Reporting a cyber incident

Have you or someone you know been targeted by cyber criminals? Reporting a cyber crime is like reporting any other offence, and there are a number of organisations that you can contact if you believe that you have been a victim of criminal activity online.


CERT NZ was established in April 2017 as your first port of call to report a cyber security problem.  CERT NZ works to support businesses, organisations and individuals who are affected (or may be affected) by cyber security incidents. CERT NZ provide trusted and authoritative information and advice, while also collating a profile of the threat landscape in New Zealand.

New Zealand Police

All crime should be reported to the police including crime committed online. Urgent or life threatening situations should be reported immediately by calling 111. Non-urgent reports can be made in person at your local police station and minor crimes can be reported by telephone, just call your local police station for advice.

The New Zealand Police has a specialist units which help Police Officers investigate online crime such as the Cybercrime Unit who assist with unauthorised access (hacking), fraud and malware and the Online Child Exploitation Across New Zealand (OCEANZ) team. OCEANZ is a specialist team that works as part of an international taskforce, the Virtual Global Taskforce, to protect children from online child abuse.  

Department of Internal Affairs

The Department of Internal Affairs supports the GSMA Spam Reporting Service, a worldwide clearinghouse of messaging threats and misuse which have been reported by mobile users. This enables the Department, through its Electronic Messaging Compliance Unit, to share intelligence about spam texts. Spam is the generic term for the electronic commercial email, fax, and mobile/smart phone text (TXT) and image-based messages you receive without having requested them.  

The Department of Internal Affairs’ Censorship Compliance Unit also receives reports about objectionable material. Objectionable is defined under the Films, Videos and Publications Classification Act 1993 as:  "a publication...(that) describes, depicts or expresses, or otherwise deals with matters such as sex, horror, crime, cruelty or violence in such a manner that the availability of the publication is likely to be injurious to the public good."

Privacy Commissioner

The Privacy Commissioner can investigate complaints about actions that may be a breach of the privacy principles in the Privacy Act.