Fraud detection & enrichment APIs.
We identify the IP, email, phone, and device behind every signup and login. One real-time API to stop fake accounts, account takeover, and payment fraud before they cost you.
Disposable email · VPN IP
Protect your customers and your business at entry.
Fake signups corrupt your data and burn your spend. Account takeovers drain real users' balances and destroy trust. Repeat abusers farm every bonus and free tier until you catch them. Three distinct attacks, one common entry point.
Account Creation
Bots hit your signup form directly and at scale. Imperva's 2025 Bad Bot Report puts bad bots at 37% of web traffic — they inflate your user count, run up your costs, and sit in your database waiting to become a worse problem.
Account Takeover
A stolen password gets an attacker all the way in, and the login looks perfect because the credentials are real. Wrong device, proxied IP, session that doesn't match — Akamai counts 26 billion credential-stuffing attempts a month, and the 2025 Verizon DBIR ties stolen credentials to 22% of all breaches.
Repeat Abuse
Bonus farmers, trial abusers, banned users cycling back — they all change their details. Sumsub's 2025 iGaming report found 63.8% of operators name bonus abuse a top-three threat. The signals don't change with them.
Your rules. Our signals. One decision.
Send the identity
Pass the IP, email, phone, and device from your signup or login. Signals you already collect, so there's nothing new to capture.
We score every signal
Proxy, VPN, Tor, disposable email, burner and VoIP, device reputation, velocity across your own traffic. All in milliseconds, server-side.
Get one verdict
Your rules run on our infrastructure and return allow, flag, or block, with the exact reason that fired. No mystery score.
Everything between the signal and the decision.
One API call.
Send an IP, email, phone, or device. Get back every signal we have on it, scored and structured, in milliseconds. No stitching, no separate lookups, no post-processing on your end.
Request
{
"ip": "185.220.101.3",
"email": "u@mailinator.com",
"phone": "+1 415 555 0012",
"device": "fp_a1b2c3d4"
}Signals
▋
Your rules, already applied.
Write conditions in plain language — block if the email is disposable, flag if the IP is a VPN, step up if this device appeared three times today. The verdict comes back in the same API call with the exact rule that fired.
IF
OR
OR
185.220.101.3
→ BLOCK
Every decision, searchable.
Every API call is logged automatically, tied to the identity that triggered it. Search by email, IP, phone, or device and see the full signal breakdown, the verdict, and the rule that fired. When a user contests a block, the answer is already there.
alice@gmail.com
alice@temp.io
alice@mailinator.com
alice@proton.me
Built for the people who own the decision.
Fraud and risk teams
Tracenow gives you signals you can act on, rules you tune without filing a ticket, and a log that shows exactly what happened on every call.
Trust and safety teams
Tracenow catches bots and banned users cycling back, and links them across accounts even when the surface details look clean.
Growth and platform engineers
You own the flow and don't want a fraud project in your sprint. One API call returns the verdict with your rules already applied.
Rules are only as good as the signals under them.
Every verdict runs on four enrichment engines we built in-house. Three of them — IP, email, and phone — work as standalone APIs you can query directly and get the raw signals back, no rules engine required. Device rounds out the full identity layer when you want it. Everything returns in milliseconds.
Explore the full signal reference →IP
Phone
Device
Common questions.
You decide who gets in.
Write the rules. We score the signals. You get the verdict, at signup, at login, in one call.
100 free calls. No contract. Stop anytime.