HomeGuidesChangelog
Log In
Guides

IP Address

What it entails

IP Address checks classify connection types (TOR, VPN, data center, mobile, residential) and validate geolocation consistency against provided addresses. They detect anonymizing networks, cloud proxies, and geographical anomalies.

Why it works

Fraudsters hide behind anonymizers, cloud hosts, or mobile proxies to obfuscate true origin. Discrepancies between IP location and declared address expose proxy or VPN usage.


Checks

The following are the distinct IDs and types of checks that are included in the IP Address Check Package.

IP_TYPE

Classification of IP address source.

ValueNameDescription
TORTOR Node detectedA very high-risk IP, as Tor and anonymizers are commonly linked to privacy-conscious users but are also frequently associated with criminal activity, malware, and fraud attempts.
VPNVPN detectedA high-risk IP, typically used to mask the user’s true location or identity. While some VPN use may be legitimate (e.g., privacy concerns), it can often be used for malicious activity like fraud or evading detection.
DATA_CENTERData center detectedA medium-risk IP, often tied to cloud providers or web hosts, sometimes used by bots, scrapers, or automated systems.
UNKNOWNUnknown IP typeThe IP type could not be determined, so the risk level is slightly elevated.
MOBILEMobile IP address detectedA low-risk IP address, often tied to mobile devices, which are typically used by individuals.
RESIDENTIAL_OR_BUSINESSResidential IP address detectedA low-risk IP address tied to an individual’s home or business, often connected, with typical user behavior patterns.
NONENo IP address providedNo IP address provided, no checks to be run.

IP_GEOLOCATION_MISMATCH

IP geolocation vs. provided address.

ValueNameDescription
TRUEIP geolocation mismatchThe IP geolocation does not match the provided address, indicating potential fraud.
FALSEIP geolocation matchesThe IP geolocation matches the provided address, indicating legitimate connection.
UNKNOWNNo IP geolocation information availableNo IP geolocation information available.

What’s Next

Learn how we help you understand the validity of the incoming location