| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
Overview
Use this method to retrieve email confirmation check results.
NoteFor recommendations on how to use these results in your own systems, see this article.
Required permissions
To use this method, your app token must have the View check results permission.
Request example
curl -X GET \
'https://api.sumsub.com/resources/checks/latest?type=EMAIL_CONFIRMATION' \
-H 'X-App-Token: <your-app-token>' \
-H 'X-App-Access-Sig: <your-signature>' \
-H 'X-App-Access-Ts: <unix-timestamp>'Response explained
The response represents a singleton list of checks.
Root variables
The root variables are the core check result data items. Some of them may include nested attributes and element fields.
| Field | Type | Description |
|---|---|---|
answer | String | Check answer:
|
checkType | String | Indicates this is the EMAIL_CONFIRMATION check type. |
createdAt | Date | Date and time (UTC) of the latest email confirmation check result. |
id | String | Unique identifier of the check. |
emailConfirmationCheckInfo | Object | Includes specific email check parameters with check results. |
emailConfirmationCheckInfo attributes
emailConfirmationCheckInfo attributesThe following table explains the emailConfirmationCheckInfo attributes that represent the check results of the provided email address in accordance with specific parameters.
| Field | Type | Description |
|---|---|---|
firstSeenAt | Date | Earliest date the email address was seen in use across all Sumsub data. This is not the date the mailbox was created: an old address that is rarely used can show a recent date. |
email | String | Applicant email address. |
confirmedViaOtp | String | Indicates if the email address is confirmed by the applicant via OTP (One Time Password).GREEN means that the applicant received a confirmation code by email and confirmed it via SDK, null — if not. |
nonDisposable | String | Indicates whether the provided email address is a temporary one and might disappear after a short period of time.
|
riskLevel | String | Indicates a verdict made by the system according to the check results and internal logic.
|
riskScore | Integer | Sumsub risk score of the email address, from 0 to 100. Higher means riskier. |
blocklisted | Boolean | true if the email address is in your blocklist in Custom lists. Otherwise the field is not returned. |
whitelisted | Boolean | true if the email address is in your allowlist in Custom lists. Otherwise the field is not returned. |
leaked | Boolean | true if the email address was found in known data breaches. |
breachesCnt | Integer | Number of known data breaches that include the email address. |
intelligence | Object | Network activity signals for the email address. |
websiteExists | String | Indicates the email domain existence.
|
deliverable | String | Indicates whether messages can be delivered to the specified email address.
|
webRegistrationsExist | String | Indicates if the email address is used for registration on websites.
|
profiles | Array of strings | Information on profiles created for social networks, services, and other platforms using the provided email address. |
riskLabels | Array of strings | A list of email risk labels assigned by the system according to the check results and internal logic. |
intelligence attributes
intelligence attributesThe intelligence object shows how the email address has been used, based on the Sumsub network. The data comes from the address being used across online services. Your data on users and their links to identities is not shared in the network.
- We recommend using these fields as features in risk assessment and machine learning models that combine many signals, not as a single flag for making decisions.
- If there is no history for the address, the field is not returned. A missing field means never observed, not zero, or low activity. The whole
intelligenceobject may be missing.
| Field | Type | Description |
|---|---|---|
firstSeenDays | Integer | Days since the email address was first seen in use in the network. This is not the age of the mailbox. |
activityIndex | Integer | How active the email address is in the network. |
diversityIndex | Integer | How widely the email address is linked to different identities. |
Available email risk labels
The following table explains possible email risk labels assigned in accordance with the check results.
| Risk label | Description |
|---|---|
disposable | Temporary email address which is provided by a disposable email service and usually expires in a few minutes. |
excessiveDots | Email address contains excessive dots. |
highRisk | High-risk email address. A verdict made by the system according to the check results and internal logic. |
invalidEmail | Email address is invalid. |
mediumRisk | Medium-risk email address. A verdict made by the system according to the check results and internal logic. |
noWebRegistrations | Email registration on websites is not detected. |
noWebsiteExists | Email domain does not exist. |
nonDeliverable | Messages fail to be delivered to this email address. |
plusAddressing | Email address contains a plus symbol. |
blocklisted | Email address is in your blocklist. |
freshEmail | Email address was first seen recently. |
gibberish | The part before @ looks random. |
Response example
{
"checks": [
{
"answer": "RED",
"checkType": "EMAIL_CONFIRMATION",
"createdAt": "2022-08-25 12:01:11",
"id": "300e3be1-61cc-48ce-9eda-000000000000",
"emailConfirmationCheckInfo": {
"riskScore": 72,
"firstSeenAt": "2021-05-17 07:30:15",
"email": "[email protected]",
"confirmedViaOtp": null,
"nonDisposable": "GREEN",
"riskLevel": "RED",
"websiteExists": "GREEN",
"deliverable": "GREEN",
"webRegistrationsExist": "GREEN",
"profiles": [
"google",
"facebook",
"amazon",
"spotify",
"duolingo"
],
"leaked": true,
"breachesCnt": 3,
"riskLabels": [
"highRisk",
"plusAddressing"
],
"intelligence": {
"firstSeenDays": 1265,
"activityIndex": 4,
"diversityIndex": 1
}
}
}
]
}