Back to The Local Vocal
The Local VocalHigh
Email
High riskEncountered ViaEMAIL 26 August 2026
RegionOtagoNationwide

Dodgy card scare email doing the rounds

A phishing email from remisesfranaises.pro is circulating across NZ, using card-skimming fear to push you into clicking a protection link or opening an attachment.

You may see an email with the subject "Thieves can scan your cards through your wallet" claiming your cards are at risk in places like airports, malls, hotels, and public transport. It pushes a button-style call to action such as "Protect My Cards Now" and reads like a security warning about shielding your wallet from digital theft. It appears to come from remisesfranaises.pro and is designed to feel urgent enough that you click before you think.

What gives it away is that the message can appear to pass some basic email checks while still not proving who really sent it. There is no proper signed proof tying the email to a trusted sender, and the domain has no established reputation as a legitimate security brand. That means the message can slip through filters and still be untrusted, which is exactly why it is dangerous.

The attacker is after your click, and likely your details or device access once you engage with the link or the attached file. If you follow the prompt, you could be sent to a phishing page, tricked into handing over personal or payment information, or exposed to a malicious download. One click is enough to turn a fake safety message into a real business problem.

This campaign has been seen across multiple Microsoft 365 tenants in the last day, so you are unlikely to be the only one receiving it. It keeps appearing because the emails are built to look routine enough to pass through normal checks while using a topical scare line that gets attention fast.

Email authorisation
SPF
Pass
DKIM
None
DMARC
Best-Guess Pass
COMPAUTH
Pass
Sender Domain Intelligence

The domain the message claims to be from. Fresh registrations and known-bad reputations are the strongest technical tells of a spoofed sender.

Sender domainremisesfranaises.pro
ReputationCleanscore 0
Email Sample
Source
Decision1