Online scams

We've all heard about online scams and it's true that these can be dangerous. Here are some common scams to be aware of, and some ways you can keep yourself safe.

Unsolicited phone calls

Be wary if you get a call from someone claiming to be from your bank, credit card provider, or a general 'tech support' company. They might claim they're calling because there have been suspicious transactions on your card or bank account or that your computer has been hacked or infected with a virus or malware.

They'll try and get you to disclose personal information such as your login details or password. They might also try to convince you to install software that allows them remote access to your computer. Don't tell them anything and don't give them access to your computer.

Steps you can take

  • Never share your passwords or logins with anyone, even if they claim to be from your bank or another trusted organisation.
  • If you think the person might legitimately be from your bank or another company you deal with, get their name and call the company back on their official support number, which you should be able to find on their website or in the phone book.
  • Contact us on 0800 113 355 to let us know the phone number that's been calling you and we can get the number blocked for you.
  • Never let someone talk you into giving them remote access to your computer. They could be installing dodgy software that will enable them access to all of your personal and financial information.
  • If you think you're talking to a scammer, politely say no to whatever they're asking you to do and hang up. Don't be tempted to get into an argument or try and trick them, as they may then put you on a 'harass list' and you'll find yourself fielding endless nuisance calls.
  • Record the time of the call and the phone number. If you receive multiple calls from the same number you may be able to report them to your phone provider as a nuisance caller. You can also report them at netsafe.org.nz/report.
If you've shared personal information
  • Change your passwords.
  • Read the Identity Theft Checklist for a helpful guide on what could happen with your personal information if you've shared it with a scammer.
  • If you think you've been exposed to identity theft, contact iDCare for free help and support.
If you've given someone remote access to your computer
  • Disconnect your device from the internet at your wifi router and turn it off immediately. This will stop the scammers from having remote access to your device. If you're not sure how to do this call a trusted friend or family member to help.
  • Change all your passwords using a different device, so the scammers can’t use your account. This includes passwords for your banking, social networking, email and trading accounts like TradeMe as well as other accounts like TAB. Learn how to choose a strong password.
  • Run a full security scan. If the scammers had access to your device, they may have installed malware on it. Malware is a piece of software that can be put on to a device to damage, harm or gain unauthorised access to a computer system. If you think there may be malware on your device, talk to an IT specialist who can confirm if there is and get rid of it for you. You can use a free online virus-scanner to look for threats on your computers. If you have a PC try ESET online scanner or Kaspersky Virus Removal Tool. Once you've run one of those scans, run Malwarebytes Anti-Malware free edition. If you have a Mac, use Bitdefender Antivirus for Mac or ESET Cyber Security for Mac or AVG Antivirus for Mac.
  • If you use online banking, contact your bank to let them know you’ve been targeted. Keep an eye on your accounts and check statements for rogue purchases.
  • If you’re worried that something may have been loaded onto your device, then disconnectrom the internet and do not log back on until you have had your hard drive re-formatted and your operating system re-installed. You may need to seek the advice of a computer specialist to do this – remember to backup any essential files before doing this.

Internet dating scams

Online dating scammers may approach you in a number of ways – chat rooms, social networking sites, unsolicited emails or dating websites – all the same ways that genuine lonely hearts will approach you.

They'll build up a relationship of trust with you, then eventually ask for some type of financial help. Usually, they'll ask you to send money to pay for airfares for them to visit you or to help them out of a sticky situation while they’re travelling. They can also send you a fraudulent international cheque and ask you to cash it and send the money back to them. If you do this and the cheque dishonours, you'll be liable to pay for it.

Steps you can take

  • Use extreme caution when asked to send money to someone you've met over the internet.
  • Be wary if they only give you a post office address and a phone number which they never answer and doesn't have voicemail.
  • Look for discrepancies with the information they're telling you.

Investment scams

This can also often take the form of a cold call. A scammer claiming to be a stock broker or portfolio manager calls and offers financial or investment advice. They claim the investment opportunity they're offering, which is usually in overseas companies, is low-risk, but offers fast and high returns. These scams are often sophisticated to the point they'll have created fake websites and other material to back up their claims. They'll be persistent and may keep calling you back.

NOTE: It’s illegal to sell financial products through a cold call in New Zealand. If you’re contacted in this way, it’s likely to be a scam.

Another investing scam is when you're contacted by email or a message in a forum encourage you to buy shares in a company the scammer is predicting will increase in value. They'll stress the need to act quickly or miss out and the message will seem like an inside tip. The scammer is trying to boost the price of share, so they can sell shares they already own and make a big profit. The share price will then go down dramatically, leaving you with shares that are virtually worthless.

Steps you can take

  • Politely say 'no thanks' and hang up the phone - they're likely to be persistent, so you may need to do this a few times.
  • It might be tempting to engage them in conversation to try and 'trick' them or argue with them - don't do this as they may put you on a 'harass' list.
  • If you're unsure whether you're talking to a scammer or a legitimate organsation, hang up and call the organisation using their official helpline number. Don't use contact number provided by them, or on websites or material they direct you to.
  • If you're still unsure, get in touch with us on 0800 113 355 and we'll help you work if the contact is legitimate.

Altered invoice scams

This is a tricky one, as it usually an invoice or request for payment that you were expecting and the invoice appears to come from the business that it’s supposed to. The only visible difference is the bank account number on the invoice that has been altered or a follow up email is sent with a request to change the account number.

Scammers can access to a business’ email account and they’ll read the emails for a couple of weeks to see when large payments are due. The scammer then sends an email from the business’ email address asking the customer to pay into a different bank account as they have recently changed banks.

Steps you can take

  • Call the business that sent the invoice on their official phone number. Use the number saved in your phone or on their official site (not the number listed on the invoice) to check that it is a legitimate invoice and that the bank account number on the invoice is correct.
  • Always confirm if goods or services have been requested and received by others in your business or household before paying an invoice.
  • Limit the number of people in your business who are authorised to make orders or pay invoices.
  • Immediately cut contact with the scammers.