$0
That's the whole page.
ffraud is a free, open anti-fraud project, not a SaaS funnel. The API has no caps, the database is MIT-licensed open data on GitHub, and there is nothing to upgrade to.
Everything. That's the point.
- Unlimited IP lookups, public endpoint or API key
- Fraud score 0-100 with risk verdict and reason
- VPN, proxy, Tor, datacenter, and residential-proxy detection
- Geo, ASN, ISP, and company enrichment
- Batch lookups
- Email + disposable-domain checks
- Community reporting, evidence, and votes
- Usage dashboard with per-key stats
- Open-data downloads on GitHub, MIT licensed
- Commercial use welcome
- No credit card, ever
- No paid tier waiting to ambush you
The one honest footnote: fair-use rate limiting.
There are no daily or monthly caps. To keep responses sub-millisecond for everyone, we rate limit bursts (hundreds of requests per second per key, more than almost any real pipeline needs). If you are running something heavier, email us with one sentence about what you are building and we raise it. Still free.
[email protected]Your server asks. We answer. Under 1ms.
Every signup, every login, every checkout. One API call between your server and ours.
{
"ip": "185.220.101.34",
"tor": true,
"vpn": false,
"hosting": true,
"risk": "critical",
"action": "block"
}Tor exit node
Anonymous routing. Block at the door.
{
"ip": "146.70.147.135",
"vpn": true,
"vpn_provider": "M247",
"hosting": true,
"risk": "medium",
"action": "challenge"
}Commercial VPN
Could be a real customer hiding their IP. Challenge, don't block.
{
"ip": "23.94.56.118",
"hosting": true,
"cloud_provider": "HostPapa",
"vpn": true,
"risk": "medium",
"action": "hold"
}Datacenter / hosting IP
Real customers don't shop from a server farm. Hold for review.
Why is this free?
What's the catch?+
There isn't one. We're an anti-fraud project, not a SaaS funnel. Fraud data works better the more people use and contribute to it, so locking it behind a paywall would make the product worse. Free at scale is the strategy, not a teaser.
Are there rate limits?+
No daily or monthly caps. We rate limit bursts (hundreds of requests per second per key) purely to keep the API fast for everyone. Cross it and you get a 429 for a moment, not a paywall. Need sustained heavy throughput? Email us and we raise it, free.
What data do you have?+
28M+ records: IP reputation with threat categories (c2, botnet, brute-force, phishing and more), geo, proxy/VPN/Tor classification, ASN and datacenter detection, residential-proxy sightings, and 219k+ disposable email domains. Everything is confirmed by our honeypot sensors and community reports before it's published. 1.1M+ confirmed-abusive IPs ship around the clock on GitHub under MIT.
Can I use this commercially?+
Yes, API and open data both. The MIT license on the data means you can use it in commercial products, redistribute it, even build a paid product on top. Attribution appreciated, never required.
Will you ever charge?+
Not for anything that's free today. If we ever offer paid features, they'll be additional capabilities (custom datasets, dedicated infra, on-prem). Never restrictions on what's free right now.