Cash lure email pretending to be Air NZ

You could receive an email with the subject line "Congratulations You have received 392.64 NZD" that appears to reference Air New Zealand and dangles a payment-style reward. The message body looks like an airline update and uses Air New Zealand branding cues to make the offer feel familiar and legitimate. The goal is to get you to click through or otherwise engage with the message.

What gives it away is that the sending domain is apps66.com, which has nothing to do with Air New Zealand. Even though the message passed standard email checks, that only shows the sender was authorised to send from apps66.com, not that it was genuinely from the brand being claimed in the email. In plain terms, your mail system may treat it as technically well-formed while the content is still impersonating a trusted organisation.

The attacker is trying to turn curiosity and urgency into a click. If you engage, you could be pushed to a phishing page, asked to hand over login details, payment information, or other business data, or be led into follow-up contact that deepens the scam. A message like this is designed to start the compromise, not finish it in the inbox.

This campaign has been observed across multiple organisations, which means you are unlikely to be the only one seeing it. These emails keep appearing because brand impersonation and small-value reward lures still work well enough to get responses from busy staff.