The days of spotting a scam by its "bad grammar and spelling" are officially over. In 2026, hackers are using AI to create "flawless" phishing attacks that are specifically tailored to New Zealand businesses.
Here is what we are seeing right now in Auckland:
1. Flawless Te Reo Māori. We’ve seen an increase in highly professional-looking emails using Te Reo Māori to build trust. Because the language is perfect, staff are less likely to suspect a scam.
2. AI Voice Cloning. Scammers can now take a 30-second clip of a business owner’s voice from a LinkedIn video or a radio ad and "clone" it. You might get a phone call from "your boss" asking for an urgent wire transfer to a new supplier. If the request is unusual, always hang up and call back on a known number.
3. "Quishing" (QR Code Phishing). Scammers are sticking fake QR codes over real ones in public places or sending them in PDF invoices. Scanning them takes you to a fake login page designed to steal your Microsoft 365 credentials.
4. Deepfake Video Calls. In larger NZ companies, we are starting to see "fake" executives appearing on brief Teams calls to authorise payments.
The best defence is a "Zero Trust" culture. If a request involves money or passwords, verify it through a second channel—like a quick phone call or a face-to-face chat.