Our Email Verification process includes automated checks to ensure the validity and security of email addresses. This page outlines the potential warnings and errors you might encounter during the email verification process.
Automatic Decline Conditions
The following conditions can result in an automatic decline depending on your application settings:
EMAIL_CODE_ATTEMPTS_EXCEEDED- The user has exceeded the maximum attempts to enter the correct codeEMAIL_IN_BLOCKLIST- The email is in the blocklistUNDELIVERABLE_EMAIL_DETECTED- The email could not be delivered because the email does not accept emails
Configurable Verification Settings
Applications can configure how the system handles various verification issues by setting actions for different risk categories:
-
Exposure/Breach
- Risks:
BREACHED_EMAIL_DETECTED - Configurable action: Decline, Review, or Approve
- Risks:
-
Disposable Provider
- Risks:
DISPOSABLE_EMAIL_DETECTED - Configurable action: Decline, Review, or Approve
- Risks:
-
Duplicate Email
- Risks:
DUPLICATED_EMAIL - Configurable action: Decline, Review, or Approve
- Risks:
-
Risk Level
- Risks:
EMAIL_IN_BLOCKLIST - Configurable action: Decline, Review, or Approve
- Risks:
Verification Attempt Limits
The system imposes limits on verification attempts to prevent abuse and maintain security:
- Code Entry Attempts: Maximum 2 attempts to enter the correct verification code
- Code Resend Requests: Maximum 2 requests to resend a verification code within 24 hours
You can customize these attempt limits in your application settings to match your specific security requirements and user experience needs.
Email Verification Warnings
Tag | Description |
|---|---|
EMAIL_CODE_ATTEMPTS_EXCEEDED | The user has exceeded the maximum number of verification code entry attempts. |
EMAIL_IN_BLOCKLIST | The system identified this email in the blocklist, which means the email is not allowed to be verified. |
BREACHED_EMAIL_DETECTED | This email address was found in one or more known data breaches. |
DISPOSABLE_EMAIL_DETECTED | The system detected that the email is disposable, which is not allowed. |
UNDELIVERABLE_EMAIL_DETECTED | The system detected that the email is undeliverable, which is not allowed. |
DUPLICATED_EMAIL | The system detected that the email has been used in another verification process of another user. |
Warning Types
Each risk is assigned a warning type based on your application's configuration settings. Warnings fall into three severity categories:
| Type | Description |
|---|---|
| ERROR | Critical issues that resulted in setting the session to 'Declined' |
| WARNING | Issues that require attention that resulted in setting the session to 'In Review' |
| INFORMATION | Informational messages that don't affect verification outcome |