Changelog

• ImprovedSemakMule and Caller ID checks now load independently — your Caller ID result appears right away instead of waiting for the SemakMule check to finish.
• ImprovedWhen a number can't be identified straight away, you now get a clear message instead of an endless loading spinner.
• FixWhen SemakMule (PDRM) is temporarily having issues, the page now shows a simple, friendly message instead of a confusing technical error.

• ImprovedPenipuMY now runs with an automatic backup server. If the main server ever has a problem, the site switches over on its own and stays online.

• ImprovedOur status page (status.penipu.my) now shows the main and backup server health separately, so you can see exactly what's affected at a glance.

• ImprovedThe website safety scanner is far more accurate. Legitimate pages — wedding invitations, YouTube links, business and local sites — are no longer wrongly flagged as dangerous.
• ImprovedEvery scan gets a smarter AI review that reads the actual page, clears out false alarms, and gives a clear, plain-language verdict on whether a site is safe.
• ImprovedFor social media links (YouTube, Facebook, Instagram, TikTok), the scanner confirms the link really goes to that platform — while reminding you the specific video, post or account behind it still can't be guaranteed.
• FixFixed false "impersonation" alerts caused when a real bank name or account number simply appeared on a page (like a wedding gift account).
• FixFixed a false "blocked by antivirus" warning that showed on normal, working sites.
• FixFixed scans that mistook part of a web address for a brand name.

• ImprovedTapping your phone number now shows the number linked to your account with an option to change it, instead of starting verification over again.
• FixThe "Verify your email" prompt now opens the verification screen when you tap it.

• FixSigning in with Google no longer asks you to verify an email address Google has already confirmed.

• Improved1300 and 1800 toll-free numbers are now identified correctly during calls.

• ImprovedReports you submit from the app now show the same "awaiting review" status you see on the web.

• NewLook up the official contact numbers for banks, telcos, PDRM and GOVs agency. Over 3,200 verified numbers in one place.
• NewEvery listing shows the real branches, opening hours and contact numbers, so you can check a call against the source.

• NewOfficial police, government and business numbers now carry a verified badge, making a genuine number easy to recognise at a glance.

• ImprovedMalaysian 1300 and 1800 toll-free numbers are now recognised properly, so calls from real hotlines are identified instead of showing as unknown.

• ImprovedNewly submitted reports now clearly show as awaiting review, so you always know where your report stands.

• NewSee the app in action right from the homepage, with a direct link to download it.

• FixBusiness profile logos now display correctly across the site.

• FixPRO members: ads no longer appear on the caller ID overlay - your PRO status now applies the moment you open the app.

• NewAdvance notice and a live countdown during scheduled maintenance, so you always know what's happening and when we'll be back.

• ImprovedCaller ID and business directory updates now sync faster and use less data.

• NewYou'll now see advance notice before any planned maintenance, so downtime never catches you off guard.

• ImprovedServer migration to a more isolated setup for better safety and uptime.
• ImprovedDisposable email detection auto-enriched to block throwaway signups.
• SecurityAccount ban now ends every active session instantly.
• ImprovedAutomatic protection that ramps up during traffic spikes to keep the site stable.

• FixVisual polish across various pages.

• Web messaging retired in favour of the mobile app for a more private chat experience.

• ImprovedChanging your email now requires your current password — quick extra step that blocks attackers who only have your session.
• NewEmail changes now wait 24 hours before taking effect. You'll get a heads-up at your old inbox with a one-click cancel button if it wasn't you.
• NewCancelling a suspicious email change instantly logs the intruder out everywhere — no login needed from you.
• ImprovedReserved usernames like "admin", "PenipuMY", and bank names can no longer be taken, keeping impersonators away.
• SecurityPatched a stored XSS vector on profile social links.
• FixRemoved unnecessary server version info from HTTP responses.

• NewRead our latest articles on scams and share them straight to WhatsApp, Telegram, Threads, X, or Facebook.

• ImprovedGet notified the moment our team reviews your scanned URL with an official verdict.

• ImprovedProfile page asset scan is now lightning fast — all linked assets checked in parallel (was up to 20s for big profiles, now 2–3s)

• ImprovedSearch caller ID lookups now smarter — low-confidence cached names automatically retry for a better match
• ImprovedMore accurate fraud detection

• ImprovedCaller ID badges now correctly flag POTENTIAL FRAUD for all sources
• ImprovedRisk levels on search results are clearer
• ImprovedFree users now get faster (with limit) caller ID live API lookups
• ImprovedSmarter caching — low-confidence names automatically retry to find a better match
• ImprovedMore accurate spam vs fraud detection

• ImprovedCaller ID overlay color palette unified across compact and expanded views

• FixSearch result no longer shows "0 reports · View Reports" when only Caller ID flagged a number — clean banner shown instead, with the warning kept on the inline Caller ID card

• ImprovedRemoved legacy Android storage permissions
• ImprovedNetwork graph library locked to verified version with integrity hash

• NewGetContact added as a fallback source — more names matched when Truecaller has none
• ImprovedTruecaller live API upgraded — faster lookups
• ImprovedBetter spam-type detection across multiple sources

• ImprovedAPI tier cards redesigned — cleaner buttons, uniform sizing
• ImprovedAPI Keys section consolidated into a single card

• ImprovedHardened PayPal subscription verification
• FixReplay-proof quota top-up callbacks

• NewURL Analyzer — paste any suspicious link (or scan a QR code) to check for phishing & scams
• NewSupport tickets — submit and track help requests with the new "My Tickets" menu
• NewCaller ID overlay now shows international "+" prefix and country name

• ImprovedCaller ID for incoming calls still gives police-report verdict
• ImprovedScannable QR code on shared scam cards
• ImprovedNotification icon now uses PenipuMY logo

• FixPRO users were still seeing ad banners
• FixPenipu Alert showed inconsistent label between notification & overlay
• Fix"Show overlay for contacts" toggle now persists after app restart

• ImprovedShare card now generates as image (phone, bank, profile, report)
• ImprovedOverlay action buttons now uniform muted grey

• NewToggle to disable overlay for contacts (Protection Settings)

• FixBlock / Unblock now works correctly
• FixContact overlay auto-dismisses after 3 seconds
• ImprovedView button only shows when number has a profile in database
• ImprovedView navigates to search results; Report opens scam alert modal

• Forced transitive Play Billing Library dependencies to v7.1.1

• NewRedesigned caller ID overlay — cleaner, more compact design
• NewSmart overlay: minimal card during calls, full details after call ends
• NewImproved icon system for better clarity
• NewContact calls now auto-dismiss overlay

• FixUpdated Google Play Billing Library to v7
• FixPerformance and stability improvements

• NewTargeted broadcast with recipient filters
• NewEmail delivery channel with standardized branded template

• NewNew tiers: Starter (RM29/mo), Business (RM199/mo), Enterprise (RM999/mo)
• Free tier adjusted to 100 requests/day (effective 1 May 2026)
• Grace period for existing users until 1 May 2026

• NewAPI subscription payments via PayPal (auto-renews monthly)
• Starter, Business, and Enterprise tiers available
• Cancel anytime from PayPal dashboard

• New/api/v1/phone Quick phone number lookup (police reports, spam/fraud flags)

• SecurityAPI input validation hardening
• SecurityAPI error responses no longer leak HTML templates
• SecuritySubscription expiry daemon auto-reverts expired plans hourly

• NewPublic changelog page at /changelog

• ImprovedThreats Identified now reflects real flagged numbers, bank accounts, and social profiles across our database, not just internal record counts.

• FixA placeholder entry that shouldn't have been public no longer appears in the rankings.

• FixFixed the mobile menu showing white text on a white background, making it unreadable on some devices.

• NewAdded a section on API usage for developers building on top of PenipuMY, clarifying free vs. paid tier use for commercial products.

• FixThe all-time visitor count is now visible in the footer.

• NewBNM Financial Consumer Alert — search now shows a clear BNM Alert card for companies flagged by Bank Negara

• ImprovedFaster page loads across the site — search, report pages, and admin views now snap instead of crawl
• ImprovedImage URL upload now shows a loading spinner so you know it is working