Where to report scams in NZ

If you've received a suspicious email, text or phone call, or worse, you've already responded to one, you're not alone, and it's nothing to be embarrassed about. Scams are designed by professionals to fool smart, busy people.

The next step is to report it. Reporting helps the authorities spot trends, take down scam websites and warn other people. Here's who to contact, and for what.

If you've lost money or shared bank details: act fast

Time matters here. Do these things first:

1. Call your bank straight away. Use the number on the back of your card or on the bank's official website, not one from the message. They may be able to stop or recall a payment.
2. Change your passwords for any account you think is affected, starting with your email and banking. Turn on two-factor authentication wherever it's offered.
3. Report it to the Police (see below).
4. Keep the evidence. Don't delete the emails or messages. Take screenshots and note down dates, amounts and account details.

Who to report to

NZ Police

For any scam where you've lost money, been threatened or had your identity stolen. Call 105 for non-urgent reports. In an emergency, or if someone is in danger, call 111.

Netsafe

Netsafe is the go-to organisation for online scams and online safety. It offers free help and advice, and you can report a scam to them.

• Phone: 0508 638 723
• Text: 4282
• Web: netsafe.org.nz

National Cyber Security Centre (NCSC)

The NCSC, formerly known as CERT NZ, handles cyber security issues such as phishing emails, hacked accounts, malware and scam websites. They collect reports to track what criminals are up to and share warnings with the public. Report online at ncsc.govt.nz.

Department of Internal Affairs (DIA)

The DIA deals with spam, including unwanted emails and texts that break New Zealand's anti-spam law.

• Scam or spam texts: forward them to 7726. It's free.
• Spam emails: report them to the Department of Internal Affairs through its website.

Your bank

If your money or card details are involved, your bank needs to know first. If you receive a phishing email pretending to be your bank, let the bank know too, using the contact details on its official website.

Financial Markets Authority (FMA)

For investment scams, fake trading platforms, crypto "opportunities" and anything promising unusually high returns, contact the Financial Markets Authority.

Domain Name Commission

For problems involving .nz domain names, such as fake domain renewal notices or suspicious domain transfers, contact the Domain Name Commission at dnc.org.nz. It oversees .nz domains in New Zealand.

IDCARE

If you're worried about identity theft, or you simply need support after being scammed, IDCARE offers help and recovery guidance.

Reporting a scam that involves us

If you've received an email, text or call claiming to be from Slightly Different Hosting and you're not sure it's genuine, don't click anything. Forward it to support@slightlydifferent.co.nz and we'll tell you whether it's real, and take action on fake ones.

Our emails and invoices only come from @slightlydifferent.co.nz addresses and our client area at my.slightlydifferent.co.nz. We never ask for your password, full card number or two-factor codes by email, phone or text.

Our guide on how to check an email really came from us explains exactly what to look for.

What to include in your report

Having these details ready makes reporting faster and more useful:

• The email, text or message itself (forward emails as an attachment if you can, so the technical details are kept)
• The sender's email address, phone number or website address
• The date and time you received it
• Any payment details: amounts, account numbers and how you paid
• Screenshots of anything suspicious

What not to do

• Don't reply to the scammer, even to tell them off. It confirms your address or number is active.
• Don't click links or open attachments in suspicious messages.
• Don't pay "fees" to recover money you've lost. That's a common follow-up scam.
• Don't stay quiet out of embarrassment. Reporting quickly gives you the best chance of limiting the damage.

Watch out for "recovery" scams

After you've been scammed, you may be contacted by someone offering to get your money back for a fee. This is almost always a second scam, often run by the same people. Genuine agencies don't charge to help you.

If anyone contacts you out of the blue claiming to be from the Police, your bank or a government agency, hang up and call them back on a number you've looked up yourself.

Check the website, not just the padlock

Many scams send you to a fake website that looks just like the real thing, often complete with a padlock in the address bar. The padlock only means the connection is encrypted, not that the site is genuine. Our article on what an SSL certificate is explains how to check a web address properly.

The short version

• Lost money? Call your bank, then the Police on 105.
• Not sure if something's a scam? Netsafe can help on 0508 638 723.
• Spam text? Forward it free to 7726.
• Dodgy email or website? Report it to the NCSC.
• Involves us? Forward it to support@slightlydifferent.co.nz and we'll check it.

Not sure if something is genuine? Contact us and we'll happily take a look. You can also call our New Zealand team on +64 3 541 9468. No judgement, ever.