Nobody loses money to an obvious scam. They lose it to a friendly stranger who was patient for six weeks, to a dashboard showing profits that felt real, or to a caller who knew their bank's hold music. The pattern is what gives it away, not the packaging — and the patterns hitting New Zealand are consistent enough to learn.
The scale of the problem here
Investment scams — a category dominated by fake cryptocurrency offers and quick-profit schemes — accounted for the large majority of total financial losses. This is not a fringe problem affecting the unusually gullible. It is the single largest financial crime category in the country, and the people it takes are ordinary.
The five patterns that account for most losses
1. The relationship that becomes an investment
A conversation begins on a dating app, a language exchange, a professional network or a group chat. It is warm, unhurried and entirely unrelated to money for weeks. Eventually the other person mentions a trading platform they use, does not push, and lets you ask. The platform looks professional, the first small withdrawal works perfectly, and the balance grows.
The withdrawal that works is the mechanism. It converts scepticism into trust at precisely the moment a larger deposit is being considered. When you eventually try to withdraw a meaningful amount, there is a tax, a fee, a compliance hold — always one more payment.
2. The platform that does not exist
Slick site, real-time charts, an app, testimonials, an address in a recognisable financial district. None of it is connected to any market. Deposits go into a wallet controlled by the operator and the balance shown to you is a number in a database. These clone the appearance of legitimate brands closely enough that domain names differ by a character.
This is what the FSP Register and the FMA warning list are for. The FMA has published warnings naming hundreds of websites tied to single schemes — one 2026 warning listed 813 websites and 30 entities connected to the same investment scam.
3. Recruitment through a community you trust
In February 2026, the FMA joined regulators in Tonga, Australia, the United Kingdom and the United States in warning about a Ponzi-style scheme that had spread through Tongan family networks, church groups and social media, using multi-level marketing recruitment.
This pattern is particularly effective in New Zealand because it arrives from someone you already trust, who genuinely believes it themselves, and who may have been paid an early return specifically so they would recruit others. Questioning it feels like questioning the person rather than the scheme. If an investment reaches you through a community group and involves recruiting others, that structure is the warning, regardless of who is offering it.
4. The caller who needs you to use an ATM
Someone calls claiming to be your bank's fraud team, the Police, Inland Revenue or a technology support desk. Your account is compromised, there is a warrant, there is a tax debt. You need to move money to a "safe" account or resolve it immediately — by withdrawing cash and depositing it into a specific crypto machine using a QR code they supply.
The rule that defeats this entirely
No New Zealand bank, government agency, utility or law enforcement body will ever ask you to resolve anything by putting cash into a cryptocurrency machine. Not the IRD, not the Police, not your bank. If someone on a phone is directing you to a machine, the call is a scam. Hang up and ring the organisation back on a number you looked up yourself.
5. The recovery scam
Months after a loss, a message arrives. Funds have been traced. A specialist firm, a blockchain forensics team, a regulator, a class action. They need an upfront fee, or a tax payment, or access to your wallet to "verify ownership".
The FMA has issued specific warnings about cryptocurrency recovery scams targeting people who have already been defrauded. Victim lists are traded among fraudsters precisely because someone who has lost money once is motivated, and because the emotional appeal of getting it back overrides caution. Nobody who contacts you unprompted can recover stolen crypto.
How to check a platform in two minutes
- Search the Financial Service Providers Register for the exact legal entity name — not the brand. fsp-register.companiesoffice.govt.nz
- Search the FMA warning list for the brand, the entity, and any near-identical names. fma.govt.nz warnings
- Check the domain age with a public WHOIS lookup. A platform claiming a decade of history on a six-month-old domain is lying.
- Find the withdrawal terms before depositing. Vague or missing withdrawal documentation is the strongest single signal.
- Search the name plus the word "scam" and read past the first page of results, which is often seeded.
Signals that should stop you dead
- Any guaranteed or fixed return. Cryptoassets do not produce guaranteed returns and claiming otherwise is a legal problem for a legitimate firm.
- Pressure to act before a deadline, a bonus expiry or a "closing allocation".
- A fee required to release your own withdrawal. Legitimate platforms deduct fees; they do not demand new deposits.
- Anyone asking for your recovery phrase, private key, or remote access to your device.
- Payment to a personal bank account or an individual's wallet rather than a corporate account.
- A structure that pays you for recruiting others.
- An adviser who found you rather than the other way round.
If it has already happened
Act quickly and in this order. Contact your bank immediately — if a transfer is very recent there is occasionally something they can do. Report to the Police through 105 and to Netsafe, which coordinates scam response in New Zealand. Report the entity to the FMA even if you expect nothing back, because that is how warning lists get built for the next person.
If a registered New Zealand provider was involved, escalate through its complaints process and then to its dispute resolution scheme, which you can identify on the FSP Register. Keep every message, screenshot, transaction ID and wallet address in one place.
And then expect the recovery approach, because it will come. Anyone who contacts you about getting the money back is running the second half of the same operation.
The uncomfortable summary
Most people who lose money to crypto scams in New Zealand were not reckless. They were patient with someone who was patient with them, or they trusted a person their community trusted, or they answered a phone call on a bad day. The defence is not intelligence; it is a small number of mechanical habits — check the register, never pay a fee to withdraw, never share a recovery phrase, and treat any unsolicited approach about money as hostile until proven otherwise.