Business API

Scam check API documentation

Connect TrustCheck AI to your support inbox, marketplace, browser extension or fraud monitoring tool. The saved API requires an active Business plan or admin account.

Activate Business

Pay for Business in Billing, then create a key from Settings after activation.

Send request

Call /api/v1/check with Bearer auth.

Use result

Store risk level, score and guidance.

Request

curl -X POST https://your-domain.com/api/v1/check \
  -H "Authorization: Bearer tc_live_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"type":"URL","input":"https://fake-bank-verify.example.com/kyc"}'

Response

{
  "id": "check_id",
  "shareToken": "public_share_token",
  "riskLevel": "DANGEROUS",
  "trustScore": 18,
  "redFlags": ["Urgency pressure", "Lookalike brand domain"],
  "recommendedAction": "Do not click or share personal information."
}

URL-only inspector

Use this lightweight endpoint when you only need visible link signals without saving a full scam check.

curl -X POST https://your-domain.com/api/url/inspect \
  -H "Content-Type: application/json" \
  -d '{"text":"https://support-bank-verify.example/kyc"}'

Brand impersonation inspector

Use this endpoint to detect brand-name abuse and suspicious domains before running a full saved scam check.

curl -X POST https://your-domain.com/api/brand/inspect \
  -H "Content-Type: application/json" \
  -d '{"input":"SBI KYC blocked verify at https://sbi-kyc-secure.example.com"}'

Threat intelligence summary

Use this endpoint for anonymized charts, internal dashboards or public alert widgets.

curl https://your-domain.com/api/intel/summary?days=30

Public scam database endpoints

Read anonymized community reports and public aggregate stats. These endpoints do not expose user accounts, emails, screenshot URLs, or private check inputs.

curl "https://your-domain.com/api/public/reports?country=India&type=Phishing&limit=20"

curl https://your-domain.com/api/public/stats

curl -X POST https://your-domain.com/api/public/reports/fake-job-task-scam-telegram-india/vote

Growth and alert endpoints

Use these endpoints to capture alert subscribers, browser extension waitlist users and B2B trust widget/API leads.

curl -X POST https://your-domain.com/api/alerts/subscribe \
  -H "Content-Type: application/json" \
  -d '{"email":"user@example.com","country":"India","scamTypes":["Phishing","Fake job"],"frequency":"weekly"}'

curl -X POST https://your-domain.com/api/leads \
  -H "Content-Type: application/json" \
  -d '{"name":"Demo","email":"demo@example.com","company":"Acme","useCase":"We want to check seller links before users open them.","volume":"1000/month","source":"trust_widget"}'

Razorpay billing and autopay

Use these routes for Razorpay Checkout. The subscription route creates a Razorpay monthly plan when needed, then creates an autopay subscription. Configure the webhook URL in Razorpay Dashboard as shown below.

curl -X POST https://your-domain.com/api/razorpay/order \
  -H "Content-Type: application/json" \
  -d '{"plan":"PRO"}'

curl -X POST https://your-domain.com/api/razorpay/subscription \
  -H "Content-Type: application/json" \
  -d '{"plan":"BUSINESS"}'

https://your-domain.com/api/razorpay/webhook

v14 customer billing controls:

curl -X POST https://your-domain.com/api/billing/subscription/cancel \
  -H "Content-Type: application/json" \
  -d '{"immediate":false}'

curl -X POST https://your-domain.com/api/billing/subscription/sync

curl https://your-domain.com/api/billing/invoices

Pay Business plan Manage API keys View scam database

curl -X POST https://your-domain.com/api/v1/check \ -H "Authorization: Bearer tc_live_your_api_key" \ -H "Content-Type: application/json" \ -d '{"type":"URL","input":"https://fake-bank-verify.example.com/kyc"}'

{ "id": "check_id", "shareToken": "public_share_token", "riskLevel": "DANGEROUS", "trustScore": 18, "redFlags": ["Urgency pressure", "Lookalike brand domain"], "recommendedAction": "Do not click or share personal information." }

curl -X POST https://your-domain.com/api/alerts/subscribe \ -H "Content-Type: application/json" \ -d '{"email":"user@example.com","country":"India","scamTypes":["Phishing","Fake job"],"frequency":"weekly"}'

curl -X POST https://your-domain.com/api/leads \ -H "Content-Type: application/json" \ -d '{"name":"Demo","email":"demo@example.com","company":"Acme","useCase":"We want to check seller links before users open them.","volume":"1000/month","source":"trust_widget"}'