FFCheckIs Dit Veilig · for business
NLEN
Is Dit Veilig? · API for business

Is Dit Veilig?
As an API.

The same threat intelligence that powers isditveilig.nl — the free Dutch scam-checker — now available as a Bearer-keyed REST API for your own product. URL, phone or email, one endpoint, no SDK. Business subscriptions are how we keep the consumer site free for citizens, always.

Request access See the request shape
6+live threat feeds
~150msp95 latency
IDVpowers isditveilig.nl
GDPREU-hosted · GDPR
Why this exists

FFCheck stays free for citizens. Forever.

Is Dit Veilig? is a free consumer scam-checker. Always has been, always will be. No tracking, no ads, no affiliate fees, no subscriptions for the people using it.

This API is how we sustain that. Banks, marketplaces, hosting and insurance fraud teams pay for programmatic access to the same data citizens get for free on the consumer site. The same model that funds Wikipedia (free for readers) and Wikimedia Enterprise (paid for Google, Apple, Meta).

If you're a person checking whether a website is a scam, go to isditveilig.nl. It's free. If you're a team that wants to wire that intelligence into your own product, you're in the right place.

See the free consumer site →
Who uses it

Built for teams that ship fraud-prevention.

BANK
IBAN + URL flagging on transfers
Drop a check into the transfer flow — if the receiving website was flagged by URLhaus or our safelist, surface a warning before the user confirms.
MARKETPLACE
Listing + DM URL scanning
Marktplaats, Bol, classified sites: every URL pasted into a listing or message gets a verdict in 150ms. Block obvious phishing before users click.
HOSTING
Customer-domain abuse triage
TransIP, Hostnet, AntagonistHost: when a domain on your platform appears on a threat feed, you know the same hour we know — not the same week.
INSURANCE
Claims-fraud signal
Phone numbers and emails attached to suspicious claims get a risk score. Feed it into your existing fraud-scoring model as one more signal.
How it works

Send a target, get a verdict.

One endpoint, three input types, deterministic JSON. No webhooks to set up, no async callbacks — the verdict is in the response.

REQUEST cURL 
curl -X POST https://ffcheck.nl/api/v1/check \
  -H 'Authorization: Bearer ffck_live_...' \
  -H 'Content-Type: application/json' \
  -d '{"type":"url","value":"voorbeeld-scam.nl"}'
RESPONSE 200 JSON 
{
  "data": {
    "type": "website",
    "risk": {
      "level": "high",
      "score": 7,
      "verdict": "High risk — multiple signals indicate this website is suspicious."
    },
    "signals": [
      { "text": "Registered on URLhaus" },
      { "text": "Domain registered < 30 days ago" }
    ],
    "sources": ["urlhaus", "whois", "dns"]
  }
}
Types
url · email · phone
Auth
Authorization: Bearer ffck_live_...
Rate limits
60 / min · monthly quota by tier
Pricing

Public, predictable, no surprises.

Pay monthly, cancel anytime. No setup fee. No contract. Upgrade by sending us an email when you outgrow your tier — we don't auto-bump.

Free
€0
100 calls / month
Kick the tyres. Build a prototype. Use it for a community project. No card required.
Start free
Most teams start here
Starter
€99/mo
2,500 calls / month
Small marketplaces, side-projects with paid users, internal tooling for a single ops team.
Request access
Growth
€299/mo
15,000 calls / month
Production-scale marketplace listings, mid-size fraud teams, hosting customer-base sweeps.
Request access
Scale
€999/mo
100,000 calls / month
Bank-level transfer screening, hosting-platform-wide domain audits, large marketplace flows.
Request access
Enterprise
Custom
Unlimited calls · SLA · dedicated support
Custom quotas, signed SLA, dedicated Slack channel, on-prem deployment options. For banks, government, and platforms above 1M calls/month.
Email us
Prices exclude VAT (BTW). Invoiced in EUR. Volume discounts apply automatically above 100k/mo.
Data sources

Open feeds, all the way down.

Every verdict cites every signal that produced it. No black box. The same sources that power our consumer site — no second-class data for B2B.

URLhausabuse.ch · real-time malware host feed
Spamhaus DBLdomain blocklist
Google Safe Browsingphishing & malware index
urlscan.iolive page-scan verdicts
OpenPhish · PhishTankcommunity phishing reports
WHOIS · DNS · MXdomain age, NS, ASN, mailserver
FFCheck Safelistcurated official Dutch domains (banks, gov, telecom)
FFCheck Reportscommunity-submitted reports from isditveilig.nl
Request access

Tell us about your use case.

We're onboarding manually right now to keep API quality high. Drop your details — we usually issue a key within one business day.

We email you back within one business day. We don't share your details with anyone, ever.