Scams are designed to trick us and are becoming increasingly sophisticated and harder to spot. Here’s where to learn more about some of the latest scams that our Customer Protection tīma (team) have detected.

Last updated: 18 June 2024

Investment scams

Investment scams continue to circulate. The Financial Markets Authority have a list of businesses or individuals you should be wary of if you're planning to invest.

Term Deposit rates scam

This particular type of scam has been targeting Kiwibank customers who've been searching for the best Term Deposit rates via search engines. Fraudulent comparison websites, such as and, are set up purely to collect the contact details of people who are interested in making an investment or rolling off an existing Term Deposit soon.

After inputting details into a fraudulent website, the scammer will follow up with a phone call. Because the scammer knows that the person is interested in making an investment, they'll try to convince them their offer is genuine, with the best interest rate in the market. They might reference a genuine Kiwibank staff member's name and potentially send a fake Kiwibank-branded document containing information on Term Deposits.

What to do:
  • We recommend being cautious when you're on websites asking you to provide personal and financial details.
  • If you think you may have entered your contact details on a website offering fake Term Deposits or comparisons of Term Deposit rates, or you're unsure whether you're talking to a scammer, don't engage in conversation over the phone. Hang up and call your bank back using their official number. Never use the contact number or websites they've provided to you.
  • If you’re concerned you might have fallen for this scam or one like it, contact your bank straight away.

Phishing / smishing scams

IR tax refund scam

You may receive a fraudulent text message or email similar to the example below, referring to an incoming tax refund being distributed through Inland Revenue (IR).

IRD scam email
Always check:
  • The email has in fact come from IR, the email address should have '' at the end of the address
  • If it’s a text, it's from a 4-digit code rather than a mobile or overseas phone
  • The message addresses you by your name as IR will always do this
  • The email or text doesn't contain a refund amount
  • The message doesn't contain a link to login into your myIR account.

Read more about tax-related scams on

Kiwibank text scam

The most common type of phishing scam is usually in the form of a text. The text will look like it's from a reputable company or contact and generally includes a fraudulent link.

The example below shows a text that looks like it's from Kiwibank, and following the link may lead to a website that looks like a legitimate Kiwibank website. However, the website is fake and once you enter your internet banking details, these will be stolen by the scammers.

Phishing scam text message

Please remember we'll never text you from an 021 number and we'll never send you a link to unlock your account.

NZ Post scam

Scammers are using channels such as Facebook Marketplace where they act as keen buyers. They'll send a fake NZ Post screenshot claiming they've organised their own postage, and will follow up with a link asking for your bank details. This link can come via Facebook Messenger, WhatsApp, email or text message.

This link will ask you for your bank login details so the payment can be transferred. This is a common way for the scammers to steal your bank details.

Never disclose your internet banking password or click on a link to log into internet banking within a text or email.

What to do

  • If you receive a text message that you think could be a scam, forward the text to 7726.
  • Forward suspicious emails to then delete it.
  • You can also call us on 0800 113 355, or send us a secure message within internet banking or the mobile app.

Scam calls

We’re still seeing a lot of phone scams targeting customers, claiming to be from Kiwibank. These calls can come from 0800, local or overseas numbers and ask you for your banking login details, passwords or two factor authentication codes. We’ll never ask for your passwords, PIN numbers, or credit card expiry dates/CVV information over the phone. We’ll always verify your identity in other ways to ensure your personal information and accounts are kept safe.

If you're ever unsure about a call to you directly, ask for a name or reference number and call us back on 0800 113 355 (or +64 4 473 1133 from overseas).

Google ad scams

We've seen an increase in customers clicking on fake Kiwibank Google sponsored ads and being directed to a page that looks like a Kiwibank webpage, but isn't.

These sorts of ads have been appearing when 'Kiwibank login' or 'Kiwibank app' are being searched, and they look very convincing.

Make sure you check the following before clicking through:

Internet banking login

These fraudulent sites can appear to have the same look and feel as our official internet banking website.

Internet banking scams url

The most secure way to log into internet banking is via our website, Our site contains verified internet banking links, but you can easily find the internet banking login button at the top right-side in our navigation menu.

Downloading the mobile app

It's best to avoid downloading our mobile app outside of an official app store due to the risk of clicking on a fraudulent link. You can download our mobile app through the official App Store or Google Play.

Mobile app scam

What to do if you've been scammed

Anyone can fall for a scam. If you suspect that you've been scammed, get in touch with us as soon as possible.

Get in touch

Call us on 0800 113 355 (or +64 4 473 1133 from overseas) if you think you've been scammed.

Report suspicious activity

If you think you’ve been sent an email that doesn’t look like it’s from us, forward it to

Helpful resources