🐟 Phishy
Home › Scam guides

"Congratulations, you've won", the fake-prize scam

By Moti Shay · updated July 25, 2026

A text, an email or a pop-up: "Congratulations! You've won an iPhone 16 / $500 / a gift card." Except you didn't enter any contest. It's one of the oldest scams on the web, and it still works, because it promises exactly what we want to hear. Remember the simple rule: you can't win a lottery you never entered. Here's how the scam works, and how to check any "prize" message in seconds.

🔍 Suspicious message? Paste it here and check for free
🔒 Your message is only checked, never stored. Phishy collects no personal data.

What the scam looks like

The classic forms: • The text or WhatsApp: "Your number was drawn! Claim your prize here: [link]" • The pop-up while browsing: "You're visitor 1,000,000! Spin the wheel" • The "international lottery" email: you supposedly won millions in a foreign lottery, you just need to "unlock" the transfer • The fake brand giveaway: a big retailer "celebrates its anniversary" and gives prizes in exchange for a survey In every case, "claiming" the prize goes through a link, and that's where the trap snaps shut.

What's hiding behind the "prize"

Three possible goals: 1. Your card: they ask for a small "shipping fee" or "processing fee" to receive the prize. The prize doesn't exist; your card is now theirs. 2. Your data: name, address, phone, sometimes an ID, resold or used for further targeted fraud. 3. Your phone: the link installs a malicious app or signs you up to a premium service (a few dollars a week, quietly charged to your mobile bill).

The 6 unmistakable signs

• You didn't enter any contest, that's the definitive sign • You have to pay to receive a prize: a real prize never costs anything • Artificial urgency: "claim within 24h or your prize will be reassigned" • A shortened link or a domain unrelated to the brand named • Typos, an over-excited tone, capitals and exclamation marks everywhere • They ask for your card details "to deposit the prize", a deposit never needs your CVV

The social-media giveaway case

Fake brand (or celebrity) accounts copy real giveaways: same logo, same visuals, a few thousand recent followers. After the "draw," each entrant gets a private message: "You've won! Pay the shipping." Always check: is the account verified? Is the giveaway on the brand's official site? A real winner never pays fees.

Check the message in seconds

Copy the whole message (long-press → copy) and paste it into the free Phishy checker on this page. The tool recognises prize-scam patterns in the text, follows the link to its real destination, and checks it against global scam-site databases. Clear verdict in seconds: safe, suspicious or scam. Free, no signup, and available in 9 languages.

Paid or gave your details?

1. "Fee" paid by card: block it immediately (number on the back) and dispute the charge with your bank. 2. Premium service on your phone: contact your mobile carrier to cancel and block premium services. 3. App installed: uninstall it immediately and run a security scan. 4. Personal data shared: be wary in the following weeks, victims are often re-contacted by fake "refund services." 5. Report the text/site to your fraud and cybercrime services.

Want Phishy to check every message automatically, for your parents and kids too?
The free app scans your texts and WhatsApp automatically and warns you before you tap. Download now:
App Store, iPhone▶ Google Play, Android

FAQ

I got "congratulations you've won" without entering, is that possible?

No. No one wins a lottery without entering. This message is a scam 100% of the time: delete it, or check it in the tool if you're unsure.

They ask for a shipping fee to receive my prize, is that normal?

Never. A real prize costs nothing to receive. The "fees" exist only to capture your card.

The giveaway came from a big brand's Instagram, is it trustworthy?

Check that the account is verified and the giveaway is on the official site. Fake accounts copy real giveaways and then charge "fees" to "winners" by private message.

I was signed up to a premium service after clicking, what do I do?

Call your carrier to cancel the subscription and enable premium-service blocking. Dispute charges already made.

How do I check a prize message for free?

Paste it into the Phishy checker on this page: text and link analysis, answer in seconds, no signup.

Want Phishy to check every message automatically, for your parents and kids too?
The free app scans your texts and WhatsApp automatically and warns you before you tap. Download now:
App Store, iPhone▶ Google Play, Android
More guides:What is smishing (SMS phishing)?Deepfake scams: how to spot AI voice and video fraudThe Facebook romance scam: when a beautiful stranger messages firstKeeping kids safe on Roblox and online gamesHow to protect elderly parents from online scamsHow to protect your kids from online scams"Your parcel is on hold", the fake customs-fee scamText "from your bank", how to spot the impersonationSuspicious WhatsApp message, check before you replyHow to tell if a link is safe before you clickCrypto and investment scams, the guide