Plain, accurate definitions of the 44 phone, email, and IP intelligence terms behind data validation and fraud prevention. Each entry explains what the term means and why it matters when you are checking whether a number, address, or connection is real.
The Home Location Register is the central database in a mobile (GSM/LTE) network that stores the master record for every subscriber: which numbers are active, the carrier and network they belong to, and whether a handset is currently switched on and reachable. An HLR lookup queries this database in real time to read that status without placing a call or sending a message.
Why it matters for validation: An HLR query is the most direct way to confirm a mobile number is live and reachable before you spend money texting or calling it.
The IMSI is a unique identity, usually 15 digits, stored on the SIM card that identifies a subscriber to the mobile network. It is built from a Mobile Country Code, a Mobile Network Code, and a subscriber number, and it is kept private inside the network rather than exposed as the dialable number.
Why it matters for validation: The IMSI is how the network ties a SIM to a carrier and country, which is the basis for resolving the true home network behind a number.
IMEI (International Mobile Equipment Identity)
The IMEI is a 15-digit serial number that identifies the physical handset or modem, not the SIM or the subscriber. Networks use it to recognise a specific device and can block a reported-stolen device by its IMEI.
Why it matters for validation: Because the IMEI identifies hardware rather than the account, it separates the device from the number and helps flag devices tied to abuse.
MSISDN (Mobile Station International Subscriber Directory Number)
The MSISDN is the full dialable phone number of a mobile subscriber, made up of the country code and the national number. It is the number you actually call, and it is distinct from the IMSI, which is the private on-network identity.
Why it matters for validation: Validation works on the MSISDN (the public number), so knowing how it maps to the private IMSI clarifies what a lookup can and cannot resolve.
CNAM (Caller ID Name)
CNAM is the caller-name service used in North American phone networks that maps a phone number to a display name, typically capped at 15 characters, shown on the recipient's caller ID. The name is looked up from a database at call time rather than sent by the caller.
Why it matters for validation: CNAM data adds a name to a raw number, which is useful for identity checks and for spotting numbers with missing or mismatched caller-name records.
Line type is the classification of a phone number as mobile, landline (fixed), or VoIP. It is derived from the number's carrier and network assignment and determines how, and whether, the number can be reached by SMS.
Why it matters for validation: Texting a landline or an unsupported VoIP number fails silently, so filtering by line type protects SMS spend and delivery metrics.
A carrier, or Mobile Network Operator, is the company that owns and runs the network a phone number is served on. A carrier lookup returns the operator currently responsible for a number, which can differ from the original operator if the number has been ported.
Why it matters for validation: Knowing the current carrier drives correct SMS routing and reveals when a number has moved networks since it was first issued.
Mobile Number Portability is the ability for a subscriber to keep the same phone number when switching carriers. A number that has moved is called a ported number, and its current carrier no longer matches the network its number range was originally allocated to.
Why it matters for validation: Static carrier tables go stale the moment a number is ported, so a live portability check is the only reliable way to route messages to the right network.
A Location Routing Number is a 10-digit number, used in North American number portability, that identifies the switch currently serving a ported telephone number. When a number is ported, calls are routed to its LRN instead of to the switch its original number range points to.
Why it matters for validation: The LRN is the field that tells you a number's true current network after porting, which underpins accurate carrier and routing data.
Direct Inward Dialing is a service that assigns a block of phone numbers to a phone system (a PBX or VoIP platform) so each number routes to an internal extension without needing a dedicated physical line per number. DID numbers are common for business, virtual, and VoIP phone setups.
Why it matters for validation: DID blocks are how many VoIP and virtual numbers are provisioned, so recognising them helps explain why a number reads as VoIP rather than a consumer mobile.
A Mobile Country Code is a three-digit code that identifies the country or region a mobile network belongs to. It is the first component of an IMSI and is paired with a Mobile Network Code to name a specific carrier.
Why it matters for validation: The MCC pins a number's network to a country, a building block for resolving the true origin behind an international number.
MNC (Mobile Network Code)
A Mobile Network Code is a two-to-three-digit code that identifies a specific mobile carrier within a country. Combined with the Mobile Country Code, the MCC and MNC pair uniquely names the operator serving a subscriber.
Why it matters for validation: The MCC and MNC pair is the canonical way networks identify a carrier, which is what a carrier lookup ultimately resolves.
Signaling System No. 7 is the set of telephony signaling protocols that networks use behind the scenes to set up and tear down calls, deliver SMS, and exchange subscriber information between operators. Real-time HLR queries travel over SS7 to reach a carrier's subscriber database.
Why it matters for validation: SS7 is the network layer that makes a live HLR reachability check possible, which is what separates a real network query from a guess based on the number range.
VoIP is phone service that carries calls as data over the internet rather than over the traditional switched telephone network. VoIP numbers are cheap and quick to provision, which is why they appear often in both legitimate business systems and in fraud and spam.
Why it matters for validation: A VoIP result on a number that should be a personal mobile is a common risk signal at signup, and VoIP lines often cannot be relied on for SMS delivery.
A landline is a phone line connected by physical wiring (copper or fibre) to a fixed location, as opposed to a mobile or an internet-based line. Landlines generally cannot receive SMS text messages.
Why it matters for validation: Sending SMS to a landline is guaranteed to fail, so detecting fixed lines before a send removes wasted messages from a campaign.
E.164 is the international standard, defined by the ITU, for formatting phone numbers. It specifies a leading plus sign, a country code, and the national number, with a maximum of 15 digits, for example +14155552671.
Why it matters for validation: Normalising numbers to E.164 is the first step in reliable validation, because it removes local formatting differences before any lookup runs.
Subscriber status describes whether a mobile number is currently active and reachable on its network, as reported by an HLR query. Typical states include active and reachable, absent (switched off or out of coverage), and unallocated or disconnected.
Why it matters for validation: Reachability tells you whether a number can actually receive a message right now, which is stronger evidence than a number simply being well-formed.
Do Not Call refers to registries of phone numbers whose owners have opted out of telemarketing calls, such as the US National Do Not Call Registry. Contacting a registered number for telemarketing can carry legal and financial penalties.
Why it matters for validation: Screening a calling list against DNC status keeps outbound campaigns compliant and avoids fines on numbers that have opted out.
SIM swap
A SIM swap is the transfer of a phone number to a new SIM card. It is a normal action when a subscriber upgrades a device, but attackers also use it to hijack a victim's number and intercept one-time passwords, a technique known as SIM-swap fraud.
Why it matters for validation: A recent, unexpected SIM change on a number tied to an account is a strong account-takeover signal worth stepping up verification for.
Robocall
A robocall is a phone call that plays a pre-recorded message or connects via an automated dialer rather than a live person. Some robocalls are legitimate (appointment reminders, alerts) while many are unsolicited spam or scam calls.
Why it matters for validation: Numbers with a history of robocall or scam reports carry a spam reputation you can screen against before trusting or displaying them.
A catch-all, or accept-all, domain is one whose mail server is configured to accept messages for any address at the domain, even addresses that do not correspond to a real mailbox. Because the server never rejects an unknown recipient, a live SMTP check cannot confirm whether a specific mailbox actually exists.
Why it matters for validation: Catch-all domains are the main reason an address can be reported as accept-all rather than a clean valid or invalid, and they carry a higher bounce risk.
SMTP (Simple Mail Transfer Protocol) is the protocol servers use to send email. The SMTP handshake is the sequence of commands (EHLO, MAIL FROM, RCPT TO) a verifier runs against the recipient's mail server to test whether it will accept mail for an address, without actually delivering a message.
Why it matters for validation: The SMTP handshake is how deliverability is checked at the mailbox level, which catches addresses that pass a format check but the server still refuses.
A Mail Exchange (MX) record is a DNS entry that names the mail servers responsible for receiving email for a domain. A domain with no MX record cannot accept email at all.
Why it matters for validation: Checking for a valid MX record is an early, cheap filter: an address on a domain with no mail server is undeliverable no matter how well it is formatted.
Greylisting is an anti-spam technique where a receiving mail server temporarily rejects a message from an unfamiliar sender with a 'try again later' response, expecting a legitimate server to retry. Spam software often does not retry, so greylisting filters it out.
Why it matters for validation: Greylisting can make a valid mailbox look temporarily unverifiable during an SMTP check, so a verifier has to interpret a soft rejection carefully rather than call the address bad.
A role account is an email address tied to a function or team rather than a single person, such as info@, support@, sales@, or admin@. These inboxes are often shared and monitored by several people or none.
Why it matters for validation: Role accounts draw more spam complaints and are frequently excluded from cold outreach, so flagging them protects sender reputation.
A disposable email is a short-lived address from a throwaway provider, created to receive a single message or avoid giving out a real address. The mailbox typically expires within minutes or hours.
Why it matters for validation: Disposable addresses signal a user who does not want to be reached again, which correlates with trial abuse, fake signups, and low-quality leads.
A hard bounce is a permanent delivery failure, returned when an address does not exist, the domain is invalid, or the server permanently refuses the message. A hard-bounced address should be removed from the list and not retried.
Why it matters for validation: Repeated hard bounces are one of the fastest ways to damage sender reputation, which is exactly what pre-send validation is meant to prevent.
A soft bounce is a temporary delivery failure caused by an issue that may clear, such as a full mailbox, a server that is down, or a message that is too large. Senders usually retry a soft bounce before giving up on the address.
Why it matters for validation: Distinguishing a soft bounce from a hard bounce prevents good addresses from being purged over a temporary problem while still protecting deliverability.
Spam trap
A spam trap is an email address that exists only to catch senders with poor list hygiene; it is never used to opt in to mail. Pristine traps are addresses that never signed up for anything, while recycled traps are abandoned addresses that a provider has reactivated as traps.
Why it matters for validation: Hitting a spam trap can get a sending domain or IP blocklisted, so removing risky, unverified addresses before a send is critical.
Sender Policy Framework is an email authentication standard published as a DNS record that lists which mail servers are authorized to send email on behalf of a domain. Receiving servers check SPF to help decide whether an incoming message really came from the domain it claims.
Why it matters for validation: SPF is one of the three signals (with DKIM and DMARC) that mailbox providers weigh when deciding inbox placement, so a sending domain's SPF setup affects deliverability.
DKIM (DomainKeys Identified Mail)
DomainKeys Identified Mail is an email authentication method that adds a cryptographic signature to each message. The receiving server verifies the signature against a public key in the sender's DNS to confirm the message was not altered in transit and genuinely came from the domain.
Why it matters for validation: A valid DKIM signature raises trust in a message's origin, which improves inbox placement and makes spoofing a domain harder.
DMARC
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a policy layered on top of SPF and DKIM. It tells receiving servers what to do with mail that fails authentication (accept, quarantine, or reject) and can send the domain owner reports on that traffic.
Why it matters for validation: A domain's DMARC policy shapes how strictly receivers treat unauthenticated mail, which directly affects whether legitimate campaigns land in the inbox.
Syntax validation
Syntax validation checks that an email address is well-formed according to the internet standards for the format, meaning a valid local part, an @ sign, and a valid domain. It confirms the shape of the address but not that the mailbox exists.
Why it matters for validation: Syntax is the cheapest first filter, but because it says nothing about deliverability it has to be paired with MX and SMTP checks to be meaningful.
An IP address is the numeric label that identifies a device on a network. IPv4 addresses look like 203.0.113.42, and the newer IPv6 addresses are longer hexadecimal strings written with colons.
Why it matters for validation: The IP a signup arrives from is one of the three core signals (with phone and email) used to place a user in a location and judge risk.
A proxy server is an intermediary that forwards a user's internet requests on their behalf, so the destination sees the proxy's IP address rather than the user's real one. Proxies are used for privacy, for bypassing regional restrictions, and by automated bots to hide their origin.
Why it matters for validation: Traffic arriving through a proxy is deliberately masking its true source, which is a common fraud and bot signal at signup or checkout.
A Virtual Private Network routes a user's traffic through an encrypted tunnel to a VPN server, so the destination sees the VPN server's IP instead of the user's own. VPNs are used widely for privacy and remote work, and also to disguise location.
Why it matters for validation: A VPN hides a user's real location, so a VPN result is context that a geolocation or a stated country may not be the user's true one.
Tor is an anonymity network that relays traffic through multiple volunteer-run servers. The exit node is the final relay, where traffic leaves the Tor network and reaches its destination, so the destination sees the exit node's IP and cannot trace the origin.
Why it matters for validation: Connections from a Tor exit node are strongly anonymised and are treated as elevated risk for signups, payments, and account access.
A datacenter IP is an address owned by a hosting or cloud provider rather than by an internet service provider that serves homes. Servers, bots, and automation typically run from datacenter IPs.
Why it matters for validation: A datacenter IP behind what should be a consumer signup suggests automation rather than a real person on a home connection.
A residential IP is an address an internet service provider assigns to a home broadband or mobile connection. It is associated with real consumer devices, which is why residential proxies are prized by those trying to make automated traffic look human.
Why it matters for validation: Distinguishing genuine residential connections from datacenter and proxy traffic is central to telling a real user apart from a bot.
IP geolocation is the estimation of the geographic location, typically country, region, and city, associated with an IP address, using databases that map address ranges to places. It is approximate and can be off by a city or region, and it does not use GPS.
Why it matters for validation: Comparing an IP's geolocation against a user's stated address or billing country is a standard mismatch check for fraud.
An Autonomous System Number identifies a network operator, such as an internet service provider or a hosting company, that controls a block of IP addresses and its own routing policy. Every public IP belongs to an autonomous system, named by its ASN.
Why it matters for validation: The ASN reveals who really operates an IP, which is how a lookup tells a consumer ISP apart from a cloud host or a known proxy network.
IP reputation is a score or status that reflects an address's history of spam, abuse, or malware. Blacklists, often published as DNS-based blocklists (DNSBLs), name IPs that have been observed sending spam or malicious traffic.
Why it matters for validation: An address on a blacklist or with poor reputation is a direct signal to block or step up scrutiny before allowing a signup, a login, or a mail send.
A fraud score is a single composite risk number, often on a 0 to 100 scale, that combines many signals across phone, email, and IP into one figure estimating how likely a signup or transaction is fraudulent. Higher usually means riskier, and each service defines its own thresholds.
Why it matters for validation: A unified score lets a team act on one number, auto-approving low risk and challenging or blocking high risk, instead of weighing each raw signal by hand.
CIDR notation
Classless Inter-Domain Routing (CIDR) notation is a compact way to write a range of IP addresses as a base address and a prefix length, for example 203.0.113.0/24, which covers 256 addresses. It is how networks and blocklists express blocks of IPs rather than listing each one.
Why it matters for validation: Risk data is often published per block in CIDR form, so understanding the notation is needed to tell whether a given IP falls inside a flagged range.
Put these terms to work
Every term here maps to something 1Lookup checks in real time across phone, email, and IP. Try a free tool, or start building on the API.