> ## Documentation Index > Fetch the complete documentation index at: https://docs.dojah.io/llms.txt > Use this file to discover all available pages before exploring further. # User Screening API: Pre-Onboarding Risk Check > Screen a user by name, DOB, email, phone, and IP before onboarding. Runs AML checks against PEP, OFAC, sanctions, and adverse media across 200+ countries and 42,800+ databases. ## Request ```http [GET] theme={null} {{baseUrl}}api/v1/fraud/user ``` | Parameter | Type | Description | Required | | ------------------ | ------ | ----------- | -------- | | first\_name \* | string | First Name | required | | last\_name \* | string | Last Name | required | | middle\_name | string | Middle Name | optional | | date\_of\_birth \* | string | | required | | email | string | Email | optional | | phone | string | Phone No | optional | | ip\_address | string | IP Address | optional | ## Sample response ```json Response theme={null} { "entity": { "overall_risk_score": 80, "phone_check_result": { "account_details_registered": [ "skype", "angelist", "instagram" ], "carrier": "T-MOBILE USA, INC", "country": "US", "disposable": false, "flags": [], "number": 16502969060, "score": 4, "type": "mobile", "valid": true }, "aml_screening_result": [ { "match_type": "Individual", "name": "John Asake Doe", "nameMatchScore": 80, "profileId": "WC2095906" } ], "email_check_result": { "account_details_registered": [ "skype", "angelist", "instagram" ], "breach_details": { "first_breach": null, "haveibeenpwned_listed": false, "number_of_breaches": 0 }, "domain_details": { "accept_all": false, "created": "2004-09-27 18:06:20", "custom": true, "disposable": false, "dmarc_enforced": false, "domain": "example.com", "expires": "2023-09-27 18:06:20", "free": false, "registered": true, "registered_to": "NameFind LLC", "registrar_name": "GoDaddy.com, LLC", "spf_strict": false, "suspicious_tld": false, "tld": ".com", "updated": "2022-08-16 04:46:10", "valid_mx": false, "website_exists": true }, "deliverable": false, "email": "test@example.com", "score": 4, "type": "mobile", "valid": true }, "ip_check_result": { "ip": "2.58.56.101", "blacklists": { "detections": 11, "engines_count": 85, "detection_rate": "13%" }, "ip_details": { "reverse_dns": "powered.by.rdp.sh", "continent_code": "EU", "continent_name": "Europe", "country_code": "DE", "country_name": "Germany", "country_currency": "EUR", "country_calling_code": "49", "region_name": "Hamburg", "city_name": "Hamburg", "latitude": 53.575321197509766, "longitude": 10.015339851379395, "isp": "1337 Services GmbH", "asn": "AS210558" }, "anonymity": { "is_proxy": false, "is_webproxy": false, "is_vpn": false, "is_hosting": false, "is_tor": true }, "risk_score": { "result": 100 } } }, "uuid": "41f963a5-3d6b-41ec-aac8-bbc5247a4966" } ``` ### Response Fields | Field | Type | Description | | ------------------------------------------------------------------ | ----------- | ---------------------------------------------------------------------------- | | entity | object | Contains the full user screening result | | entity.overall\_risk\_score | integer | Combined risk score from 0 (no risk) to 100 (highest risk) across all checks | | entity.phone\_check\_result | object | Phone number risk assessment results | | entity.phone\_check\_result.account\_details\_registered | array | List of online platforms where the phone number has registered accounts | | entity.phone\_check\_result.carrier | string | Name of the telecom carrier for the phone number | | entity.phone\_check\_result.country | string | ISO country code where the phone number is registered | | entity.phone\_check\_result.disposable | boolean | `true` if the phone number is from a disposable or virtual phone service | | entity.phone\_check\_result.flags | array | List of risk flags associated with the phone number | | entity.phone\_check\_result.number | integer | The phone number that was checked | | entity.phone\_check\_result.score | integer | Risk score for the phone number check | | entity.phone\_check\_result.type | string | Line type (e.g., "mobile", "landline", "voip") | | entity.phone\_check\_result.valid | boolean | `true` if the phone number is valid and properly formatted | | entity.aml\_screening\_result | array | List of AML (Anti-Money Laundering) screening matches | | entity.aml\_screening\_result\[].match\_type | string | Type of match found (e.g., "Individual", "Entity") | | entity.aml\_screening\_result\[].name | string | Name of the matched individual or entity | | entity.aml\_screening\_result\[].nameMatchScore | integer | Similarity score between the input name and matched name (0–100) | | entity.aml\_screening\_result\[].profileId | string | Unique profile identifier for the matched record | | entity.email\_check\_result | object | Email address risk assessment results | | entity.email\_check\_result.account\_details\_registered | array | List of online platforms where the email has registered accounts | | entity.email\_check\_result.breach\_details | object | Data breach information for the email | | entity.email\_check\_result.breach\_details.first\_breach | string/null | Date of the first known breach, or null if none found | | entity.email\_check\_result.breach\_details.haveibeenpwned\_listed | boolean | `true` if the email appears in the Have I Been Pwned database | | entity.email\_check\_result.breach\_details.number\_of\_breaches | integer | Total number of known data breaches involving this email | | entity.email\_check\_result.domain\_details | object | Details about the email's domain | | entity.email\_check\_result.domain\_details.accept\_all | boolean | `true` if the mail server accepts all emails regardless of address | | entity.email\_check\_result.domain\_details.created | string | Domain creation date and time | | entity.email\_check\_result.domain\_details.custom | boolean | `true` if the email uses a custom domain (not a free provider) | | entity.email\_check\_result.domain\_details.disposable | boolean | `true` if the domain is a disposable or temporary email service | | entity.email\_check\_result.domain\_details.dmarc\_enforced | boolean | `true` if the domain enforces DMARC authentication | | entity.email\_check\_result.domain\_details.domain | string | The domain part of the email address | | entity.email\_check\_result.domain\_details.expires | string | Domain expiration date and time | | entity.email\_check\_result.domain\_details.free | boolean | `true` if the email uses a free provider (e.g., Gmail, Yahoo) | | entity.email\_check\_result.domain\_details.registered | boolean | `true` if the domain is currently registered | | entity.email\_check\_result.domain\_details.registered\_to | string | Name of the domain registrant | | entity.email\_check\_result.domain\_details.registrar\_name | string | Name of the domain registrar | | entity.email\_check\_result.domain\_details.spf\_strict | boolean | `true` if the domain has strict SPF records | | entity.email\_check\_result.domain\_details.suspicious\_tld | boolean | `true` if the TLD is commonly associated with abuse | | entity.email\_check\_result.domain\_details.tld | string | Top-level domain of the email address | | entity.email\_check\_result.domain\_details.updated | string | Date the domain registration was last updated | | entity.email\_check\_result.domain\_details.valid\_mx | boolean | `true` if the domain has valid mail exchange records | | entity.email\_check\_result.domain\_details.website\_exists | boolean | `true` if the domain hosts an active website | | entity.email\_check\_result.deliverable | boolean | `true` if the email address can receive messages | | entity.email\_check\_result.email | string | The email address that was checked | | entity.email\_check\_result.score | integer | Risk score for the email check | | entity.email\_check\_result.type | string | Type of email account | | entity.email\_check\_result.valid | boolean | `true` if the email address is valid | | entity.ip\_check\_result | object | IP address risk assessment results | | entity.ip\_check\_result.ip | string | The IP address that was checked | | entity.ip\_check\_result.blacklists | object | Blacklist detection results | | entity.ip\_check\_result.blacklists.detections | integer | Number of engines that flagged the IP | | entity.ip\_check\_result.blacklists.engines\_count | integer | Total number of threat intelligence engines queried | | entity.ip\_check\_result.blacklists.detection\_rate | string | Percentage of engines that flagged the IP | | entity.ip\_check\_result.ip\_details | object | Geolocation and network information for the IP | | entity.ip\_check\_result.ip\_details.reverse\_dns | string | Reverse DNS hostname for the IP | | entity.ip\_check\_result.ip\_details.continent\_code | string | Two-letter continent code | | entity.ip\_check\_result.ip\_details.continent\_name | string | Full name of the continent | | entity.ip\_check\_result.ip\_details.country\_code | string | ISO country code | | entity.ip\_check\_result.ip\_details.country\_name | string | Full name of the country | | entity.ip\_check\_result.ip\_details.country\_currency | string | Currency code of the country | | entity.ip\_check\_result.ip\_details.country\_calling\_code | string | International calling code for the country | | entity.ip\_check\_result.ip\_details.region\_name | string | Name of the region or state | | entity.ip\_check\_result.ip\_details.city\_name | string | Name of the city | | entity.ip\_check\_result.ip\_details.latitude | number | Geographic latitude coordinate | | entity.ip\_check\_result.ip\_details.longitude | number | Geographic longitude coordinate | | entity.ip\_check\_result.ip\_details.isp | string | Internet Service Provider name | | entity.ip\_check\_result.ip\_details.asn | string | Autonomous System Number | | entity.ip\_check\_result.anonymity | object | Anonymity and proxy detection results | | entity.ip\_check\_result.anonymity.is\_proxy | boolean | `true` if the IP is a proxy server | | entity.ip\_check\_result.anonymity.is\_webproxy | boolean | `true` if the IP is a web-based proxy | | entity.ip\_check\_result.anonymity.is\_vpn | boolean | `true` if the IP is a VPN endpoint | | entity.ip\_check\_result.anonymity.is\_hosting | boolean | `true` if the IP belongs to a hosting or data center provider | | entity.ip\_check\_result.anonymity.is\_tor | boolean | `true` if the IP is a known Tor exit node | | entity.ip\_check\_result.risk\_score | object | IP risk assessment | | entity.ip\_check\_result.risk\_score.result | integer | Risk score from 0 (no risk) to 100 (highest risk) | | uuid | string | Unique identifier for this screening request |