Phone scams usually try to do one of three things:
• pressure you into paying money (often “urgent”)
• steal logins, bank details, or one-time codes (OTPs)
• trick you into installing remote-access apps or “security tools”
If you recognise any of these, stop and verify using official channels.
Caller claims suspicious activity and pressures you to “secure your account”. They ask for codes, logins, or to move money to a “safe account”.
Caller claims your device is hacked, your internet is compromised, or you have “charges pending”. They push remote access or paid “fixes”.
Automated voice says there’s an “urgent issue” (IRD, immigration, parcel, warrant, power bill), and asks you to press a number to connect.
Scammers often leave a voicemail, then send a text with a link or number.
If any of these happen, end the call and verify independently.
Simple steps that stop most phone scams immediately.
End the call. Don’t argue. Don’t stay on the line “to be polite”. Scammers rely on pressure and momentum.
Call back using the number on the back of your bank card, your bank app, or the official website you type yourself. Never use a number the caller gives you.
Contact your bank immediately, change passwords, and remove remote-access apps. If money moved, treat it as urgent. Keep notes/screenshots for reporting.
If you clicked a link, paid money, or shared details — these pages walk you through what to do next.
Quick answers to common questions.
Yes. Caller ID can be faked. Treat the story and requests (codes, payments, remote access) as the signal — not the number displayed.
Any hard indicator: a link/shortlink, a phone/WhatsApp handle, a payment request, a login/OTP request, install/download/remote-access prompts, or crypto wallet instructions.
Only if you can confirm it matches an official number you found yourself (bank app, official website, back of your card). Otherwise, treat it as suspicious.
Paste the message or number into KiwiScan and check it before you respond.
SCAN NOW