Prize Notification Scams
Fake congratulatory messages claiming you have won a prize, used to harvest personal details or extract upfront fees.
Last reviewed: 1 June 2026
What this scam is
Prize notification scams send you a message — by email, text, post, or phone — claiming you have been selected to receive a prize. The prize may be described as cash, a holiday, a new vehicle, an electronic device, or a gift card. Unlike foreign lottery scams, the framing may not reference a lottery at all: you may be told you were selected by a computer draw, chosen as a 'valued customer', or picked as part of a promotional campaign.
The scam has two primary objectives. The first is to harvest your personal and financial information — your name, address, date of birth, and bank or card details — ostensibly to 'process your prize'. This data is then used for identity fraud or sold to other criminal networks. The second is to extract a fee: a delivery charge, a processing tax, a customs fee, or a certificate cost that must be paid before the prize is released.
These scams are highly adaptable. They exploit seasonal events (holiday prize draws, Black Friday giveaways), impersonate well-known brands, retailers, or online services, and increasingly use SMS and messaging platforms to reach people in contexts where suspicion is lower. The visual appearance of the notification — matching the branding of a legitimate company — makes them particularly convincing at first glance.
No prize exists. Any personal information or payment provided goes directly to the scammer.
How it works
The notification arrives through a chosen channel and presents as genuinely exciting news — you have won something valuable and need to act to claim it. A claim deadline is typically included to generate urgency and prevent careful reflection.
You are directed to a website, phone number, or return form to claim your prize. The claiming process asks for personal details: full name, address, date of birth, and often financial information under the pretence that winnings need to be deposited somewhere or that your identity must be verified.
After providing these details, one of two things happens. In the data-harvesting version, you may receive a low-value item or nothing at all, while your details are used elsewhere for fraud. In the fee version, you are told a charge must be paid before the prize can be dispatched — a delivery fee, import duty, insurance, or similar. The charge is typically small enough to seem proportionate to the claimed prize value.
If you pay, further charges may follow, or the scammer may disappear entirely. The item never arrives. In the identity fraud variant, the harm may not become visible for weeks or months, when fraudulent accounts or credit applications begin to appear.
Brand impersonation is common: the message uses the logo, colour scheme, and tone of a real retailer, courier service, or streaming platform to appear authentic.
Why this scam works
Excitement and anticipation are powerful motivators. The feeling of having won something creates a positive emotional state that reduces scepticism. When a message appears to come from a recognisable brand — and the design looks genuine — the default instinct is to trust it.
The fee, when asked for, is typically small relative to the claimed prize. Paying ten pounds to receive a thousand-pound prize feels logical rather than suspicious. This proportionality is deliberately designed.
Urgency — claim within 24 hours, your prize will be reassigned — prevents the pause for reflection that would otherwise lead to verification.
A typical pattern
A person receives a text message appearing to come from a well-known retailer, congratulating them on being selected as a prize winner. The message uses the retailer's logo and familiar branding. A link leads to a page styled identically to the retailer's website, asking for the person's name, address, and bank details to arrange prize delivery. After providing these, the person receives an email asking for a delivery fee. No prize arrives, and the person later discovers fraudulent activity on their bank account.
Common red flags
- Prize notification for a draw or promotion you have no memory of entering
- Request for bank or card details to 'process' or 'deposit' a prize
- Small fee required before the prize can be sent
- Urgency — claim within hours or forfeit the prize
- Sender address or URL that differs from the genuine brand's domain
- Generic greeting rather than your name despite supposedly knowing you won
- Prize notification arrives via an unusual channel for that brand
- Prize is unusually high-value with no plausible reason for selection
- Instructions to keep the notification private
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Congratulations! You've been selected as [retailer name]'s weekly prize winner. Claim your [amount] reward at [fake link] before midnight.
You have an unclaimed prize from our recent draw. Visit [fake link] to verify your identity and collect your reward.
Lucky winner! Your order has been randomly selected to receive a free [prize]. Confirm your delivery address here: [fake link].
Final notice: your [amount] prize from [promotion name] expires at midnight. Enter your details at [fake link] to receive it.
We tried to deliver your prize but couldn't reach you. Pay a [small amount] redelivery fee at [fake link] to rearrange.
Your [platform name] account has been selected for a loyalty prize. Verify your payment method to claim [amount] in rewards at [fake link].
Common variations
- Brand impersonation SMS — fake text from a recognisable retailer or courier
- Customer loyalty prize — claims you were selected as a valued account holder
- Email prize draw — mass email using a real lottery or prize draw name
- Social media DM prize — direct message from a fake account impersonating a brand
- Postal prize notice — physical letter with official-looking prize certificate
- In-app notification — push notification from a fake brand app
How to verify before you act
Contact the organisation that supposedly sent the notification using contact details you find independently — on their official website, not in the message. Ask directly whether you have won a prize and whether they sent the notification.
Check the sender address or the URL of any linked website carefully. Impersonation notices typically use domains that are close to, but not identical to, the real company's official address.
Search for the prize notification language online — phrases from scam messages often appear in public scam databases and consumer warning sites. This can quickly confirm whether a message is part of a known fraud campaign.
If the notification asks for bank details or card information to 'deposit your winnings', this is a scam. Legitimate prize processes do not collect financial details this way.
Payment methods used
- Cryptocurrency
- Bank/wire transfer
- Gift cards
- Money transfer services
- Payment apps to 'friends & family'
- Debit or credit card on a fake payment page
Who is usually targeted
- Online shoppers
- Social media users
- Anyone who enters legitimate competitions
What to do immediately
- Do not click any link or provide any personal information
- Do not pay any fee
- Verify the notification directly with the organisation it claims to represent, using official contact details
- Report the message to the impersonated brand's abuse team
- Report to your national fraud reporting body
- If you already provided bank details, contact your bank immediately
- If you already paid a fee, contact your bank and report the fraud
How to prevent it
- Remember: you cannot win a prize for a draw you did not enter
- Verify any prize notification directly with the organisation through official channels
- Never provide bank or card details in response to an unsolicited prize message
- Be suspicious of any prize requiring a payment before delivery
- Check URLs carefully before entering any information — impersonation sites often use near-identical domains
- Enable spam filtering on email and text messages
- Report suspicious messages to the impersonated brand to help protect others
- Discuss unusual prize notifications with a trusted person before acting
Evidence to preserve
- The original message including sender address, phone number, or postmark
- Any URLs or links contained in the notification
- Screenshots of any website you visited as part of the claiming process
- Reference or prize claim numbers
- Any payment confirmation if a fee was paid
- Any personal details you submitted through a claiming form
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Can you win a lottery you didn't enter?
No. Legitimate lotteries and prize draws only produce winners from people who entered. An unsolicited prize notification for a draw you have no recollection of entering is a scam.
Do legitimate prizes ever require an upfront fee?
No. Genuine prize organisations, competitions, and promotions do not ask for payment before releasing your winnings. A fee request — however small and however it is described — is the hallmark of advance-fee fraud.
The message looks exactly like it's from a brand I know — is it still a scam?
It may be. Scammers copy logos, colour schemes, and message formatting precisely to create this impression. Always verify by contacting the organisation through contact details on their official website, not those in the message.
I gave my address and name — is that dangerous?
Name and address alone are lower risk than financial details, but they can still be used in identity fraud. Monitor any accounts or credit for unusual activity, and be alert to follow-up contact using those details to build trust.
I gave my bank details — what should I do now?
Contact your bank immediately. Explain you may have provided account details to a fraudulent site. Ask them to monitor for suspicious activity and consider issuing a new card if card details were involved.
Why do these scams ask for a small delivery fee?
A small fee feels proportionate when the supposed prize is large. This framing makes compliance feel logical. In reality, the fee is the scammer's objective — there is no prize and no delivery.
How do I report a prize notification scam?
Report to Action Fraud (UK), the FTC (US), or Scamwatch (Australia). Also report to the brand being impersonated — most major companies have a dedicated fraud or phishing report address. Your report helps others avoid the same message.
Is it safe to visit the link just to look?
It is best to avoid the link entirely. Some phishing pages attempt to exploit browser vulnerabilities on loading, and visiting the page confirms to the operator that the link reached an active device.