Fake giveaway picker: how entrants spot one and how organisers show the draw was real
A fake giveaway picker shows itself by what it demands: the FTC lists payment, bank or card details and pressure to act at once as prize-scam signs. Discord tells recipients to disregard and block the message of a compromised GiveawayBot. RafflePress adds that a legitimate giveaway bot requests server permissions only through Discord's official app directory or the bot's own website.
Prepared by ContestsOnline editorial desk — Revised
A rigged draw: fixed winners, weighted entries and the locked pool
A rigged draw is the first of three failures that get called a fake giveaway picker; the others are a bot or app that is itself the scam and a prize message with no draw behind it. One third-party guide to Discord giveaway bots names two forms of rigging: a winner hardcoded in advance, and weighted entries that give certain users a higher chance of selection. A Discord giveaway bot rigged in either way displays a result instead of drawing one.
A fair pick has the opposite properties: every entrant in the pool has the same chance, and no name was chosen before the draw. A third-party explainer on Discord giveaway bots describes one mechanic that supports the first property. GiveawayBot's /reroll command pulls a new name from the same locked pool, so a reroll cannot bring in anyone who was not already entered.
The organiser's side of this is the pool and the method, shown before anyone asks; a result announced without either is only a claim.
What makes a giveaway bot legit: verification, reputation and no login demand
A giveaway bot passes as legit on three checks an entrant can make: whether Discord has verified it, whether it is well known, and what it asks for. One third-party guide to Discord giveaway bots treats verified, well-known bots as generally safe and places the main risk in custom or unknown bots that Discord has not reviewed.
Discord's own support page treats verified giveaway bots as a class with published limits, among them a ban on requiring entrants to join a server, so verification is a status with rules attached and not only a badge.
Each test concerns the bot; none concerns the giveaway. A verified bot does not make an organiser's rules fair, and fair rules do not make an unknown bot safe.
Scam messages: a compromised bot and a hijacked giveaway
Discord's support page on a new form of scam using GiveawayBot describes a giveaway bot scam in which a compromised bot sends scam messages, and it says the message should be disregarded and the bot blocked.
The Federal Trade Commission describes the same pattern outside Discord: scammers watch giveaways too and can hijack a legit business's giveaway or promotion to collect personal and financial information, so a message can impersonate a real business even when the giveaway itself is legit.
A third-party guide lists two markers of an imitation bot: a login link sent by direct message, and a claim that you won a giveaway you never entered. Both messages arrive unasked.
The FTC's advice on social media giveaway scams applies to a giveaway app discord scam in the same way: verify the sender through a route already known to be real before doing anything the message asks.
When a giveaway bot is safe to add: permissions, tokens and links
Three tests decide whether a giveaway bot is safe to add, and each is about behaviour an organiser can see. The first is the route: RafflePress says a legitimate giveaway bot requests server permissions only when it is added through the official Discord app directory or the bot's own website.
The second is what the bot asks for. A third-party guide says no legitimate giveaway bot needs a password or an account token, so a prompt for either fails the test.
The third is what its messages link to. The FTC says not to click a link in a suspicious giveaway message, because a link can contain malware, and that advice covers a link sent by a bot as much as one posted in a feed.
The giveaway app: what it asks for and what no cited page recommends
A fake diamond giveaway app fits the FTC's pattern as soon as it demands payment or a card number to release the prize. The FTC says that having to pay to get a prize marks a scam, and that there is no reason to give a bank account number, a credit card number or a Social Security number to claim any prize.
A fake giveaway picker delivered as an app is judged the same way as one delivered as a Discord bot: by what it asks for and by who vouches for it, not by how polished it looks.
No cited page describes a fake giveaway generator or recommends one, and none recommends a free fake giveaway bot discord servers run. The pages cited here concern telling a genuine draw from a false one, and they give no method for faking or fixing a draw.
What a winner message asks for: the FTC's warning signs
The FTC's consumer pages list the demands and claims that mark a prize scam, and each one can be tested against a winner message on its own. For a message that is uncertain rather than plainly wrong, the FTC suggests looking the name of the contest or the company up online together with the words review, complaint or scam, and reading what comes back.
- Payment to claim the prize, under labels such as taxes, shipping and handling, or processing; the FTC says real prizes are free.
- A bank account number, a credit card number or a Social Security number, which the FTC says has no place in claiming any prize.
- Pressure to act at once, or to hurry up and pay or hand over information.
- A check sent with a request to send some of the money back.
- A made-up agency name such as a sweepstakes bureau, or a real agency impersonated, the FTC included.
- A call from the government demanding money to collect a prize; the FTC says the government does not make one.
- A claim of FTC approval: the FTC says it does not give free prizes, certify prizes or verify prizes.
What an organiser can show after the draw: pool, method, clean message
An organiser's evidence comes in three pieces. The first is the pool. A locked pool is what GiveawayBot's reroll draws from, so an organiser who shows the list as it stood at the draw shows every name a reroll can return.
The second is the tool's standing. A third-party guide separates verified, well-known bots from custom or unknown ones that Discord has not reviewed, and an organiser who names the bot used lets entrants make that distinction.
The third is the winner message. It passes the FTC's test when it asks for no payment, no bank or card details and no rush, and when it points to a contact route that entrants can verify through a phone number, email address or website they already know is real.
None of the three proves a draw honest by itself. Each removes one thing an entrant would otherwise take on trust: the list, the tool or the message.
Where legality sits: entry payments, prize claims and platform rules
According to the Federal Trade Commission, it is illegal for a company to tell someone to pay to enter a sweepstakes contest, or to say that paying for something increases the odds of winning.
The FTC is a United States agency and the sentence concerns sweepstakes, so whether a raffle, a different country's law or a Discord server's own rules change the picture is a question for a lawyer in the organiser's jurisdiction.
Platform rules are a separate layer. Discord's Developer Policy prohibits facilitating advertising through the Discord API, server advertising included, and Discord no longer allows verified giveaway bots to require users to join a server in order to enter a giveaway. A giveaway condition that depends on either is one a verified bot cannot carry out.
Disqualification is the organiser's call. No cited page lists grounds for removing an entry or a winner, so the grounds an organiser applies belong in the published rules, stated before the draw.
| Warning sign | Stated by | What the publisher says |
|---|---|---|
| Payment to claim a prize | Federal Trade Commission | A sign of a scam; real prizes are free |
| Bank or card details requested | Federal Trade Commission | No reason to give them to claim any prize |
| Pressure to act at once | Federal Trade Commission | A warning sign of a scam |
| Check sent, then money asked back | Federal Trade Commission | Suspect a scam |
| Login link sent by direct message | Third-party guide | An imitation, not the bot |
| Password or account token requested | Third-party guide | No legitimate giveaway bot needs either |
| Permissions asked outside the directory | RafflePress | Legitimate bots ask only through the official directory or bot website |
| Message from a compromised GiveawayBot | Discord | Disregard the message and block the bot |
Procedure
-
Read what the message asks for
The FTC lists payment to claim the prize, a bank account, credit card or Social Security number, pressure to act at once, and a check followed by a request to send money back as the marks of a prize scam. Any one of them is reason to stop.
-
Leave the link unopened
The FTC advises against clicking any link in a suspicious giveaway message, because a link can carry malware. A login link sent by direct message from a bot is one of the markers a third-party guide lists for an imitation.
-
Contact the organiser by a known route
The FTC's instruction is to contact the business through a phone number, email address or website already known to be real and ask whether it sent the message. A contact detail taken from the message itself does not meet that test.
-
Look the name up with review, complaint or scam
For a contest or company that is uncertain, the FTC suggests looking the name up online together with the words review, complaint or scam and reading what comes back.
-
Check how the bot was added
RafflePress says a legitimate giveaway bot requests server permissions only when added through the official Discord app directory or the bot's own website, and a third-party guide says no legitimate giveaway bot needs a password or account token.
-
Block a message from a compromised bot
Discord's support page says a compromised GiveawayBot can send scam messages and that its message should be disregarded and the bot blocked.
Readers ask
Can a Discord giveaway bot be rigged?
A Discord giveaway bot can be rigged in the two ways one third-party guide names: a winner fixed in advance, or weighted entries that raise some users' chance of selection. Both leave the pool unequal, which is what showing the pool and the method is there to rule out. GiveawayBot's reroll, for one, draws from the same locked pool.
Is a giveaway bot legit on Discord?
A giveaway bot is legit when it is verified, well known and does not ask for a password or account token, according to third-party guides. One guide puts the main risk in custom or unknown bots that Discord has not reviewed. Discord adds that verified giveaway bots are no longer allowed to require entrants to join a server.
Is a giveaway bot safe?
A verified, well-known giveaway bot is treated as safe by one third-party guide, which places the main risk in custom or unknown bots that Discord has not reviewed. Safety also depends on the route: RafflePress says a legitimate giveaway bot requests server permissions only when added through the official Discord app directory or the bot's own website.
What does a scam from a giveaway bot look like?
A scam from a giveaway bot arrives as a message nobody asked for. Discord describes a compromised GiveawayBot that sends scam messages, and a third-party guide lists a login link sent by direct message and a claimed win in a giveaway never entered as markers of an imitation. The FTC adds that a link in such a message can contain malware.
How does an organiser show a draw was real?
An organiser shows a draw was real by showing the locked pool, naming the bot used and sending a winner message that passes the FTC's test. GiveawayBot's reroll draws from the same locked pool, a third-party guide separates verified bots from custom ones, and the FTC tells recipients to verify through a contact route they already know is real.
Does the FTC verify a giveaway prize?
The FTC says it does not give free prizes, certify prizes or verify prizes, so a giveaway that cites FTC approval makes a claim the agency says it does not make. Scammers also invent names such as a sweepstakes bureau and pose as real agencies, the FTC included.
Notes and sources
- consumer.ftc.gov. consumer.ftc.gov/articles/fake-prize-sweepstakes-and-lottery-scams.
- consumer.ftc.gov. consumer.ftc.gov/all-scams/prize-grant-scams.
- support.discord.com. support.discord.com/hc/en-us/community/posts/8253874004119-New-form-of-scam-using-a-GiveawayBot.
- support.discord.com. support.discord.com/hc/en-us/community/posts/360052136613-Please-allow-verified-giveaway-bots-to-offer-server-requirement-functionality-again.
- rafflepress.com. rafflepress.com/discord-giveaway-bots/.
This page is not legal advice: whether a giveaway or raffle is lawful where the organiser and the entrants live is for a lawyer or solicitor in that place to say. It reports what the FTC, Discord, RafflePress and two third-party guides state, so it cannot confirm that any particular bot or app is genuine, and no check described here makes a draw fair or a prize real by itself. It gives no method for faking or fixing a draw.
Woobox's user terms require entrants to agree to the organiser's official rules, so any limit on bought or incentivised votes depends on the particular contest. Walmart's Associate Talent Search rules prohibit paying for votes and let Walmart void fraudulent votes or disqualify the entrant. The platform's terms and the organiser's rules are two documents, and a disqualification is decided under the second.
Woobox lists three warning signs of bought votes: many votes from one IP address, votes from people in different countries and regular voting intervals. Award Force says its platform detects and blocks automated or scripted voting and rate-limits rapid voting. Ordinary participation is uneven in time and independent in origin, so it shows none of those patterns; this describes how checks read a count and is not a method for passing one.
In the United States, the FTC says a sweepstakes cannot require a purchase to enter, and California says a sweepstakes must offer a way to enter without cost. Those rules concern sweepstakes entry, not votes: whether a contest allows paid votes is written in its own rules, and ViralSweep even lets organisers configure Pay to Vote. Contests whose rules bar outside votes are refused, and so are political ballots.
Once voting closes, a refund applies where votes ordered for a contest never appear in the count the contest itself displays. ViralSweep says its protections may silently flag and block a vote, and Woobox says votes from IP addresses it has flagged as fraudulent do not count even when the voter appears to have succeeded, so the displayed count is the test. An organiser's ruling or a disqualification is never refunded, and neither is an account ban such as the permanent one Gleam says a breach of its terms may bring.