Score API - Insights Reason Code Mappings

When using Score 2.0, The Score API may provide extra explanation of how we calculated the score for your number, in the form of insights reason codes. Codes that provide an overall conclusion on the relative riskiness of the number are found in the “category” package. Codes in the other packages provide insights on the factors contributing to that overall conclusion.

Use the tables below to look up the meaning of each code.

📘

See also: Reference Page

POST /v1/score/{complete_phone_number}

Full technical details for the API endpoint, including the response properties that deliver these reason codes.

category

Reason codes that provide an overall conclusion on the relative risk presented by the transaction, by placing the transaction in a risk category. This is determined based on weighting the risk and trust signals indicated by the other reason codes.

CodeNameMeaning
10010low activityNot enough activity or attributes to classify the transaction as either risky or trustworthy.
10020low regular activityTrustworthy category, based on past behavior.
10021regular activityMost trustworthy category, based on past behavior.
10030low-risk irregular activityRisky category, based on past behavior.
10031medium-risk irregular activityHigh-risk category, based on past behavior.
10032high-risk irregular activityHighest-risk category, based on past behavior.
10040irregular number typeThis number has risky static attributes (like VOIP phone type or being on a blocklist).

a2p

Reason codes specific to application-to-person messaging (a2p). These are automated messages sent to a human, like verification codes, appointment reminders, etc. These reason codes are organized into multiple sub-categories.

activity

Reason codes related to how much activity was observed for this number, compared to what would be expected for a good user. This takes into account the number of communications transactions (calls, SMS, etc.) to or from this number, the quantity of unique numbers communicated with, and the number of accounts communicated with.

CodeNameMeaningRisk SignalTrust Signal
20001no long-term activityMuch less than expected activity, or none at all, for this number over the past 90 days. Cannot classify.
20002high long-term activityMore than expected activity for this number over the past 90 days.
20003high short-term activityMore than expected activity for this number over the last 24 hours.
20004moderate long-term activityExpected activity for this number over the past 90 days.
20005moderate short-term activityExpected activity for this number over the last 24 hours.
20006sparse long-term activitySparse, regular volume of verification traffic on this number over the past 90 days.
20007continuous long-term activityContinuous, regular volume of verification traffic on this number over the past 90 days.
20008very high long-term activityVery high volume of verification traffic on this number over the past 90 days.
20009very high short-term activityVery high volume of verification traffic on this number over the past 24 hours.
20010no activityVery low volume of verification traffic, or none at all, was ever observed on this number.
20011low long-term activityLow volume of verification traffic on this phone number over the past 90 days.
20012low short-term activityLow volume of verification traffic on this phone number over the past 24 hours. Very low volume of verification traffic, or none at all over the past 90 days.
20013low activityLess than expected activity for this number.

range

Reason codes related to how active a risky range (series of consecutive numbers) that the number belongs to has been, if applicable, compared to a good user.

📘

Understanding Range

Phone Number
13105551
13105552
13105553
13105554

In the example above, let’s say the number you submitted to Score is 13105552. Even if there has been no risky activity for that particular number, there might still be risky activity for most other phone numbers in the 131055xx range. In this case the risky activity of the range would contribute to the overall risk level we determine for the submitted number.

CodeNameMeaningRisk SignalTrust Signal
20101no range activityVery little activity, or none at all, for a risky range that this number belongs to over the past 90 days. Also returned if the number does not belong to a risky range.
20102low range activitySome activity for a risky range that this number belongs to over the past 90 days.
20103moderate short-term range activitySignificant activity for a risky range that this number belongs to over the last 24 hours.
20104moderate long-term range activitySignificant activity for a risky range that this number belongs to over the past 90 days.
20105high short-term range activityVery significant activity for a risky range that this number belongs to over the last 24 hours.
20106high long-term range activityVery significant activity for a risky range that this number belongs to over the past 90 days.

risky services

Reason codes related to how much the number has communicated with risky services.

📘

Understanding Risky Services

Both TeleSign and other companies designate specialized services to handle transactions with numbers that are judged more likely to be malicious. We call these “risky services”. It’s not that the service itself presents risk; rather it is that if your submitted phone number has had a lot of contact with these services, someone thinks that the number presents risk.

CodeNameMeaningRisk SignalTrust Signal
21001moderate activity on risky servicesSignificant activity on this number to or from risky services over the past 90 days.
21002high activity on risky servicesVery significant activity on this number to or from risky services over the past 90 days.
21004long-term activity on risky servicesVerification traffic on risky services on this number over the past 90 days.
21005short-term activity on risky servicesVerification traffic on risky services on this number over the past 24 hours.
21006high long-term activity on risky servicesHigh volume of verification traffic on risky services on this number over the past 90 days.
21007high short-term activity on risky servicesHigh volume of verification traffic on risky services on this number over the past 24 hours.
21008long-term range activity on risky servicesVerification traffic on risky services on the range this number belongs to over the past 90 days.
21009short-term range activity on risky servicesVerification traffic on risky services on the range this number belongs to over the past 24 hours.
21010high long-term range activity on risky servicesHigh volume of verification traffic on risky services on the range this number belongs to over the past 90 days.
21011high short-term range activity on risky servicesHigh volume of verification traffic on risky services on the range this number belongs to over the past 24 hours.
21012very high short-term activity on risky servicesVery high volume of verification traffic on risky services on this number over the past 90 days.
21013very high long-term activity on risky servicesVery high volume of verification traffic on risky services on this number over the past 24 hours.
21014very high short-term range activity on risky servicesVery high volume of verification traffic on risky services on the range this number belongs to over the past 90 days.
21015very high long-term range activity on risky servicesVery high volume of verification traffic on risky services on the range this number belongs to over the past 24 hours.
21016machine-like range activityExtremely high volume of verification traffic in a very short period (less than 1 hour) on the range this number belongs to.

other

Other A2P reason codes that do not fall into the sub-categories above.

CodeNameMeaningRisk SignalTrust Signal
21003machine-like activityBehavior pattern that suggests this number is being used by a bot. Although we expect a submitted number engaged in A2P traffic to communicate with automated systems, we don’t expect the user of that number to be an automated system.

recency

Reason codes related to how recently the number was active.

CodeNameMeaningRisk SignalTrust Signal
22001seen in the last 1 dayThis number was seen in verification traffic in the last 1 day.
22007seen in the last 7 daysThis number was seen in verification traffic in the last 7 days.
22015seen in the last 15 daysThis number was seen in verification traffic in the last 15 days.
22101seen in the last 1 monthThis number was seen in verification traffic in the last 1 month.
22102seen in the last 2 monthsThis number was seen in verification traffic in the last 2 months.
22103seen in the last 3 monthsThis number was seen in verification traffic in the last 3 months.
22203seen more than 3 months agoThis number was not seen in verification traffic in the last 3 months.

p2p

Reason codes specific to person-to-person messaging (p2p). Two-way messaging between two humans, like one friend texting another. These reason codes are organized into multiple sub-categories.

successful calls

Reason codes related to successful completion of calls for this number, compared to what would be expected for a good user. This feature takes into account both the absolute volume of successful calls and the success rate of calls.

📘

Understanding Successful Calls

A call can complete in any number of ways, most of which are unsuccessful. For example, the call can get dropped while it is in the process of being connected. A completed call is only a successful call if airtime is recorded for the call where the receiving party gets voice communication from the sending party.

CodeNameMeaningRisk SignalTrust Signal
30001very low number of completed callsMuch less success than expected, or no success at all, for this number over the past 90 days.
30002low number of completed callsLess success than expected for this number over the past 90 days.
30003regular number of completed callsExpected success for this number over the past 90 days.
30004high number of completed callsMore success than expected for this number over the past 90 days. Impact depends on activity level: for higher than expected activity, this is a risk signal; for expected or lower than expected activity, this is a trust signal.variablevariable

call duration

Reason codes related to how long calls have been for this number, compared to what would be expected for a good user.

CodeNameMeaningRisk SignalTrust Signal
30101regular call durationExpected call duration for this number over the past 90 days.
30102irregular call durationShorter or longer than expected call duration for this number over the past 90 days.

tenure

Reason codes related to how long the span from first transaction to last transaction (tenure) on this number has been over the lookup window, as well as how much activity occurred on the number during that tenure. In both cases we are comparing the observed behavior to that expected for a good user.

CodeNameMeaningRisk SignalTrust Signal
30201no activityVery little activity, or none at all, was ever observed on this number. Very short tenure. Cannot classify.
30202no long-term activityLower than expected activity on this number over a tenure less than one week (short-term). Cannot classify.
30203sparse long-term activityLower than expected activity on this number over a tenure greater than or equal to one week (long-term).
30204continuous long-term activityExpected activity on this number over a tenure greater than or equal to 90 days (long-term).
30205high short-term activityHigher than expected activity on this number within one or more 24-hour periods within the tenure (either short or long-term tenure). Spikes. Spikes within one hour are also considered here.
30206high long-term activityHigher than expected activity on this number over a tenure greater than or equal to 90 days (long-term).

range

Reason codes related to how active a risky range (series of consecutive numbers) that the number belongs to has been, if applicable.

📘

Understanding Range

Phone Number
13105551
13105552
13105553
13105554

In the example above, let’s say the number you submitted to Score is 13105552. Even if there has been no risky activity for that particular number, there might still be risky activity for most other phone numbers in the 131055xx range. In this case the risky activity of the range would contribute to the overall risk level we determine for the submitted number.

CodeNameMeaningRisk SignalTrust Signal
30301no range activityVery little activity, or none at all, for a risky range that this number belongs to over the past 90 days. Also returned if the number does not belong to a risky range.
30302low range activitySome activity for a risky range that this number belongs to over the past 90 days.
30303moderate-range activitySignificant activity for a risky range that this number belongs to over the past 90 days.
30304high-range activityVery significant activity for a risky range that this number belongs to over the past 90 days.
30305very high-range activityExtremely significant activity for a risky range that this number belongs to over the past 90 days.

other

Other P2P reason codes that do not fall into the other sub-categories.

CodeNameMeaningRisk SignalTrust Signal
31001number was recently unassignedThis number was recently reported as removed from distribution, so finding activity from it is unexpected for a good user. The service takes into account the number of reports of removal before making this determination.
31002activity towards high number of unassigned phone numbersMore activity than expected was seen going from this number towards unassigned phone numbers. Both the volume of activity and the quantity of unique unassigned numbers are considered here.
31003activity coming from high number of different phone numbersActivity towards this number is coming from a higher than expected quantity of unique phone numbers.
31004activity towards high number of different phone numbersActivity from this number is going to a higher than expected quantity of unique phone numbers.
31005activity coming from high number of risky countriesMore activity than expected coming to this number from numbers of risky countries (such as those with more fraud). Both the risk level of the country and the amount of traffic between the number and that country are considered here.
31006activity towards high number of risky countriesMore activity than expected going from this number towards numbers of risky countries (such as those with more fraud). Both the risk level of the country and the amount of traffic between the number and that country are considered here.
31007activity concentrated in short time intervalsHigher than expected activity on this number within one or more 24-hour periods within the last 90 days. Spikes. Spikes within one hour are also considered here.
31008activity towards high number of premium numbersMore activity than expected is going from this number towards premium numbers. Both the quantity of premium numbers and the amount of traffic to those numbers are considered here.
31009activity coming from high number of tollfree numbersMore activity than expected is coming from this number towards toll-free numbers. Both the quantity of toll-free numbers and the amount of traffic from those numbers are considered here.
31010machine-like activityBehavior pattern that suggests this number is being used by a bot.
31011call center-like activityBehavior pattern that suggests this number is being used by a call center.
31012low successful outgoing trafficFew outgoing calls were successful for this number.
31013low successful incoming trafficFew incoming calls were successful for this number.
31014low successful outgoing and incoming trafficFew outgoing calls were successful and very few incoming calls were successful for this number.

recency

Reason codes related to how recently the number was active.

CodeNameMeaning
32001seen in the last 1 dayActivity on this number in the last 24 hours.
32007seen in the last 7 daysActivity on this number in the last seven days.
32015seen in the last 15 daysActivity on this number in the last 15 days.
32101seen in the last 1 monthActivity on this number in the last month.
32102seen in the last 2 monthsActivity on this number in the last two months.
32103seen in the last 3 monthsActivity on this number in the last three months.
32203seen more than 3 months agoNo activity on this number in the last three months.

number_type

Reason codes related to the number’s type. These are static attributes rather than measurements of behavior.

CodeNameMeaningRisk SignalTrust Signal
40001premium numberThis is a premium number.
40002VOIP numberThis is a VOIP number.
40003toll-free numberThis is a toll-free number.
40004invalid numberThis is an invalid number.
40005payphone numberThis number is associated with a payphone.
40006voicemail numberThis is a voicemail number.
40007pager numberThis number is associated with a pager.
40008high-risk phone typeThis number has another phone type that is risky, and that is not covered by any of the other number_type reason codes.
40009high-risk carrierThis number is associated with a very risky carrier.
40010medium-risk carrierThis number is associated with a risky carrier.
40011high-risk prefixThis number has a risky prefix.
40012phone too longThis number is invalid because it is too long, even after the application of cleansing rules.
40013blacklisted numberThis number has been flagged as a source of fraud. Score always recommends to block this number.
40014high-risk countryThe country code of this number is for a risky country, one that originates a disproportionate share of fraud attacks.
40015technical numberThis number is used for special technical purposes by telecom companies, such as for roaming.
40016number used by applicationTeleSign or BICS reserved this number for use by customers with our applications (for example to send verification messages), but it appears that it is being used for a different purpose.
40017number whitelisted by customerYou have flagged this number as safe. Score always recommends to allow this number.

ip

Reason codes related to activity of the IP address you provided for this number (and its associated geolocation IDs), as compared to a good user.

CodeNameMeaningRisk SignalTrust Signal
50001moderate short-term activityExpected level of activity for this IP address over the last 24 hours.
50002moderate long-term activityExpected level of activity for this IP address over the past 90 days.
50003moderate short-term activity on risky servicesSignificant activity for this IP address to or from risky services over the last 24 hours (see risky services above for definition of that term).
50004moderate long-term activity on risky servicesSignificant activity on this IP address to or from risky services over the last 90 days (see risky services above for definition of that term).
50005high short-term activityMore than expected activity for this IP address over the last 24 hours.
50006high long-term activityMore than expected activity for this IP address over the past 90 days.
50007high short-term activity on risky servicesVery significant activity for this IP address to or from risky services over the last 24 hours (see risky services above for definition of that term).
50008high long-term activity on risky servicesVery significant activity on this IP address to or from risky services over the last 90 days (see risky services above for definition of that term).
50009very high short-term activityVery frequent changes of IP address attributes in verification traffic on this number over the past 24 hours.
50010very high long-term activityVery frequent changes of IP address attributes in verification traffic on this number over the past 90 days.
50011short-term activity on risky servicesChanges of IP address attributes in verification traffic on risky services on this number over the past 24 hours.
50012long-term activity on risky servicesChanges of IP address attributes in verification traffic on risky services on this number over the past 90 days.
50013very high short-term activity on risky servicesVery frequent changes of IP address attributes in verification traffic on risky services on this number over the past 24 hours.
50014very high long-term activity on risky servicesVery frequent changes of IP address attributes in verification traffic on risky services on this number over the past 90 days.

email

Reason codes related to activity of the email address you provided for this phone number.

CodeNameMeaningRisk SignalTrust Signal
60001moderate short-term activityExpected level of activity for this email address over the last 24-hours.
60002moderate long-term activityExpected level of activity for this email address over the past 90 days.
60003moderate short-term activity on risky servicesSignificant activity for this email address to or from risky services over the last 24 hours (see risky services above for definition of that term).
60004moderate long-term activity on risky servicesSignificant activity on this email address to or from risky services over the last 90 days (see risky services above for definition of that term).
60005high short-term activityMore than expected activity for this email address over the last 24-hours.
60006high long-term activityMore than expected activity for this email address over the past 90 days.
60007high short-term activity on risky servicesVery significant activity for this email address to or from risky services over the last 24 hours (see risky services above for definition of that term).
60008high long-term activity on risky servicesVery significant activity on this email address to or from risky services over the last 90 days (see risky services above for definition of that term).
60009very high short-term activityVery high volume of verification traffic on this email address over the past 24 hours.
60010very high long-term activityVery high volume of verification traffic on this email address over the past 90 days.

Did this page help you?