Airpoints cashback email wants your click
Phishing emails are circulating across NZ using a fake Air New Zealand cashback offer and a money-themed subject line to push you into clicking and claiming a bogus reward.
You might receive an email with the subject line "You have received 392.64 NZD" that looks like a reward or cashback notice. It presents itself as an Air New Zealand or Airpoints message, tells you your 392.64 NZD cashback is ready, and pushes you to claim a bank deposit or transfer by clicking through.
The domain the message claims to be from. Fresh registrations and known-bad reputations are the strongest technical tells of a spoofed sender.
Practical steps you or your IT provider can take to reduce the risk from this kind of threat.
- Check: Confirm any Air New Zealand or Airpoints reward directly in your official account or app, not through links in the email.
- Do not: Click the claim link, reply to the sender, or provide login details, payment details, or personal information.
- Check: Treat this message with caution even if it appears to pass some email checks, because older legitimate domains can still be utilised to send convincing phishing emails.
- Report: Send the message to your IT provider or security team so they can block the sender and review whether anyone engaged with it.
- Contact Decision1: If you believe your business has been targeted, contact the Decision1 team immediately.
See what a genuine Air New Zealand message looks like, the real sender domain, the real link destination, and where to report a fake.