--- title: "Keeping Kiwis safe online: Tackling New Zealand’s email security challenges" description: New Zealanders are feeling the pain of more frequent and effective cyberattacks. While knowing how to avoid attacks is important, it’s not enough to prevent damage. Consumers, businesses and service providers all need to do more to ensure safe email communications. canonical_url: https://www.acronis.com/en/blog/posts/keeping-kiwis-safe-online-tackling-new-zealands-email-security-challenges/ locale: en last_updated: 2026-10-27 --- [Acronis Blog](https://www.acronis.com/en/blog/) # Keeping Kiwis safe online: Tackling New Zealand’s email security challenges New Zealanders are feeling the pain of more frequent and effective cyberattacks. While knowing how to avoid attacks is important, it’s not enough to prevent damage. Consumers, businesses and service providers all need to do more to ensure safe email communications. [Try Now](https://www.acronis.com/en/products/cloud/trial/) [![Image 2: Lee Pender](https://staticfiles.acronis.com/images/content/96b4b6d9ceee3c624b79f42543d1d633.png)](https://www.acronis.com/en/blog/authors/lee-pender/ "Lee Pender") [Lee Pender,](https://www.acronis.com/en/blog/authors/lee-pender/)Senior Content Marketing Manager 4 min read Last updated 24 June 2026 New Zealanders are feeling the pain of more frequent and effective cyberattacks. While knowing how to avoid attacks is important, it’s not enough to prevent damage. Consumers, businesses and service providers all need to do more to ensure safe email communications. Numbers tell the story. According to the National Cyber Security Centre (NCSC), 53% of Aotearoa small-to-medium enterprises (SMEs) [experienced a cyber threat](https://www.ncsc.govt.nz/assets/insights/cyber-threat-report/NCSC-CyberReport2025-FINAL.pdf) between January and June 2025, a significant increase from the 36% reported in 2024. At the same time, the direct financial loss from cyber security incidents reported to the NCSC reached $26.9 million in 2024/25, up from $21.6 million the previous year. ## Email remains a major attack vector Many of those losses originated with emails. Phishing campaigns continue to be highly effective because they target people rather than technology. Attackers use fraudulent emails to steal credentials, deliver malware, compromise business email accounts and trick employees into transferring money or sensitive information. The challenge is becoming even greater as cybercriminals adopt artificial intelligence (AI). Generative AI allows attackers to create highly convincing phishing emails with flawless grammar, realistic branding and personalised content at scale. The result is a new generation of scams that are increasingly difficult to distinguish from legitimate communications. ## Why awareness alone is not enough Education remains an important part of cybersecurity. People who understand common threats are more likely to identify suspicious activity and avoid risky behaviour. The NCSC's Cyber Security Consumer Behaviour Tracker shows that awareness of cyber threats [remains relatively high](https://www.ncsc.govt.nz/assets/insights/Documents/Cyber-security-behaviour-tracker-2026.pdf) in Aotearoa. However, awareness of scams varies by age group, with older participants generally demonstrating higher awareness of many scam types. But awareness alone is not preventing losses from increasing. Businesses continue to suffer greater financial damage from cyber incidents year after year. Why? Because modern attacks are designed to bypass human judgement. AI-generated phishing emails, business email compromise (BEC) attacks and sophisticated social engineering techniques can deceive even experienced users. Education reduces risk, but it cannot eliminate it. Organisations and individuals need multiple layers of protection that combine people, processes and technology. ## What consumers can do to enhance email security For individual consumers, two practices provide some of the strongest protection against email-based attacks. **Enable multi-factor authentication** Multi-factor authentication (MFA) adds an additional verification step when logging into online accounts. Even if attackers steal a password through a phishing email, MFA can prevent them from accessing the account. Consumers should enable MFA on email accounts, banking services, social media platforms and any other service that supports it. According to the NCSC Cyber Security Consumer Behaviour Tracker, Kiwis have some room for improvement. Only 42% use MFA for their email accounts, and only 47% protect their email accounts with unique passwords. **Stay alert to phishing attempts** Phishing awareness remains essential. Users should be cautious when opening unexpected emails, clicking links or downloading attachments. Common warning signs include urgent requests, unusual payment instructions, suspicious links and messages that attempt to create panic or pressure. When in doubt, verify requests through a separate communication channel before acting. ## What businesses can do Businesses need a more comprehensive approach that combines technology with employee education. **Deploy integrated cyber protection** Email security should not operate in isolation. Organisations benefit from an integrated cyber security platform that combines email protection with broader cyber security capabilities so security teams can detect, prevent and respond to threats more effectively. [Acronis Cyber Platform for Business](https://www.acronis.com/en/products/cyber-protect/) delivers integrated cyber protection capabilities, including email security and email archiving, enabling organisations to protect communications, retain business records and simplify compliance requirements within a unified platform. By reducing the number of disconnected tools that security teams must manage, businesses can improve visibility and strengthen their overall security posture. **Invest in effective security awareness training** Employees remain a critical line of defence against phishing attacks. Regular security awareness training helps staff recognise evolving threats, understand safe online practices and respond appropriately when suspicious activity occurs. Effective programmes go beyond annual compliance exercises by providing ongoing education that reflects current attack techniques. [Acronis Security Awareness Training](https://www.acronis.com/en/products/cloud/cyber-protect/security-awareness-training/) helps organisations build cyber resilience by delivering practical, engaging training that prepares employees to identify and respond to real-world threats. ## What managed service providers can do Managed service providers (MSPs) can play a vital role in protecting both businesses and consumers across New Zealand. **Strengthen email security for clients** MSPs can help clients reduce risk by deploying advanced email security solutions that block phishing attempts, malware and business email compromise attacks before they reach end users. Because email is often the first step in a cyberattack, strengthening this layer of defence protects organisations and the customers they serve. [Acronis Email Security](https://www.acronis.com/en/products/cloud/cyber-protect/email-security/) provides MSPs with advanced protection capabilities designed to defend clients against modern email threats while simplifying management across multiple customer environments. **Reduce tool sprawl with an integrated platform** Many MSPs face operational challenges caused by managing multiple disconnected security tools. An integrated platform that includes email security alongside backup, endpoint protection, disaster recovery and management capabilities can reduce complexity, improve efficiency and provide better visibility across customer environments. [Acronis Cyber Platform for MSPs](https://www.acronis.com/en/products/cloud/cyber-protect/) helps service providers consolidate cyber protection services within a single platform, reducing operational overhead while strengthening security outcomes for clients. ## Building a safer digital future for New Zealand Rising attack volumes, increasing financial losses and the growing use of AI by cybercriminals mean that organisations in New Zealand can no longer rely on awareness alone to protect their email communications. Consumers need strong account security and phishing awareness. Businesses need integrated cyber protection and ongoing employee training. MSPs need modern email security and streamlined platforms that help them protect customers efficiently. By combining education with robust technology and proactive security practices, organisations across Aotearoa can build stronger resilience against the email-based threats that continue to drive cybercrime today. [Cybersecurity](https://www.acronis.com/en/blog/tags/cybersecurity/) [Email security](https://www.acronis.com/en/blog/tags/email-security/) ## Written by ![Image 3: Lee Pender](https://staticfiles.acronis.com/images/content/96b4b6d9ceee3c624b79f42543d1d633.png) Lee Pender Senior Content Marketing Manager Lee was a journalist in the technology industry for 15 years, writing for and managing publications that served both IT and partner audiences. His experience as a corporate content creator includes tenures with an MSP and a provider of tax-compliance services. He writes about a variety of topics for Acronis, including cybersecurity trends, MSP management, emerging technologies and product updates. [Previous post](https://www.acronis.com/en/blog/posts/acronis-named-a-champion-in-the-omdia-cybersecurity-msp-ecosystems-leadership-matrix-2026/) [Acronis named a Champion in the Omdia Cybersecurity MSP Ecosystems Leadership Matrix 2026](https://www.acronis.com/en/blog/posts/acronis-named-a-champion-in-the-omdia-cybersecurity-msp-ecosystems-leadership-matrix-2026/) [Next post](https://www.acronis.com/en/blog/posts/acronis-cyber-protect-cloud-ranked-the-best-server-backup-in-g2-summer-2026-grid-report/) [Acronis Cyber Platform ranked the Best Server Backup in G2 Summer 2026 Grid Report](https://www.acronis.com/en/blog/posts/acronis-cyber-protect-cloud-ranked-the-best-server-backup-in-g2-summer-2026-grid-report/) About Acronis Acronis is a leader in AI-native cyber protection, unifying data protection, cybersecurity, IT operations and hybrid infrastructure to deliver business continuity, security and compliance with less cost and complexity. More than 21,000 service providers trust Acronis to protect over 750,000 businesses in 150 countries. Acronis is headquartered in Schaffhausen, Switzerland. [Add as a preferred source on Google](https://google.com/preferences/source?q=acronis.com) ## Related stories Want to learn more? Read the latest stories featuring this solution on our blog. [Acronis Blog](https://www.acronis.com/en/blog/) ![Image 4: stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://staticfiles.acronis.com/images/blog-card/9600f3eea83b8f4e168ea6c1409c8c26.png) [stc Bahrain and Acronis partner to bring advanced endpoint security to businesses in Bahrain](https://www.acronis.com/en/blog/posts/stc-bahrain-and-acronis-partner-to-bring-endpoint-security-to-businesses/) We are proud to announce a strategic partnership with stc Bahrain, expanding access to advanced cybersecurity services for businesses across Bahrain. **October 26, 2026**3 min read ![Image 5: Acronis expands MDR toward broader workspace protection](https://staticfiles.acronis.com/images/blog-card/18e90e89f5ec4ef0901f19008d4ccbf2.png) [Acronis expands MDR toward broader workspace protection](https://www.acronis.com/en/blog/posts/acronis-expands-mdr-toward-broader-workspace-protection/) Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security: helping service providers protect the connected workspace while giving customers access to the expertise needed to investigate threats, respond effectively and maintain business continuity. **October 13, 2026**6 min read ![Image 6: Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://staticfiles.acronis.com/images/blog-card/c2467c28c0278609eb3560cb2a8a4d53.png) [Acronis Cyber Protect v17: Improving cyber resilience across people, data and infrastructure](https://www.acronis.com/en/blog/posts/acronis-cyber-protect-v17-improving-cyber-resilience-across-people-data-and-infrastructure/) Acronis Cyber Protect v17 Q3 2026 expands integrated cyber protection with new capabilities that strengthen security awareness, improve backup operations and extend protection across more virtual environments. The result is stronger cyber resilience, simplified operations and broader protection delivered through a single platform. **October 05, 2026**4 min read