Social Media Lottery Winner Scams
Fake lottery winner announcements on social platforms that contact users directly to extract fees or personal details under the pretence of prize delivery.
Last reviewed: 1 June 2026
What this scam is
Social media lottery winner scams use the infrastructure of social platforms — public posts, direct messaging, comment sections, and fake accounts — to contact individuals with the claim that they have been selected as a lottery winner through a social media draw. Unlike physical lottery fraud, these scams often feel more personal and immediate: the 'winner notification' arrives as a direct message from an account that may appear to belong to someone you follow, a brand you trust, or a public figure.
The scam takes several distinct forms. In one version, a fraudulent account impersonating a lottery organisation, charity, or public figure posts publicly about a prize draw and then sends direct messages to individuals selected as 'winners'. In another, a scammer comments on a genuine public post — a celebrity photo, a brand announcement — claiming to be a lottery administrator and tagging individual commenters as prize recipients. In a third variant, a fake account is created specifically to contact one person, appearing in their follower list or mutual connections to appear familiar.
In all versions, the stated prize requires the 'winner' to take some action: provide personal details, pay a processing fee, click a link, or install an application. The objective is either financial — extracting fees through repeated demands — or credential-based, with the scammer harvesting account logins, identity documents, or financial information.
These scams are particularly difficult to identify because social media platforms do genuinely run verified prize draws and giveaways, and real organisations do announce winners through their official accounts. The fraudulent versions exploit this established behaviour.
How it works
You encounter a post or receive a direct message claiming you have been selected as a lottery winner. The message may reference a specific recent event — a platform milestone, a seasonal promotion, a follower count celebration — to make the selection seem plausible. The account sending the message uses the name, profile photo, and visual style of a real or plausible-seeming organisation.
You are congratulated and told a prize amount. To claim, you are directed to click a link, complete a form, or respond with personal details. The link leads to a page that may harvest credentials, financial information, or identity documents. Alternatively, you are asked to pay a small fee — a transfer charge, a processing cost, a customs fee — before the prize can be sent.
Each time you pay, a new requirement emerges. The prize always appears to be one step away. The scammer may escalate urgency — the prize will expire, another winner will be selected, time is running out — to prevent you from pausing to verify.
In the credential-harvesting version, you may be asked to log in via a fake page that captures your username and password. Your account is then used to send the same scam to your contacts, and may also be sold or used to commit further fraud.
Why this scam works
Social media feels like a personal, familiar space. A message arriving in your inbox from an account resembling one you know carries an implicit level of trust that a cold letter in the post does not. The visual cues of a social platform — a profile picture, a follower count, a verified-looking tick — activate familiarity rather than scepticism.
The conversational register of social media messaging is more informal than official fraud letters. This informality can disarm the mental filters people apply to formal correspondence. A friendly congratulatory message feels like good news rather than a threat.
The action required — clicking a link, completing a short form — feels trivially easy and routine in a social media context, where doing exactly these things is part of normal platform behaviour.
A typical pattern
A person receives a direct message on a social platform from an account with a name and profile picture resembling a well-known charity. The message congratulates them on being selected in a social media lottery draw and tells them they have won a substantial prize. A link is provided to complete a claim form. The page, which looks similar to the charity's real website, requests their full name, address, and bank details to deposit the prize. After providing this information, the person receives a further message asking for a processing fee. The original account is reported and removed by the platform, but the personal details provided are subsequently used in identity fraud.
Common red flags
- Winner notification arriving via direct message rather than a public announcement on a verified account
- Account sending the message has a recent creation date or low follower count
- The real organisation's verified account has no public record of the draw
- Link in the message leads to a page that requests login credentials or financial details
- Fee required before prize can be transferred or delivered
- Urgency framing — prize expires soon, another winner will be chosen
- Account name or username differs slightly from the real organisation's verified account
- Message asks you to keep the win private until the prize is delivered
- Grammar or phrasing inconsistent with the organisation's usual communications
- Multiple stages of engagement, each introducing a new requirement
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Congratulations! Your account was selected in our [platform] lottery draw. You've won [amount]. Claim your prize at [fake link] within 48 hours.
Hi [name], you've been chosen as one of our [number] lucky winners. To receive your [prize], please complete the form at [fake link].
We're celebrating [milestone] by giving away prizes! You're one of our winners. DM us your details to claim [amount].
WINNER ALERT: Your profile was randomly selected for our [event] prize draw. Prize: [amount]. To process your award, a handling fee of [amount] is required at [fake link].
You've been selected! To receive your [prize], click [fake link] and verify your account. Prize expires in 24 hours.
As a valued follower, you've won [amount] in our appreciation draw. Please send your name, address, and payment details to [fake email] to arrange delivery.
Common variations
- Comment-section winner tagging — scammer tags users in comments on legitimate posts claiming they have won
- Impersonated celebrity draw — fake celebrity account announces a follower lottery and DMs targets
- Charity lottery notification — fake charity account claims to be distributing lottery proceeds
- Platform milestone giveaway — fake account claims the platform is celebrating a milestone with a draw
- Credential harvesting variant — link leads to a fake login page rather than a payment page
- Mutual-friend account compromise — a genuine friend's compromised account sends the notification
How to verify before you act
Verify the account sending the message against the real organisation's official, verified presence. Navigate directly to the official account through the platform's search function rather than through the message, and compare. A fraudulent account will differ in subtle ways: creation date, follower count, slightly altered username, absence of a platform verification badge.
Search the real organisation's official posts to see whether they have publicly announced the prize draw you were supposedly selected for. If the draw is not mentioned there, the selection notification is fraudulent.
Do not click links in the message. Navigate to the relevant website directly through your browser. If the message asks you to log in for any reason, always go directly to the platform or service rather than following a provided link.
Before providing any details or paying any fee, tell a trusted person about the notification and show them the message. An outside view almost always identifies social media prize scams quickly.
Payment methods used
- Cryptocurrency
- Bank/wire transfer
- Gift cards
- Money transfer services
- Payment apps to 'friends & family'
- Debit or credit card on a fake payment page
Who is usually targeted
- Active social media users
- Followers of popular brand and charity accounts
- People who regularly engage with prize-related posts
What to do immediately
- Do not click any link in the message
- Do not pay any fee or provide personal or financial details
- Verify the account against the real organisation's official presence before taking any action
- Report the fraudulent account to the platform using the built-in reporting tools
- Report to your national fraud authority
- If you have already provided financial details or paid a fee, contact your bank immediately
- If you provided login credentials, change your password immediately and enable two-factor authentication
How to prevent it
- Verify all prize notifications against the official, verified account of the organisation
- Never follow links in direct messages to log in to any platform or enter financial details
- Be sceptical of any prize notification not accompanied by a public post on the organisation's main account
- Enable two-factor authentication on all social media accounts to protect against credential theft
- Never pay a fee to receive a social media prize — this is always a scam
- Report suspicious accounts promptly — this protects other users
- Discuss unusual winner notifications with a trusted person before responding
Evidence to preserve
- Screenshots of the message and the account that sent it, including the account handle and profile
- The URL of any link provided in the message
- Any forms you completed or information you provided
- Payment confirmation if a fee was paid
- A record of any follow-up messages received
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Can you win a lottery you didn't enter?
No. Social media lottery winner notifications claiming you were selected at random from all platform users are fraudulent. Legitimate draws only select winners from people who actively entered.
Do legitimate prizes ever require an upfront fee?
No. Any fee request associated with a social media prize notification — processing, shipping, handling, customs — is the defining sign of a scam. Genuine prizes are delivered without upfront charges to the winner.
The account sending the message looks verified — is it safe?
Not necessarily. Scammers create accounts that closely mimic verified ones, and some obtain verification marks through platform loopholes. Always navigate directly to the real organisation's account to verify — do not rely on the appearance of the account sending the message.
I gave the scammer my social media login — what should I do?
Change your password immediately. Enable two-factor authentication if it is not already active. Check whether any messages were sent from your account to your contacts, and warn them that the account may have been compromised. Report the incident to the platform.
Why do scammers use social media rather than email or post?
Social media platforms allow scammers to reach large numbers of people quickly, create convincing fake accounts at no cost, and exploit the existing trust users place in platform notifications. The conversational format of messaging also lowers the psychological guard compared to formal letters.
I received a winner notification from a friend's account — could it be real?
A friend's account may have been compromised and is being used to send the scam to their contacts. Do not act on the message. Contact your friend through a different channel — phone or in-person — to check whether they sent it.
How do I report a fraudulent account on a social platform?
Use the platform's built-in reporting function, typically accessible via the three-dot or flag icon on the account or message. Select 'scam' or 'impersonation' as the reason. Also report to your national fraud authority — platform reports alone may not result in swift action.
Can I recover money I paid as a prize processing fee?
Contact your bank or card issuer immediately — some transactions can be disputed within a limited timeframe. Report to your national fraud authority. Recovery is not guaranteed, but acting quickly improves the chances.