Competition Scams: How to Stay Safe Comping in the UK (2026)

▍Competition Scams: How to Stay Safe Comping in the UK (2026)

If you enter UK competitions regularly, you'll encounter scams. Not might — will. Scammers know compers are willing to share personal details, expect unexpected "you've won" messages, and act quickly when prompted. That makes us a target. In 2024 alone, UK consumers reported over £1.2 billion in fraud losses to Action Fraud, with prize and lottery scams making up a growing slice.

The good news: nearly every competition scam follows a predictable pattern. Once you know the ten patterns below, you'll spot them on autopilot. This guide covers how UK competition scams work in 2026, the red flags that should always make you stop, what to do if you've already been scammed, and how the landscape has shifted with AI deepfakes and crypto giveaway fraud.

If you're brand new to the hobby, start with our comping for beginners primer first — knowing what a real UK competition looks like makes the fakes obvious. And if you want a verified daily feed instead of trawling Instagram yourself, the Sweepzy competition tracker only lists comps from established UK brands.

▍Why compers are a target

Fraudsters don't waste effort. They go where the conversion rate is highest, and active UK compers fit a near-perfect profile:

• You expect unsolicited "you've won" messages — most people would immediately suspect a scam, but compers naturally think "oh, which one was that?"
• You're used to sharing your name, address, DOB and phone number with brands you've never bought from
• You're responsive — most compers reply to winner notifications within hours, which suits scammers running time-pressured fee scams
• You follow a lot of accounts, some of which are easy to impersonate
• A meaningful minority of compers are older retirees who may be less familiar with phishing tactics

The goal of most competition scams isn't to steal money directly. It's to harvest data (resold to other fraudsters), build follower count on fake accounts (sold to influencer fraud rings), or trick you into installing malware that captures your banking app credentials weeks later.

▍The 10 most common UK competition scams in 2026

Memorise this list. Every variant you'll see is a tweak on one of these ten patterns.

1. The fake winner DM

What it looks like: A direct message on Instagram, Facebook or TikTok saying "Congratulations! You're our winner of the £500 Tesco voucher giveaway. DM us your details to claim." Sometimes from an account that looks legitimate at first glance, sometimes from a freshly-created profile.

The tell: Real brands almost never use DMs as the primary notification channel for major prizes. They use the email address you entered with, sometimes a public comment tagging you, and they don't push you to act in minutes.

Protection: If you don't remember entering, you didn't enter. If you do remember entering, check the message is from the exact account you entered with (not a lookalike). Visit the brand's verified profile and check their pinned posts or stories for a winner announcement.

2. The payment-to-claim scam

What it looks like: You've supposedly won — but to release the prize, you need to pay £4.99 shipping, a £15 "administration fee", a £25 "customs charge", or a £50 "insurance fee for high-value items".

3. The verification fee scam

What it looks like: A variant of the payment scam, dressed up as security. "To verify your identity and prevent fraud, please send £10 via gift card / bank transfer / cryptocurrency. This will be refunded once your prize is dispatched."

The tell: Real verification (when it happens at all) is unpaid. Brands occasionally ask for proof of address or ID for high-value wins, but they never ask you to pay for the privilege of being verified.

4. Phishing emails impersonating brands

What it looks like: A polished email purporting to be from Tesco, Amazon, John Lewis, Costa or another household name. "You've been selected for our customer loyalty draw — click here to confirm your details." The link goes to a near-perfect copy of the brand's site, which captures your login or payment details.

The tell: Hover over the sender address (don't tap on mobile — long-press to preview). Real emails come from the brand's actual domain (@tesco.com, not @tesco-rewards.co.uk or @tescoprizes.net). The destination link in the email body should match.

Protection: Never click links in winner emails. Open a new browser tab, type the brand's URL directly, and log in there. If you really won, the win will be visible in your account or in your real-email inbox from their genuine domain.

5. Copycat Instagram accounts

What it looks like: An account called @boots.uk_official or @johnlewis.uk.giveaways running a giveaway that looks identical to the real brand's promotional style. Same logo, same colour palette, often reposted images from the real brand.

The tell: The handle is wrong. Real brand accounts have either a verification badge (blue tick on Meta), the cleanest possible handle (@boots, @johnlewis), and are linked from the brand's official website footer. Copycats add words like official, uk, giveaways, rewards, promo, or use underscores and full stops to mimic the real handle.

Protection: Before you enter, visit the brand's verified site (type the URL yourself) and follow the social link from the footer. That's the real account. Anything else with a similar name is suspect.

6. Crypto giveaway scams

What it looks like: A celebrity or brand seemingly hosting a "crypto giveaway". "Send 0.1 ETH to this address and we'll send 0.2 ETH back!" Often uses deepfake video of Elon Musk, Martin Lewis, or other recognisable figures.

7. Fake Amazon voucher pages

What it looks like: "Congratulations, you've won a £750 Amazon voucher! Just complete this survey and enter your card details to confirm your address." Often appears as a pop-up or browser redirect after clicking a suspicious ad.

The tell: Amazon doesn't run unsolicited voucher draws via pop-ups. Voucher winners receive an Amazon email with a code that's entered into your Amazon account at checkout — no card details required, ever.

Protection: Close the browser tab. Don't engage. If you've already entered card details, contact your bank immediately and request a card replacement, then monitor statements for the next three months.

8. Romance-comping hybrid scams

What it looks like: Someone you've been chatting to on a dating app or in a comping Facebook group casually mentions a "guaranteed-win" competition system, a paid "comping mentor" service, or a private platform that requires a subscription. Sometimes they're "helping you" by entering on your behalf if you share login details.

The tell: Real comping is free. Anyone selling you access, mentoring, software with guaranteed wins, or asking for your login credentials is running a scam — usually a longer one designed to extract escalating sums over weeks.

Protection: Never pay for comping advice or access. Never share login credentials with anyone, including "comping friends". The whole point of the hobby is it costs nothing.

9. The "you've been selected" lookalike text

What it looks like: An SMS that reads "Hi [Your First Name], you've been selected as a winner in our weekly draw. Claim here: [shortened link]" — often from a UK mobile number to make it look local.

The tell: Genuine SMS winner notifications are rare and always include the brand name clearly. They never use URL shorteners (bit.ly, tinyurl) because real brands want their domain visible. They don't address you by first name only with no context.

Protection: Don't click. Forward suspicious texts to 7726 (the UK's free spam-text reporting line — it spells SPAM on a keypad) and delete.

10. Click-the-link-to-claim malware

What it looks like: An email or DM with a tracking link, supposedly for claim instructions or to download an entry form. The link installs malware, browser hijackers, or asks for permissions that hand over your accounts.

The tell: Real prize claims happen via email replies or simple web forms on the brand's main site. They don't require downloads, PDF viewers you've never heard of, or browser permissions.

Protection: If you've clicked, run a reputable antivirus scan immediately. Change passwords on any device the click happened on, prioritising email and banking. Enable two-factor authentication on everything if it isn't already.

▍The red flags checklist

Most scams fail at least three of the following twelve checks. If a competition or winner notification fails any one of them, stop and verify before going further.

A legitimate UK competition will pass all twelve, comfortably. We covered the wider mechanics of legitimate UK competitions in our ultimate guide to comping — read that if you want a clear mental model of what "normal" looks like.

▍How comping scams evolved 2024-2026

The big shifts in the last two years:

AI deepfakes have arrived. Convincing video of celebrities endorsing fake giveaways is now generated in minutes. The Martin Lewis crypto deepfakes that surfaced in 2023 looked obviously fake to most people — the 2026 versions don't. Treat any celebrity video endorsement of a giveaway as fake until proven otherwise on the celebrity's verified accounts.

Voice cloning targets vulnerable winners. Some scammers now follow up phishing emails with phone calls using AI-cloned voices — sometimes mimicking the brand's customer service tone, sometimes claiming to be a relative who's "helping you claim". If you're ever phoned about a prize, hang up and call the brand back on their published number.

Fake influencer giveaways are industrial-scale. Bot networks set up dozens of copycat "giveaway" accounts a week, run them for a few days, harvest follower data, and abandon them. The volume of fake accounts on Instagram has roughly tripled since 2023 by some estimates.

Scam payment methods have shifted from bank transfer to gift cards and crypto. Both are functionally irreversible. UK banks have got much better at flagging unusual transfers — scammers have responded by routing victims to Currys, Tesco or Argos for gift cards instead. The "please buy a £100 Amazon voucher and send us the code" instruction is one of the highest-confidence scam signals in 2026.

Brand impersonation has got slicker. Phishing pages now load real brand stylesheets, complete with working dark-mode, real cookie banners, and live chat widgets that connect to real human scammers. Visual inspection alone is no longer enough — you must verify the URL.

▍What to do if you've been scammed

The first 24 hours matter most. Work through this list in order.

Step 1: Stop further loss immediately

• If you sent money: call your bank's fraud line (the number on the back of your card) within hours. UK banks operate the Contingent Reimbursement Model for authorised push payment fraud — they may refund you if you report quickly.
• If you shared card details: request an immediate card freeze and replacement through your banking app.
• If you sent gift card codes: call the gift card issuer (Amazon, iTunes, Steam) — they occasionally void unredeemed codes.
• If you sent crypto: it's almost certainly gone. Don't send more chasing it.

Step 2: Lock down your accounts

• Change passwords on email, banking, comping account, and any account using the same password
• Enable two-factor authentication on all critical accounts
• Sign out of every active session in your email account settings
• Check email forwarding rules — scammers often add silent forwards to siphon future bank emails
• Review your bank statements for the next 90 days

Step 3: Report it

• Action Fraud: the UK's national reporting centre for fraud and cyber crime. Report at actionfraud.police.uk or 0300 123 2040.
• Your bank (if money was lost), which may trigger faster recovery action.
• The social platform the scam ran on — every major platform has a "report account" or "report scam" option in the user's profile menu.
• The brand being impersonated. They want to know. Their press or PR team usually has a fastest path to taking down fake accounts.
• The ASA (Advertising Standards Authority) if the scam ran as a paid social ad — they can pressure platforms to remove similar ads.
• The CMA (Competition and Markets Authority) for systematic consumer-facing scams.

Step 4: Recover and protect future-you

• Tell other compers in any forums you use — your story prevents the next person
• Audit your real comping inbox to make sure you're not entering through dodgy aggregators
• Switch to a verified competition source like the Sweepzy competition tracker where comps are filtered before listing
• If the experience knocked your confidence, take a break — our competition burnout guide covers how to step away healthily and come back later

Getting scammed isn't a moral failure — these scams work precisely because they're well-designed and targeted. Reporting and learning is the right response; quitting the hobby because someone took advantage of you is the wrong one.

▍Safe-comping setup: the five things to do before your next entry

If you've read this far, here's the quick version of bulletproofing your comping setup:

1. Use a dedicated comping email with a strong, unique password and 2FA enabled. Marketing emails go there; your main inbox stays clean; if it's ever compromised, your real life isn't affected.
2. Never reuse your banking password for any comping account, forum, or aggregator. Use a password manager (Bitwarden and 1Password both have free tiers).
3. Set browser warnings to maximum and don't dismiss "this site is not secure" alerts when entering competitions.
4. Bookmark the real social accounts of the brands you regularly enter. That way you're always one tap away from the genuine account and won't accidentally engage with a copycat.
5. Track your entries in something — a spreadsheet works, the Sweepzy tracker works better — so when a "you've won" message appears, you can immediately check whether you actually entered. Memory alone isn't enough once you're running 20-30 entries a day.

The combined effect of these five habits is that nearly every scam attempt becomes obvious before it can cause damage. You'll still see them; they just stop working on you.

▍A note on legitimate prize verification

Real brands do occasionally need to verify winners — a fact scammers exploit by mimicking the verification process. Knowing what genuine verification looks like helps:

• Legitimate verification asks for proof of address (a utility bill, bank statement with bank details redacted, council tax bill) — not full ID front-and-back.
• It happens after initial contact via your registered email — not before, not via DM.
• It's always free to the winner.
• The brand will confirm receipt through their official channels.
• High-value wins (cars, holidays) may involve a signed acceptance form — this is normal, and again costs nothing.

If you're unsure whether a verification request is genuine, contact the brand's customer service via a number you've sourced yourself (not one in the email or message). Two minutes of phone time is cheaper than any scam.

▍Conclusion

Competing in UK competitions is overwhelmingly safe when you know what to look for. The vast majority of scams collapse the moment you apply the red-flag checklist. The few that don't tend to depend on urgency and emotion — the antidote to which is simply pausing for ten minutes before responding to any "you've won" message.

Keep this guide bookmarked, share it with anyone in your comping circles, and report every scam you encounter. The fraud landscape only shrinks when reports go up.

Ready to come back to safer comping? Browse a vetted feed at the Sweepzy competition tracker, or create a free Sweepzy account to start logging entries securely with two-factor authentication.

Keep reading:

• Competition burnout: how to stay motivated
• Managing your comping hobby healthily
• Ultimate guide to comping
• Comping for beginners
• Privacy and data protection in competitions