Quick answer
If you paid a fake business lender, call your bank's 24/7 fraud line straight away, then report to New Zealand Police on 105 and to the National Cyber Security Centre. Ask for your credit file to be suppressed if you sent ID. The banks' scam refund scheme from 30 November 2025 covers consumers only, so business payments rely on fast recovery and a complaint process.
Key points
- Ring your bank first — the receiving bank can only freeze money that is still sitting in the scammer's account
- Report to NZ Police (105) and the National Cyber Security Centre the same day
- The banks' scam refund scheme, live from 30 November 2025, covers consumers using banking for personal purposes — not business payments
- If you sent ID or bank logins, request a credit file suppression and change passwords
- Watch for 'recovery' scams: nobody legitimate charges a fee to get your money back
- A genuine lender never asks for an upfront fee before your loan settles
The “approval” email looked real. The fee seemed small next to the loan. Then the money left your account, the loan never arrived, and the friendly broker stopped answering.
First: you are not the first business owner this has happened to, and the next hour matters more than anything else. Here is the order to act in, what each step actually achieves, and the honest answer on getting the money back.
The first hour: what to do, in order
Think of it as a progress bar with four stages. Don’t skip ahead, and don’t stop to ring the scammer “one last time”.
Stage 1 — Call your bank’s fraud line (minutes, not hours). Every major New Zealand bank runs a 24/7 scam reporting channel. Use the number on the back of your card or inside your banking app — never a number from the scammer’s emails. Tell them:
- the date, time and amount of each payment;
- the account number and name you paid;
- that it was a scam, not a dispute with a supplier.
Why the rush? Your bank contacts the bank that received the money and asks it to freeze whatever is still there. Under the updated industry code, banks now share scammer account details with each other, which helps — but a freeze only catches money that hasn’t been moved on. The government’s Consumer Protection guidance puts it plainly: the sooner your bank knows, “the greater the likelihood of getting the money back”.
Stage 2 — Stop every open door. Cancel any further payments or automatic payments you set up. If you gave the scammer online banking logins, a one-time code or remote access to your computer, tell your bank on the same call and change those passwords immediately. Block the scammer’s numbers and email addresses once you have saved copies.
Stage 3 — Save the evidence. Before anything disappears, screenshot or export:
- the website, ads and social media pages they used;
- emails with full headers, texts and chat messages;
- the “loan offer”, “approval letter” or “contract” they sent;
- your payment confirmations.
Put it all in one folder. You will be asked for it more than once.
Stage 4 — Report it officially (same day). Lodge a report with New Zealand Police through 105, online or by phone, because you have lost money. Then report the scam to the National Cyber Security Centre through Own Your Online. Keep the reference numbers. Your bank will want the Police reference, and it strengthens any later complaint.
Will the bank refund me? The rule most business owners miss
This is the part that catches people out.
On 30 November 2025, New Zealand’s retail banks switched on new scam protections through an update to the Code of Banking Practice. The New Zealand Banking Association lists five commitments: pre-payment warnings, Confirmation of Payee, spotting and responding to high-risk payments, a 24/7 reporting channel, and sharing scammer account information between banks. If a bank fails to meet those commitments, it compensates all or part of the loss for eligible customers.
The catch is in that word. To be eligible you must be a consumer. ANZ’s version, for example, requires that you were using its banking services “for personal or domestic purposes, not for a business”. Other eligibility points include:
- a domestic payment to a New Zealand bank account made on or after 30 November 2025;
- no third-party payment service involved;
- reporting to both NZ Police and the bank within three months of discovering the scam, and within 12 months of the last payment;
- compensation limited to three occasions during the banking relationship, up to $500,000 in total.
A fee paid to get a business loan is, almost by definition, a business payment. So for most owners reading this, the formal compensation scheme won’t apply — even if you happened to pay from a personal account. That does not mean the bank does nothing. It still works to freeze and recover funds, and you can still complain if you think it missed obvious warning signs.
| Situation | What usually applies |
|---|---|
| Personal account, personal purchase | Bank scam compensation scheme may apply if the bank fell short |
| Business account or a business purpose | Recovery efforts and the bank’s normal complaint process |
| Unhappy with the bank’s final answer | Free complaint to the Banking Ombudsman Scheme |
If you’re unhappy with the bank’s answer
Ask the bank, in writing, to review what happened through its internal complaints process. Be specific: did it show you a warning before the payment? Did the payee name come back as a match or a mismatch on Confirmation of Payee? Was the payment unusual for your account?
If the bank’s final response doesn’t sit right, the Banking Ombudsman Scheme is free and independent. Its eligibility rules cover many business customers as well as individuals, so check before you assume you can’t use it. Your evidence folder from Stage 3 does a lot of the work here.
You sent ID or bank details. Protect your credit file next
Fake lenders don’t only want the fee. Many ask for your driver licence, passport, bank statements or a “verification” selfie — everything needed to apply for credit in your name later.
If that happened, ask for a credit file suppression. The Privacy Commissioner explains that while your file is suppressed, the credit reporter won’t share it with new credit providers, which helps stop someone opening loans or cards as you. An initial request to one of the three credit reporters — Centrix, Equifax or Experian — is treated as a request to all of them, and you can apply to extend it.
Then:
- tell the agency that issued each document you sent (for example, your passport or driver licence);
- change passwords on email, accounting software and banking, starting with any that share a password;
- turn on two-factor authentication everywhere it’s offered;
- check your Xero or MYOB connected apps and revoke anything you don’t recognise.
Our page on credit checks for business loans explains what a credit enquiry looks like on your file, so you can spot one you didn’t make.
The second scam that follows the first
Within days, some victims get a call or message offering to “recover” the lost money. It may come from a “lawyer”, a “fraud investigator”, a “government recovery unit” or even someone claiming to be from the bank. There is always a fee, a tax or a “release charge” first.
That is a recovery scam, and it often comes from the same people, working from the same list. Police, your bank and the Banking Ombudsman don’t charge you to look into a scam. Anyone who does is not on your side.
How did they make it look so real?
Understanding the playbook helps you trust your instincts next time. Most fake business lenders follow a familiar script:
- A polished site or ad — often copying the name, logo or Financial Service Providers Register number of a real company.
- Fast, easy “approval” — no real questions about your trading, just a headline amount and a quick yes.
- The fee — insurance, a “bond”, a first repayment, a legal fee, or a cost to “release” the funds. Often requested by bank transfer, gift cards or crypto.
- Pressure — the offer “expires today”, or the funds are “held” until you pay.
- A second fee — then a third, until you stop paying.
The single rule that cuts through all of it: a genuine lender doesn’t ask you to pay anything before your loan settles. Our guide to upfront fee loan scams goes deeper, and how to check a lender is real shows the five-minute lookup across the Companies Register, FSPR and FMA warnings list.
Worked example: a joinery business in Tauranga
Illustrative only — not a real client.
An owner of a small joinery workshop needed $40k for a new edge bander after the old one failed mid-order. A search ad led to a professional-looking lender site. Within an hour, “approval” arrived by email with a request for a $1,200 “insurance bond”, paid from the business account. Two days later came a request for $2,500 to “release the funds”. The owner hesitated, then searched the company name and found an FMA warning.
What happened next:
- Hour 1: a call to the bank’s 24/7 line; the bank contacted the receiving bank about both payments.
- Same day: a 105 report to Police and a report through Own Your Online, with screenshots saved to one folder.
- Day 2: a credit file suppression, because a driver licence photo had been uploaded to the fake site.
- Day 4: a “recovery agent” emailed offering to retrieve the funds for a fee. The owner ignored it and forwarded it to the bank.
Because the payments were for a business purpose, the bank scam compensation scheme didn’t apply. Recovery depended entirely on how much was still in the receiving account. Either way, the original problem hadn’t gone away: there was still an edge bander to replace and an order to finish.
Still need the funding you set out to get? Start a genuine enquiry here — no fee, ever, to apply.
Getting the finance you actually needed
Being scammed doesn’t change why you went looking for a loan. The machine still needs replacing, the IRD bill still needs paying, the contract still needs funding. A few things make the second attempt smoother:
- Tell the lender what happened. If your credit file is suppressed, a real lender will need your consent and some steps from you before it can run a credit check later. Saying so up front avoids a confusing stall.
- Use the right channel. Start from a site you found and checked yourself, and expect to upload documents through a secure upload portal, not by email to a personal address.
- Expect questions. A genuine lender asks about your trading, your bank statements and what the money is for. That’s not friction — it’s what the scammer skipped.
- Pay nothing to apply. Legitimate fees are disclosed in your loan documents and normally come out of the loan at settlement, not out of your pocket beforehand.
For many trading businesses, options include an unsecured business loan (typically $5,000 to $500,000) or property-secured lending from $20,000 to $5,000,000 if you own property.
Start again, safely
Losing money to a fake lender is gutting, and it can make every online form feel like a trap. We understand that, and we would rather you check us out properly than trust us blindly — look us up, call the number on our site, and ask anything you like.
When you’re ready, our online enquiry takes about 60 seconds and there is no credit check when you first enquire. There is no fee to apply, now or at any stage before settlement. Your details go to our one team — we don’t send them to a pile of lenders, so your phone won’t light up with strangers. A real person reads your enquiry, looks at your situation as it actually is (including anything the scam has left behind, like a credit suppression), and calls you to talk it through. Please fill the form in accurately — what you need, what it’s for and how the business is trading — so we can match you with the right option first time.
Frequently asked questions
Can I get my money back after paying a fake business lender?
Sometimes. The best chance is calling your bank within minutes or hours, so the receiving bank can freeze any funds still in the scammer's account. The longer the gap, the more likely the money has been moved on. Recovery is never guaranteed, so report quickly and keep records.
Does the new bank scam compensation cover my business?
Usually not. The Code of Banking Practice changes that took effect on 30 November 2025 offer compensation to eligible consumers — people using banking services for personal or domestic purposes. Payments made for a business, including fees for a business loan, generally fall outside it.
Who do I report a business loan scam to in New Zealand?
Your bank first, then New Zealand Police through 105 (online or by phone) for the money lost, and the National Cyber Security Centre through Own Your Online. If the scammer used email, a website or social media, report the account or page to the platform too.
I sent my driver licence and passport to the scammer. What now?
Ask one of the credit reporters — Centrix, Equifax or Experian — for a credit file suppression. The Privacy Commissioner says an initial request to one is treated as a request to all three. Tell the agency that issued each document, change any shared passwords, and watch for new credit enquiries.
Someone has offered to recover my money for a fee. Is that real?
Treat it as a second scam. Recovery scams target people who have just lost money, often posing as lawyers, investigators or government staff. Police, your bank and the Banking Ombudsman do not charge you to look into a scam.
Will being scammed stop me getting a real business loan?
Not on its own. A credit file suppression may need to be lifted, or worked around, before a lender can run a credit check later, and you will want any open fraud reports noted. Tell the lender what happened up front so it can be handled properly.
How do I know the next lender is genuine?
Look the business up on the Companies Register and the Financial Service Providers Register, check the FMA warnings list, and call the lender on a number you find yourself. Any request for a fee before settlement is the clearest red flag.
Sources
- Consumer Protection (MBIE) — What to do if you think you have been scammed
- Office of the Privacy Commissioner — How do I freeze my credit information?
- New Zealand Police — 105 non-emergency reporting
- New Zealand Banking Association — New banking scam protections and compensation go live
- ANZ New Zealand — Been scammed? Compensation eligibility