Ten Red Flags in a Lottery Win Notification

A fraudulent prize notification usually contains several of the following. A genuine one contains none of them — because, as the next few paragraphs explain, a genuine one mostly does not exist.

Each flag below comes with why it is a tell, because a rule you understand survives contact with a persuasive stranger and a memorised list does not.

1. You did not buy a ticket in that game

Why it is a tell: entry is a precondition of winning. There is no mechanism by which a draw game selects a non-participant.

Mega Millions states it flatly: "You can't win any legitimate lottery if you didn't buy a ticket" (Mega Millions, Lottery Scams). This single question resolves the large majority of approaches, and it requires no expertise at all. If a "free entry" is claimed on your behalf, ask when and by whom — the answer will not survive.

2. You are asked to pay anything at all

Why it is a tell: deductions come out of the prize, not out of your bank account.

The FTC's guidance is a single unambiguous sentence: if you have to pay to get your prize, it is a scam — and it names the specific covers used, including "taxes", "shipping and handling charges", "processing fees" and "customs duties".

The reasoning is worth holding on to, because the tax framing is the most persuasive one. Where prizes are taxed at source — US federal withholding, for instance — the operator withholds from the prize and pays you the balance. The money to cover the deduction is already in the payer's hands. No real payer asks the payee to fund a deduction. The country-by-country position is in lottery tax by country.

3. The organisation named does not exist

Why it is a tell: real lotteries are licensed legal entities that appear on public registers.

Mega Millions lists invented bodies used in its name — "United States National Lottery", "Mega Millions Mobile Lottery", "USA UK Mega Millions Lottery", "Mega Millions Corporation", "Mega Millions International Lottery" — and notes that Mega Millions is a game, not an organisation. Names of this shape ("National", "International", "Corporation") are constructed to sound institutional.

You can check in two minutes. How to verify an operator's licence lists the public registers by country, starting with the UK Gambling Commission's.

4. It is an "international" prize, or you are outside the game's market

Why it is a tell: lotteries are licensed to sell in defined territories and do not run cross-border prize draws for people who cannot legally play.

Mega Millions: "Real lotteries do not hold 'international' sweepstakes, contests or awards for people who live outside their market area." Mega Millions is sold only in the United States. A US-lottery win notification arriving in Britain or Australia is settled before you read the rest.

The FTC adds that it is illegal for US consumers to play a foreign lottery — so an invitation to do so is an invitation to break the law, from someone claiming to be legitimate.

5. The notification arrived by email, DM, text or cold call

Why it is a tell: a retail lottery ticket is a bearer instrument, and the operator holds no contact details against it.

This is structural rather than a matter of policy. The terminal that printed the ticket recorded a sale, not a customer. There is no address book. Mega Millions puts it as an absolute: "No representative of Mega Millions would ever call, text, or e-mail anyone about winning a prize." The full explanation, including how online-account play differs, is in why no real lottery notifies winners by email.

6. You are asked for bank, card or identity details

Why it is a tell: nobody needs your account number to give you money in the way this is framed, and the details requested are the ones useful for emptying an account or opening credit in your name.

The FTC is categorical: "There's absolutely no reason to ever give your bank account or credit card number, or personal information like your Social Security number, to claim any prize." A real claim is verified by presenting a ticket to the operator, in person or through the operator's own documented process — not by reciting credentials to a caller.

7. A specific, hard-to-reverse payment method is demanded

Why it is a tell: the method is chosen for irreversibility, which is a requirement only for the party who intends to keep the money.

The FTC lists wire transfer through services like Western Union or MoneyGram, payment apps, cash, gift cards and cryptocurrency, and gives the reason: "scammers use these payments because it's hard to track who the money went to. And it's hard to get your money back." Gift cards in particular have no legitimate role in any prize claim anywhere.

8. A cheque arrives and you are asked to send part of it back

Why it is a tell: deposited funds are made available before a cheque clears, so the balance you see is not proof of anything.

The FTC's fake check guidance explains that banks must make funds available quickly but may take weeks to establish that a cheque is worthless — at which point the account holder is liable for the whole amount.

This flag is the most consequential on the list, because forwarding money for a stranger also makes you a money mule. The US Department of Justice names prize fraud as a recruitment route and warns that knowingly moving money for criminal activity can bring criminal charges (DOJ Money Mule Initiative).

9. You are told to keep it secret, or to act immediately

Why it is a tell: both instructions attack your ability to check, and neither has any operational purpose for a genuine payer.

Mega Millions lists confidentiality demands as a warning sign. The FTC lists urgency: scammers "don't want you to have time to think about what's really happening."

There is a genuine reason winners are advised to stay quiet — publicity has measurable costs, covered in the neighbour effect — but that advice comes from you, after verification, not from a stranger before it. A demand for secrecy that arrives with the news is doing the opposite job.

10. Verification is offered on their terms

Why it is a tell: a number, link or "claims agent" supplied by the person contacting you verifies nothing, because it is part of the same operation.

Mega Millions: "If you are told that you can 'verify' the prize by calling a certain number, that number may be part of the scam. Instead of calling it, you should look up the name of the lottery or organization on your own."

This generalises. Every verification step must start from a source you found independently — the operator's website typed in yourself, the regulator's register, a phone number from the back of a real ticket. Caller ID does not help either: the FTC and Mega Millions both note that displayed numbers can be spoofed to look local.

The one-minute version

Any single fail is enough. You do not need a majority.

If a notification fails these, it costs nothing to stop there — and reporting it helps: the aggregate volumes in the FTC's data are built from exactly these reports. Where to report, by country.