What is a disposable email address?

A temporary inbox created in seconds without registration, on services like Mailinator or temp-mail. Mail arrives for minutes to days, then the address is abandoned or recycled. They are also called temp mail, burner or throwaway addresses.

Are disposable email addresses illegal?

No. They are a legitimate privacy tool for avoiding newsletters and data leaks. The problem is one-sided: services that need to reach their users get unreachable signups, bounced campaigns and skewed metrics, which is why many block them at registration.

How do I block disposable emails on my signup form?

Extract the domain after the @, check it against a maintained blocklist, and reject with a clear message asking for a permanent address. Use a two-tier list: hard-block confirmed disposable domains, but only soft-verify domains reported by a single list to avoid false positives.

Why did an email verification service flag a real domain as disposable?

Blocklists occasionally include expired or repurposed domains. Good practice is stating list membership rather than issuing verdicts, honoring allowlists, and offering a correction route - which is how this site works.

What Is a Disposable Email? Temp Mail Explained & How to Block It Safely

The 30-second version

A disposable email address is a temporary inbox that exists without registration: open a temp-mail site, and an address like [email protected] is live instantly. Mail arrives for a few minutes to a few days, then the address is abandoned, and often recycled to the next visitor. Nobody checks it again.

Why people use them (it's mostly reasonable)

Avoiding newsletters: sign up for a one-time download without joining a mailing list forever.
Privacy: keeping a real address out of yet another database that might be breached.
Testing: developers use them to test signup flows.
Trial farming: the abusive case, where one person harvests unlimited free trials, coupons or votes.

Why services block them anyway

Every disposable signup is a user you can never reach: password resets bounce, receipts vanish, campaigns hit dead inboxes. At scale that damages sender reputation with mailbox providers, inflates user counts, and in freemium products it directly enables trial abuse. Blocking at signup, with a clear "please use a permanent address" message, is standard practice from ticketing systems to SaaS trials.

How to block them safely

The mechanics are simple: take the part after the @, lowercase it, and look it up in a maintained blocklist. The judgment calls matter more:

Use a tiered list. Hard-block domains that are confirmed (vetted list or multiple sources agree). For domains reported by a single list, accept the signup but require email confirmation. A false positive costs you a real customer; a false negative costs you one burner account.
Fail loudly and kindly. "Temporary email addresses can't receive our booking confirmations - please use a permanent address" converts better than a silent error.
Refresh the list daily. New temp-mail domains appear constantly; our merged list rebuilds every day.
Don't block free providers. gmail.com is not disposable. Only flag free providers when you specifically need a business address, and say so.

Checking without leaking your list

Ironically, many teams clean their email lists by uploading them to a third party, creating exactly the data exposure their users feared. Two ways to avoid that: our bulk checker runs entirely in your browser (the list never leaves your machine), and the free API accepts just the domain, so you can check mailinator.com without ever transmitting [email protected].

For developers: a minimal server-side gate

// 1. extract the domain
const domain = email.split('@').pop().toLowerCase();

// 2. check it (domain only - the address itself never leaves your server)
const r = await fetch('https://emaildomaincheck.com/api/email-domain/' + domain);
const v = await r.json();

// 3. tiered response
if (v.disposable === 'confirmed') reject('Please use a permanent email address.');
else if (v.disposable === 'reported') requireEmailConfirmation();
else accept();

Or skip the network entirely: download the list and ship it with your app; it is free for commercial use.

What is a disposable email?