tooljarEmail

Should you block temp mail at sign-up?

Short answer: flag it, don't just block it. Block only where a fake account costs you something real.

Why sites block temp mail

Why blocking can hurt

A sensible approach

  1. On “disposable”: ask for an address they keep, and explain why in one sentence (“we send your receipt and password resets there”).
  2. On “suspicious”: let them in, but hold back the costly part (a trial, credits, a payout) until they confirm the address.
  3. On “undeliverable”: point out the typo. The domain cannot receive mail.
  4. Always: store the cleaned-up Gmail address (dots and + part removed) next to the one they typed, and allow one free trial per real inbox.
const r = await fetch("https://email.tooljar.dev/api/check?q=" + encodeURIComponent(email)).then((x) => x.json());

if (r.verdict === "disposable") return askForAnotherAddress();
if (r.verdict === "undeliverable") return showTypoHint();
const key = r.normalized ?? email.toLowerCase(); // one trial per real inbox
const trialAllowed = r.verdict === "ok" && !(await trialUsed(key));

Questions

Is it legal to block temp mail addresses?

Generally yes: you decide who can sign up for your service. If you block, say so plainly on the form, so honest people know what to do.

Will blocking temp mail stop fake accounts?

It stops the lazy ones. Determined abusers use real Gmail accounts, the Gmail dot trick or private domains. Combine the check with rate limits, the Gmail clean-up and a check before anything costly, like a free trial.

Should I block DuckDuckGo, Firefox Relay or SimpleLogin addresses?

We suggest not. They forward to the person's real inbox and last as long as the person wants. The people who use them are usually careful about privacy, not abusers.

Try any address on the temp mail checker, or read how it works.