When ‘Real’ is ‘Not’
Spoofing is a type of scam where someone pretends to be a trusted person or organisation to trick you into giving away information, money, or access to your accounts. Instead of hacking their way in, scammers rely on making something fake look real, so you don’t think twice.
In New Zealand, this is extremely common. You might get a phone call that looks like it’s from your bank, an email that seems completely legitimate, or a message that appears to come from someone you know. But behind the scenes, the identity has been faked or “spoofed” to gain your trust.
How Does Spoofing Work?
At its core, spoofing is all about impersonation. Scammers manipulate things like phone numbers, email addresses, or website links (such as email headers, caller ID, or IP addresses) so they appear genuine. Because we tend to trust what looks familiar, it’s easy to get caught off guard.
For example, you might receive an email that looks like it’s from your bank asking you to log in. The branding looks right, the wording feels normal, but the link takes you to a fake website designed to steal your details. Or you might get a call that shows your bank’s number, but it’s actually a scammer creating urgency to get you to act quickly.
Why It Works So Well
Spoofing works because it targets human behaviour. If something looks official or urgent, most people respond without thinking too deeply about it. Scammers know this, so they create messages that feel familiar and time-sensitive, pushing you to act before you have a chance to question it.
How to Protect Yourself
The most important thing to remember is this: don’t trust something just because it looks real. If you get an unexpected message or call, take a moment to pause and verify it. The key point here is that it is unexpected.
Instead of clicking links, go directly to the official website. If you’re unsure about a call, hang up and contact the organisation using a number you trust – legitimate organisations would be understanding of this. Be especially cautious if you’re being asked for passwords, codes, or payments.
Adding extra security like strong, unique passwords and multi-factor authentication also helps protect you if your details are ever compromised.
Staying One Step Ahead
Spoofing scams are getting more convincing, but the best defence is still awareness. Taking a few extra seconds to double-check something can make all the difference. If something feels off, it probably is, and it’s always worth trusting that instinct.