🐟 Phishy
HomeScam guides

"Congratulations, you've won" — the fake-prize scam

By Moti Shay · updated July 25, 2026

A text, an email or a pop-up: "Congratulations! You've won an iPhone 16 / $500 / a gift card." Except you didn't enter any contest. It's one of the oldest scams on the web — and it still works, because it promises exactly what we want to hear. Remember the simple rule: you can't win a lottery you never entered. Here's how the scam works, and how to check any "prize" message in seconds.

🔍 Suspicious message? Paste it here and check for free
🔒 Your message is only checked, never stored. Phishy collects no personal data.

What the scam looks like

The classic forms: • The text or WhatsApp: "Your number was drawn! Claim your prize here: [link]" • The pop-up while browsing: "You're visitor 1,000,000! Spin the wheel" • The "international lottery" email: you supposedly won millions in a foreign lottery — you just need to "unlock" the transfer • The fake brand giveaway: a big retailer "celebrates its anniversary" and gives prizes in exchange for a survey In every case, "claiming" the prize goes through a link — and that's where the trap snaps shut.

What's hiding behind the "prize"

Three possible goals: 1. Your card: they ask for a small "shipping fee" or "processing fee" to receive the prize. The prize doesn't exist; your card is now theirs. 2. Your data: name, address, phone, sometimes an ID — resold or used for further targeted fraud. 3. Your phone: the link installs a malicious app or signs you up to a premium service (a few dollars a week, quietly charged to your mobile bill).

The 6 unmistakable signs

• You didn't enter any contest — that's the definitive sign • You have to pay to receive a prize: a real prize never costs anything • Artificial urgency: "claim within 24h or your prize will be reassigned" • A shortened link or a domain unrelated to the brand named • Typos, an over-excited tone, capitals and exclamation marks everywhere • They ask for your card details "to deposit the prize" — a deposit never needs your CVV

The social-media giveaway case

Fake brand (or celebrity) accounts copy real giveaways: same logo, same visuals, a few thousand recent followers. After the "draw," each entrant gets a private message: "You've won! Pay the shipping." Always check: is the account verified? Is the giveaway on the brand's official site? A real winner never pays fees.

Check the message in seconds

Copy the whole message (long-press → copy) and paste it into the free Phishy checker on this page. The tool recognises prize-scam patterns in the text, follows the link to its real destination, and checks it against global scam-site databases. Clear verdict in seconds: safe, suspicious or scam. Free, no signup — and available in 9 languages.

Paid or gave your details?

1. "Fee" paid by card: block it immediately (number on the back) and dispute the charge with your bank. 2. Premium service on your phone: contact your mobile carrier to cancel and block premium services. 3. App installed: uninstall it immediately and run a security scan. 4. Personal data shared: be wary in the following weeks — victims are often re-contacted by fake "refund services." 5. Report the text/site to your fraud and cybercrime services.

Want Phishy to check every message automatically — for your parents and kids too?
The free app scans your texts and WhatsApp automatically and warns you before you tap. Download now:
App Store — iPhone▶ Google Play — Android

FAQ

I got "congratulations you've won" without entering — is that possible?

No. No one wins a lottery without entering. This message is a scam 100% of the time: delete it, or check it in the tool if you're unsure.

They ask for a shipping fee to receive my prize — is that normal?

Never. A real prize costs nothing to receive. The "fees" exist only to capture your card.

The giveaway came from a big brand's Instagram — is it trustworthy?

Check that the account is verified and the giveaway is on the official site. Fake accounts copy real giveaways and then charge "fees" to "winners" by private message.

I was signed up to a premium service after clicking — what do I do?

Call your carrier to cancel the subscription and enable premium-service blocking. Dispute charges already made.

How do I check a prize message for free?

Paste it into the Phishy checker on this page: text and link analysis, answer in seconds, no signup.

Want Phishy to check every message automatically — for your parents and kids too?
The free app scans your texts and WhatsApp automatically and warns you before you tap. Download now:
App Store — iPhone▶ Google Play — Android
More guides:What is smishing (SMS phishing)?Deepfake scams: how to spot AI voice and video fraudThe Facebook romance scam: when a beautiful stranger messages firstKeeping kids safe on Roblox and online gamesHow to protect elderly parents from online scamsHow to protect your kids from online scams"Your parcel is on hold" — the fake customs-fee scamText "from your bank" — how to spot the impersonationSuspicious WhatsApp message — check before you replyHow to tell if a link is safe before you clickCrypto and investment scams — the guide