Phishing scams
Find out what phishing scams are, how to avoid them and what to do if you think you've been scammed.
What is phishing
A phishing scam is an email, call or text from someone pretending to be us. They'll try to trick you into providing your personal details or paying for something that seems legitimate.
If you receive any communication from us that you think is suspicious, contact us. We can confirm whether it's genuine or a scam.
How to spot a phishing scam
Genuine emails from us come from email addresses ending in @at.govt.nz or @e.at.govt.nz. Scam email addresses may look similar, but will not be the same.
The email, phone call or text may:
- be threatening
- contain spelling mistakes or be poorly written
- be missing specific details that you’d expect us to know
- include links that will take you to a fake website — hover your mouse over them to see the address, our website will always contain https://at.govt.nz/.
If you think you've received an email or text that may not be genuine, do not open it or reply to it. Do not open any links you do not trust.
Read further information about how to protect yourself from phishing scams (opens in a new tab).
What to do if you've been scammed
If you think you've been scammed, contact us.
How to keep your MyAT account safe from scams
Keep your MyAT username and password private. You should never give these details out to anyone. This information is personal to you and should be managed as carefully as your bank account information.
Auckland Transport (AT) representatives will never request your MyAT username or password. Do not give this information to anyone claiming to work for AT.
AT does not:
- work with third parties for promotions or discounted travel
- provide discounted travel for anyone representing on social media.
Never give your MyAT or bank account details to anyone claiming to offer discounted travel for AT.
What happens to your MyAT account if you are scammed
If we think there is fraudulent activity on your MyAT account, we will deactivate your account.
The best way to avoid this is to never share your MyAT username or password with anyone.