KiwiScan is built to help Kiwis without forcing sign-ups. Use it safely by sharing only what’s needed to identify scam patterns — not personal secrets.
Do not paste passwords, one-time passcodes (OTPs), full card numbers, bank logins, or identity documents. If a message asks for these, that’s already a major red flag.
How KiwiScan is designed to be safer by default.
You can scan without creating an account. You don’t need to “sign in” to stay safe.
Paste only what’s needed to judge risk: the text, the sender name/number, and the link (if present). Remove personal identifiers where you can.
KiwiScan outputs practical steps like “don’t click”, “verify via official app”, and “call your bank”. The goal is safe decisions, not certainty.
Scammers constantly change templates. The safest move is always verifying through official channels you type yourself, not links in messages.
If you see these in a message, treat it as high-risk and stop.
Use KiwiScan effectively without exposing personal data.
Replace personal details with placeholders: NAME, ADDRESS, ACCOUNT, EMAIL. The scam pattern usually remains obvious.
If the message includes a link, copy it directly from the text. Don’t open it “just to check”. Many scam pages track clicks or trigger downloads.
If the scam is an image (MMS, social message, or a screenshot), upload it on the tool page. Make sure it shows the sender and the key text.
If a message claims to be from your bank, IRD, NZTA, courier, or telco — verify using the official app/website you type yourself, or the number on your card/bill.
If you entered banking details, passwords, or ID info on a scam site, your next steps matter. Follow the appropriate guide below.
Scan the message without sharing secrets — then follow the recommended steps.
SCAN NOW