A free holiday, a new phone or a shopping voucher can make an ordinary afternoon more interesting. A giveaway should be fun. Unfortunately, a convincing prize post can also be a way to collect personal details or send you to a fraudulent payment page.
A few minutes of checking can save you much more trouble than you might gain by entering quickly.
Start with the organiser, not the prize
Look for the promotion on the organisation’s own website or established social account. Type the address yourself or use a bookmark rather than following the link in an unexpected message. A familiar logo or a blue tick is not, by itself, proof that the offer is genuine.
Check the account name carefully. A fake may add a full stop, extra letter or unusual suffix to a real company’s name. New accounts with very little history, copied posts or comments disabled deserve more scrutiny. None of these signs alone settles the question, but several together are a good reason to walk away.
Read the rules before entering
A trustworthy promotion should explain who runs it, the prize, eligibility, closing date, how a winner is selected and how they will be contacted. If the only information is “share and comment to win”, look for the actual terms. Rules cannot guarantee honesty, but a complete absence of them makes it harder to check the offer.
Be cautious when asked to pay a shipping charge, processing fee or supposed tax before receiving a prize. The US Federal Trade Commission warns that these are common prize-scam tactics. Local laws and legitimate tax obligations vary, but an unexpected demand to send money to claim a prize is a strong reason to stop and independently verify the offer.
Protect your email and accounts
An email address alone can still lead to a flood of spam or targeted phishing. Read the privacy notice to see who receives it and whether marketing consent is optional. Do not provide a password, one-time sign-in code or full payment card details to enter a giveaway.
A scammer may contact people who commented on a genuine post, pretending that each has won. If someone directs you to a separate account or a website asking for card details, contact the organiser using details you found independently.
What if you already clicked?
Close the page and avoid providing more information. If you entered a password, change it through the real service and secure any other account where you reused it. If you supplied payment details or sent money, contact your bank promptly using its official number. Report the impersonating post to the platform and, where relevant, your local fraud-reporting service.
You do not have to enter every draw. A real offer will still be worth checking when the excitement has passed.