Retail NZ hit by email scam

Retail NZ has been the victim of scammers who sent emails purporting to be from one of its accounts.

On Wednesday, some people in its contacts list received an email claiming to be from its membership email address, saying that a protected document had been shared and recipients should click a link to access it.

The organisation sent another email later in the day saying that its office accounts had been compromised.

"We have got our IT provider to run through the necessary checks and they have locked down the affected account. They have advised us that no other Retail NZ accounts have been compromised.

"Our IT provider is still investigating the issue, but they have assured us that it was only the membership account that has been affected and that you are safe to interact with all other email addresses from Retail NZ."

Last year, NBR was subject of a similar scam. People received emails claiming to be from journalist Mike McRoberts.

The National Cyber Security Centre said attackers would send spoof emails to collect personal information about recipients. Spoof emails were those that were made to appear as though they came from your account, when the scammers did not actually have access.

A business email compromise, on the other hand, happened when an attacker managed to get access to an organisation's email and could then use contact lists to try to get money or personal details.

Sign up for Money with Susan Edmunds, a weekly newsletter covering all the things that affect how we make and spend money.