Disposable email checker
Check an address against ~10,000 throwaway inbox providers, verify the domain can receive mail, and spot alias tricks.
What this checks
- Disposable domain: matched against the open-source disposable-email-domains list (CC0), refreshed regularly.
- Mail server: whether the domain publishes MX records and can receive email at all.
- Alias tricks: Gmail dots and
+tagsthat hide a repeat signup. - Random-looking usernames: strings like
xk29fj3qon free providers, typical of scripts.
Checking one email isn’t the hard part
Blocklists of disposable domains are free. What breaks homemade defenses is everything around them: new domains every week, Gmail aliases, the same device behind 40 “different” emails. That’s what the BurnGuard API adds: device reuse, velocity and clustering across your signups.
Using Supabase? See how to block disposable emails in Supabase Auth.
FAQ
Where does the disposable domain list come from?
We use the open-source disposable-email-domains list (CC0) with roughly 10,000 domains, plus our own allowlist so mainstream providers are never flagged. See our data sources page.
What does "no mail server" mean?
The domain has no MX record, so it cannot receive email. Signups from such domains are almost always fake or typos.
Should I block every disposable email?
For a free tier with real costs, usually yes, or at least gate the credits. Some privacy-minded users use relay services; that is why BurnGuard returns reasons and lets you choose limit instead of block.
Catch these signups automatically.
One API call at signup. Starts in monitor mode, so nothing breaks.