Phishing email scam using CAA branding

Published date: 3 December 2020

Beware emails from a hacker pretending to be the CAA!

A hacker or hackers are currently sending out fake emails, allegedly from the CAA. They are using our logo and a similar domain name to ours to phish for information.

Legitimate emails from us will always come from an address ending in @caa.govt.nz or @avsec.govt.nz, or @notifications.caa.govt.nz.

Fake emails have been sent from addresses ending in @caagovt-nz.com(external link), but other fake variants may be used.

We have notified the National Cyber Security Centre, the Department of Internal Affairs and CERT NZ.

If you receive a fake email, do not click any links and do not reply. Please compose a new email, add the fake email as an attachment, and send to cybersecurity@caa.govt.nz.