Phishing & Spam Scams in New Zealand (2026)
About this article
Sourced from New Zealand Acts of Parliament (legislation.govt.nz), regulations, and official government guidance. Written in plain language for general understanding — this is educational content, not legal advice. Our editorial standards
What is this right?
Phishing — fake texts and emails pretending to be your bank, a courier, a government agency or a well-known company — is designed to steal your logins, card details or money. Unsolicited commercial messages also breach the Unsolicited Electronic Messages Act 2007, which requires consent, a clear sender identity, and a working unsubscribe option.
You can fight back easily: forward scam texts to 7726 (free), which feeds the Department of Internal Affairs' anti-spam work, and report phishing emails to your provider and to CERT NZ. The golden rule is to never click links or enter details from an unexpected message — instead, go to the organisation's website or app directly, or call the official number on the back of your card. If you did enter details, treat it like identity theft: change passwords and contact your bank.
When does it apply?
- You received a suspicious text or email asking for details or payment.
- You're getting unwanted commercial spam.
- You clicked a phishing link or entered details.
What to do about phishing or spam
- Forward scam texts to 7726 and delete them.
- Report phishing emails to your email provider and CERT NZ.
- Go direct to the real website/app or official phone number — never via the message link.
- If you entered details, change passwords and call your bank.
What should you NOT do?
- Don't click links or open attachments in unexpected messages.
- Don't reply or call numbers in the message — use official contacts.
- Don't enter logins or card details from a link you didn't initiate.
About Scams & Fraud Recovery in New Zealand
If you've been scammed in New Zealand, act fast — the first hours matter most. Report fraud to NZ Police (111 emergency / 105 non-emergency and online reporting), contact your bank immediately to try to stop or recover funds, and use Netsafe for online harm. Scams are crimes under the Crimes Act 1961 (obtaining by deception, s 240) and the Fair Trading Act 1986; online harm is covered by the Harmful Digital Communications Act 2015. Investment scams go to the Financial Markets Authority (FMA).
Police: 111 / 105. Netsafe: 0508 638 723. Report spam texts to 7726.
Common Questions
What is the phishing and text/email scams right in New Zealand?
Phishing — fake texts and emails pretending to be your bank, a courier, a government agency or a well-known company — is designed to steal your logins, card details or money. Unsolicited commercial messages also breach the Unsolicited Electronic Messages Act 2007, which requires consent, a clear sender identity, and a working unsubscribe option.You can fight back easily: forward scam texts to 7726 (free), which feeds the Department of Internal Affairs' anti-spam work, and report phishing emails to your provider and to CERT NZ. The golden rule is to never click links or enter details from an...
When does it apply — phishing and text/email scams?
You received a suspicious text or email asking for details or payment.You're getting unwanted commercial spam.You clicked a phishing link or entered details.
How do I report a scam text in New Zealand?
Forward scam texts to 7726 and delete them.Report phishing emails to your email provider and CERT NZ.Go direct to the real website/app or official phone number — never via the message link.If you entered details, change passwords and call your bank.
What should you NOT do — phishing and text/email scams?
Don't click links or open attachments in unexpected messages.Don't reply or call numbers in the message — use official contacts.Don't enter logins or card details from a link you didn't initiate.