Age, domain, breaches, and throwaway or relay addresses.
Know every customer.
Fraud verdicts from email, phone, address and IP signals, on any payment or customer in your Stripe Dashboard. Tuned for your business, with each check explained in plain English.
Coming soon 1,000 free credits
Jordan Vale jordan.vale@quickdropmail.net
$2,650.00The goods are going to a private mailbox in another state, so nothing can be verified at the doorstep.
Next step
Hold the order and ask for a residential delivery address.
Signals
3 clean4 worth a look5 risk3 no signal
+6 more categories
Why Clue
Catch it before it ships, not after the chargeback.
-
Stop fraud before it ships
A verdict on every order before you fulfil it.
-
Fewer disputes
Hold the risky ones. Good customers never notice.
-
Decide in seconds
Every reason in plain English, tuned to what you sell.
01 The signals
The signals behind every verdict.
Outside records on the buyer, plus everything your own Stripe account already knows. Every check runs on every payment your data supports.
80+signals in every check
Phone
Carrier, line type, and whether the account name matches.
Address and deed
A real home or a mailbox store, and who is on the deed.
Public records
Whether name, phone and address agree.
IP and network
VPN, proxy, Tor or data center, and distance from billing.
Payment history
Disputes, early fraud warnings, refunds and Radar scores.
Linked customers
Others on your account sharing a card, phone, email or ZIP.
Why it was blocked
The Radar rule or bank decline, in plain English.
Optional · one line
Pass the buyer’s IP for network signals.
Clue works with no code. Add client_ip to the PaymentIntent metadata and it also checks
for VPNs, proxies, Tor and data centers.
await stripe.paymentIntents.create({
amount: 265000, currency: 'usd',
metadata: { client_ip: req.ip },
});IP section Datacenter VPN · tunnel Amsterdam, NL vs Austin, TX Looked up by client_ip
02 Use cases
What you see, and what you do next.
High risk
Ship-to is a mail drop
Fictional buyer · Jordan Vale
USPS flags the ship-to as a mailbox store in Miami, while billing is in Columbus, Ohio. Public records have no one on file for the buyer. The email was first seen three weeks ago, and the phone is VoIP with no caller-ID name.
- You decide
- Hold and confirm the buyer another way, or ship only to the billing address.
- What it saves
- A shipment to an address that forwards packages to someone else.
Jordan Vale jordan.vale@quickdropmail.net
$2,650.00The goods are going to a private mailbox in another state, so nothing can be verified at the doorstep.
- Ship-to is a mail-receiving agency
- Billing in Ohio, ship-to in Florida
- Email first seen a few weeks ago
- Phone is an internet (VoIP) line
Next step
Explain this verdictHold the order and ask for a residential delivery address.
Signals
3 clean4 worth a look5 risk3 no signal
- Email
First seen 23 days ago · no public profile
Worth a look - Phone
VoIP line · no caller-ID name
Risk - Person
No one on file for this buyer
No record - Addresses
Ship-to is a mailbox store (PMB) in Miami, FL
Risk - Network
Mobile IP in Florida · 203.0.113.88
Worth a look - History
New customer · first payment
No signal
Verify before shipping
Recently breached
Fictional buyer · Priya Anand
Have I Been Pwned lists the email in a 2019 breach and one from this month. Every identity check agrees, but property records show the unit is rented, so nothing confirms who lives at the delivery address. That sets the verdict, not the breach. A breach is not fraud by itself.
- You decide
- Confirm the customer another way before shipping.
- What it saves
- A wrongly declined genuine customer, or a shipment to someone using her account.
Priya Anand priya.anand@leakybox.io
$960.00The identity checks agree, but nothing confirms who lives at this rented delivery address.
- Email appeared in a breach this month
- Rental address: ownership cannot confirm the buyer
- Name matches caller-ID and carrier account
- Email in use since about 2014
- Connection is home broadband in Denver
Next step
Explain this verdictConfirm the order through a previously known-good channel.
Signals
8 clean3 worth a look0 risk2 no signal
- Email
2 breaches · 2019–26 · in use since 2014
Worth a look - Phone
Mobile · carrier name matches
Clean - Person
Name, phone and address agree
Clean - Addresses
Rented unit · company-owned building
Worth a look - Network
Home broadband · Denver, CO
Clean
Looks legitimate
Real internet history
Fictional buyer · Harold Kessling
A $12,400 first order from a new customer. The email was first seen 16 years ago, has had a public profile since 2009 and appears in three old breaches from 2012 to 2019, which reads as long real use. The buyer co-owns the delivery home.
- You decide
- Approve it.
- What it saves
- A false hold on a good new customer.
Harold Kessling hkessling@oldtimermail.com
$12,400.00A large first order, but this buyer owns the delivery home and the email has years of real history.
- On the deed of the ship-to home since 1998
- Email observable since 2010
- Carrier account name matches the buyer
- Phone and address agree
Next step
Explain this verdictShip as normal.
Signals
11 clean1 worth a look0 risk2 no signal
- Email
First seen 16 years ago · 3 old breaches
Clean - Phone
Mobile · carrier name matches
Clean - Addresses
Co-owner on the deed since 1998
Clean - History
New customer · large first order
Worth a look
High risk
Hiding behind a VPN
Fictional buyer · Kevin Marsh
The IP is a data center VPN exit in Amsterdam while billing is in Austin. The phone is VoIP, caller-ID names someone else and the carrier reports no match on the name. The email was first seen four days ago. A VPN alone is not fraud; the verdict comes from everything else disagreeing.
- You decide
- Cancel or refund before anything ships.
- What it saves
- The goods, and the dispute that follows.
Kevin Marsh kevin.marsh@maxfraud.net
$3,180.00Independent sources contradict the claimed identity, and the checkout hid behind a VPN abroad.
- Caller-ID and carrier name differ from the buyer
- Datacenter VPN exit in the Netherlands
- Email first seen days ago
- Card issued outside the billing country
Next step
Explain this verdictDo not ship; refund or request verification.
Signals
2 clean3 worth a look7 risk2 no signal
- Email
First seen 4 days ago
Risk - Phone
VoIP · caller-ID names someone else
Risk - Person
No one on file for this buyer
No record - Addresses
Rental · owner lives elsewhere
Worth a look - Card
Issued in the UK · billing in Texas
Worth a look - Network
Datacenter VPN exit · Amsterdam, NL
Risk
Looks legitimate
Back under a new email
A new customer on an email you have not seen, but the card and phone match an existing customer with three paid orders and no disputes. Clue lists the link and the history behind it, and the other customer opens in one click.
- You decide
- Treat it as a returning buyer.
- What it saves
- A hold on a customer who has paid you before.
Maya Okafor maya.okafor@newleafmail.net
$1,420.00A new account, but the same card and phone already have a clean paid history here, and the buyer owns the delivery home.
- Email is new to this merchant
- Card and phone match an existing customer with paid orders
- Owns and lives at the ship-to home
- Carrier account name matches the buyer
Next step
Explain this verdictShip as normal; consider merging the two customer records.
Signals
10 clean1 worth a look0 risk2 no signal
- Shared
Card and phone match mokafor@lookslegitmail.com · 3 paid orders
Clean - Email
First seen 7 months ago · new to you
Worth a look - Phone
Mobile · carrier name matches
Clean - Addresses
Owner-occupier · Minneapolis, MN
Clean - History
Linked customer: 3 paid · 0 disputes
Clean
Looks legitimate
Same household
A different name and card, but the same phone and billing ZIP as another customer, and both adults are on the deed of the delivery home. Clue shows the link as context, not as a fraud flag.
- You decide
- Read it as a household and judge the order on its own checks.
Nadia Ferreira nadia.ferreira@samehouse.net
$880.00The phone and ZIP link to another customer at the same home, and public record puts both of them on its deed.
- Phone is shared with another customer at the same address
- Co-owner of the ship-to home
- Email in use for about 9 years
- Connection is home broadband in Madison
Next step
Explain this verdictShip as normal.
Signals
9 clean2 worth a look0 risk2 no signal
- Shared
Phone and ZIP match tom.lindqvist@samehouse.net
Worth a look - Addresses
Both customers on the deed · Madison, WI
Clean - Phone
Household landline · address matches
Worth a look - Email
First seen 9 years ago
Clean - Network
Home broadband · Madison, WI
Clean
Looks legitimate
Everything checks out
Fictional buyer · Dana Whitlock
The name agrees with public records, caller-ID and the carrier account. The phone is a mobile line. Billing and shipping are the same USPS-confirmed home, and the buyer is on the deed and has lived there since 2014. The email was first seen 12 years ago.
- You decide
- Ship now.
- What it saves
- Review time on an order that never needed one.
Dana Whitlock dana.whitlock@lookslegitmail.com
$1,840.00Every independent check agrees, and public record puts this buyer on the deed of the delivery address.
- Owns and lives at the ship-to home
- Carrier account name matches the buyer
- Email in use for about 12 years
- Connection is home broadband near billing
Next step
Explain this verdictShip as normal.
Signals
12 clean0 worth a look0 risk2 no signal
- Email
First seen 12 years ago · profile since 2013
Clean - Phone
Mobile · carrier name matches
Clean - Person
Name, phone and address agree
Clean - Addresses
Owner-occupier since 2014 · residential
Clean - Network
Home broadband · Portland, OR
Clean - History
New customer · first payment
No signal
03 Pricing
1,000 free credits. Then plans from $25 a month.
No card to start. Every check shows what it used, and reopening a buyer within 24 hours is free.
Coming soon
Free $0 1,000 credits to start
Starter $25/mo 1,000 credits a month
Growth $99/mo 5,000 credits a month
Scale $249/mo 15,000 credits a month
Boost · any plan $30 for 1,000 credits that never expire.
Plan details04 Security and privacy
Read-only, by design. Clear about what we store.
Read-only. Clue never changes anything in your Stripe account.
Nothing on your checkout. No script, no SDK, no buyer tracking. Clue starts from the payment details already in Stripe.
AI writes, rules decide. Fixed rules set the verdict. The model never sees raw emails, phone numbers or IPs.
Encrypted, in the US. Stored on AWS in the US, encrypted in transit and at rest.
Your history, deleted on uninstall. Installing copies up to 12 months of payments. The payment history copy is deleted within 30 days.
Not a consumer report. For orders you’re about to ship, refund or approve. Never for credit, jobs, housing or insurance.
05 FAQ
Questions
What is Clue?
Clue is a Stripe app that gives a fraud verdict on any payment or customer in your Dashboard. It checks the buyer’s email, phone, addresses and IP against outside records, adds your own Stripe history, and shows one verdict with every check behind it.
How is Clue different from Stripe Radar?
Radar scores the card and the transaction. Clue checks the person behind it: email and domain age, breaches, the phone carrier and line, whether the addresses are real homes and whether the buyer is on the deed, and the IP. They work together, and Clue shows Radar’s scores in the customer’s history.
Does Clue work without Radar, or on Radar Lite?
Yes. Clue’s checks run on the details of the payment and your own Stripe history, so you do not need a particular Radar plan. Where Stripe has scored a payment, Clue shows the score alongside the rest.
What does Clue check?
Every open runs 80+ signals across email (age, domain age, breaches, disposable domains), phone (carrier, line type, name match, caller-ID), addresses (USPS delivery, mailbox stores, vacant, property and deed records), a public-record identity match, IP (VPN, proxy, Tor, location), and your own Stripe history and linked customers. Each result shows the type of source it came from.
Does AI decide the verdict?
No. Fixed rules set the label. AI helps choose which signals matter for your business and writes a one-sentence summary. It never picks the label, and a dispute or early fraud warning can never be tuned away.
Does Clue contact my customers or change anything in my Stripe account?
No. Clue asks your customers for nothing and never contacts them, so they do not know a check ran. It is read-only and never writes to your Stripe account.
Is there a free trial?
You start with 1,000 free credits, once per Stripe account, the first time Clue is used in live mode. No card is needed. Free credits have no cash value and can be withdrawn if they are abused.
What happens to my data if I uninstall Clue?
Uninstall from the Stripe Dashboard. Stored lookups, your business profile and stored IP observations are deleted straight away, and syncing stops. The payment history copy is deleted within 30 days. We keep usage, verdict and billing records, which hold Stripe ids but no buyer contact details, and your credit balance, so a reinstall picks up where you left off.
Which countries does Clue work in?
Payments and customers from any Stripe account can be opened. USPS, property and deed checks cover US addresses only. Other checks depend on the details on the payment.
Can I use Clue for credit, employment, housing or insurance decisions?
No. Clue checks the details on a payment you are about to ship, refund or approve. It is not a consumer report and must not be used for those decisions.
Check the next order before it ships.
Coming soon 1,000 free credits
