Get started with Number Risk Score
Number Risk Score returns a fraud risk level for a phone number. Set up the prerequisites, confirm availability, review the API input and output, and act on the risk level returned.
Before you begin
To use Number Risk Score, you need:
- An Infobip account. Sign up for a free account if you do not have one. See Create an account for more details.
- Enrollment in the Early Access program. Contact your account manager or Support to request access.
- Explicit consent from the end user before each API call. See Consent for details.
Availability
Number Risk Score is available through the Early Access program in the following countries:
- Brazil
- Colombia
- Mexico
- Malaysia
- Philippines
Indonesia availability is in progress and not yet included.
To enroll or learn more about the Early Access program terms, contact your account manager or Support.
Consent
The end user must provide explicit consent before you can use Number Risk Score. Consent is mandatory for every API call. Collect it each time before invoking the API.
See Data and privacy for consent wording and data retention details.
Input
The following parameters are required to call the API.
| Parameter | Required | Description |
|---|---|---|
| Phone number | Yes | The phone number of the end user, in E.164 format without the + prefix. For example, 639050387416. |
| End-user consent | Yes | Explicit consent provided by the end user to process their phone number. |
Output
The API returns the following parameters.
| Parameter | Description |
|---|---|
| Status | Indicates whether the API request was processed successfully and whether data is available for the number. |
| Request ID | Unique identifier for the API request. |
| Risk level | Overall risk level for the phone number: low, medium, high, or unknown. This composite score is calculated by Infobip and is not configurable per client in the current Early Access version. |
| Number tenure and last seen | When the phone number was first seen and last seen on the Infobip platform. |
| Carrier information | Country, network, and ported status associated with the number. |
| Line type | Type of phone line associated with the number, such as mobile, fixed line, or VoIP. See Response attributes for the full list of values. |
| Phone number velocity | Traffic volume the phone number received in the last 24 hours and 90 days, each with its own risk level. |
| Number range velocity | Traffic volume received by the associated number range in the last 24 hours and 90 days, each with its own risk level. A number range covers 1,000 consecutive numbers. |
| Trust indicator | Score based on interactions with legitimate entities such as government agencies, banks, and telecoms. |
| Bot-like behavior | Indicates whether the phone number has exhibited bot-like behavior in the past. |
For a detailed description of every field and its possible values, see Response attributes.
The API returns a response similar to the following:
How the risk level works
Number Risk Score returns a risk level of low, medium, or high. Number Risk Score derives the risk level from a combination of behavioral signals. No single signal determines the outcome.
Signals analyzed include:
- Number age
- Traffic anomalies
- Range-level attack patterns
- Trusted interactions with government agencies, banks, and telecoms
- Bot-like behavior indicators
If there is little or no data on a phone number, Number Risk Score still returns a result. Zero or missing values are themselves meaningful signals that you can incorporate into your fraud logic.
Use the risk level to determine the action for each interaction:
Allow the interaction for low-risk numbers.
Require additional verification for medium-risk numbers.
Deny the interaction for high-risk numbers.