The data enrichment API for fraud and risk teams
IRBIS delivers real-time phone, email, social, and identity signals via API so your scoring model stops making decisions on user-submitted data alone.
Trusted by
Your scoring model is only as good as the data feeding it
What separates a genuine identity from a synthetic one isn’t any single signal. It’s the coherence – or absence of it – across signals. IRBIS surfaces that coherence in the time it takes to return an API response.
We're scoring inputs, not identities
Your model doesn't know if the email is 3 days old or 10 years old, disposable or established, linked to a real person or to nothing at all.
Manual review is drowning your team
Analysts are doing OSINT by hand, with no standardized output and no audit trail.
Stale data sources miss what's happening now
Static blacklists miss burner behavior, freshly created synthetic profiles, and real-time signals like recent SIM swaps and zero-footprint accounts.
Enrichment endpoints
Real – time global coverage with structured JSON
Phone
Returns: carrier, line type (mobile/VoIP/burner), subscriber status, porting history, ownership duration, risk flags
Email Enrichment
Returns: account age in months, linked social profiles across 120+ platforms, disposable address detection, breach exposure, domain reputation score
Social & Digital Footprint
Digital presence across 120+ platforms - profile list, URLs, username consistency
Face Recognition
Match result against public and open-source databases - match confidence, source reference, impersonation flags
Breach & Exposed Data
Breach count, breach names, data types exposed, recency from known breach datasets
IP Geolocation
country, city, ISP, ASN, VPN/proxy/TOR flags
Where data enrichment fits
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.
Pre-KYC Signal
High-risk profiles surface before you spend a full KYC check on them. ✓ Phone carrier & activity check — real, active, not a burner or VoIP line ✓ Email age & social verification — old accounts with social presence = real people ✓ Digital coherence score — inconsistency across signals = synthetic identity tell ✓ Breach history signal — compromised credentials surface before account creation completes
Payout & Withdrawal Enrichment
IRBIS fires at the payout trigger: is the payout phoen/email still the same active subscriber? Does the session IP match the declared country? ✓ IP geolocation vs. declared address — flag VPN and location mismatches before payout ✓ Payout phone re-verification — catches SIM-swap attacks ✓ Step-up trigger on anomaly only — friction fires only for real risk events
Cut analyst escalation case handle time
IRBIS auto-enriches every queued case with full digital footprint, face match, breach history ✓ Pre-enriched case file — full identity context waiting ✓ Face search on documents — detect photo re-use and synthetic identities ✓ Full digital footprint — 120+ platform scan in seconds ✓ AI-generated risk summary — synthesized score with audit trail
Built for Your Ecosystem
One workflow. Two weeks. Your data.
We scope every pilot to one real workflow entry point. Your team integrates 1–3 IRBIS enrichment endpoints using our Python SDK, sandbox, and docs. At the end of two weeks, you get a one-page results report: baseline vs. enriched decisions, KPI delta, and a recommendation.
Discovery call – 30 to 45 minutes. We map your workflow entry points and agree on one measurable KPI to move
Day 1. (API sandbox + Python SDK)
Register, generate your API key, run your first enrichment call in under 15 minutes.
Live integration, Weeks 1–2. 1–3 enrichment endpoints live in a real or staging workflow. We stay hands-on.
Results report, Week 3. Baseline vs. enriched decisions, KPI delta, recommendation.