Mr Beast Giveaway pop-up scam: what the page is and how to deal with it
The "Mr Beast Giveaway" page is a fake prize page that uses the YouTuber's name to promise $1,000, send you to sponsor downloads and ask for your PayPal e-mail. There is no prize:
- close the tab
- type and install nothing
- use the steps below if you already did
Facts checked October 5, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
Do it yourself · free Remove Mr Beast Giveaway pop-up scam yourself 3 steps, about 9 minutes, no software needed.
Mr Beast Giveaway pop-up scam: summary
| Type | Fake giveaway page that uses MrBeast's name; not a virus and not a giveaway by him |
|---|---|
| Risk | High if you give your PayPal login or card details, pay a fee or install the sponsor apps; none if you only close the tab |
| Symptoms | A page promising $1,000 "reserved for you", a CLAIM REWARD button, a countdown of 1600 minutes and a form for your PayPal e-mail; it may reopen from ads or posts |
| How to get rid of it | Close the tab, remove any sponsor app in Installed apps, drop notification permissions and extensions you do not know; secure PayPal if you typed anything |
| Our check (5 October 2026) | A desk check: no page opened and no site test; the 2021 address 1000-mbest.com is not registered now |
| First seen | Messages spread from spring 2021 by our old guide; our guide came out 30 June 2021 |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 10 more facts
| Name | Mr Beast Giveaway pop-up scam (a prize page, not a program) |
|---|---|
| Address in 2021 | 1000-mbest.com, shown as Not secure; other addresses possible |
| Distribution | Ads, social posts and messages; unwanted programs and notifications can also open it |
| Damage | Unwanted sponsor programs, phishing aimed at your PayPal e-mail, spam, fees paid to scammers |
| Evidence | 2 reports from affected users and security sites; details still limited |
| Imitates | MrBeast |
| Domains | 1000-mbest[.]com |
| Arrives through | Ad or social post |
| Promised prize | $1,000 (variants up to $10,000) for installing sponsor apps and giving a PayPal e-mail |
| Facts checked | 5 October 2026 |
Facts checked on 5 October 2026 against the FTC, Tenable, PayPal help and the registry answer for 1000-mbest.com. We did not open the live page; what the sponsor apps do comes from our old 2021 guide and is marked as such.
What the Mr Beast Giveaway page is
The "Mr Beast Giveaway" page is a fake prize page. It uses the YouTube creator MrBeast's name to promise $1,000, sends you through sponsor downloads and asks for your PayPal e-mail. No prize waits at the end, and nothing on it comes from him.
- What it claims
- $1,000 "reserved" for you as a subscriber; our old guide saw variants of up to $10,000
- The three steps it gives
- Click CLAIM REWARD, download sponsor applications, then enter your PayPal e-mail to "receive money in few minutes"
- What it is
- A lure page. It is meant to make you install programs and hand over personal details, not to pay anyone
- What it is not
- A virus, or a giveaway by MrBeast. Opening the page installs nothing by itself
- What to do
- Close the tab and type nothing. If you downloaded an app or gave your PayPal e-mail, use the steps further down
What the Mr Beast Giveaway pop-up scam page looks like
$1,000 To every Subscriber who visit this page!
Thank you for following us.
$1,000 has now been reserved for you
Step 1: Click the "CLAIM REWARD" button below
Step 2: Download sponsor applications on the next page and follow the instructions on the page
Step 3: After you download all applications, enter PayPal E-Mail on next page and recieve money in few minutes!
Important: Only 6 quantities available
We will stop accepting new visitors in 1600 minutes!
What the Mr Beast Giveaway pop-up scam scammers want
Our check on 5 October 2026
Mr Beast Giveaway · desk check · 5 October 2026 · no page was opened
- Live pageNot opened for this rewrite. We have no site test, so we cannot say which ad network or redirect serves it today.
- 1000-mbest.comThe address in our 2021 text is not registered now: the .com registry (Verisign) returned "No match" on 5 October 2026, and its RDAP service answered "not found". The same script can run on other names.
- The countdownOur two screenshots show "1600 minutes" under two different dates, Monday, May 17, 2021 and Monday, July 5, 2021. That fits a date and timer filled in on every visit; we did not time it ourselves.
- Same script, other domainsIn October 2023 Tenable described a MrBeast page of the same kind on another domain, with a "CLAIM REWARD" button and a survey. We have not seen it ourselves.
Fake giveaway page The page is a scam whatever a test shows. This is a desk check, not a visit: nothing seen on one future visit would clear it, because such pages change what they show by country, device, referrer and time.
The page, line by line
| What the page says | What is really going on |
|---|---|
| "$1,000 To every Subscriber who visit this page!" "Thank you for following us." | One greeting for every visitor. The page does not log you in, so it cannot know whether you subscribe. The FTC says scammers make it seem you are the only winner when the same message went to many people. |
| "Step 2: Download sponsor applications on the next page" | A real prize needs no installs. Our old lead picture says "Install Our Sponsor 3 apps and (Open Apps 30 Sec)". Our old guide says the aim is to spread unwanted programs; we did not follow the page, so what the apps were is not confirmed. |
| "Step 3: ... enter PayPal E-Mail on next page and recieve money in few minutes!" | A real prize needs no payment-account details; the FTC's third sign of a prize scam is being asked for financial or personal information. |
| "Important: Only 6 quantities available" "We will stop accepting new visitors in 1600 minutes!" | Pressure to act before you think. The FTC lists "act now" among the marks of a prize scam. The date differed between our screenshots. |
| "CREATED BY Mr Beast" with 13+ billion views and 60+ million subscribers, then a line for sponsors | A borrowed biography. The figures are a 2021 snapshot: Tenable gave over 188 million YouTube subscribers in October 2023. |
Our old guide notes that creators run giveaways for reasons such as a subscriber milestone, but not on random pages, and announce them on their own YouTube and Instagram channels. Check those before you type anything.
How the page and the scam around it went
17 May 2021
Earliest date on a screenshot; first spread
Our old guide says messages built on this name spread on social media from spring 2021. Our screenshot of the "Claim Reward" page shows Monday, May 17, 2021. The text we quoted shows Monday, July 5, 2021 with the same "1600 minutes".
30 June 2021
Our first guide
We published the guide, with this "Last step" screen as its lead picture; we updated it on 19 July 2021.
The "Last step for $1000 giveaway" screen from our guide's lead picture. The green background and the title are our 2021 artwork, not part of the page. 2021, no date noted
The lower part of the page
Further down, a blue block reads "Created by Mr Beast" with a short biography.
The "Created by" block lower on the page, with the Not secure label and the 1000-mbest.com address. October 2023
Tenable on MrBeast impersonation
Tenable described fake MrBeast YouTube ads that led to a site with a "CLAIM REWARD" button and a survey, and fake TikTok accounts. Its fine print said "Not Affiliated with MrBeast or any public figure".
5 October 2026
Our desk check
The old domain is not registered. We ran no site test, so we cannot speak to current activity.
The real risks, from most to least serious
- High
Your PayPal e-mail and what follows it
Our old guide warns that scammers will try to break into your account once they have your PayPal e-mail. An address alone is not a password; the likelier use is phishing mail posing as PayPal. If you also gave a password or card number, the danger is real.
- High
Paying or giving personal details
The FTC's rule: if you must pay, or hand over financial or personal information, to get a prize, it is a scam. The FTC adds that promoters may sell what you enter, so expect spam.
- Medium
The "sponsor" downloads
Our old guide says the promoted software is a rogue system tool that reports invented viruses or driver problems and asks you to buy a licence. We have not seen the files, so this is the old guide's account, not our finding.
- Medium
Being sent on to worse pages
The old guide says a visit can lead to surveys, suspicious apps, push notification pages, tech support scams or malware. We have no sample from this page.
- Medium
Harm to young viewers and to the creator
Our old guide says many children know MrBeast and fans may trust the offer.
If you typed your PayPal e-mail
- 1
Open PayPal yourself
Type the PayPal address in the browser. PayPal says it asks for your password only on its own login page and shows notices in the Resolution Center. Look at your activity for payments you did not make.
- 2
Change the password if you typed it anywhere
Choose a new one and change it wherever the old one was used, starting with your e-mail (Turn on two-step verification / secure a hacked account). We did not test PayPal's current menu names; follow its help pages.
- 3
Expect mail that pretends to be PayPal
Do not click. Forward such mail to
phishing@paypal.com, the address PayPal gives for reporting. - 4
If you paid anyone
Call your bank or card issuer today and dispute the payment (What to do after paying a scammer).
Why Mr Beast Giveaway pop-up scam opens in your browser
How the page reaches you
| Route | What happens | What to check |
|---|---|---|
| An ad or a social post | Our old guide says it came up on Facebook and on sites with ads built as fake video players. Tenable saw fake MrBeast YouTube ads in 2023. | A click installs nothing. Close the tab and report the ad or post in the app. |
| A link in a message | Our old guide says the lure circulated in social media messages from spring 2021. | Delete it unclicked; the FTC warns that links in prize messages can download malware. |
| An extension or an unwanted program | Our old guide says an ad-supported program causes the redirects, and mentions fake Flash Player updates and software bundles as carriers. Flash Player was retired at the end of 2020, so an update offer for it is itself a lie. We could not confirm that any program sends this page today. | Check extensions and installed programs. |
How to keep giveaway pages away
Do
- Check the creator's own YouTube and social channels before believing any giveaway; a real one is announced there.
- Pick Custom or Advanced when you install free software and untick every extra offer; the "Standard" mode often installs add-ons.
- Report the ad or post to the platform and close pages you did not open on purpose.
- A VPN hides your IP address, but it does not block a prize page.
Don't
- Do not click CLAIM REWARD, download a "sponsor application" or open one for 30 seconds.
- Do not type your PayPal e-mail, card or password to receive a prize.
- Do not trust a page because it shows a famous face or a countdown.
- Do not pay a fee, "tax" or shipping charge to collect winnings.
If you entered your details or paid
- 1
You only looked
There is nothing to undo. Close the tab and check what sent you the page.
- 2
You downloaded or ran a sponsor app
On Windows 11 open Start > Settings > Apps > Installed apps (Windows 10: Apps & features), find the program, choose Uninstall and confirm if User Account Control asks ().
- 3
Run a scan
Open Windows Security > Virus & threat protection > Scan options, run a full scan, restart and check Installed apps again.
- 4
You gave an e-mail or phone number
Expect spam and phishing. Do not answer or click anything that mentions a prize, parcel or PayPal.
- 5
Still redirected?
The browser tabs on this page list extension, site-data and reset steps for each browser.
Report the page to the FTC at ReportFraud.ftc.gov; if your identity details were used, see IdentityTheft.gov. Keep a screenshot of the page and of any payment confirmation.
How to get rid of the Mr Beast Giveaway pop-up scam pages
There is no prize.
Close the page, stop the notifications, and protect your card if you entered it.
Which browser shows the ads?
Step 1: Remove 1000-mbest[.]com from Chrome's notification list
Open More (the three dots) > Settings > Privacy and security > Site settings > Notifications, or paste
chrome://settings/content/notificationsinto the address bar.Under Allowed to send notifications, open the menu next to
1000-mbest[.]comand choose Remove or Block, and do the same for any other address you do not recognise.Next to Not allowed to send notifications, click Add and enter 1000-mbest[.]com, so the site cannot ask again. The menus are the same in Chrome on Windows 11 and Windows 10, and each Chrome profile keeps its own list.
Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Still there? More for Google Chrome
Remove extensions you do not recognise
Paste
chrome://extensionsinto the address bar and click Remove on anything you did not install yourself, especially video downloaders, "search" or PDF helpers added recently.Full procedure with screenshots: Remove a browser extension
Reset Chrome
Open Settings > Reset settings > Restore settings to their original defaults and confirm with Reset settings. This resets the start page, search engine and pinned tabs and turns off extensions; bookmarks and saved passwords stay.
Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Step 1: Remove 1000-mbest[.]com from Edge's notification list
Edge stores its own permission list, separate from Chrome's, and it is often the browser behind these pop-ups on Windows 11 and Windows 10.
Go to Settings > Privacy, search, and services > Site permissions > All permissions > Notifications, or paste
edge://settings/content/notifications. Remove1000-mbest[.]comfrom Allowed, then add it under Not allowed to send notifications. Notifications that show the Edge logo come from this list.
Edge on Windows 11: Site permissions > All permissions > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Still there? More for Microsoft Edge
Remove extensions you do not recognise
Paste
edge://extensionsinto the address bar and click Remove under anything you did not install yourself.Full procedure with screenshots: Remove a browser extension
Reset Edge
Open Settings > Reset settings > Restore settings to their default values and confirm with Reset. Extensions are turned off and the start page goes back to default; favourites, history and saved passwords stay.
Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Step 1: Remove 1000-mbest[.]com from Firefox's notification permissions
In Firefox the permission sits in Settings > Permissions and data > Notifications (in older versions Privacy & Security > Notifications > Settings). Select
1000-mbest[.]comin the list, click Remove Website, and confirm with Save Changes.Firefox only shows these notifications while it is open, so if they stopped after closing Firefox, this is the browser to clean. The steps are the same on Windows 11 and Windows 10.
Firefox on Windows 11: the Notification Permissions window. Full procedure with screenshots: Stop website notifications and pop-ups
Still there? More for Mozilla Firefox
Remove add-ons you do not recognise
Paste
about:addonsinto the address bar, open Extensions, and choose Remove from the three-dot menu of anything you did not install yourself.Full procedure with screenshots: Remove a browser extension
Refresh Firefox
Open the menu > Help > More troubleshooting information and click Refresh Firefox. Add-ons and custom settings are removed and the home page goes back to default; bookmarks, history and passwords stay.
Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Take back the notification permission
Safari 18 and later on macOS: open Safari > Settings > Websites > Notifications, select any site you do not recognise and set it to Deny, or click Remove. Untick Allow websites to ask for permission to send notifications at the bottom so no site can ask again.
Remove extensions you do not recognise
In Safari > Settings > Extensions, select anything you did not install yourself and click Uninstall.
Check the Mac for apps from the ads
Ads also target Mac users with fake players and "cleaners". In Finder > Applications, move anything unknown to the Bin.
Then, whichever browser you use
Step 2: Close the page without touching its buttons
The warning is a web page, not Windows, so closing the browser ends it. If the page blocks the browser or goes full screen, press Esc first, then end the browser in Task Manager (Ctrl + Shift + Esc).
Start the browser again without restoring the session, and do not follow any instruction the page gave. On Windows 11 and Windows 10 the steps are identical.
Full procedure with screenshots: Close a frozen app (Task Manager, Force Quit) On uGetFix
Step 3: Block the card if you entered it
If you typed card details on the page, call the number on the back of the card and ask the bank to block it and issue a new one.
Ask about every charge from the last days, including small ones, because a test payment of one or two units usually comes first.
Request a chargeback for anything you did not authorise. Do this by phone, not from a link in the message, on a phone or on a Windows 11 or Windows 10 PC.
Full procedure with screenshots: What to do after paying a scammer
Questions about Mr Beast Giveaway pop-up scam
Is the MrBeast PayPal e-mail giveaway real?
No. The page that offers $1,000 and asks for your PayPal e-mail is a scam that borrows MrBeast's name and pictures. Nothing on it comes from him, and no prize waits at the end of its three steps:
- click CLAIM REWARD
- download sponsor applications
- type your PayPal e-mail
The FTC says that if you must give financial or personal information to claim a prize, it is a scam. Tenable also found fine print on a similar MrBeast page saying it was not affiliated with him. A real giveaway is announced on his own YouTube and social channels.
I entered my PayPal e-mail on the Mr Beast Giveaway page. What now?
An e-mail address alone does not open your PayPal account, so the likeliest result is phishing mail. Type the PayPal address into your browser yourself and check your activity and the Resolution Center for anything you did not do. PayPal says it asks for your password only on its own login page.
If you typed a password or card number anywhere on the giveaway pages, change the password at once, starting with PayPal and your e-mail, and call your bank. Forward mail posing as PayPal to phishing@paypal.com and do not click its links.
Is the Mr Beast Giveaway pop-up a virus?
No, the page itself is not a virus. It is a web page, and opening it does not install a program. What matters is how it reached you and what you did next.
Our old 2021 guide says an ad-supported program can cause such pop-ups, but we could not confirm that for any program today. If it came from one ad or a link, close the tab.
If it keeps opening on different sites, check notification permissions, extensions and Installed apps for something you did not add. If you downloaded a sponsor application, remove it and run a Microsoft Defender scan.
What are the sponsor apps the page asks me to download?
We do not know, because we did not follow the page. Our old guide says the promoted software is a rogue system tool that reports invented viruses and then asks you to buy a licence. A screenshot in our 2021 guide says to install three sponsor apps and open them for 30 seconds before the reward is released.
No prize needs an install, so treat any such app as unwanted. If you installed one, open Settings, Apps, Installed apps, sort by install date and uninstall it, then run a Microsoft Defender scan and check your extensions.
I clicked CLAIM REWARD but did nothing else. Am I safe?
Very likely yes. The button opens the next page of the scam, and nothing is installed unless you download and run a file. Close the tab and look at the browser's extensions page and Installed apps in Windows Settings.
If nothing new appeared around the time of the click, there is nothing to remove. If you pressed Allow on a notification request, remove the site in Settings, Privacy and security, Site settings, Notifications. Our desk check could not open the live page, so we cannot say what the button does today.
Does MrBeast really give away $1,000 to subscribers who visit a page?
No. MrBeast is known for giveaways inside his videos, which is why scammers copy his name. Our old guide notes that creators do giveaways for reasons such as a subscriber milestone, but not on random pages, and that an official one is announced on the creator's own YouTube and Instagram pages.
A page on a strange domain such as 1000-mbest.com, shown as Not secure in our screenshots, is not that. Tenable's 2023 report found fake MrBeast ads, accounts and live streams too.
Why does the page say only 6 are left and 1600 minutes remain?
The numbers are pressure, not a count. The FTC lists urgent deadlines among the marks of a prize scam, because a person with no time to think is easier to push through the steps.
Our two screenshots show the same 1600 minutes under two different dates, May 17 and July 5, 2021, which fits a timer and a date filled in on every visit, although we did not time the page.
The "6 quantities" line is the same for everyone. Neither number can be checked. Close the tab.
Will Fortect remove Mr Beast Giveaway pop-up scam?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Mr Beast Giveaway pop-up scam, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- FTC Consumer Advice: Fake prize, sweepstakes and lottery scams (read October 5, 2026)
- Tenable: MrBeast scams, verified accounts and deepfakes used to promote fake giveaways on YouTube and TikTok (read October 5, 2026)
- PayPal Help: How do I spot a fake, fraudulent or phishing PayPal email or website? (read October 5, 2026)
- PayPal: How to report suspicious e-mails and messages (read October 5, 2026)
- Verisign .com registry lookup (RDAP): 1000-mbest.com, not found (no longer online) (read October 5, 2026)
- Google Chrome Help: Use notifications to get alerts (computer and Android) (no longer online) (read October 5, 2026)
- Microsoft Support: Uninstall or remove apps and programs in Windows (read October 5, 2026)