NZTA vehicle database and scams

Forums › Transport (cars, bikes and boats) › NZTA vehicle database and scams

MartinGZ

376 posts

Ultimate Geek
+1 received by user: 128

Subscriber

#324266 20-Mar-2026 15:20

My Bro recently got a scam email stating his rego had expired and needs to pay fine etc etc. Extremely sophistocated email, but given away by incorrect return address etc and the fact the email had clickable links. NZTA recently stopped including clickable links to cut down on scams, but my guess is that would not be common knowledge to most people.

But the following details in the email were correct:

his email address (not particularly obvious)
his name
Rego
The rego had expired (it had.)

To get these details, I would have thought someone would need access to the NZTA database. Does anyone know if a vehicle owners email address is part of the data that is accessable by authorised users of the database? It is not included in this list:The Motor Vehicle Register | NZ Transport Agency Waka Kotahi Everything except the email address is there. In fact a huge amount of info.

Nokia 6110, 6210, 6234, Sony Ericsson XPERIA X1, Huawei Ideos X5 (Windows Mobile), Samsung Galaxy SIII, LG G4, OnePlus 5, iPhone Xs Max (briefly), S21 Ultra. And I thought I hadn't had many phones - but the first one around 1997.

eracode

Smpl Mnmlst
9452 posts

Uber Geek
+1 received by user: 6335

ID Verified

Trusted

Lifetime subscriber

#3472015 20-Mar-2026 15:24

Have you informed NZTA about this?

Report scams here.

Sometimes I just sit and think. Other times I just sit.

scuwp

3927 posts

Uber Geek
+1 received by user: 2510

#3472019 20-Mar-2026 15:37

NZTA have recently updated their online service so anyone can check WoF, Rego, and RUC expiry on any vehicle. It gives the vehicle details but nothing about the registered owner.

The public accessing owner details from the motor vehicle register is next to impossible, even if you have a great reason to ask, it is usually declined. Only authorized users and service providers can access it.

Depending how active he is online including social media, it wouldn't be to hard to put this data together from various sources.

https://transact.nzta.govt.nz/v2/check-expiry

Lazy is such an ugly word, I prefer to call it selective participation

KiwiSurfer

1759 posts

Uber Geek
+1 received by user: 1022

ID Verified

Lifetime subscriber

#3472021 20-Mar-2026 15:39

People can have access to the databse for all sort of reasons so may well be somoene is abusing their access.

Hopefully NZTA keeps a log of who accesses which records and may be able to track down who?

Wouldn't be surprised if it was a stafter at a WOF station or similar who could mix in legit queries with illegitmate ones so harder to find a pattern.

eracode

Smpl Mnmlst
9452 posts

Uber Geek
+1 received by user: 6335

ID Verified

Trusted

Lifetime subscriber

#3472023 20-Mar-2026 15:43

You can forward the scam email to NZTA at:

reportscams@nzta.govt.nz

Sometimes I just sit and think. Other times I just sit.

Rust

112 posts

Master Geek
+1 received by user: 105

ID Verified

#3472071 20-Mar-2026 19:21

+1 for reporting this to NZTA.

Access to the LANDATA database is monitored and recorded. If this person's details have been accessed it should be able to be traced.

MartinGZ

376 posts

Ultimate Geek
+1 received by user: 128

Subscriber

#3472096 20-Mar-2026 23:29

Thanks for the feedback all. We have now forwarded a copy of the email to NZTA at the address stated by @eracode. Hopefully they will be able to do something with it.

He isn't particularly active on the social media front, so my guess is access to the database.

Lenovo

Shop now for Lenovo laptops and other devices (affiliate link).

snj

327 posts

Ultimate Geek
+1 received by user: 240

#3472100 21-Mar-2026 00:21

By any chance did they give their details to any of the WOF/Rego/My Garage reminder services? (Thinking of, and not casting accusations at them, the likes of VTNZ, Car Dealers, Gaspy, Repco, Supercheap, etc)

Possible there was a data leak somewhere, really anywhere, maybe a vauge/little used service, that matched Plate Number to Personal Info, that then allowed them to look up further details and send the more realistic scam attempt.

MartinGZ

376 posts

Ultimate Geek
+1 received by user: 128

Subscriber

#3472295 21-Mar-2026 22:45

snj:

By any chance did they give their details to ......

I wouldn't know, but these days it would not be unreasonable to use one or more of those. I hear what you're saying, but it now over to NZTA.

Been doing a bit of digging and it appears 1, you can revoke access to your personal information, 2. there are a huge number of companies with access to the NZTA vehicle register.

Revoking access. My understanding is that registered users of the Vehicle register cannot have access to your name and address from looking up the vehicle database. Sortof. This of course does not apply to police and local authorities etc. Page is here: Revoke authorised access to my personal details (Opt-out). If on that page you click on the more information link, you read:

Some authorised users can still access your name and address, even after you have opted out. This happens in specific circumstances where we decide the information can be released under the Official Information Act. If these users have this extra access, they can obtain your name and address directly from the Motor Vehicle Register, without asking NZTA each time. For example, parking companies can obtain your details and send you a parking breach notice.

If you then find the actual gazetted authorisation for a company e.g. everyone's favourite Wilsons https://gazette.govt.nz/notice/id/2021-au308

You find the following authorisation:

I authorise the following person, for the purpose(s) and the term, and on the conditions stated below, to have access to the names and addresses of persons:

who are currently registered in respect of a motor vehicle(s); and
who have not instructed the Registrar of Motor Vehicles to withhold their details.

To me, this authorisation states that Wilson's do not have access to personal details if that person has revoked permission. Surely, if companies are granted exceptions to the revocation, this should be stated in the gazetted authorisation.

Authorised users. There are currently 712 authorised users although I have seen reports in recent past years of over 1800. Details here: NZTA Links to Authorised users

The spreadsheet lists both those with standard and special permissions, the webpage shows the subset of 75 with special permissions (don't ask me). Full details of the authorisations are given in both.