Fake Manage My Health '$75 refund' emails from nooreplye.com lead to phishing site
On 28 October 2026 New Zealand patient portal Manage My Health warned that some patients had received phishing emails claiming that a $75.00 refund was waiting and asking them to click a "Complete Refund Verification"…
- First reported
- Reports
- 1
Source: managemyhealth.co.nz · published
What happened
On 28 October 2026 New Zealand patient portal Manage My Health warned that some patients had received phishing emails claiming that a $75.00 refund was waiting and asking them to click a "Complete Refund Verification" button. The company says the emails come from addresses ending in @nooreplye.com, which have no connection to it, and that its systems were not breached. Manage My Health is being impersonated; it is not accused.
How the scam works
The link in the email leads to a fake website. According to Manage My Health, the site may ask visitors to "Slide to Verify", a step designed to look like a security check. It then shows a copy of the portal's sign-in page and asks for an email address and password. Next, it asks for card details and a code sent to the visitor's phone. The final step is the key: the scammers use the card number and the one-time code to make a payment or to add the card to a digital wallet, so a "refund" ends up taking money out of the account instead of putting any in.
A small amount such as $75 is believable because it feels like an ordinary overpayment, and the scam makes the sum seem harmless. The prompt for a code sent to the phone lets the fraudsters get past the bank's checks while the victim thinks they are confirming a refund. Login details entered on the copied sign-in page can also give access to a person's health records if they reuse the password elsewhere.
Manage My Health says it never asks people to sign in through an email link to claim a refund, and never asks for card details or bank codes in this way.
Source
Manage My Health, "Scam alert: ignore phishing emails pretending to be from Manage My Health", 28 October 2026.
Red flags
- An email about a $75 refund you were not expecting.
- A sender address ending in @nooreplye.com rather than Manage My Health's own domain.
- A "Complete Refund Verification" button and a "Slide to Verify" step.
- A copied sign-in page asking for your password, then card details.
- A request to type in a code sent to your phone.
If you were targeted
- 1Delete the email and do not click the button.
- 2Sign in to Manage My Health only by typing the address yourself or using the official app.
- 3Never give card details or phone codes on a page reached from an email.
- 4If you entered details, contact your bank to cancel the card and change the portal password.
- 5Report the email to Manage My Health and to CERT NZ.