Changelog

    All updates, new features, and bug fixes at a glance.

    v4.8.02026-10-22

    ✨ Features

    • • New: Brand Shield for companies. Add the domains you own and daily scans surface lookalike domains and cloned pages, with the evidence behind each finding.
    • • The company dashboard has been rebuilt: Overview, Brand Shield, Cases, Intelligence, Investigations, Developers and Settings. Older links redirect to the right place automatically.
    • • Company cases now follow one clear path: Accepted, then In progress, then Resolved – taken down or Resolved – no threat. You get an email at every step.
    • • The 14-day company demo is now available on request: tell us about your company and our team reviews every request. No credit card is required.
    • • New: developer documentation at /developers, covering the quick start, authentication, access tiers and limits, webhooks, the Company API and the Threat API.
    • • New: the Fraudpol threat database is available through an API. Check single domains or a list, download the active feeds and keep a local copy in sync. Create a key in the Threat API section of your dashboard.
    • • Domain owners can now request a human review of a threat database listing with supporting evidence at /threat-api/review.
    • • Company accounts can connect webhooks for report status changes, completed takedowns and new Brand Shield findings, and export activity to SIEM tools.
    • • Invite teammates to your company account with a link; they join the moment the invite is opened.
    • • Emails from us now come from fraudpol.com addresses.
    • • Website reports now ask what happened and what you lost, so the case file carries the impact and not only the address.
    • • Evidence screenshots are captured live at the moment of review, never served from a cache, and carry the capture time.
    • • New: free scam check on the homepage, the threats overview and every threat page. Enter a website and see right away whether it is in the Fraudpol threat database.
    • • Pricing now shows clear plan cards with direct checkout.
    • • Company dashboard: OSINT, the AI assistant, the war room and intel drops now have their own Investigations section. Honeypots and the trust badge have their own tabs in Brand Shield.
    • • Company accounts can now receive a daily, weekly or monthly email digest of their cases and findings, or turn it off.
    • • Brand Shield scans now show only real results, with no simulated scan lines.
    • • Replies from hosting providers and registrars are now recorded on the case automatically.
    • • A site is only marked as taken down after it has been confirmed offline in two separate checks.
    • • New: free scam check on the homepage, the threats overview and every threat page. Enter a website and see right away whether it is in the Fraudpol threat database.
    • • Pricing now shows clear plan cards with direct checkout.
    • • Company dashboard: OSINT, the AI assistant, the war room and intel drops now have their own Investigations section. Honeypots and the trust badge have their own tabs in Brand Shield.
    • • Company accounts can now receive a daily, weekly or monthly email digest of their cases and findings, or turn it off.
    • • Brand Shield scans now show only real results, with no simulated scan lines.
    • • Replies from hosting providers and registrars are now recorded on the case automatically.
    • • A site is only marked as taken down after it has been confirmed offline in two separate checks.

    🐛 Bug Fixes

    • • Team seats in the company dashboard now show the number your plan actually includes.
    • • Security hardening for accounts, emails and the staff area.
    • • The team invite page showed search engines a copy of the homepage instead of its own content. Fixed.
    • • Evidence screenshots could come from a cache and show an older version of a page. Captures are now always live.
    • • Reports now move to Forwarded automatically as soon as the abuse notice to the provider has been sent.
    • • Registrar names were sometimes shown as a web address. Fixed.
    • • Provider grades are only shown once enough cases exist; otherwise the scorecard shows a dash instead of a misleading grade.
    • • Several free tools (abuse contact lookup, site status, domain scan, report status) showed unclear errors. They now show the actual reason.
    • • The contact page now shows our email addresses to visitors who are not signed in.
    • • Report links now lead to the company report form whenever your plan includes it.
    • • Reports now move to Forwarded automatically as soon as the abuse notice to the provider has been sent.
    • • Registrar names were sometimes shown as a web address. Fixed.
    • • Provider grades are only shown once enough cases exist.
    • • Several free tools showed unclear errors. They now show the actual reason.
    • • The contact page now shows our email addresses to visitors who are not signed in.
    v4.4.02026-10-08

    ✨ Features

    • • The threats overview and the community page now link every published case, so each case is one click away.
    • • Published Marked entries can now be found through search engines.

    🐛 Bug Fixes

    • • IP lookups in the OSINT workspace failed for everyone. Fixed.
    • • Some OSINT lookups showed "daily lookup limit reached" although no limit had been reached. The message now only appears for a real limit.
    v4.3.02026-09-30

    ✨ Features

    • • New: Marked, a public register of scam campaigns at /marked. It lists the websites, profiles, phone numbers and wallets used in a campaign, never real names or faces. Every entry has a correction link, and entries that are not re-verified within 180 days are removed automatically.
    • • The Security page now has a credits section that thanks researchers who report issues to us responsibly.
    • • OSINT workspace: case details and element details now open in one docked side panel that you can resize, instead of two panels that covered each other.
    • • OSINT workspace: a new Team tab shows who is working on a board, with comments and the history of each element.

    🐛 Bug Fixes

    • • Changing your password now signs you out on every other device.
    • • Two people editing the same OSINT board no longer overwrite each other's work. A conflict is shown instead.
    • • Elements locked by a teammate on an OSINT board can no longer be dragged.
    v4.7.02026-10-19

    ✨ Features

    • • Results page: confirmed takedowns and the median time to takedown now appear directly on the page instead of loading afterwards.
    • • Evidence capture: once a report is accepted, the reported page is saved automatically together with a SHA-256 fingerprint, including sites hidden behind the browser checks of free hosting services.
    • • Abuse notices to registrars and hosting providers now describe what the reported site does and carry the evidence fingerprint.
    • • Notices to registrars and hosting providers are only sent after a Fraudpol team member has confirmed the abuse.
    • • Community report pages now show the date the report was filed.

    🐛 Bug Fixes

    • • Threat pages repeated the word "confirmed" in the headline and showed the verdict as the abuse type. Fixed.
    • • Breadcrumb links on threat and community pages pointed to pages that do not exist. Fixed.
    • • Search result descriptions of several guides were cut off. They are now shorter and complete.
    v4.6.02026-10-14

    ✨ Features

    • • New: the Fraudpol Blog at /blog. Every article is written from a real case in our records, for example how long a reported site stayed online and how the provider responded. Also available as an RSS feed.
    • • All former addresses (blackwall.report, blackwallreport.com, fraudpol.org) now redirect permanently to the same page on fraudpol.com.
    • • Search engines now recognise fraudpol.com and our official social profiles as one organisation.

    🐛 Bug Fixes

    • • Some pages, including the form for reporting an individual or group, showed search engines a copy of the homepage instead of their own content. Fixed.
    v4.5.02026-10-12

    ✨ Features

    • • Sign in with Google now shows Fraudpol's own name on Google's sign-in screen.
    • • A heart button in the header now leads straight to the Support page.
    • • Our official YouTube, Instagram and TikTok profiles are now linked in the footer.
    v4.2.02026-09-22

    ✨ Features

    • • New: Report an Individual or Group. Signed-in users can now report the person or group behind an online scam, together with evidence such as profile links, usernames, wallet addresses, phone numbers and screenshots.
    • • Every individual or group report is reviewed by hand. Accepted cases are investigated by our team, reported to the platforms involved and, where the facts support it, referred to the competent authorities. Cases are never published, we never charge victims, and we do not recover money.
    • • Evidence you upload is fingerprinted with a SHA-256 checksum, so its integrity can be shown later.
    • • New homepage opening: the first screen now shows only what matters, with a scroll hint, and the report buttons are arranged in two clear rows.
    • • New guides: reporting a scam to the police and to the FBI (IC3), reporting a phone number or email address used in a scam, reporting scams on Facebook, WhatsApp, TikTok, PayPal, Telegram and Instagram, crypto and romance scams, what to do right after being scammed, and how to spot fake fund-recovery services.
    • • OSINT investigations are now one click away from your dashboard and the company dashboard. Hunter, Starter, Pro and Enterprise plans open them directly; on the free plan you can see what is included.
    • • Simpler report status page: one clear status and a short explanation of what it means.
    • • Community feed choice in the report form is now a clear switch on the contact step, on by default, and shown again on the review page before you submit. You can still change it later from your dashboard.

    🐛 Bug Fixes

    • • Some recent reports were unintentionally kept out of the community feed because the opt-out box sat between the required confirmation boxes. The choice is now a separate switch.
    • • Domain scan report emails now list lookalike domains in a safe, non-clickable format.
    • • Demo and partner request forms now include a security check against automated spam.
    • • Security hardening for accounts, emails and investigation boards.
    v4.1.02026-09-21

    ✨ Features

    • • The Fraudpol seal now sits above the homepage headline, in sharp vector quality on every screen.
    • • Custom ranks are now shown on your public profile, and the rank preview uses your username.
    • • Supporter achievements are now awarded automatically after every contribution, and everyone who supported us earlier has received theirs.
    • • Abuse reports we send to hosting providers and registrars now carry your evidence files as real email attachments, so providers can act without extra steps.
    • • The Fraudpol icon now shows correctly in browser tabs, bookmarks and next to our pages in search results.
    • • Clearer description of the free domain scan: it checks public certificate records, DNS and mail records, and whether a website actually answers.

    🐛 Bug Fixes

    • • The security check could fail on fraudpol.com, which blocked reports, scans and sign-ups for some visitors. Fixed.
    • • Changing your username sometimes did not save or needed a second click. Fixed.
    • • The company name link in the footer now opens our legal page on fraudpol.com.
    v4.0.02026-09-20

    ✨ Features

    • • We are now Fraudpol. Blackwall.report has become fraudpol.com - same team, same platform, shorter name. All old links keep working and forward automatically to the new address.
    • • New look for the Fraudpol mark in browser tabs, bookmarks and on your home screen.
    • • Company plans are now available directly: Starter at 99 USD per month for small teams, Pro at 269 USD per month, and Enterprise on request. No more waiting list.
    • • New Hunter plan at 14.99 USD per month for individual researchers: OSINT lookups, Intel Drops, investigation boards, a personal watchlist and the full community.
    • • Achievements for supporters and subscribers: every contribution and every plan now earns a badge that shows on your profile, including long-term badges for staying with us.
    • • Transparency numbers on the homepage: how many cases we confirmed, how many we neutralized, and how long it actually took - with an open explanation of how we measure it and which cases we leave out.
    • • Four new in-depth guides: what phishing is, what vishing is, what spear phishing and whaling are, and a step-by-step walkthrough for reporting phishing in Outlook.
    • • New guide for reporting fake Dropbox share links and Dropbox phishing emails.
    • • Clearer terms: a plain-language refund rule, a proper right of withdrawal for consumers, and cancellation without logging in.
    • • Faster page loads: fonts are now served directly from our own servers instead of a third party, which also means fewer requests leave your browser.

    🐛 Bug Fixes

    • • Keyboard navigation: the focus outline was invisible on some buttons against the dark background and is now clearly visible everywhere.
    • • Added a skip-to-content link so keyboard and screen-reader users can jump past the navigation.
    • • Decorative icons are no longer read out by screen readers as unnamed graphics.
    • • Page titles fixed: the newsroom and the support page carried wrong or duplicated titles.
    • • The customers page no longer suggests case studies that do not exist yet.
    • • Pricing wording corrected: the refund period now matches our terms everywhere, and we no longer compare ourselves to other vendors' feature sets.
    v3.3.02026-09-18

    ✨ Features

    • • Community case summaries: every public report now gets an easy-to-read AI-written case summary, automatically screened for personal data before publication
    • • Domains and links in the community are shown in a safe, non-clickable format (e.g. evil-shop[.]com) so you can read about threats without accidentally visiting them
    • • New privacy choices when submitting a report: opt out of having your description used in the public case summary, or keep your report out of the community feed entirely
    • • Registered users can change both sharing options per report at any time from the dashboard
    • • Warnings in the report form now flag if you accidentally paste an email address, phone number or card number into a description field
    • • Analyst case notes: our team can publish additional context and updates directly on a public case page
    • • Guest menu in the header: report, community, pricing and more are now reachable without signing in

    🐛 Bug Fixes

    • • Community feed was showing empty for logged-out visitors - fixed
    • • Smoother, faster dashboard and admin experience: removed heavy visual effects that caused low frame rates
    v3.2.02026-09-18

    ✨ Features

    • • Newsroom launched at /press with in-depth articles on phishing protection, threat intelligence, incident response and our company launch
    • • Partners page at /partners where organisations can apply to partner with us
    • • Community hub is now public: forum threads, replies, weekly challenges and the leaderboard can be browsed without an account
    • • Guest menu in the header gives quick access to Report, Community, Pricing, Back the Wall and Contact from any device
    • • Latest updates section added to the homepage so you always see what is new

    🐛 Bug Fixes

    • • Community reports and comments no longer appear empty for signed-out or standard users
    v3.0.02026-09-05

    ✨ Features

    • • Report status page now shows a full timeline of what happens to your report after submission
    • • Duplicate protection: if a site is already being handled, you immediately see that a case exists instead of filing again
    • • Community invitation during reporting with an overview of forum access, achievements, OSINT boards and company protection

    🐛 Bug Fixes

    • • Reports with valid links but little or no description are no longer rejected automatically
    • • Solved reports are now correctly counted as neutralized threats everywhere
    v3.1.02026-09-12

    ✨ Features

    • • Free domain impersonation scan on the homepage and at /scan: check whether lookalike domains of your brand exist
    • • Scan results now show real registered lookalike domains found in public certificate records, not just guesses
    • • Each result shows whether the site is actually online, so offline domains are no longer flagged as high risk
    • • Public results page at /results with real neutralization statistics and case studies

    🐛 Bug Fixes

    • • Scanned domains are masked in public views to avoid spreading malicious links