FFraudFree toolsEmail blacklist check

Is this email address blacklisted?

Paste a full email address. We check the domain against the disposable and phishing lists, flag role accounts, look for a known spammer match, and surface any community reports filed against it.

Live email intelligence
<1ms

[email protected]

This address is on a disposable or temporary mailbox provider. It is designed to be abandoned, which makes it a poor basis for an account.

Disposable

Full history for the domain: mailinator.com

Pre-filled with an address on a well-known throwaway provider. Type any address to check yours.

Behind every check

24.4 million
IP addresses profiled
2.7 million
malicious domains tracked
226,000
disposable email domains
2.3 million
networks scored

Counts read live from the engine, not written into the page. The full dataset is published on GitHub under the MIT license and rebuilt every 30 minutes.

What this checks

Disposable and temporary providers

Whether the domain hands out throwaway mailboxes. This is the single strongest signal on a signup form, and our list is one of the largest published anywhere.

Phishing and scam domains

Whether the domain appears in our malicious-domain dataset, which is far larger than the disposable list and covers domains built to deceive rather than to be discarded.

Role accounts

Addresses such as admin, info, support, sales, or noreply. Not malicious, but they belong to a function rather than a person, and treating them as individual users breaks assumptions in signup and billing flows.

Known spammer addresses

A match against addresses observed sending spam or used in fraud.

Community reports

Whether operators have reported the address, how many times, and what for.

Format validity

Whether the address is syntactically usable at all, which catches typos and junk before anything else runs.

What this is not

This does not verify that the mailbox exists. Tools sold as email verifiers open an SMTP conversation with the receiving server to ask whether a specific mailbox is real, which answers deliverability. We answer a different question: whether an address is trustworthy enough to accept. An address can be perfectly deliverable and still be a burner created sixty seconds ago, and that address is the one that costs you money. If your problem is bounce rate on a mailing list, you want a verifier. If your problem is fake signups, trial abuse, or fraud, you want this.

Using this at signup

Block disposable, do not block unfamiliar

A throwaway domain at registration is a strong and safe signal to act on. An unrecognized domain is not: most of the world's real email sits on domains no blocklist has ever heard of, because they belong to ordinary small companies.

Never block the majors

Gmail, Outlook, Yahoo, iCloud, Proton, GMX, Yandex and dozens more sit on a hard allowlist here. No data source can push them onto the disposable list, so a feed poisoning incident cannot make you reject your own customers.

Free mail forwarding is not disposable

Cloudflare Email Routing, registrar forwarding, and similar services are used heavily by throwaway operations and just as heavily by legitimate people who want an address at their own domain. Treated as automatic guilt, it produces false positives.

Questions people ask.

Paste the full address into the box above. We check the domain against our disposable and phishing datasets, flag role accounts, look for a known-spammer match, and show any community reports filed against that address. The result explains which signal fired rather than just returning a pass or fail.

It depends entirely on which signal fired, which is why the result names it. A disposable domain means the mailbox is designed to be abandoned and is a strong reason to challenge a signup. A phishing domain means the domain itself was built to deceive. A role account simply means the address belongs to a function rather than a person. Treating those three as one verdict is how good customers get rejected.

No. We assess whether an address is trustworthy, not whether mail to it will land. Mailbox existence requires an SMTP probe against the receiving server, which is what dedicated email verification services do. The two checks answer different questions and are worth running for different reasons.

A free account adds batch checking of up to 100 addresses per API call, with no cost and no cap on total volume. The full disposable-domain list is also published on GitHub under the MIT license, so you can screen addresses entirely offline with no API calls at all.

The major mailbox providers are hard-allowlisted and can never be flagged as disposable. Beyond that we hold a deliberately asymmetric standard: a domain is added on the agreement of multiple independent sources, and removed if none of them still call it disposable and at least two call it clean. We have found and removed real businesses that were wrongly listed by upstream feeds, and that audit runs continuously rather than as a one-off cleanup.

Do it in code.

The same answer from a free API endpoint, with the reason, the recency and the network around the address. Or download the confirmed blocklist for bulk blocking. No card, no quota, no expiry.