Latest scams & alerts.

Fake job advertisements on social media

What's happening?

Scammers are using social media platforms to advertise fake jobs and recruitment opportunities. Many of these scams target people looking for cleaning, administration, truck driving, customer service, or work-from-home roles.

After expressing interest in a job advertisement, victims are contacted by someone claiming to be a recruiter and are instructed to download an app or software as part of the hiring process. These applications may contain malware designed to compromise devices, steal passwords, harvest personal information, or allow scammers to access your online accounts. Westpac NZ has recently received reports involving multiple social-media pages using this approach.

What to look out for

Requests to download an app as part of the hiring process: Be cautious if a ‘recruiter’ asks you to install software before providing information about the role or conducting an interview. Exercise particular caution if:

• The app is provided through a social media message, text message, email, or website link rather than an official app store
• The app has very few reviews or downloads
• You are told the app is required for registration, onboarding, verification, or accessing available jobs.

Hiring processes that move quickly: Be suspicious if you receive a job offer with little or no interview process, limited background checks, or minimal discussion about your experience and qualifications. A genuine employer will usually want to discuss your background and suitability for the role before offering you a position.

Communication through social media or messaging apps: Exercise caution if recruiters insist on communicating only through Facebook Messenger, WhatsApp, Telegram, or similar messaging platforms rather than using official company channels.

Unrealistic pay or conditions: Be wary of opportunities promising high wages, flexible hours, work-from-home arrangements, or easy money for minimal effort. If it seems too good to be true, it probably is!

Requests for personal information: Be cautious if you're asked to provide copies of identification documents, banking details, passports, or driver licences before you have independently verified the employer and the role.

Suspicious social media pages: Be cautious of recruitment pages that:

• Were recently created
• Contain largely AI-generated images
• Provide very little information about the employer, job location, or recruitment process
• Advertise multiple different roles with vague descriptions.

Pressure to act immediately: Scammers often create urgency by claiming positions are filling quickly or that immediate action is required to secure the role. Take your time and independently verify the opportunity before proceeding.

What should I do?

Before applying for a job:

• Research the employer independently
• Do not download applications or software simply because a recruiter requests it
• Never pay recruitment fees, purchase training materials, or transfer money as part of a job application process
• Be very cautious about sharing identity documents, banking information, or other personal details until you have confirmed the opportunity is genuine.

If you believe you may have been affected:

• Stop all contact with the ‘recruiter’ immediately
• Have your device checked and cleaned by an IT professional
• Change passwords for important accounts, particularly banking and email accounts
• Contact your bank immediately if you believe your financial information may have been compromised
• Report the content to the social media platform and block the scammers across all devices
• You can also contact IDCARE for specialist aftercare support.

Scam Facebook pages advertising free classes or activities

What’s happening?

Fraudulent Facebook groups advertising ‘free’ local activities—such as Tai Chi, walking clubs, or dance classes—have emerged as a growing and increasingly sophisticated type of scam. These scam groups are used to trick people into downloading malware, steal money or financial information, or harvest personal data. The images below show an example.

What to look out for

Mandatory app downloads: Be wary of any activities that require installing an app. Exercise caution especially if:

• You are directed to download the app via a link in Messenger or a website instead of the official Apple App Store or Google Play Store
• The app appears unverified or has very few downloads or reviews.

Unsolicited messages from ‘admins’: You receive private messages from alleged group members or administrators urging you to call them or click a link. Scammers strike fast and pressure you to act quickly. Take some time, slow down, think about what’s happening, and do not feel pressured to act.

Avoidance of in-person details: Organisers are vague about locations or schedules or claim you must register through an app before they will share basic details like times and venues.

‘Too good to be true’ freebies or unrealistic promises: Classes may be advertised as completely free with no affiliation to a recognised community centre, council, or legitimate health organisation, and are often paired with exaggerated or unrealistic promises of rapid fitness or health improvements.

Suspicious profiles or pages: The Facebook page is newly created, has minimal followers, or all images and posts were uploaded on the same day.

AI-generated or unusual content: Be aware of these possible scam indicators:

• Videos or images that seem to be AI-generated
• Dramatic ‘before and after’ body transformations that are claimed to happen very quickly
• Mismatches between branding and content, with New Zealand–based groups displaying overseas imagery.

What should I do?

Do not download unverified apps. If you believe you’ve been affected by a scam:

• Have your phone or device checked and cleaned by an IT professional.
• Contact your bank immediately
• Report the content to the social media platform and block the scammers across all devices
• You can also contact ID Care for specialist aftercare support.

Bank impersonations targeting business customers

We're seeing increased scam activity in which Westpac business customers are receiving calls from scammers impersonating bank staff. The scammers are directing people to fake websites with a link to log-in directly to online banking in an attempt to steal confidential information.

What to look out for:

Please be cautious of any unexpected contact and only use verified Westpac digital banking channels such as Westpac One or Business Online accessed via our main website, or via the official Westpac One app.

How to avoid bank impersonations

• If you're ever unsure about a call from us or any other bank, hang up and call using a number listed on the public website.
• If you believe you have been contacted by a scammer and shared any information, please call us immediately, contact your Relationship Manager or visit your local branch.

Important security reminder:

Westpac will never ask for your login details – including your username and password – by email or phone.
We will never send direct links to log in to our online banking platforms via email or SMS.

Emails impersonating Westpac

We're receiving multiple reports of phishing emails impersonating Westpac. The campaign appears to be targeting Xtra email accounts and says that unusual activity has been detected on an account or that details need to be updated. It invites the user to click a link to secure or verify their account. These emails are phishing. The link should not be clicked and no details should be shared. 

What should I do?

If you receive an email similar to this:

• Do not click on any links or download/open any attachments.
• Forward the email to phishing@westpac.co.nz
• Once reported, delete the email and block the sender.
• Please be extremely vigilant for any unexpected or suspicious emails, phone calls or text messages, particularly those that ask you to take urgent action.
• If you believe you've been targeted by a scam or have shared any details with a scam site, contact your bank immediately.
• If you think your personal details have been compromised, you can also contact ID Care on 0800 121 068 or 09 884 4440, 10am to 7pm, Monday to Friday.

Cryptocurrency scams

Scammers are using the increased public interest in cryptocurrency to create a sense of urgency and convince people to “invest” quickly without considering the risks.

They may also ask victims to purchase cryptocurrency when they’re carrying out a variety of scams including investment, relationship and employment scams - many of these start with an online advert or a social media post, DM or text message. Be careful as scammers may pose as account managers, brokers, financial advisors, mentors or recruiters.

Be cautious when dealing with crypto and make sure you do your research as it’s unlikely you’ll get your money back if it’s a scam. If you’ve been scammed, call us on 0800 400 600.

What to look out for

• Investment opportunities involving cryptocurrency.
• Investment opportunities that promise high or guaranteed returns.
• Being asked to purchase cryptocurrency online or use a cryptocurrency ATM.
• Being instructed to deposit into a cryptocurrency wallet you don’t control or haven’t set up yourself.
• Out of the blue contact about a job opportunity.
• Work-from-home opportunities advertised on social media.
• High paying jobs that have low hours and need no specialised skills or experience.
• Jobs that require you to invest your own money to earn income or use your personal bank accounts to process transactions.
• Being told to lie to your bank about the purpose of transactions.
• Celebrity endorsements (including political figures) for investments or cryptocurrencies.
• Offers to recover cryptocurrency lost in previous scams.

How to avoid cryptocurrency scams

• Always complete thorough, independent research on any cryptocurrency or investment opportunities.
• Visit the Financial Markets Authority website for information on the latest investment scams. The International Organization of Securities Commissions provides a consolidated list of many of the warnings issued by regulators globally.
• Avoid purchasing cryptocurrency if you don’t understand how it works and how to do so safely.
• If you are purchasing cryptocurrency, use well-known exchanges.
• Ensure that you have control over your cryptocurrency wallet (don’t allow others to set it up for you). Do not share your private key or seed phrase.
• Always be honest with your bank about the purpose of a transaction if it’s queried. We’re here to help you spot and avoid scams.
  Find out more Keep cryptocurrency secure - Own Your Online.