Insights Reason Code Mappings

When using Score 2.0, The Score API may provide extra explanation of how we calculated the score for your number, in the form of insights reason codes. Codes that provide an overall conclusion on the relative riskiness of the number are found in the “category” package. Codes in the other packages provide insights on the factors contributing to that overall conclusion.

Use the tables below to look up the meaning of each code.

See also: Reference Page

POST /v1/score/{complete_phone_number}

Full technical details for the API endpoint, including the response properties that deliver these reason codes.

category

Reason codes that provide an overall conclusion on the relative risk presented by the transaction, by placing the transaction in a risk category. This is determined based on weighting the risk and trust signals indicated by the other reason codes.

Code Name Meaning
10010 low activity Not enough activity or attributes to classify the transaction as either risky or trustworthy.
10020 low regular activity Trustworthy category, based on past behavior.
10021 regular activity Most trustworthy category, based on past behavior.
10030 low-risk irregular activity Risky category, based on past behavior.
10031 medium-risk irregular activity High-risk category, based on past behavior.
10032 high-risk irregular activity Highest-risk category, based on past behavior.
10040 irregular number type This number has risky static attributes (like VOIP phone type or being on a blocklist).

a2p

Reason codes specific to application-to-person messaging (a2p). These are automated messages sent to a human, like verification codes, appointment reminders, etc. These reason codes are organized into multiple sub-categories.

activity

Reason codes related to how much activity was observed for this number, compared to what would be expected for a good user. This takes into account the number of communications transactions (calls, SMS, etc.) to or from this number, the quantity of unique numbers communicated with, and the number of accounts communicated with.

Code Name Meaning Risk Signal Trust Signal
20001 no long-term activity Much less than expected activity, or none at all, for this number over the past 90 days. Cannot classify.
20002 high long-term activity More than expected activity for this number over the past 90 days.
20003 high short-term activity More than expected activity for this number over the last 24 hours.
20004 moderate long-term activity Expected activity for this number over the past 90 days.
20005 moderate short-term activity Expected activity for this number over the last 24 hours.
20006 sparse long-term activity Sparse, regular volume of verification traffic on this number over the past 90 days.
20007 continuous long-term activity Continuous, regular volume of verification traffic on this number over the past 90 days.
20008 very high long-term activity Very high volume of verification traffic on this number over the past 90 days.
20009 very high short-term activity Very high volume of verification traffic on this number over the past 24 hours.
20010 no activity Very low volume of verification traffic, or none at all, was ever observed on this number.
20011 low long-term activity Low volume of verification traffic on this phone number over the past 90 days.
20012 low short-term activity Low volume of verification traffic on this phone number over the past 24 hours. Very low volume of verification traffic, or none at all over the past 90 days.
20013 low activity Less than expected activity for this number.

range

Reason codes related to how active a risky range (series of consecutive numbers) that the number belongs to has been, if applicable, compared to a good user.

Understanding Range
Phone Number
13105551
13105552
13105553
13105554

In the example above, let’s say the number you submitted to Score is 13105552. Even if there has been no risky activity for that particular number, there might still be risky activity for most other phone numbers in the 131055xx range. In this case the risky activity of the range would contribute to the overall risk level we determine for the submitted number.

Code Name Meaning Risk Signal Trust Signal
20101 no range activity Very little activity, or none at all, for a risky range that this number belongs to over the past 90 days. Also returned if the number does not belong to a risky range.
20102 low range activity Some activity for a risky range that this number belongs to over the past 90 days.
20103 moderate short-term range activity Significant activity for a risky range that this number belongs to over the last 24 hours.
20104 moderate long-term range activity Significant activity for a risky range that this number belongs to over the past 90 days.
20105 high short-term range activity Very significant activity for a risky range that this number belongs to over the last 24 hours.
20106 high long-term range activity Very significant activity for a risky range that this number belongs to over the past 90 days.

risky services

Reason codes related to how much the number has communicated with risky services.

Understanding Risky Services

Both TeleSign and other companies designate specialized services to handle transactions with numbers that are judged more likely to be malicious. We call these “risky services”. It’s not that the service itself presents risk; rather it is that if your submitted phone number has had a lot of contact with these services, someone thinks that the number presents risk.

Code Name Meaning Risk Signal Trust Signal
21001 moderate activity on risky services Significant activity on this number to or from risky services over the past 90 days.
21002 high activity on risky services Very significant activity on this number to or from risky services over the past 90 days.
21004 long-term activity on risky services Verification traffic on risky services on this number over the past 90 days.
21005 short-term activity on risky services Verification traffic on risky services on this number over the past 24 hours.
21006 high long-term activity on risky services High volume of verification traffic on risky services on this number over the past 90 days.
21007 high short-term activity on risky services High volume of verification traffic on risky services on this number over the past 24 hours.
21008 long-term range activity on risky services Verification traffic on risky services on the range this number belongs to over the past 90 days.
21009 short-term range activity on risky services Verification traffic on risky services on the range this number belongs to over the past 24 hours.
21010 high long-term range activity on risky services High volume of verification traffic on risky services on the range this number belongs to over the past 90 days.
21011 high short-term range activity on risky services High volume of verification traffic on risky services on the range this number belongs to over the past 24 hours.
21012 very high short-term activity on risky services Very high volume of verification traffic on risky services on this number over the past 90 days.
21013 very high long-term activity on risky services Very high volume of verification traffic on risky services on this number over the past 24 hours.
21014 very high short-term range activity on risky services Very high volume of verification traffic on risky services on the range this number belongs to over the past 90 days.
21015 very high long-term range activity on risky services Very high volume of verification traffic on risky services on the range this number belongs to over the past 24 hours.
21016 machine-like range activity Extremely high volume of verification traffic in a very short period (less than 1 hour) on the range this number belongs to.

other

Other A2P reason codes that do not fall into the sub-categories above.

Code Name Meaning Risk Signal Trust Signal
21003 machine-like activity Behavior pattern that suggests this number is being used by a bot. Although we expect a submitted number engaged in A2P traffic to communicate with automated systems, we don’t expect the user of that number to be an automated system.

recency

Reason codes related to how recently the number was active.

Code Name Meaning Risk Signal Trust Signal
22001 seen in the last 1 day This number was seen in verification traffic in the last 1 day.
22007 seen in the last 7 days This number was seen in verification traffic in the last 7 days.
22015 seen in the last 15 days This number was seen in verification traffic in the last 15 days.
22101 seen in the last 1 month This number was seen in verification traffic in the last 1 month.
22102 seen in the last 2 months This number was seen in verification traffic in the last 2 months.
22103 seen in the last 3 months This number was seen in verification traffic in the last 3 months.
22203 seen more than 3 months ago This number was not seen in verification traffic in the last 3 months.

p2p

Reason codes specific to person-to-person messaging (p2p). Two-way messaging between two humans, like one friend texting another. These reason codes are organized into multiple sub-categories.

successful calls

Reason codes related to successful completion of calls for this number, compared to what would be expected for a good user. This feature takes into account both the absolute volume of successful calls and the success rate of calls.

Understanding Successful Calls

A call can complete in any number of ways, most of which are unsuccessful. For example, the call can get dropped while it is in the process of being connected. A completed call is only a successful call if airtime is recorded for the call where the receiving party gets voice communication from the sending party.

Code Name Meaning Risk Signal Trust Signal
30001 very low number of completed calls Much less success than expected, or no success at all, for this number over the past 90 days.
30002 low number of completed calls Less success than expected for this number over the past 90 days.
30003 regular number of completed calls Expected success for this number over the past 90 days.
30004 high number of completed calls More success than expected for this number over the past 90 days. Impact depends on activity level: for higher than expected activity, this is a risk signal; for expected or lower than expected activity, this is a trust signal. variable variable

call duration

Reason codes related to how long calls have been for this number, compared to what would be expected for a good user.

Code Name Meaning Risk Signal Trust Signal
30101 regular call duration Expected call duration for this number over the past 90 days.
30102 irregular call duration Shorter or longer than expected call duration for this number over the past 90 days.

tenure

Reason codes related to how long the span from first transaction to last transaction (tenure) on this number has been over the lookup window, as well as how much activity occurred on the number during that tenure. In both cases we are comparing the observed behavior to that expected for a good user.

Code Name Meaning Risk Signal Trust Signal
30201 no activity Very little activity, or none at all, was ever observed on this number. Very short tenure. Cannot classify.
30202 no long-term activity Lower than expected activity on this number over a tenure less than one week (short-term). Cannot classify.
30203 sparse long-term activity Lower than expected activity on this number over a tenure greater than or equal to one week (long-term).
30204 continuous long-term activity Expected activity on this number over a tenure greater than or equal to 90 days (long-term).
30205 high short-term activity Higher than expected activity on this number within one or more 24-hour periods within the tenure (either short or long-term tenure). Spikes. Spikes within one hour are also considered here.
30206 high long-term activity Higher than expected activity on this number over a tenure greater than or equal to 90 days (long-term).

range

Reason codes related to how active a risky range (series of consecutive numbers) that the number belongs to has been, if applicable.

Understanding Range
Phone Number
13105551
13105552
13105553
13105554

In the example above, let’s say the number you submitted to Score is 13105552. Even if there has been no risky activity for that particular number, there might still be risky activity for most other phone numbers in the 131055xx range. In this case the risky activity of the range would contribute to the overall risk level we determine for the submitted number.

Code Name Meaning Risk Signal Trust Signal
30301 no range activity Very little activity, or none at all, for a risky range that this number belongs to over the past 90 days. Also returned if the number does not belong to a risky range.
30302 low range activity Some activity for a risky range that this number belongs to over the past 90 days.
30303 moderate-range activity Significant activity for a risky range that this number belongs to over the past 90 days.
30304 high-range activity Very significant activity for a risky range that this number belongs to over the past 90 days.
30305 very high-range activity Extremely significant activity for a risky range that this number belongs to over the past 90 days.

other

Other P2P reason codes that do not fall into the other sub-categories.

Code Name Meaning Risk Signal Trust Signal
31001 number was recently unassigned This number was recently reported as removed from distribution, so finding activity from it is unexpected for a good user. The service takes into account the number of reports of removal before making this determination.
31002 activity towards high number of unassigned phone numbers More activity than expected was seen going from this number towards unassigned phone numbers. Both the volume of activity and the quantity of unique unassigned numbers are considered here.
31003 activity coming from high number of different phone numbers Activity towards this number is coming from a higher than expected quantity of unique phone numbers.
31004 activity towards high number of different phone numbers Activity from this number is going to a higher than expected quantity of unique phone numbers.
31005 activity coming from high number of risky countries More activity than expected coming to this number from numbers of risky countries (such as those with more fraud). Both the risk level of the country and the amount of traffic between the number and that country are considered here.
31006 activity towards high number of risky countries More activity than expected going from this number towards numbers of risky countries (such as those with more fraud). Both the risk level of the country and the amount of traffic between the number and that country are considered here.
31007 activity concentrated in short time intervals Higher than expected activity on this number within one or more 24-hour periods within the last 90 days. Spikes. Spikes within one hour are also considered here.
31008 activity towards high number of premium numbers More activity than expected is going from this number towards premium numbers. Both the quantity of premium numbers and the amount of traffic to those numbers are considered here.
31009 activity coming from high number of tollfree numbers More activity than expected is coming from this number towards toll-free numbers. Both the quantity of toll-free numbers and the amount of traffic from those numbers are considered here.
31010 machine-like activity Behavior pattern that suggests this number is being used by a bot.
31011 call center-like activity Behavior pattern that suggests this number is being used by a call center.
31012 low successful outgoing traffic Few outgoing calls were successful for this number.
31013 low successful incoming traffic Few incoming calls were successful for this number.
31014 low successful outgoing and incoming traffic Few outgoing calls were successful and very few incoming calls were successful for this number.

recency

Reason codes related to how recently the number was active.

Code Name Meaning
32001 seen in the last 1 day Activity on this number in the last 24 hours.
32007 seen in the last 7 days Activity on this number in the last seven days.
32015 seen in the last 15 days Activity on this number in the last 15 days.
32101 seen in the last 1 month Activity on this number in the last month.
32102 seen in the last 2 months Activity on this number in the last two months.
32103 seen in the last 3 months Activity on this number in the last three months.
32203 seen more than 3 months ago No activity on this number in the last three months.

number_type

Reason codes related to the number’s type. These are static attributes rather than measurements of behavior.

Code Name Meaning Risk Signal Trust Signal
40001 premium number This is a premium number.
40002 VOIP number This is a VOIP number.
40003 toll-free number This is a toll-free number.
40004 invalid number This is an invalid number.
40005 payphone number This number is associated with a payphone.
40006 voicemail number This is a voicemail number.
40007 pager number This number is associated with a pager.
40008 high-risk phone type This number has another phone type that is risky, and that is not covered by any of the other number_type reason codes.
40009 high-risk carrier This number is associated with a very risky carrier.
40010 medium-risk carrier This number is associated with a risky carrier.
40011 high-risk prefix This number has a risky prefix.
40012 phone too long This number is invalid because it is too long, even after the application of cleansing rules.
40013 blacklisted number This number has been flagged as a source of fraud. Score always recommends to block this number.
40014 high-risk country The country code of this number is for a risky country, one that originates a disproportionate share of fraud attacks.
40015 technical number This number is used for special technical purposes by telecom companies, such as for roaming.
40016 number used by application TeleSign or BICS reserved this number for use by customers with our applications (for example to send verification messages), but it appears that it is being used for a different purpose.
40017 number whitelisted by customer You have flagged this number as safe. Score always recommends to allow this number.

ip

Reason codes related to activity of the IP address you provided for this number (and its associated geolocation IDs), as compared to a good user.

Code Name Meaning Risk Signal Trust Signal
50001 moderate short-term activity Expected level of activity for this IP address over the last 24 hours.
50002 moderate long-term activity Expected level of activity for this IP address over the past 90 days.
50003 moderate short-term activity on risky services Significant activity for this IP address to or from risky services over the last 24 hours (see risky services above for definition of that term).
50004 moderate long-term activity on risky services Significant activity on this IP address to or from risky services over the last 90 days (see risky services above for definition of that term).
50005 high short-term activity More than expected activity for this IP address over the last 24 hours.
50006 high long-term activity More than expected activity for this IP address over the past 90 days.
50007 high short-term activity on risky services Very significant activity for this IP address to or from risky services over the last 24 hours (see risky services above for definition of that term).
50008 high long-term activity on risky services Very significant activity on this IP address to or from risky services over the last 90 days (see risky services above for definition of that term).
50009 very high short-term activity Very frequent changes of IP address attributes in verification traffic on this number over the past 24 hours.
50010 very high long-term activity Very frequent changes of IP address attributes in verification traffic on this number over the past 90 days.
50011 short-term activity on risky services Changes of IP address attributes in verification traffic on risky services on this number over the past 24 hours.
50012 long-term activity on risky services Changes of IP address attributes in verification traffic on risky services on this number over the past 90 days.
50013 very high short-term activity on risky services Very frequent changes of IP address attributes in verification traffic on risky services on this number over the past 24 hours.
50014 very high long-term activity on risky services Very frequent changes of IP address attributes in verification traffic on risky services on this number over the past 90 days.

email

Reason codes related to activity of the email address you provided for this phone number.

Code Name Meaning Risk Signal Trust Signal
60001 moderate short-term activity Expected level of activity for this email address over the last 24-hours.
60002 moderate long-term activity Expected level of activity for this email address over the past 90 days.
60003 moderate short-term activity on risky services Significant activity for this email address to or from risky services over the last 24 hours (see risky services above for definition of that term).
60004 moderate long-term activity on risky services Significant activity on this email address to or from risky services over the last 90 days (see risky services above for definition of that term).
60005 high short-term activity More than expected activity for this email address over the last 24-hours.
60006 high long-term activity More than expected activity for this email address over the past 90 days.
60007 high short-term activity on risky services Very significant activity for this email address to or from risky services over the last 24 hours (see risky services above for definition of that term).
60008 high long-term activity on risky services Very significant activity on this email address to or from risky services over the last 90 days (see risky services above for definition of that term).
60009 very high short-term activity Very high volume of verification traffic on this email address over the past 24 hours.
60010 very high long-term activity Very high volume of verification traffic on this email address over the past 90 days.