Recognising suspicious messages and knowing what to do with them is a good first step to cyber security awareness. We’ve created this series of videos to help you and your people learn about how to spot suspicious messages and what to do with them.

Help your people to stop, think and act.

By keeping our patient and organisation’s information safe, we can protect everybody.

Stop. Think. Act.

It’s easy to click on links in text scams when we are busy or distracted. If you accidentally do, your device could end up infected with harmful software and your personal details could be used to infect other devices.

Look for the warning signs and take a second to think before acting. Ask yourself:

  • Am I expecting this?
  • Why do I need to click a link?
  • Does this feel right to me?
Video transcript

It’s easy to click on links in text scams when we’re busy or distracted.

Scams can contain links that take you to fake websites and urge you to enter personal information or update your phone software.

If you enter this personal info into a fake website, your device might get infected with harmful software, and your personal details could be used to infect the rest of our IT network.

You also risk information belonging to you, our organisation and our patients being stolen.

This is when you need to stop.

Look for the warning signs and take a second to think – Am I expecting this?

Why do I need to click a link to take action?

Does this feel right to me?

Is this offer too good to be true?

Always log in to make inquiries and payments from the organisation’s website or app.

And contact the organisation directly to confirm the message is real.

The quicker we report, the quicker scams can be shut down.

Forward suspicious text messages to the Department of internal Affairs (DIA) using 7726.

Then delete the message and block the sender’s number.

By keeping our patient and organisation information safe, we protect everybody.

Ka pai.

While links in messages may be normal, not all links can be trusted.

Malicious websites often hide behind links in the hope they won’t be checked.

Next time you get a message with a link – stop.

Think whether the message makes sense to you, hover over the link address to check it’s what you’d expect to see.

Then act, knowing you’ve done your safety checks before clicking.

Think safe. Act quickly. Get help.

We handle a lot of sensitive information. Our patients, whānau and kaimahi (employees), trust us to keep their information safe. Learn more about phishing emails and how to recognise suspicious messages.

Video transcript

Think safe. Act quickly. Get help.

In the mahi (work) we do every day and night, we handle a lot of sensitive information.

Our patients, whānau and kaimahi (that’s our employees) trust we’ll respect their privacy and keep their information safe.

Phishing is when someone sends you a fake email often looking like it’s from someone you know, or a business you know and trust.

The email is meant to trick you into clicking links or opening attachments which are used to steal information or hack your computer.

In this example, them email appears to be from someone you know.

Asking you to click a link to change or keep your password the same.

A click on the link may direct you to a fake web page asking you to enter your login details where they could be stolen.

Ask yourself, why is a colleague asking me to do something about my Te Whatu Ora password on an email?

If you receive an unexpected email asking you to reset your password, please pause and…

Think safe. Act quickly. Get help. Contact your local helpdesk for immediate support.

Video transcript

Kia tere te whakamanawanui. Tono tautoko

I roto I mātou mahi o ia rā, o ia pō, he nui ngā pārongo matatapu ka tae mai ki a mātou.

ko ā mātou tūroro, ō mātou whānau ā mātou kaimahi hoki e whakapono mai ana ka whakautetia ō rātou matataputanga ā, ka pupuri haumarutia ai a rātou pārongo.

Ko te tikanga o tēnei mea te hītinitanga, ina tuku atu ai tētahi tangata he īmēra rūkaha ki a koe, ā ko te āhua nei nā tētahi tangata kē e mōhio ana koe, he pakihi rānei e mōhiotia ana, e whakaponotia ana rānei e koe.

Ko te tikanga o te īmēra he mahi tinihanga ewhakapōhēhētia ai koe kia pāwhiri atu koe ki ngā hononga, te huaki rānei I ngā tūhononga, ā ko te mahi o ēnei he tāhae pārongo, he mūrere rānei I tō rorohiko.

Hei tēnei tauira, ko te āhua nei ka puta ake te īmēra ānō nei nā tētahi tangata e mōhiotia ana e koe.

E tono ana ki a koe kia pāwhiri ki tūhonotanga kia panoni, kia noho ōrite tonu rānei tō kupu huna.

Mā te pāwhiri noa pea e ārahina atu koe, ki tētahi paetukutuku rūkaha e tono ana ki a koe kia whakauruhia atu āu taipitopito ohauru, I konei e taea ai te tāhaetia.

pātai ki a koe anō, he aha rā e tonoa ana ōku e tētahi hoa o ōku kaimahi mō tāku kupu huna mō Te Whatu Ora mā te tuku īmēra mai?

Ki te tae ake he īmēra ohorerer ki a koe e tono ana kia whakahōungia tō kupu huna, tēnā, e tū, whakaaro haumarutia ai,

Kia tere te whakamanawanui. Tono tautoko
Whakapā atu ki tō kaitautoko rorohiko e whiwhi tautoko inamata.

The tale of the three shings

Received a surprise email saying you’ve won a competition? Someone asking for your bank details out of the blue?

Cyber criminals send scams in many different ways, including by email (phishing), text (smishing) or calling (vishing), often collectively referred to as “the three shings”.

Do you know what to do if you suspect a scam?

The best action is to report the email, delete the text message or hang up on the suspicious caller.

Don’t take any chances. Whether it’s email, text, or calls, staying vigilant keeps our information safe.

If you do think you need to share any work or personal information, always verify that whoever is asking is legitimate.

Video transcript

Person 1:
Hey, I got this weird email today claiming I won a competition I never entered. It’s asking for my bank details.

Person 2:
Yikes, sounds like a phishing attempt. Did you click any links?

Person 1:
No way! I didn’t recognise the sender, so I reported it as phishing, using the PAB button.

Person 2:
Good call. Always best to be cautious.

Person 1:
Speaking of which, I got a text from an unknown number asking for my personal info so that a parcel I hadn’t ordered could be delivered.

Person 2:
Definitely sounds phishy. What did you do?

Person 1:
I blocked the number and deleted the message. Didn’t want to take any chances.

Person 2:
Smart move. Better safe than sorry. I got a call yesterday from someone claiming to be from my bank, asking for my PIN to ‘secure my account’.

Person 1:
That’s scary. What did you do?

Person 2:
Hung up immediately and called my bank’s official number from their website. They confirmed it was a scam and advised me to ignore calls like this in the future.

Person 1:
Good thinking. It’s crucial to verify before sharing any personal info.

Person 2: Phishing Smishing Vishing
Couldn’t agree more. Always double-check and report anything suspicious.

Person 1:
Absolutely. Whether it’s email, text or calls, staying vigilant keeps our information safe.

Together:
Here’s to keeping alert to the three shings!

Check with your organisation about how you report phishing, smishing and vishing as you may have a different process than shared in this video.

Watch next