Free demo hits. Pay when you go live. Request access
Risk & Compliance

Data Breach Check API

Check an email address or mobile number against known breach corpora and return the breaches, the data types exposed and recency, a signal for account-takeover risk and step-up authentication.

Response
Real-time
Inputs
0 required · 2 optional
Consent
Not required
Billing
Per successful call
POST /v1/data-breach-check
Sandbox · Production
  1. Your application sends

    • Email address
    • Mobile number
  2. emver API

    Validates the request, queries the source, normalises the answer and logs the call. Billed only on success.

  3. Verified with

    Authoritative source

  4. You receive

    • Found in breaches
    • Number of breaches
    • Most recent exposure
    • Data types exposed
data-breach-check Full reference
Overview

What the Data Breach Check API does

Send the identifier; receive the breach count, the most recent exposure date and the categories of data leaked (passwords, phone, address). Nothing from the breach itself is returned.

Benefits

Why teams use the Data Breach Check API

Has this email or phone appeared in known credential leaks?

ATO prevention

Step up authentication for exposed credentials.

Customer protection

Prompt password resets where it matters.

Use cases

Where it's called

Where the Data Breach Check API is typically called, and what it settles there.

Login and account recovery

Risk-based authentication signal.

Onboarding

Part of the digital footprint picture.

How it works

Four steps, one response envelope

Request and response details, environments and a ready-to-import collection are in the developer console.

  1. 01

    Authenticate

    Call with your organisation API key. Sandbox and production use the same contract.

  2. 02

    Send the inputs

    as a JSON body. Optional fields sharpen the match.

  3. 03

    We verify at source

    emver queries the authoritative record, normalises the answer and logs the request.

  4. 04

    Act on the result

    A verification status plus the fields listed above, in the same response envelope as every other API.

Privacy and security built in

Consent recorded · Payloads not retained beyond your retention window · Every request traceable

FAQ

Data Breach Check API: frequently asked questions

What teams ask before adding the Data Breach Check API to their integration.

Never. Only the fact of exposure and the categories involved.

Related

APIs that run alongside it

Usually called with the Data Breach Check API, on the same key.

All APIs
Access usually set up within one working day

Start verifying with emver today.

Tell us which APIs and what monthly volume. We set up your organisation, approve the APIs with demo hits and share per-call pricing.