API Documentation

RiskIPFraud API Documentation

Learn how to integrate IP fraud detection and risk scoring into your application.

Quick Start

Get started with the RiskIPFraud API in minutes

1. Get Your API Token

2. Make Your First Request

Use the endpoint below to check any IP address:

https://riskipfraud.com/api/?token=YOUR_API_TOKEN&ip=216.58.194.174

API Endpoint

HTTP Request

GET /api/

Query Parameters

token

Required

Your API authentication token

ip

Required

The IP address to analyze (IPv4 or IPv6)

Example Request

curl "https://riskipfraud.com/api/?token=YOUR_API_TOKEN&ip=216.58.194.174"

Response Format

Understanding the API response structure

Example Response

{ "riskipfraud": { "status": "ok", "mode": "live", "ip": "216.58.194.174", "riskipfraud_score": 1, "riskipfraud_risk": "low", "riskipfraud_url": "https://riskipfraud.com/ip/216.58.194.174", "riskipfraud_isp": "Google LLC", "riskipfraud_org": "Google LLC", "riskipfraud_isp_score": 1, "riskipfraud_isp_risk": "low", "riskipfraud_proxy": { "is_datacenter": true, "is_vpn": false, "is_apple_icloud_private_relay": false, "is_amazon_aws": false, "is_google": true }, "is_blacklisted_external": false, "credits": { "used": 1, "remaining": 4999, "last_sync_timestamp_utc": "2025-12-11 12:24:26", "seconds_elapsed_since_last_sync": 78, "note": "Credits used and remaining are approximate values." }, "exec": "13.61 ms" }, "external_datasources": { "dbip": { "ip_country_code": "US", "ip_state_name": "Arizona", "ip_city": "Phoenix", "ip_geolocation": "33.4484,-112.074", "isp_name": "Google LLC", "org_name": "Google LLC" }, "ip2proxy": { "proxy_type": "PUB" } } }

Key Response Fields

riskipfraud_score0-100

Overall fraud risk score. Higher values indicate higher risk.

riskipfraud_risklow|medium|high|very high

Risk level classification based on the score.

riskipfraud_proxyobject

Proxy detection details including VPN, datacenter, and cloud provider flags.

is_blacklisted_externalboolean

Whether the IP is found on external blacklists.

Risk Analysis Guide

How to interpret and act on risk scores

Low Risk (0-25)

Legitimate residential or business IP. Safe to allow with normal processing.

Medium Risk (26-75)

Potentially suspicious. Consider additional verification (2FA, email confirmation).

High Risk (76-90)

High fraud indicators detected. Implement strict verification or rate limiting.

Very High Risk (91-100)

Known malicious IP or extreme fraud indicators. Consider blocking or manual review.

Best Practices

•Combine risk score with proxy detection flags for better accuracy
•Check ISP risk score separately for organization-level insights
•Monitor blacklist status for known threat actors
•Use geolocation data to detect mismatched user claims

Error Codes

400

Bad Request

Missing or invalid IP parameter

401

Unauthorized

Invalid or missing API token

429

Too Many Requests

Rate limit exceeded

500

Internal Server Error

Server error occurred