Email Intelligence

Assess risk from a user's email address — domain validity, disposable-address detection, age, and online footprint — to spot fake and synthetic identities during onboarding.

---

Overview

Email intelligence evaluates an email address to gauge how likely it is to belong to a real, established person rather than a throwaway or fabricated identity. An email address is one of the first attributes a user provides, which makes it a valuable early signal.

A low-reputation email is a risk indicator, not proof of fraud. Legitimate users sometimes use new or privacy-focused addresses, so email signals work best combined with other checks.

What the check analyzes

The email address is evaluated for attributes such as:

• Validity and deliverability — Whether the domain exists, has valid mail (MX) records, and can plausibly receive mail.

• Disposable or temporary address detection — Whether the domain provides short-lived, throwaway inboxes commonly used to evade tracking.

• Domain type and age — Whether the domain is free webmail, corporate, or custom, and how long it has existed.

• Online footprint — Whether the address is associated with established accounts and activity across the web.

• Breach exposure and history — Whether the address has appeared in known data breaches or has prior history, which can indicate a real, aged identity.

Risk signals it surfaces

Signal	What it may indicate
Disposable or temporary domain	The user wants to remain untraceable or create a one-time account.
Recently registered domain	The address may have been created solely to pass this check.
No online footprint	The address has no history consistent with a real, active person.
Invalid or undeliverable address	The contact point is unusable, blocking later verification and recovery.
Mismatch with the claimed name	The address content is inconsistent with the identity being presented.

Benefits and use cases

• Synthetic-identity detection — Fabricated identities often rely on freshly created or disposable email addresses with no real-world history.

• Fake-account and spam prevention — Block bulk sign-ups that depend on throwaway inboxes.

• Cleaner contact data — Ensuring an address is valid and deliverable protects later steps that depend on email, such as one-time passcodes and account recovery.

• Lower friction for trusted users — An established, well-reputed address can support a faster onboarding path.

• Earlier, cheaper fraud filtering — Catching bad signups before document capture reduces verification cost and reviewer workload.

Where it fits in the journey

Email intelligence is typically applied as soon as the address is collected, often before document verification, so high-risk applicants can be filtered, challenged, or routed to manual review early.