A simple check worth doing.
Caring for our members includes paying attention to the things that affect everyday life, and staying safe online is one of them. Most of us have signed up to dozens of websites, shops and apps over the years. Every so often, one of those organisations has its data compromised, and our email addresses and other personal details can end up with people who shouldn’t have them.
The National Cyber Security Centre (NCSC) has a free tool that helps you find out whether this has happened to you, and we thought it was worth sharing.
Checking your email address
The tool is called How exposed am I? and you can find it at howexposedami.co.nz. Simply enter your email address, and it shows whether that address has appeared in any known data breaches, what type of information was involved (such as passwords, phone numbers or dates of birth) and which breaches it was found in.
According to the NCSC, more than 4.3 million New Zealand account details have been exposed. So, if your email address shows up, you’re far from alone. It doesn’t necessarily mean someone has got into your accounts. It means some of your information is out there, and a few simple steps can help protect you.
If your details show up
The NCSC recommends three things:
- Change your password straight away, starting with any accounts linked to the breach.
- Use a long, strong password that’s different for every account. A phrase made up of four or more random words is easier to remember and harder to guess than a single word with a few numbers on the end.
- Turn on two-step verification (also called multi-factor authentication or 2FA) wherever you can. Then, even if someone has your password, they’d also need a code sent to your phone to get in.
If you’re not sure where to start, begin with your email account. Password reset links are sent there, so it’s often the key to all your other accounts. A password manager can also help. It remembers your passwords for you, so you only need to remember one.
What this means for your KiwiSaver account
Scammers often use exposed details to make their messages look genuine. A call or email that uses your name, knows which scheme you belong to, or mentions something recent can be surprisingly convincing.
Be wary of:
- unexpected contact about your KiwiSaver account, particularly if you’re asked to confirm personal details
- pressure to act quickly or to keep things to yourself
- offers to help you access your savings early or move to a different scheme
- links in emails or texts asking you to log in.
Christian KiwiSaver Scheme will never ask you for your password, PIN or verification code by email, text or phone. If something doesn’t feel right, don’t reply or click any links. Contact us directly through our website at https://angfincare.nz/contact-us/ and we’ll help you check.
Looking out for each other
This is something we can all help with. Think about who in your life might be more at risk or less confident online – older parents and grandparents, young people setting up their first accounts, or people in your community. Sharing the tool with them, or sitting down and going through it together, is a practical way to care for the people around you. It only takes a few minutes.
Where to get help
If you think you’ve been scammed or your details have been misused:
- report it to the NCSC through Own Your Online at ownyouronline.govt.nz
- contact Netsafe for free support and advice at netsafe.org.nz
- call your bank straight away if money is involved
- get in touch with us at https://angfincare.nz/contact-us/ if you’re concerned about your Christian KiwiSaver Scheme account.
Looking after our finances, and each other, now includes looking after ourselves online. A quick check today is a good place to start.
📩 Christian KiwiSaver Scheme, The Retire Fund, and The New Zealand Anglican Church Pension Fund are managed and issued by The New Zealand Anglican Church Pension Board (trading as Anglican Financial Care). The Product Disclosure Statements can be found here: https://angfincare.nz/news-and-knowhow/forms-and-documents/