How disposable emails are used in account fraud

Disposable email addresses are one of the most common tools attackers use to create fake accounts at scale. Services like Guerrilla Mail or Temp Mail generate a temporary inbox in seconds, no verification required. For any product that relies on email-based signups, this is a real vulnerability.

What the API returns

The Veille Email Validation API (GET /v1/intelligence/email) checks an address against a database of 100,000+ known disposable domains and returns structured data: disposable, role_account, dns health, smtp_valid, and a risk_score from 0 to 100.

Quick integration

Python

import requests

API_KEY = "YOUR_API_KEY"
BASE_URL = "https://api.veille.io/v1"

response = requests.get(
    f"{BASE_URL}/intelligence/email",
    params={"query": "user@tempmail.org"},
    headers={"x-api-key": API_KEY},
)
data = response.json()

if data["disposable"]:
    print(f"Blocked: disposable email (risk: {data['risk_score']})")

TypeScript

const API_KEY = "YOUR_API_KEY";
const BASE_URL = "https://api.veille.io/v1";
const headers = { "x-api-key": API_KEY };

const response = await fetch(
  `${BASE_URL}/intelligence/email?query=user@tempmail.org`,
  { headers }
);
const data = await response.json();

if (data.disposable) {
  console.log(`Blocked: disposable email (risk: ${data.risk_score})`);
}

Key response fields

• disposable - true if the domain is a known disposable provider
• role_account / role_type - detects generic inboxes like info@ or admin@
• dns.mx - whether the domain has valid MX records
• smtp_valid - inbox-level deliverability (with qualification_check=true)
• risk_score - composite score from 0 (safe) to 100 (high risk)

5 use cases

1. Signup gate - reject or flag disposable emails at registration to prevent mass fake account creation.
2. Waitlist cleanup - validate emails before launch to remove throwaway addresses and get accurate conversion numbers.
3. Trial abuse prevention - block users from creating multiple free trials with disposable inboxes.
4. Lead qualification - filter out low-quality leads in your CRM by checking disposable and role_account flags.
5. Transaction verification - require a non-disposable email before processing high-value orders or payouts.