The moment when the notification “Congratulations, you have won a car!” flashes on your smartphone screen evokes a storm of emotions. Joy, mistrust, giving way to soul-chilling fear or, conversely, euphoria from sudden success. However, the statistics are inexorable: the vast majority of such messages are planned phishing attacksaimed at stealing personal data or money from gullible users.
In today's digital environment, scammers are using increasingly sophisticated methods to imitate official mailings from large banks, car dealerships or lottery companies. They create look-alike websites, use spoofed sender numbers, and even fake brand logos to create trust. Social engineering it works flawlessly here, forcing a person to turn off critical thinking in the hope of instant enrichment.
It is important to understand that no legal promotion requires the winner to pre-pay “tax”, “insurance” or “shipping” before receiving the prize. If you are offered to deposit any amount to unlock your winnings, this is a 100% sign fraud. In this article we will analyze in detail the algorithm of actions when receiving such messages, the legal aspects of taxation of real winnings and ways to check the organizers of promotions.
⚠️ Attention: Never follow links from SMS messages from unknown numbers and do not enter your bank card details on sites whose address differs from the official domain of the organization.
Psychology of scammers: why we believe in free cheese
The deception mechanism is built on the exploitation of basic human emotions: greed, fear of lost profits and trust in authority. When a person sees the phrase “and you won a car,” his brain instantly switches to reward expectation mode, ignoring logical inconsistencies. Scammers often use the urgency effect, claiming that the prize must be claimed within 24 hours, otherwise it will be lost.
Another powerful tool - targeting. Attackers can send messages to customers of specific banks or customers of specific car dealerships, whose databases may have been stolen as a result of leaks. Receiving a message containing his real name or the name of the bank, the victim ceases to doubt the reliability of the source.
- 🎭 Imitation of officialdom: The use of complex legal terms, references to non-existent articles of laws and orders to create the appearance of legality.
- 📱 Technological substitution: Using services to disguise the sender's number as short service numbers (for example, instead of +7999... 900 or 1161 is displayed).
- 🎁 The "almost winning" effect: A message that you have already won, but you just need to confirm your participation, which is psychologically perceived as a fait accompli.
Understanding these mechanisms helps turn on the “red light” in your head. Real lottery organizers such as Stoloto or large car dealers, never use aggressive marketing through random messaging in instant messengers. They operate through official communication channels and publish full rules for promotions in the public domain.
Typical deception schemes: how money is stolen
Fraud scenarios, as a rule, develop according to one of several proven scenarios. The first and most common is the requirement to pay “transport tax” or “notary services” to register ownership. Fraudsters may even send fake receipts or invoices that look very convincing.
The second option is to request confidential data. You may be asked to follow a link and log in to the “winner’s personal account” by entering your online banking login and password or card details (CVV code, expiration date). After entering this information financial losses may exceed the value of any possible prize.
Technical details of phishing sites
Phishing sites often use domains that are visually similar to the original ones (for example, sberbank-secure.ru instead of sberbank.ru). They may have a valid SSL certificate (browser lock), which creates a false sense of security. Always check the address bar carefully.
The third scenario involves the installation of malicious software. The link in the message may lead to a site that offers to download a “special application” for obtaining car keys or an “electronic certificate.” In fact, such an application could be Trojanwho steal passwords, or cryptographer, blocking access to files on the device.
⚠️ Attention: The organizers of real promotions never ask you to provide codes from SMS that you receive from the bank. This is a direct path to losing money in your account.
Legal aspects: taxes and winnings processing
If we ignore scammers and consider the situation when a person actually became the winner of an official lottery or promotion, the norms of civil and tax legislation come into force. According to the Tax Code of the Russian Federation, winnings from lotteries and gambling are taxed at a rate of 13% for residents.
An important nuance is the source of payment. If the winning amount exceeds 4,000 rubles, the lottery organizer is obliged to independently calculate, withhold and transfer the tax to the budget. That is, the winner receives the amount minus tax. However, if we are talking about an advertising campaign (for example, “buy a product and win a car”), then a different rate applies - 35% for the amount exceeding 4,000 rubles, if the organizer did not undertake to pay the tax.
| Win type | Tax rate | Who pays | Tax-free amount limit |
|---|---|---|---|
| Lottery (state/commercial) | 13% | Organizer (holds) | 4,000 rub. |
| Advertising campaign (sales promotion) | 35% | Winner (declared by himself) or Organizer | 4,000 rub. |
| Gift from an individual | 13% | The donee (if the donor is not a close relative) | 4,000 rub. |
The process of registering ownership of a won car requires a standard procedure: signing acceptance certificate, receiving a set of documents from the organizer and subsequent registration with the traffic police. Without official documents confirming the transfer of ownership (donation deed or winning protocol), operating the vehicle will be illegal.
It is worth noting that in the case of promotions where a purchase is required to participate, the value of the prize is often considered part of the company's marketing expenses. However, for an individual this is still considered income in kind, from which it is necessary to report if the tax was not withheld by the agent.
Save all receipts, screenshots of correspondence and official letters from the organizers of the event. In case of disputes with the tax authorities or organizers, this will be your main evidence.
Verification algorithm: how to distinguish truth from fake
The first thing you need to do when you receive a message about winning is to stop and conduct an independent check. Do not use the contacts listed in the suspicious message. Find the official website of the organizing company through a search engine, enter its address manually and contact the support service using the phone numbers published there.
The second step is to analyze the domain name of the site they are trying to lure you to. Fraudsters often register domains that differ from the original by one letter or use other domain zones (for example, .ru instead of .com or .org). It is also worth checking the “age” of the domain through services Whois: if the site was created yesterday, and supposedly there is an “anniversary promotion”, this is a clear sign of fraud.
- 🔍 Search by number: Enter the phone number or message text into the search engine. Often victims of scams leave reviews on forums warning others.
- 📄 Checking the rules: Any legal event has published rules, which indicate the terms, conditions and contacts of the organizer. The absence of such a document is a red flag.
- 🏢 Legal entity verification: The company website must indicate the TIN and legal address. Check them through services like “Unified State Register of Legal Entities” or “For Honest Business”.
If someone calls you claiming to be from a bank or lottery center, hang up and call the official hotline number listed on the back of your card or on the official website. Scam call center operators often use scripts but do not have access to real customer databases.
☑️ Safety checklist
What to do if you have already believed scammers
If you followed the link and entered your card details, you need to act immediately. The first step is to block the card through the bank app or call the contact center. Notify the operator of possible data compromise. Modern banking systems fraud monitoring can track suspicious activity and prevent funds from being written off if the action is prompt.
Next, you need to change passwords for all important accounts (mail, social networks, government services), especially if you entered them on a suspicious site. If an application has been downloaded to your device, delete it and run a full antivirus scan. In serious cases, when there is a suspicion of installation spyware, you may need to completely reset your device to factory settings.
Be sure to file a police report. Even if the amount of damage seems small or the money has not yet been written off, this will help law enforcement agencies collect a database of scammers. Save all evidence: screenshots of correspondence, call history, transfer receipts (if any).
⚠️ Attention: Do not try to deceive scammers in response or enter into dialogue with them to gain time. The best tactic is to completely ignore and block contacts.
Real ways to win a car legally
Despite the abundance of fakes, the opportunity to win a car also exists in the legal field. Large retailers, banks and automakers regularly conduct large-scale advertising campaigns. The key difference is the transparency of the conditions and the absence of prepayment requirements. Often, to participate you just need to make a purchase or register for a company product.
State lotteries also offer cars as super prizes. It is important to understand the mathematics here: the probability of winning is extremely low, but the process is completely regulated by law. Purchasing a ticket is an opportunity fee and not a guaranteed method of acquiring property.
There are also competitions on social networks from auto bloggers or dealerships. In such cases, organizers often require creativity: shoot a video, write a story, or repost. This is a more labor-intensive, but sometimes more effective method, since the competition here is lower than in million-dollar lotteries.
The only guaranteed way to get a car is to buy it. All other options are a lottery with varying degrees of success.
Participation in such promotions requires careful reading of the fine print. Sometimes the “win” turns out to be a discount coupon for your next car or a 1:18 scale model. Read the conditions carefully: the phrase “prize car” may hide the right to a test drive or use the car for the weekend.
Technical means of protection against spam and phishing
Modern smartphones and operating systems have built-in security mechanisms that should not be ignored. On Android and iOS, there are functions to filter out unknown senders. Activate them in the message settings so that suspicious SMS will end up in a separate Spam folder without sound notification.
The use of specialized antivirus applications and caller ID (for example, Kaspersky, Dr.Web, Yandex with Alice) helps to identify known scammer numbers in real time. The databases of such services are updated daily thanks to the user community.
Regularly updating your operating system and browsers is critical. Developers are constantly closing vulnerabilities through which malicious sites can attack the device. Old version browser may not have protection against the latest phishing attacks.
What to do if you receive an SMS on behalf of the bank asking you to confirm the transaction?
Do not confirm anything and do not call back the number in SMS. Immediately call the bank at the number indicated on the back of your bank card or on the official website. Most likely this is an attempt to steal data. Notify the operator about the received message.
Is it possible to get my money back if I transferred it to scammers?
It is extremely difficult to return the money if the transfer was made voluntarily (you entered the data yourself and confirmed the operation). The bank is not responsible for the client's actions in such cases. However, if you report fraud immediately, there is a chance that the bank's security service will have time to block the transaction or the recipient's account before the funds are withdrawn.
How to check if a lottery ticket is a winner?
You only need to check the circulation on the official website of the lottery organizer (for example, stoloto.ru) or in the official mobile application. Enter your ticket number and verification code. Never use third party sites to check, even if they look similar.
Why can’t you call back to short numbers?
Calls to short numbers (often 5-digit numbers) may incur charges, and your account may be charged a significant amount per minute. In addition, this will confirm to scammers that the number is active.
In conclusion, the phrase “and you win a car” is a hook for the unwary 99% of the time. Be skeptical, check information through official sources and remember: only cheese in a mousetrap is free. Take care of your nerves and finances by relying on trusted sources of information and common sense.