The Tornevall Networks Fraud Blacklist (FraudBL) is a specialized blocklist (blacklist) focused on listing IP addresses associated with sending fraudulent or phishing emails intended to cause financial harm to the recipient.
The Tornevall Networks Fraud Blacklist (FraudBL) is an open-source DNS blacklist (DNSBL) that specifically targets servers involved in fraudulent activities. It is a specialized part of the more general dnsbl.tornevall.org, which handles a broader range of abuse like spam and proxies.
The primary policy of this blocklist is to list IP addresses of servers known for sending emails that could cause financial loss to the recipient. This includes phishing attempts and other fraudulent communications that often impersonate banks or other trusted institutions. While the main Tornevall blacklist (or blocklist) targets regular spam, FraudBL focuses exclusively on fraud.
Technically, the blacklist operates on the DNS zone bl.fraudbl.org. It also integrates with the main dnsbl.tornevall.org; hosts considered fraudulent are given an additional TXT record to signify their status. The system is used by network administrators and email providers who want to apply a stricter filter against financially motivated malicious emails.
The blacklist is operated by Tornevall Networks, a company based in Sweden. To ensure high availability and capacity for their DNS services, they utilize secondary DNS hosting through Linode. The project is community-driven in that it relies on reports from users. To contribute, users can forward fraudulent emails, including the full headers, to spam@fraudbl.org. The team primarily analyzes the "Received" headers to identify and block the source mail servers, not just the sender's email address.
If your IP address is on this blacklist, you can request removal through their official delisting process. Before you submit a request, make sure you have resolved the underlying issue that caused the listing, such as securing a compromised server or stopping a malicious email campaign.
You can request to be delisted by using the Tornevall Networks removal form. Keep the following points in mind during the process:
The impact of being on the Tornevall Networks Fraud Blacklist (FraudBL) is generally considered low. Its specialized nature means it is not as widely used as some of the larger, more general-purpose blacklists. However, for senders whose emails are being delivered to networks that do use this blocklist, the impact can be significant.
A listing on FraudBL indicates that your server is associated with phishing or financial fraud. This is a serious allegation that can cause receiving mail servers to reject your emails outright or deliver them directly to the spam folder. It can damage your sending reputation and the trustworthiness of your domain.
19 resources
Is the Invaluement blacklist still relevant for email deliverability?
Do blacklists exist for newly registered domain names?
Should I use blacklist or blocklist in email marketing?
Besides Spamhaus, what blocklists are important for email marketers to monitor?
What are examples of insignificant or ineffective email blocklists?
What is the current status and relevance of the NJABL email blacklist?