COVID-19 vaccine scams

Scammers will use any opportunity to try to trick and manipulate people into giving out their personal or financial details, especially through email and SMS scams. CERT NZ is working to put a stop to COVID-19 vaccine scam campaigns and ensure the safe roll out of the COVID-19 vaccine.

Remember, the COVID-19 vaccine is free. At no point will you be asked to pay for the vaccine, or pay for your place in the queue. If you are, it’s likely a scam. The best way you can help us stop these scams is report them to us.

Report it

Help us stop these campaigns. If you have experience or are aware of a COVID-19 vaccine related scam, please email us with all the details you have through the link below.

If possible,  for email scams:

  • Forward the original email, including any attachments (screenshots are not very helpful – but fine if that is all that is possible). This will allow us to investigate any hyperlinks etc.
  • Include any further details you’re aware of regarding the scam.

Once you have done this, you can block the sender and delete the email from your system. We will come back to you with further advice.

For phone scams please include:

  • the telephone number the call came from (if possible)
  • the telephone number of the person who received the call (this will be treated in confidence)
  • the date and time of the call
  • a brief explanation of what the caller said

Report it

By emailing us this information, you consent to us sharing it with our partner and other government agencies for investigatory and statistical purposes. Your personal information will never be shared publically.

For more information on collection and use of personal information, see our privacy and information statement.

Privacy and Information statement

Be aware

One of the best ways to put a stop to scammers is to be aware of the current scams out there.

See our list of COVID-19 scams and help better protect yourself and your loved ones.

COVID-19 vaccine-related scams affecting New Zealanders

Follow us on social media for the latest updates.

Facebook External Link

Twitter External Link

Protect yourself

Although you can’t prevent an email scam (phishing attack), there are things you can do to make sure you recognise one.

  • Know what to look for in a scam email. You might notice that:
    • you don’t recognise the sender
    • the sender name doesn’t sound quite right
    • you don’t recognise the name of the company
    • the company logo doesn’t look like it should
    • the email refers to you in a generic or odd way — for example, 'Dear You…'
    • the email contains bad grammar or spelling
    • if you hover over a link in the email with your mouse, the address that you see doesn’t match the place it’s saying it’ll take you.
  • Don’t click on web links sent by someone you don’t know, or that seem out of character for someone you do know. If you’re not sure about something, contact the person you think might have sent it to check first.
  • Use bookmarks or favourites to access websites rather than links in emails.
  • Check to see how the companies you deal with — like your health care provider — will contact you, so you’re more likely to recognise what’s a legitimate request and what isn’t.
  • If you have your own business, make sure you keep your support contracts (with your antivirus provider or your firewall provider, for example) up to date.

Remember — if you don’t click on any links or attachments in a scam email, your system is safe.

Find out more about email scams (phishing)