Facebook & Instagram 'You've Won!' Scams: Spotting a Fake Prize Draw (UK)
Facebook competition scams in the UK have got slicker, and the message landing in your inbox that says "Congratulations, you've won!" is almost always a fake. A genuine prize draw contacts you through the same account you entered with, never asks for a "release fee", a card number or a gift-card code, and can prove the win without pressure. If a stranger DMs you out of nowhere claiming you've bagged a prize, treat it as fraud until proven otherwise.
That's the short version. The longer one matters, because these cons are built to feel real, and they lean hard on the fact that loads of people genuinely do enter legitimate UK competitions every week. Knowing the difference between a real operator and a clone account is the whole game.
Why "you have won a prize" scams work so well
Scammers piggyback on trust that real brands have built. They'll copy the logo, the colours, even the exact wording of a well-known competition page, then spin up a near-identical Facebook or Instagram profile. The handle might read @omaze.uk.official instead of the real one, or a page called "BOTB Winners 2026" with a stock photo of a car bolted on top.
The hook is simple. You're told you've won something you don't remember entering, or a prize that's suspiciously huge for a draw you barely recall. Excitement does the rest. Once you're talking, the "admin" asks for a small payment to release the prize, or your bank details "to transfer the winnings", or a code off an Amazon or Steam gift card. None of that is how prizes work in this country.
Real UK prize draws are legal under the Gambling Act 2005 only when there's a genuine free entry route or a real skill question. We cover the legal framework in are prize draws legal in the UK, and the upshot for you is this: winnings from a properly run draw are tax-free, and the operator has zero reason to charge you anything to hand over a prize you've already won.
The four scam formats you'll actually see
Most of what circulates falls into a handful of patterns. Learn the shape and you'll spot them on sight.
| Scam type | How it shows up | The tell |
|---|---|---|
| Fake "you've won" DM | A message from a brand-lookalike account or a random profile | You don't recall entering; they message first, urgently |
| Advance-fee / pay-to-claim | "Pay £4.99 postage / £50 customs / a release fee" to get your prize | Genuine winners never pay to receive a UK prize |
| Cloned giveaway page | A duplicate of a real brand's page reposting their competition | Recently created, few followers, slightly wrong handle |
| Phishing "claim" link | A link to "verify your details" or log in to claim | Dodgy URL, asks for bank login, card or one-time passcode |
The advance-fee one is the most expensive. It's the classic "you've won a holiday but there's a £75 admin charge" trick, just rebadged for social media. The number is always small enough to feel reasonable next to a fictional prize. That's deliberate. Pay once and they'll invent a second fee, then a third.
The cloned-page con is sneakier because it doesn't always ask for money up front. Sometimes it just farms engagement: like, share, tag three friends, comment "DONE". The page harvests interactions, builds a following off your network, then either sells the page on or pivots to phishing once it looks established. A genuine list of UK operators we've reviewed won't be running a brand-new page begging for tags to "qualify".
How to tell if you really won
This is the bit worth bookmarking. A real win leaves fingerprints, and a fake one can't fake all of them at once.
A legitimate operator contacts you on the account you entered with. Entered through a website with your email? The email comes from that domain, not a Gmail address. Entered via their official Instagram? The message arrives in the same chat thread from the same verified handle you followed, not a fresh profile with a near-miss username. Check the handle character by character. Scammers love swapping an l for a 1, or tacking on .official, .uk, _winners.
They never ask for money. Not postage, not insurance, not customs, not a "verification deposit", not a "release fee". A UK prize draw cannot legally make you pay to collect a prize you've won. If there's any charge to claim, it's a scam. Full stop.
They never need your bank login, card PIN, full card number or a one-time passcode. To pay out, a real operator needs the same details you'd put on any bank transfer in — sort code and account number — and they'll usually confirm your win publicly or through official channels first. Nobody legitimate needs the code your bank texts you. That code is the keys to your account.
They don't rush you. "Claim in the next 30 minutes or you forfeit" is a pressure tactic, not a real deadline. Genuine operators give you reasonable time and put winner announcements somewhere public — a livestreamed draw, a winners page, a pinned post.
When in doubt, go independent. Don't reply to the message. Open a new tab, find the operator's real website yourself, and contact them through the support channel listed there. If you entered via a site we've assessed, our how we review page explains what a trustworthy operator looks like, and how to spot a legit UK raffle site gives you a checklist for the website itself — proper company details, clear terms, a free postal entry route, real winner proof.
Red flags, in plain English
- The message arrives first and you don't remember entering.
- The account is new, has few followers, or the handle is subtly wrong.
- There's any fee to "release", "insure", "post" or "verify" your prize.
- They want your card number, bank login, PIN or a one-time passcode.
- Spelling and grammar are off, or the brand name is slightly misspelt.
- A short countdown, or a threat that you'll lose the prize if you don't act now.
- The "claim" link goes to a URL that isn't the brand's real domain.
- They move you off-platform fast — to WhatsApp, Telegram or email — to dodge moderation.
That last point matters more every year. A WhatsApp competition scam often starts on Facebook, then jumps to WhatsApp where there's no page history, no reviews and no public comments to expose it. Once you're in a private chat, the scammer controls everything you see.
What real UK prize draws actually do
For contrast, here's the legitimate version. A proper operator runs the draw transparently, often on a third-party random selection tool or a livestream, publishes the winner, and reaches out through the channel you signed up with. The prize is the prize — no surprise fees bolted on at the end. If it's a paid-entry draw, there's a free postal or online entry route with equal odds, which is exactly what keeps it legal rather than an unlicensed lottery. Want to understand the mechanics? How online prize draws work walks through it, and you can browse genuinely vetted options on the best UK raffle sites.
None of the real ones will DM you a "you've won" out of the blue with a payment request attached. If you've entered a few draws and you're nervous about which were legit in the first place, our roundup of the best prize draw sites in the UK is a safer starting point than chasing a message from a stranger.
How to report a fake prize draw scam in the UK
Reporting does two things: it can claw back money if you've paid, and it gets the fraudulent account taken down faster.
- Stop all contact and pay nothing more. If you've already paid, ring your bank straight away on the number on the back of your card and ask about the fraud refund process.
- Report to Action Fraud — the UK's national fraud reporting centre — online or on 0300 123 2040. In Scotland, report to Police Scotland on 101.
- Report the account to the platform. On Facebook or Instagram, use the in-app "Report" option on the profile or message and pick the scam/impersonation reason. Reporting the page, not just the message, helps Meta act on it.
- Warn your network. A quick post telling friends the page is fake stops it spreading through the very people the scammer is targeting.
- Forward phishing texts to 7726 (it spells "SPAM") and suspicious emails to report@phishing.gov.uk.
If money left your account by bank transfer, you may be covered by the voluntary reimbursement rules most UK banks follow for authorised push payment fraud. The sooner you flag it, the better your odds.
The one rule that beats every version of this con
Strip away the logos and the urgency and every one of these scams collapses to a single demand: give us money, or give us the details that let us take your money. A genuine UK prize draw does neither. You won, so they pay you — not the other way round. Keep that straight in your head and the slickest fake "you've won" message in the world loses its grip.
FAQ
Are most Facebook competition scams in the UK obvious fakes?
Not any more. The crude ones still exist, but plenty of Facebook competition scams now use cloned brand pages, lifted logos and convincing copy. The reliable tells aren't visual — they're behavioural: contacting you first, demanding a fee, asking for bank or card details, and pushing a fake deadline. Judge the behaviour, not the branding.
How do I know if I really won a prize draw?
A real win comes through the exact account or email you entered with, from the brand's genuine verified handle or official domain, with no fee to claim and no request for your bank login or a one-time passcode. If anything asks you to pay or hand over security details, it's fake. Verify by contacting the operator independently through their real website.
Is it ever normal to pay a fee to claim a UK prize?
No. Under UK rules a prize draw can't make you pay to collect a prize you've won, and legitimate operators don't charge "release", "postage", "customs" or "insurance" fees. Any pay-to-claim demand is an advance-fee scam. Read are prize draws legal in the UK for the legal basics.
What should I do if I already paid an Instagram giveaway scam?
Call your bank immediately on the number on your card and ask about fraud reimbursement, then report to Action Fraud on 0300 123 2040 (or Police Scotland on 101). Report the Instagram account in-app for impersonation or scam, and change any passwords you shared. Acting fast improves your chance of getting money back.
Do real prize draws ever message you on WhatsApp?
Occasionally a winner might be contacted on WhatsApp if that's how they entered, but a WhatsApp competition scam usually starts on Facebook and jumps to private chat to escape moderation. Be very wary of any "win" that hustles you off-platform quickly, and never share a verification code or card details there.
How can I check whether a prize draw site is legit before entering?
Look for proper company details, clear terms, a genuine free entry route and verifiable past winners. Our how to spot a legit UK raffle site guide and how we review page lay out exactly what to check, and you can compare vetted options on the best UK raffle sites.