AN
Air New Zealand
Fake Airpoints expiry alerts, fraudulent Manage Booking links, and Koru credential phishing are the top spoofs of New Zealand's national airline.
Official indicators
AN
Air New Zealand<noreply@airnz.co.nz>
To: you@example.com
For your security, please Log in to Airpoints to complete this action.
Original URL: https://www.airpoints.co.nz/. Click or tap if you trust this link.
What real Air New Zealand messages look like
- Official emails come only from addresses ending in @airnz.co.nz, @airnewzealand.co.nz, or @grabaseat.co.nz
- Air New Zealand will address you by your registered name — never Dear Customer or Dear Member
- Air NZ will never ask for your password, Airpoints PIN, card details, or Koru login credentials by email or SMS
- Airpoints links always go to airpoints.co.nz — not lookalike domains
- Air NZ will not create urgency around points expiry, free travel offers, or prize wins
Common spoof patterns
- Airpoints expiry urgency emails pushing to fake login pages
- Booking confirmation phishing with a fraudulent Manage Booking link
- Prize and competition scams impersonating grabaseat.co.nz or Airpoints
- Social media ads offering free travel for $2 designed to harvest card and identity details
- Koru membership phishing targeting premium frequent flyers