New Zealand warns of crypto-storage scams using banking

New Zealand's Financial Markets Authority has warned that claims about a replacement financial system are being used to persuade people to surrender cryptocurrency and wallet recovery details. Its October 23 alert says New Zealand consumers have reported losses after dealing with businesses using this approach.

The regulator describes a scam pattern built around supposed safety rather than simply promises of investment returns. People may be told that moving assets into a different system will protect their funds, deliver future benefits or unlock money. The FMA says misinformation and conspiracy narratives can make those claims appear legitimate.

The new warning does not give a total loss figure or number of affected consumers. It is a consumer-protection alert, not an announcement that New Zealand has approved an alternative banking system or introduced a new cryptocurrency custody licence.

How the claimed protection becomes a loss

According to the FMA, the approach can begin with a claim that a new financial system will replace, run alongside or offer advantages over ordinary banking. Professional-looking websites then advertise secure banking, digital-asset protection, payments or access to benefits. People are encouraged to move cryptocurrency, savings or retirement money into accounts or wallets controlled by the operators.

Requests for sensitive information are another part of the pattern. The regulator says wallet recovery seed phrases, private keys or identity documents may be requested as security or verification checks. With a recovery phrase or account access, the operator can transfer cryptocurrency without the owner's permission.

The website may continue displaying balances, transactions or benefits, creating the impression that funds remain available. When a person tries to withdraw, further payments can be demanded. The FMA identifies activation charges, compliance payments, account upgrades and card purchases among the requests that should prompt caution before any additional payment.

The authority also warns about offers to recover lost funds for an advance fee. It advises people not to disclose recovery phrases or private keys and to verify claims about financial services, registrations and licences independently. A message received online or through an unsolicited approach is not, on its own, a basis for transferring funds.

Existing rules depend on the service

New Zealand's regulatory treatment of crypto services is not determined solely by the word cryptocurrency. The FMA's existing provider guidance, last updated on July 1, explains that the obligations depend on the financial service or product involved. This is established background, not a rule change made by the October 23 warning.

For example, a wallet provider that stores assets or money for others and facilitates exchanges falls within the financial-service category of operating a value-transfer service. Safekeeping or administering cryptoassets is also a financial service. Transactions involving cryptoassets that are financial products may bring obligations for regulated client-money or property services, including custody.

The guidance says providers of crypto-related financial services must comply with fair-dealing provisions prohibiting misleading conduct and false, deceptive or unsubstantiated statements. That includes the overall impression created by websites, social media and promotional material. Key risk information cannot simply be buried in fine print while favourable claims dominate.

Registration requirements are conditional too. The provider guidance says businesses supplying financial services to people in New Zealand must register on the Financial Service Providers Register where the registration and dispute-resolution legislation applies. Its guidance for initial coin offers also requires providers serving retail clients to belong to a dispute-resolution scheme. These requirements concern the actual services provided, not a website’s description of itself as secure.

Reporting does not guarantee recovery

The FMA's reporting guidance tells people who have been scammed to stop contact and immediately contact the bank or transfer service used. Reports should describe what happened, the amount lost, who was involved and how contact began. Supporting emails, screenshots and relevant links can help the regulator assess the information.

The authority says it cannot recover a person's funds and has limited options when operators are overseas. Reporting can support its enquiries and warnings, but should not be confused with a reimbursement process. This distinction matters when a second approach promises to retrieve the money in exchange for another payment.