Kiwibank Phishing Alerts

Kiwibank 'unusual activity' SMS phishing — pushing customers to fake internet-banking portals — is one of the most consistently reported bank-spoof campaigns in NZ.

Official indicators

Kiwibank<noreply@kiwibank.co.nz>

To: you@example.com

Verified

For your security, please Log in to Kiwibank Internet Banking to complete this action.

Original URL: https://www.kiwibank.co.nz/internet-banking. Click or tap if you trust this link.

What real Kiwibank messages look like

Official emails come strictly from @kiwibank.co.nz
Kiwibank will never send an SMS with a link asking you to log in
They will never ask for your password, PIN, or one-time code via email or SMS
Internet banking login is always at kiwibank.co.nz

Common spoof patterns

"Unusual activity detected — verify your identity" SMS linking to a spoofed portal
"Your account has been locked" phishing emails with fake Kiwibank branding
Lookalike domains such as kiwibank-secure.com or kiwibank-nz.info