How to Protect Your Phone from Scams, Malware and Data Theft

Your phone holds personal photos, messages, banking access and account recovery codes. Many attacks rely not on sophisticated hacking but on fake delivery messages, urgent payment requests, copied login pages or apps that ask for unnecessary permissions. These steps can reduce your risk.

1. Install system and app updates

Turn on automatic updates where practical and install security updates promptly. Updates can fix vulnerabilities as well as improve features. If your phone no longer receives security updates, consider replacing it, especially if you use it for banking or work.

2. Use a strong screen lock

Set a passcode or password that others cannot easily guess. Enable fingerprint or face unlock if you prefer, keep a secure passcode as backup, and set the screen to lock automatically. Enable your phone's lost-device feature so you can locate, lock or erase it if necessary.

3. Turn on two-factor authentication

Use two-factor authentication (2FA) for email, banking and important accounts. Email is especially important because it may be used to reset other passwords. Use an authenticator app or passkey where supported and keep recovery options current.

4. Check unexpected messages carefully

Be cautious of messages asking you to pay a fee, confirm a password, install an app or act immediately. Avoid clicking suspicious links. Open the official app or type the organisation's known website address yourself. Contact banks and delivery companies through independently verified channels.

5. Review app permissions

Check which apps can access your location, microphone, camera, contacts and photos. Remove permissions that are not needed and uninstall apps you no longer use. Download apps from official stores and review the developer before installing.

6. Use public Wi-Fi carefully

Avoid sensitive transactions on networks you do not trust. A VPN may help in some situations, but it does not make phishing links safe. When charging in public, prefer your own wall charger, cable or trusted power bank. Do not approve prompts to trust a connected device or share data unless you know why they are needed.

7. Back up important data

Enable regular backups for photos, contacts and files. Check that backups complete and that you can access the account needed to restore them. If you suspect a scam, contact your bank immediately if money or banking details may be involved, change affected passwords from a trusted device, and report the incident. New Zealand's official Own Your Online service provides current cyber-safety guidance.

Good phone security comes from consistent habits: updates, a secure lock, careful link checking, limited permissions and reliable backups.

Choose compatible phone accessories

When replacing a charger or accessory, check the exact phone model and supported connection. Browse our phones and smartphones and phone cases and accessories.