NZ Post Security Centre

Please note: Holidays Act remediation email

On Monday 16 November 2020, NZ Post sent an email from [email protected] to former employees who had registered on our secure Holidays Act Former Employees Portal.

If you have any concerns, learn more about Holidays Act remediation communications


Security in our physical mail network and online is important to NZ Post. On this page you'll find information about what NZ Post does to help protect its customers, as well as some tips for protecting yourself online and recognising common scams.

If you think you have been a target of a scam contact Netsafe’s ‘The OrbOpens in a new window. ’ immediately. If you believe the scam involves NZ Post in any way please contact us and let us know. 

Contact us

Cyber Security Alerts

NZ Post has become aware of the below scam email campaign.

If you see this NZ Post branded email, please delete the email immediately. It is not a legitimate NZ Post email.

If you still have any security concerns, or have received something else that you are unsure of please contact us: [email protected]

NZ Post has become aware of the below scam email campaign.

If you see this NZ Post branded email, please delete the email immediately. It is not a legitimate NZ Post email.

If you still have any security concerns, or have received something else that you are unsure of please contact us: [email protected]

NZ Post has become aware of the below scam email campaign.

If you see this NZ Post branded email, please delete the email immediately. It is not a legitimate NZ Post email.

If you still have any security concerns, or have received something else that you are unsure of please contact us: [email protected]

NZ Post has become aware of a continuation of the below email campaign.

If you see these NZ Post branded emails, do not click on the hyperlinks. Please delete the email immediately. They are not legitimate NZ Post emails.

If you still have any security concerns, or have received something else that you are unsure of please contact us: [email protected]

NZ Post has become aware of a continuation of the below email campaign.

If you see this NZ Post branded email, do not click on the hyperlinks. Please delete the email immediately. This is not a legitimate NZ Post email.

If you still have any security concerns, or have received something else that you are unsure of please contact us: [email protected]

NZ Post has become aware of the below email campaign.

If you see these New Zealand Post branded emails, please delete them email. They are not legitimate NZ Post emails.

NZ Post has become aware of the below email campaign.

If you see this NZ Post branded email, do not click or tap anywhere on the email, which is a hyperlinked image. Please delete the email immediately. This is not a legitimate NZ Post email.

If you still have any security concerns, or have received something else that you are unsure of please contact us: [email protected]

NZ Post has become aware of the below SMS/TXT message phishing campaign. If you see this message, please forward the message to 7726 (Department of Internal Affairs).

Further information can be found on the DIA website.

NZ Post has become aware of the below SMS/TXT message phishing campaigns. If you see these messages, please forward the message to 7726 (Department of Internal Affairs).

Further information can be found on the DIA website.

Feel free to send reports of these messages to: [email protected]

Please include the following details:

  1. Your mobile number
  2. Your mobile provider (Spark/Vodafone/2Degrees/ etc.)
  3. Date and time of the message
  4. Message wording

 

NZ Post has become aware of the below email phishing campaign. If you see this New Zealand Post branded email, please delete the email immediately. This is not a legitimate NZ Post email.

If you still have any security concerns, or have received something else that you are unsure of please email: [email protected]

NZ Post has become aware of the below email phishing campaign. If you see this New Zealand Post branded email, please delete the email immediately. This is not a legitimate NZ Post email.

If you still have any security concerns, or have received something else that you are unsure of please email: [email protected]

NZ Post has become aware of the below email phishing campaign. If you see this New Zealand Post branded email, please delete the email immediately. This is not a legitimate NZ Post email.

If you still have any security concerns, or have received something else that you are unsure of please email: [email protected]

NZ Post has become aware of the below email phishing campaign. If you see this New Zealand Post branded email, please delete the email immediately. This is not a legitimate NZ Post email.

If you still have any security concerns, or have received something else that you are unsure of please email: [email protected]

NZ Post has become aware of the below email phishing campaign. If you see this New Zealand Post branded email, please delete the email immediately. This is not a legitimate NZ Post email.

Below is a screen capture of the email in question:

If you still have any security concerns, or have received something else that you are unsure of please email: [email protected]

NZ Post has become aware of the below scam advertisement on Facebook. If you see this New Zealand Post branded advertisement online (e.g. Facebook, Instagram, or elsewhere), please do not interact with it. This is not a legitimate NZ Post offer.

Below is a screen capture of the advert in question:

If you still have any security concerns, or have received something else that you are unsure of please email: [email protected]

NZ Post has become aware of the below email scam/phishing campaign. If you receive a New Zealand Post branded email with a subject ‘Your shipment is awaiting shipping, with the content of ‘Your parcel held in our warehouse’ and a ‘Click Here’ link requesting payment, please delete the email immediately. This is not a legitimate NZ Post email. We are currently working to have the offending sites, linked in the email, taken offline.

Below is a screen capture of the most recent scam email reported to the NZ Post Cyber Security team:

If you still have any security concerns, or have received something else that you are unsure of please email: [email protected]

NZ Post is aware of many COVID-19 themed phishing emails and texts and would like to remind customers that NZ Post will never ask for credit card details via text or email. If you have entered these after clicking on a link, we recommend that you contact your bank immediately. If you clicked on any links but have not entered any personal details, we recommend running a scan of your device using antivirus software.

Below is a screen capture of the most recent scam email reported to the NZ Post Cyber Security team:

If you still have any security concerns, or have received something else that you are unsure of please email: [email protected]

NZ Post has become aware of three current "NZ Post branded" phishing campaigns. If you have seen or received any of the following messages please ignore and delete any associated posts.

If you still have any security concerns, or have received something else that you are unsure of please email: [email protected]

  

NZ Post has become aware of a “NZ Post branded” phishing campaign. If you are a user of the Viber app and have received a request to join “NZPOST” group, please ignore and delete any associated posts. NZ Post does not use Viber to update customers, and we are currently working to have the offending Viber group and sites linked in the messages taken offline (screenshots provided below).

If you still have any security concerns, please email: [email protected]

 

NZ Post has become aware of a new email phishing campaign sent from an unrelated entity.

If you have received a NZ Post 'branded' email with the subject ‘Your order #23238583389NZ has been shipped’, and it contains, ‘Your parcel is being processed Track your shipment via the link below’ (screenshot provided below), please delete the email immediately. This email is not a legitimate email from NZ Post, and we are currently working to have the offending sites, linked in the email, taken offline.

If you still have any security concerns please email: [email protected]

NZ Post is aware of a new email scam/phishing campaign. If you receive a New Zealand Post branded email with a subject ‘Your shipment is waiting for delivery’, with the content of ‘Your parcel held in our warehouse’ and ‘Click Here’ link requesting payment (Screenshot below) please delete the email immediately. This is not a legitimate NZ Post email. We are currently working to have the offending sites, linked in the email, taken offline.

If you still have any security concerns please email: [email protected] or speak to one of our National Contact Centre representatives.

New Zealand Post is aware of these text scams - mobile screenshots below. We are requesting that these websites and SMS numbers are immediately taken offline by our partners in the Anti-Spam Unit at the Department of Internal AffairsOpens in a new window. .

If you have NOT made any online purchases, and are not expecting to receive any packages, the notification is likely to be fraudulent. Do not click on the link as it could direct you to a malicious website.

Instead, New Zealand Post’s website provides Tracking facilities for anyone needing to validate the delivery status of a package. New Zealand Post will never request credit card payment to release delivery. Delivery is prepaid through any New Zealand PostShop, Franchise partners or online merchants.

If you still have any security concerns please email: [email protected] or speak to one of our National Contact Centre representatives.

Any member of the public who has become a victim of these scams should immediately contact their credit card provider, and consider reporting the matter to the New Zealand PoliceOpens in a new window.

  

How we help protect you

At NZ Post we work with you to keep your mail secure and help you stay safe online. Here are ways we can help:

  • If you are going away for a period of time, think about putting your mail on hold through our Hold service.
  • If you move address, set up a redirection for your mail and let other organisations know your new address immediately. This can be set up by using our Redirections and ChangeMyAddress services.
  • We offer PO Boxes and Private Bags. These are convenient ways to have your mail delivered.
  • Sign up for a RealMe accountOpens in a new window. . This is New Zealand’s secure online identity verification service, officially backed by the NZ Government and created in partnership by the Department of Internal Affairs and NZ Post.
  • The NZ Post website uses encryption technology to keep information sent through our website safe. All stored customer data is protected with passwords, user log-ons and other security procedures.
  • We will never ask for any personal information by email (including usernames, credit card numbers and passwords).

How you can protect yourself

Valuable and sensitive items are posted through our network every day. Below are tips on how you can keep your items safe and secure.

  • Regularly check your mailbox.
  • Shred any documents that contain personal or sensitive financial information rather than disposing them in the trash or recycling.
  • Change your account passwords frequently.
  • Make sure you use strong passwords containing a mix of letters, numbers and symbols.
  • Never give out your personal information to someone you do not know or trust, online or in person.
  • Treat your personal details like you would treat your wallet and other valuable possessions.
  • Never send personal sensitive information, and credit card numbers via email.
  • Learn about common types of scams and red flags to look out for.

Identity theft

Identity theft is when someone fraudulently uses someone else's identity. It could be used to access funds in your bank account, obtain a credit card or take out a personal loan in your name.

  • Never give out your personal information to someone you do not know or trust.
  • Treat your personal details like you would treat your wallet and other valuable possessions.
  • Destroy personal information - do not just throw it out. Cut up, burn or shred old bills, account statements or cards so scammers cannot get hold of your personal details.
  • Review bank and credit card statements for any unusual or unauthorised transactions.

Check out the Department of Internal Affair’s Identity Theft ChecklistOpens in a new window. which includes information on what you can do to protect yourself from identity theft.


Scams

Scams come in many forms. Whether it is a text message, phone call, email or letter, the aim is to gain access to your personal or financial information, or exploit you for financial gain.

Many scams look genuine and sometimes it is hard to tell that they are fake. If you are not sure, do not respond or click on links in messages.

If you think you have been a target of a scam contact Netsafe’s ‘The OrbOpens in a new window. ’ immediately. If you believe the scam involves NZ Post in any way please contact us and let us know.

Here is a list of common scams so you can better understand what to look out for. More examples can be found on the Department of Internal Affairs websiteOpens in a new window. .

Contact us

Common mail scams

Overseas lottery and other prize scams

You receive a letter in the post from an overseas lottery or sweepstakes company advising that you have won a large sum of money. Typically you will be asked to transfer money to a bank account in order to claim your prize. There are no lotteries that give out winnings to people who do not buy tickets and you should not have to pay a sum of money in order to claim a prize.

Tip: If you do not know about the lottery or you did not purchase a ticket, do not make contact.

Inheritance/Estate Funds scams

You receive a letter in the post from somebody from an estate company. The letter states that you are the beneficiary of a large sum of money from a long lost relative who has passed away. Typically the offer will ask you to send legal fees or some form of tax in advance of receiving your inheritance. Usually they will ask for funds to be sent to them via money transfer agents like Western Union or Money Grams.

Tip: If you have not physically met the person you are sending the money to or the person that has passed away, do not make contact.

Email/Phishing scams

You receive an email from a bank or another trustworthy organisation asking you to update your personal details. The email will appear genuine and will state they require your details for such things as:

  • Upgrading security.
  • Verifying your account.
  • Protecting you from fraud.
  • Offering you a refund.

Typing in your pin and password will give the scammers access to your money and identify.

See an example of a past phishing scam

Tips

  • Banks will never ask for pin numbers or passwords.
  • Never send personal sensitive information or credit card numbers via email.
  • Never enter your personal details into a website unless you are sure it is genuine.
  • Never click on a link in an email if you are unsure about it.
  • Never visit your bank's website via a link - always type in the address.

Useful links