01. Phone impersonation scams.
This is when someone gets in touch claiming to be from a well-known organisation – like a bank, law enforcement, or government agency.
The scammer may:
- Claim there's suspicious activity or a problem that needs urgent action (e.g. an unauthorised transaction).
- Create pressure to act quickly.
- Ask for login details or one-time passcodes.
- Ask for access to your computer.
When claiming to be from ASB:
A scammer may say they're calling from the fraud department to ask about an attempted payment or suspicious activity on your account. Take extra care with online banking requests to:
- Reset your password after a recent spate of hacks.
- Provide personal details to verify your account activity.
- Read out Netcodes sent to your device or your FastNet Business token. Your bank will never ask you to read these out.
Staying safe from impersonation scams.
- Ask for a Caller Check from callers claiming to be from ASB – if the caller check doesn't come through in your ASB Mobile Banking app, it's not genuine.
- Verify any call that feels unusual. Hang up and call the company's official number.
- Never share passwords, login details, or one-time codes.
02. Remote access scams.
These often start as phone impersonation scams, then escalate into a request to "fix" something remotely, using your own computer - so they can access your device and personal information.
The scammer may:
- Call, text, or email you claiming to be from a well-known company.
- Claim they need to fix a security issue, system problem, or something similar.
- Ask you to download software or click a link to give them remote access to your device.
- Send fake invoices, make changes to existing invoices or request to change payment details.
- Seem professional at the start, but may become pushy, or even abusive, if you hesitate.
When claiming to be from ASB:
Once they have remote access, scammer may ask you to log in to your FastNet Business account - recording your login details as you type. Take extra care with online banking requests to:
- Update your account or device with new security features.
- Read out a Netcode or FastNet Business token.
- Purchase a new modem to fix your internet connection.
Staying safe from remote access scams.
- Be wary of unexpected "fix it" requests. If they ask for remote access, hang up (or delete) - even if they mention a well-known company.
- Use remote tools with care. Even popular tools like TeamViewer or AnyDesk should only be used when you fully trust the source.
- Remember it's not just computers - phones and tablets can also be targeted.
03. Business email compromise (BEC).
These are emails that look like they're from someone you trust, usually requesting sensitive information or money.
The scammer may:
- Take over a real email address or create one that looks almost identical to the real one.
- Send fake invoices or requests to change payment details.
- Pretend to be a senior executive or trusted supplier.
- Use AI-generated deepfake photos, videos, and even audio to make their impersonations more convincing.
Staying safe from BECs.
- Check email addresses closely. If anything looks out of place, be careful about the information you share
- Double-check unexpected requests - especially, invoices, payment changes or urgent requests from suppliers or team members.
Remember, ASB will never:
- Ask you to read out (or disclose in anyway) your password, Netcode, or FastNet Business token.
- Request remote access to your device.
- Ask you to download software.
- Direct you to a web address that isn't asb.co.nz.
- Send you a text message or email to verify a call.
- Ask you to move money to "keep it safe".
For more information on common and emerging scams check out ASB Scam Update
