Online Lottery and Prize SMS Scam — How to Identify & Stay Safe

INDIA — By BharatSecure Threat Intelligence Team · Updated May 25, 2026

Severity: HIGH | View Full Scam Details

Beware the 2026 Online Lottery and Prize SMS Scam in India: Don’t Fall for Fake WhatsApp Wins!

Every day, thousands of Indians receive messages claiming they’ve won big prizes—but the online lottery and prize SMS scam is trickier and costlier than ever in 2026.

What Is the Online Lottery and Prize SMS Scam?

The online lottery and prize SMS scam is a widespread cyber fraud in India, where scammers send fake messages through WhatsApp, SMS, and sometimes email, claiming you have won a luxury car, a huge cash prize, or an all-expenses-paid holiday. These scams target anyone who uses smartphones—especially those who are active on WhatsApp, which, with over 500 million users in India, creates a huge playground for fraudsters.

The scammers do not discriminate. They target young and old, urban and rural users alike, relying on the curiosity and hopes of ordinary people to make quick money. Typically, victims have not even entered any lottery or contest, making these messages completely unsolicited.

Indian cybersecurity agencies like CERT-In and the Indian government’s I4C (Indian Cyber Crime Coordination Centre) have issued multiple alerts over the years about these scams. The RBI has also warned users to be cautious about sharing banking details or making payments triggered by unexpected prize notifications. Despite these warnings, the scammers continue to evolve their tactics, making it a high-risk threat (risk score 7/10 for your digital security).

How This Scam Works — Step by Step

1. You receive an unexpected message or WhatsApp forwarded text: The message usually arrives out of the blue. It looks official, sometimes spoofing well-known brands or government agencies. It claims you’ve won a substantial prize like Rs. 50 lakh or an expensive car. The sender number may look unfamiliar or use number masking to resemble a legitimate source.

2. You’re prompted to reply or click a link: The message instructs you to confirm your claim by sending a reply, filling out a form, or clicking a hyperlink. The link may lead to a fake website designed to look trustworthy.

3. Personal details and KYC asked: Once on the website, you’re asked for personal details like your full name, phone number, Aadhaar number, PAN number, and sometimes banking details—including UPI IDs and OTPs (One Time Passwords).

4. Fake processing fees or taxes requested: To “release” your winnings, the scammer demands a processing fee or tax payment via UPI or net banking. They persuade you this is mandatory for prize disbursal.

5. Money gets drained or data stolen: Once you send the money or share your banking OTP or UPI PIN, scammers either withdraw funds directly using UPI apps or misuse your personal data for identity theft.

6. Victim realises too late: With accounts emptied or identity compromised, victims feel helpless. Scam messages often come from numbers that can’t be traced or blocked effectively.

Real Warning Signs to Watch For

• You never entered any lottery or contest, but get a winning message anyway.
• Message insists on quick action—“claim within 24 hours” or “urgent reply needed.”
• Sender number is a random mobile number or disguised as a corporate ID.
• Links lead to poorly designed websites without HTTPS or official branding.
• Requests for sensitive information like Aadhaar, PAN, bank account or UPI PIN.
• Demand for money via UPI apps or prepaid cards as “processing fee.”
• Unsolicited WhatsApp forwards spreading in groups or personal chats.

What Happens to Victims

Victims often lose thousands or lakhs of rupees directly from their bank accounts via UPI or net banking fraud. Unlike cards, UPI transactions are instant and sometimes irreversible, leaving victims with little chance to recover lost funds if they act slowly. Scammers also misuse Aadhaar details and PAN numbers to create fake identities, opening new bank accounts or taking loans in victims’ names, leading to long-term financial and legal trouble.

Emotionally, victims experience stress, embarrassment, and loss of trust in digital services. For seniors or less tech-savvy individuals, these scams create fear and confusion, making online digital transactions intimidating.

What RBI and CERT-In Say

RBI categorically advises users never to share OTPs, UPI PINs, or banking passwords with anyone, even if they claim you have won a prize. The Reserve Bank’s helpline remains active for suspicious banking transactions.

CERT-In and the Ministry of Home Affairs (I4C) have mandated telecom and internet companies to curb spam messages but also emphasize citizens’ vigilance. The national cybercrime helpline number 1930 handles complaints about financial scams and phishing. RBI’s customer helpline number for banking fraud is also operational for reporting related issues.

If you receive lottery or prize messages that sound too good to be true, consult official government advisories or BharatSecure.app before taking any action.

How to Protect Yourself

1. Never trust unsolicited lottery or prize messages on WhatsApp or SMS.
2. Do not click on links or download attachments from unverified sources.
3. Avoid sharing personal details such as Aadhaar, PAN, UPI PIN, or bank info.
4. Verify the identity of the sender—check official websites or customer service numbers.
5. Set up UPI transaction limits and enable two-factor authentication on bank apps.
6. Report suspicious messages immediately via your mobile operator’s spam reporting service.
7. Use BharatSecure.app to cross-check suspicious messages and identify scams.

What to Do If You’ve Been Targeted

• Immediately freeze your bank account or UPI app. Contact your bank’s customer service for emergency account block.
• Report the fraud at the national cybercrime portal: Go to cybercrime.gov.in and file a complaint.
• Call the 1930 cybercrime helpline or your bank’s fraud helpline right away.
• Change all your digital and banking passwords and PINs.
• Inform your mobile carrier if you suspect SIM swap fraud.
• Keep all evidence like messages, screenshots, and transaction statements for investigation.

Early reporting increases chances of recovery and helps authorities track down scammers.

Frequently Asked Questions

Q: Can I win a lottery in India without participating or buying a ticket?
No. Legitimate Indian lotteries require you to buy a ticket or participate officially. Unsolicited messages claiming you won without entering are scams.

Q: Could a government agency like RBI or I4C contact me about lottery winnings?
No. Government bodies never inform winners through WhatsApp or SMS, nor ask for personal banking details or money.

Q: Is clicking links in a lottery win SMS dangerous?
Yes, often these links lead to phishing sites designed to steal your Aadhaar, bank details, or infect your phone with malware.

If you receive suspicious lottery or prize messages, don’t respond impulsively. Always verify the claim first at BharatSecure.app — your trusted portal for scam alerts and digital fraud protection in India. Stay alert, stay safe!