Get email confirmation check results

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…

Overview

Use this method to retrieve email confirmation check results.

📘

Note

For recommendations on how to use these results in your own systems, see this article.

Required permissions

To use this method, your app token must have the View check results permission.

Request example

curl -X GET \
     'https://api.sumsub.com/resources/checks/latest?type=EMAIL_CONFIRMATION' \
     -H 'X-App-Token: <your-app-token>' \
     -H 'X-App-Access-Sig: <your-signature>' \
     -H 'X-App-Access-Ts: <unix-timestamp>'

Response explained

The response represents a singleton list of checks.

Root variables

The root variables are the core check result data items. Some of them may include nested attributes and element fields.

FieldTypeDescription
answerStringCheck answer:
  • RED — at least one of the checks returned a high risk indication.
  • YELLOW — all the checks ended up with no certain data found.
  • GREEN — at least one of the checks ended up green with no high risk indication; some YELLOW results are acceptable.
checkTypeStringIndicates this is the EMAIL_CONFIRMATION check type.
createdAtDateDate and time (UTC) of the latest email confirmation check result.
idStringUnique identifier of the check.
emailConfirmationCheckInfoObjectIncludes specific email check parameters with check results.

emailConfirmationCheckInfo attributes

The following table explains the emailConfirmationCheckInfo attributes that represent the check results of the provided email address in accordance with specific parameters.

FieldTypeDescription
firstSeenAtDateEarliest date the email address was seen in use across all Sumsub data. This is not the date the mailbox was created: an old address that is rarely used can show a recent date.
emailStringApplicant email address.
confirmedViaOtpStringIndicates if the email address is confirmed by the applicant via OTP (One Time Password).
GREEN means that the applicant received a confirmation code by email and confirmed it via SDK, null — if not.
nonDisposableStringIndicates whether the provided email address is a temporary one and might disappear after a short period of time.
  • GREEN — permanent email address.
  • YELLOW — not enough data found.
  • RED — disposable email address.
riskLevelStringIndicates a verdict made by the system according to the check results and internal logic.
  • GREEN — no risk.
  • YELLOW — medium risk.
  • RED — high risk.
riskScoreIntegerSumsub risk score of the email address, from 0 to 100. Higher means riskier.
blocklistedBooleantrue if the email address is in your blocklist in Custom lists. Otherwise the field is not returned.
whitelistedBooleantrue if the email address is in your allowlist in Custom lists. Otherwise the field is not returned.
leakedBooleantrue if the email address was found in known data breaches.
breachesCntIntegerNumber of known data breaches that include the email address.
intelligenceObjectNetwork activity signals for the email address.
websiteExistsStringIndicates the email domain existence.
  • GREEN — email domain exists.
  • YELLOW — no certain data found.
  • RED — email domain does not exist.
deliverableStringIndicates whether messages can be delivered to the specified email address.
  • GREEN — messages can be delivered.
  • YELLOW — no certain data found.
  • RED — messages are not delivered.
webRegistrationsExistStringIndicates if the email address is used for registration on websites.
  • GREEN — email address is used for registrations.
  • YELLOW — no certain data found.
  • RED — email address was never used for registration.
profilesArray of stringsInformation on profiles created for social networks, services, and other platforms using the provided email address.
riskLabelsArray of stringsA list of email risk labels assigned by the system according to the check results and internal logic.

intelligence attributes

The intelligence object shows how the email address has been used, based on the Sumsub network. The data comes from the address being used across online services. Your data on users and their links to identities is not shared in the network.

  • We recommend using these fields as features in risk assessment and machine learning models that combine many signals, not as a single flag for making decisions.
  • If there is no history for the address, the field is not returned. A missing field means never observed, not zero, or low activity. The whole intelligence object may be missing.
FieldTypeDescription
firstSeenDaysIntegerDays since the email address was first seen in use in the network. This is not the age of the mailbox.
activityIndexIntegerHow active the email address is in the network.
diversityIndexIntegerHow widely the email address is linked to different identities.

Available email risk labels

The following table explains possible email risk labels assigned in accordance with the check results.

Risk labelDescription
disposableTemporary email address which is provided by a disposable email service and usually expires in a few minutes.
excessiveDotsEmail address contains excessive dots.
highRiskHigh-risk email address.
A verdict made by the system according to the check results and internal logic.
invalidEmailEmail address is invalid.
mediumRiskMedium-risk email address.
A verdict made by the system according to the check results and internal logic.
noWebRegistrationsEmail registration on websites is not detected.
noWebsiteExistsEmail domain does not exist.
nonDeliverableMessages fail to be delivered to this email address.
plusAddressingEmail address contains a plus symbol.
blocklistedEmail address is in your blocklist.
freshEmailEmail address was first seen recently.
gibberishThe part before @ looks random.

Response example

{
  "checks": [
    {
      "answer": "RED",
      "checkType": "EMAIL_CONFIRMATION",
      "createdAt": "2022-08-25 12:01:11",
      "id": "300e3be1-61cc-48ce-9eda-000000000000",
      "emailConfirmationCheckInfo": {
        "riskScore": 72,
        "firstSeenAt": "2021-05-17 07:30:15",
        "email": "[email protected]",
        "confirmedViaOtp": null,
        "nonDisposable": "GREEN",
        "riskLevel": "RED",
        "websiteExists": "GREEN",
        "deliverable": "GREEN",
        "webRegistrationsExist": "GREEN",
        "profiles": [
          "google",
          "facebook",
          "amazon",
          "spotify",
          "duolingo"
        ],
        "leaked": true,
        "breachesCnt": 3,
        "riskLabels": [
          "highRisk",
          "plusAddressing"
        ],
        "intelligence": {
          "firstSeenDays": 1265,
          "activityIndex": 4,
          "diversityIndex": 1
        }
      }
    }
  ]
}
Query Params
string
required

Unique applicant identifier in the Sumsub system.

This identifier is a random combination of 24 digits and lowercase Latin characters. It is automatically generated when the applicant is created on the Sumsub side, and can be found in the Dashboard.

If the applicantId is unknown to you, use the Get applicant data (externalUserId) method to fetch it.

Language
Credentials
Header
LoadingLoading…
Response
Click Try It! to start a request and see the response here!