Keeping your NS&I account safe means protecting your money and your account access. Use unique passwords, protect your email, and check each message through an independent route. NS&I savings have HM Treasury backing, but that does not stop scams or account takeover.
HM Treasury backs money, not account access
NS&I savings have direct backing from HM Treasury. This does not cover a stolen password, phishing link, or changed bank details.
In England, NS&I differs from most banks and building societies. Eligible deposits at banks and building societies usually have Financial Services Compensation Scheme protection, or FSCS, up to its current limit.
Think of Treasury backing as a strong safe. Your password is the key, so do not leave it in the lock.
Treasury backing and FSCS differ
| Savings home | Provider failure protection | Typical limit basis | Stops phishing? |
|---|
| NS&I Premium Bonds or ISA | Direct HM Treasury backing | Not the standard FSCS limit | No |
| FCA-authorised bank or building society | FSCS for eligible deposits | Per person, per authorised institution | No |
Premium Bonds and ISAs share risks
For large NS&I balances, ask two separate questions: HM Treasury backing asks whether NS&I can meet its duties. Account security asks whether someone can pretend to be you. Check both before moving money or asking for a withdrawal.
The most common error is treating these protections as the same thing. They protect against different problems.
Spot fake emails, texts, calls and websites
A message said to be from NS&I is high risk if it asks for a password. It is also risky if it asks for a one-time passcode, full security details, or urgent bank-detail changes.
Never use a link or phone number inside that message to check it. Find the official route yourself through the NS&I website or a statement you already trust.
This rule applies throughout England, including Blackpool. A scammer can copy a real firm's name, logo, and wording.
| Contact type | Warning sign | Safe response | Keep as evidence |
|---|
| Email | Link asks you to sign in or change details | Type NS&I's address yourself | Sender and screenshot |
| SMS | Urgency, short link or phone number | Do not reply or call it | Number, time and text |
| Phone call | Requests a passcode or remote access | End the call, use an official number | Number and stated reason |
| Website | Misspelt address or unexpected login page | Close it and start again independently | Full web address |
Your email is the recovery key
💡
You may be interested in
A fire-resistant document safe can keep account references, incident notes, and identity papers together. Do not store passwords beside them. It helps after a lost phone or suspected fraud.
- Keeps NS&I holder numbers and paper statements away from everyday visitors
- Stores a written fraud timeline with dates, references, and contact details
- Helps protect recovery documents during a household fire or flood
View options on Amazon →
Good NS&I account security uses several layers. Choose a strong, unique password that you do not use for email, banking, or shopping.
Store it in a trusted password manager. Do not keep it in a note on your phone.
Email account protection matters just as much. Give the inbox linked to NS&I its own password and the strongest sign-in check your provider offers.
Your email can reset access to many accounts. Protecting it blocks a common route into your savings.
Keep your phone, tablet, and computer up to date. Lock them whenever you leave them unattended.
Check your NS&I contact details from time to time. These steps help prevent account takeover and reduce reliance on one password.
Act in five minutes, then secure withdrawals
If you suspect an NS&I scam, stop replying, clicking, and calling straight away. During the first five minutes, take screenshots without opening links.
Write down the sender, time, amount, and reference. Then open NS&I only through an official route you found yourself.
If you shared security details or approved a payment, call your bank that day. Use the number on its official website or your card.
Fast action can limit further damage.
Suspected NS&I fraud timeline
0 to 5 minutes
Stop contact. Screenshot. Record details.
Same day
Secure NS&I, email and linked bank account.
After reporting
Keep case numbers and check account activity.
First five minutes: preserve proof
Preserve the details of the contact before taking any further action.
Same day: protect routes to money
This checklist does not replace direct contact with NS&I, your bank, or Action Fraud. Contact them when a withdrawal, payment, or detail change has happened. It also cannot choose between a Cash ISA and Premium Bonds. Safety backing is only one factor, alongside returns, access, and tax.
If you find an unfamiliar withdrawal, payment instruction, or bank-detail change, report it to NS&I straight away. Get NS&I contact details from an independent source.
Contact the linked bank without delay. State the date and time you noticed it, the amount, and the destination account shown.
Also mention any suspicious message or call that came first. Keep screenshots, sender addresses, phone numbers, and case references.
Do not reply to the suspected criminal. Do not open their link again.
NS&I and your bank can investigate an unauthorised transaction. But HM Treasury backing does not automatically repay scam losses.
Prompt NS&I scam reporting and clear records can help. A common case involves a fake text before a changed bank account is noticed.
Use safe withdrawal checks whenever you cash in Premium Bonds or withdraw money from an ISA. Use them when you change a linked bank account too.
Type the official NS&I address yourself before signing in. Check the destination bank details on screen before you send an instruction.
Do not change anything because an email, text, or caller says money awaits. This applies even when the message names a real holding.
Treat an unexpected request to replace bank details as possible bank details fraud. Check it through an official route you found yourself.
The same habit supports Premium Bonds security and NS&I ISA protection. It lowers the risk of funds being sent elsewhere after a stolen login.
FAQs
Is my money safe with NS&I?
NS&I savings have direct HM Treasury backing, rather than the standard FSCS deposit limit. This protects against NS&I failing to meet its duties. It does not prevent fraud after stolen login or bank details.
Does HM Treasury cover an NS&I scam?
No, HM Treasury backing does not automatically cover phishing, impersonation, or unauthorised account access. Contact NS&I and your bank at once if a withdrawal appears. Do the same after a bank-detail change.
How can I tell if an NS&I text is real?
Treat an NS&I text as suspicious if it asks you to click, call, or share a passcode. Open NS&I independently instead. Check whether the claimed alert appears in your account.
Should I give NS&I a one-time passcode by phone?
No, never give a one-time passcode to an unsolicited caller claiming to be NS&I. End the call. Use independently sourced contact details to check it.
What should I do if I clicked an NS&I phishing link?
Change your NS&I and email passwords through independently opened websites as soon as possible. If you entered bank or security details, call your bank that day. Keep the link and screenshots.
Can someone withdraw my Premium Bonds online?
A fraudster may redirect funds after gaining account access or changing linked bank details. Check withdrawal instructions after suspicious contact. Check bank details before a sale or transfer ends.
Is a Cash ISA safer than Premium Bonds with NS&I?
A Cash ISA and Premium Bonds have the same direct HM Treasury backing at NS&I. A Cash ISA pays interest. Premium Bonds give prize-draw entries without guaranteed interest.
Keep the guarantee and access in view
The safest approach joins institutional protection with everyday online care. Treasury backing protects your NS&I balance if NS&I cannot meet its duties.
A unique password, protected email, and checked withdrawal request protect day-to-day access. Each control deals with a different risk.
The essentials:- HM Treasury backs NS&I savings, but phishing protection depends on your actions.
- Never trust a link, callback number, password request, or one-time passcode request.
- For suspected fraud, stop contact, keep evidence, and use official channels independently.
- Check email security and linked bank details before each NS&I withdrawal or account change.
Where should I report an NS&I impersonation scam?
Report urgent account or banking risks to NS&I and your bank first. Then report fraud in England and Wales to Action Fraud. Report suspicious emails and texts to the NCSC when relevant, keeping message details and time.
Further reading
If you want to learn more about this topic, these sources may interest you:
