Data Enrichment

Our lightweight solution for enriching data. 

Scans open-source databases and gathers extra information about users based on an Email address, Phone number or IP address. You can also simply check if an email address is valid or not and instantly get background information to create a complete user profile, flag fraudsters, confirm suspicions or remove doubts.


SEON relies on data enrichment APIs to enhance the data you have connected to each transaction. You can learn more about how and why you should consider using such a service for your business here


APIs / Modules

Data enrichment is handled by four APIs/modules.

  • Email Module / API
    The Email API generates a risk score associated with a single email address based on deep social media profiling and domain verification tools. Fake email addresses can quickly be filtered with the help of the Email API. This provides raw data output as the Email Module.
  • Email Verification Module / API
    Using a fast SMTP-MX check, this module tells you whether or not an email address is valid or not. Beyond the basic deliverability check, it also returns information on the email's domain, such as if it's free/disposable. In the case of custom domains, it checks whether or not there is a registered website, the creation date, and if the top-level domain is suspicious or not.
  • Phone Module / API
    Our Phone API combines numerous data sources to provide an in-depth phone number investigation tool. It aggregates open and reachable social, and messenger data to flag fraudsters based on a phone address only.
  • IP Module / API
    The IP API generates a risk score associated with a single IP address. The elements that are being analyzed depict a clear picture of whether the user is trying to mask their connection. This provides raw data output as the IP Module.

To understand how they work on the API level, please use the API references.


Email Module 


Digital & Social Media Lookup

Aggregate digital profiles and social media profiles linked to the email address to confirm identities and flag suspicious users. Shows if the email is registered or not on:

  • Facebook
  • Google
  • Apple
  • Twitter
  • Microsoft
  • Yahoo
  • Ebay
  • Gravatar
  • Instagram
  • Spotify
  • Tumblr
  • LinkedIn
  • Weibo
  • Github
  • Vimeo
  • Flickr
  • Foursquare
  • Myspace
  • Pinterest
  • Skype
  • Discord
  • OK
  • Booking
  • Airbnb
  • Amazon
  • Qzone
  • Adobe
  • Wordpress
  • Imgur
  • Disney+
  • Netflix
  • JD.ID
  • Flipkart
  • Bukalapak
  • Lazada
  • Zoho
  • Samsung
  • Evernote
  • Envato
  • Patreon
  • Rambler
  • Quora
  • Atlassian
  • Tokopedia
  • Aboutme
  • Altbalaji
  • Archiveorg
  • Bitmoji
  • Bodybuilding
  • Codecademy
  • Deliveroo
  • Diigo
  • Duolingo
  • Eventbrite
  • Firefox
  • Freelancer
  • Gaana
  • Giphy
  • Hubspot
  • Kakao
  • Kommo
  • Komoot
  • Mailru
  • Nike
  • Plurk
  • Rappi
  • Replit
  • Seoclerks
  • Snapchat
  • Snapdeal
  • Soundcloud
  • Starz
  • Strava
  • Taringa
  • Tiki
  • Treehouse
  • Venmo
  • Vivino
  • Vkontakte
  • Wattpad
  • Xing
  • Yandex




Email Domain Check to Detect

  • Disposable, high-risk providers
  • No SMS verification enabled providers
  • Free email providers
  • Domain creation, update, and expiration date
  • Domain exists or not
  • Suspicious top-level domain checks
  • Domain-based Message Authentication Reporting and Conformance enforced or not
  • Custom domain or not
  • Accept all emails or not
  • MX records are valid or not
  • SPF is sufficiently strict enough to prevent spoofing or not
  • Domain registrar information

Full Address Profiling

Check the email address creation date, user real name, domain whois database and confirm the address exists - without any blackbox algorithms. Provides age checking using data breach information.

Privacy and Compliance 

Requested data is anonymized and connections are secured via SSL. SEON doesn’t store logs or sensitive data, ensuring full data protection compliance. 


Detailed Investigation

SEON aggregates data from open sources and databases to get a complete picture of your users and ensure accurate fraud prediction.




Accurate Profiling

One-step identity validation to sort out all the steps of user profiling under 1 sec. Risk scores are generated with completely accurate data, and let you block fraudulent users with adjustable thresholds. Provides deep user email address analysis and generates scores on a 0-100 scale. 

Learn more about the fraud perspective(s) in the User Manual.


Phone Module

Our Phone API aggregates numerous data sources to provide an in-depth phone number investigation tool. It searches open and reachable data including social information to flag fraudsters based on a single phone number. A score above 4 counts as suspicious by default.

Digital & Social Media Lookup

Aggregate digital profiles and social media profiles linked to the phone number to confirm identities and flag suspicious users. Shows if the phone number is registered or not on:

  • Google
  • Instagram
  • Twitter
  • Telegram
  • WhatsApp
  • Viber
  • OK
  • Zalo
  • Line
  • Microsoft
  • Snapchat
  • Skype
  • Flipkart
  • Bukalapak
  • JD.ID
  • Facebook
  • Altbalaji
  • Kakao
  • Shopclues
  • Snapdeal
  • Tiki
  • Vkontakte
  • Weibo
  • Yahoo


Validity Check

Filter out invalid phone numbers by examining strings at a glance. 




Country, Carrier, and Type

Detect the origin country, type, and carrier to calculate risk scores. 



Detect if the phone number is virtual or cloud-registered by checking the HLR + IMSI. Retrieve the subscriber name via CNAM.



Social Media Lookup

Connect the phone number to associated social media accounts to see if it matches your user profile. 


Messenger Use

Extract valuable data such as last login and user photo when the number is linked to Messenging accounts such as Viber, WhatsApp, or Telegram. 



IP Module 


Proxy / VPN / Tor

Detect connection methods and mitigate risks associated with certain proxies, virtual private networks, or TOR browser users. 

Spam Blacklist

Block blacklisted spammers from signing up or logging onto your platform by checking on more than 60 DNSBL real time. 

Datacenter ISP Identifier

Unmask users trying to connect to your service via suspicious data centers and mark them for future fraud prevention. 

ISP and Location

Confirm user location and risk based on their Internet Service Provider risk category. 


Open Port Ping

Ping IP addresses open ports to get accurate results on proxy usage. Detect malicious bots, including brute-force attackers and hijacked netblocks. 

Accurate Results

Generate accurate, in-depth reports and scoring in less than 200ms to block suspicious users, flag fraudsters, and improve your business operations.

Learn more about the fraud perspective(s) in the Knowledge Base.

Or read our resources to understand how IP analysis is helpful in fighting fraud here.