Skip to content
العربية English Start free trial
IP Location IntelligenceCountry, city, timezone and network type for any IPv4 or IPv6 address. Proxy & VPN DetectionFlag VPNs, proxies, Tor exits, bots and hosting ranges before they sign up. Payment Fraud ScoringA 0–100 risk score for every transaction, built from 21 rules and your own outcomes. Card BIN LookupIssuer, scheme, card type and country from the first six digits. IBAN ValidationChecksum, bank and country checks before you send a payout. Email & Phone ScoringDisposable and role-based emails and disposable numbers caught at sign-up. Profanity FilterKeep user-generated text clean in Arabic and English. ASN IntelligenceWho owns the network, and whether it is an ISP, hosting or business. Country IntelligenceCurrencies, dial codes, capitals and timezones for every country.
Use cases
Payment fraudCatch fraud at checkout. Keep chargebacks off your books. Fake accountsReal users sign up. Bots and burner accounts do not. SMS fraudEvery code you send should reach a real person. Account takeoverKeep hackers out. Keep customers in. Safe communitiesClean conversations, in every dialect. Web personalizationThe right language, currency and content, from the first request.
Explore
Build
Integration guideFrom sign-up to production in six steps API referenceEverything the API does, with examples API filesThe OpenAPI spec for your tools SDKs & librariesCopy-ready calls for the languages you use IntegrationsPlug Gurdx into the tools you already run
Learn
ArticlesUse-case guides for fraud and payments Knowledge baseAnswers for the dashboard, billing and your account ChangelogWhat shipped, and when
Changelog v1.1.0Feedback and learning
Legal & security

The documents behind the service

Terms, privacy and the data licences behind the service, in plain language.

Legal
Terms of service

What you can expect from Gurdx and what we expect from you.

Read
Privacy
Privacy policy

What we collect, why, for how long and your rights.

Read
Data
Data licences

Attribution for the open datasets behind some of our reference data.

Read

Security in short

Traffic is encrypted in transit, secrets are stored encrypted or hashed, administrators sign in with two-factor authentication, and API keys can be restricted to authorised hosts. Request logs are kept for 90 days.

Full card numbers are never stored — only the BIN, last four digits and a keyed hash.
Delete an end user's data at any time with the user-deletion method.
Get started

Start blocking fraud today

Create an account, add one API call and watch the first bad actor get stopped before checkout.

1,000 free requests Live in an afternoon Cancel anytime
Start free trial Talk to sales Free trial included. Upgrade when you grow.