Online scams are now a near-daily reality for most people. With 82% of adults encountering scam attempts every week, the question is no longer whether you'll be targeted — it's whether you'll recognise it in time.
Here is a practical, actionable guide to protecting yourself from the most common scam types.
1. Phishing and Smishing (Fake Emails and Texts)
Phishing emails and smishing texts impersonate trusted organisations — your bank, NZ Post, IRD, or a major retailer — to trick you into clicking a link and entering your credentials.
Protection steps: - Never click links in unexpected emails or texts. Go directly to the organisation's website by typing the address yourself. - Banks, IRD, and NZ Post will never ask for your password, full card number, or PIN via email or text. - Check the sender's email address carefully — fraudsters use lookalike addresses. - Report suspicious texts to your carrier by forwarding to 7726 (SPAM).
2. Investment Scams
Investment scams are the most financially devastating, with average losses of $20,000+ per victim. Fake cryptocurrency platforms, clone broker firms, and "guaranteed return" opportunities are the most common forms.
Protection steps: - Always verify that a financial adviser or firm is registered on the FMA's Financial Service Providers Register (fspr.govt.nz). - Check the FMA's warning list for known scam operations (fma.govt.nz/consumers/scams/). - Be extremely wary of guaranteed high returns — legitimate investments carry risk. - Never invest based on an unsolicited contact or recommendation from someone you met only online.
3. Romance and Relationship Scams
Romance scams — also called "pig butchering" when combined with investment fraud — involve criminals building a relationship over weeks or months before requesting money or encouraging "investment."
Protection steps: - Be very cautious of online-only relationships where the other person always has an excuse not to meet in person or video call. - Never send money to someone you've only met online, regardless of how well you feel you know them. - Use Google Reverse Image Search to check if profile photos are stolen from elsewhere. - Talk to a trusted friend or family member if you're considering sending money to someone you've met online.
4. IRD and Government Impersonation
Criminals impersonate IRD, NZ Police, or government agencies to frighten people into paying fake debts or providing personal information.
Protection steps: - IRD will never demand immediate payment by gift card, cryptocurrency, or wire transfer. - If you receive an unexpected call from any government agency, hang up and call the official number you find on their website. - Genuine government agencies give you time to verify their identity.
5. What to Do If You've Been Scammed
Act immediately: 1. Contact your bank right away — they may be able to recall the payment. 2. Report to Netsafe (0508 638 723 or netsafe.org.nz) for online scams. 3. Report to NZ Police (105) if money was stolen. 4. Report investment scams to the FMA (0800 434 566). 5. Contact IDCARE (0800 432 273) if personal information was compromised.
Time is critical — the faster you act, the better your chances of recovery.