Skip to main content

Email Verification

Email Verification enables you to assess the risk of email addresses provided by the end user. It is a fundamental risk check that analyzes an email address to provide an overall risk. It, adds email intelligence as a layer of defense to fraud prevention. It assesses risks by evaluating email address metadata points such as domain details, email details, and risk indicators.

Use Case

For those with onboarding and account login workflows, who wish to understand and assess the risks of a given email address.

Supported Credentials

The following values can be uploaded as Prepared Data. Alternatively, they can be extracted by an upstream capability in a workflow.

To use Prepared Data with email verification as a standalone capability use workflow key 10066

KeyTypeMandatoryDescription
Email addressStringyesEmail Address of Applicant
ipAddressStringnoThe IP address entered as a string. Either IPv4 or IPv6 format is accepted.

Example Prepared Data Body

{
"email": "martin***ng@gmail.com"
}

Response

Response data is available for transactions that include the risk signal. For information on transaction data see View or Retrieve Workflow Transactions.

Example Response

{
"workflow": {
"id": "203cf33c-77f8-443d-ac4d-ad52121f94f8",
"status": "PROCESSED",
"definitionKey": "10066",
"userReference": "abc",
"customerInternalReference": "dd"
},
"account": {
"id": "4363fce6-6197-46e6-9840-39cda6860c97"
},
"createdAt": "2025-05-08T12:45:43.518Z",
"startedAt": "2025-05-08T12:45:51.122Z",
"completedAt": "2025-05-08T12:45:53.801Z",
"credentials": [
{
"id": "a0c4d666-9718-49a0-a120-d259f1cea0a4",
"category": "DATA",
"parts": [
{
"classifier": "PREPARED_DATA",
"href": "https://retrieval.amer-1.jumio.ai/api/v1/accounts/4363fce6-6197-46e6-9840-39cda6860c97/credentials/a0c4d666-9718-49a0-a120-d259f1cea0a4/parts/PREPARED_DATA"
}
]
}
],
"decision": {
"type": "PASSED",
"details": {
"label": "TXN_PASSED"
},
"risk": {
"score": 0
}
},
"steps": {
"href": "https://retrieval.amer-1.jumio.ai/api/v1/accounts/4363fce6-6197-46e6-9840-39cda6860c97/workflow-executions/203cf33c-77f8-443d-ac4d-ad52121f94f8/steps"
},
"capabilities": {
"emailVerification": [
{
"id": "0790a7f1-5ebf-451a-98b1-d6ad60f2ffe0",
"credentials": [
{
"id": "a0c4d666-9718-49a0-a120-d259f1cea0a4",
"category": "DATA"
}
],
"decision": {
"type": "PASSED",
"details": {
"label": "LOW_RISK"
}
},
"data": {
"emailVerificationStatus": "ValidDomain",
"firstVerifiedAt": "2022-07-10T00:00:00.000Z",
"totalHits": "6",
"domainExists": true,
"domainName": "jumio.com",
"domainCompany": "Jumio",
"domainRiskLevel": "LOW",
"domainCreationDate": "2004-03-30T07:07:55.000Z",
"advice": "LOWER_FRAUD_RISK",
"domainCountry": "USA",
"domainCategory": "Technology",
"domainCorporate": true,
"reason": "EMAIL_CREATED_AT_LEAST_YEARS_AGO",
"emailDeterminedStatus": "Not Sure",
"countForReason": 2
},
}
]
},
}

Decision Details Labels

Details
Decision TypeLabelDescription
PASSEDLOW_RISKNo significant risk associated with the data.
REJECTEDHIGH_RISKHigh risk associated with the data.
WARNINGMEDIUM_RISKModerate risk associated with the data.
NOT_EXECUTEDPERMISSION_DENIEDCannot be executed because the required permissions or credentials are missing. Verify your API key and access rights.
NOT_EXECUTEDBAD_REQUESTMalformed or missing required parameters. Ensure that all mandatory fields are included and correctly formatted before retrying.
NOT_EXECUTEDPRECONDITION_NOT_FULFILLEDPreconditions were not met to process the data.
NOT_EXECUTEDTECHNICAL_ERRORThere was an error in processing the request.

Data

Details
ParameterTypeDescription
firstVerificationDatedate time (UTC)The oldest date found for records associated with the query. This date can also be considered the First Seen Date. If it's the first time an email is seen, the field will be set to the current date. Returned in UTC format.
emailVerificationStatusstringPossible values:
  • GeneralError - Unidentified error generated at the time of your request.
  • Certified - The email exists and we have its creation data.
  • Verified - The email exists but we are not sure when it was created.
  • EmailInexistent - The email does not exist but the domain does.
  • ValidDomain - The email domain exists, but we are not sure if the email address exists.
  • DomainInexistent - The domain doesn't exist.
  • Unknown - We are not sure whether the domain exists or not.
totalHitsintegerNumber of times the email address was queried through the risk signal or overall vendor platform in the last 7 days.
emailExistsbooleanIndicates whether or not the email address exists. Possible values:
  • true - The email address exists.
  • false - The email address does not exist.
domainExistsbooleanIndicates whether or not the email domain exists. Possible values:
  • true - The email domain exists.
  • false - The email domain does not exist.
domainNamestringThe email domain.
domainCompanystringOwner of the email domain.
domainRiskLevelstringPossible values:
  • VERY HIGH
  • HIGH
  • MEDIUM
  • LOW
  • VERY_LOW
domainCreationDatestringThe creation date of the domain. This field may be blank for some queries. Returned in UTC format: YYYY-MM-DDThh:mm:ssZ.
advicestringPossible values:
  • FRAUD_REVIEW - Review the email address for fraud risks.
  • UNCLEAR_RISK - The risk is unclear, further analysis needed.
  • LOWER_FRAUD_RISK - The email address has lower fraud risk.
  • MODERATE_FRAUD_RISK - The email address has moderate fraud risk.
  • DATA_REVIEW - The email requires data review.
domainCountrystringThe country that issued the domain. Can be any ISO 3166-1 alpha-3 country code, and XKX for Kosovo. Examples: USA, AUT, DEU, FRA.
domainCategorystringThe category of the domain. For example,
  • Email services
  • Email delivery services
  • Webmail
  • Disposable email services
  • Malware
  • Misspelled
  • Private domain
  • No content found
  • Not available
  • Not loading
  • Paid webmail, etc.
domainCorporatebooleanIndicates if the domain is corporate. Possible values:
  • true - The domain is corporate.
  • false - The domain is not corporate.
reasonstringRefer the table below
emailDeterminedStatusstringUncertainty in determining whether the email exists. This field is included only when the emailExists field has the value Not Sure. Possible values: Not Sure
domainDeterminedStatusstringUncertainty in determining whether the domain exists. This field is included only when the domainExists field has the value Not Sure. Possible values: Not Sure

Reason Type

Reason Type
Reason TypeDescription
FRAUD_LEVELNumber of unique customers in the Emailage Network who marked the email as fraud.
EMAIL_DOES_NOT_EXIST_EMAIL_DOES_NOT_EXIST_ANYMOREThe email address does not exist or no longer exists.
DOMAIN_DOES_NOT_EXISTDomain is not found in registry.
RISKY_DOMAINDomain has a high fraud rate.
RISKY_COUNTRYEmail owner, domain, or IP location originates from a high-risk country.
RISKY_EMAIL_SYNTAXEmail pattern is known to be associated with fraud.
NUMERIC_EMAILEmail handle contains numeric patterns, often seen in fraudulent emails.
LIMITED_HISTORY_FOR_EMAILInsufficient historical data to determine fraud risk.
EMAIL_RECENTLY_CREATEDEmail was created recently (determined by machine learning).
EMAIL_LINKED_TO_HIGH_RISK_ACCOUNTEmail is associated with high-risk accounts.
GOOD_LEVELNumber of unique customers who marked the email as good.
LOW_RISK_DOMAINDomain has a low fraud rate.
EMAIL_CREATED_YEARS_AGOEmail creation timestamp provided in years.
EMAIL_CREATED_AT_LEAST_YEARS_AGOApproximate number of years since email creation.
EMAIL_LINKED_TO_LOW_RISK_ACCOUNTEmail is associated with low-risk accounts.
INVALID_EMAIL_SYNTAXEmail format is syntactically incorrect.
MAILBOX_IS_FULLMailbox has reached its storage limit.
MAILBOX_IS_INACTIVEEmail address is no longer active.
MAILBOX_IS_EXPIREDEmail existed previously but is now expired.
USER_DEFINED_RISK_DOMAINDomain marked as high-risk by the client/company.
USER_DEFINED_LOW_RISK_DOMAINDomain marked as low-risk by the client/company.
VELOCITY_LEVELHigh query frequency for the email in a short period.
RISK_DOMAIN_CATEGORYDomain falls under high-risk category (e.g., webmail, banking).
LOW_RISK_DOMAIN_CATEGORYDomain falls under a low-risk category.
HIGH_RISK_EMAIL_ACCOUNTEmail has a high probability of fraud association.
EMAIL_CREATED_AT_LEAST_MONTHS_AGOApproximate number of months since email creation.
POTENTIALLY_BREACHED_EMAILEmail was exposed in a known breach.
GOOD_POPULARITYEmail has positive associations via social or public sources.
RISK_DOMAIN_CATEGORY_REVIEWDomain category has a high fraud rate.
TUMBLING_ABUSESlight email variations suggest potential abuse (e.g., a.bc@gmail.com vs ab.c@gmail.com).
EMAIL_ENUMERATION_FOR_COMPANYMultiple similar email handles were queried by the same company.
EMAIL_ENUMERATION_FOR_INDUSTRYMultiple similar email handles were queried by companies in the same industry.
CREATION_DATE_VELOCITYEmail creation dates show suspicious timing patterns across the network.
CUSTOMER_EMAIL_NOT_PROVIDEDNo customer email provided; a dummy email is used for processing.
RISK_EMAIL_PATTERNEmail follows a pattern associated with fraud per global risk analysis.
SUSPECTED_FRAUDEmail explicitly marked as "Suspected Fraud."
LIMITED_EMAIL_INFORMATIONVery little information available about the email.
DOMAIN_RECENTLY_CREATEDDomain was registered recently, suggesting potential risk.
VELOCITY_OTHERHigh velocity of usage flagged by external sources.
VALID_EMAIL_FROM_DOMAINEmail is valid and correctly associated with its domain.
VALID_DOMAINDomain is valid and exists.
LOW_RISK_EMAIL_DOMAIN_FOR_COMPANYEmail domain is low-risk for the querying company.
LOW_RISK_EMAIL_DOMAIN_FOR_INDUSTRYEmail domain is low-risk within the industry.
LOW_RISK_EMAIL_DOMAIN_FOR_NETWORKEmail domain is low-risk at the network level.
VERY_LOW_RISK_EMAIL_DOMAIN_FOR_COMPANYEmail domain is very low-risk for the querying company.
VERY_LOW_RISK_EMAIL_DOMAIN_FOR_INDUSTRYEmail domain is very low-risk within the industry.
VERY_LOW_RISK_EMAIL_DOMAIN_FOR_NETWORKEmail domain is very low-risk at the network level.
HIGH_RISK_EMAIL_DOMAIN_FOR_COMPANYEmail domain is high-risk for the querying company.
HIGH_RISK_EMAIL_DOMAIN_FOR_INDUSTRYEmail domain is high-risk within the industry.
HIGH_RISK_EMAIL_DOMAIN_FOR_NETWORKEmail domain is high-risk at the network level.
VERY_HIGH_RISK_EMAIL_DOMAIN_FOR_COMPANYEmail domain is very high-risk for the querying company.
VERY_HIGH_RISK_EMAIL_DOMAIN_FOR_INDUSTRYEmail domain is very high-risk within the industry.
VERY_HIGH_RISK_EMAIL_DOMAIN_FOR_NETWORKEmail domain is very high-risk at the network level.