Orisift

Sign-up forms are polite. They accept a phone number from a range set aside for films and TV, or an email address from a throwaway inbox service, without a single question. Your own software sends phone numbers, email addresses, IP addresses and domains to Orisift's API for checking. Every answer gives a verdict with its evidence and lists what the check could not establish.

Phone numbers are matched against each country's numbering plan, so a number in national format needs its country sent along. For an email address, Orisift reads the domain's mail records and flags throwaway providers and shared team addresses (info@ and the like). Domain checks add SPF and DMARC, two settings that protect a domain from forged email. All checks run on public registries and DNS lookups, without dialling a number or contacting a mailbox.

A second endpoint screens up to four fields from one sign-up together. With a named policy, the response adds a recommended next step, like asking the person to fix a field or flagging the account for review.

The privacy page says lookup evidence can go to Anthropic for an AI assessment, with the identifier removed. Account holders can switch this off in the settings. A TypeScript SDK for Node is published on npm.