Is a tax-free ISA or a low-risk Premium Bonds holding the best place for savings, and how can fraud be avoided while choosing or cashing these products? Many UK savers worry about convincing offers, spoof websites and urgent-sounding calls. Clear, practical safeguards and step-by-step actions reduce risk and make decisions safer without legal or personalised advice.
Key takeaways
- Verify providers before sharing details: confirm FCA registration and, for Premium Bonds, NS&I identity via official channels. Featured-snippet ready: always check a firm on the FCA register and contact NS&I using details from NS&I.
- Never rush transactions or transfers: fraudsters pressure savers to transfer funds or confirm codes immediately; treat urgency as a red flag.
- Protect data and devices: use two-factor authentication (2FA), strong passwords and official verification tools; report suspicious contact to the ICO and Action Fraud.
- Follow a recovery checklist if scammed: stop payments, contact bank, report to Action Fraud, alert FSCS/FCA/NS&I and obtain a crime reference.
- Use official transfer routes for ISAs: authorised ISA-to-ISA transfers through providers reduce spoofing risk; avoid withdrawing then redepositing as a transfer substitute.
Why scams targeting ISAs and Premium Bonds are different
ISAs are retail investment and savings wrappers offered by banks, building societies and investment platforms; Premium Bonds are a state-backed savings product administered by NS&I. Scammers exploit different trust signals: the tax-free and long-term benefits of ISAs appeal to those seeking growth, while the National Savings branding of Premium Bonds creates high trust. Attackers mimic those signals.
Common scam channels: phone calls impersonating officials, spoofed emails with fake statements, SMS ('smishing'), social media adverts and cloned websites. The FCA warns that cold calls offering guaranteed returns are likely fraudulent; NS&I publishes guidance on impersonation and spoofing. Familiarity with each product’s real processes reduces the chance of falling for a trick.
How to avoid scams and frauds when choosing ISAs
Check FCA registration and permissions
Confirm the provider on the FCA register: search the firm name or firm reference number (FRN) at FCA. A valid listing shows permitted activities and contact details. If a platform claims to be regulated but does not appear on the FCA register, treat it as suspicious.
Validate the website and onboarding flow
Check the URL carefully. Genuine provider sites use TLS (https) and secure domains; however, https alone is not proof of legitimacy. Look for spelling of the organisation name in the domain, check the certificate (click the padlock) and compare contact numbers to the FCA listing. Avoid onboarding that requests sending ID to unrecognised email addresses.
Watch for unrealistic return claims and guarantees
ISAs can include cash ISAs (savings accounts) and stocks & shares ISAs (investments). Promises of guaranteed high returns, no risk and immediate large gains are classic red flags. Confirm product details, fees, and the provider’s conflicts of interest before transferring funds.
Use authorised ISA transfer processes
To move an ISA, use the receiving provider’s transfer form; do not withdraw and redeposit funds to avoid losing tax-year status and open pathways for fraud. A legitimate ISA transfer will typically involve secure online transfer forms or signed physical forms; treat any request to send money directly to a named individual as suspicious.
Multi-channel verification
If contacted out of the blue about an ISA offer, verify by calling the provider using the number on the FCA register or the official website. Do not use numbers supplied in the unsolicited contact. Keep records of the contact and ask for written confirmation.
Avoid scams and frauds when cashing Premium Bonds
NS&I will not ask for full banking passwords, card PINs, or security codes by email or phone. If an approach claims to be from NS&I and asks for sensitive credentials, treat it as fraudulent. Verify using official NS&I channels.
Beware of fake prize notifications
Scammers may send messages claiming a win requiring payment or personal details to 'release' the prize. Legitimate Premium Bonds prize notifications do not request payments or bank details to claim a prize; winners are usually paid directly into the registered bank account or provided clear instructions via NS&I online services.
Cashing out steps to reduce risk
When cashing Premium Bonds, log in only through NS&I’s verified website or official app. Use the saved, trusted bookmark or type the address directly. Do not follow links in unexpected emails or social messages. Confirm the bank account linked to the NS&I account before proceeding.
Avoid scams and frauds when exploring savings alternatives
Compare secure features, not marketing noise
When comparing products such as notice accounts, fixed-term bonds, or peer-to-peer lending, focus on regulatory protections (FSCS coverage), clear fee structures and the firm’s complaints record. Avoid choices based solely on promotions or cold outreach.
FSCS protection awareness
FSCS (Financial Services Compensation Scheme) typically protects eligible deposits up to £85,000 per authorised firm. For non-deposit products, such as some investments, protection differs. Confirm eligibility at FSCS and do not assume every product is protected.
Recognise impersonation and social engineering
Scammers often use social engineering, emotional narratives or fabricated urgency. For vulnerable groups, such as older savers, additional verification steps are useful: passcodes, callbacks to a familiar number and asking a family member or regulated adviser to review large changes.
Using FSCS and FCA checks to avoid scams and frauds
Step-by-step verification checklist
- Search the provider name on the FCA register (check FRN and permitted activities).
- Check FSCS protection status for the specific product at FSCS.
- Confirm contact details with the provider’s listing; call back using the published number.
- Review customer complaints and independent reviews; use trusted comparison services.
These checks are quick yet powerful; scammers cannot replicate FCA or FSCS listings.
Safe ISA transfer tips to avoid scams and frauds
Always request a transfer rather than withdrawing and re-opening. Official transfers preserve tax-year benefits and involve documented requests between firms. If a transfer is requested via email or an unexpected text link, phone the receiving provider using official contact details.
Document the transfer and watch for diversion
Obtain confirmation numbers and expected timings. If contact is received about a pending transfer that was not requested, contact both the sending and receiving providers immediately and report suspected fraud to Action Fraud.
Do not use unauthorised intermediaries or translators who offer to process the transfer for a fee and request personal details. If assistance is needed, use regulated advisers listed on the FCA register.
Protecting personal data to avoid scams and frauds
Basic device and account hygiene
Use unique passwords for financial accounts, enable 2FA where available and update devices regularly. Install security updates and avoid public Wi‑Fi when accessing financial services. Where possible, use an authenticator app rather than SMS for 2FA.
Recognise phishing and spoofing techniques
Phishing emails often use urgent language, ask for immediate action and include attachments or links. Spoofed emails may show a real company name but a different sending address. Hover over links to view destinations and forward suspicious emails to the real provider’s fraud team.
Report inappropriate data requests
Organisations must comply with data protection rules; report illegitimate requests to the Information Commissioner’s Office (ICO) at ICO.
Practical, downloadable resources and scripts (examples)
- Script for verifying a cold caller: ask for their firm name, caller ID, and a direct number; say that the call will be ended and call back using the FCA or provider website number.
- Email template to report a suspicious message to a provider: include dates, sender details and copies of the message.
- Bank contact script for an attempted fraudulent payment: state the time, amount and request a payment recall or chargeback.
(Providers such as the FCA and NS&I publish official contacts for reporting, use the links above.)
Table: ISA vs Premium Bonds, scam risks and protective steps
| Feature |
Common scam risks |
Protective steps |
| Cash ISA |
Fake account openings, spoofed deposit links |
Confirm bank details, use provider login/bookmark, check FCA/FSCS |
| Stocks & Shares ISA |
Bogus investment platforms, promised returns |
Verify FCA permissions, check platform reviews, avoid cold calls |
| Premium Bonds |
Fake prize claims, impersonation of NS&I |
Use NS&I verified site, never pay to claim, check account for payouts |
| Transfers |
Payment diversion, fraudulent transfer instructions |
Use official transfer forms, confirm FRNs, document authorisations |
Responsive infographic (HTML + inline CSS)
🔍 Quick scam-check flow
- Verify firm on FCA register.
- Confirm FSCS protection for the product.
- Call provider using the official website number.
- Do not share passwords, PINs or 2FA codes.
🚩 Top red flags
- Urgent requests to transfer or confirm codes.
- Unexpected prize claims that require payment.
- Emails from free email services claiming to be NS&I or banks.
Analysis: choosing a safe path, pros and cons focused on fraud exposure
- Cash ISAs: lower fraud exposure if held with high-street banks; risks increase with online-only challengers if due diligence is skipped.
- Stocks & Shares ISAs: higher complexity increases impersonation risk; check FCA permissions and platform segregation of client assets.
- Premium Bonds: strong brand trust reduces fraud surface, but fake prize scams are common; always verify NS&I contact details.
Decisions should balance personal tech comfort, the need for face-to-face verification and the ability to follow secure transfer routes.
When to consult a regulated adviser or report
For large sums or complex investment wrappers, consulting a regulated adviser listed on the FCA register reduces execution risk. Any suspected fraud should be reported immediately to the bank, Action Fraud and the provider; a crime reference number supports recovery claims.
FAQs
Stop payments if possible, contact the bank immediately, get a crime reference from Action Fraud and report the incident to the provider and the FCA; document everything.
How to check if an ISA provider is legitimate?
Search the firm on the FCA register and verify permitted activities and contact numbers; confirm FSCS coverage for cash products when relevant.
Can Premium Bonds winnings be claimed via phone or email?
Genuine prize notifications will not ask for payment to release funds; confirm via the official NS&I website or phone number from NS&I’s site.
Is the FSCS a guarantee against fraud losses?
FSCS protects eligible deposits against firm failure up to set limits but does not cover losses from authorised push payment scams; contact the bank and Action Fraud promptly.
What details should never be shared by phone or email?
Passwords, full bank card numbers with PINs, and one-time authentication codes should never be shared; even callers claiming to be from a bank should be verified independently.
Conclusion
Action plan, three quick steps (<10 minutes each)
- Verify a provider: search the FCA register and FSCS pages using the official sites listed above.
- Secure accounts: enable 2FA and change passwords for financial logins.
- Save verified contacts: bookmark provider logins and note fraud-report contacts (Action Fraud, FCA, NS&I) for fast reference.
Protective routines and confirmed verification channels significantly reduce the chances of falling victim to scams related to ISAs and Premium Bonds. Where uncertainty remains, consult a regulated professional for personalised assessment.
