55% of New Zealand organisations were hit by fraudsters in the last year — and AI is making the attacks faster, more convincing, and harder to detect. The average cost per organisation: $2.2 million.
🔍 THE BOTTOM LINE
AI hasn’t just enabled more fraud — it’s fundamentally changed the speed and realism of identity attacks. NZ businesses are investing in verification tech, but they’re still lagging behind Australia and the US. The gap between attack sophistication and defence adoption is widening, not closing.
The Numbers
Research from tech firm Lumin paints a stark picture:
- 55% of Kiwi organisations experienced fraud in the past year
- $2.2 million — average annual cost per organisation
- 90% of businesses fear their critical agreement workflows are vulnerable to AI-powered fraud
- 69% of NZ businesses less willing to work with partners who’ve suffered identity fraud incidents
- Only 67% of NZ organisations have increased investment in identity verification — compared to 82% in Australia and 78% in the US
What is AI-powered identity fraud? It’s the use of artificial intelligence tools to create, forge, or manipulate identity documents and credentials — enabling fraudsters to take over someone’s identity faster and more convincingly than traditional methods. With generative AI, a fraudster can produce convincing identity materials in minutes that would have taken days or weeks previously.
”More Attacks, Faster Attacks, and Attacks That Seem Far More Real”
Lumin’s chief commercial officer Joel Foster didn’t mince words:
“The sophistication that we have with AI technology means the ability and the power that fraudsters have today is much more than we had a year ago, two years ago, three years ago.”
The core shift: AI has compressed the timeline for creating identity takeover materials. What used to require specialist skills and significant time can now be automated. More attacks. Faster attacks. Attacks that look real enough to pass casual verification.
Organisations with complex document workflows — lots of agreements going out for signing without robust verification — are the most exposed.
The Ripple Effect
The commercial damage extends well beyond the direct financial hit. 69% of NZ businesses say they’d be less willing to work with a partner that recently experienced identity fraud.
One breach. Lost trust. Lost deals. The AI Blueprint launched today names NZ’s “low-trust” problem — this research explains exactly how expensive that trust deficit can become.
The Verification Gap
Here’s the uncomfortable comparison:
| Country | Investment in Identity Verification |
|---|---|
| Australia | 82% |
| US | 78% |
| New Zealand | 67% |
NZ is behind the curve on the very technology that would help close the vulnerability gap. Foster says the tech exists and is ready — the issue is adoption friction.
“One of the big focuses is making sure the use of the technology is simple. Because otherwise people won’t adopt it.”
Why It Matters Now
This isn’t a future risk projection. This is happening now, with measurable financial impact. Three reasons it matters this week:
- The attacks are already AI-powered — this isn’t hypothetical. 55% of organisations have been hit in the past 12 months.
- The cost is real and quantified — $2.2M average per organisation per year. For NZ’s predominantly small and medium businesses, that’s potentially existential.
- The defence gap is growing — while NZ invests at 67%, Australia invests at 82%. Every month of lag means more exposure.
What NZ Businesses Should Do
Foster’s recommendation is clear: adopt verification technology now, and make it frictionless. The tools exist. The question is whether organisations will deploy them before the next attack — or after.
- Audit your agreement workflows — if documents go out for signing without identity verification, that’s your gap
- Prioritise simplicity — complex verification that users avoid is worse than simple verification that users actually use
- Treat it as strategic, not just IT — Foster says privacy protection needs to be “a number one strategic priority at the highest level”
❓ Frequently Asked Questions
Q: What does this mean for NZ? NZ businesses are being targeted by AI-powered fraud at scale — 55% hit rate — while investing less in verification than comparable countries. The risk is present, quantified, and growing.
Q: What changed? AI has made identity fraud dramatically faster and more convincing. Fraudsters can now create takeover materials that look real enough to pass standard checks, at speed and scale that wasn’t possible 2–3 years ago.
Q: What should I do? If your business sends agreements for signing without identity verification, you’re exposed. Start with verification technology — Foster emphasises it exists and is ready. Make adoption frictionless. And treat data protection as a board-level strategic priority, not just an IT checklist item.
Source: 1News / Lumin research
