Free tools / VPN and Proxy Check
VPN, proxy and datacenter check
Most fraud, credential stuffing and bot traffic arrives through something that hides the real network: a commercial VPN, an open proxy, a Tor exit node or a rented server in a datacenter. This check tells you whether an IP falls into any of those categories, so you can add friction to the risky ones and leave everyone else alone.
The right response is rarely a hard block. Plenty of real customers use VPNs at work. The pattern that works is to treat anonymized IPs as a signal, combine it with the phone and email checks, and step up verification when several signals line up.
What you get back
Datacenter or hosting. The IP belongs to AWS, Google Cloud, DigitalOcean, OVH or another hosting range. Real consumers rarely browse from there.
Proxy and VPN. Known anonymizing services and open proxies.
Tor. Tor exit nodes, which are nearly always worth a second look on a payment.
Location. Country and city, so you can also spot a mismatch with the billing address or phone number.
How to use it
- Paste the IP from the request.
- Press Check IP.
- Score it. One flag alone is a maybe. A flag plus a VoIP phone plus a disposable email is a no.
Who uses this
Payments and checkout. Chargebacks cluster on anonymized IPs. A check before capture is cheap insurance.
Account security. A login from a Tor exit or a datacenter in another country is worth a second factor.
Ad and affiliate platforms. Click fraud and lead fraud run through proxies and hosting ranges at scale.
Same check, in your code
One API key, one credit pool, 1,000 free lookups to start. Phone, email, IP and DNS checks from a single endpoint, and you only pay for lookups that return an answer.
Start free Read the docsQuestions
Should I block every VPN user?
No. Corporate VPNs and privacy-minded customers are real revenue. Use the flag to add a step, not to reject.
How do you detect VPNs?
Through provider ranges, ASN classification and known-service databases. Detection is strong for commercial VPNs and datacenters, weaker for residential proxies, which the API risk score handles better.
What is the difference between proxy and hosting?
Hosting means the IP is in a datacenter range. Proxy means the IP is known to relay traffic for others. A VPN is usually both.
Can a mobile IP look like a proxy?
Carrier-grade NAT puts thousands of phones behind one IP, which can look suspicious in volume-based systems. We flag mobile networks separately so you can treat them correctly.