Fraud Score on a US Carrier IP, Explained for Marketers

Somebody on the team pastes a Stateside Proxies line's address into a fraud checker, sees a score of forty and the word proxy, and asks whether the line is bad. It is not, and the checker is not lying either; it is describing something the team did not ask about. This guide explains, without jargon, what those tools measure, why a carrier address shared with thousands of real phones always has a score, what a proxy flag on a mobile address does and does not mean, which fields a marketer should look at instead, and the rare cases where a score genuinely affects verification or research work.

What a fraud checker is

Services such as IPQualityScore, Scamalytics and IPinfo keep a record for every public address and produce a risk number and some labels from three kinds of input: who owns the address and what kind of network it is on, reports of bad behaviour from that address collected from the service's customers, and rules of thumb such as a mismatch between the address's location and a browser's clock. The number predicts how risky the address might be to a merchant. It is about the address, not about you.

Why a carrier address always has some score

US carriers put hundreds or thousands of phones behind each public address at once, a practice called carrier-grade NAT. Everything those subscribers do attaches to the shared address: a disputed payment, a scraper, a burst of sign-ups. By the time a Stateside line receives an address, it has a history written by strangers, and the score reflects that history. The same is true of the phone in any American's pocket. A carrier address with a score of zero would be one nobody uses.

The proxy flag on a mobile address

Some checkers label entire carrier ranges as proxy because mobile proxies are commonly sold on them; others flag any address that has ever appeared in a proxy list. The label next to a cellular address is therefore ordinary and does not mean this line was identified. Platforms almost never act on it, because blocking a carrier address would block the real subscribers behind it. The recent-abuse flag is the one a few sites do act on, and even then the block is on the public address and a rotation moves you to another.

The fields that matter to a marketer

Connection type: cellular or mobile means sites treat the visitor as a phone, which is what verification and research want. Organisation and AS number: the carrier's name confirms the line is what it says. Country and region: the United States and the metro's state. These three answer the only question that matters for verification work: will the sites and platforms I am checking treat this browser as an ordinary American on a phone? Yes.

When a score does affect your work

Rarely, a site with aggressive fraud rules challenges the address with a CAPTCHA or hides an offer. If that happens during a check, rotate once and reload; the new address has a different history. Make sure the browser profile's time zone and language match the metro, since a mismatch is one of the rules of thumb the checkers use. If one metro's gateway stays noisy over many rotations, move the line to another metro for free. We cannot change a third party's score and nobody honest claims to; what the line guarantees is the carrier, the metro and the fact that nobody else uses it.

1. Read connection type, organisation and region first; if they show a US carrier, cellular and the right state, the line is doing its job.
2. Treat a proxy or VPN flag on a cellular address as background noise unless a site is actively challenging you.
3. If a site challenges, rotate once and reload.
4. Confirm the profile's time zone and language match the metro.
5. If one metro stays noisy across many rotations, move the line, free.

What to tell a client who asks

If a client sees a score and asks about it, the plain answer is enough: the number describes a shared phone-network address and the many subscribers behind it, it does not describe your campaign, and the ad platforms you are checking treat the address as mobile inventory. Show them the connection type field and the carrier's name, which are the two facts that matter for the work you are doing together. A sentence or two is usually all it takes.

Frequently asked