Spammers, Scammers & Fake Accounts: How to Fight Giveaway Fraud
by Di · Published · Updated
It’s incredibly frustrating to see a great Instagram giveaway hijacked by fake accounts, spammers or scammers. For the brand, there’s a risk of handing over valuable prizes to fraudsters. For a genuine entrant, it’s disheartening to see a cheater winning. But there are easy ways to prevent this happening – publishing clear T&Cs, choosing winners fairly and contacting winners privately. This post is my guide to keeping social media giveaways fair, safe and stress-free for both the promoter and the entrants!
Most of the problems encountered with social media competitions and prize draws are due to a lack of proper Terms and Conditions. If no rules have been set out upfront, it’s easy for dishonest entrants to take advantage – because officially, they are not actually breaking any rules. And a promoter’s lack of attention to GDPR regulations is an open invitation for scammers to clone profiles and claim prizes.
Every UK prize promotion needs a full set of terms and conditions in order to comply with the CAP Code, which is enforced by the Advertising Standards Authority:
“All promotional marketing should clearly include all significant T&Cs upfront in initial marketing material.”
This means that essential T&Cs must feature directly in the content of an Instagram or Facebook post – it’s not enough to simply state ‘T&Cs apply’. I have a post with more detailed information on what exactly ‘significant T&Cs’ are; read it here. It’s also important to state a closing date and time – and don’t change it. Do not choose winners before that date & time, and do not include entries received after that time.
It’s tricky to include full terms and conditions in a social post because space is limited, but linking to a Google Doc, brand website, or PDF in a bio is a simple solution. Once a brand has created a robust set of T&Cs, they can use that template for all social media comps. Having clear and accessible terms means fans will be more trusting, spammers and scammers will be deterred, and the Advertising Standards Authority will be happy!
If an entrant gets in touch with a promoter and has concerns about fraud or cheating, there’s a good chance their observations are valid, so it’s recommended to take steps to fix the issue. If an entrant believes a prize promotion has not been fairly administered and is not CAP compliant, they can report the promoter to the ASA.

Summary: preventing fraud
- Publish clear T&Cs for every social media promotion
- Limit the number of comments entrants can make
- Add a “No third-party entries” clause so entrants cannot gain extra entries by using alternative accounts
- Validate the winner’s entry by checking they followed all rules
- Contact the winner privately via direct message first, before announcing their name publicly
Tackling the Spammers
Some entrants will spam prize draws with dozens of comments, usually just with a tagged name. The motivation is greed: they won’t engage with non-giveaway content and rarely add any other value to their comments. In some cases, spammers tag their own fake accounts, as well as accounts pretending to be their family members, businesses, or even pets! This certainly isn’t in the spirit of tagging a friend to let them know about a great competition.
Rewarding spamming actively harms a brand’s marketing efforts. If an entrant is only tagging their own fake accounts, they aren’t spreading the word about the brand to new, potential customers. Not only is it unfair to genuine entrants, but it defeats the purpose of a competition, meaning the promoter is giving away a prize to someone who has made no effort to spread the word to genuine potential new fans!
Without access to IP records, it can be difficult to prove an entrant is logging in and out of multiple accounts, but adding a couple of lines to the T&Cs can certainly discourage this behaviour. It’s also highly recommended that ‘last comment wins’ or ‘comment with no likes wins’ competitions are avoided completely. These are stressful for the entrants and heavily encourage spammers.
Before contacting the winner, check their entry was valid and their account looks genuine. It’s incredibly disappointing for genuine fans of a brand to see a prize awarded to a dog, a child or even a rental cottage!
- Only allow a limited number of comments per person (e.g., “To enter, leave one comment tagging 2 different friends. Any further comments will not be included in the draw”).
- Run an effort-based competition where participants have to leave a thoughtful/researched answer to a question, or post an original photo. Spammers want to rapidly enter, so anything that slows them down will act as a deterrent.
- Include an “Only one entry per household” clause to discourage people entering on behalf of multiple family members
- Include a “Third-party entries will be disqualified” clause, or to be crystal clear, use: “Entrants who make an entry on someone else’s behalf will be disqualified.”
- When choosing multiple winners, ask winners to confirm their full name and address details (look for suspicious similarities in case the same person has won twice)
Scammers Impersonating Winners
This is a situation where an impersonator claims the prize before the genuine winner has been in contact. This problem mainly occurs with digital voucher prizes (like Amazon) which are emailed to winners. A brand announces a winner’s name and asks them to get in touch. Then a scammer immediately sets up a fake account using the winner’s name, messages the promoter to claim the prize, and the voucher is sent and redeemed immediately. Then when the genuine winner gets in touch, the brand becomes confused because they have already sent the prize.
If this happens to a brand, they should still give a prize to the genuine winner. It’s not the winner’s fault they lost their prize to a scammer – the blame lies with the brand because their prize promotion was not CAP or GDPR compliant!
- Never rely on a single social media mention as a method of notification.
- Contact winners privately via DM before making any kind of public announcement (announcing a winner’s name or username without giving them the chance to object is a breach of GDPR laws)
- If you’re unable to DM them because of their profile settings, reply to their comment and ask them to DM you. When you receive their DM, visit the profile – then come back to the winning comment and follow the profile link there – check it is the same profile link before you reply or send the prize!
- In the message, ask them to confirm they are eligible for the prize (e.g., UK based, 18+) and check if they are happy for their username/name to be announced as the winner. Ideally, ask to see a copy of their passport or driving licence (tell them to black out any numbers – all you need to see is that the name matches their Facebook profile). This private messaging process means scammers won’t have the opportunity to sneak in a claim.
Scammers Contacting Entrants
This is where a giveaway is targeted by scammers who pretend to be the promoter, then send private ‘Congratulations, you’re a winner!’ messages to the entrants, asking them to complete their details on a fraudulent form (usually asking for credit card details).
- Make it very clear on the original giveaway post how and when winners will be contacted.
- State clearly: “The winner will be contacted by DM before 1 June from THIS account only – please do not respond to any other accounts claiming to be us.”
- If someone flags up a scammer, report the account to Meta immediately.
Stolen Content and AI Entries
Plagiarism or the use of AI to enter a competition is rife. Some entrants use Google search, while others screenshot other people’s photographs to pass off as original. Others will generate entries for creative competitions entirely using AI tools.
- After selecting a winning entry, use Google Lens to see if the image appears elsewhere online.
- Include a clause in the terms: “Entries must be your own original work. Any entries generated by AI or altered using AI tools will be disqualified.”
- If there is any doubt about a winning photo being genuine, the entrant should be asked to email the full-resolution original image for verification.
Winners not randomly chosen
Many brands don’t choose a winner fairly, which means spammers gain an unfair advantage simply because they leave more comments than genuine entrants. Never cherry pick a selection of comments to go onto a ‘spin the wheel’ for broadcast – all comments should go into the initial randomiser tool.
- Use a random picker tool (such as Comment Picker) to choose fairly. To reduce the chance of spammers winning, select the option to ignore duplicate names so each entrant goes into the draw only once (ensuring this was clear in the T&Cs)
- Record the draw process, and if you want to share it, do this after you have contacted the winner (because they need to be given the chance to opt out of publicity)
Voting fraud
A public vote is not a good way to decide a worthy winner of a competition. It opens the floodgates for dishonest behaviour, with some entrants buying votes, incentivising votes, or creating fake accounts to vote for themselves (or even to frame their competitors for fraud!)
- Use a judging panel to decide winners based on set criteria (there should be at least one independent judge)
- Choose a random winner from all eligible entries (my personal preference is to award one judged prize AND one random prize, which keeps everyone happy!)
Guidance for Compers
For the comping community, it is important not to let the cheats and scammers spoil the hobby. When time allows, messages can be sent to brands with a link to this post, asking nicely if they would consider adding a few T&Cs to future giveaways to help prevent fraud.
Contact Promoters Privately
A friendly, private DM to the brand is much more effective than complaining in the comments. Here are some ideas for wording:
“Hello! I noticed that unfortunately this giveaway has been targeted by spammers using fake accounts to gain multiple entries. This post about preventing fraud in social media giveaways might be helpful: https://superlucky.me/stopfraud“
“Hi! I love your new competition. I just wanted to point out there are a few accounts spamming the comments with fake profiles to get extra entries by tagging each other, rather than tagging a genuine friend. From a marketing perspective, this means they aren’t actually helping to spread the word about your brand or increase your reach. When the winner is drawn, it might be worth using a randomiser tool that filters out duplicate entries. And in future perhaps you might consider restricting comments to just one or two per person? This would give everyone a fair chance. Thanks for listening!”
“Hello! I was wondering if I could make a suggestion? I’ve noticed a winner was announced and asked to get in contact. Unfortunately, this is an invitation to scammers, who clone a winner’s profile to claim prizes fraudulently! Perhaps in future, the winner could be contacted privately before announcing, which would also ensure compliance with GDPR. Thank you!”
Finding Friends to Tag
People who aren’t members of comping chat groups or forums may not even be aware that getting multiple entries by tagging their own accounts isn’t ethical. Some use the excuse that they don’t want to bother their real friends or family with tags. But the brand is trying to spread the word about themselves, so tagging a real person is essential! Here at SuperLucky, there is a database of compers who are happy to be tagged and will return the tag at: www.superlucky.me/compersconnect – send them a DM first, before tagging.
Don’t let the bad guys get you down
Most compers play by the rules and have integrity. Those who like to cheat the system are in the minority. Don’t let them ruin enjoyment of your hobby! Rather than investigating the fraudsters, focus that energy on your own comping. Keep playing fair, and remember that good comping karma always wins in the end!


So is this just “if you don’t have friends you can’t enter the competitions”? You say about tagging people from comping groups, but how is that any different from a “fake” account?? These people aren’t helping spread awareness for the business. Making people feel bad for tagging several accounts when the promoter has asked explicitly for that feels a tad out of touch. How do you determine what even is a fake account? There will be several accounts that you might think are fake but are real people and vice versa. Your last comment mentions sending detailed lists seem obsessive and jealous (or being interpreted as such), but then you’ve taken the time to write this massive article asking others to do it? Very weird post imo
Thanks for the feedback Charlie. My responses:
If you tag a comping friend in a giveaway, of course you’re spreading awareness. Compers are real people, they will check their notifications, see your tag, and they may not yet know about that brand so will check the giveaway out.
Multiple tags are absolutely fine if they’re tagging real people and allowed by the promoter – people shouldn’t feel bad for following rules and tagging heaps of friends, even when those rules are open to abuse by others who own many accounts
And nowhere in this post do I ask that compers should actually send a list of suspected fake profiles to a promoter – in fact I explain in the post that without IP tracking, it is impossible to prove this, which is why I have included example DMs which don’t involve naming any names at all. But fake accounts can be very obvious – a set of accounts with similar names, tagging each other back, with similar photos on their grid. There are a lot of patterns that are easy to spot.
Thanks for this Di – a great guide for both promoters and compers. I will be using your suggestions when sending a DM to promoters
So, how do we feel about “enter as many times as you want, each tagged friend counts as a new entry!” competitions on Instagram? I sometimes enter them if it’s a prize I really want, but if I can see that there are thousands of entries and people are entering multiple times, it does put me off a bit.
These are incredibly annoying, and I generally only enter them if it’s a local prize, as the smaller companies do need a bit of help spreading the word and I have lots of local friends I can tag (I wouldn’t do more than 5 or 6 tags though)
“Rather than investigating the fraudsters, focus that energy on your own comping.”
1. That’s easier said than done if you see the same cheats winning over and over again.
2. If compers don’t investigate the cheats and report it to the organisers, who else will? The alternative is to let them get away with it. That is what really ruins the enjoyment of the hobby.
Absolutely spot on.
Also most companies ask you to tag as many friends as possible,giving genuine compers less chance to win , it’s a good article, but how can you enjoy a hobby when you see the same name win over and over and you know they’ve cheated? I don’t know about you but I’ve stopped entering as much because of the cheats there’s less chance to win
Totally agree, it’s disheartening and off putting .
It’s not necessary to send the promoter screenshots and lists of fake accounts, or spend a lot of time investigating cheating in order to make a difference. The brands just need to be made aware there’s a problem with allowing unlimited entries and having no T&Cs or restrictions.
Anyone can send a quick DM with their concerns without spending hours gathering detailed evidence of rule-breaking (which is very difficult when there are no actual rules for the dishonest compers to break!). A short polite message asking the promoter to put rules in place to prevent spamming and restrict tags is likely to get a better result than a message with screenshots listing all the fake accounts, which they might interpret as obsessive and jealous!
A very good guide for promoters and compers.