Fraud Awareness Week
This Fraud Awareness Week we are encouraging Kiwis to take a moment to stop and think ‘is this for real?’ when contacted unexpectedly and asked for personal info.
New Zealand Police's Financial Intelligence Unit estimates New Zealanders lose $20-30 million annually to scams.
HOW TO AVOID A SCAM:
+ A genuine bank or organisation will never contact you to ask for your PIN, password or to move money to another account.
+ Never click on a link in an unexpected email or text – you could be giving access to your personal and financial details.
+ Always question uninvited approaches in case it is a scam. Instead, contact the company directly using a known email or phone number.
+ Don’t assume an email or phone call is authentic – just because someone knows your basic details (name and address, or mother’s maiden name) it doesn’t mean they are genuine.
+ Don’t be rushed into making a decision or financial transaction on the spot – a genuine bank or trusted organisation would never do this.
+ Listen to your instincts – if something feels wrong then it generally is.
If you believe you are the victim of a scam you can contact Police and report the matter via 105.
For more info on how you can prevent yourself, family and friends from being scammed, visit:
Scam Alert: Fake information regarding December Bonuses from MSD
The Ministry of Social Development is reporting that fake information is circulating about new ‘December bonuses’ or ‘benefit increases’
If you get suspicious communication, please contact Netsafe.
What's happening chatgpt response
You’re not imagining it, Brian — the public reporting so far paints a picture of minimal accountability from Stuff, and that’s understandably frustrating for anyone whose data may now be circulating on the dark web.
Here’s what the verified sources actually show.
🧩 What Stuff has said — and what they haven’t
From the reporting:
- Stuff has confirmed the breach and apologised to members.
- They’ve said the breach was “quickly contained” and that services are restored.
- They’ve warned users about scams and phishing attempts.
- They’ve notified the Privacy Commissioner, which is legally required.
- They’ve said they will seek a court injunction to prevent misuse of the stolen data.
But critically:
- They have not accepted responsibility or liability for the breach in any public statement.
- They have not explained how the breach occurred.
- They have not acknowledged any security failings.
- They have not offered support, compensation, or remediation to affected users.
- They have not addressed the seriousness of GPS coordinates and private messages being exposed.
All of this is consistent with what you’re observing — a defensive, minimal, compliance‑only response.
🧠 Why companies often respond this way
Not to excuse it, but to explain the pattern:
- Admitting liability exposes them to lawsuits and regulatory penalties.
- Publicly acknowledging security failures can damage investor and advertiser confidence.
- They may still be in “containment mode” and avoiding statements that could be used against them later.
- Legal teams often control the messaging in these situations, resulting in vague, cautious statements.
⚠️ The gap between the harm and the response
The breach includes names, emails, GPS coordinates, posts, and private messages — extremely sensitive data. Yet the response has been:
- Procedural
- Minimal
- Lacking transparency
- Lacking ownership
That mismatch is exactly why so many people feel Stuff is not stepping up.
If you want, I can help you:
- Draft a formal complaint to Stuff
- Draft a request for clarification under the Privacy Act
- Draft a tenant or neighbour advisory notice
- Summarise the risks in a clear, practical way for people who may not follow the news
Just tell me the tone you want — firm, polite, or strongly worded.
Loading…