Alerts

We highlight current cyber security threats in New Zealand, and provide guidance on what to do if they affect you.

6:55pm, 7 March 2018

TLP Rating: White

RealMe phishing emails

CERT NZ has been informed that there is an active RealMe phishing email scam that is targeted toward New Zealanders.

What's happening

What this means

The phishing email states that the user has a private message and they need to access their RealMe account. The web link in the email then takes the user to a fake RealMe website that asks the user to validate their identity and upload personal documents (eg: passport and driver’s license).

The emails are currently coming from non-government email addresses and direct users to non-government web sites.

What to look for

How to tell if you're affected

If you receive an email related to RealMe:

  • Check the sender’s email address. RealMe is a service provided by New Zealand government. Any communication would be sent from the govt.nz domain.
  • Check the email message and what is being asked. If you receive an email message about your account that is not expected, it may be a phishing email.

What to do

Prevention

If you receive a RealMe phishing email:

Mitigation

If you have clicked the web link and have entered information into the website:

More information

If you require more information or further support, submit a report on our website or contact us on 0800 CERTNZ.

Report an incident to CERT NZ

What is phishing?