> ## Documentation Index
> Fetch the complete documentation index at: https://docs.didit.me/llms.txt
> Use this file to discover all available pages before exploring further.

# Email Risk API

> Risk-score an email address without sending an OTP. Deliverability, disposable-domain, breach, and fraud signals in one server-to-server call.

Use `POST /v3/email/risk/` when you need email intelligence without asking the user to enter a one-time code.

It does not send an email. It creates a standalone API request, enriches the address, applies your email-risk rules, and returns the same normalized email block used by Email Verification.

## Request

```bash theme={null}
curl -X POST "https://verification.didit.me/v3/email/risk/" \
  -H "x-api-key: <api_key>" \
  -H "Content-Type: application/json" \
  -d '{
    "email": "alice@example.com",
    "country_code": "US",
    "vendor_data": "lead-123",
    "metadata": { "source": "signup_prescreen" }
  }'
```

| Field          | Type   | Required | Description                                                |
| -------------- | ------ | -------- | ---------------------------------------------------------- |
| `email`        | string | Yes      | Email address to score.                                    |
| `country_code` | string | No       | ISO 3166-1 alpha-2 or alpha-3 country hint for enrichment. |
| `signals`      | object | No       | Optional email signals you already collected.              |
| `vendor_data`  | string | No       | Your stable reference for this request.                    |
| `metadata`     | object | No       | Your non-sensitive request metadata.                       |

## Response

```json theme={null}
{
  "request_id": "82397be9-5921-4970-a979-2d5b43e08b33",
  "status": "Approved",
  "email": {
    "email": "alice@example.com",
    "is_breached": false,
    "is_disposable": false,
    "is_undeliverable": false,
    "enrichment": {
      "score": 4.0,
      "deliverable": "high",
      "breach_risk_level": "Low",
      "is_free_domain": false
    }
  },
  "vendor_data": "lead-123",
  "metadata": { "source": "signup_prescreen" }
}
```

## Billing and providers

Email Risk API calls use `email_risk_api` pricing, which is lower than full Email Verification because no OTP email is sent. Didit first uses the managed email intelligence provider. If that provider is unavailable or returns no enrichment, Didit can fall back to IPQualityScore through the same normalized email-enrichment interface.

Sandbox mode returns deterministic mock risk data and never spends managed provider credentials.