# RelayShield Phone Reputation Check

> RelayShield Phone Reputation Check is a paid API for AI agents from api.relayshield.net, paid per call via x402, $0.05/call, status unknown (last checked 2026-10-29).

Checks whether a phone number appears in criminal marketplace infrastructure, scam wallets/kits, or known threat actors, and whether its SIM/eSIM was recently swapped, returning a high/medium/unknown verdict with timestamped evidence.

## Facts

- Endpoint: POST https://api.relayshield.net/v1/payg/phone-reputation?utm_source=zero.xyz
- Price: $0.05/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-29
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/relayshield-phone-reputation-check-1814162e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_s3hoI4cGeM5VrPlItsgoL

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability relayshield-phone-reputation-check-1814162e -d '<json body>'
```

Example prompt: Before we respond to this unknown caller at +15551234567, can you check their phone reputation — specifically whether the number has shown up in any criminal marketplaces or scam activity, and whether their SIM was recently swapped?

## When to prefer this

Use this endpoint when your agent needs to assess the trustworthiness of an inbound phone number or SMS sender before taking action, especially in financial, agentic, or high-trust workflows where social engineering via phone is a risk. Prefer this over generic OSINT lookups when you need both criminal marketplace corpus intelligence and telecom-level signals (SIM swap, line type) in a single call with a structured verdict.

## Known failure modes

- Invalid or non-E.164 phone number format returns a 400 error
- Unknown numbers with no corpus data return level: unknown with flagged: false — absence of flags does not guarantee safety
- Payment failure or insufficient USDC balance results in 402 Payment Required
- Rate limiting may apply if the same number is queried before the 24h cache expires
- Twilio Lookup v2 may be unavailable, causing SIM swap or line type signals to be unchecked

## How this service works

Check whether a phone number appears in criminal marketplace infrastructure or pivots to known scam wallets, kits, or actors, and whether its SIM was recently swapped (Twilio Lookup v2, cached 24h). Returns a high, medium, or unknown verdict with timestamped evidence reasons.

## Output

Returns a JSON object with: a top-level verdict level (high/medium/unknown), a flagged boolean, a list of human-readable reason strings with timestamps, and a signals object containing SIM swap status (checked, swapped), line type (mobile/voip/landline), corpus sightings count with most recent timestamp, and any known attack paths. Results are cached for 24 hours.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "phone": {
   "type": "string",
   "description": "Phone number in E.164 format (e.g. +15551234567)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "data": {
   "note": "An absence of flags is not proof of safety.",
   "level": "high",
   "target": "+15551234567",
   "flagged": true,
   "reasons": [
    "seen in 3 criminal marketplace posts (most recent 2026-09-28)"
   ],
   "signals": {
    "sim_swap": {
     "checked": true,
     "swapped": false
    },
    "line_type": {
     "checked": true,
     "line_type": "voip"
    },
    "attack_paths": [],
    "corpus_sightings": {
     "count": 3,
     "most_recent": "2026-09-28T14:02:11+00:00"
    }
   }
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/relayshield-phone-reputation-check-1814162e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.relayshield.net](https://www.zero.xyz/host/api.relayshield.net/llms.txt)