Disposable Email Lookup

Disposable Email Lookup That Flags Disposables

Paste one email and see in two seconds if it is disposable, temporary, or throwaway, matched against a continuously-refreshed disposable email domains list with 99.99% accuracy.

Read the docs for the full API and bulk jobs, or wire it into your signup.

Trusted by 500,000+ leading GTM teams of all sizes

From paste to verdict

How the disposable email lookup works

Three steps, no signup, no card on file. Paste one address, watch the engine match it against the disposable email domains list, and read the verdict.

001PASTE

Paste the address

Drop the one email you want to look up into the box. Gmail, Outlook, custom domains, and burner domains all welcome. Four lookups a day, no account and no card.

002ENGINE

Run the 9-check engine

Nine checks fire in parallel - syntax, DNS, SMTP, catch-all, disposable, role, age, auth, and mailbox state - matching the domain against a refreshed disposable email domains list.

003VERDICT

Get the disposable verdict

Read the result in about two seconds: valid, invalid, or risky, with a confidence score, the per-check breakdown, and a clear disposable flag so you know if the address is a throwaway.

The 9-point engine

Nine checks behind every lookup

The disposable match is one of nine. The same engine our paid plans run weighs it against SMTP, catch-all, domain age, and reputation.

  1. 01

    Syntax

    Every address runs a full RFC 5321 and RFC 5322 compliance pass before a single network call goes out. The engine catches what visual scanning misses, the double dot in [email protected], the trailing period, the IDN homograph that looks valid but resolves to a different domain.

    Bundled typo suggestions let your form offer “did you mean [email protected]?” instead of rejecting silently.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Syntax tile is ringed in the nine-check result board, beside a card showing the parse of matthamnett @ avencera.ai against RFC 5321 and RFC 5322, verdict “Valid format”.
  2. 02

    Domain & MX

    Once syntax passes, the engine resolves the domain. We confirm the DNS records exist, fetch the MX record priority list in order, and verify at least one mail-exchange server is actively accepting connections right now.

    Misspelled domains like gmial.com, expired domains, and parked-for-sale domains all fail this gate before the engine wastes a single SMTP roundtrip.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the MX Record tile is ringed in the result board, beside a card showing the real MX 0 record avencera-ai.mail.protection.outlook.com on Microsoft 365, verdict “MX record found”.
  3. 03

    SMTP handshake

    The engine opens a TCP connection on port 25, performs the EHLO handshake, then negotiates MAIL FROM and RCPT TO. Every server response code (220, 250, 550, 552) is parsed deterministically against the IANA enhanced-status registry.

    This is the moment a mailbox proves it actually exists. No third-party guesses, no statistical heuristics, just the receiving server's own answer.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the SMTP Connect tile is ringed in the result board, beside a card showing the EHLO → MAIL FROM → RCPT TO exchange and the server’s 250 2.1.5 Recipient OK reply, verdict “Mailbox proven”.
  4. 04

    Catch-all detection

    Some domains accept every email regardless of whether the mailbox exists, a setup known as a catch-all configuration. The engine sends a deterministic probe to a deliberately fake address ([email protected]); if the server returns the same 250 OK it returned for the real address, the domain is catch-all.

    The verdict isn't dropped, it's flagged RISKY so you know the deliverability signal is degraded.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Catch-All tile is ringed in the result board, beside a card comparing the real address (250 OK) with a deliberately fake probe (550 rejected), verdict “Validates recipients”.
  5. 05

    Disposable

    The engine maintains a curated registry of 10,247 disposable email providers, including Mailinator, Guerrilla Mail, 10MinuteMail, Tempmail, and the long tail of regional clones.

    Any address matching the blocklist is flagged INVALID. Deliverability to a mailbox that exists for 10 minutes and is never checked is functionally zero, regardless of whether the SMTP handshake passes.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Disposable tile is ringed in the result board, beside a card showing the 10,247-provider throwaway blocklist and no match for avencera.ai, verdict “Legitimate domain”.
  6. 06

    Role address

    info@, support@, no-reply@, admin@, billing@. These are shared inboxes, not individuals.

    The engine extracts the local-part of every address, matches it against the known role-prefix registry, and tags the result with a reduced engagement score.

    You don't drop them automatically. The verdict flags them as roles so you can decide.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Role Address tile is ringed in the result board, beside a card matching the local-part matthamnett against the info@ / support@ / no-reply@ / admin@ role registry with no match, verdict “Personal address”.
  7. 07

    Domain age

    Fresh-spam domains registered hours ago are the single biggest source of inbound abuse. The engine queries WHOIS and RDAP for every unique domain, extracts the registration date, and flags anything under 30 days old with a “fresh” warning.

    Domains aged 5+ years pick up a corresponding trust signal. The same heuristic spam filters have been using since the early 2000s, ported into the verdict.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Domain Age tile is ringed in the result board, beside a card showing the WHOIS creation date 2025-07-10 against the 30-day fresh-spam threshold, verdict “1y old”.
  8. 08

    Email authentication

    SPF, DKIM, and DMARC together prove the sender is authorised to send from that domain.

    The engine reads each policy via DNS, validates SPF includes recursively, scans six common DKIM selectors, and confirms DMARC alignment with the From: header.

    A failing DMARC policy means the sender can be spoofed, so the verdict warns you before you reply.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the DMARC tile is ringed in the result board, beside a card showing the real SPF include, DKIM selector1/selector2 and DMARC p=reject records, verdict “Aligned & enforcing”.
  9. 09

    Mailbox state

    Beyond “exists vs doesn't exist”, the engine extracts the precise mailbox state from the SMTP server's response. Full inbox (552 / 522 quota), disabled mailbox (550 5.1.1), out-of-office autoresponder, frozen account.

    Each state maps to a specific retry policy. Full inbox retries in 6 hours. Disabled drops permanently. The verdict tells you which bucket the bounce belongs in so your retry logic doesn't waste cycles.

    /dashboard/verify
    The Verifox dashboard verifying matthamnett@avencera.ai: the Inbox Exists tile is ringed in the result board, beside a card showing the live 250 2.1.5 active reply against the full-inbox and disabled states that drive retry policy, verdict “Inbox confirmed”.
Disposable email lookup, explained

What a disposable email list lookup actually does

Not a static list check. A live nine-check verdict with disposable-domain matching, read alongside every other signal Verifox already runs.

A disposable email list lookup answers one question about one address: is this a real, reachable inbox, or a throwaway someone spun up to clear a form and disappear? You paste the email, and Verifox matches its domain against a continuously-refreshed disposable email domains list covering temporary and burner providers like Mailinator, Guerrilla Mail, and Temp Mail, then returns a clear verdict in about two seconds. No list to download, nothing to install, and your first four lookups each day are free.

How we stack up

Verifox vs the other disposable checkers

Most disposable-domain lists become outdated, letting new burner providers through. Verifox refreshes continuously with no-signup lookups, high accuracy, and MCP support.

★ The accurate checkerVerifox
NeverBounce99.0%
ZeroBounce99.6%
NeverBounce
ZeroBounce
NeverBounce1,000 / monthly
ZeroBounce100 / monthly
NeverBounceYes
ZeroBounceNever
NeverBounceFlagged only
ZeroBounceAI scoring
NeverBounce
ZeroBounce
NeverBounce
ZeroBounce
NeverBounce
ZeroBounce
NeverBounce
ZeroBounce
What teams are saying

Built for the teams that ship outbound

Growth leads, marketers, and engineers running real campaigns on real lists, with a verified email on every byline.

Thomas George, GTM Lead at Stripe

90% lower bill, 0.4% bounces

We were paying ZeroBounce a four-figure monthly bill and still landing 3% bounces on cold campaigns. Switched the pipeline to Verifox, dropped to 0.4% bounces, and cut the bill by more than 90%.
Thomas G.GTM Lead, Stripe
Brittany King, GTM Lead at HubSpot

Catch-all finally has a verdict

Other tools flag 30% of our B2B list as 'risky catch-all' and leave the call to us. Verifox returns a real verdict on those addresses, with a confidence score. We send more, we send safer.
Brittany K.GTM Lead, HubSpot
Dale Micallef, GTM Lead at Slack

Reputation rebuilt in 6 weeks

We had a Gmail spam-folder problem after a bad list import. Verifox cleaned the list and the warmup ran on the same engine. Back in primary inbox in six weeks. One vendor, half the cost.
Dale M.GTM Lead, Slack
Erica Kovalkoski, GTM Lead at Discord

0.7% bounce on 50k

Ran a 50,000-address outbound list through Verifox before our quarterly campaign. Bounces landed at 0.7%, sender reputation didn't move, replies were up 22% over last quarter.
Erica K.GTM Lead, Discord
Greg Lindsay, GTM Lead at OpenAI

MCP in 10 minutes

Their MCP server let me wire email verification directly into our internal Claude agent in about ten minutes. Zero glue code. No other vendor in this space has thought about that workflow.
Greg L.GTM Lead, OpenAI
Rini Vasana, Product Manager at Vercel

10k/min held under 400ms

Tested Verifox at 10,000 verifications per minute on a Tuesday morning. Latency held under 400ms median, no soft failures, no rate-limit walls. The vendor we benched throttled at 2,000/min.
Rini V.Product Manager, Vercel
Jonathan Aharon, GTM Lead at MongoDB

Hygiene that doesn't break pipeline

Our SDRs were enriching from three tools and 14% of the emails were invalid before they hit the sequencer. Verifox sits in the pipeline now and the team stopped seeing 'undeliverable' replies the next week.
Jonathan A.GTM Lead, MongoDB
Emma Fox, GTM Lead at Linear

Bulk that actually ships

Bulk upload, sorted CSV back in twenty minutes, plug into our growth stack. The half-day list-hygiene project per cohort turned into something the marketing intern runs on autopilot.
Emma F.GTM Lead, Linear
David Hare, GTM Lead at Snowflake

Scores you can act on

Verifox returns a 0-100 confidence score per address, not just a label. We thresholded at 75 for the cold sequencer, 60 for nurture, and our deliverability team finally has a knob they can tune.
David H.GTM Lead, Snowflake
Trust & compliance

Enterprise-grade security and scale

Every layer of the stack carries a third-party attestation, so you can ship into regulated industries without rebuilding your compliance posture.

  • Claymation Japanese hanko seal in jade-green clay with a twisted shimenawa rope rim, the words SOC 2 TYPE II embossed in cream clay on its face.

    SOC 2 Type II

    Independently audited to the SOC 2 Type II standard.

  • Claymation Japanese hanko seal in cobalt-blue clay with a twisted shimenawa rope rim, the word GDPR embossed in cream clay on its face.

    GDPR

    Built for the EU with full GDPR data-subject rights.

  • Claymation Japanese hanko seal in rose-pink clay with a twisted shimenawa rope rim, the word CCPA embossed in cream clay on its face.

    CCPA

    California opt-out, do-not-sell, plus DSAR handling.

  • Claymation Japanese hanko seal in terracotta clay with a twisted shimenawa rope rim, the text ISO 27001 embossed in cream clay on its face.

    ISO 27001

    Information security held to the ISO 27001 standard.

  • Claymation Japanese hanko seal in lilac-purple clay with a twisted shimenawa rope rim, the text ISO 42001 embossed in cream clay on its face.

    ISO 42001

    AI governance aligned to the new ISO 42001 standard.

Common questions

Disposable email lookup, answered

The questions we get from people who land here to look up whether one address is disposable, with the real numbers, real limits, and real opinions behind our verification stack.

Is the disposable email lookup actually free?

Yes. The lookup box above runs 4 lookups per day with no account, no card, and each one is the full nine-check verification, not a cut-down list match. The disposable verdict you get anonymously is the same verdict a paid plan gets.

When four a day stops being enough, a free account adds 1,000 lookups the moment you confirm it, or 2,500 if you sign up with a work address. Beyond that, credits are pay-as-you-go and never expire on any paid plan, with volume pricing shown for your region.

How do I check if an email is disposable?

Paste the address into the box above and the lookup runs in about two seconds. The verdict tells you straight away whether the address sits on a known disposable, temporary, or throwaway domain, alongside the rest of the nine-check breakdown so you also see if it is valid and reachable.

There is nothing to install and no list to download for a one-off check. We match the domain against a continuously-refreshed disposable email domains list on our side, so a burner provider that went live this week is already covered. Need the full domains list or a programmatic check instead? That lives on the disposable email API.

What counts as a disposable email address?

A disposable email is any address on a domain built to be thrown away: temporary inboxes, burner providers, and ten-minute-mail services people use to clear a signup gate without handing over a real address. Mailinator, Guerrilla Mail, Temp Mail, and thousands of lesser-known domains all fall in this bucket, and new ones appear daily. The glossary has disposable email, defined in full if you want the longer treatment.

They are the addresses most likely to fuel fake accounts, trial abuse, and junk signups, and they rarely convert. Disposable detection is one of the nine checks our verification engineruns on every lookup, scored against a domains list refreshed continuously so the verdict reflects today's burner providers, not last year's.

What's the difference between this lookup and the disposable email API?

This page is the single-address lookup: a person pastes one email, gets a yes-or-no disposable verdict, and moves on. It is the right tool when you have an address in front of you and just want to know if it is a throwaway.

The disposable email API is for when you want to do it in code or at volume: call a REST endpoint per signup to block burner emails in real time, or pull the full disposable email domains list to match locally. Same engine, same accuracy, two different jobs. Most people start here and graduate to the API once they are screening real traffic.

How accurate is the disposable email lookup?

Same engine as the paid plans. 99.99 % accuracy on a 1,000-address benchmark list, and the disposable email domains list behind the lookup is refreshed continuously rather than shipped once and left to rot.

That freshness is the whole game with throwaway providers, because a stale list quietly waves new burner domains straight through. Community block lists like the open-source disposable-email-domains repository are a useful baseline, but they update on volunteer time; the list behind this lookup is refreshed continuously instead. Every check the paid Email Verification API runs is the same check this free disposable email lookup runs.

Can I look up a whole list of emails at once?

For a quick single-address check, paste it above and you are done. For a list, a free account unlocks 1,000 lookups (2,500 on a work email) with CSV upload, so most small lists clear in one pass.

If you are screening lists regularly or want it wired into your signup form, the disposable email API handles bulk and real-time checks in code, and the free email validator is the right companion for scrubbing an existing list end to end. Paid credit packs are pay-as-you-go and never expire, with pricing localized to your region on the pricing page.

Do you store the emails I look up?

No. The address you paste travels to our servers once, gets matched against the disposable domains list and the other eight checks entirely in memory, and is discarded the moment the verdict comes back. The list match happens on our side, so the address never enters a stored queue, a log line, or a training set.

Verifox is SOC 2 Type II compliant with the full Trust Center report available on request, and the privacy policy spells out exactly what a lookup touches and what it never does.

What happens when I hit the daily limit?

The fifth paste of the day asks you to come back tomorrow or create a free account, which lifts you from 4 lookups a day to 1,000 credits on the spot (2,500 if your signup email is a work address). Still no card, and the lookups themselves do not change: same engine, same domains list, same two-second verdict.

Most teams move to a paid credit pack once they are running disposable checks over real signup traffic, at which point the disposable email API is the cleaner fit than the manual lookup.

Can I add disposable lookups to my own app or AI agent?

Yes, though that is the API's job rather than this page's. The REST API reference documents the inbound and outbound shapes for every endpoint, so you can drop real-time disposable detection into signup forms, CRMs, or any tool that speaks REST. HubSpot, Salesforce, Zapier, Klaviyo, Mailchimp, and Brevo all connect out of the box.

Verifox also ships native MCP server support so AI agents (Claude, Cursor, custom LLM apps) can screen addresses for burner domains without glue code. Drop the MCP URL into your agent config and the tools are wired.

What's your refund policy?

Lookup credit packs are refundable in full for 30 days from purchase, no questions asked, so if the disposable verdicts are not earning their keep you get the money back. After 30 days, whatever you have not spent stays on your account permanently. Credits never expire, and you can hand them to a teammate.

There is no subscription underneath the packs, so there is nothing to cancel and no renewal to catch. Full terms in the refund policy.