Security alerts archive - 2024
When ASB becomes a phishing campaign target, it means scam emails pretending to come from us have been sent to a large number of people, including ASB customers. These emails are not from ASB, or in any way authorised by us.
If you think you've been targeted by an online or phone scam, please call us on 0800 327 863. We take security seriously and will do everything we can to help.
No company in the ASB Group will ever ask you by email for your secure banking information. That includes account or credit card numbers, passwords, PIN numbers or Netcode details.
Phishing emails often give you a link that directs you to an online banking log in page. While ASB might advise logging in to an account to complete an action, we will never give you a direct link to the log in page. Instead, we'll encourage you to type www.asb.co.nz directly into your browser and log in from there. To make our page easily and quickly accessilble, it's good practice to save it as a bookmark.
If you have received a suspicious email, please forward it to our dedicated email scam team on phishing@asb.co.nz.
If you've already clicked a link in a suspicious email, or if in doubt, please call us on 0800 327 863 and we will immediately reset your internet banking password. You can also reset it yourself through FastNet internet banking or the mobile app.
We're committed to keeping you up-to-date with security threats facing online financial services. Find out more about the precautions we take, as well as tips for how you as a customer can protect yourself online.
2024 examples
Complex phishing scam targeting online buying/selling
Be aware that scammers operate as fake sellers and fake buyers. In this current scam, the scammer poses as a fake buyer to obtain internet banking details getting full access to your bank accounts.
How it works:
Using a fake profile, the scammer messages the seller to buy the item, including a link to a screen that requests the seller click on "Receive Money" to obtain payment. Clicking on the "Receive Money" link takes the seller to a screen where they select their bank.
In the example above, ASB is selected but it could be any banking option. The seller is then taken to a fake ASB site that asks them to enter their bank username and password. This information goes straight to the scammer giving them everything they need to log in to the customer's online banking and begin emptying the funds from the seller's account.
Scammers will go to extraordinary lengths to make things look legitimate - in this case, even using fake chat to support the scam.
Tips when buying or selling items online:
- Be ASB safe, type asb.co.nz into your browser to access your internet banking
- Be vigilant against attempts to trick you into giving away your personal details, especially your banking username, passwords and netcode (two-factor authentication)
- Avoid clicking on links, they can take you to fake websites
- Use trusted methods of payment
- Don't trust screen shots, scammers have ways of faking payment receipts or confirmation showing you they have paid
- Check how active a buyer or seller has been on their account. Is it a recently created profile, incomplete, with few or no friends and no reviews?
- If you are buying items that are local, large, or expensive, go to see the item in a public place
- If the item needs to be shipped, make sure you get a tracking number
- Beware of buyers overpaying for the item and requesting a refund for the difference
Investment Scams
Be aware of fake websites created by scammers, offering financial services such as term deposit comparison calculators or investment platforms offering market beating returns.
These images are an example of fake websites that have been designed for the sole purpose of phishing. After collecting your personal information, a scammer may contact you by phone, SMS or email, in an attempt to deceive or pressure you into buying false investments.
Scammers are very convincing and often pose as representatives from banks or other well-known financial institutions. They can imitate websites, document design, repurpose logos, employee names and will mimic processes such as ID verification, even going as far to give you access to view your new “investments” online.
You should always stay wary of other fake websites.
- For names of businesses or individuals to be wary of, visit the Financial Markets Authority website.
- Check the financial services providers register online on the New Zealand Companies Register to see whether the company is registered in New Zealand to provide financial services.
- Due diligence on any suspicious websites can include checking with the Financial Markets Authority website. If you come across a website that is posing as an ASB page and you’re unsure, type www.asb.co.nz directly into your browser and contact us through our details on our website.
- Treat investment approaches with caution. Something that looks too good to be true most likely is.
- Get a second opinion or advice from a financial advisor who can help you spot any red flags.
Remember, scammers can be persistent and very convincing. Please be cautious and don’t be rushed into anything.
If you believe you may have fallen victim to a scam, please contact your bank immediately.
