Skip to main content
The Email Verification API provides a two-step flow: send a one-time code to an email address, then verify the code the user enters. The system also performs risk assessment including breach exposure, disposable provider detection, and deliverability checks.

​
Endpoints

Send Email Code

POST /v3/email/send/ — Send a one-time verification code to an email address.

Check Email Code

POST /v3/email/check/ — Verify the code and retrieve email risk data.

​
How it works

  1. Call Send Email Code with the target email address
  2. The user receives a 6-digit code (valid for 5 minutes)
  3. Call Check Email Code with the email and code
  4. Receive verification result plus risk signals (breach exposure, disposable provider, deliverability)
By default, standalone OTP emails use Didit branding. To use your application’s configured white-label sender and branding for a specific standalone email verification session, pass options.use_white_label_customization: true to POST /v3/email/send/. The default is false.

​
Risk signals

The check response includes:
SignalDescription
is_breachedEmail found in known data breaches
is_disposableTemporary/throwaway email provider
is_undeliverableAddress does not accept mail
For full response structure, see Email Verification Report.