---
title: NZ Lost $12.4M to Email Scams in Q3 2025 | NCSC Report
description: New Zealand cyber losses doubled to $12.4M last quarter. Most came through email. Here's what happened, why it's getting worse, & what you can do about it.
image: https://blog.nsp.co.nz/hubfs/NCSC%20Q3%20Insights.webp
---
[](https://nsp.co.nz/)
- [Home](https://nsp.co.nz/)
- Solution
##### [Cybersecurity](https://nsp.co.nz/cybersecurity/)
- [Incident Response](https://nsp.co.nz/cybersecurity/incident-response/)
- [Penetration testing (pen tests)](https://nsp.co.nz/cybersecurity/penetration-testing/)
- [Security Assessments](https://nsp.co.nz/cybersecurity/cyber-security-assessments/)
- [Secure Email](https://nsp.co.nz/cybersecurity/secure-email-services/)
- [Security Awareness](https://nsp.co.nz/cybersecurity/cyber-security-awareness-training/)
- [Security Operations Centre](https://nsp.co.nz/cybersecurity/security-operations-centre/)
- [VCISO Strategy Services](https://nsp.co.nz/cybersecurity/vciso-strategy-services/)
- [Cyber Insurance Assessments](https://nsp.co.nz/cybersecurity/cyber-insurance-assessments/)
- [Vulnerability Management](https://nsp.co.nz/cybersecurity/vulnerability-management/)
- [Ransomware Protection & Recovery](https://nsp.co.nz/cybersecurity/ransomware-protection-and-recovery/)
- [Tabletop Exercise](https://nsp.co.nz/tabletop-exercise/)
##### [Modern Workplace](https://nsp.co.nz/modern-workplace/)
- [AI Governance & Compliance](https://nsp.co.nz/modern-workplace/ai-governance-compliance/)
- [Remote Workforce](https://nsp.co.nz/modern-workplace/remote-workforce/)
- [Microsoft Co-Pilot](https://nsp.co.nz/modern-workplace/microsoft-365-co-pilot/)
- [Consultation](https://nsp.co.nz/modern-workplace/consultation/)
- [Productivity & Innovation](https://nsp.co.nz/modern-workplace/productivity-and-innovation/)
- [Business Intelligence](https://nsp.co.nz/modern-workplace/business-intelligence/)
- [Security](https://nsp.co.nz/modern-workplace/security/)
##### [Cloud](https://nsp.co.nz/cloud/)
- [Managed Services](https://nsp.co.nz/cloud/managed-services/)
- [Migration](https://nsp.co.nz/cloud/migration/)
- [Storage](https://nsp.co.nz/cloud/storage/)
- [PBX/Voice](https://nsp.co.nz/cloud/pbx-voice/)
- [Security](https://nsp.co.nz/cloud/security/)
##### [Managed Services](https://nsp.co.nz/managed-services/)
- [Managed IT](https://nsp.co.nz/cloud/managed-it/)
- [Helpdesk](https://nsp.co.nz/managed-services/helpdesk/)
- [Business Intelligence](https://nsp.co.nz/managed-services/business-intelligence/)
- [Business Innovation](https://nsp.co.nz/managed-services/business-innovation/)
- [Managed Network](https://nsp.co.nz/managed-services/managed-network/)
##### [Network Performance](https://nsp.co.nz/network-performance/)
- [Firewall as a Service](https://nsp.co.nz/network-performance/firewall-as-a-service/)
- [Network Intelligence](https://nsp.co.nz/network-performance/network-intelligence/)
- [Network Roadmaps](https://nsp.co.nz/network-performance/network-roadmaps/)
##### [Backup](https://nsp.co.nz/backup/)
- [Data Backup](https://nsp.co.nz/backup/data-backup/)
- [Data Consultancy](https://nsp.co.nz/backup/data-consultancy/)
- [Data Retention Solutions](https://nsp.co.nz/backup/data-retention-solutions/)
- [Cloud Storage](https://nsp.co.nz/backup/cloud-storage/)
- [Ransomware Protection & Recovery](https://nsp.co.nz/backup/ransomware-protection-and-recovery/)
##### [Professional Services](https://nsp.co.nz/professional-services/)
- [Services](https://nsp.co.nz/professional-services/services/)
- [Consultancy](https://nsp.co.nz/professional-services/consultancy/)
- [Project Delivery](https://nsp.co.nz/professional-services/project-delivery/)
##### [Cybersecurity](https://nsp.co.nz/cybersecurity/)
- [Incident Response](https://nsp.co.nz/cybersecurity/incident-response/)
- [Penetration testing (pen tests)](https://nsp.co.nz/cybersecurity/penetration-testing/)
- [Security Assessments](https://nsp.co.nz/cybersecurity/cyber-security-assessments/)
- [Secure Email](https://nsp.co.nz/cybersecurity/secure-email-services/)
- [Security Awareness](https://nsp.co.nz/cybersecurity/cyber-security-awareness-training/)
- [Security Operations Centre](https://nsp.co.nz/cybersecurity/security-operations-centre/)
- [VCISO Strategy Services](https://nsp.co.nz/cybersecurity/vciso-strategy-services/)
- [Cyber Insurance Assessments](https://nsp.co.nz/cybersecurity/cyber-insurance-assessments/)
- [Vulnerability Management](https://nsp.co.nz/cybersecurity/vulnerability-management/)
- [Ransomware Protection & Recovery](https://nsp.co.nz/cybersecurity/ransomware-protection-and-recovery/)
- [Tabletop Exercise](https://nsp.co.nz/tabletop-exercise/)
##### [Modern Workplace](https://nsp.co.nz/modern-workplace/)
- [AI Governance & Compliance](https://nsp.co.nz/modern-workplace/ai-governance-compliance/)
- [Remote Workforce](https://nsp.co.nz/modern-workplace/remote-workforce/)
- [Microsoft Co-Pilot](https://nsp.co.nz/modern-workplace/microsoft-365-co-pilot/)
- [Consultation](https://nsp.co.nz/modern-workplace/consultation/)
- [Productivity & Innovation](https://nsp.co.nz/modern-workplace/productivity-and-innovation/)
- [Business Intelligence](https://nsp.co.nz/modern-workplace/business-intelligence/)
- [Security](https://nsp.co.nz/modern-workplace/security/)
##### [Cloud](https://nsp.co.nz/cloud/)
- [Managed Services](https://nsp.co.nz/cloud/managed-services/)
- [Migration](https://nsp.co.nz/cloud/migration/)
- [Storage](https://nsp.co.nz/cloud/storage/)
- [PBX/Voice](https://nsp.co.nz/cloud/pbx-voice/)
- [Security](https://nsp.co.nz/cloud/security/)
##### [Managed Services](https://nsp.co.nz/managed-services/)
- [Managed IT](https://nsp.co.nz/cloud/managed-it/)
- [Helpdesk](https://nsp.co.nz/managed-services/helpdesk/)
- [Business Intelligence](https://nsp.co.nz/managed-services/business-intelligence/)
- [Business Innovation](https://nsp.co.nz/managed-services/business-innovation/)
- [Managed Network](https://nsp.co.nz/managed-services/managed-network/)
##### [Network Performance](https://nsp.co.nz/network-performance/)
- [Firewall as a Service](https://nsp.co.nz/network-performance/firewall-as-a-service/)
- [Network Intelligence](https://nsp.co.nz/network-performance/network-intelligence/)
- [Network Roadmaps](https://nsp.co.nz/network-performance/network-roadmaps/)
##### [Backup](https://nsp.co.nz/backup/)
- [Data Backup](https://nsp.co.nz/backup/data-backup/)
- [Data Consultancy](https://nsp.co.nz/backup/data-consultancy/)
- [Data Retention Solutions](https://nsp.co.nz/backup/data-retention-solutions/)
- [Cloud Storage](https://nsp.co.nz/backup/cloud-storage/)
- [Ransomware Protection & Recovery](https://nsp.co.nz/backup/ransomware-protection-and-recovery/)
##### [Professional Services](https://nsp.co.nz/professional-services/)
- [Services](https://nsp.co.nz/professional-services/services/)
- [Consultancy](https://nsp.co.nz/professional-services/consultancy/)
- [Project Delivery](https://nsp.co.nz/professional-services/project-delivery/)
- [About us](https://nsp.co.nz/about-us/)
- Resources
- [Blog](https://blog.nsp.co.nz/)
- [Webinar](https://nsp.co.nz/webinar/)
- [Blog](https://blog.nsp.co.nz/)
- [Webinar](https://nsp.co.nz/webinar/)
- [Contact us](https://nsp.co.nz/contact-us/)
[0508 010 101](tel:0508%20010%20101)[hello@nsp.co.nz](mailto:hello@nsp.co.nz)
- Home
- Blogs
- NZ Lost $12.4M to Email Scams in Q3 2025 | NCSC...
### NZ Lost $12.4M to Email Scams in Q3 2025 | NCSC Report
Dayna-Jean Broeders
17 December 2025
5 min
Read
# Q3 2025 Cyber Reality Check: When Email Becomes a $12 Million Problem
**Last quarter, New Zealand businesses lost $12.4 million to cybercrime. That's not a typo and it's not even the scary part.**
The scary part? Most of it happened through something we all use every single day: email.
## The Numbers That Should Concern You
Between July and September 2025, the NCSC recorded financial losses of $12.4 million, a 118% jump from the previous quarter's $5.7 million. Before you think "that's just a few big companies," let me stop you. They received 1,249 incident reports from individuals, businesses, and organisations across the country.
This isn't happening to other people. It's happening to people like you.
## How It Actually Happens
Here's the pattern we're seeing over and over:
Someone gets access to a legitimate email account. Not a fake one, a real account that people trust. Then they wait, they watch, they learn how your business works, who pays what, and when invoices are due.
Then they strike. A fake invoice goes out, payment details get changed and money gets redirected to their account.
Mike Jagusch from the NCSC put it plainly: attackers gain access to email accounts and send fake invoices or change payment details to redirect payments.
Your finance team gets an email from what looks like your supplier, same email address, same tone, same format, except the bank account number is different and by the time anyone notices, the money's gone.
## The "Too Small to Target" Myth Dies Here
We hear this all the time: "We're not big enough to be a target."
Let us be blunt: that's wrong and it's expensive to be wrong about.
The NCSC triaged 110 incidents as potentially nationally significant this quarter, a 96% increase from Q2's 56 incidents. These weren't all massive corporates. Some were smaller organisations that happened to be in the wrong place at the wrong time.
The increase? Unauthorised access to email accounts and a general uptick in activity from financially motivated criminals.
Translation: They're getting better at this and they don't care how big you are.
## The Real Problem: Crime Just Got Easier
Remember when you needed actual technical skills to be a cybercriminal? Yeah, those days are over.
Criminal groups now offer malware-as-a-service platforms that let people with no technical skills deploy malicious software. Think of it like Uber for cybercrime, you don't need to own a car to drive for Uber, you don't need to code malware to deploy it anymore.
This isn't good news. It means the pool of potential attackers just got exponentially larger.
## What's Actually Getting Hit
Let's look at what people reported:
| **Incident Type** | **Reports** | **What It Means** |
| --- | --- | --- |
| Scams & Fraud | 446 reports | The most common threat. Over a third of all incidents. |
| Phishing & Credential Harvesting | 355 reports | They're after your passwords and access. |
| Employment Scams | 50% increase | Fake job offers, "remote work" cons, bogus partnerships. |
| Business Email Compromise | Multiple high-value cases | The big money maker. Your email is the target. |
Employment and business opportunity scams saw a 50% increase, often promising lucrative jobs, remote work, or investment partnerships.
## What You Should Actually Do About This
I'm not going to give you a 47-point checklist. Here's what matters:
**1. Verify payment changes in person or by phone** If someone emails you new bank details, pick up the phone. Call the number you already have on file, not the one in the email. Yes, even if it's your regular supplier.
**2. Multi-factor authentication on email accounts** This is non-negotiable. If someone gets your password but can't get past the second authentication step, you just stopped a $12 million problem.
**3. Train your team to spot the weird** That email from your CEO asking for an urgent payment at 7pm on a Friday? That's weird. Weird deserves a phone call to verify.
**4. Assume compromise, not security** Stop asking "Could we get hacked?" Start asking "When we get compromised, how quickly will we know?"
**5. Back up your data properly** When (not if) something goes wrong, backups are the difference between a bad day and a catastrophic month.
## The Bottom Line
The cyber threat environment is evolving quickly, and criminals who lack advanced technical skills now have access to sophisticated tools.
This quarter's numbers aren't an anomaly. They're a trend and trends don't reverse themselves, they accelerate until someone does something about it.
You can prepare for it.
The $12.4 million question is: will you?
**Need help figuring out where your gaps are?** We've been handling this stuff since cyber threats were just nerds in basements. [Get in touch](https://nsp.co.nz/contact-us/) and we'll show you where you're actually vulnerable, not where a checklist says you should be.
**Sources:**
- [NCSC Q3 2025 Cyber Security Insights Report](https://www.ncsc.govt.nz/insights-and-research/insights-reports/quarter-three-cyber-security-insights-2025/)
- [National Cyber Security Centre - Quarterly Insights](https://www.ncsc.govt.nz/insights-and-research/insights-reports/)
*This article is based on data from the National Cyber Security Centre's Q3 2025 Cyber Security Insights report, covering incidents reported between 1 July and 30 September 2025.*
I am ready to protect my business
#### CATEGORY
- [Cybersecurity (95)](https://blog.nsp.co.nz/tag/cybersecurity)
- [Digital transformation (37)](https://blog.nsp.co.nz/tag/digital-transformation)
- [Managed services (33)](https://blog.nsp.co.nz/tag/managed-services)
- [Awareness and education (23)](https://blog.nsp.co.nz/tag/awareness-and-education)
- [Cloud (23)](https://blog.nsp.co.nz/tag/cloud)
- [AI (20)](https://blog.nsp.co.nz/tag/ai)
- [Breach (17)](https://blog.nsp.co.nz/tag/breach)
- [IT Risk (17)](https://blog.nsp.co.nz/tag/it-risk)
- [modern workplace (12)](https://blog.nsp.co.nz/tag/modern-workplace)
- [Collaboration (11)](https://blog.nsp.co.nz/tag/collaboration)
- [Cyber Smart Week (11)](https://blog.nsp.co.nz/tag/cyber-smart-week)
- [Business strategy (9)](https://blog.nsp.co.nz/tag/business-strategy)
- [Culture (9)](https://blog.nsp.co.nz/tag/culture)
- [microsoft (9)](https://blog.nsp.co.nz/tag/microsoft)
- [Backup (8)](https://blog.nsp.co.nz/tag/backup)
- [Remote Workers (8)](https://blog.nsp.co.nz/tag/remote-workers)
- [Managed Detection & Response (MDR) (7)](https://blog.nsp.co.nz/tag/managed-detection-response-mdr)
- [copilot (7)](https://blog.nsp.co.nz/tag/copilot)
- [Cyber Insurance (6)](https://blog.nsp.co.nz/tag/cyber-insurance)
- [Future of work (6)](https://blog.nsp.co.nz/tag/future-of-work)
- [network performance (6)](https://blog.nsp.co.nz/tag/network-performance)
- [Vulnerability Assessment (5)](https://blog.nsp.co.nz/tag/vulnerability-assessment)
- [Microsoft Teams (4)](https://blog.nsp.co.nz/tag/microsoft-teams)
- [vCISO (4)](https://blog.nsp.co.nz/tag/vciso)
- [0365 (3)](https://blog.nsp.co.nz/tag/0365)
- [Governance (3)](https://blog.nsp.co.nz/tag/governance)
- [IT budget (3)](https://blog.nsp.co.nz/tag/it-budget)
- [Legal Industry (3)](https://blog.nsp.co.nz/tag/legal-industry)
- [Best Practice (2)](https://blog.nsp.co.nz/tag/best-practice)
- [Construction Industry (2)](https://blog.nsp.co.nz/tag/construction-industry)
- [Penetration Testing (2)](https://blog.nsp.co.nz/tag/penetration-testing)
- [Tabletop Exercise (2)](https://blog.nsp.co.nz/tag/tabletop-exercise)
- [health IT consultant (2)](https://blog.nsp.co.nz/tag/health-it-consultant)
- [Healthcare (1)](https://blog.nsp.co.nz/tag/healthcare)
see all
#### RECENT POST
[](https://blog.nsp.co.nz/who-is-watching-your-cybersecurity-nz-mdr)
[Who Is Watching Your Cybersecurity? | NSP](https://blog.nsp.co.nz/who-is-watching-your-cybersecurity-nz-mdr)
20 Sept 2026
[.webp)](https://blog.nsp.co.nz/nz-cyber-breaches-september-2026-what-to-do-next)
[3 NZ Cyber Breaches in 1 Week: What Every NZ Business Should Do | NSP](https://blog.nsp.co.nz/nz-cyber-breaches-september-2026-what-to-do-next)
14 Sept 2026
[](https://blog.nsp.co.nz/microsoft-365-security-drift-nz-business)
[Microsoft 365 Security Drift: What NZ Businesses Should Know | NS](https://blog.nsp.co.nz/microsoft-365-security-drift-nz-business)
13 Sept 2026
[](https://blog.nsp.co.nz/copilot-data-access-permissions-nz-business)
[What Can Your Staff See? The AI Question for NZ Businesses | NSP](https://blog.nsp.co.nz/copilot-data-access-permissions-nz-business)
08 Sept 2026
### Let’s stay in touch!
Enter your details below to stay up-to-date with the latest IT solutions and security measures.
[](https://nsp.co.nz/)
A trusted technology partner for NZ SMEs. Building secure, scalable technology solutions for more than 20 years
##### Useful Links
- [About us](https://nsp.co.nz/about-us/)
- [Procurement](https://savvi.net.nz/)
- [Cybersecurity](https://nsp.co.nz/cybersecurity/)
- [Managed Services](https://nsp.co.nz/managed-services/)
- [Cloud](https://nsp.co.nz/cloud/)
- [Contact us](https://nsp.co.nz/contact-us/)
##### Contact
Unit 1, 13 Farnham Street Parnell, Auckland 1052, NZ
- [0508 010 101](tele:0508%20010%20101)
- [info@nsp.co.nz](mailto:info@nsp.co.nz)
-
-
-
Copyright © 2026 NSP - All rights reserved
- [Terms & Conditions](https://blog.nsp.co.nz/hubfs/NSP%20Terms%20and%20conditions/NSP%20Terms%20%26%20Conditions%202021.pdf)
- [Privacy Policy](https://nsp.co.nz/privacy-policy/)
```json
{
"@context" : "https://schema.org",
"@type" : "BlogPosting",
"author" : {
"@type" : "Person",
"name" : "Dayna-Jean Broeders",
"url" : "https://blog.nsp.co.nz/author/dayna-jean-broeders"
},
"dateModified" : "2025-12-17T23:09:54.376Z",
"datePublished" : "2025-12-17T23:02:15.000Z",
"headline" : "NZ Lost $12.4M to Email Scams in Q3 2025 | NCSC Report",
"image" : [ "https://blog.nsp.co.nz/hubfs/NCSC%20Q3%20Insights.webp" ],
"mainEntityOfPage" : {
"@id" : "https://blog.nsp.co.nz/nz-lost-12.4m-to-email-scams-in-q3-2025-ncsc-report",
"@type" : "WebPage"
},
"publisher" : {
"@type" : "Organization",
"logo" : {
"@type" : "ImageObject",
"url" : "https://blog.nsp.co.nz/hubfs/NSP_Logo_Primary%20logo_CMYK_1.png"
},
"name" : "Network Service Providers Ltd"
}
}
```