Skip to content

Platform_

Threat & fraud signals

Datacenter, VPN and Tor detection, plus BIN-vs-IP mismatch.

Get your API key Read the docs

The network posture of an address — ASN, ISP, datacenter, VPN and Tor exit — folded into a composite risk score. Plus the signal nobody else offers: the card BIN’s issuing country against the IP’s. Card from Nigeria, IP in Pakistan: that is a signal.

Why it works_

See the risk before you take the payment

  1. 01

    The BIN mismatch

    IP and card-issuing country compared directly. No geo API offers this because none understand payments.

  2. 02

    Transparent scoring

    A documented additive 0–100 score you can reproduce by hand — no black box.

  3. 03

    A signal, not a verdict

    You keep your own policy and your own party-level screening; we give you the inputs.

The data behind it_

threat-signals.sh 
curl -X POST "https://api.localesense.com/v1/fraud/check" \
  -H "Authorization: Bearer ls_live_..." \
  -d '{"ip":"203.135.62.10","bin":"539983"}'
Network & fraud
  • Risk 12/100 · no VPN · BIN match

Keep exploring_

Related platform

Geo & IP
Geo & IP intelligence

Turn an IP into a place — country, region, city, timezone.

Learn more
Currency
Currency & formatting

Not just "USD" — the symbol, decimals, separators and grouping.

Learn more
Tax
Tax intelligence

Standard rate, local name, reduced bands, inclusive or not.

Learn more
FAQs

Threat & fraud signals — frequently asked

What is a BIN-versus-IP mismatch and why does it matter?

A card's first digits (the BIN) identify its issuing country. When that country differs from where the request's IP is located — a Nigerian card paying from a Pakistani IP — it is a classic fraud signal. Most geo APIs cannot offer this because they do not understand payments; we compare the two directly.

How do you detect VPNs, Tor and datacenter traffic?

We resolve the address's ASN and ISP and match it against known hosting providers, commercial VPN egress ranges and live Tor exit nodes, then fold those into a composite risk score. Datacenter origin is the strongest of these signals.

Is the risk score a decision I can rely on outright?

No — it is a transparent, additive 0–100 signal you can reproduce by hand, meant to feed your own rules, not replace them. You keep your policy and your own party-level screening; we supply the inputs.

Get started

Try it free

10,000 requests a month, no card. Every tier includes live FX and the full formatting engine.

Get your API key