TL;DR: If your New Zealand passport details were exposed in a data breach or scam, use form PAS201 to choose: (1) add an alert and keep travelling on it until it expires, (2) add an alert and cancel it, or (3) cancel without an alert. The alert triggers extra checks if your passport details show up in a passport, citizenship or RealMe Verified Identity application. Want a new passport straight away? Use the normal application form.
Your three options
From the Passport Office’s PAS201 form:
| Option | Can you still travel? | What it does |
|---|---|---|
| Alert, keep passport | Yes, until expiry | Extra security checks if your details appear in a passport, citizenship or RealMe Verified Identity application |
| Alert and cancel | No | Alert + passport cancelled |
| Cancel, no alert | No | Passport cancelled |
For most breach victims, alert and keep is the sweet spot: protection without wrecking your holiday plans.
How to apply
- Fill in PAS201 online or by hand, then print and sign it.
- Describe what happened (where, what was exposed).
- Adding an alert only? Email it to passportsnz@dia.govt.nz.
- Cancelling? Post the passport with the form (addresses for NZ, Australia and the UK are on the form).
- A parent or guardian signs for anyone 15 or under.
Want a new passport now?
PAS201 doesn’t issue one. Use the regular adult (PAS310) or child (PAS305) application.
Breaches that exposed NZ passports
The Latitude breach (2023) exposed NZ licence and passport details (our guide). Breaches abroad can hit Kiwis too, like WestJet.
If you live in Australia: block online checks
When the Latitude Financial breach exposed copies of passport photo pages, DIA’s Latitude advice added an option that’s still worth knowing:
- Your passport stays valid for travel. DIA says controls including facial recognition stop identity takeover; someone would need the physical passport to travel as you.
- If you’re in Australia, you can ask DIA to block your passport number in Australia’s Document Verification Service (DVS), which stops it being used for online ID checks there. You can still use it in person.
- To ask, email passportsafe@dia.govt.nz with your current passport number, name and a phone number with country code. DIA will call from New Zealand.
- If you’re not in Australia, the block isn’t needed: DVS only verifies passports for people in Australia.
Before replacing: your old passport is cancelled as soon as DIA receives the application. If you’re travelling soon, travel on the current one and talk to DIA before you apply.
Other steps
- Suppress your credit file (how).
- Check your credit report (how).
- Get help from IDCARE on 0800 121 068.
A free exposure check shows which breaches your email is in.
Frequently Asked Questions
Can I stop my NZ passport being used for online ID checks in Australia?
Yes. DIA can block your passport number in Australia’s Document Verification Service. Email passportsafe@dia.govt.nz with your passport number, name and phone number.
What should I do if my NZ passport was in a data breach?
Use form PAS201 to add an alert, cancel the passport, or both.
Can I still travel if I add an alert to my NZ passport?
Yes. You can add an alert and keep using the passport until it expires.
What does a passport alert do?
It triggers extra security checks if your passport details appear in a passport, citizenship or RealMe Verified Identity application.
Does PAS201 give me a new passport?
No. Use a separate adult or child passport application for a new one.