Back to The Local Vocal
The Local VocalHigh
PhishingKiwibank
Email
High risk PhishingEncountered ViaEMAIL 14 September 2026
RegionOtagoNationwide

Fake Kiwibank email wants your details

A phishing email posing as Kiwibank is circulating across NZ, using the subject "KIWIBANK SERVICE UPDATE" to pressure you into confirming your details.

You could receive a plain text email with the subject "KIWIBANK SERVICE UPDATE", appearing to come from a sender tied to weaverstextilemillsltd.com while pretending to be Kiwibank Customer Service. It claims there are new online banking authentication procedures and pushes you to confirm your details. The message is stripped back and simple, which can make it look routine at a glance.

What gives it away is that the sending domain is unrelated to Kiwibank and has only a short history as a sender, giving it little standing as a legitimate banking contact. The email systems checking it could not properly verify who really sent it, which means the message failed the usual trust checks genuine organisations rely on. If you hit reply, your response may not go where the apparent sender suggests, which is another sign you are being steered away from the real organisation.

This is an attempt to steal your banking credentials or other sensitive account information. If you click through or reply with details, attackers may use that information to access accounts, commit fraud, or target your business with further impersonation. Treat any request to confirm banking details by email as suspicious unless you have verified it directly with Kiwibank through official channels.

Email authorisation
SPF
None
DKIM
None
DMARC
Fail
COMPAUTH
Fail
Sender Domain Intelligence

The domain the message claims to be from. Fresh registrations and known-bad reputations are the strongest technical tells of a spoofed sender.

Sender domainweaverstextilemillsltd.com
Age306 daysEstablished
Registered11/11/2025
ReputationCleanscore 0
Email Sample
Source
Decision1
Recommended Action

Practical steps you or your IT provider can take to reduce the risk from this kind of threat.

  • Check: Look closely at the sender domain before acting, especially if the email claims to be from your bank but comes from an unrelated organisation.
  • Do not: Click links, reply, or enter any banking or business details from an email like this.
  • Verify: Contact Kiwibank through its official website or phone number if you are unsure whether a request is genuine.
  • Report: Send suspicious banking emails to your IT provider or security team for review and remove them from inboxes once checked.
  • Contact Decision1: If you believe your business has been targeted, contact the Decision1 team immediately.
Kiwibank logo
Is it real?
Got an email from Kiwibank?

See what a genuine Kiwibank message looks like, the real sender domain, the real link destination, and where to report a fake.

Check the real thing