Disposable Email Checker
Check if an email address or email domain is disposable or temporary. If you run a website or SaaS, you know that disposable addresses are often used for abusive purposes. This free tool is powered by the Dregs platform.
Free to use: no account, no API key, no credit card. Anonymous checks are limited to 10 per minute and 100 per day per IP. Create an account for higher limits and more detailed user scoring across many dimensions, not just the email domain. Start free!
How does it work?
The tool checks an address's domain against a curated list of over 8,000 known disposable and temporary email providers, refreshed weekly from vetted open-source feeds (including the community-maintained disposable-email-domains project), alongside our own fraud signals.
It's not a marketing sample. This is the exact dataset the Dregs platform runs in production to gate abuse on real customer traffic, so the same detection engine backs both this free tool and every authenticated scoring pass.
Need more checks?
Sign in with your Dregs secret key and you'll get the full authenticity verdict instead of just disposable or non-disposable!
The Dregs platform scores Authenticity across multiple profile fields, including the disposable email domain check as well as whether the email corresponds to the stated name, whether the identity name itself looks structurally plausible, and much more.
Why disposable email detection is harder than it looks
At heart, a disposable check is a lookup: does this address's domain (or a parent of it) appear on a list of known throwaway providers like Mailinator, Guerrilla Mail, or 10MinuteMail? That's why this tool accepts either a full address or a bare domain; the domain is what actually gets matched.
The hard part is keeping that list honest. New disposable providers appear every day, and established ones rotate through fresh domains specifically to slip past static blocklists. At the same time, an over-eager list does real damage: flag a legitimate small mail host or a company's catch-all domain and that false positive turns away a genuine customer. Dregs deliberately errs toward precision: we would rather miss an obscure new burner for a few days than block someone's real signup.
That balance of freshness and curation is why we refresh the underlying dataset weekly and battle-test it against live fraud in the Dregs platform, rather than shipping a static file and forgetting about it.
Create a free Dregs account to unlock higher limits, an API key, and the full authenticity verdict, plus broader abuse protections like bot detection, multi-account fingerprinting, and identity scoring. Every plan starts with a 14-day free trial, no credit card required.
Disposable Email Checking API
A simple POST to /api/tools/authenticity-check backs the web form on this page, and you can call it directly too.
Anonymous calls are straightforward but limited. Create a free Dregs account to unlock higher limits and more detailed scoring.
Anonymous
Calling the endpoint anonymously gives a simple boolean response, indicating whether or not the domain is
known to Dregs to be a disposable email domain. Send either an email (a full address) or a
domain (a bare domain), whichever you have. The response echoes back the field that was
checked.
curl https://dregs.com/api/tools/authenticity-check \
-H "Content-Type: application/json" \
-d '{"email":"user@example.com"}'
# Response
{
"input": {"email": "user@example.com"},
"disposableEmailDomain": false
}
# Or check a bare domain
curl https://dregs.com/api/tools/authenticity-check \
-H "Content-Type: application/json" \
-d '{"domain":"mailinator.com"}'
# Response
{
"input": {"domain": "mailinator.com"},
"disposableEmailDomain": true
}
Authenticated
Calling the same endpoint with a Dregs account (a Bearer token with a secret key) accepts more fields in the payload and returns a more detailed response, including an overall Authenticity score (an integer from 0 to 100, directly comparable to the Authenticity scores in your dashboard) and any observations Dregs made about the profile data.
curl https://dregs.com/api/tools/authenticity-check \
-H "Authorization: Bearer $DREGS_SECRET_KEY" \
-H "Content-Type: application/json" \
-d '{
"email": "john@acme-corp.com",
"firstName": "John",
"lastName": "Doe",
"organizationName": "Acme Corp"
}'
# Response
{
"input": { ... },
"disposableEmailDomain": false,
"authenticity": 73,
"observations": [
{
"category": "AUTHENTICITY",
"id": "authenticity.disposable-email",
"label": "Disposable Email",
"value": 1.0,
"confidence": 0.95,
"explanation": "Email domain appears legitimate",
"metadata": { ... }
}
]
}
Your secret key for making authenticated requests lives in Settings → Credentials in your Dregs dashboard. Treat it like a secure password and never put it in client-side code or commit it to version control.
Protect your SaaS. Stop the abuse!
Dregs continuously scores every identity's Humanity, Authenticity, Uniqueness, and Behavior so you can separate the good users from the troublemakers.
Frequently Asked Questions
What is a disposable email address?
A disposable email address is one provided by a service like Mailinator, Guerrilla Mail, or 10MinuteMail that lets people receive emails without committing to a real inbox. They're routinely used to bypass signup verification, exploit free trials, and create throwaway accounts that can be discarded the moment they're flagged.
How fresh is the list of disposable email domains?
Dregs refreshes the underlying list from upstream open-source sources weekly, and the dataset is the same one we use internally to gate fraud signals on tracked identities. New disposable providers get picked up automatically as soon as they're added upstream.
Is there an API I can call from my application?
Yes! POST /api/tools/authenticity-check is documented on this page. Anonymous calls are rate-limited (10/min, 100/day per IP); calls authenticated with your Dregs secret key get 100/min plus your monthly operations quota.
Why does the authenticated API accept fields like firstName and organizationName?
Because the authenticated tier runs a full Authenticity-scoring pass, not just a list lookup. It evaluates whether the name structure looks legitimate, whether the email matches the name, and other signals that depend on more than the email alone. Anonymous calls are restricted to the disposable check.
How is this different from email verification services?
Email verification services (Mailgun, ZeroBounce, etc.) check whether an inbox exists and can receive mail: deliverability. Dregs's tool checks whether the address looks fraudulent: intent. They complement each other: a real inbox at a disposable provider passes verification but fails authenticity.
Is the disposable email checker really free?
Yes, and there's no catch. The web form and the anonymous API are free forever (no signup, no API key, and no credit card) up to 100 checks per day per IP. If you need higher limits or the full authenticity verdict, you can create an account and start a 14-day free trial (still no card); after that it moves to a paid plan.
Do I need an account or a credit card to use it?
No. The web form and the anonymous API work with no signup, no API key, and no credit card, at 100 checks per day per IP, indefinitely. An account is only needed for higher limits or the deeper authenticity scoring, which begins with a 14-day free trial that also needs no card.
How many disposable domains does the checker know about?
Over 8,000 known disposable and temporary email domains, refreshed weekly. It's the same curated list Dregs runs in production to gate fraud, built from vetted open-source feeds (including the community-maintained disposable-email-domains project) plus our own signals.