited History for Email	Not enough relevant information to determine fraud risk.
9 - Email Recently Created	Length of time that email has been in existence. Threshold for length of time is determined by Emailage machine learning algorithm and Global Fraud Database.
10 - Email linked to High Risk Account	Email address found to be connected with other account(s), social media or other, which have been determined to be high risk.
11 - Good Level X	Describes how many unique customers in the Emailage Network that have marked the email as Good. Examples: - Good Level 1: One customer has identified the email as Good - Good Level 3: Three customers have identified the email as Good
12 - Low Risk Domain	Domains which have particularly low fraud rate. Emailage tracks and remembers fraud that occurred on a particular domain; as a result certain domains are low risk.
13 - Email Created X Years Ago	Gives the number of years ago the email was created.
14 - Email Created at least X Years Ago	Gives the general number of years ago the email was created.
15 - Email Linked to Low Risk Account	Email address found to be connected with other account(s), social media or other, which have been determined to be low risk.
16 - Invalid Email Syntax	Email syntax was determined invalid based on standards for email addresses.
17 - Mailbox is Full	Email owner has exceeded allowable capacity of email service.
18 - Mailbox is Inactive	Email address is no longer active.
20 - Mailbox is Expired	Email address existed in the past and is no longer available.
21 - User Defined Risk Domain	Domains which have been marked as high risk by the company.
22 - User Defined Low Risk Domain	Domains which have been marked as low risk by the company.
23 - Velocity Level X	Measures the frequency of queries for a particular email in a short period of time. Velocity risk is determined by Emailage Machine Learning Algorithms trained on historical data and the Global Fraud Database. Example: - Velocity Level 4: Four unique customers have queried the email
24 - Risk Domain Category	Domains are grouped into broad categories, like banking, webmail, etc. Categories with high fraud rates will become “High Risk Categories”. Categories with low fraud rates will become “Low Risk Categories”.
25 - Low Risk Domain Category	Domain categories which have particularly low fraud rates. One example would be government domains where emails are harder to obtain.
26 - High Risk Email Account	Email has high probability of being associated to fraud due to multiple risk factors.
27 - Email Created at least X Months Ago	The approximate number of months ago the email was created.
28 - Valid Email From X Country Domain	Indicates that the email is valid and the country of the domain.
29 - Valid Domain From X Country	Indicates that the domain is valid and the country of the domain.
30 - Potentially Breached Email	Email has been identified as high risk due to email or email and password exposure / breach.
31 - Fraud Emails Linked X	**No Longer Used
32 - Good Email Linked Level X	**No Longer Used
33 - Fraud IP Level X	**No Longer Used
34 - Good IP Level X	**No Longer Used
35 - Risky Proxy IP	IP Address comes from a risky proxy.
36 - Risk IP Behavior	Unusual amount of traffic on a particular IP Address.
37 - Risky IP Country	IP Address location coming from a country on the list of risky countries. Risky IPs are defined by the default Emailage list or has been customized by the customer.
38 - IP Not Found	IP Address could not be found.
39 - IP Invalid Syntax Format	IP Address syntax was determined invalid based on standards for IP addresses.
40 - High Risk IP	IP Address is in Tor Network list
51 - Good Popularity	Email is found to have strong connections via social media or other sources.
52 - Risk Domain Category Review	Domain categories which have particularly high fraud rates.
53 - Tumbling Abuse	Different variation of the email which points to the same inbox was recently queried. Example:  If [e-mail] was queried before, then [e-mail] will be considered as tumbled
54 - Email Enumeration for Company	Multiple email addresses with similar handle patterns were recently queried by the same company. Example:  If [e-mail], [e-mail] queried before, then query [e-mail] will be considered as an enumerated email
55 - Email Enumeration for Industry	Multiple email addresses with similar handle patterns were recently queried by companies in the same industry.
56 - Creation Date Velocity	Based on our network activity, we have identified some fraud trends related to this email’s creation date.
61 - Customer Email not Provided	Emails not provided are sometimes marked with a dummy email so that they can be separately tracked.
62 - Risk Email Pattern	Certain email patterns that have been found to be associated to fraud based on Emailage Global Fraud Database.
63 - Suspected Fraud	Email was marked as Fraud with the "Suspected Fraud" type.
64 - Limited Email Information	Limited information could be found for the queried email.
65 - Domain Recently Created	Length of time that domain has been in existence. Threshold for length of time is determined by Emailage machine learning algorithm and Global Fraud Database.
66 - Velocity Other	High velocity of email address usage stated by external data providers.
67 - Valid Email From Domain	Email exists and is associated to the domain provided.
68 - Valid Domain	Domain Exists
101 - Low Risk Email Domain for Company	Email domain exists in Risk Profile List with Low Risk at company level.
102 - Low Risk IP for Company	IP address exists in Risk Profile List with Low Risk at company level.
103 - Low Risk IP Geolocation for Company	IP address Geo location exists in Risk Profile List with Low Risk at company level.
104 - Low Risk Email Domain for Industry	Email domain exists in Risk Profile List with Low Risk at industry level.
105 - Low Risk IP for Industry	IP address exists in Risk Profile List with Low Risk at industry level.
106 - Low Risk IP Geolocation for Industry	IP address Geo location exists in Risk Profile List with Low Risk at industry level.
107 - Low Risk Email Domain for Network	Email domain exists in Risk Profile List with Low Risk at network level.
108 - Low Risk IP for Network	IP address exists in Risk Profile List with Low Risk at network level.
109 - Low Risk IP Geolocation for Network	IP address Geo location exists in Risk Profile List with Low Risk at network level.
110 - Very Low Risk Email Domain for Company	Email domain exists in Risk Profile List with Very Low Risk at company level.
111 - Very Low Risk IP for Company	IP address exists in Risk Profile List with Very Low Risk at company level.
112 - Very Low Risk IP Geolocation for Company	IP address Geo location exists in Risk Profile List with Very Low Risk at company level.
113 - Very Low Risk Email Domain for Industry	Email domain exists in Risk Profile List with Very Low Risk at industry level.
114 - Very Low Risk IP for Industry	IP address exists in Risk Profile List with Very Low Risk at industry level.
115 - Very Low Risk IP Geolocation for Industry	IP address Geo location exists in Risk Profile List with Very Low Risk at industry level.
116 - Very Low Risk Email Domain for Network	Email domain exists in Risk Profile List with Very Low Risk at network level.
117 - Very Low Risk IP for Network	IP address exists in Risk Profile List with Very Low Risk at network level.
118 - Very Low Risk IP Geolocation for Network	IP address Geo location exists in Risk Profile List with Very Low Risk at network level.
121 - High Risk Email Domain for Company	Email domain exists in Risk Profile List with High Risk at company level.
122 - High Risk IP for Company	IP address exists in Risk Profile List with High Risk at company level.
123 - High Risk IP Geolocation for Company	IP address Geo location exists in Risk Profile List with High Risk at company level.
124 - High Risk Email Domain for Industry	Email domain exists in Risk Profile List with High Risk at industry level.
125 - High Risk IP for Industry	IP address exists in Risk Profile List with High Risk at industry level.
126 - High Risk IP Geolocation for Industry	IP address Geo location exists in Risk Profile List with High Risk at industry level.
127 - High Risk Email Domain for Network	Email domain exists in Risk Profile List with High Risk at network level.
128 - High Risk IP for Network	IP address exists in Risk Profile List with High Risk at network level.
129 - High Risk IP Geolocation for Network	IP address Geo location exists in Risk Profile List with High Risk at network level.
130 - Very High Risk Email Domain for Company	Email domain exists in Risk Profile List with Very High Risk at company level.
131 - Very High Risk IP for Company	IP address exists in Risk Profile List with Very High Risk at company level.
132 - Very High Risk IP Geolocation for Company	IP address Geo location exists in Risk Profile List with Very High Risk at company level.
133 - Very High Risk Email Domain for Industry	Email domain exists in Risk Profile List with Very High Risk at industry level.
134 - Very High Risk IP for Industry	IP address exists in Risk Profile List with Very High Risk at industry level.
135 - Very High Risk IP Geolocation for Industry	IP address Geo location exists in Risk Profile List with Very High Risk on industry Level
136 - Very High Risk Email Domain for Network	Email domain exists in Risk Profile List with Very High Risk at network level.
137 - Very High Risk IP for Network	IP address exists in Risk Profile List with Very High Risk at network level.
138 - Very High Risk IP Geolocation for Network	IP address Geo location exists in Risk Profile List with Very High Risk at network level.
139 - High Risk Phone for Company	Phone exists in Risk Profile List with High Risk at company level.
140 - High Risk Ship Address for Company	Shipping Address exists in Risk Profile List with High Risk at company level.
141 - High Risk Phone for Industry	Phone exists in Risk Profile List with High Risk at industry level.
142 - High Risk Ship Address for Industry	Shipping Address exists in Risk Profile List with High Risk at industry level.
143 - High Risk Phone for Network	Phone exists in Risk Profile List with High Risk at network level.
144 - High Risk Ship Address for Network	Shipping Address exists in Risk Profile List with High Risk at network level.
145 - Very High Risk Phone for Company	Phone exists in Risk Profile List with Very High Risk at company level.
146 - Very High Risk Ship Address for Company	Shipping Address exists in Risk Profile List with Very High Risk at company level.
147 - Very High Risk Phone for Industry	Phone exists in Risk Profile List with Very High Risk at industry level.
148 - Very High Risk Ship Address for Industry	Shipping Address exists in Risk Profile List with Very High Risk at industry level.
149 - Very High Risk Phone for Network	Phone exists in Risk Profile List with Very High Risk at network level.
150 - Very High Risk Ship Address for Network	Shipping Address exists in Risk Profile List with Very High Risk at network level.
151 - High Risk Bill Address For Company	Billing Address exists in Risk Profile List with High Risk at company level.
152 - High Risk Customer ID For Company	Customer ID exists in Risk Profile List with High Risk at company level.
153 - High Risk Service Location For Company	Service Location exists in Risk Profile List with High Risk at company level.
154 - High Risk Bill Address For Industry	Billing Address exists in Risk Profile List with High Risk at industry level.
155 - High Risk Customer ID For Industry	Customer ID exists in Risk Profile List with High Risk at industry level.
156 - High Risk Service Location For Industry	Service Location exists in Risk Profile List with High Risk at industry level.
157 - High Risk Bill Address For Network	Billing Address exists in Risk Profile List with High Risk at network level.
158 - High Risk Customer ID For Network	Customer ID exists in Risk Profile List with High Risk at network level.
159 - High Risk Service Location For Network	Service Location exists in Risk Profile List with High Risk at network level.
160 - Very High Risk Bill Address For Company	Billing Address exists in Risk Profile List with Very High Risk at company level.
161 - Very High Risk Customer ID For Company	Customer ID exists in Risk Profile List with Very High Risk at company level.
162 - Very High Risk Service Location For Company	Service Location exists in Risk Profile List with Very High Risk at company level.
163 - Very High Risk Bill Address For Industry	Billing Address exists in Risk Profile List with Very High Risk at industry level.
164 - Very High Risk Customer ID For Industry	Customer ID exists in Risk Profile List with Very High Risk at industry level.
165 - Very High Risk Service Location For Industry	Service Location exists in Risk Profile List with Very High Risk at industry level.
166 - Very High Risk Bill Address For Network	Billing Address exists in Risk Profile List with Very High Risk at network level.
167 - Very High Risk Customer ID For Network	Customer ID exists in Risk Profile List with Very High Risk at network level.
168 - Very High Risk Service Location For Network	Service Location exists in Risk Profile List with Very High Risk at network level.
169 - Very High Risk Mail Server for Company	Mail Server exists in Risk Profile List with Very High Risk at company level.
170 - Very High Risk Mail Server for Industry	Mail Server exists in Risk Profile List with Very High Risk at industry level.
171 - Very High Risk Mail Server for Network	Mail Server exists in Risk Profile List with Very High Risk at network level.
172 - High Risk Mail Server for Company	Mail Server exists in Risk Profile List with High Risk at company level.
173 - High Risk Mail Server for Industry	Mail Server exists in Risk Profile List with High Risk at industry level.
174 - High Risk Mail Server for Network	Mail Server exists in Risk Profile List with High Risk at network level.
180 - Invalid Regression Date	Regression Date submitted is outside of the acceptable range. Regression Date cannot be null and must be between 1980 and current date.
181 - Email Name Match	The name associated with the queried email matches the first and last names submitted.
182 - Phone Name Match	The name associated with the queried phone number matches the first and last names submitted.
183 - Very High Digital Confidence	The Overall Digital Confidence Score is very high for this query, and has been identified as low risk for fraudulent activities.
184 - Very Low Digital Confidence	This Overall Digital Confidence Score is very low for this query, and has been identified as very high risk for fraudulent activities.
185 - Low Digital Confidence	This Overall Digital Confidence Score is low for this query, and has been identified as high risk for fraudulent activities.
186 - Positive IP History	The IP address has positive history with the other digital inputs provided.  This query has been identified as low risk for fraudulent activities.
187 - Customer Opt Out	The owner of the email address has chosen to opt out of sharing their personal data under the California Consumer Privacy Act of 2018 (CCPA).
1001 - **Custom: EAReason will vary due to Custom Rules	This EAReason will be given whenever a Custom Rule has been created for your company.

---

For the technical information regarding this service, please check our dev docs article:

email-validate-010