Phishing emails & spoof websites

Phishing is when a scammer sends legitimate-looking emails that appear to come from websites or companies, like Trade Me or your bank. The emails try to "phish" for information - like usernames or passwords. They often ask you to confirm your details or click a link and login.

Phishing emails usually link to spoof sites that look identical to the company's site, but are operated by the scammer. When you enter your details the scammer records them and is able to log in as you.

Protecting yourself from phishing
  • Never provide your username or passwords by email. Neither Trade Me nor your bank will ever ask for this information by email.

  • Check the website address you link to. Make sure the site is the site you want to go to. For Trade Me, the address should always start with http://www.trademe.co.nz/... Better yet, find the site by typing the company's URL into your browser's address bar.



  • Upgrade your browser. The latest versions of web browsers include anti-phishing features which help point out whether the site you are visiting is legitimate or not. Download the latest version of Internet Explorer, Firefox or Chrome today.

  • Never enter information into forms within email messages. Before you enter any information check the web address.

  • Check your online bank accounts frequently. Make sure all transactions are valid. If they aren't contact your bank or credit card company immediately.

  • Don't respond to pressure. Phishers use scare tactics, and urgent language to pressure you into submitting confidential data. Don't be fooled.

Beware of scam emails. Emails can be highly targeted and may attempt to solicit money from members by pretending to offer an item for sale that the member has bid on or asked a question about. View an example scam email.

Members most at risk of receiving scam emails have an email address that is easy to guess because it matches their user name (e.g. user name 'Tom', email address tom@hotmail.com). We strongly advise you change your email address on Trade Me so it is different from your user name.

If you receive an email pretending to be from Trade Me, we want to know about it. We can get the spoof site shut down and prevent people from being caught by the scam.

Remember: Contacting buyers or sellers outside of the auction process can be unsafe, and if you receive an offer that seems too good to be true, it probably is!

Please forward any phishing emails or fake Trade Me websites to abuse@trademe.co.nz

For more information see the Internet Safety Group (NetSafe)

Want further assistance?

  • Call us on 0900 87233Available 24/7. Calls cost $1.99 + GST per minute.
  • Email us your questionWe aim to respond within 1-2 days.