Discussion
The link was sent in a text using a link shortener FFS; nxt.to
This is not an acceptable way for public service entities to collect sensitive personal data from citizens.
Also, I received this link in a text from a random phone number. How do I know this is not some kind of scam?
The correct way to do this is an email from an @tewhatuora.govt.nz address, with a link to a page at something like;
surveys.tewhatuora.govt.nz
(2/2)
Speaking of scam patterns, and how to identity them ...
"He said it was essential to verify employer legitimacy through official websites or platforms such as LinkedIn or Glassdoor."
#JohnWeekes, 2025
🤦♂️
No! That's not the way to do it at all What you do is make sure all communications come from addresses @companydomain.foo, and all links point to companydomain.foo or a subdomain.
(1/2)
A space for Bonfire maintainers and contributors to communicate
