What are the red flags of this scam?

NS&I never sends a link to its login page by email or text — genuine prize notifications tell you a message is in your online account; they never direct you to a login via a link in the message • Real Premium Bonds prizes are paid automatically to the bank account you registered — NS&I never needs to 'verify' your bank details to process a prize • The URL is not exactly nsandi.com — look-alike domains such as ns-and-i.com, nsi-uk.gov.uk, premium-bonds-prize.co.uk, or shortened URLs are red flags • The email claims urgency: your prize will expire in 24–72 hours if you don't click to claim — NS&I prizes never expire once won, they simply roll over • The site asks for your sort code, account number, NS&I customer number, and sometimes your full card number — NS&I stores your bank details from your original registration and never re-requests them by email • The prize amount is a suspiciously round number and arrived outside the normal monthly draw window (draws happen on the first working day of each month)

What should I do if this happened to me?

Do not click any link in an unexpected prize notification. Check your actual prize status by going directly to nsandi.com and logging into your account • Forward suspicious NS&I-branded emails to phishing@nsandi.com and suspicious texts to 7726 (Spam), then delete them • If you entered bank details on a fake NS&I site, call your bank immediately on the number on the back of your card and ask for a card block and account alert • Check whether your registered bank account with NS&I is correct by logging in directly at nsandi.com or calling NS&I on 08085 007 007 • Register a Cifas Protective Registration at https://www.cifas.org.uk if you think your personal data has been compromised — this adds a fraud-prevention flag to your credit file • Report to Report Fraud at https://www.reportfraud.police.uk or call 0300 123 2040.

HIGH phishing Last reported: 6 Nov 2026 Share

A text or email says your Premium Bond won a prize — but it's phishing for your bank details

Q: Is this a scam?

Yes. This is a documented scam pattern. A text or email claims you have won an NS&I Premium Bonds prize and asks you to verify bank details to receive it. NS&I never contacts winners by email to request banking information — prizes are paid automatically to the registered account.

A text or email claims you have won an NS&I Premium Bonds prize and asks you to verify bank details to receive it. NS&I never contacts winners by email to request banking information — prizes are paid automatically to the registered account.

Also known as: NS&I phishing scam UK, Premium Bonds prize notification scam, fake NS&I email UK, Premium Bond prize email fraud, nsandi.com phishing

Already happened to you? Do this in the next few minutes

1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.

What to do right now

1 Do not click any link in an unexpected prize notification. Check your actual prize status by going directly to nsandi.com and logging into your account
2 Forward suspicious NS&I-branded emails to phishing@nsandi.com and suspicious texts to 7726 (Spam), then delete them
3 If you entered bank details on a fake NS&I site, call your bank immediately on the number on the back of your card and ask for a card block and account alert
4 Check whether your registered bank account with NS&I is correct by logging in directly at nsandi.com or calling NS&I on 08085 007 007
5 Register a Cifas Protective Registration at https://www.cifas.org.uk if you think your personal data has been compromised — this adds a fraud-prevention flag to your credit file
6 Report to Report Fraud at https://www.reportfraud.police.uk or call 0300 123 2040.

Red flags

⚠ NS&I never sends a link to its login page by email or text — genuine prize notifications tell you a message is in your online account; they never direct you to a login via a link in the message
⚠ Real Premium Bonds prizes are paid automatically to the bank account you registered — NS&I never needs to 'verify' your bank details to process a prize
⚠ The URL is not exactly nsandi.com — look-alike domains such as ns-and-i.com, nsi-uk.gov.uk, premium-bonds-prize.co.uk, or shortened URLs are red flags
⚠ The email claims urgency: your prize will expire in 24–72 hours if you don't click to claim — NS&I prizes never expire once won, they simply roll over
⚠ The site asks for your sort code, account number, NS&I customer number, and sometimes your full card number — NS&I stores your bank details from your original registration and never re-requests them by email
⚠ The prize amount is a suspiciously round number and arrived outside the normal monthly draw window (draws happen on the first working day of each month)

Already happened to you? Do this in the next few minutes

What to do right now

Red flags

Sources