Imagen2:
Schema_json: {"@context":"https://schema.org","@graph":[{"@type":"BlogPosting","@id":"https://zero30.uk/keep-ns-i-savings-safe-from-phishing-and-scam-calls/#article","headline":"Keep NS&I savings safe from phishing and scam calls","description":"NS&I scam checks protect savings when you open NS&I independently, not from a message. How to protect an NS&I account from phishing starts there.","datePublished":"2026-09-20T08:25:00+00:00","dateModified":"2026-09-20T08:25:00+00:00","author":{"@type":"Person","name":"Dpto. Redacción","url":"https://zero30.uk/author/dpto.-redacción/"},"publisher":{"@type":"Organization","name":"ISA vs Premium Bonds","logo":{"@type":"ImageObject","url":"https://zero30.uk/images/logo.png","width":200,"height":60}},"image":{"@type":"ImageObject","url":"https://zero30.uk/images/keep-ns-i-savings-safe-from-phishing-and-scam-calls.jpg","width":1200,"height":630},"url":"https://zero30.uk/keep-ns-i-savings-safe-from-phishing-and-scam-calls/","mainEntityOfPage":"https://zero30.uk/keep-ns-i-savings-safe-from-phishing-and-scam-calls/","inLanguage":"en-GB","articleSection":"Blog","about":{"@type":"Thing","name":"NS&I phishing and scam protection"},"mentions":[{"@type":"Thing","name":"NS&I"},{"@type":"Thing","name":"Premium Bonds"},{"@type":"Organization","name":"Action Fraud"},{"@type":"Thing","name":"Phishing"}],"keywords":"How to protect an NS&I account from phishing, pharming, email, text and phone scams, NS&I scams, Premium Bonds scams, phishing, scam calls, text scams"},{"@type":"HowTo","@id":"https://zero30.uk/keep-ns-i-savings-safe-from-phishing-and-scam-calls/#howto","name":"Safe route after a suspicious NS&I contact","step":[{"@type":"HowToStep","position":1,"name":"Stop","text":"Do not reply or click."},{"@type":"HowToStep","position":2,"name":"Save","text":"Keep screenshots and times."},{"@type":"HowToStep","position":3,"name":"Open","text":"Type nsandi.com yourself."},{"@type":"HowToStep","position":4,"name":"Escalate","text":"Call your bank if money or data left."}]}]}
A suspicious NS&I email, text, call or website can put savings and Premium Bonds at risk within minutes. Scammers can copy branding, sender names and padlock icons to pressure you into sharing details, moving money or “claiming” a prize.
Act in minutes after an NS&I scam
Stop contact and choose the response that matches what happened. Never use a phone number, link or reply route supplied in the suspicious message.
| What happened | Do this now | Do not do this | Time |
|---|
| Received a message or call | Screenshot it, then forward a text to 7726 or email it to [email protected]. | Reply, click or call back. | Within 5 to 15 minutes |
| Opened a link only | Close it, run device updates, then check NS&I through nsandi.com, which you type yourself. | Enter any details or download a file. | Immediately |
| Entered NS&I login details | Change that password from an independent NS&I session and change every account that reused it. | Use the scam link to change it. | Within 10 to 20 minutes |
| Shared personal or card details | Contact your bank or card provider using its app or published number. | Assume there is no risk because no payment happened. | Immediately |
| Sent money or approved a payment | Call your bank fraud team and ask whether it can stop or recall the payment. | Wait for NS&I to reply first. | Immediately |
Safe route after a suspicious NS&I contact
1. Stop
Do not reply or click.
2. Save
Keep screenshots and times.
3. Open
Type nsandi.com yourself.
4. Escalate
Call your bank if money or data left.
Keep evidence before blocking
Save the sender address, web address, call time, screenshots and payment reference, but do not reopen links to collect more evidence.
Report through independent channels
Forward suspicious emails to [email protected] and texts to 7726; report fraud to Action Fraud after contacting your bank if money moved.
If you find a fraudulent NS&I website, do not keep testing it or enter invented details to see what happens. Save the full web address, screenshots and the time you found it, then report the suspicious site through the National Cyber Security Centre’s official suspicious-website reporting service. You can also report a phishing email to [email protected] and a scam text to 7726, forwarding the original message where possible rather than replying to it.
If the website led to lost money, exposed credentials or identity details, contact your bank promptly and make a Report Fraud report as well. This helps protect savings from scams and can support action against the site.
Recognise Premium Bonds and ISA scam lures
Recognise the product hook and reject the false urgency. Premium Bonds scams commonly promise prizes, while ISA scams may mention allowances or security checks.
Prize messages exploit hope
Check any claimed Premium Bonds win only through nsandi.com typed into a new browser window or your own saved bookmark.
HTTPS does not prove NS&I identity
HTTPS encrypts the connection but does not prove who owns a website. Fake sites can display a padlock, so use independently opened NS&I routes and keep devices updated.
A visible sender name, a copied phone number and HTTPS are appearance checks. Opening NS&I independently is an identity check. For a prize, security alert or payment request, use only the second check before entering information.
Phishing is the broad term for a message or website designed to steal information. An email-based attempt is usually called phishing, a text-message attempt is smishing, and a phone-call attempt is vishing. Pharming scams are different: they try to send you to a fraudulent NS&I website even when you believe you are using a familiar address, for example through a compromised device, unsafe network or altered browser setting. Common phishing email red flags include pressure to act immediately, unusual wording, a request to “unlock” Premium Bonds, and a web address that is close to, but not exactly, nsandi.com.
The safest response is the same in every case: do not use the link, number or QR code provided.
Verify NS&I from a route you control
Open NS&I independently and remove the scammer's route to your account. Type nsandi.com, use your own bookmark, or find contact details on the official site.
Check the request, not the logo
After signing in through your own route, look for the claimed prize, message or task in your account and use published details if it is absent.
| Contact feature | Safer interpretation | Scam warning |
|---|
| Link or QR code | Ignore it and type nsandi.com yourself. | It asks you to sign in or “claim” a prize. |
| Caller request | End the call and contact NS&I independently. | They ask for a password or one-time code. |
| Urgent deadline | Verify it inside your account. | It threatens loss within minutes or hours. |
Lock down reused passwords
Use a unique NS&I password, secure your email account and change every account that reused a compromised password. Never approve an unexpected authentication request.
⚠️ Changing an NS&I password through the link you received can hand the new password straight to the criminal.
A genuine-looking sender name, familiar logo or caller ID is not proof that a contact is from NS&I, because these details can be copied or spoofed. Legitimate communications may tell you to review information in your account, but you should not disclose your full password, a one-time passcode or bank security code in response to an unsolicited email, text or call. Treat requests to move money, pay a fee to release a Premium Bonds prize, or provide bank details by return message as scam warnings.
For reliable NS&I phishing protection, end the contact and sign in only through a browser address or bookmark you chose yourself.
Your questions answered
Can NS&I send me a text message?
NS&I can send texts, but a message alone never proves it is genuine. Check independently.
What should I do if I clicked an NS&I scam link?
Close it, enter no details and check NS&I through your own browser route.
Is a padlock icon proof that an NS&I website is genuine?
No. It shows encryption, not that the website belongs to NS&I.
What if I gave a caller my NS&I password?
Change it through nsandi.com, change reused passwords and secure your email account.
What if I gave away a one-time passcode?
Contact NS&I and your bank immediately because it may approve a login or payment.
Do Premium Bonds prize emails ask for bank details?
Treat any unexpected request for bank details as untrusted until verified inside your account.
Can I get my money back after an NS&I scam?
Call your bank's fraud team immediately; recovery depends on how and when money left.
What matters most:- Check NS&I only through a web address or contact route you opened yourself.
- Save evidence, then report suspicious emails and texts without replying to them.
- Passwords, bank details and one-time codes need urgent action even where no money has yet left.
- Call your bank first when a transfer or card payment has been made.
Related sources
These articles can help you explore the topic in more depth:
