TOOL SUPPORT & SAFETY
KIWISCAN • NZ SCAM CHECKER

Use KiwiScan safely.

KiwiScan is designed to help Kiwis make safer decisions fast — without accounts and without collecting unnecessary information. This page explains what to paste, what not to paste, and what to do if you’ve already clicked or paid.

Safety rules (read first)

Quick guidelines to protect your money, identity, and devices.

Safe to paste

  • Suspicious SMS text (copy/paste)
  • Email subject + a short snippet (remove personal info)
  • Links (URLs) — copy the link text without opening it
  • Sender name / brand claimed (e.g., “NZTA”, “IRD”, “NZ Post”)
  • Screenshot of a message (upload on the tool page)
Tip: If a message looks “official”, that’s exactly what scammers aim for. Verify it first.

Do NOT paste

  • One-time passcodes (OTP), verification codes, or PINs
  • Full card numbers, CVV, or bank login details
  • Passwords, recovery phrases, or crypto seed phrases
  • Full home address + ID numbers (driver licence, passport)
  • Any private information you wouldn’t share publicly
KiwiScan is privacy-first — but the safest approach is: never paste secrets anywhere.

How to scan safely

Follow this order so you don’t accidentally trigger a scam.

Step 01

Don’t click

If there’s a link, avoid tapping it. Close the message and copy the text or URL instead.

Many scams rely on one accidental tap.
Step 02

Paste only what’s needed

Paste the message content and the link (if present), but remove names, addresses, or numbers if you can.

Minimal data in = safer scanning.
Step 03

Follow the result actions

If risk is MEDIUM/HIGH, use the “What to do next” steps and contact official channels (not numbers from the message).

Always use official sites/apps or numbers you find independently.

If you clicked, paid, or shared details

Move quickly. These steps can limit damage.

If you paid

Contact your bank immediately. Ask to stop/reverse the payment if possible and flag fraud.

Read: What to do if you paid

If you clicked a link

Close the page. Don’t enter details. If you downloaded anything, scan your device and change passwords.

Read: What to do if you clicked

If you shared personal info

Change passwords, secure email first, and monitor accounts. Consider placing alerts with relevant providers.

Read: What to do if you shared details

Report it (NZ)

Reporting helps stop repeat scams. If you’re unsure where to report, start here:

NEED HELP?

Send a bug report or suggestion.

If something doesn’t look right, tell us what happened. Include the risk result and (if safe) the message text.