Air New Zealand Phishing Alerts

Fake Airpoints expiry alerts, fraudulent Manage Booking links, and Koru credential phishing are the top spoofs of New Zealand's national airline.

Official indicators

Air New Zealand<noreply@airnz.co.nz>

To: you@example.com

Verified

For your security, please Log in to Airpoints to complete this action.

Original URL: https://www.airpoints.co.nz/. Click or tap if you trust this link.

Official emails come only from addresses ending in @airnz.co.nz, @airnewzealand.co.nz, or @grabaseat.co.nz
Air New Zealand will address you by your registered name — never Dear Customer or Dear Member
Air NZ will never ask for your password, Airpoints PIN, card details, or Koru login credentials by email or SMS
Airpoints links always go to airpoints.co.nz — not lookalike domains
Air NZ will not create urgency around points expiry, free travel offers, or prize wins

Airpoints expiry urgency emails pushing to fake login pages
Booking confirmation phishing with a fraudulent Manage Booking link
Prize and competition scams impersonating grabaseat.co.nz or Airpoints
Social media ads offering free travel for $2 designed to harvest card and identity details
Koru membership phishing targeting premium frequent flyers