This afternoon we have been alerted to a phishing email scam that is being targeted toward New Zealanders. People have received an email stating that the user has a private message and they need to access their RealMe account. The web link in the email then takes the user to a fake RealMe website that requests the user to validate their identity and upload personal documents (passport and driver’s license).
If you receive this RealMe phishing email do not click the web link. Please report the email to: https://www.cert.govt.nz/businesses-and-individuals/report-an-issue/
These emails are coming from non-government email addresses and direct users to non-government web sites.
Neither the RealMe website itself or any customer accounts have been hacked or compromised.
Phishing attacks use 'spoof' emails and fraudulent websites designed to entice recipients into divulging personal financial data such as credit card numbers, identity details, bank and other account usernames and passwords.
If you have clicked the web link and have provided any information or personal documents, please contact the following parties immediately:
- Department of Internal Affairs if you have provided passport information: https://www.passports.govt.nz/contact-us/in-new-zealand/
- New Zealand Transport
Agency if you have provided your driver license information: https://nzta.govt.nz/driver-licences/renewing-replacing-and-updating/replacing-your-licence/