Fintech APIs & Platform for KYC, Verification & Transactions in India | Eko Platform Services
Eko Platform Services Logo
← Back to Home

Email Verification API for Onboarding & Fraud Prevention

Catch invalid, dummy, and mistyped email addresses in real time. Verify that an email domain actually exists and can receive messages — reduce bounce rates, block fake signups, and ensure valid contact data during onboarding.

Get Sandbox Access View Documentation

Starts at ₹8.40 per check · excl. GSTView Pricing

Overview

The Email Verification API helps businesses catch invalid, dummy, and mistyped email addresses before they enter your system. It checks whether the email domain is real and can receive messages, and returns domain age to help assess trust — a newly created domain with no mail infrastructure is a strong fraud signal.

What Can You Verify With Email Verification API?

Key details returned across all Email Verification API endpoints, ready to power your KYC and onboarding workflows.

Domain

Domain portion of the email address (part after @). Used to anchor all domain-level checks.

Is Email Valid?

Whether the email address is valid and deliverable. true = domain has live MX records and can receive mail; false = domain has no mail server or is otherwise undeliverable.

Is Disposable Email?

Whether the email domain belongs to a known disposable / temporary email provider. true = disposable (high fraud risk); false = regular email domain.

Domain Age (Days)

Age of the email domain in days since registration. Newly created domains (< 30 days) are a strong fraud signal; legitimate email providers have domains that are years old.

MX Records

List of MX (mail exchange) hostnames discovered for the domain, ordered by priority. An empty array means the domain cannot receive email.

Simplified API Preview

Email Verification API Flow – Sample Request and Response

Send simple inputs. Get rich, verified data in seconds.

Verify an email address in real time — confirm the domain has live mail infrastructure, detect disposable addresses, and retrieve domain age as a trust signal.

REQUEST
Emailrajesh.kumar@example.com
RESPONSE
200 OK
Domainexample.com
Is Email Valid?true
Is Disposable Email?false
Domain Age (Days)6970
MX Records["aspmx.l.google.com","alt1.aspmx.l.google.com","alt2.aspmx.l.google.com","alt3.aspmx.l.google.com","alt4.aspmx.l.google.com"]

Key Features

Everything you need to integrate and scale

Invalid Email Detection

Catch dummy, mistyped, and non-existent email addresses by verifying the domain has real mail infrastructure.

Domain Trust Scoring

Returns domain age in days — newly created domains are a strong indicator of fraudulent or disposable email addresses.

Mail Server Validation

Checks MX (mail exchange) records to confirm the domain can actually receive emails — not just that the format is valid.

Real-Time Processing

Instant email validation for inline onboarding and registration flows.

Who Should Use This API?

E-commerce and marketplace platforms
SaaS and subscription platforms
Staffing and HR platforms
Financial institutions

Primary Use Cases

Block dummy emails during user onboarding
Catch typos in email addresses at signup
Detect fraudulent signups with new/suspicious domains
Contact database cleaning
Employee contact verification

How to Integrate

Get started in minutes with our simple integration process

  1. 1

    Sign Up

    Sign up in minutes with your mobile number (OTP verify).

  2. 2

    Verify Identity

    Complete your basic KYC with PAN and address details to verify your identity.

  3. 3

    Test APIs Live

    Load funds into your wallet and test the verification APIs live — evaluate before you integrate.

  4. 4

    Integrate with AI

    Ready to build? Visit our AI hub for free plugins & tools to integrate faster.

  5. 5

    Go Live

    Start verifying emails in production.

Frequently Asked Questions

What input is required?+

Only the email address is required for verification.

How does it catch dummy emails?+

The API checks if the email domain has valid mail exchange (MX) records — domains without mail servers can't receive emails, indicating a fake or dummy address.

What is the domain age check?+

The API returns domain age in days. Newly created domains (days or weeks old) are a strong fraud signal — legitimate businesses and email providers have domains that are years old.

Can I use this for bulk email list cleaning?+

Yes. You can validate email lists by making parallel API calls to clean your contact database and remove invalid entries.

How do I get started?+

Sign up at ekostore.app/eps, verify your identity with your PAN and address details, load your wallet to test the verification APIs live, then integrate and go live.

What is EPS?+

EPS (Eko Platform Services) is the technology arm of Eko, providing the developer tools, AI tools, and APIs that power modern fintech integration.

Also see:About Eko
What are the different ways to integrate with Eko EPS?+

Integrate in whichever way suits your stack: call the REST APIs directly, use our official SDKs (JavaScript and PHP) to skip request-signing boilerplate, or let an AI coding agent build the integration using our MCP server and skills. See the Developers and AI sections for each path.

How does API authentication work?+

Each request carries your static `developer_key` header plus a per-request `secret-key` header — an HMAC-SHA256 signature of the current timestamp, keyed by your access key. The access key itself is never sent over the wire. You receive UAT keys on signup and production keys after KYC.

Is there a sandbox environment for testing?+

Yes. A full sandbox environment is available immediately on signup. You can test your integration end-to-end before going live — no commitment required.

Also see:Get started
What are the sandbox and production base URLs?+

Sandbox and production share the same paths and differ only by base URL: use https://staging.eko.in/ekoapi/v3 for UAT / Sandbox, and https://api.eko.in/ekoicici/v3 for Production. A common cause of failures is calling the sandbox/staging URL with live credentials (or vice-versa) — make sure the base URL matches the keys you are using.

Do I need to whitelist my server IP?+

Production API access may require your static public (server) IP to be whitelisted. If your calls work from Postman but fail or time out from your own server, share your static public IP with us so we can whitelist it.

What response times can I expect?+

Most verification APIs return in real time with sub-second responses, and 99th-percentile latency stays under two seconds across verification endpoints. Transaction APIs (DMT, AePS, BBPS) respond within seconds.

Can the API handle high volumes?+

Yes. The API is designed to handle large-scale volumes reliably without performance degradation.

How is API usage billed?+

Usage is billed per successful API call with no minimum commitment. Volume-based pricing tiers are available — contact our team for detailed rates.

Get API Access

Sign up now and start integrating in minutes. Our team will help you go live quickly.

  • Sandbox access in minutes
  • Dedicated integration support
  • Comprehensive documentation
  • Reliable, high-volume workflows

Get Email Verification API Access

Get started in 10 minutes