Online Threat Alerts (OTA) - Alerting you to scams and frauds.

NS&I Scam Emails - How to Protect Yourself
NSI Scam Emails - How to Protect Yourself

Phishing emails impersonating National Savings and Investments (NS&I) have surged significantly, with cybercriminals aggressively targeting savers using increasingly convincing, AI-driven layouts. Because NS&I deposits and Premium Bonds are fully backed by the UK Government, scammers heavily exploit this trust to steal personal data and bank details.

Common NS&I Email Scam

  • The Fake Update Form: Scammers send attachments or links (such as a fake "Form NS&I ID2595") claiming that you must review or accept updated "Terms of Use and Privacy Policy" to maintain your account access.
  • The Premium Bonds Prize Notification: Emails claiming you have won a major Premium Bonds draw, prompting you to click a link to "claim your prize" before it expires.
  • The High-Urgency Security Alert: Fake warnings that your account has been compromised or has a "reservation block," pressuring you into clicking a link to secure your funds immediately.

Genuine vs. Scam Emails

FeatureGenuine NS&I EmailsScam Emails
Sender AddressSent only from noreply@nsandi.com or outgoing@nsandi.comMay look similar but use generic providers (e.g., Gmail) or subtle typos.
Links ProvidedNever links directly to a login or banking page. Only links to Contact Us, Privacy, or official social media in the footer.Includes prominent "Click Here to Log In" or "Claim Prize Now" links.
PersonalisationIncludes part of your registered UK postcode (except for Premium Bond winner notifications).Uses generic greetings like "Dear Customer" or doesn't use your name at all.
UrgencyStandard administrative tone with clear instructions on how to access your online account normally.High pressure, short deadlines, or threats of account suspension.

If You Receive a Suspicious Email

  • Do not click any links or download attachments. This can result in malware or direct you to a cloned website designed to capture your login credentials.
  • Report the email to NS&I. Forward the suspected email directly to their security mailbox at phishing@nsandi.com.
  • Report it to the UK government. Forward the email to the National Cyber Security Centre at report@phishing.gov.uk.
  • Check your account safely. Instead of using an email link, open a fresh browser window and go directly to the official NS&I Website to log into your dashboard.

If you have already entered your online banking details or provided a password on a suspicious link, contact your bank immediately and call NS&I directly.

0

Comment sectionComments / Answers (0)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 0

waiting