How to Verify a Giveaway Winner Is Real (Checklist)

The tool picks a name, and there's a small moment of hesitation before you post it. Is this a real person? Did they actually follow the entry rules? Is this account going to claim the prize, or is it one of the empty profiles that comment on every giveaway on the platform and never respond to anything?

That hesitation is worth acting on, because the thirty to sixty seconds you spend checking is the difference between a clean announcement and a public walk-back. Announcing first and verifying later is how organizers end up posting "actually, we've had to redraw" a day after congratulating someone, which looks worse than any delay would have. This guide is a practical verification protocol: what to check, in what order, how much personal information you're entitled to ask for (less than you might think), what to do when a winner fails the check, and how to avoid over-policing genuine fans in the process.

Verify before you announce, always

The sequence matters more than any individual check. Draw the winner privately, verify them, then announce. Never announce and then verify.

The reason is reputational asymmetry. A quiet redraw before announcement costs nothing; nobody knew who the first pick was. A redraw after announcement is a public correction that invites exactly the suspicion you were trying to avoid, because from the outside "we redrew" and "we didn't like who won" look identical. You'll be explaining your rules under pressure rather than applying them calmly.

This is also why drawing backups in the same session is such a useful habit. If your first pick fails verification, you already have a next name selected by the same random process at the same moment, which means promoting them requires no new draw and no explanation beyond your published rules. You can pick multiple winners in one pass for exactly this reason, and it turns a failed verification from a problem into a non-event.

The 60-second account check

Open the drawn account's profile and look for signals of a real person. You're not conducting an investigation; you're looking for the obvious.

Profile completeness. A photo, some history, a normal-looking name. Brand-new accounts with no photo, no friends, and a name that looks auto-generated are the classic pattern for giveaway-farming bots.

Activity that isn't just giveaways. Scroll their visible activity briefly. A real person's account has a life on it. An account whose entire visible footprint is comments on contests is either a dedicated freebie hunter or a bot, and in either case unlikely to become a customer.

Account age. Facebook shows join dates on many profiles, and a profile created last week that's entered forty giveaways is a strong signal.

Comment pattern on your post. Did they comment once, or twenty times? Did they actually answer the question you asked, or drop a generic "done"? A single, relevant comment is the mark of a real entrant.

Plausibility for your prize. If you're a local salon giving away an in-person service and the winner is clearly located in another country, they can't claim it, which is an eligibility problem regardless of whether the account is real.

None of these is individually conclusive. Together they resolve the question quickly, and in the vast majority of cases the answer is obviously "yes, real person," and you move on.

Check eligibility against your published rules

Separate from "is this a real human," there's "does this entry qualify under the rules I published." These are different questions and both matter.

Run through your own stated conditions. Did they perform the entry action you specified, including any required keyword? If you required following your page, are they following? Do they meet your stated eligibility, age, location, not an employee or family member? Did they enter within the entry window rather than after it closed?

The important discipline here is that you're checking against rules you published in advance, not standards you're inventing now. If you didn't require a keyword, you can't disqualify someone for not using one. If your rules didn't state a location limit, you can't exclude someone for living far away, though you might learn to state one next time. Verification is enforcement of existing rules, and the moment it becomes improvisation, it stops being fair.

This is exactly why the winner-selection and disqualification clauses in your rules matter. They're what turn "I don't think this person should win" into "this entry doesn't meet the published conditions," which is a completely different and defensible thing.

Contact verification: the real test

The account check filters obvious fakes, but the strongest verification is simply whether the winner responds and can receive the prize.

Notify them through the channels your rules specify, typically a reply to their winning comment plus a direct message, and give them the claim window you published. A real, interested winner replies. A bot doesn't. A freebie-hunting account with a full inbox often doesn't either. In practice, the claim process filters out most of what the account check missed, which is why a stated claim deadline is such a load-bearing part of your rules.

When they do respond, collect only what you need to deliver the prize. Which brings us to the most commonly mishandled part of this.

What you should not ask for

There's a strong temptation, especially after being burned once, to demand extensive proof of identity. Resist it, and keep your requests proportionate to the prize.

Don't ask for government ID, a passport, or a driving licence for an ordinary prize. For a $50 gift card or a free haircut, demanding identity documents is disproportionate, uncomfortable for legitimate winners, and creates a data-protection liability for you, because now you're holding sensitive identity documents you have to secure and eventually delete.

Never ask for bank details, card numbers, or payment information. You're giving someone a prize, not taking money from them. There is no legitimate reason to need this, and asking makes you look exactly like the scams your audience has been warned about.

Never ask a winner to pay anything. Not for shipping, not for taxes, not for "processing." Real prizes are free, and any payment request is the defining signature of a prize scam. Even asking innocently will make legitimate winners assume you've been hacked.

Collect the minimum for fulfilment. A shipping address for a physical prize. An email for a digital code. A phone number only if delivery genuinely requires it. Nothing else. Then handle that data in line with your privacy policy and delete it when you no longer need it.

For genuinely high-value prizes, more formal verification is reasonable, and this is the situation where a signed declaration of eligibility, or an affidavit for very large prizes, is the appropriate instrument rather than ad-hoc document requests. Scale the process to the prize.

When the winner fails verification

Have a defined process so this is procedural rather than emotional.

If the account is clearly fake or the entry breaches your published rules, disqualify it and move to your backup, using the disqualification clause your rules already contain. Do this before announcing, so no public correction is needed.

If the winner simply doesn't respond within your claim window, the same applies: the window expires, the entry forfeits, and the backup steps up. Announce it plainly when you name the eventual winner, something like "our first selected entrant didn't claim within the stated window, so the prize goes to a backup winner drawn in the same selection." That sentence cites the rule, explains the outcome, and shows the process was mechanical.

What you should not do is quietly substitute someone you prefer, disqualify on standards you never published, or leave the giveaway unresolved for weeks while you wait. Each of those does more damage than the fake winner would have.

Don't over-police real people

The opposite failure is worth naming, because it's common among organizers who've been burned.

Plenty of genuine supporters have sparse profiles. Some people barely use Facebook, have no profile photo, few friends, and rarely post, and they're still real humans who entered your giveaway in good faith. If your verification standard is "looks like an active social media user," you will eventually disqualify real fans, and that's both unfair and bad for your reputation.

Judge on behaviour against your rules, not on how polished an account looks. A modest account that followed your instructions and commented once is a legitimate entrant. A glossy account that ignored your keyword and tagged thirty strangers is the suspicious one. And remember that filtering during the draw, removing duplicates and requiring a keyword, already eliminates most bad entries before verification, so the account you're checking has usually cleared a bar already. FB Picker applies those filters and then selects the winner at random from what remains, and running each draw through a consistent random comment picker for giveaways workflow means verification is a light final check rather than a full investigation.

Warn your winner about impersonators

One final step that protects both of you. Successful giveaways attract scammers who message entrants pretending to be the brand, congratulating them on a "win" and asking for a fee or personal details. Your genuine winner is a prime target, and so is everyone who commented.

So state clearly in your announcement how you contact winners and what you will never do: "We only announce winners on this post and message from this account. We will never ask you to pay anything to claim a prize." That single sentence inoculates your entire audience against the script scammers use, and it costs you nothing.

Announcing publicly rather than only by private message helps too, because it creates a checkable public record of who actually won, which makes impersonation attempts easy for anyone to disprove.

The bottom line

Verifying a giveaway winner is a short, structured check performed before you announce, never after. Spend a minute on the account looking for signs of a real person, check the entry against the rules you actually published rather than standards you're inventing now, and let the claim process do the final filtering. Ask only for what you need to deliver the prize, never for ID on a small prize, never for payment details, and never for money. If the winner fails, use your published disqualification and claim-window clauses to promote a backup drawn in the same session, which is why drawing backups is worth doing every time. And don't mistake a sparse profile for a fake one, since judging behaviour against your rules is both fairer and more accurate. Do this consistently, with a filtered, recorded draw through a dependable free comment picker and giveaway tool behind it, and the winner you announce will be one you never have to un-announce.