Disposable email detection API
Disposable email detection stops players from signing up with a throwaway inbox they will never use again. InlineShield checks every sign-up address against known disposable domains, and it also catches new temp-mail domains that are on no list yet, by looking at the mail servers behind them.
Last updated
Why a blocklist alone is not enough
Temp-mail services make new domains all the time, because sites block the old ones. A domain registered this morning is on nobody's list, so a plain list lookup lets it through.
The domain is new, but the machinery behind it usually isn't. Temp-mail services receive mail for their new domains on the same mail servers they already use for the old ones. That is the trail InlineShield follows.
Three ways an address is caught
Known disposable domain
[email protected] is the classic example.Mail server under a disposable domain
Shared temp-mail infrastructure
brand-new-domain.example not on any list
└─ MX mx1.known-tempmail.example ← host under a listed disposable domain
→ DISPOSABLE_MAIL_SERVER_HOST
another-new-domain.example not on any list
└─ MX mail.shared-host.example (203.0.113.7)
203.0.113.7 also receives mail for several listed disposable domains
→ SHARED_DISPOSABLE_MAIL_SERVERWhat you get back
A disposable address adds the trigger DISPOSABLE_TEMP_EMAIL. With the default rules a disposable address is blocked (verdict BLOCKED, recommendedAction: "block"), whether its domain is listed or matched through its mail servers. The response also says how the domain was matched, in emailAnalysis.disposableCategory.
If a domain you trust is ever matched, put it on your allow list in the console. Domains on your allow list are never treated as disposable.
The same check also looks at the part before the @. Random-looking, machine-made names such as [email protected] are a sign of scripted sign-ups; read more on bot sign-up detection. All checks are included on every plan, from Free upwards; see pricing.
Frequently asked questions
What is a disposable email address?
An inbox that exists for minutes or hours, made by a temp-mail service so the user can confirm a sign-up without giving a real address. On a casino or sportsbook it usually means someone wants the bonus, not the relationship.
How can you detect a temp-mail domain that is on no list?
By its mail servers. If the domain's MX host sits under a known disposable domain, or its mail server also serves several known disposable domains, InlineShield treats it as disposable too.
Can I allow a domain that you flag?
Yes. Add it to your allow list in the console. Allow-listed domains are never matched as disposable.
Do you send an email to the address to check it?
No. Nothing is sent to the player. The check uses the domain and its public DNS records.
Is there a free plan?
Yes. The Free plan includes 1,000 screenings a month with every check switched on. Starter is $199/mo for 25,000 and Pro is $699/mo for 250,000.
Screen your next sign-up for free
The Free plan includes 1,000 screenings a month. Create an account, add your keys and see real verdicts on your own traffic. No card, no sales call, no setup fee.