Updated 2026-09-29
A phone number lookup API takes a number and returns what can be verified about it. Here that is two things in one request: phone intelligence - validity, formats, carrier, line type, VOIP class and a risk score - and which platforms the number is registered on (WhatsApp, Telegram, Facebook, Instagram and X (Twitter)). Every fact is confirmed or left out, never guessed.
Two modules answer for a number. The phone module returns validity, E.164 and national formats, country, carrier, line type and VOIP class - plus SIM-swap and call-forwarding risk detection on higher plans where the carrier supports them - and a risk score with its signals. The footprint checks which platforms the number is registered on, one row per platform with registered and checkedAt. Ask for either or both.
curl -X POST "https://api.digifootprint.dev/v2/lookup" \
-H "Authorization: Bearer dfp_your_key" \
-H "Content-Type: application/json" \
-d '{"phone": "+14155552671", "checks": {"footprint": true, "phone": true, "riskSignals": true}}'{
"lookupId": "9f2c41d0-...",
"footprint": {
"platformsChecked": 2,
"matches": 1,
"results": [
{ "platform": "whatsapp", "registered": true, "identity": "phone", "checkedAt": "2026-09-29T10:14:02.118Z" }
]
},
"phone": {
"number": "+14155552671",
"valid": true,
"e164": "+14155552671",
"nationalFormat": "(415) 555-2671",
"countryCode": "US",
"carrier": "T-Mobile USA",
"lineType": "mobile",
"isVoip": false,
"risk": { "score": 0, "signals": [] }
},
"risk": { "score": 0, "signals": [] }
}Send the number with its country code. Sending it as query works too: the type is detected, so one endpoint and one key serve email, phone, IP and username lookups. Every field is in the phone reference.
A number can be checked on WhatsApp, Telegram, Facebook, Instagram and X (Twitter). The default set (WhatsApp and Telegram) runs when you name nothing; name others in checks.footprint.phone.platforms. Each platform is billed only when it runs, so a check limited to WhatsApp costs a WhatsApp check and nothing more. The WhatsApp number check guide covers the request in detail, and prices are on the rate card.
It will not tell you who the number belongs to: no name, no address, no photos, nothing from inside any account. It will not call a number fraudulent - the risk score is the total of named, auditable signals, and a VOIP line is a reason to look closer, not a verdict. And where a fact could not be established the field is null, and a platform that could not be checked is left out rather than reported as registered: false.
A v2 request can carry an email and a phone together, plus the signup IP, and returns one answer with a module score for each and an overall score across all of them. At signup that catches the combinations a single check misses - a fresh VOIP number, an email with no history, a datacenter IP. In KYC and AML review the country and carrier corroborate a submitted address. See fraud risk scoring for how the rules add up, and pricing for plans.