Scams and safety
This is not a policy that could change — it is a consequence of how tickets work. Understanding why makes every fake notification obvious on arrival.
The most useful fact in this entire subject is also the least widely known: a lottery cannot notify you that you have won, because it does not know who you are.
Not "does not, as a matter of policy". Cannot. The information was never collected.
A retail lottery ticket is a bearer instrument. Whoever physically holds it owns the claim. The terminal in the shop recorded a sale — game, numbers, draw date, price — and printed a slip. It did not record a customer, because there was no reason to and, in most jurisdictions, no lawful basis to.
Three consequences follow directly, and each one kills a category of scam:
Mega Millions states the rule without qualification: "No representative of Mega Millions would ever call, text, or e-mail anyone about winning a prize" (Mega Millions, Lottery Scams).
It also disposes of the entity the scam usually invokes: Mega Millions is a game, not an organisation. There is no Mega Millions head office with a claims department, because the game is run by a consortium of participating state lotteries and, as its FAQ notes, "any winning tickets must be redeemed in the state or jurisdiction in which they were purchased" (Mega Millions FAQ).
If you bought through an operator's own registered online account, the operator obviously does know who you are — you gave it a name, an email and payment details, and identity checks are a licensing requirement.
Even here the shape is different from the scam in three ways:
So the test is not "did an email arrive?" but "does the win appear when I log into the account myself, from a URL I typed?" A cold email about a game you do not hold an account with fails at the first step.
The mechanics vary by operator and prize size, but the architecture is consistent worldwide: the value of the prize determines where you take the ticket.
| Prize band | Typical route |
|---|---|
| Small prizes | Paid over the counter by a licensed retailer |
| Mid-size prizes | Regional claim centre, or claim by post with a signed form |
| Large prizes and jackpots | Operator head office or designated claim centre, in person, with identification |
Two features are near-universal and worth knowing before you need them.
You must present the ticket. Physical possession is the claim. This is why signing the back matters, and why a lost ticket is usually an unrecoverable loss — a point that also underlies retailer fraud and ticket theft.
There is a hard deadline. Claim windows are finite and prizes genuinely expire: 180 days from the draw in the UK, 90 days in Ireland (Irish National Lottery), and 180 days from the draw date for Texas draw games (Texas Lottery FAQ), with other US states varying from 90 days to a year.
Because a real claim requires you to bring the ticket to them, no legitimate process ever involves you sending money first. There is nothing to send it for.
If a genuine large win does happen, the sequence that follows is time-sensitive and mostly happens before any money moves — that is the subject of the first 72 hours after winning.
Since the operator will not tell you, you check. Do it in a way that cannot be intercepted:
Operator-published draw results are the authority. News aggregators and social posts are not, and a screenshot is not evidence of anything.
Once you accept that operators do not contact winners, several claims collapse without further analysis:
Real lotteries do not know who their winners are, so they never make contact. If a lottery contacted you first, it was not a lottery.
Everything else in this cluster is elaboration on that sentence: the full scam anatomy, ten red flags, and where to report.
Last verified: 2026-08-29