Phishing emails are designed to steal personal information including bank details or personal information. Criminals continue to target brands that people know, use and trust and have become quite sophisticated. People could easily fall for this scam if they do not make the appropriate checks before acting on an email.
What is a phishing email?
A phishing email is designed to ‘hook and reel’ you in with the target being your account credentials for one of many popular online services or your internet banking details.
Bank phishing requests often want you to login to unlock your suspended account or to confirm your security settings. Take the bait and you’re on the hook for your personal information, hard saved cash or other digital assets – such as scans of your driving licence or passport – that can be traded online.
How can I protect myself?
Always check the email address of the sender and avoid clicking on any links in the body of suspicious messages. Scammers steal bank logos to set up websites that are close to the real URLs. Always type out the full bank website address when you bank online and avoid transacting over free Wi-Fi connections.
Putting in place some basic online security controls will help you too:
- Run an up to date anti-virus package
- Update your operating system and all software and helper apps such as Adobe Flash Player and Oracle Java
- Check you’re using the latest and safest version of your favourite web browser
- Back up your important data regularly and store these copies safely, possibly encrypted in the cloud.
Where can I report phishing emails?
We have listed the email addresses for popular brands often targeted by phishing campaigns. You can forward suspicious emails to the company directly so they are aware of new phishing campaigns and can work to protect their customers.
- ANZ: firstname.lastname@example.org | Read their security advice
- Apple: email@example.com | Read their Apple ID security advice
- ASB: firstname.lastname@example.org | Read their security advice
- BNZ: mailto:email@example.com | Read their security advice
- IRD: firstname.lastname@example.org | Read their security advice
- Kiwibank: email@example.com | Read their security advice
- PayPal: firstname.lastname@example.org | Read their security advice
- TradeMe: email@example.com | Read their security advice
- TSB: firstname.lastname@example.org | Read their security advice
- Westpac: email@example.com | Read their security advice
What happens if I gave out my account login information?
If you believe you have given out your online banking login to a third party by mistake, call your bank immediately.