NP
NZ Post Phishing Alerts
High-volume delivery smishing (SMS phishing) campaigns targeting NZ Post customers with fake "unpaid duty" or "failed delivery" alerts.
Official indicators
NP
NZ Post<no-reply@nzpost.co.nz>
To: you@example.com
For your security, please Track a Parcel on NZ Post to complete this action.
Original URL: https://www.nzpost.co.nz/tools/tracking. Click or tap if you trust this link.
What real NZ Post messages look like
- Official emails always end in
@nzpost.co.nz - Legitimate tracking links use the
http://nzp.st/shortener - NZ Post will never ask for payment via a link in a text message
- They will never ask for your password or personal information via SMS
Common spoof patterns
- "Your parcel has been held due to unpaid customs duty" SMS with a malicious link
- "Incomplete address: Update delivery details" phishing texts
- Fake "Shipping notification" emails with malicious attachments

