New Zealand Scams: Online, Investment & Impersonation Fraud Guide
Common scams in New Zealand and how to report to CERT NZ, Netsafe, and your bank.
Emergency number: 111 — verify on official sources.
Last reviewed: 1 August 2026
New Zealand faces a wide range of scams including investment fraud, online shopping non-delivery, government impersonation, and romance scams. CERT NZ (now part of the National Cyber Security Centre) handles cybersecurity incident reports, while Netsafe is the independent online safety organisation that handles general online scam and harmful content reports. For urgent situations involving financial loss, contacting your bank immediately is the most important first step.
The scams Kiwis actually meet day to day are recognisable variants of global patterns with local branding. Smishing impersonates NZ Post, Waka Kotahi (toll and rego notices), IRD tax refunds, and the major banks; the links harvest card details that fuel a follow-up 'bank fraud team' call. Marketplace fraud runs through Trade Me and Facebook Marketplace — non-delivery, fake escrow, and 'courier collection' excuses — while fake accommodation listings target tourists and seasonal workers, especially around peak season in Queenstown and other visitor centres. The 'Hi Mum' family-impersonation text and calls from fake Spark or Microsoft 'technicians' seeking remote access to your computer also remain reliable earners for offshore call centres.
Investment fraud produces the deepest losses: cold calls and social ads for fake term deposits and bond funds impersonating real NZ and Australian institutions, crypto platforms recommended by online acquaintances (classic pig-butchering), and cloned websites of licensed firms. The Financial Markets Authority maintains a public warnings list that is worth checking before moving any savings. New Zealand banks have also been rolling out confirmation-of-payee name checking, which helps catch mismatched account names — treat any 'name doesn't match' warning as a hard stop. When money has moved, ring your bank at once, then report to CERT NZ or Netsafe and the police via 105.
Common scams
- Investment and crypto scams
- Online shopping non-delivery and marketplace fraud
- Government impersonation (IRD, ACC, NZ Post)
- Romance and relationship scams
Tourist-specific scams
- Overcharging transport and tour operators
- Fake accommodation listings
- Bogus activity and adventure-tour bookings paid by transfer
Online shopping scams
- Phishing and smishing impersonating NZ Post, banks, or IRD
- Fake online retail sites
- Social media marketplace scams
- Remote-access 'technician' calls impersonating telcos and tech firms
Job scams
- Task scams via messaging apps
- Fake job offers requiring upfront fees
- Working-holiday and seasonal-work offers collecting 'visa' or 'accommodation bond' payments
Romance scams
- Dating-app romance leading to cryptocurrency investment grooming
- Long-distance partners with escalating emergencies
- 'Hi Mum' family-impersonation texts asking for urgent transfers
Investment scams
- Fake trading platforms and managed investment schemes
- Crypto 'AI bot' and pig-butchering scams
How to report a scam here
- Contact your bank immediately if money was sent
- Report cybersecurity incidents to CERT NZ at cert.govt.nz
- Report online harm and scam content to Netsafe at netsafe.org.nz
- Report crime to NZ Police on 105 or at police.govt.nz
Local reporting & protection links
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Bank & payment guidance
Contact your bank immediately using the number on your card or their official website - the chance of stopping a payment drops sharply as time passes. Say you were deceived into approving the transfer, ask for it to be stopped or recalled and the receiving account reported, and note the reference number. NZ banks now run confirmation-of-payee name checking on many transfers, so mention if you overrode a name-mismatch warning under pressure — and treat such warnings as a hard stop in future. The IRD and other NZ government agencies will not demand payment by gift card, crypto, or urgent bank transfer, and no telco or software company cold-calls to fix your computer. Check investment firms on the FMA register and warnings list before engaging again, change your online banking details from a clean device if any were shared, and ask about a replacement card if card numbers went into a phishing page.
Evidence to preserve
- Screenshot all messages, profiles, websites and payment pages
- Save transaction references, account numbers and crypto wallet addresses
- Keep emails with full headers where possible
- Note dates, times, names and phone numbers used
Frequently asked questions
Where do I report a scam in New Zealand?
Report cybersecurity incidents to CERT NZ (cert.govt.nz), general online harm to Netsafe (netsafe.org.nz), and crime to NZ Police on 105. Always contact your bank first if money has been sent.
How do I check if an investment is legitimate in New Zealand?
Check the Financial Markets Authority (FMA) register at fma.govt.nz and look for FMA warnings before investing. Registered firms must hold a licence — an unlicensed firm is a major red flag.
Sources
- National police and cybercrime portals (verify on official sites)
- FTC / Action Fraud / Scamwatch consumer guidance