Latest scams

If you think you may have been scammed, call us immediately on 0800 735 901 (international +64 4 473 5901).

This is not a full list of current scams. Scams are increasingly clever and changing all the time. Check the Financial Markets Authority website for investment scam warnings at fma.govt.nz

Some customers are receiving an email or text message claiming to be from BNZ. It tells the customer they’ve been credited with a cashback to their account and to ‘Check Now’ in their online banking. 

How it works 

The scammers ask the customer to:

• log in to their online banking using a link in the email or text message 
• verify themselves using their access number and email address, banking log in details, or other private information. 

If this happens to you, please forward a copy of the email or text message to phishing@bnz.co.nz

What to remember 

• Never click on a login or access link in an email or text message. BNZ will never send you an email or text with a link asking you to log in. 
• Carefully read any emails and texts you receive and check the sender’s email address to verify the legitimacy of the email.
• Never provide your personal banking information to anyone. This includes your password, two-factor authentication codes, or credit card details. If BNZ contacts you, we’ll have the information we need to identify you, and you shouldn’t need to provide these details. 
• If you’re a BNZ customer who’s received an email like this, or have provided your personal banking information, call us immediately on 0800 735 901 (international +64 4 473 5901).
• Visit our recognising scams page to learn about common types of scams and how to spot them.

Some customers are receiving WhatsApp messages from people pretending to be friends or family members, asking for an urgent bill payment or money transfer.   

How it works 

The scammers:

• claim to be friends or family members
• make contact through an unknown number 
• claim their phone isn’t available and they need to use a temporary number
• claim they can’t be contacted via other platforms
• ask for bank account login or credit card details, or for the customer to pay the bill direct
• insist the payment needs to be made urgently. 

What to remember 

• Always check the request is legitimate. Contact the family member or friend via another method, such as their usual phone number or through their social media account.
• If you’re a BNZ customer who has received a call like this and provided your personal banking information, call us immediately on 0800 735 901 (international +64 4 473 5901). 
• Never provide your personal banking information to anyone. This includes your access number, password, or credit card details.  
• Visit our recognising scams page to learn about common types of scams and how to spot them. 

Some customers are receiving calls from an automated service claiming to be from BNZ. This is known as a ‘robocall’, a call with a pre-recorded message.

How it works

The scammers:

• claim there’s been an unusual transaction on the customer’s account, or there’s been a new device added to their account
• direct the customer to a person claiming to work for BNZ’s Anti-Fraud Squad, or similar
• ask the customer to verify themselves using their access number and email address, or other private information including verification codes
• request a password reset to gain access to a customer’s account. 

What to remember

• If you’re a BNZ customer who has received a call like this and provided your personal banking information, call us immediately on 0800 735 901 (international +64 4 473 5901).
• Never provide your personal banking information to anyone. This includes your access number, password, or credit card details.
• Never provide your two-factor authentication codes to anyone including BNZ staff. They add another layer of security to your banking. Scammers can use these details for password resets and setting up a new device on your Internet Banking profile.
• Visit our recognising scams page to learn about common types of scams and how to spot them.

Some customers are receiving calls from scammers pretending to be from BNZ. If this happens to you, end the call immediately and use the phone numbers on our website, or the back of your card, to contact us directly.

How it works

The scammers can:

• claim there’s been an attempted charge on the customer’s account (for example, an accommodation website), or that there’s been a new device added to a customer’s account
• ask the customer to verify themselves using their access number and email address
• attempt a password reset to gain access to a customer’s account.

What to remember

• Never share your password reset codes with anyone. Only enter these codes in your Internet Banking if you requested them.
• If you’re a BNZ customer who has received a call like this and provided your personal banking information, call us immediately on 0800 735 901 (international +64 4 473 5901).
• Visit our recognising scams page to learn about common types of scams and how to spot them.

Some customers have received calls from scammers pretending to be BNZ. If you receive a call from us, don’t share any personal or financial information such as your access number or password.

End the call immediately and use the phone numbers on our website, or the back of your card, to contact us directly.

What to remember

• If you’re a BNZ customer who has received a call like this and provided your personal banking information, call us immediately on 0800 735 901 (international +64 4 473 5901).
• Visit our recognising scams page to learn about common types of scams and how to spot them.

There’s been an increase in scams where scammers are impersonating New Zealand Police officers. The scammers phone customers and ask them for their personal banking details, or to withdraw money from a bank or ATM. They may provide fake identification and pretend they’re investigating fraud.

If you receive a similar call unexpectedly, hang up and call the Police on their non-emergency number, 105. Then, request the Police officer to contact you. For more information, visit the New Zealand Police website.

What to remember

• Police will never call you asking for your personal banking details, pin numbers or passwords, or ask you to visit a bank and withdraw money.
• If you’re a BNZ customer who has received a call like this and provided your personal banking information, call us immediately on 0800 735 901 (international +64 4 473 5901).
• Visit our recognising scams page to learn about common types of scams and how to spot them.

Some customers are receiving emails claiming to be from PayPal, showing a fake payment confirmation for a cryptocurrency purchase. This is a scam.

The email isn’t sent from a real PayPal email address and says their account will be debited within 24 hours. The customer is told that if they want to reverse the transaction or claim a return, to get in touch using the customer support number provided. This number connects them to someone impersonating a PayPal employee.

How it works

The customer is instructed to do the following:

• download remote access software that allows the scammer remote access to their device(s)
• log in to their online banking using the same device that has remote access
• share their two-factor authentication codes for Internet Banking
• transfer funds to third-party accounts in New Zealand or overseas.

If you receive any similar emails claiming to be from PayPal, do not call the phone number in the email or click any links. Delete the email immediately. If you’ve replied or called the number in the email, do not follow any of their instructions. This is one example of an impersonation scam, there may be others where the phone number, email address or the payment mentioned is different.

What to remember

• Be careful when anyone contacts you with unusual or urgent requests.
• Check the sender’s email address to verify the legitimacy of the email.
• If you receive any unexpected emails or messages, never click on any links, or download attachments.
• Never take instructions from a third-party person to download remote access software and allow them access to your device(s).
• Never provide your personal banking information to anyone, such as your access number, password, or credit card details.
• Never provide your two-factor authentication codes to anyone. They add another layer of security to your banking. Scammers can use these for password resets and setting up a new device on your Internet Banking profile.
• If you’re ever asked for your login details or two-factor authentication codes over the phone, hang up immediately.

If you think you’ve been the victim of a scam, please call us immediately on 0800 735 901 (international +64 4 473 5901).

We’re aware of an investment scam circulating on social media channels of a fake New Zealand Herald story claiming BNZ is suing Mike Hosking for providing “too good investment advice”.

The fake story then directs readers to an investment firm (the name changes but the current one is LPL Investments) to complete a Trading Account form or to download an .exe file which downloads remote access software on the customer’s computer. To encourage customers to download this ‘remote access software’ they are offered assistance in filling out the Trading Account form.

This is a scam.

By downloading the .exe file, the scammers will have full access to everything on the computer and can monitor the use of the computer. When the customer next logs into internet banking, the scammer will have full access to bank accounts.

Customers are being provided “proof” that the scam is legitimate including Wikipedia pages of similar named legitimate companies and the Companies Office UK website. This is part of the scam.

What to remember

• Before investing any money, ensure you exercise caution and do your research.
• Contact the investment firms via their official New Zealand-based websites.
• Never contact investment firms through online contacts, emails, links or phone numbers sent to you directly, or found on other websites on the internet.
• Ensure the investment firm is licensed by the FMA before moving any funds.

If you’ve had someone contact you about an investment opportunity and you believe it may be an investment scam, you can report it to questions@fma.govt.nz.

If you’re a BNZ customer and believe you have invested in an investment scam, contact us urgently on 0800 735 901.

There has been an increase in scam emails claiming to be from Inland Revenue (IRD) that promise a refund.

How it works

The emails originate from an unofficial email address, and contain a link directing customers to a fraudulent IRD website, which then leads them to a fake BNZ login page.

What to remember

• Always log in to Internet Banking through BNZ’s website or the BNZ app, never from links in text messages or emails.
• IRD will never ask you to provide your banking login credentials.
• If in doubt, contact IRD via the details on its official website.
• If you’re a BNZ customer who has received an email like this, or have provided your personal banking information, call us immediately on 0800 735 901 (international +64 4 473 5901).
• Visit our recognising scams page to learn about common types of scams and how to spot them.