Fake Raffle Text Scams
Fraudulent SMS and messaging app notifications claiming you have won a raffle, used to harvest personal data or extract fees via links.
Last reviewed: 1 June 2026
What this scam is
Fake raffle text scams arrive as SMS messages or messaging app notifications informing you that you have won, or have been entered into, a raffle draw. The message typically appears to come from a recognisable brand, a retail chain, a charity, or a loyalty programme, and is designed to generate enough excitement and trust to prompt you to click a link or reply with personal details.
Text-based raffle scams are distinct from other prize fraud formats in their brevity and immediacy. A text message arrives in the same space as messages from genuine contacts and legitimate organisations — banks, couriers, healthcare providers — which conditions a degree of automatic trust. The message is short, its request is simple, and the link appears to offer more information rather than asking for anything immediately, which reduces the perceived risk of engaging.
The harm is delivered through one of several mechanisms. Phishing links lead to pages that collect personal information, payment card details, or login credentials. Some pages install malware or tracking software. In the fee variant, the page congratulates you on winning and requests a delivery or processing charge before the prize can be sent. In the data variant, you complete a form that appears to be for prize delivery but is actually constructing a profile for identity fraud.
Some fake raffle texts are sent as follow-ups to genuine competition entries, exploiting the expectation of a draw result to make contact feel anticipated. Others arrive entirely without prior engagement, claiming you entered a raffle through a loyalty scheme or a prior purchase.
The scale of these scams is amplified by SMS technology: millions of messages can be sent at minimal cost, and responses from even a small percentage of recipients are commercially significant.
How it works
A text message arrives on your phone. It is brief and congratulatory — you have won, or have been selected, or your number has been drawn. A link is provided to claim your prize, or you are instructed to reply with a keyword.
If you click the link, you arrive at a page that may look like the real website of the brand or organisation named in the message. The page asks you to confirm your details — name, address, delivery information — and then introduces a small fee for processing or delivery. Payment page or card detail forms follow.
If you enter card details, these are used immediately for fraudulent transactions. If you enter your email address and password to 'log in to claim', these credentials are stolen. If you simply complete a personal information form, this data is used for targeted fraud or sold.
In the reply variant, responding with a keyword triggers a follow-up message that continues the engagement — asking for more details, providing a second link, or connecting you to a live scammer operating via text.
Some variants use SMS sender name spoofing to display a name rather than a number — appearing as 'RETAILER' or 'PRIZE' rather than a phone number — which makes the message look like a legitimate automated notification.
Why this scam works
Text messages occupy an inherently trusted space. We receive texts from our banks, our doctors, delivery companies, and employers. The habit of responding to texts from these sources creates a generalised trust that scam messages exploit.
The brevity of a text forces a binary decision — click or don't click — without the space for reflection that a longer communication might create. A positive, exciting message (you've won) paired with a simple call to action (click here) is designed to be acted on quickly.
The link appears harmless from the text itself. It is only when following the link that personal or financial information is requested, by which point the initial decision to engage has already been made.
A typical pattern
A person receives a text message appearing to be from a well-known retail chain, claiming their loyalty account number has been drawn in a monthly raffle. A link leads to a page styled identically to the retailer's website. After entering their name and address for delivery, they are asked for a card number to pay a delivery fee. After entering their card details, they receive no further communication from the page. Several small fraudulent transactions appear on their card statement that day. Contacting the retailer confirms they did not send the text and do not operate this type of raffle.
Common red flags
- Unexpected text claiming you have won a raffle you do not remember entering
- Link in the message leads to a page requesting card or bank details
- Sender number or name cannot be verified as belonging to the real organisation
- Small fee required for delivery or processing before the prize can be sent
- Urgency — link expires soon, claim within hours
- Page the link leads to is not on the genuine brand's official domain
- Message asks you to reply with personal information
- Follow-up messages arriving rapidly after you click the link
- The message contains spelling errors or unusual formatting inconsistent with the brand's style
- Prize claim page requests more personal information than delivery would require
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Congratulations! Your number was drawn in [retailer name]'s monthly raffle. You've won [prize]. Claim at [fake link] within 24 hrs.
WINNER: Your loyalty account has been selected in our [draw name] raffle. Prize: [amount]. Verify and claim: [fake link]
You've been randomly selected to win [prize description] from [brand name]. Tap to claim before the link expires: [fake link]
Hi [name], your entry in [organisation name]'s prize raffle has won [amount]. A [small amount] delivery fee applies. Claim: [fake link]
Your ticket has been drawn! To receive your [prize], confirm your address and pay the [amount] handling fee at [fake link].
Final notice: your [amount] raffle prize from [brand name] expires tonight. Claim now: [fake link]
Common variations
- Loyalty programme raffle — claims to be connected to a retailer's rewards or loyalty scheme
- Purchase-based draw — claims your recent order qualified you for a raffle entry
- Charity raffle text — fake charity raffle winner notification via SMS
- Messaging app variant — same format delivered through WhatsApp or similar
- Spoofed sender name — text displays as a brand name rather than a phone number
- Two-stage scam — initial text is harmless, follow-up after reply requests card details
How to verify before you act
Do not click any link in an unexpected prize text. Instead, navigate directly to the brand's official website by typing their known address into your browser and check whether they have announced a raffle or prize draw that matches the message.
Search the phone number or the sender name in the message alongside terms like 'scam text' or 'fraud' to check whether it has been reported by others.
Forward the message to your national scam text reporting service — in the UK, texts can be forwarded to 7726 (SPAM) for investigation. In other countries, equivalent services exist.
If the message claims to be connected to a loyalty programme or a recent purchase, contact the relevant organisation directly through their official customer service number or email — not through any contact details in the message.
Payment methods used
- Debit or credit card on a fake payment page
- Bank transfer prompted via link
- Gift cards requested in follow-up messages
Who is usually targeted
- Mobile phone users
- Loyalty scheme members
- People who enter text-based competitions
- Anyone who has made an online purchase recently
What to do immediately
- Do not click any link in the message
- Do not reply to the message or provide any personal information
- Forward the message to your national scam text reporting service (e.g. 7726 in the UK)
- Report to your national fraud authority
- If you clicked the link and entered card details, contact your bank immediately
- If you clicked the link and entered login credentials, change your password immediately
- Block the sender number to prevent further messages from that source
How to prevent it
- Never click links in unexpected prize text messages — navigate directly to the brand's website
- Forward suspicious texts to your national reporting service (7726 in the UK) before deleting
- Never provide card or bank details through a link in a text message
- Be suspicious of any text prize that requires a delivery or processing fee
- Enable spam filtering and reporting features on your mobile device
- Verify prize claims by contacting the organisation directly through official contact details
- Register your number with your national telephone preference service to reduce spam texts
- Use your mobile provider's call or text blocking features to limit unsolicited messages
Evidence to preserve
- The original text message including the sender number or name
- The URL of any link contained in the message
- Screenshots of any page you visited after clicking the link
- Any follow-up messages received
- Card or bank statements showing any fraudulent transactions
- Any information you submitted through a form on the linked page
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Can you win a lottery you didn't enter?
No. If you receive a text about winning a raffle you have no recollection of entering, the message is fraudulent. Legitimate draws only contact genuine entrants.
Do legitimate prizes ever require an upfront fee?
No. A delivery or processing fee before you receive a prize is always a scam indicator. Genuine raffle prizes are dispatched without the winner paying any charge.
The text looks exactly like messages I get from that retailer — how can I tell?
Sender names in SMS can be spoofed to display a brand name rather than a number. Visual similarity cannot confirm authenticity. Navigate to the retailer's official website directly and contact their customer service to verify — do not use any contact details in the text.
I clicked the link but didn't enter any details — am I safe?
Possibly — some phishing pages attempt to exploit browser vulnerabilities on loading, but most require you to submit information to cause direct financial harm. Monitor your device for unusual behaviour and consider running a malware check. The most significant risks arise from entering details.
I entered my card details — what should I do right now?
Call your bank or card issuer immediately using the number on the back of your card. Ask them to block the card and report it as compromised. This is urgent — fraudulent transactions may be attempted immediately.
How do I report a scam text in the UK?
Forward the text to 7726 (SPAM) — this is free and works across all major UK mobile networks. Also report to Action Fraud at actionfraud.police.uk. Your report contributes to investigation databases and blocking lists.
Why do scam texts feel so convincing?
Scam texts occupy the same space as legitimate automated messages from banks, couriers, and retailers. We are conditioned to respond to these. The brevity of a text removes the space for reflection that longer communications allow, and the positive framing of a prize reduces the scepticism that a request for payment alone would trigger.
Can mobile providers block these texts?
Mobile providers work with regulators and fraud databases to block known scam senders, but no system is comprehensive. Your best protection is to treat all unexpected prize texts as suspect and verify before acting, regardless of what the sender name displays.