I nearly understand why an NS&I scam email can catch someone off guard. When an email arrives using the National Savings and Investments name, mentions Premium Bonds, and talks about protecting an account or updating important information, it does not immediately look like the sort of ridiculous spam most of us have learned to ignore. NS&I is a real organisation, Premium Bonds are real, and millions of people have money saved through NS&I. That gives scammers something very useful to work with: trust.
What I have been seeing with these NS&I phishing emails is a much more believable approach than the old-fashioned scam messages full of spelling mistakes and strange formatting. Some of the newer emails look carefully put together, with convincing branding, familiar language and links that are presented as though they are taking you straight to NS&I. With AI making it easier to produce polished-looking emails, the old advice about simply looking for bad grammar is not enough anymore. NS&I itself acknowledges that phishing emails are becoming more convincing as the use of artificial intelligence increases.
The important thing is that the email does not need to look obviously fake. It only needs to make you believe that there is a reason to act today rather than checking your account independently.
What Is the NS&I Scam Email?
The NS&I email scam is a phishing campaign in which fraudsters impersonate National Savings and Investments and attempt to persuade customers to provide personal information, banking details or account credentials.
The story changes from one email to another. One message may tell you that NS&I has changed its terms and conditions and that you need to complete a form. Another may announce that you have won a Premium Bonds prize. A different version may claim that your account has been compromised and that you need to secure your savings immediately.
They all have the same basic purpose: get you to interact with the message.
That could mean opening an attachment, clicking a link, filling out a form, entering your NS&I login details or providing bank information. Once you follow the instructions, you are no longer dealing with NS&I. You may be dealing with a fake website or form designed specifically to collect your information.
NS&I describes phishing in very similar terms, explaining that fraudsters can imitate trusted organisations and use the message to trick people into handing over money or personal information.
The Fake NS&I Terms and Conditions Email
One version that deserves particular attention is the fake update email.
The message may tell you that NS&I has changed its Terms of Use or Privacy Policy and that you need to review or accept the updated conditions to keep your account active. In some versions, the recipient is directed to an attachment or an online form that appears to be an official NS&I document.
The use of something that sounds administrative is clever because it does not immediately feel like a scam. Nobody is promising you £50,000 or telling you that you have inherited a fortune. Instead, the email sounds like routine paperwork that a financial institution might genuinely send.
A fake form such as one claiming to be an “NS&I ID2595” document can therefore make the whole thing feel more legitimate, particularly if the email uses official-looking logos and language.
I would not assume that a document is genuine simply because it has an NS&I form number printed on it. A scammer can put an official-looking number on a fake document just as easily as they can copy a logo.
If an email asks you to complete a form or provide sensitive details, I would rather go directly to NS&I and check whether anything actually needs updating.
The Premium Bonds Prize Scam Email
This one is probably the easiest to get emotionally invested in because who wouldn’t want to open an email saying they have won a Premium Bonds prize?
Premium Bonds really do have monthly prize draws, with prizes ranging from £25 to £1 million. NS&I also provides legitimate ways for customers to check whether they have won, including its online prize checker and app.
That makes a fake prize email much more believable.
The scam version may tell you that you have won a large amount of money and need to click a link to claim it. It may mention a deadline, an unclaimed prize or a requirement to confirm your details before the money can be released.
That combination of excitement and urgency is exactly what makes the message dangerous. You are not thinking, “Could this be a phishing email?” You are thinking, “I might actually have won.”
There is no need to find out by clicking the link. If you have Premium Bonds, check your prize independently through the official NS&I prize checker. NS&I says its prize checker can show current and previous prizes, including older unclaimed prizes.
That is a much better way to find out than trusting an unexpected email.
The Fake NS&I Security Alert
Another NS&I scam email takes the opposite approach and tries to frighten you rather than excite you.
The message may claim that your account has been compromised, that suspicious activity has been detected, or that a “reservation block” has been placed on your account. You may then be told to click a link immediately to secure your savings.
This is the kind of email where I can see people acting before they have had a chance to think. If you genuinely believe someone has accessed your savings account, the natural reaction is to try to fix it as quickly as possible.
But that urgency is exactly what the scammer wants.
NS&I warns customers about fake messages claiming that an account has been blocked or compromised and directing people to links to verify or change their login information. Its advice is to avoid suspicious links and attachments and to access NS&I independently instead.
What Makes the NS&I Scam So Convincing?
The biggest advantage these scammers have is the NS&I name itself.
NS&I is backed by HM Treasury, and Premium Bonds are one of its best-known products. NS&I says it has more than 24 million customers and describes itself as the home of Premium Bonds.
That reputation creates an opportunity for criminals. They do not have to convince you that a strange company is legitimate. They only have to convince you that a particular email really came from an organisation you already trust.
The fake email may use the NS&I logo, the right colours, financial terminology and references to products that actually exist. Some messages are now polished enough that the old trick of looking for obvious spelling mistakes is becoming less useful.
NS&I itself says AI is helping make fake emails more convincing and recommends looking at other details, including the sender address, unexpected requests for personal information and unfamiliar links.
How to Check If an NS&I Email Is Genuine
This is where NS&I gives customers some unusually useful information.
If you have registered with a UK home address, genuine NS&I emails will generally contain part of your postcode, with an exception for Premium Bonds prize-winner emails. NS&I also says genuine emails will use sender names such as “NS&I Customer Services” or “NS&I” and come from [email protected] or [email protected].
That is useful, but I would still avoid treating a sender address as the only test. Email addresses can be spoofed, and scammers can make messages appear much more convincing than they used to.
There is another detail that is even more important: NS&I says it will never send a link in an email that goes directly to its login page or ask you to enter your online banking details.
That makes a message asking you to click a button and enter your NS&I login information particularly suspicious.
What Does a Real NS&I Website Address Look Like?
If you decide to check your account, don’t use the button supplied in the suspicious email.
Open your browser yourself and go directly to NS&I. NS&I says its website addresses will start with www.nsandi.com, secure.nsandi.com, forms.nsandi.com or prize-options.nsandi.com, depending on what service you are using.
This is worth knowing because scam websites often use addresses that look almost right. A fake website might contain the letters “nsandi” somewhere in a much longer domain name, hoping that you see the familiar word and stop looking.
That is why the complete website address matters.
And I would not rely on the padlock alone. NS&I itself points out that sophisticated fraudulent websites can obtain the padlock symbol, so the presence of HTTPS is not proof that you are dealing with the genuine organisation.
What If the NS&I Email Contains an Attachment?
Be very careful with attachments, especially when you were not expecting one.
A fake NS&I email may include a document that supposedly contains updated terms, an account form or information about a prize. Opening it can take you into the next stage of the scam, where you are encouraged to enter information or follow instructions.
NS&I specifically advises customers not to open suspicious attachments or click suspicious links.
If the email claims you need to complete paperwork, I would verify the request through NS&I independently before opening anything.
I Received an NS&I Email Saying I Won a Prize
Before doing anything, I would check the Premium Bonds prize checker directly.
You do not need an email to tell you whether you have won. NS&I provides an official prize checker that allows customers to check current prizes, previous draws and older unclaimed prizes.
This is one of those situations where there is a very easy way to remove the scammer from the equation. Don’t click the prize email. Don’t use its phone number. Don’t follow its claim link. Go directly to NS&I and check.
If you really have won, the prize information will be available through the proper NS&I channels.
What If I Clicked an NS&I Scam Link?
Clicking the link alone does not automatically mean that your money has been stolen. What you did after clicking is more important.
If you opened the page and closed it without entering anything, I would report the email and avoid visiting the website again. If you entered your NS&I password or other security information, contact NS&I as soon as possible using its official contact details rather than anything contained in the suspicious message.
NS&I specifically tells customers to contact it immediately if they believe they have responded to a fraudulent email, if someone may have seen their security details, or if someone else may have accessed their account.
If you provided banking information or made a payment, contact your bank immediately as well.
The important thing is not to let embarrassment stop you from acting. These emails are designed to look convincing, and falling for one does not make you foolish. The longer you wait after giving away sensitive information, the more opportunity the scammer has to use it.
How to Report an NS&I Phishing Email
NS&I has a dedicated address for suspicious emails: [email protected]. The organisation asks customers who are concerned about an email claiming to be from NS&I to send it to that address so it can be investigated.
NS&I also recommends forwarding suspicious emails to [email protected] before deleting them.
I would keep the original message until you have reported it rather than deleting it immediately, particularly if you think you may have interacted with it. The information contained in the email can be useful when reporting the scam.
Is the NS&I Scam Email Really From NS&I?
If you have received an unexpected NS&I email asking you to click a link, complete a form, provide sensitive information, secure a supposedly compromised account or claim a surprising Premium Bonds prize, I would not assume it is genuine.
There are legitimate NS&I emails, and the organisation does send certain messages to customers, including Premium Bonds prize notifications. That is why the fact that an email mentions a real NS&I product is not enough to prove that it is genuine.
The safest approach is to separate the email from your account completely. If the email says there is a problem, check your account directly. If it says you have won, check the official prize checker. If it says your information needs updating, contact NS&I through its official website.
That takes away the one thing the scammer is trying to control: the route you use to reach your savings.
NS&I Email Scam And What I Think Of It!
The NS&I scam email is believable precisely because there is so much truth mixed into the lie. NS&I is real. Premium Bonds are real. Prize draws are real. Account security notifications are real. NS&I does communicate with customers by email. That makes it much easier for a fake message to blend into an ordinary inbox.
The more convincing emails are not necessarily the ones with the most elaborate stories. Sometimes a simple message saying that you need to accept updated terms or confirm your account can be enough to get somebody to click.
The fake Premium Bonds prize version has another advantage because it gives the recipient something they desperately want to believe. The security-alert version does the opposite by making them afraid that their savings are at risk. Both approaches are effective for the same reason: they encourage you to act first and think later.
For me, the best way to handle an NS&I email is to take the email out of the equation. I would never use an unexpected link to access my savings account, and I would never enter online banking details because an email told me to. NS&I itself confirms that it does not send customers links directly to its login page by email or ask them to enter their online banking details.
So if an NS&I email has landed in your inbox and something about it feels off, don’t let the fact that it looks professional convince you. AI has made it easier for scammers to produce convincing messages, but you do not have to beat the scammer at their own game. Simply leave the email behind, open NS&I through the official website and check your account there.
If the message turns out to be fake, report it to [email protected] and [email protected], then delete it. If you have already entered personal or security information, contact NS&I and your bank where appropriate and deal with the situation promptly.
The NS&I name may be printed across the email, but that does not mean the person behind the message works for NS&I. In a scam like this, the name is the bait. The link is where the real trouble begins.
Checkout The Back Taxes Scam Call, I talked about earlier.