Eleanor StoneEvery Sunday night, millions of UK residents reach for their phones to check the National Lottery results. Scammers reach for their phones too. As draw-night searches for "tonight's lottery numbers" spike across Google, a shadow industry of fake win notifications, impersonation messages, and gift-card payment demands activates — precisely timed to catch people at their most hopeful.
The scale is not small. In just seven months, Action Fraud — the UK's national fraud reporting centre — received 629 reports of lottery fraud totalling nearly £1 million stolen from victims, 70 per cent of whom were aged over 50. Consumer law solicitors warn that in 2026 the pattern is repeating, with draw-night scams now spreading via WhatsApp and SMS in addition to the traditional telephone and email methods that first generated those figures.
How Draw-Night Scams Exploit the Moment
Timing is everything in lottery fraud. The mechanic is not random: messages are sent immediately after advertised draw times — typically Sunday evenings for the Lotto, and Tuesday and Friday nights for EuroMillions. A fraudster who sends a "you've won" message at 9:50 PM on a Sunday is betting that the recipient has just checked their numbers, found a partial match, and is primed for good news.
According to Action Fraud data, 59 per cent of lottery fraud victims are initially contacted by telephone, while 21 per cent are reached by email and 10 per cent by post. By 2025 and 2026, WhatsApp messages and SMS texts have become the dominant first-contact method for younger demographics, with fraudsters spoofing recognisable brands including Allwyn (operator of the National Lottery), the People's Postcode Lottery, and EuroMillions.
The scam follows a predictable escalation. A first message announces a win of several thousand pounds. A second asks for a small "release fee" — often between £50 and £250 — to unlock the funds. Once paid, further fees accumulate: "tax clearance," "legal registration," "courier insurance." Victims who file formal complaints consistently report total losses between £800 and £15,000, with the average sitting at approximately £1,200 per case.
What the Law Actually Says
Many victims assume they have no recourse once money leaves their hands — especially when payment was made by bank transfer or gift card. That assumption is incorrect, and the gap between what victims believe and what the law actually provides is precisely where a consumer law solicitor delivers real value.
Payment Services Regulations 2017 (PSR 2017): If you transferred money from a UK bank account to a fraudster under false pretences, you may be entitled to reimbursement under the Authorised Push Payment (APP) fraud provisions. Since 7 October 2024, UK banks and payment firms are legally required to reimburse victims of APP fraud up to £85,000, under mandatory rules introduced by the Payment Systems Regulator — provided you report within 13 months of the transaction.
Fraud Act 2006: Lottery impersonation is a criminal offence under Section 2 of the Fraud Act 2006, covering fraud by false representation. A police investigation number — obtained from Action Fraud at 0300 123 2040 — is a prerequisite for bank reimbursement claims and for initiating civil proceedings.
Consumer Credit Act 1974, Section 75: Where any portion of a fraudulent "release fee" was paid by credit card, the card issuer is jointly liable for misrepresentation on purchases over £100. This is one of the most powerful — and most underused — protections available to fraud victims.
The UK Gambling Commission's official guidance on lottery scams and fraud states unambiguously: legitimate lotteries, including the National Lottery, People's Postcode Lottery, and EuroMillions, will never ask you to pay any fee to collect winnings. Any message that contradicts this principle is fraudulent by definition.
A Concrete Case: The Sunday Night Gift-Card Trap
Consider this realistic scenario, drawn directly from the profile of reported UK victims. A 67-year-old retired teacher from Leeds receives a WhatsApp message at 9:52 PM on a Sunday evening, minutes after the Lotto draw closes. The message displays the Allwyn logo and a plausible National Lottery banner. It claims she has won £22,500 in a secondary prize, complete with a "claim reference number" and a direct phone number.
She calls. A professional-sounding agent explains that because her ticket was processed through a "third-party platform," a standard £175 release fee is required, payable by Apple or Google Play gift cards — "for security reasons." She pays £175. Two days later, a second call explains that HMRC requires a "tax registration" payment of £350. She pays. On day five, a "legal compliance certificate" costs another £600. Total outlay: £1,125. The winnings never arrive.
Here is the if/then analysis a consumer law solicitor would apply to her specific situation:
- If she paid any portion by debit card, she can invoke a Chargeback claim with her bank under Visa or Mastercard rules — typically within 120 days of each transaction. The success rate for chargeback claims supported by a fraud report exceeds 65 per cent.
- If she paid by credit card, Section 75 of the Consumer Credit Act applies from the first pound over £100, making her card issuer jointly and severally liable alongside the fraudster.
- If all payments were made in gift cards, recovery is harder but not impossible. Filing an APP fraud report with her bank triggers the PSR 2017 mandatory liability obligation. The bank must investigate, and if the investigation finds that payment instructions were induced by fraud, reimbursement up to £85,000 may apply even where the underlying payment was made via a gift card purchased through a banking app.
- If the fraudster's number is still active, Action Fraud can issue an Emergency Network Disruption (END) request to block it — but this must be filed within 24 hours of the last contact.
The critical window is narrow. A consumer law solicitor consulted within 48 hours of the final payment can dramatically improve recovery odds. After 30 days, APP fraud reimbursement claims become markedly harder to pursue, and after 13 months they are time-barred entirely under PSR 2017.
Four Things a Solicitor Does That You Cannot Easily Do Alone
Specialists in consumer fraud law provide services that go well beyond simply filing a police report.
Bank escalation letters: A formal legal letter to a bank's fraud team carries far more weight than a retail complaint. Solicitors cite the specific regulatory language — PSR 2017 Article 73(1), the Payment Systems Regulator's October 2024 mandatory reimbursement rules — that triggers a compliance obligation rather than a discretionary review. Banks respond differently to solicitor letters.
Civil recovery proceedings: Where a fraudster can be identified — even by phone number, partial bank account, or WhatsApp profile — solicitors can file a County Court claim for restitution under unjust enrichment or the Fraud Act 2006. Claims up to £10,000 can be filed in the small claims track without legal representation, but for losses above that threshold, specialist representation materially improves the outcome.
Regulatory complaints to Ofcom and the FCA: Impersonation of a regulated lottery operator constitutes a breach of FCA regulations and, in the case of phone-based fraud, Ofcom's numbering rules. Solicitor-drafted complaints are catalogued differently from individual reports and contribute to the pattern-recognition that triggers bank-level mass-fraud protocols.
Data Subject Access Requests (DSARs): Under UK GDPR, you are entitled to request all personal data held by any UK-based entity. A DSAR filed against a fraudster's shell company can surface bank account details, IP addresses, and phone records that become admissible evidence in civil proceedings — a route most victims never know exists.
For background on your legal rights in the legitimate lottery context, see also What Every Lottery Winner Needs to Know About UK Legal Rights.
What to Do in the Next 48 Hours
If you or someone close to you has received a suspicious lottery notification — or has already paid a "release fee" — the action sequence is:
- Do not pay any further amounts under any pretext.
- Screenshot all messages and record every phone number, reference code, and account detail provided.
- Report immediately to Action Fraud at actionfraud.police.uk or by calling 0300 123 2040. Obtain your crime reference number.
- Contact your bank's specialist fraud team directly — not general customer services — and cite "APP fraud, PSR 2017 mandatory reimbursement."
- Consult a consumer law solicitor if any payment has already been made. The 48-hour window is critical for APP reimbursement eligibility and Emergency Network Disruption requests.
The draw-night search for "tonight's lottery numbers" is entirely innocent. The fraud ecosystem built around that moment of hope is not. Knowing your statutory rights — and acting within the deadlines that protect them — converts you from a passive victim into an active claimant with real legal teeth.
This article provides general legal information for educational purposes only and does not constitute legal advice. If you have been a victim of fraud, consult a qualified solicitor who specialises in consumer law and financial fraud recovery.
