WN
Westpac NZ
Persistent bank impersonation campaigns using fake "Unusual Activity" SMS alerts to bypass account security.
Official indicators
WN
Westpac NZ<online@westpac.co.nz>
To: you@example.com
For your security, please Log in to Westpac Online Banking to complete this action.
Original URL: https://www.westpac.co.nz/bank-online/. Click or tap if you trust this link.
What real Westpac NZ messages look like
- Official emails always come from @westpac.co.nz
- Westpac will never send a text or email with a clickable link to log in
- They will never ask for your PIN, password, or security codes via email or SMS
- Real fraud alerts may ask you to call them back using the number on your card
Common spoof patterns
- "Suspicious activity detected — verify here" SMS with a malicious link
- "Your account access has been limited" phishing leading to a fake portal
- Fake bank calls asking you to install "remote support" software