|We are experiencing high volumes of reports due to a large-scale phishing campaign that is targeting New Zealanders. We appreciate your patience as we work through these reports.
A phishing scam is an email, call or text from someone pretending to be us. They’ll try to get your personal information (like your driver licence number or credit card details). They may trick you into paying for something that seems legitimate, like your vehicle licence (rego).
If you’ve received any communication from us that you think is suspicious, please let us know immediately.
Report a phishing scam form
We can confirm if it’s legitimate or a scam. The sooner we know about it, the faster we can act to protect you and everyone else.
How to spot a phishing scam
- We do not send text message reminders.
- We’ll only send you an email if you’ve contacted us first, or you’ve signed up to receive email notifications and reminders from us.
- Genuine emails from us come from @nzta.govt.nz, @enews.nzta.govt.nz or @reply.nzta.govt.nz
Scam email addresses may look similar, but won’t be correct (scam examples include nzta.co.nz, nzta.gov.nz, nzta.qovt.nz, nzta.nz, nzta.com).
- The email, phone call or text may be threatening.
- It might be missing specific details that you’d expect us to know. For example, when we email you to say your vehicle licence (rego) is due, we include your specific details like your plate number, vehicle make and rego expiry date. Scammers don’t know that specific information, so can’t include it.
- It might include buttons or links that are malicious and will take you to a fake website. Hover your mouse over buttons or links (but don’t click on them) to see if they’ll take you to a genuine government (govt) website.
If you think you’ve received something suspicious
- Don’t click on any buttons or links in the email. Hover over them with your mouse to view the website address they’ll take you to.
- Don’t give out your personal details, driver licence details or payment details.
- Don’t reply to the email.
- Send or tell us about the email by completing the Report a phishing scam form, then move the email to your junk folder in case we or the police need it later.
- Check that your device is protected by anti-virus and anti-spyware.
You can also complete the form to report any other kind of suspicious communication.
If we confirm we think the communication is a scam, you can also report it to your local police, CERT NZ or Netsafe.
New Zealand Police’s information on scams(external link)
CERT NZ’s information on scams(external link)
Netsafe’s information on scams(external link)
Alternatives to clicking on buttons or links
If you've hovered over buttons or links in an email, and you're unsure whether you can trust them, don't click on them. Instead, you could try:
- going to our genuine website (www.nzta.govt.nz) and searching for the information or transaction you need
- bookmarking our web pages or transactions you use often, so you don't need to click through to them from an email.
If you’ve provided your personal details
If you’ve provided your credit card or banking details
Contact your bank immediately and ask them to stop the suspicious payments. You may also need to request a new credit/debit card.
If you’ve provided your driver licence details
Email us at email@example.com to cancel your current photo driver licence card and arrange for a replacement (it will cost $38.20). Please include the word ‘scam’ in your email subject line.
Cancelling the card will stop anyone from being able to use it.