TC
The Co-operative Bank Phishing Alerts
Fake 'account suspended' emails and SMS targeting Co-operative Bank customers with lookalike login portals are a growing attack vector against NZ's only customer-owned bank.
Official indicators
TC
The Co-operative Bank<security@co-operativebank.co.nz>
To: you@example.com
For your security, please Log in to Co-operative Bank internet banking to complete this action.
Original URL: https://www.co-operativebank.co.nz. Click or tap if you trust this link.
What real Co-operative Bank messages look like
- Official emails come strictly from @co-operativebank.co.nz
- The Co-operative Bank will never send a link asking you to log in or verify your account via SMS
- They will never ask for your PIN, password, or card number by email or phone
Common spoof patterns
- "Your account has been suspended — verify now" emails linking to lookalike portals
- SMS phishing impersonating Co-op Bank with urgent account-security lures
- Spoofed sender domains such as co-operativebanknz.com or co-op-bank.co.nz