Alerts
We highlight current cyber security threats in New Zealand, and provide guidance on what to do if they affect you.
6:55pm, 7 March 2018
TLP Rating:
What's happening
What this means
The phishing email states that the user has a private message and they need to access their RealMe account. The web link in the email then takes the user to a fake RealMe website that asks the user to validate their identity and upload personal documents (eg: passport and driver’s license).
The emails are currently coming from non-government email addresses and direct users to non-government web sites.
What to look for
How to tell if you're affected
If you receive an email related to RealMe:
- Check the sender’s email address. RealMe is a service provided by New Zealand government. Any communication would be sent from the govt.nz domain.
- Check the email message and what is being asked. If you receive an email message about your account that is not expected, it may be a phishing email.
What to do
Prevention
If you receive a RealMe phishing email:
- Do not click on any web links.
- Report it to CERT NZ
Mitigation
If you have clicked the web link and have entered information into the website:
- Contact the Department of Internal Affairs if you have provided passport information:
https://www.passports.govt.nz/contact-us/in-new-zealand/ External Link
- Contact the New Zealand Transport Agency if you have provided your driver license information:
https://nzta.govt.nz/driver-licences/renewing-replacing-and-updating/replacing-your-licence/ External Link - Report it to CERT NZ
More information
If you require more information or further support, submit a report on our website or contact us on 0800 CERTNZ.