Lottery QR Code Scam: How It Works and What to Do

How lottery and prize QR code scams work

These scams come in three common forms:

1. Fake scratch-card mailers. A glossy postcard arrives in your mailbox with a scratch-off panel. You scratch it and reveal that you've won a car, vacation, or cash prize. A QR code on the card takes you to a convincing "prize claim" page that asks for your name, address, and a credit card number to "pay shipping and handling" or "cover the tax withholding fee." There is no prize. The "fee" goes directly to scammers, and your card details are harvested for further fraud.
2. Text-message prize notifications. A text arrives saying you've been selected as a winner by a major retailer, airline, or government agency. It includes a QR code or a shortened link leading to a QR code that you're told to scan to "verify your identity" and claim your winnings. The destination page mimics a real brand and collects personal information or payment details. This is a form of quishing — phishing delivered via QR code.
3. In-store fake sweepstakes QR codes. Sticker QR codes appear on shelf tags, product packaging, or printed receipts at checkout, promising a chance to win a gift card or prize. Scanning leads to a fake entry page that collects your email, phone number, date of birth, and sometimes payment information under the pretense of "age verification" or "delivery preference." The information is sold to data brokers or used for identity theft.

The core mechanic is the same across all three: manufacture excitement about winning, then exploit that excitement to extract money or personal information before the victim stops to think.

The one rule that exposes every fake lottery

Legitimate lotteries, sweepstakes, and prize promotions never require you to pay anything to claim your winnings — not for shipping, taxes, processing, insurance, or any other reason. If a "prize claim" process involves a QR code, a fee, or a request for your bank account or card number, it is a scam without exception.

Real sweepstakes operators are also legally required to disclose odds and rules. If there are no rules, no sponsor name, and no way to enter without scanning a code, that alone is a red flag. And if you didn't enter a contest, you cannot win one — unsolicited "winner" notices are always fraudulent.

In-store QR codes that look tampered — applied as a sticker rather than printed directly on signage or packaging — carry the same risk as the fake coupon QR code scams increasingly found in retail environments.

What to do if you scanned a lottery or prize QR code

1. If you entered payment information: Call your bank or card issuer immediately to report potential fraud and request a new card number. Ask them to dispute any charges you didn't authorize. Check for any recurring charges that may have been set up.
2. If you submitted personal information (name, address, SSN, date of birth): Place a free fraud alert with the three major credit bureaus — Equifax, Experian, and TransUnion — so lenders take extra steps to verify your identity before opening new accounts. Consider a credit freeze for stronger protection.
3. If you paid via gift card: Contact the gift card issuer immediately and report that you were scammed. Keep the card and any receipts. Some issuers can recover funds if you act within hours. Also read our guide on gift card QR code scams for more steps.
4. Report the scam. File a report at reportfraud.ftc.gov. If the scam arrived by mail, you can also report it to the U.S. Postal Inspection Service at postalinspectors.uspis.gov.

Frequently asked questions