Manage My Health Refund? Not today.
A fresh phishing email is impersonating Manage My Health with a fake $75 refund and pushing you to verify your card details.
You could receive an email with the subject line "Refund notification: $75.00 NZD awaiting verification" that appears to be about Manage My Health. It tells you a refund has been issued and urges you to complete a quick verification step so the money can be released to your card. The message is written to feel routine and legitimate, using refund language and a reference number to push you into acting fast.
What gives it away is the sender domain, headinmsvative.com, which has nothing to do with Manage My Health and was only registered days ago. That means it has no established history as a legitimate sender, even though the email may slip past basic checks and look technically clean at first glance. In plain terms, the branding and the real sender do not line up, so you should treat the message as untrusted.
The attacker is trying to get you to click, hand over payment card details, or enter other personal information under the pretense of releasing a refund. If you engage, you could expose financial details, give away identifying information, or be led into a broader account compromise. If this lands in your inbox, do not use the link or reply to the message.
This campaign has already been observed circulating across NZ. Because the sender is using a very new domain and leaning on a trusted health brand, it is designed to catch busy staff off guard, especially anyone handling admin, billing, or patient communications.
Manage My Health has also acknowledged that this email is circulating, and have released their own recommendations here: https://managemyhealth.co.nz/scam-alert-ignore-phishing-emails-pretending-to-be-from-manage-my-health/
The domain the message claims to be from. Fresh registrations and known-bad reputations are the strongest technical tells of a spoofed sender.
Domain registered ~4 days ago
Practical steps you or your IT provider can take to reduce the risk from this kind of threat.
- Check: Look closely at the sender domain before acting on any refund or verification email, especially if it claims to be from a health or finance-related organisation.
- Do not: Click links, reply, or enter card details or personal information from an unsolicited refund message.
- Report: Flag the email to your IT provider or security team so they can block the sender and check whether anyone engaged with it.
- Check: If anyone clicked, review browser history, email activity, and payment card exposure straight away, then reset any affected credentials.
- Contact Decision1: If you believe your business has been targeted, contact the Decision1 team immediately.
See what a genuine Manage My Health message looks like, the real sender domain, the real link destination, and where to report a fake.
The Local Vocal is published by Decision1 IT Solutions. If one of these landed in your inbox, or someone in the team clicked, give us a call.