Anatomy of a "Congratulations, you've won a prize!" message
We take a typical scam message apart line by line: where the urgency comes from, why the link is shortened, and what happens after you click.
This message is a composite of dozens of real messages circulating on WhatsApp and Facebook. Read it as a victim would, then we'll take it apart.
Congratulations! 🎉 Your number has been selected as one of the winners of the telecom company's anniversary draw. Your prize: a new phone + 500 dinars in credit. To claim it, complete your details within 2 hours only: bit.ly/xxxx
Line one: the excitement
"Congratulations" and "your number has been selected." The scammer opens with a good feeling, because happy people check less. You never entered any draw, but the message doesn't give you time to remember that.
Line two: the big name
A well-known company's name lends borrowed trust. Real companies contact you from their official, verified numbers and accounts. They don't announce winners in a message from a personal number.
Line three: the hourglass
"Within 2 hours only." This is the heart of the trick. Urgency cuts off your most important defense: asking someone else or checking for yourself.
The link: the door
A shortened link hides the real address. Behind it is usually a page asking for one of three things: your card details "to pay the delivery fee," a verification code sent to your phone, or sharing the message with twenty people "to confirm the prize." That last one is why the message spreads in the first place.
If you're asked to pay anything to receive a prize, it's not a prize.
- Don't tap links in unexpected prize messages.
- Check the company's official page directly, not through the link.
- Don't forward the message. Report it as spam.