Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


tardtasticx

3084 posts

Uber Geek
+1 received by user: 483


#322671 10-Sep-2025 20:17
Send private message

Just had some weird experiences with OneNZ this evening, figured worth sharing.

 

My employer is a customer of OneNZs, and we get access to the Enterprise Offers with a small discount on our personal plan as a result.
https://one.nz/enterprise-offers/
The other day I submitted my personal details on that form to apply the discount to my existing OneNZ account.

 

Today I got a call from 0800 800 120 - saying they were from OneNZ and to discuss the offer I'd requested.
I confirmed my name, and then they said they were sending me a code to my mobile and I needed to read it out to them.
I'd asked them why, as I'd given all my account information on the form already and had not requested additional services - it's an existing account and no changes are being made other than applying a discount. I also said I wasn't comfortable providing a code to them since I too can't be sure it's OneNZ calling me (though 99% sure it was, due to the earlier form filling). They said it was needed for my account security - and to reassure me they could email me separately to verify that it's OneNZ.
I asked if I could call them or their team back on the main line, and they said no. So I told them I'm not continuing the call and hungup.

 

Later I started a chat in the OneNZ app:

 

  • Chat 1: Said there would be a 1hr wait and I'd get a text when a rep was ready. I got a text reminder sure enough, only to open the chat and see they'd disconnected due to no response. Great.
  • Chat 2: Billing rep couldnt help, said Sales could help with that and transferred me.
  • Chat 3: Sales rep verified my full name and query. Then said they can't help and I need to speak to the backend team again. 
    They said - submit the form again and wait for the call, when they call you please cooperate with the verification process

It just seems to go against all advice which is not sharing verification codes with people - and looking at OneNZs own website they say not to "Give out any information about yourself – even if the person calling says they are from your bank or other business that you use. (One NZ will never ask you for your personal passwords, banking pin numbers or any personal information. We would only ask security ID questions that’s in our records to identify you)"
https://one.nz/help/frauds-scams-and-safety/ 


Create new topic
MadEngineer
4591 posts

Uber Geek
+1 received by user: 2570

Trusted

  #3413522 10-Sep-2025 20:25
Send private message

Next time you’re speaking with a bonafide tech, ask them to record a code word on your account, then when you’re speaking with someone you’re 99% certain is OneNZ, ask them to provide the code for your final 1% certainty. 





You're not on Atlantis anymore, Duncan Idaho.



MaxineN
Max
2049 posts

Uber Geek
+1 received by user: 1662

ID Verified
Trusted
Subscriber

  #3413523 10-Sep-2025 20:26
Send private message

@NickR1

 

 

 

Standard practice would still be verifying account info with assets, the account pin and full name, and you wouldn't be able to directly call them back as it will just throw you into the queue where it's first come first serve and may throw you at business instead.

 

SMS verification... Common... Needs to be thrown out of the window.





Ramblings from a mysterious lady who's into tech. Warning I may often create zingers.


richms
29098 posts

Uber Geek
+1 received by user: 10208

Trusted
Lifetime subscriber

  #3413533 10-Sep-2025 21:35
Send private message

I don't verify anything on incoming calls. Hell I try not to do any business by phone since csrs always lie and promise what they can't do.

 

Had someone from a Telco say I could search the number they were calling from once. Lol of all companies they should know better.





Richard rich.ms



freitasm
BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41030

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #3413540 10-Sep-2025 22:02
Send private message

Giving anyone you don't know a code received via SMS is asking to have an account breached.

 

This is bad security even if it's really One NZ calling you.





Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


geek3001
220 posts

Master Geek
+1 received by user: 330

ID Verified
Subscriber

  #3413556 11-Sep-2025 07:37
Send private message

Surely One NZ should send a verification code or OTP via their App not via insecure SMS?

 

Indeed, ditto any service provider with a decent App.

 

 


MadEngineer
4591 posts

Uber Geek
+1 received by user: 2570

Trusted

  #3414678 13-Sep-2025 23:47
Send private message

... at which point the 2fa should work as a function you can add to your preferred authenticator app.





You're not on Atlantis anymore, Duncan Idaho.

 
 
 
 

Shop now for Dell laptops and other devices (affiliate link).
Eva888
2761 posts

Uber Geek
+1 received by user: 2422

Lifetime subscriber

  #3414690 14-Sep-2025 09:48
Send private message

I had a similar issue with Southern Cross travel insurance. I responded to the phone number on the quote to accept it and make payment and it was answered by an American accent possibly with an Asian lilt. I asked was this a call center and where she was situated, she says Auckland. In the past when I pay SC with my credit card they put me on to an automated voice where I key in all the card details and press the hash key, always felt safe.

 

This time she insists I have to read out all my cc details plus the cvc on the back. I stop her and query why and that I don’t feel comfortable. She tells me a lot of people say this and insists it is safe, I argue it’s not but at this point it’s the last day for payment of the quote and it’s Friday afternoon.

 

The next bit got me. She says to give her the code that the bank has sent to my phone. This was so weird and again I baulked. She insists it’s ok and this is the way it’s now done. So basically I am giving her the text the bank sends me to approve the transaction.

 

I had phoned SC myself so that part felt legit that I was actually speaking with someone authorised. All the rest was OTT. I have been watching my account since and have lowered the transaction amount in the app and all is well, but I will be writing to them to complain. How do I know that the person working for them hasn’t kept all my details and can use them to shop online. 

 

I am normally very careful and often use Wise virtual when in doubt, but I didn’t have that amount in my Wise account at the time and was rushed. 


freitasm
BDFL - Memuneh
80646 posts

Uber Geek
+1 received by user: 41030

Administrator
ID Verified
Trusted
Geekzone
Lifetime subscriber

  #3414691 14-Sep-2025 09:57
Send private message

Were you buying insurance at that point or the call just came out of the blue?

 

All payment is made online, why would you have to be called

 

Perhaps using a scam site instead of the official one?

 

The whole thing sounds like scam.





Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies 

 

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

 


Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.