6:55pm, 7 March 2018
TLP Rating:
RealMe phishing emails
CERT NZ has been informed that there is an active RealMe phishing email scam that is targeted toward New Zealanders.
What's happening
What this means
The phishing email states that the user has a private message and they need to access their RealMe account. The web link in the email then takes the user to a fake RealMe website that asks the user to validate their identity and upload personal documents (eg: passport and driver’s license).
The emails are currently coming from non-government email addresses and direct users to non-government web sites.
What to look for
How to tell if you're affected
If you receive an email related to RealMe:
- Check the sender’s email address. RealMe is a service provided by New Zealand government. Any communication would be sent from the govt.nz domain.
- Check the email message and what is being asked. If you receive an email message about your account that is not expected, it may be a phishing email.
What to do
Prevention
If you receive a RealMe phishing email:
- Do not click on any web links.
- Report it to CERT NZ
Mitigation
If you have clicked the web link and have entered information into the website:
- Contact the Department of Internal Affairs if you have provided passport information:
https://www.passports.govt.nz/contact-us/in-new-zealand/ External Link
- Contact the New Zealand Transport Agency if you have provided your driver license information:
https://nzta.govt.nz/driver-licences/renewing-replacing-and-updating/replacing-your-licence/ External Link - Report it to CERT NZ
More information
If you require more information or further support, submit a report on our website or contact us on 0800 CERTNZ.