Phone Status Check - Detailed Documentation

Use this action to get insights about a phone number such as whether it is active or disconnected, whether its associated device is reachable or unreachable, and its associated device’s roaming status.

API Playground:

You can try the phoneStatus endpoint here.

Endpoints Overview

  1. Phone Status Check: Retrieve the status and details of a phone number.
  2. Phone ID: Retrieve the ID and details of a phone number.
  3. Phone Risk Score: Retrieve the risk score of a phone number.
  4. Verification: Verify a phone number.
    • Verification: Send a verification code to a phone number.
    • Verification Match: Match the verification code.
  5. Full Phone Intelligence: Retrieve the full intelligence of a phone number.

Authentication

To access the Address Verification API, authentication is required. A Bearer Token must be included in every request.
  • Tokens are valid for 60 minutes and must be refreshed after expiration.
  • Refer to the Authentication for detailed steps on obtaining a token.
  • Include the token in the Authorization header as follows:
Authorization: Bearer YOUR_ACCESS_TOKEN

API Base URL

https://api-umbrella.io/api/services

1. Phone Status Check

Endpoint

POST /phoneStatus

Description

Use this action to get insights about a phone number, such as its activity status, device reachability, and roaming status.

Required Headers

HeaderValue
Content-Typeapplication/json
AuthorizationBearer yourAccessToken

Request Body Parameters

Response Structure

Example Request

{
"phone": "+436504142107"
}

Example Response

2. Phone ID (Upcoming)

Endpoint

POST /phoneid

Description

The Phone ID service provides identity checks and enriched data linked to a phone number. It includes several optional modules:
  • Age Verification – Verifies whether the subscriber meets a specified age threshold. Only available in the US and UK and requires address input via Contact Match.
  • Breached Data – Checks whether the phone number has appeared in known data breaches.
  • Call Forwarding Detection – Detects whether call forwarding is active and under what conditions.
  • Contact Information – Returns known contact details such as name, address, and email.
  • Contact Match – Compares submitted contact data against the carrier’s data and returns a match score.
  • Number Deactivation – Provides information on if and when the number was deactivated.
  • Subscriber Status – Indicates the subscriber’s account state, including type, tenure, and contract status.
  • Porting History – Displays the number’s history of being ported between carriers.
  • Porting Status – Returns the current carrier and whether the number has been recently ported.
  • SIM Swap – Detects SIM card swaps and evaluates the associated risk.

Required Headers

HeaderValue
Content-Typeapplication/json
AuthorizationBearer yourAccessToken

Request Body Parameters

Add-ons Object Fields

Response Structure

Example Request

Example Response

3. Phone Risk Score (Upcoming)

Endpoint

POST /phoneRiskScore

Description

Phone Risk Score helps detect potentially fraudulent activity by analyzing the transaction risk associated with a phone number. You send a phone number (optionally with an email and/or IP address), and the service evaluates static attributes and behavioral patterns to return a risk.score, a risk.level, and a recommendation — helping you decide whether to allow, flag, or block the transaction. What’s evaluated:
  • Static attributes: phone type, carrier, device ID, VPN/proxy usage, domains, etc.
  • Behavioral signals: unusual usage patterns like high velocity or multiple locations/languages.

Required Headers

HeaderValue
Content-Typeapplication/json
AuthorizationBearer yourAccessToken

Request Body Parameters

Response Structure

Example Request

Example Response

Risk Recommendation Scales

Use the appropriate scale below for interpreting the risk recommendation provided to you, based on which version of Intelligence you used to make your request.

Risk Score Table

risk.score RangeRisk LevelRecommendationComments
0-80lowallowtransaction with insufficient risk indicators*
81-450very-lowallowtransaction with significant confidence-building behavior on-network**
451-500medium-lowflagsuspicious transaction
501-600mediumflagsuspicious transaction
601-800highblockrisky transaction
801-1000very-highblockrisky transaction
* There isn’t enough data yet to confirm that there is a high likelihood that the transaction belongs to a genuine user. However, the transaction also doesn’t have any indicators that it is a suspicious or risky transaction. ** The transaction is assigned the “very-low” risk level because it has enough activity to suggest it likely does belong to a genuine user. This activity means there’s more data to use as the basis for the risk.score.

Reason Codes

These reason codes provide an overall risk assessment for a transaction, based on a combination of weighted trust and risk signals.
CodeNameMeaning
10010low activityNot enough activity or attributes to classify the transaction as either risky or trustworthy.
10020low regular activityTrustworthy category, based on past behavior.
10021regular activityMost trustworthy category, based on past behavior.
10030low-risk irregular activityRisky category, based on past behavior.
10031medium-risk irregular activityHigh-risk category, based on past behavior.
10032high-risk irregular activityHighest-risk category, based on past behavior.
10040irregular number typeThis number has risky static attributes (e.g., VOIP phone type or being on a blocklist).

A2P

Reason codes specific to application-to-person messaging (a2p).

P2P

Reason codes specific to person-to-person messaging (p2p).

Number Type

Reason codes related to the number’s type.

IP

Reason codes related to activity of the IP address you provided for this number.

Email

Reason codes related to activity of the email address you provided for this phone number.

Phone Type Codes

These codes categorize phone numbers based on their characteristics, such as whether they are fixed lines, mobile, prepaid, or other types.

Phone Type Override Reason Codes

These codes specify additional reasons for altering the original phone type classification, based on specific characteristics or risk factors identified.

4. Verification (Upcoming)

4.1 Verification

Endpoint

POST /verification

Description

The Messaging API enables you to deliver important verification messages to your users through the channels they use most. For the verification endpoint, supported delivery methods include:
  • SMS: Fast and globally reliable message delivery via standard text messaging.
  • Email: A secure and user-friendly fallback or primary channel for sending verification messages.

Required Headers

HeaderValue
Content-Typeapplication/json
AuthorizationBearer yourAccessToken

Request Body Parameters

Response Structure

Example Request

Example Response

4.2 Verification Match

Endpoint

PATCH /verificationMatch/{referenceId}

Description

Use this endpoint to validate the one-time passcode (OTP) provided by the end user and update the state of an active verification process. This action is typically used to finalize a verification by checking whether the user-entered OTP matches the one originally sent via SMS or email. If the OTP is correct, the verification process is marked as VERIFIED. If incorrect, an error is returned and the process may remain ONGOING, FAILED, or another relevant state depending on implementation.

Required Headers

HeaderValue
Content-Typeapplication/json
AuthorizationBearer yourAccessToken

Request Body Parameters

Response Structure

Example Request

Example Response

5. Full Phone Intelligence (Upcoming)

Endpoint

POST /fullPhoneIntelligence

Description

Full Phone Intelligence delivers a comprehensive risk and identity assessment for a phone number in a single API call. It combines behavioral signals, telecom intelligence, and historical data to help you detect fraud, verify identity, and make confident risk decisions. This service analyzes the phone number using various trust and risk indicators such as:
  • Activity patterns (short-term and long-term)
  • Carrier and phone type information
  • SIM swap detection
  • Call forwarding status
  • Deactivation and porting history
  • Known data breaches
  • Active call status
  • Geolocation and time zone data
  • Contact matching and scoring

Status Codes

Status CodeAssociated Text StringDescription
300Transaction successfully completedThe system was able to obtain all of the requested data.
301Transaction partially completedThe system was able to obtain some of the data, but not all of it.
400Bad RequestMalformed syntax in the request. See error code for specifics.
401UnauthorizedAuthentication failed. See error code for details.
404Not FoundThe server could not find the requested resource.
429Too Many RequestsRate limit exceeded. Too many requests sent in a short period of time.
500Invalid TransactionTransaction not attempted due to a system issue.
503Service UnavailableSystem is temporarily unavailable. Try again later.