Identity & risk intelligence API

No guesses.
Just what's real about an email address, a phone number, a job applicant, a new signup, a prospect, anyone at all, a username

Digital Footprint is an identity and risk API for fraud, KYC and trust & safety teams. Send an email, phone number or username and get back where it's registered across 800+ platforms, whether the mailbox, number and IP hold up, and a risk score from rules you control - usually within three seconds. Built for businesses screening their own sign-ups, applicants and transactions, not for looking people up.

Every field is real or marked not found. If we can't confirm it, we leave it out. No guesses.

15 free lookups. No card required.

No fabricated dataFull source transparencySubsecond lookups
someone@example.com14 checked
github.com Verified
gravatar.com Verified
breach record Verified
linkedin.com Not found
snapchat.com Not found

Try an email lookup

Type an email, phone number, or username below and see what comes back.

Try a real lookup, right here
Every result is real, nothing is staged.

Why we return fewer results than competitors

A field is either stamped verified, or it is honestly marked not found, never filled in to look complete. How we verify that →

✓ What we found

github.comVerified
gravatar.comVerified
breach record — Jan 2025Verified

— What we didn't

linkedin.comNot found
snapchat.comNot found
employer / companyNot found

How the social profile and identity lookup API works

One request in, one shape of answer out - whether you are scoring a signup, running KYC, or investigating an account.

01

Send an email, phone number or username

POST /v2/lookup with one query. The type is detected for you. See running a lookup.

02

We check 800+ platforms in parallel

Social profiles, developer accounts, shopping, finance and community sites - the full platform list - plus breach history and public web mentions.

03

Every field is verified, or it is omitted

Results arrive as they land over server-sent events, each stamped with the moment it was established. A platform we could not confirm is left out, never guessed.

The whole integration

One POST to api.digifootprint.dev, one bearer key, one JSON body. No SDK to install and no callback to host - add ?wait=true and the answer comes back on the same request.

POST /v2/lookup?wait=true
curl -X POST "https://api.digifootprint.dev/v2/lookup?wait=true" \
  -H "Authorization: Bearer dfp_your_key" \
  -H "Content-Type: application/json" \
  -d '{"query": "someone@example.com"}'

What comes back

Every result carries the method that established it and the moment it was checked. A platform that blocked the check or timed out is absent from footprint.results rather than reported as false.

200 OK
{
  "lookupId": "4b6bbfec-e59d-45c5-961d-bc625b921db1",
  "input": { "email": "someone@example.com", "phone": null, "username": null, "ip": null },
  "risk": null,
  "footprint": {
    "platformsChecked": 886,
    "matches": 3,
    "hits": ["github", "spotify", "instagram"],
    "results": [
      { "platform": "github",    "registered": true,  "method": "public_api", "checkedAt": "2026-09-25T09:12:04.377Z", "identity": "email" },
      { "platform": "spotify",   "registered": true,  "method": "public_api", "checkedAt": "2026-09-25T09:12:04.201Z", "identity": "email" },
      { "platform": "instagram", "registered": true,  "method": "public_api", "checkedAt": "2026-09-25T09:12:04.118Z", "identity": "email" },
      { "platform": "twitter",   "registered": false, "method": "public_api", "checkedAt": "2026-09-25T09:12:04.402Z", "identity": "email" }
    ],
    "breaches": [{ "name": "Collection1", "date": "2019-01-07" }],
    "webMentions": []
  },
  "email": null,
  "phone": null,
  "ip": null
}

Need it under your own brand?

White-label and resale arrangements are available to established accounts by written agreement, reviewed case by case.

Talk to sales

Digital footprint analysis for fraud, AML and KYC teams

The same lookup, read differently by each team. Pick the one that looks like your problem.

Social profile lookup

Get social profile information for an email, username or phone number: which profiles exist, verified or omitted - never guessed.

Email fraud detection API

Email fraud detection API: check a signup by which accounts exist for the address, breach history and web mentions. Verified or omitted, never guessed.

AML compliance and KYC digital footprint API

Digital footprint KYC: an AML identity verification API reporting which accounts exist for an applicant’s email, with method and timestamp on every fact.

Fake account detection API for marketplaces and SaaS

Fake account detection API for marketplaces and communities: see whether a new member’s email or handle exists anywhere else before they post or sell.

OSINT API: email lookup and username search

OSINT email lookup and username search API: which accounts exist for an identifier across hundreds of platforms, plus breach history and web mentions.

Candidate email verification, done fairly

Candidate email verification and pre-employment digital footprint checks that confirm what a candidate supplied - with consent, never a background check.

Email lookup and enrichment API

An email enrichment API that returns verified facts: which platforms an email address is registered on, its breach history and public web mentions. Verified or omitted, never guessed.

Mule account detection API

Detect mule accounts at onboarding by checking whether an applicant’s email or phone has any registration history at all - the signal a genuine document cannot supply.

Simple pricing, no enterprise minimum

Start with 15 free lookups, shared across your team. No card required.

Free
$0
15 lookups, no card
Pay as you go
$0.03
per lookup, top up from $20
Growth
$49/mo
2,722 footprint · 4,083 email checks
Pro
$99/mo
6,187 footprint · 8,608 email checks
Scale
$149/mo
9,933 footprint · 13,545 email checks
Business
$399/mo
30,692 footprint · 38,000 email checks
Retail Pro
$999/mo
90,818 footprint · 99,900 email checks
Enterprise
Talk to us
custom rates at volume

Frequently asked questions

The questions every fraud, compliance and OSINT team asks before the first request.

What is a digital footprint check?
A digital footprint check is one request that tells you which of 886 platforms an email address, phone number or username is registered with - social profiles, developer accounts, shopping and finance services - plus breach history and public web mentions. Every field is verified at source or marked not found; nothing is inferred.
What does Digital Footprint check?
Digital Footprint checks five things in one request. The social footprint shows which of 886 platforms an email address, phone number or username is registered on, with breach history (breach names and dates, never credentials) and public web mentions. Email intelligence establishes over SMTP whether a mailbox is deliverable, disposable, webmail or a role address, and reports domain age, registrar, MX, SPF and DMARC. Phone intelligence returns validity, E.164 and national format, carrier, line type and VOIP detection (fixed or app-minted), with SIM-swap and call-forwarding risk detection on higher plans. IP intelligence flags VPN, proxy, Tor, residential proxy, datacenter and compromised addresses, with ASN, ISP and location. Every module carries a 0-100 risk score, and the request gets an overall score built from named signals.
Can Digital Footprint check a single email, phone number or IP on its own?
Yes. POST /v2/email, POST /v2/phone and POST /v2/ip each return one answer and skip the platform sweep entirely, which is why a single IP check answers in a fraction of a second rather than the tens of seconds a full footprint sweep takes. Up to 50 lookups can also be queued in one call through POST /v2/lookup/batch, with each item billed and tracked separately.
How is the risk score calculated?
The overall risk score is the total of the named signals that fired across the email, phone and IP modules plus the rules that compare them, capped at 100. Each signal has an id, a label and its points, so a score of 25 can always be traced to the rules behind it. Every default rule can be tuned per account - its values, its points, on or off, or reset to ours - and accounts can write their own custom rules, with 3 on the free plan.
Can I resell the Digital Footprint API?
For established accounts, yes - white-label and resale arrangements are available by written agreement, reviewed case by case. Contact sales to discuss.
What is digital footprint analysis?
Digital footprint analysis is the practice of assessing the fraud risk of a sign-up or application by the online history its identifiers carry: how many platforms an email address or phone number is registered on, whether it appears in breach records, and whether it is mentioned anywhere on the public web. A thick footprint is consistent with a real person who has been online for years; a thin one is the signal fraud and AML teams act on, because a synthetic identity has no history to show. Digital Footprint returns the raw registration facts that analysis is built from, each one verified or omitted rather than scored into a number you cannot audit.
Can I look up someone's social profiles from an email address?
An email lookup returns which social profiles exist for that address - for example an Instagram, TikTok, GitHub or Spotify account - not the contents of those profiles. That is the difference between a registration check and scraping, and it is why the API can be used at signup and in KYC flows.
Which inputs does the lookup API accept?
The lookup API accepts an email address, a phone number (checked on WhatsApp, Telegram and other platforms that sign people up by phone) or a username. Send whichever you have as the query field and the type is detected for you.
Why is a platform missing from a response?
Because we could not confirm an answer for it. We return what we can verify and leave out what we cannot, rather than guessing.
How fast is a lookup?
An instant lookup answers in under a second from the highest-value platforms. An early-answer lookup returns in about 1-3 seconds with the first real profiles and every module requested, while the full sweep finishes the same lookup in the background. A streamed lookup sends each result as it lands, email and phone together.
How many free lookups do I get?
15 lookups, shared across everyone at your company domain, with no card required. After that it is pay as you go at $0.03 a lookup, topping up from $20, or Growth at $49 a month.