“They’re already in play now but they will crank up.”
He said it was hard for people to resist bargains, especially when the cost of living was high.
To capitalise on this, some scammers deployed “smishing” tricks, impersonating well-known New Zealand companies by text or email, asking people to click a link.
Chances are many people have signed up for Netflix and the likes of The White Lotus, or have cancelled Netflix plans, so scammers play a numbers game hoping to trap consumers.
Scammers knew lots of people had YouTube, Netflix, and Amazon accounts, so would send emails with generic subjects relating to these services.
Often these campaigns relied on the fact some people used the same password for multiple services - so tricking a person into handing over a Netflix password might get the scammer access to more sensitive personal information.
“Password managers are a good thing to have,” Anderson said.
Password managers can generate multiple, complex passwords, reducing the chances of someone using the same password for everything, or using an easy-to-guess password.
Anderson said some Kiwis mistakenly believed scammers only operated from overseas.
A phone call from abroad might arouse suspicion, but a local number might not.
“You will get a New Zealand number and that’s what makes it confusing for a lot of folks.”
He added: “There is no shame. If you are scammed, you are the victim... Make sure you raise it, log it, call your bank.”
Anderson said it was crucial to raise awareness about scams in order to protect vulnerable people.
“We solve it as a community.”
The New Zealand Banking Association said Black Friday ads and sales pitches should be closely scrutinised.
Shopping with trusted retailers was one way to scamproof yourself, the association said.
“Legitimate merchants will be easily accessible online and won’t ask for your personal details through links in texts and emails,” Banking Association chief executive Roger Beaumont said.
He urged online shoppers to make sure website addresses started with “https” and ended with a reputable domain name, such as .org, .com or .nz.
“If you followed a link to get to the site, do an extra search to confirm the site is genuine.”