"You've won a prize": the fake prize draw by call or text that asks you to pay

"You've won a prize": the fake prize draw by call or text that asks you to pay

"Congratulations! You've been selected as the winner of an iPhone 16 in our loyalty draw. To claim your prize, pay the £1.95 delivery charge here." Or a cheerful call: "You've won a £500 supermarket voucher, I just need to confirm a few details." It's exciting for a second, but if you have to pay to receive a prize, it isn't a prize: it's a scam. And the small fee is never the real goal: they want your card details.

How does the fake prize scam work?

1. The bait. A text, a WhatsApp message, an email or a call telling you you've won: a phone, a voucher for a big supermarket, a cash prize, a holiday or "a lottery you were entered into automatically".
2. The small cost. To receive it you only need to pay "delivery", "handling", "insurance" or "tax". The amount is small on purpose (a pound or two, sometimes a bit more) so you won't think twice.
3. The fake page. The link takes you to a website imitating the brand, with a countdown timer and fake comments from other "winners". There they ask for your full card details.
4. The real goal. With your card number, expiry date and security code, they make larger payments, or sign you up for a hidden subscription that takes money every month. Sometimes they also ask for the code your bank texts you, "to confirm the delivery".
5. On the phone. The caller may ask for your bank details "to pay in the prize", or for a fee to be paid by transfer or gift cards. Sometimes the prize grows in later calls, along with the fees.

Why does it look believable?

• They use real brand names: supermarkets, mobile networks, delivery firms, the National Lottery or well-known tech brands.
• The amount is tiny, so it doesn't feel risky.
• The page looks professional, with logos, colours and testimonials.
• They know your name, often taken from data breaches, which makes the message feel personal.
• They create urgency: "you have 24 hours to claim", "only 3 prizes left".

What are the red flags?

• You didn't enter any competition or draw.
• You have to pay to receive the prize. Genuine prize draws don't charge winners a fee.
• They ask for your full card details or a texted code. To pay you a prize, nobody needs your card's security code or a one-time passcode.
• The link isn't the brand's official domain.
• Urgency and countdown timers.
• Payment by gift card, cryptocurrency or transfer to an individual.
• Lotteries you never entered. You can't win the National Lottery or a foreign lottery without buying a ticket.

What should I do if they've just called or texted me?

1. Don't tap the link and don't reply.
2. If it's a call, hang up. Don't confirm your name, address or anything else.
3. If you want to check, go to the brand's official website or app yourself, or call its customer service on a number you've looked up. A genuine winner is contacted in a way you can verify.
4. Forward the text to 7726, free on most networks, so your provider can block the sender, as the NCSC explains. Scam emails go to [email protected].
5. Block the number and report it in the spam numbers directory.

What if I've already paid or given my card details?

1. Call your bank straight away on 159 or the number on the back of your card and ask them to block the card. Tell them if you also gave a texted code.
2. Check your statements over the following weeks for unrecognised payments or small recurring charges from subscriptions you never agreed to.
3. Ask your bank to dispute any unauthorised payment. If the card details were used without your permission, your bank should be able to look into it.
4. If you paid by bank transfer or gift card, tell your bank or the gift card company immediately; the sooner, the better the chance of stopping it.
5. Change passwords if you created an account on the fake site using a password you use elsewhere.

Where do I report it?

• Report Fraud (formerly Action Fraud) on 0300 123 2040 in England, Wales and Northern Ireland, or Police Scotland on 101, if you've lost money.
• Citizens Advice can help you check whether something is a scam and report it.
• Your phone provider: forward texts to 7726; the NCSC explains how to report scam calls.
• NoCall: report the number in the spam numbers directory.

Frequently asked questions

What if I really did enter a draw from that brand? Check through the brand's official website or app, or by calling its customer service on a number you've found yourself. A real prize won't require you to pay a fee or give your card's security code.

It was only £1.95. Should I worry? Yes, because they now have your card details and can use them for larger payments or subscriptions. Call your bank and block the card, however small the amount.

How do they know my name? Probably from a data breach or a list bought from third parties. Knowing your name doesn't make the message genuine.

In short

A prize you have to pay for isn't a prize. Don't tap links, don't give card details or codes, and check any "win" through the brand's official channels. If you've already paid, call your bank and block the card. And if one of these texts or calls has reached you, report the number in the NoCall spam numbers directory: your warning could stop someone else from "claiming" it.