TL;DR: In Operation Orca, NZ Police arrested a 19-year-old in central Auckland and seized an "SMS Blaster": a device acting as a fake cell tower that forced nearby phones onto a bogus network and sent bank phishing texts, about 700 in a single night. DIA flagged it in late July 2024; the warrant was executed 23 August. Around 120 people were affected; no losses were reported. Texts that arrive this way can bypass your carrier’s spam filters.
What happened
From NZ Police (3 October 2024):
- DIA first flagged an unusual smishing campaign in late July 2024.
- Police executed a search warrant in central Auckland on 23 August.
- A 19-year-old man was arrested and charged with interfering with a computer system.
- The device sent thousands of texts, about 700 in one night, posing as banks, linking to sites imitating bank domains.
- About 120 people were affected; no financial losses reported.
How an SMS blaster works
Your phone connects to whichever nearby tower looks strongest. An SMS blaster pretends to be one, pulls nearby phones onto its fake network, and sends texts directly. Because the message never goes through your real mobile network, your carrier’s scam filters don’t see it.
Imagine a fake postie standing on your street handing out letters that look like they’re from your bank. The real post office never saw them.
Why it matters
- It shows scammers going physical, not just online.
- It means "my carrier blocks scam texts" isn’t a full defence.
- The texts can show any sender name, including your bank’s.
How to protect yourself
- Don’t click links in bank texts. Open your banking app instead. Many NZ banks say they never send login links (ANZ, Kiwibank).
- If you suspect your account’s compromised, call your bank on its published number.
- Forward scam texts to 7726 (how).
Police advice: don’t click links in unexpected texts, don’t share personal or login details, and don’t transfer money after a suspicious text or call.
A free exposure check shows whether your details are in breach data.
Frequently Asked Questions
What is an SMS blaster?
A device that acts like a fake cell tower, forcing nearby phones onto its network so it can send them texts directly.
What was Operation Orca?
A NZ Police operation in 2024 that arrested a 19-year-old in Auckland and seized an SMS blaster used to send bank phishing texts.
Can my carrier block texts from an SMS blaster?
Texts sent this way don’t pass through your real mobile network, so carrier filters may not catch them.
How many people were affected?
About 120 people were known to be affected, with no financial losses reported.