Authorised Fraud in NZ: How Smart People Get Scammed

The fraud that doesn’t look like fraud

Here’s the uncomfortable truth about authorised fraud: the bank didn’t fail. The security systems didn’t fail. You made the transfer — willingly, deliberately, often urgently — and by the time you realised something was wrong, the money was gone. That’s what makes it so brutal, and so difficult to recover from.

Authorised push payment (APP) fraud is the fastest-growing financial crime in New Zealand right now, and it’s not targeting people who are careless or naive. It’s targeting people who are careful, organised, and who trust their instincts — because those are exactly the people who respond when someone in authority tells them there’s a problem.

According to New Zealand Banking Association data, New Zealanders lost over $198 million to scams in 2023 — and a significant and growing share of that came from authorised transfers that victims believed were legitimate. These aren’t phishing emails caught in spam folders. They’re phone calls from someone who already knows your name, your bank, and sometimes your recent transaction history.

What “authorised” actually means — and why it matters

Authorised push payment fraud: A type of scam where a victim is deceived into voluntarily sending money to a fraudster’s account, believing the payment to be legitimate. Unlike unauthorised fraud — where a criminal accesses your account without your knowledge — APP fraud involves the victim initiating the transfer themselves, which traditionally limits the bank’s liability to reimburse.

That distinction — authorised versus unauthorised — is the crux of why this kind of fraud is so financially devastating. If someone clones your card and makes purchases, your bank generally has a duty to reimburse you. But if you transferred the money, even under false pretences, the legal and regulatory picture becomes considerably murkier.

Which, strictly speaking, isn’t how most people think consumer protection works. Most of us assume that if we were tricked, we’re covered. But “tricked into doing something yourself” sits in a very different legal category from “had something done to you without consent.”

How the scam actually plays out

The mechanics vary, but the psychological architecture is almost always the same: create urgency, establish authority, prevent the victim from pausing to think. Here’s a typical scenario — one that has played out hundreds of times across New Zealand.

A woman in her sixties receives a call from someone claiming to be from her bank’s fraud team. The caller knows her full name, the last four digits of her card, and mentions a “suspicious transaction” from earlier that morning. She checks — there was an unusual charge. The caller says her account has been compromised and she needs to move her savings to a “safe account” immediately, before more money disappears. She’s transferred to a “senior fraud officer” who walks her through the process. By the time the call ends, she’s moved $34,000.

The bank she spoke to? Not her bank. The “suspicious transaction”? A small test charge the fraudsters placed themselves to establish credibility. The “safe account”? Controlled entirely by the scammers, who cleared it within hours.

The tactics they use — and why they work on intelligent people

Understanding the specific techniques helps, not because knowing them makes you immune, but because recognising them in the moment gives you a chance to pause. And pausing is the one thing scammers absolutely cannot afford you to do.

Here are the most commonly reported tactics used in APP fraud targeting New Zealanders:

1. Number spoofing: Fraudsters display the genuine phone number of your bank on your caller ID. You hang up and call back — and reach the same fraudster, because they’ve kept the line open. Always wait several minutes, use a different phone, or call from a number you’ve looked up independently.
2. The “safe account” transfer: You’re told to move money to protect it. No legitimate bank will ever ask you to do this. Ever.
3. Manufactured urgency: “Your mortgage is being redirected.” “Someone is about to withdraw your pension.” The time pressure is artificial — designed specifically to stop you thinking clearly or consulting anyone else.
4. Inside information: Scammers buy or scrape personal data to seem credible. Knowing your name, suburb, or account type doesn’t mean the caller is who they say they are.
5. Authority layering: Being transferred between “departments” or to a “senior officer” mimics the experience of a real institutional call, lowering your guard with each transfer.
6. Isolation tactics: “Don’t tell your family — this is a confidential fraud investigation.” This is a major red flag. Real fraud investigations do not require your silence from your own household.
7. Romance and investment variants: APP fraud isn’t only bank impersonation. Investment scams — often involving cryptocurrency — follow the same psychological pattern. The Financial Markets Authority (FMA) New Zealand has issued multiple warnings about fake investment platforms that build trust over weeks before the “opportunity” requires an urgent transfer.

“Scammers are sophisticated, well-resourced, and patient. They invest time in building trust before they ask for anything — and by the time they do, many victims genuinely believe they’re doing the right thing.”

— Kristy McDonald, Chief Ombudsman, Banking Ombudsman Scheme NZ, Banking Ombudsman Annual Report 2023

Who carries the loss? New Zealand’s reimbursement gap

New Zealand’s consumer protections here lag behind the UK, which in October 2024 introduced mandatory reimbursement rules requiring banks to refund most APP fraud victims up to £85,000. In New Zealand, reimbursement depends heavily on the individual bank’s policy and the specific circumstances of the case.

The Banking Ombudsman Scheme can investigate complaints and sometimes secure partial refunds — particularly where a bank failed to warn a customer about known fraud patterns, or where a payment showed clear red flags that should have triggered intervention. But these outcomes are not guaranteed, and the process takes time.

The honest answer is that if you’re scammed in New Zealand today, your chances of full reimbursement are not high — unless your bank made a clear error. That’s the uncomfortable reality, and it’s why prevention matters so much more here than in some other jurisdictions.

What to do if you think you’ve been scammed

Speed matters. If you’ve just made a transfer you now suspect was fraudulent, the window for recovering funds — before they’re moved onward — can be as short as a few hours. Work through the following steps as quickly as possible:

1. Call your bank immediately on the number on the back of your card — not a number provided by anyone in the suspicious interaction. Ask them to attempt a payment recall.
2. Report to the Police via New Zealand Police and obtain a case number. Your bank will need this.
3. File a report with CERT NZ at cert.govt.nz — they track fraud patterns and your report helps others.
4. Contact the Banking Ombudsman if your bank refuses to help or you feel their response is inadequate. This is free and independent.
5. Document everything — screenshots, call logs, emails, transaction references. Don’t delete anything, even if it’s embarrassing. Shame is not evidence against you.

The conversation that might actually save someone’s money

Scam awareness campaigns often focus on the elderly as the primary target. The data tells a more complicated story. According to Netsafe New Zealand, adults aged 35–54 report the highest financial losses from scams, in part because they hold more assets and are in peak earning years. Older adults may report less often due to shame.

That means the most protective thing you can do isn’t necessarily safeguarding yourself — it’s having a genuine, non-judgmental conversation with people in your life about what these calls sound like, and establishing a simple rule: no one moves money without checking with one other person first. Even a five-minute call to a spouse, sibling, or adult child can break the urgency loop that scammers depend on.

It’s not about being suspicious of everything. It’s about building a small speed bump into your process that costs you almost nothing when the call is genuine, and everything when it isn’t.

Red flags worth memorising

• Anyone asking you to transfer money to a “safe account”
• Caller tells you not to discuss the matter with family or friends
• Pressure to act within minutes or hours
• A request to download remote access software (like AnyDesk or TeamViewer)
• Investment opportunities with guaranteed returns or “limited time” access
• Requests for payment via cryptocurrency, gift cards, or wire transfer to an overseas account

Frequently asked questions

Q: If I authorised the transfer myself, can I get my money back in New Zealand?
A: It’s difficult but not impossible. New Zealand banks operate on a case-by-case basis, and reimbursement isn’t guaranteed by law. Your best chance comes from reporting quickly, asking your bank to attempt a payment recall, and escalating to the Banking Ombudsman if the bank’s response is unsatisfactory. The Ombudsman has secured partial refunds in cases where banks failed to flag obvious red flags before processing the transfer.

Q: How do scammers know my personal details?
A: Personal data is bought and sold in bulk through data breaches, social media scraping, and dark web marketplaces. Knowing your name, bank, or suburb does not mean the caller is legitimate — it simply means your data has been compromised somewhere along the line, which is unfortunately extremely common.

Q: What should I do if I get a call from my bank’s fraud team?
A: Hang up. Wait five minutes. Call back on the number printed on your bank card or on the bank’s official website — not the number the caller gave you. Real fraud teams understand this and will not pressure you to stay on the line. If someone does pressure you, that itself is a strong signal the call is fraudulent.

Q: Are investment scams a form of APP fraud?
A: Yes. Any scam where you’re persuaded to voluntarily transfer money — whether to a fake “safe account,” a fraudulent investment platform, or a romance scammer — falls under the authorised push payment category. The Financial Markets Authority (FMA) maintains a list of known investment scam operators on its website and updates it regularly.

Q: Is New Zealand going to introduce mandatory reimbursement rules like the UK?
A: As of 2024, there are no confirmed plans to introduce mandatory APP fraud reimbursement legislation in New Zealand, though advocacy groups and the Banking Ombudsman have called for stronger protections. The situation may evolve — it’s worth checking the Banking Ombudsman’s website for updates on any proposed industry codes or regulatory changes.