Warning: fake e-mails
We have received several reports of e-mails falsely attributed to NS. Please watch out for fake e-mails! Although these mails may have a similar layout and content to real NS e-mails or those from our partners, such as Blokker and Kruidvat, they were not sent by NS or our partners. These are fake phishing or 'spam' e-mails.
Our name and logo are being misused by scammers trying to gather personal information. These fake e-mails (or so-called phishing or spam e-mails) often ask you to provide personal information or to click on a link. If you do this, then it is possible that scammers will gain access to your personal information. If, for example, you have sent a password, you may be able to prevent unpleasant consequences by changing it as quickly as possible. It is also a good idea to delete the e-mail.
How do you recognise a fake email?
Cyber criminals are getting better and better at creating fake e-mails. Even so, they still make mistakes. Commonly occurring mistakes are:
- The sender's e-mail address is not an official address used by NS or one of its partners, like Blokker, Kruidvat, Etos or Hema.
- The link in the e-mail links to a website that does not belong to NS
- The header is incorrect and the e-mail contains several spelling mistakes
- Finally, it is often the case that the offer being made sounds too good to be true, and it is
NS regularly posts examples of the most recent fake e-mails on this page, so that you can see which fake e-mails we are already aware of. Beware! Scammers are also active on Facebook and Instagram.
Phishing mails usually link to sites that display a 0900 number that you are expected to call. If you do so, you will be billed an expensive rate per minute, but you will not receive the tempting offer promised in the mail.
How can you recognise an e-mail or offer from NS?
You can recognise an e-mail or offer from NS by the sender address, which ends with ns.nl. In addition, all of our current offers are published on the NS website(s).
Which mail addresses and URLs does NS use, and are therefore reliable?
- NS@samr.nl: SAMR is the 'new' name for Market Response
- @ezine.ns.nl: newsletters, season ticket communications, Spoordeel shop
- No-Reply-FinanceCenter.DB@ns.nl: communications about payment reminders
- firstname.lastname@example.org: communications from NS International
- NS@blauw-survey.com: bureau that conducts research for NS Extra
- email@example.com: investigations after contact with NS
- Pages where the URL begins with https://webforms.tripolis.com: these are often forms
- firstname.lastname@example.org: research for Spoor
- email@example.com: contests
- firstname.lastname@example.org: sending address for research mail campaigns
- email@example.com: mail from OV-fiets
Reporting fake emails and websites
If you receive a fake email that appears to originate from NS, then you can report this using the email address firstname.lastname@example.org. Send an example of the fake email as an attachment and report the name of the sender and the subject of the email. Your report will be used to identify new fake emails and warn other customers.
Examples of fake e-mails that are in circulation
- Winner day ticket - first contact attempt (18 August 2017) (pdf, 51 kB)
- 2 daytickets confirmed (6 august 2017) (pdf, 143 kB)
- Free NS Weekend ticket (12 July 2017) (pdf, 360 kB)
- Special gift - Travel gift (26 June 2017) (pdf, 40 kB)
- Spoordeel shop - 2 day tickets (23 June 2017) (pdf, 156 kB)
- Your tickets are waiting - select NS contest (21 June 2017) (pdf, 244 kB)
- All winter long - 10 free day tickets per week (6 June 2017) (pdf, 22 kB)
- Timetable complaints - 2 NS day tickets (23 May 2017) (pdf, 92 kB)
- Day tickets confirmed - 2 day tickets valued at € 102.80 (20 May 2017) (pdf, 145 kB)
- Win free travel for a year on public transport (16 May 2017) (pdf, 241 kB)
- NS day tickets - valid for 6 months (25 April 2017) (pdf, 203 kB)
- Negative news (13 April 2017) (pdf, 12 kB)