COVID-19 scams

Scammers will use any opportunity to try to trick and manipulate people into giving out their personal or financial details, especially through email and SMS scams. CERT NZ is working to put a stop to COVID-19 vaccine scam campaigns and ensure the safe roll out of the COVID-19 vaccine.

Remember, the COVID-19 vaccine is free. At no point will you be asked to pay for the vaccine, or pay for your place in the queue. If you are, it will be a scam. The best way you can help us stop these scams is to report them to us.

Report it

Help us stop these campaigns. If you have experienced or are aware of a COVID-19 vaccine related scam, please email us with all the details you have through the link below.

If possible, for email scams:

  • Forward the original email, including any attachments (screenshots are not as helpful – but better than nothing). This will allow us to investigate any hyperlinks etc.
  • Include any further details you’re aware of regarding the scam.

Once you have done this, you can block the sender and delete the email from your system. We will come back to you with further advice.

For phone scams please include:

  • the telephone number the call came from (if possible)
  • the telephone number of the person who received the call (this will be treated in confidence)
  • the date and time of the call
  • a brief explanation of what the caller said

Report it (

By emailing us this information, you consent to us sharing it with our partner and other government agencies for investigatory and statistical purposes. Your personal information will never be shared publically.

For more information on collection and use of personal information, see our privacy and information statement.

Privacy and Information statement

What to expect

When you’re eligible for your vaccination you will receive a text from the Ministry of Health.

Note: any webpage that does not come from the above should be reported to CERT NZ.

Report it (

You may also be contacted by your healthcare provider via their normal channels, such as their online patient portal. We strongly encourage you not to click any links and instead log into your patient portal directly, or call your healthcare provider.

Be aware

One of the best ways to put a stop to scammers is to be aware of the current scams out there.

See our list of COVID-19 scams and help better protect yourself and your loved ones.

COVID-19 vaccine-related scams affecting New Zealanders

Follow us on social media for the latest updates.

Facebook External Link

Twitter External Link

LinkedIn External Link

Protect yourself

Although you can’t prevent an email scam (phishing attack), there are things you can do to make sure you recognise one.

  • Know what to look for in a scam email. You might notice that:
    • you don’t recognise the sender
    • the sender name doesn’t sound quite right
    • you don’t recognise the name of the company
    • the company logo doesn’t look like it should
    • the email refers to you in a generic or odd way — for example, 'Dear You…'
    • if you hover over a link in the email with your mouse, the address that you see doesn’t match the place it’s saying it’ll take you.
  • Don’t click on web links sent by someone you don’t know, or that seem out of character for someone you do know. If you’re not sure about something, contact the person you think might have sent it to check first.
  • Use bookmarks or favourites to access websites rather than links in emails.
  • Check to see how the companies you deal with — like your health care provider — will contact you, so you’re more likely to recognise what’s a legitimate request and what isn’t.
  • If you have your own business, make sure you keep your support contracts (with your antivirus provider or your firewall provider, for example) up to date.

Remember — if you don’t click on any links or attachments in a scam email, your system is safe.

Find out more about email scams (phishing)

Find out more about COVID-19 misinformation

Report COVID-19 vaccine scams or misinformation