SecurityJune 10, 20268 min read

How to Protect Yourself From Lottery and Sweepstakes Scams

SC

By Sarah Chen

Head of Privacy Research

How to Protect Yourself From Lottery and Sweepstakes Scams

Every year, hundreds of thousands of Americans receive messages telling them they've won a lottery or sweepstakes they never entered. The excitement is by design. Lottery and sweepstakes scams are among the most profitable fraud schemes in the country, with older adults losing disproportionately more than any other age group. According to the FTC, consumers reported losing over $301 million to prize, sweepstakes, and lottery scams in a single year. Here's how these scams work, how to spot them, and what you can do to protect yourself and the people you care about.

How Lottery and Sweepstakes Scams Work

The scam unfolds in predictable stages:

  1. The initial contact: You receive a notification — by email, text message, phone call, letter, or social media message — telling you that you've won a large prize. The sender may claim to represent a well-known organization like Publishers Clearing House, a fictional entity like the "National Sweepstakes Bureau," or even a real government agency like the FTC.
  2. The hook: The message states you've won a substantial amount — often hundreds of thousands or millions of dollars. It may include official-looking logos, reference numbers, and agent names to appear legitimate.
  3. The demand: To claim your "winnings," you're told you must first pay a fee. Scammers label these charges as processing fees, taxes, shipping costs, customs duties, insurance, or legal fees. The amounts typically start small — a few hundred dollars — to test your willingness to pay.
  4. The escalation: Once you pay, additional fees keep appearing. Each payment is followed by another reason you can't receive your prize yet. Victims who pay once are far more likely to pay again, and scammers exploit this aggressively.
  5. The fake check: Some scammers send what appears to be a partial payment — a check for thousands of dollars — and ask you to deposit it and wire back the "taxes" or "fees." The check bounces days later, but the money you wired is gone permanently.

The Golden Rule of Sweepstakes

Legitimate sweepstakes never require you to pay anything to claim a prize. Not taxes, not fees, not shipping — nothing. Federal law prohibits requiring payment to enter or win a legitimate sweepstakes. If someone asks you to pay to collect winnings, it is a scam. No exceptions.

Red Flags That Reveal a Lottery or Sweepstakes Scam

Scammers rely on excitement overriding your judgment. Knowing the warning signs makes you far harder to deceive:

  • You didn't enter any contest. This is the single most important red flag. You cannot win a sweepstakes or lottery you never entered. Period.
  • Generic greetings. Messages addressed to "Dear Winner," "Lucky Customer," or "Valued Participant" rather than your actual name suggest mass distribution.
  • Spelling and grammar errors. Official communications from legitimate organizations go through quality checks. Misspellings, awkward phrasing, and formatting errors are common in scam messages.
  • Upfront payment required. Any request to pay fees, taxes, or charges before receiving a prize is fraudulent. Real sweepstakes deduct taxes from winnings — they don't ask winners to prepay them.
  • Urgency and pressure. "You must respond within 24 hours or forfeit your prize" is a pressure tactic designed to prevent you from thinking critically or consulting others.
  • Secrecy requests. Scammers often tell victims not to tell anyone about the winnings "for security reasons" or "until the transfer is complete." This isolates victims from people who would recognize the scam.
  • Foreign lotteries. It is illegal for U.S. residents to play foreign lotteries. Any message claiming you've won a foreign lottery — from Jamaica, the Netherlands, Australia, the UK, or elsewhere — is a scam.
  • Untraceable payment methods. Requests to pay via wire transfer (Western Union, MoneyGram), gift cards, cryptocurrency, payment apps (Zelle, CashApp, Apple Pay), or mailing cash are designed to make the money unrecoverable.

Who Gets Targeted — and How

Lottery and sweepstakes scams don't target people at random. Scammers build detailed profiles of potential victims using information purchased from data brokers, harvested from social media, or obtained through previous data breaches. They specifically look for:

  • Older adults: Adults over 60 are disproportionately targeted and lose significantly more money per incident. The AARP has identified sweepstakes scams as one of the top fraud threats facing seniors.
  • People on "sucker lists": If you've responded to a scam before — even just by replying to an email — your contact information gets sold to other scammers on lists of proven responders.
  • People with extensive online profiles: The more personal data available about you online, the more convincingly a scammer can personalize their approach. Your name, age, address, phone number, and financial status are all available on data broker sites.

Scammers also impersonate real organizations to add credibility. The FTC has warned about scammers using the FTC's own name, and Publishers Clearing House regularly issues alerts about fraudsters impersonating their brand.

Common Variations of the Scam

The Phone Call Scam

A live caller — often friendly, professional, and persistent — congratulates you on winning. They build rapport over multiple calls before requesting payment. AI voice technology has made these calls more convincing than ever.

The Social Media Scam

Scammers create fake accounts impersonating well-known brands or sweepstakes companies and send direct messages claiming you've been selected as a winner. They move the conversation to private messaging to request payment.

If You Didn't Enter, You Didn't Win

This is the simplest and most effective test. Legitimate sweepstakes require an entry. If you don't remember specifically entering a contest, the notification is fraudulent. Don't let curiosity or excitement override this basic logic check.

How to Protect Yourself

  1. Never pay to collect a prize. No legitimate sweepstakes, lottery, or contest requires upfront payment of any kind. Walk away from any "winning" notification that asks for money.
  2. Never share personal or financial information. Don't provide your Social Security number, bank account details, credit card numbers, or copies of identification to anyone contacting you about a prize.
  3. Don't click links in unsolicited messages. Scam emails and texts often contain links to phishing sites designed to steal your credentials or install malware. If you want to verify a claim, navigate to the organization's website directly by typing the URL yourself.
  4. Verify independently. If a message claims to be from a real company, contact that company directly using the official phone number from their website — not the number provided in the message.
  5. Delete suspicious messages immediately. Don't reply, don't click, don't engage. Even replying "stop" confirms your contact information is active and leads to more scam attempts.
  6. Talk to someone you trust. Scammers use secrecy and urgency to prevent victims from seeking outside perspectives. Before taking any action, discuss the situation with a family member, friend, or financial advisor.
  7. Report the scam. File a report with the FTC at ReportFraud.ftc.gov. You can also report to your state attorney general's office and the U.S. Postal Inspection Service if the scam came by mail.

Protecting Elderly Family Members

Seniors are the primary target demographic for lottery and sweepstakes scams, and the consequences can be devastating — some older adults have lost their entire life savings to persistent scammers over weeks or months. If you have elderly family members:

  • Have the conversation early. Explain how these scams work before your loved one encounters one. Make it clear that no legitimate prize requires payment.
  • Establish a check-in system. Ask elderly relatives to call you before responding to any prize notification or sending money to anyone for any reason.
  • Help them set up call blocking. Most phone carriers offer free scam call filtering. Enable these features on their phones.
  • Watch for behavioral signs. Unusual secrecy about phone calls, unexplained financial transactions, sudden purchases of gift cards, or requests to wire money are all warning signs.
  • Remove their data from broker sites. The less information available about your family members online, the harder it is for scammers to target them with personalized attacks.

Reduce Your Exposure With Proactive Privacy Protection

Lottery and sweepstakes scammers rely on personal data to find and target their victims. Data broker websites publicly list your name, address, phone number, age, family members, and estimated income — exactly the information scammers need to craft convincing messages and identify vulnerable targets. PrivacyOn automatically removes your personal information from over 100 data broker sites and continuously monitors for reappearance, cutting off the data pipeline that scammers depend on. Combined with dark web monitoring that alerts you when your information surfaces in breaches, PrivacyOn provides a meaningful layer of defense against the targeted fraud campaigns behind lottery and sweepstakes scams. Plans start at $8.33 per month — a small investment compared to the hundreds of millions lost to these scams each year.

SC
Sarah Chen

Head of Privacy Research

CIPP/US CertifiedIAPP MemberB.S. Computer Science

CIPP/US-certified privacy researcher with over a decade of experience helping consumers remove their personal information from data brokers.

Ready to Protect Your Privacy?

Let PrivacyOn automatically remove your personal information from data broker sites and keep it removed.