NCSC · Netsafe · your bank

The scam site will be gone before anyone investigates.

The National Cyber Security Centre recorded NZ$5.6 million in direct financial losses in the first quarter of 2026, up from NZ$3.2 million the previous quarter, a 76 per cent rise on the NCSC own figures. The NCSC noted the quarterly total still sat below the average loss over the last two years, which is worth saying plainly. Separately, the security vendor Gen reported an 87 per cent rise in e-shop scams in New Zealand across the first half of 2026, which is vendor telemetry rather than an official statistic. What almost nobody still has by the time a bank asks is the thing itself: the shop, the dashboard, the listing, the promise.

Capture the site now How it works

Works on Chrome and Edge. From $4.99 (about NZ$9) as a one-off, or a 7-day trial that requires a credit card.

Illustrative example. Fictional site, fictional balance, invented domain.

Every scam recovery path in New Zealand runs on evidence of what the scammer actually showed you. Your bank wants to see the payment instruction and what induced it. The National Cyber Security Centre, which now takes the reporting role CERT NZ used to hold, records incidents and losses and publishes them quarterly. Netsafe handles online harm and scam reports and can help with takedowns. Police take the criminal side. All of them are working from your description unless you preserved the page. Scams and fraud are the most-reported category of incident the NCSC receives, with NZ$5.6 million in direct losses in the first quarter of 2026, up from NZ$3.2 million the previous quarter though still below the average loss over the last two years. Vendor telemetry from Gen separately reports sharp rises in e-shop scams, malicious remote access and tech support scams over the first half of 2026. ProofSnap captures the page in about forty seconds and produces a package with the full-page screenshot, the saved source, the URL, the UTC capture time, a SHA-256 hash of every file, an RSA-4096 signature and a Bitcoin blockchain timestamp. From $4.99 (about NZ$9) as a one-off purchase, with no subscription.

By Radim Motycka, Founder and Lead Engineer, ProofSnap · · Independently verifiable via Trust Verifier

Why victims lose twice

By the time you report it, there is nothing left to show

Scam infrastructure is disposable by design. Domains are burned, dashboards go dark and accounts are deleted the moment the money moves.

The fake dashboard disappears

Investment scams work because the portal shows your balance growing. That portal is the single most persuasive piece of evidence in the whole matter, and it is also the first thing switched off. Capture it while you can still log in.

The chat and the promises go with it

WhatsApp, Messenger and Telegram threads are deleted for both sides. The guarantee, the account number and the pressure to send more all live in those messages, and none of it survives a deleted account.

Banks ask what induced the payment

A transaction record shows money leaving. It does not show the invoice with swapped account details or the shop that promised delivery. Gen reports e-shop scams up 87 per cent in the first half of 2026, and they are argued entirely on what the page looked like.

Where the evidence has to go

Reporting a scam in New Zealand usually means three or four destinations, and each wants the same underlying proof in a slightly different form.

Your bank, first and fastest

Contact them immediately, because speed decides whether a payment can be recalled or an account frozen. Give them the captured page alongside the transaction details, so the claim rests on a record rather than on your recollection.

The National Cyber Security Centre

The NCSC now holds the incident reporting role CERT NZ used to have. Its quarterly Cyber Security Insights reports are where the national loss figures come from. The NCSC responded to 1,164 incidents between 1 January and 31 March 2026, of which 77 needed specialist technical support, and recorded NZ$5.6 million in direct financial losses.

Netsafe

Handles online harm reports and gives practical advice. Since 1 July 2026 its scam service is a digital information, guidance and referral service, so treat it as a route to advice and referral rather than a takedown channel. A preserved page makes a takedown request concrete rather than a description of something that used to be there.

Police, and a civil claim or chargeback

Report the criminal side to Police. If you pursue the money privately or through a card scheme, you are back to proving what was represented to you, and that is a documentary exercise which fails on memory and succeeds on records. For amounts up to NZ$60,000 against an identifiable trader, a Disputes Tribunal claim is often the practical route.

Capture in this order, it takes five minutes

Start with the thing most likely to vanish: the scam site or the trading dashboard while you are still logged in. Then the payment page or the invoice with the account details. Then the chat thread, including the profile of whoever contacted you. Then the listing or the advertisement that started it. Capture each as its own record so every page carries its own URL and its own timestamp, then report. Do not delete the messages or block the account until you have captured, because blocking sometimes removes your access to the history.

Three steps, about forty seconds

No forensic training required. The proof is in the package, not in your testimony about how careful you were.

1

Capture before you report or block

Open each page and capture it. The full page is saved along with the source, so the fake account details or the balance on the dashboard are preserved as text, not just as pixels.

2

The package proves its own age

Every file is hashed, the manifest is signed, and its hash is anchored to the Bitcoin blockchain. Nobody can later claim you made the capture after the fact.

3

Report everywhere with the same file

Attach the PDF evidence report to your bank dispute and your report to the NCSC or Netsafe, and keep the ZIP. One capture serves every destination.

What lands in the evidence package

Between 11 and 15 files depending on your plan, delivered as one ZIP that anyone can check without installing anything.

Full-page screenshot

The whole page, not just the visible window, stitched and hashed.

Saved page source

The document as rendered at capture time, including the head, meta tags and structured data.

Extracted page text

Searchable plain text, so a quote can be found and cited without retyping.

Technical metadata

URL, page title, HTTP response headers, browser, operating system and the capture time in UTC.

Signed manifest

SHA-256 for every file, signed with an RSA-4096 key whose public key ships in the package.

Blockchain timestamp

The manifest hash anchored to Bitcoin via OpenTimestamps, so the capture time cannot be backdated.

Chain of custody and forensic log

A record of what happened during the capture, in the order it happened.

Evidence report as PDF

A readable summary you can attach to an application, a notice or a report.

Verification instructions

Written steps plus scripts, so the other side can re-check the hashes offline.

Where all of that comes from

Every file above is produced by one press in the side panel, while the site is still reachable. That window closes fast: the dashboard, the chat with the account manager and the payment page often disappear within days of the last transfer.

Capture each page separately, including the login screen and the withdrawal request. One sealed package per page is what lets a bank follow the sequence rather than reconstruct it from your notes.

Want to see what comes out before you install anything? Download a sample evidence package and open it yourself.

The ProofSnap side panel open beside a page in Chrome, with the capture button, the qualified timestamp option and the Trust Verifier link

Anyone can verify it, including the other side. Drop the ZIP onto the public Trust Verifier and the hashes, the signature and the timestamp are checked in the browser. Nothing is uploaded and nothing depends on ProofSnap still existing.

Three ways to get the evidence

Prices are charged in USD. Approximate New Zealand figures are shown for orientation only, and your card issuer sets the actual rate.

One dispute

$4.99 once

about NZ$9

A SnapPack is a single up-front purchase for a set number of captures. No subscription, no auto-renewal, no trial. Best when you have one problem and you want it documented today.

Get a SnapPack

Ongoing matters

$8.99/month

about NZ$16

For anyone who captures regularly: practitioners, property managers, HR, investigators. The 7-day free trial requires a credit card. Cancel any time during the trial and you are not charged.

Start the 7-day trial

We do it for you

$44.99 per URL

about NZ$78

Send us the link and our team captures the package for you, with nothing to install. Useful when the capture should not come from a party to the dispute.

See the capture service

ProofSnap is not a law firm and does not give legal advice. Qualified timestamps are issued by Disig a.s., a Qualified Trust Service Provider on the EU Trusted List. New Zealand has no equivalent regime, so that timestamp is independent corroboration here rather than a legal presumption.

Official sources

Every figure and deadline on this page comes from the following primary sources. Check them yourself rather than taking our word for it.

One detail worth getting right: most New Zealand banks want a suspicious email forwarded to them rather than screenshotted, because the forwarded message carries its headers. Forward the email as they ask, and use a capture for the website, the dashboard and the chat, where forwarding is not possible.

Questions people actually ask

The site is still up right now. That will not last.

Five minutes of capturing today is the difference between a report and a case.

Capture the site now ProofSnap in New Zealand
Capture the evidence, from $4.99 (about NZ$9)