// IP checks

An IP fraud detection API for knowing which addresses to trust.

One GET request returns a 0–100 fraud score for any IPv4 or IPv6 address, plus the flags behind it — proxy, VPN, Tor, bot activity and recent abuse — with the network and location context you need to decide what to do next.

Start with 25 free credits Read the API docs

Try the Free IP proxy checker — no signup →

What an IP fraud check returns

Fraud score

fraud_score

A single 0–100 risk score. You choose the threshold that blocks, challenges or allows.

Proxy & VPN

proxy, vpn, active_vpn

Whether the address belongs to a proxy or VPN service, and whether a VPN appears to be in active use.

Tor

tor, active_tor

Tor exit-node membership, and whether the address is currently routing Tor traffic.

Recent abuse

recent_abuse

Whether this address has been linked to abuse, fraudulent orders or compromised behaviour recently.

Bot status

bot_status

Whether the traffic pattern looks automated rather than human.

Network & location

ISP, ASN, organization, country_code, region, city

The ISP, autonomous system and organisation behind the address, plus country, region and city.

GET /api/v1/check?ip=192.0.2.123

request.sh

curl -H "Authorization: Bearer fn_your_key" \
  "https://fraudnova.com/api/v1/check?ip=192.0.2.123"

response.json

{
  "success": true,
  "data": {
    "fraud_score": 87,
    "proxy": true,
    "vpn": false,
    "tor": false,
    "recent_abuse": true,
    "bot_status": true,
    "country_code": "US",
    "ISP": "Example Cloud Hosting",
    "ASN": 64500
  },
  "credits_remaining": 4987
}

Where teams use it

Filter affiliate and campaign traffic

Score the IP behind every click or lead before you pay for it. Proxy, VPN and bot flags separate real prospects from traffic that will never convert — and give you evidence when you dispute a payout.

Screen signups before they cost you

Check the IP at registration. A high score plus an active VPN is a reasonable trigger for email verification, a manual review queue, or a hard block on your free tier.

Add context to checkout decisions

Pair the score with your own rules: allow low scores through untouched, challenge the middle, and hold the top of the range for review rather than losing the order outright.

Questions, answered.

What does the fraud score actually mean? +

It is a 0–100 risk estimate for the address, where higher means riskier. There is no universally correct cut-off: most teams start by allowing scores under 40, challenging 40–74, and reviewing or blocking 75 and above, then tune against their own outcomes.

Does it work with IPv6? +

Yes. Both IPv4 and IPv6 addresses are accepted, and equivalent representations of the same IPv6 address are treated as one address.

How fast is a check? +

A typical check returns in well under a second.

What does a check cost? +

One credit per check, whatever the type. Credit packs are prepaid, there is no subscription, and credits do not expire. You start with 25 free credits after verifying your email.

Can I check many addresses at once? +

Yes — POST /api/v1/check/batch scores up to 100 addresses per request, billing one credit per successful check.