Runs in the browser
No local install, Python environment or session cookies to manage. You search from the website and read a results page per identifier.
Epieos OSINT Tool Review: Email and Phone Lookups, Pricing and Limits
The Epieos OSINT tool is a web-based reverse lookup service: you enter an email address or a phone number and it reports which online accounts and public profile data appear to be linked to it. This review explains what it checks, what the plans cost and where its results stop being evidence.
- Email and phone reverse lookup
- Free tier plus a paid plan in euros
- Hosted in France, business customers only
- Results are leads, not identification
Short answer
Epieos is a browser-based OSINT tool for reverse email and phone lookups that checks modules such as Google, Skype, LinkedIn and an email checker covering more than 200 sites. It suits investigators, fraud and security analysts who need fast leads. A free member tier exists; the Osinter plan costs €29.99 per month for 30 full-access requests; enterprise pricing is on request.
What the Epieos OSINT Tool Does
Epieos takes an email address or phone number and returns accounts, profile details and related public content it finds for that identifier, such as Google reviews.
The vendor describes Epieos as a search engine for email and phone reverse lookups that can uncover social media profiles and "find related google reviews", and says it shows "only real-time results from social networks" (Epieos). Each search runs live against a list of services (modules), not a stored people database.
Two vendor statements matter for investigators. First, Epieos says it only implements techniques "that do not send a notification to the target", so a lookup is not supposed to trigger a password-reset email or alert. Second, it says it does not save requests or results, so you must keep your own records (Epieos terms).
Epieos is one of several email-focused tools in our OSINT tools catalog. The open-source projects Holehe and GHunt cover parts of the same ground from the command line.
Key Features of Epieos
Four things define it: a web interface with no installation, live module checks, email and phone input, and an API on the custom plan.
Email and phone
Both identifiers are supported. The paid module list includes a phone checker alongside the email modules.
Modules, not a database
Each module queries one service. The full list on the pricing page runs from Google and LinkedIn to fitness, chess and note-taking apps.
API and private modules
API access, higher request limits and private modules are listed only on the custom plan, which has no public price.
Epieos Modules and Data Coverage
The pricing page lists 25 modules for paid users; the free tier is limited to Google, the email checker and Skype.
According to the pricing page, "all modules" on the paid plan means: Google, Email Checker (more than 200 sites), Skype, LinkedIn, Nike Run Club, Fitbit, GitHub, Duolingo, Asics Runkeeper, Adidas Runtastic, Strava, Vivino, Facebook, Proton Mail, Phone Checker, Etsy, Have I Been Pwned, Dropbox, Foursquare, Flickr, Chess.com, Substack, Trello, Notion and Gravatar.
Fitness, hobby and productivity apps are where people often reuse a personal email and leave a display name or photo. Google results can include public reviews, which sometimes show places a person has visited. The Have I Been Pwned module shows breach exposure, not what was leaked.
Epieos does not claim to search court records, company registries or data brokers, and it cannot see private content. Coverage shifts whenever a platform changes how it answers lookups.
Epieos Pricing and Plans
Three tiers: a free member plan, Osinter at €29.99 per month for 30 full-access requests, and a custom enterprise plan priced on request.
| Plan | Price (checked 10 October 2026) | What is included |
|---|---|---|
| Member | €0 per month | Google, Email Checker and Skype modules; clickable links; eased captcha; heavy watermark on results |
| Osinter | €29.99 per month | All modules including LinkedIn; 30 full-access requests per month; lightest captcha; light watermark |
| Custom | Not published | Increased request limits, API access, private modules, additional credits |
Source: Epieos pricing. A yearly billing toggle is shown, but no yearly price was listed when checked. The page does not state VAT treatment.
The terms add that subscription fees are not refunded, including when you cancel mid-month, and unused monthly credits do not roll over (Epieos terms). Thirty full requests a month suits case work, not bulk screening.
Who Epieos Suits and Who It Does Not
It suits professionals who need quick, low-noise leads on an email or phone number. It does not suit consumers, bulk screening without the API, or anyone who needs a court-ready attribution.
Good fit: fraud analysts triaging a suspicious sender, security teams checking a staff address's exposure, and investigators who want a first map of accounts.
Poor fit: private individuals. The terms limit the platform to business customers acting in their trade, business or profession, and exclude consumers and minors. It is also a poor fit for anyone wanting to identify an ex-partner or an anonymous critic: the terms prohibit use contrary to applicable law, with cyber-harassment named as an example, and make the client "solely responsible" for how displayed information is used (Epieos terms).
The vendor says the platform is hosted in Europe (Epieos about); the terms specify France, French law and the Paris Commercial Court.
Limitations and Legal Risks of Email OSINT
A linked account shows that an identifier was used to register somewhere, not who controls it today. Every lookup on a person is also processing of personal data under GDPR.
- Registration is not identity. Many services never verify the email used to sign up, and phone numbers are recycled. A hit is a lead to corroborate, not proof of who owns the address.
- "No false positives" is a vendor claim. Epieos makes it on its home page. Treat it as a statement about how modules are built, and still confirm each result against an independent source.
- Accuracy is not guaranteed. The terms say Epieos does not verify displayed information.
- Public is not unregulated. Twelve data protection authorities stated in 2023 that publicly accessible personal information is still subject to data protection and privacy laws in most jurisdictions (joint statement on data scraping). Under the GDPR you need a lawful basis, usually legitimate interest with a documented balancing test (EDPB guidance), and you may owe the person transparency under Article 14 unless an exemption applies.
Epieos Alternatives for Email and Phone OSINT
Holehe and GHunt are free command-line options for parts of the same job; OSINT Industries is a commercial lookup platform; Have I Been Pwned covers breach exposure only.
Holehe
Python tool that checks whether an email is registered on more than 120 sites. Free, but you run it yourself and its last PyPI release dates from 2022.
Holehe review →GHunt
Command-line framework for Google accounts. Free, but it needs a logged-in Google session, which carries account and terms risk.
GHunt review →OSINT Industries
Paid email, phone and username lookup platform aimed at investigators and law enforcement.
OSINT Industries review →Have I Been Pwned
Shows which known breaches an address appeared in. It answers exposure questions, not who uses an address.
Need the Answer, Not the Tool?
If a decision depends on who is behind an email or phone number, an analyst-led investigation turns lookups into graded, sourced findings.
A lookup tool gives you a list of accounts. A payment decision or a legal letter needs to know which accounts belong to the same person and how confident each link is. Our email address investigations and phone number investigations combine tool output with headers, domain records and manual verification, and every report is reviewed by a senior analyst before delivery. If the question is your own or your executives' exposure, a personal digital footprint check is the better fit.
Focused cases start from 10 business days, small checks are sometimes done in one business day, and every job has a fixed quote after written scoping. See the full range of OSINT services for fraud, legal and security teams.
Have an Email Address That Needs Explaining?
Tell us what the address or number is linked to and what decision depends on it. We confirm a lawful purpose, then send a fixed quote and a delivery date.
Epieos OSINT Tool FAQ
I keep seeing the Epieos OSINT tool recommended for email lookups — what does it actually show for an address, and do I need the paid plan to get useful results?
The Epieos OSINT tool shows which services an email or phone number appears to be registered with and any public profile data those services return, such as a Google profile or reviews. The free member tier covers only Google, the email checker and Skype, with a heavy watermark. The Osinter plan at €29.99 per month unlocks all 25 listed modules, including LinkedIn, for 30 full requests a month.
We're a small compliance team that wants to check a counterparty's email and phone number — is it legal for us to run them through Epieos under GDPR?
It can be, if you have a lawful basis and keep the check proportionate. Most teams rely on legitimate interest, documented with a balancing test that explains why the lookup is needed and why less intrusive steps are not enough. Record what you searched and why, keep only relevant results, and check whether you must inform the person.
If I search someone's email address on Epieos, will that person get a password reset email or any notification that I looked them up?
Epieos says it only uses techniques that do not send a notification to the target, and that it does not save your requests or results. That is the vendor's statement; platforms change how they respond to lookups, so no third party can guarantee it for every module at all times. If silence matters to an investigation, discuss the method with your counsel and keep the number of lookups to what you need.
I'm a freelance researcher rather than a company — can I sign up for Epieos as an individual, and what happens to my searches after I run them?
Epieos's terms limit the platform to business customers acting in their trade, business or profession and exclude consumers and minors, so a freelancer using it professionally appears to fall within scope, while personal use does not. The vendor says it does not log requests or results. That protects your queries but means you must save and date your own results if you need them later.
Epieos returned a Google account and a few app profiles for an email address in our fraud case — can we treat that as proof of who is behind the address?
No. It shows the address was used to register those accounts, which is a strong lead but not identification. Emails are often unverified at sign-up, shared, or reused by fraudsters. Corroborate with independent sources such as profile photos, usernames reused elsewhere, domain records and the money trail, and grade each link by confidence before anyone acts on it.
Our legal team wants a written report on who controls an email address rather than a tool subscription — when does it make sense to hire an OSINT provider instead of buying Epieos?
Hire a provider when the result has to support a decision or a legal step: a payment recall, a dismissal, a demand letter or a court filing. You get sourced findings graded by confidence and captured evidence. A subscription makes sense when your own team runs frequent first-pass checks and can verify results.
Sources and Notes
- Epieos: home page
- Epieos: pricing
- Epieos: terms and conditions
- Epieos: about us
- Joint statement on data scraping and the protection of privacy (August 2023)
- EDPB Guidelines 1/2024 on legitimate interest (summary)
- GDPR Article 14
Sources checked 10 October 2026. Figures about third-party firms and tools are as published by them or by the cited source on that date.