Stay safe online, Aotearoa

Where to go when something feels off.

Every New Zealander is being targeted, by texts, emails, calls, and social ads. The good news is there’s a well-funded network of NZ-specific services ready to help. This page pulls together the ones we’d point our own family and clients to.

If something has already happened

Someone is in danger, or a crime is happening right now
Call 111 immediately.
You've been scammed or your account is compromised
Call your bank first (their fraud line is 24/7), then report the incident to the NCSC.
You clicked a suspicious link or handed over a password
Change the password from a different device, turn on two-factor authentication, and scan your device for malware. If you re-used the password anywhere else, change it there too.

The three you should bookmark

Between them, these three cover almost every situation a New Zealander runs into online, from a suspicious text right through to a live incident response. Save them in your phone before you need them.

NCSC

National Cyber Security Centre

The government's operational cyber-security agency. Report cyber incidents, get incident-response help, and read threat advisories.

  • Report a data breach or account compromise
  • Report a phishing / smishing scam that's cost you money
  • Read national-level threat advisories

Own Your Online

Government cyber-safety hub

Plain-English guides for individuals and small businesses. Check whether something is a scam, learn how to spot fakes, and get step-by-step recovery advice.

  • "Is this a scam?" quick-check tools
  • Guides on 2FA, passwords, safe shopping
  • Advice tailored to individuals and small business

Netsafe

Independent online-safety helpline

Free, confidential advice seven days a week. Best for online harassment, online-trading scams and situations where you need to talk to a human.

  • Trade Me / Facebook Marketplace scams
  • Cyberbullying, harassment, image abuse
  • You want to talk it through with a person
Text "Netsafe" to 4282

Other NZ services worth knowing

Depending on what happened, one of these is probably the right first stop.

Forward scam texts to 7726

Free service run by NZ telcos. Forwarding a scam SMS to 7726 lets your carrier block similar messages network-wide.

Just forward, no reply needed.

Forward scam emails to scam.reports@spam.govt.nz

Run by DIA's Anti-Spam team. Attach the full email (headers + body) if you can.

Banking Ombudsman

If your bank won't reimburse a scam-loss dispute, escalate here (free, independent).

Financial Markets Authority

Check the FMA warnings list before investing. If a "broker" or "investment platform" isn't on the register, it's almost certainly a scam.

Privacy Commissioner

If a business has mishandled your personal information, or you're on the receiving end of a data breach.

Consumer Protection

MBIE-run guide to the most common scam patterns targeting New Zealanders, plus your rights under the Fair Trading Act.

NZ Police, non-emergency

Report a crime that isn't in progress. Use 111 only if someone is in danger or the crime is happening now.

Six habits that block most attacks

No single trick keeps you safe, but the following six habits, done consistently, will stop the vast majority of the scams we see on The Local Vocal.

Use a password manager
Long, unique passwords for every account. Aim for a passphrase of four random words per site. A password manager (1Password, Bitwarden, Apple/Google Passwords) does the heavy lifting.
Turn on two-factor authentication (2FA)
For every account that supports it, especially email, banking, and IRD. Prefer an authenticator app or hardware key over SMS.
Update your devices weekly
Most breaches exploit vulnerabilities that were patched months ago. Auto-updates are the single biggest security win.
Hover before you click
On desktop, hover the link and read the URL in the bottom-left of your browser. On mobile, long-press to preview. If the domain doesn't match the brand, don't click.
Verify by going direct
If a message asks you to log in, close it and open the app or a bookmarked URL yourself. Never log in via a link in an email or text.
Slow down when you feel rushed
Urgency ("your account will be suspended in 24 hours") is the number-one scam tactic. Take five minutes and check.