New phishing scam comes with warning

The BNZ is warning of a new phishing scam - this time one that actually warns customers about scams.

The email, with the words NetGuard Security Warning in the subject line, is thought to have started circulating at the weekend.

It warns people that there has been a security alert and the bank is taking action because the customer's online account may have been "compromised".

"Sometimes this happens when members respond to tropans [sic], worms and other effected [sic] virus files," reads the hoax email.

"Although we cannot disclose our investigative procedures that led to this conclusion, please know that we took this action in order to maintain the safety of your account."

BNZ spokeswoman Brenda Newth said about 20 customers had contacted the bank about the email, which is believed to carry a trojan virus.

Such viruses can leave spyware on computers, allowing scammers to watch everything that is done on the screen.

The email follows a similar scam two weeks ago when thousands of people were sent emails asking them to confirm their BNZ account details.

The emails were sent to a wide range of people, not just bank customers.

Ms Newth said it was believed the latest scam was being carried out by the same people who distributed the first email.

Several other banks have also been targeted by similar scams this month.

BNZ marketing general manager Shona Bishop said almost every bank in New Zealand and Australia had had to deal with hoax emails.

"We remind our customers not to ignore the advice they are regularly given by the bank to protect their account and password details."

That advice included not providing confidential information, such as access codes or PIN numbers, to anyone, even online sites claiming to be a bank.

She urged people looking for extra security to register for NetGuard, the security feature mentioned in the latest email.

NetGuard is a second form of authentication which prompts customers to enter a one-off security code at the time of logging in to internet banking.

Scammers who glean information through phishing scams cannot use it unless they also have the NetGuard code, which customers carry with them.

IT experts say the best way to avoid being caught in phishing scams is to delete suspicious emails without opening them.

Banks say they would never ask customers to confirm personal details by clicking on a link and entering login details.