Westpac Bank says credit-card holders whose details were stolen after they used their cards at Auckland's Downtown carpark will not be liable for any fraud associated with the thefts.
The scam, believed to have affected thousands of users, was discovered after banks noticed fraudulent transactions linked with the carpark, which is owned by the city council.
It is unclear how long the fraud has been going on, but the council says credit-card payment machines have been suspended at the Downtown, Victoria St and Civic carparks.
Westpac says it is investigating and replacement cards are being sent to those potentially affected. It's urging customers to monitor their accounts and notify their bank of any unusual activity.
Were skimming devices used?
The Banking Association is also warning credit-card users to be vigilant in checking statement details.
The city council's general manager of finance, Andrew McKenzie, says payment machines at all three carpark sites are being inspected by the council. He says skimming devices may have been attached to them.
But IT security specialist Daniel Ayers, who had his own card replaced after he used a Downtown machine, says card details may have been stored in the machine and then accessed.
