We highlight current cyber security threats in New Zealand, and provide guidance on what to do if they affect you.

6:55pm, 7 March 2018

TLP Rating: White

What's happening

What this means

The phishing email states that the user has a private message and they need to access their RealMe account. The web link in the email then takes the user to a fake RealMe website that asks the user to validate their identity and upload personal documents (eg: passport and driver’s license).

The emails are currently coming from non-government email addresses and direct users to non-government web sites.

What to look for

How to tell if you're affected

If you receive an email related to RealMe:

  • Check the sender’s email address. RealMe is a service provided by New Zealand government. Any communication would be sent from the domain.
  • Check the email message and what is being asked. If you receive an email message about your account that is not expected, it may be a phishing email.

What to do


If you receive a RealMe phishing email:


If you have clicked the web link and have entered information into the website:

More information

If you require more information or further support, submit a report on our website or contact us on 0800 CERTNZ.

Report an incident to CERT NZ

What is phishing?