LegitInformant

Disposable and throwaway email checker

Tell a real mailbox from a ten-minute burner, a role account or a plus-address alias.

Nothing leaves your browser. This tool does its work on your own machine — there is no upload, no server request, and nothing is stored.

Checked against a built-in list of throwaway providers. The address is not looked up anywhere and no mail is sent to it.

What this can and cannot tell you

This checks the shape and the domain of an address: whether it is syntactically legal, whether the domain belongs to a known throwaway provider, whether it is a role account rather than a person, and whether the domain contains characters designed to make it read as something else.

It does not send mail to the address, so it cannot tell you whether the mailbox exists. That is deliberate: verifying an address by delivering to it tells the owner you are checking, and the reliable methods for doing it quietly are the same ones spammers use to confirm a list.

Disposable is a signal, not a verdict

Throwaway addresses have entirely ordinary uses. People use them to keep a shop's marketing out of a real inbox, or to try a service before trusting it. Finding one does not mean you have found a criminal.

What matters is the mismatch between the address and the claim attached to it. A burner on a newsletter signup is nothing. A burner on an invoice, a refund arrangement, a landlord's contact details, or a message claiming to be from a company's support desk is a serious problem, because the entire point of the address is that nobody can be traced through it afterwards.

Role addresses

Addresses like billing@, admin@ and noreply@ belong to a function rather than a person. They are completely normal coming from a company. They are odd as the contact address of an individual, and on a personal-account signup they usually indicate an automated registration rather than a human.

What to do with a suspicious address

  • Look at the domain, not the display name. In almost every mail app the name is what you see and the domain is what matters.
  • If it claims to be a company, compare the domain against the one on their website — typed in yourself, never followed from the message.
  • Run the domain through the full check to see when it was registered. A support address on a domain three weeks old settles the question.
  • If the message included a link, take that apart with the URL inspector before you open it.

Common questions

Why does a disposable email address matter?

A throwaway address costs nothing and vanishes in minutes, so it carries no accountability. On a signup form it is a fraud signal. On an invoice, or in a support reply that claims to come from a company, it is close to conclusive.

Is a disposable address always a scam?

No. Plenty of privacy-minded people use aliases and forwarding services for ordinary signups. The signal is context: a burner used to arrange a refund or to send you a payment demand is very different from one used to read a newsletter.

What is a role address?

An address aimed at a function rather than a person, like admin@, billing@, sales@ or noreply@. They are normal for companies, but a role address on a personal signup usually means an automated registration.

These tools check form, not honesty. A valid checksum, a passing SPF record or a decoded link tells you something is well formed — never that the person behind it is telling the truth. When money is involved, verify on a phone number you already had, and run the link or address through the full check as well.