A real win and a scam both start with the same three words: "You've won!" The difference is in what happens next — and a scammer is counting on your excitement to skip the checks. Before you reply to any prize notification, run it through this short verification routine. If it's legitimate, it'll pass easily; if it's not, you'll catch it before any harm is done.
Match it to an entry you actually made
Start with the most basic question: can I point to the exact giveaway I entered? A legitimate notification references a specific promotion you signed up for, through the channel you used to enter. If the message is about a contest you don't remember entering, or a brand you never followed, that's not a lucky surprise — it's a mass-blast scam.
This is exactly why keeping a simple tracker of what you've entered pays off. When a "winner" email arrives, you check it against your list in seconds. No entry on the list means no win, full stop — genuine sponsors don't pull your name out of a giveaway you were never part of.
Contact the sponsor through their real channels — not the message
Never verify a win by replying to the message itself; scammers control that channel. Instead, go independently to the brand's official website or verified social account and confirm the giveaway exists, has ended, and that winners are being contacted. A real promotion leaves a public trail — an announcement, a pinned post, official rules you can re-read.
Look at how a real winner is expected to be notified, which the official rules usually spell out. Legitimate sponsors confirm wins in businesslike ways — a signed affidavit, address confirmation for shipping — and give you reasonable time to respond. If your independent check turns up nothing about the giveaway anywhere, the notification is fake no matter how convincing it looks.
Never pay or hand over sensitive details to "claim"
Once you've confirmed a win is real, claiming it is simple and free. A legitimate sponsor will never require a payment, a gift-card code, your online banking password, or a full Social Security number up front to release a prize. Those requests are the scam itself, arriving right at the moment you're most likely to comply.
If a message pressures you to act within hours or to keep the win "confidential," slow down — urgency and secrecy are manipulation, not procedure. Verify the entry, confirm through the brand's real channels, and refuse any request for money or credentials; pass all three and you can finally celebrate.