Ultimate-sweepstakes.biz e-mail scam: how to spot it and what to do

You might use the internet for many purposes - access your favorite social media, download certain files, communicate with your friends, or stream a video online. Typically, this experience is unhindered by any issues, and users find their way where they initially intended to end up.

Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.

Automatic

Get a free scan and check if your PC is infected.

Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.

Do it yourself · free Remove Ultimate-sweepstakes.biz e-mail scam yourself 4 steps, about 12 minutes, no software needed.

Start the steps
Ultimate-sweepstakes.biz: ultimate sweepstakes biz scam
Ultimate-sweepstakes.biz as our 2021 report showed it.

Ultimate-sweepstakes.biz e-mail scam: summary

DistributionRedirects from other malicious websites, adware
NameUltimate-sweepstakes.biz
TypeScam, phishing, adware
GoalMake people provide personal information, subscribe to useless services, download malicious software or subscribe to push notifications
DangersRedirects to malicious websites can result in unwanted site notifications, personal information disclosure to unknown parties (cybercriminals), monetary losses, installation of other potentially unwanted programs/malware
SymptomsA phishing e-mail asking you to sign in
Removal

Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.
Show 7 more facts
Evidence4 write-ups by security sites; details still limited
Arrives asE-mail
Pretends to beFacebook
ClaimYour account needs urgent attention
Asks forYour password
First seen18 November 2021
Facts checked6 October 2026

What the Ultimate-sweepstakes.biz e-mail scam e-mail looks like

a phishing e-mail asking you to sign in

Congratulations, Facebook App user!

You are one of the 7 people selected today to get a chance to win! You could get one out of 4 gifts! Click "OK" to start!

How to tell the Ultimate-sweepstakes.biz e-mail scam e-mail is fake

From our report of Nov 2021 · not reviewed since

  • Malware or adware infections can diminish the performance of your computer or cause serious stability issues.

Is Ultimate-sweepstakes.biz e-mail scam dangerous? What the senders want

From our report of Nov 2021 · not reviewed since

Ultimate-sweepstakes.biz tries to scam users with fake prize winnings and asks to enable push notifications

You might use the internet for many purposes - access your favorite social media, download certain files, communicate with your friends, or stream a video online.

Typically, this experience is unhindered by any issues, and users find their way where they initially intended to end up. For some people, this experience can be spoiled by unexpected browser redirects to the Ultimate-sweepstakes.biz website.

Usually, people end up on the site after clicking a suspicious link somewhere else, e.g., on an illegal video streaming site. Such places are poorly regulated, hence malicious ads are commonly inserted by cybercrooks, while on other occasions, website authors themselves insert booby-trapped links everywhere. Fake "Download" or "Play" buttons are commonly used for this purpose.

Once on the Ultimate-sweepstakes.biz site, users are immediately presented with various components of it. The website can incorporate a variety of different phishing messages - "Amazon Gift Card," "Dear Facebook User," "Congratulations, you have won" are just a few examples.

The main purpose is to make people believe that they are eligible for an expensive gift, and all they have to do is participate in a short survey or spin a fortune wheel. With the help of clever messages and cheap tricks, malicious actors manage to trick users to later provide their sensitive information, subscribe to useless services, or download scareware on their machines.

Likewise, the website asks users to enable notifications. If they do, they later might be shown more unsafe content directly on their screens, thanks to the legitimate push notification feature. This increases the scope of the scam and enables crooks to earn even more money from ad clicks and views.

If you have interacted with this website in any way, check out the removal instructions, as we explain how to stop the intrusive notifications, check the device for the adware that might be causing the redirects, and how to remediate the situation if you were scammed by these fake messages.

Ultimate-sweepstakes.biz: ultimate sweepstakes biz scam
Ultimate-sweepstakes.biz in our 2021 report.

From our report of Nov 2021 · not reviewed since

Ultimate-sweepstakes.biz in detail

Social engineering is the art of exploiting users' ignorance or lack of knowledge about a particular topic related to computing.

Internet is very vast, and you are bound to enter a site that is not completely legitimate in one way or another. What is important is to recognize the deception and not give in to crooks' fake promises.

There are plenty of different versions of the Ultimate-sweepstakes.biz scams you might encounter. Here's one example:

In the background, users would see a fake spinning wheel that is meant to make users either win or lose the promised gift. As a general rule, people here would be shown the "winning" and redirected to another page to allegedly reclaim the won item.

There is a lot of personal information that people are asked about here - it could be the name, home address, email, phone number, and more. In some cases, even credit card details are required to allegedly reclaim the prize.

However, as soon as users fill in all the details, they are presented with all sorts of excuses why the item can no longer claim, e.g., that the stock ran out. In the end, people do not receive the promised item, although the valuable information is already leaked. This could easily result in further phishing attempts, monetary losses, or even identity theft.

Gift scams are very common, so please be wary about that. Nobody gives out expensive items for free, even if the message says otherwise - it is all fake and designed to steal your personal data or make you subscribe to useless services.

Ultimate-sweepstakes.biz: ultimate sweepstakes biz virus
Ultimate-sweepstakes.biz in our 2021 report.

What to do after the Ultimate-sweepstakes.biz e-mail

If you only received the message and clicked nothing, step 3 is all you need.

If you clicked the link or typed anything on the page it opened, do every step, starting with the password.

  1. Step 1: Change the password you typed on the fake page

    If you typed a password on the page the Ultimate-sweepstakes.biz message opened, assume the sender has it. Go to the real site by typing its address yourself and change the password there, choosing one you have never used.

    Change it anywhere else the same password was used, and sign out all other sessions if the service offers it. Any browser on Windows 11 or Windows 10 will do, as long as you do not follow the e-mail's link.

    Microsoft account Security page with Change password at the top
    Microsoft account, Security page (account.microsoft.com/security): Change password.

    Full procedure with screenshots: Turn on two-step verification / secure a hacked account

  2. Step 2: Turn on two-step verification

    With two-step verification on, a stolen password alone no longer opens the account, because a sign-in from a new device also needs a code from your phone.

    Switch it on for the e-mail account first, then for banking, shopping and social accounts that use that address.

    Check the recovery phone, the recovery e-mail and any forwarding rules while you are in the settings, since attackers change them to come back. The pages are the same on Windows 11 and Windows 10.

    Microsoft account Manage how I sign in page with the sign-in methods
    Microsoft account: Manage how I sign in, where two-step verification and the sign-in methods are.

    Full procedure with screenshots: Turn on two-step verification / secure a hacked account

  3. Step 3: Report the e-mail and delete it

    Do not reply and do not click anything else in the message. In Outlook select the e-mail and choose Report > Report phishing; in Gmail open the three-dot menu next to Reply and pick Report phishing.

    That trains the filter for everyone on the service, and the message goes to the junk folder. If the e-mail came to a work address, forward it to your IT team as an attachment first.

    The steps are the same in the web mail and the mail apps on Windows 11 and Windows 10.

    Outlook Report menu with Report phishing selected
    New Outlook for Windows and Outlook on the web: Report > Report phishing.

    Full procedure with screenshots: Report a phishing e-mail

  4. Step 4: Scan the PC if you opened a file from the message

    A fake sign-in page only steals what you type, so most readers can skip this step. If the Ultimate-sweepstakes.biz e-mail made you download or open a file, delete it and scan the PC.

    In Windows Security > Virus & threat protection > Scan options, run a Full scan and then Microsoft Defender Antivirus (offline scan) > Scan now. The offline scan restarts Windows 11 or Windows 10 and takes about 15 minutes.

    Windows Security Scan options with Microsoft Defender Antivirus offline scan selected
    Windows 11: Windows Security > Virus & threat protection > Scan options.

    Full procedure with screenshots: Run a Microsoft Defender Offline scan

Access your website securely from any location

When you work on the domain, site, blog, or different project that requires constant management, content creation, or coding, you may need to connect to the server and content management service more often. The best solution for creating a tighter network could be a dedicated/fixed IP address.

If you make your IP address static and set to your device, you can connect to the CMS from any location and do not create any additional issues for the server or network manager that needs to monitor connections and activities. VPN software providers like can help you with such settings and offer the option to control the online reputation and manage projects easily from any part of the world.

Recover files after data-affecting malware attacks

While much of the data can be accidentally deleted due to various reasons, malware is one of the main culprits that can cause loss of pictures, documents, videos, and other important files.

More serious malware infections lead to significant data loss when your documents, system files, and images get encrypted. In particular, ransomware is is a type of malware that focuses on such functions, so your files become useless without an ability to access them.

Even though there is little to no possibility to recover after file-locking threats, some applications have features for data recovery in the system. In some cases, can also help to recover at least some portion of your data after data-locking virus infection or general cyber infection.

From our report of Nov 2021 · not reviewed since

Remove adware

While there might or might not be adware installed on your system, it is better to stay safe than sorry.

The infection is more likely if you are experiencing more common symptoms like ads, redirects, changed browser settings, and similar. However, some infections can be particularly stealthy, and identifying them might be difficult. Thus, performing a full system scan with or anti-malware software can ease the burden for you.

Please be aware that malware is unlikely to be removed manually, as it might leave leftover files that might interfere with normal computer functions or even damage some system files. If your computer starts crashing or experiencing errors after malware elimination, use to fix virus damage automatically.

To fully remove an unwanted app, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:

Keep in mind that adware can take the form of browser extensions as well. Therefore, you should access the settings of your browser and remove all the suspicious extensions from there. In some cases, even long-used apps might become untrustworthy and start engaging in malicious activity, so it is best for your to delete them all unless you know that the extension can be trusted 100%.

Even trustworthy sources, such as Google Chrome Web Store, might sometimes contain untrustworthy applications. This happens because Google uses an automatic upload process from creators, and some functions can not be noticed by used scanners. While this is a rare occasion, tech giants were forced to remove various adware and malicious extensions from their stores many times by now.

  • Enter Control Panel into Windows search box and hit Enter or click on the search result.
  • Under Programs, select Uninstall a program.
  • From the list, find the entry of the suspicious program.
  • Right-click on the application and select Uninstall.
  • If User Account Control shows up, click Yes.
  • Wait till the uninstallation process is complete and click OK.
  • From the menu bar, select Go > Applications.
  • In the Applications folder, look for all related entries.
  • Click on the app and drag it to Trash (or right-click and pick Move to Trash)
  • Select Go > Go to Folder.
  • Enter /Library/Application Support and click Go or press Enter.
  • In the Application Support folder, look for any dubious entries and then delete them.
  • Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the related .plist files.

From our report of Nov 2021 · not reviewed since

Stop the intrusive push notifications

As we previously mentioned, the Ultimate-sweepstakes.biz scam consists of several components, and one of them is the push notification feature.

While it can be useful when allowed on reputable websites, scammers are willing to misuse it for their malicious deeds. In this case, they would expose users to even more misleading and malicious content, putting them in danger.

If you have noticed that suspicious pop-ups from this site are showing up on your desktop without being triggered by anything in particular, you should perform the actions below to remove them once and for all. Note that these instructions can be used to stop the notifications from any type of website.

Google Chrome (desktop):

Google Chrome (Android):

MS Edge (Chromium):

  • Open Google Chrome browser and go to Menu > Settings.
  • Locate Privacy and security section and pick Site Settings > Notifications.
  • Look at the Allow section and look for a suspicious URL.
  • Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.
  • Open Google Chrome and tap on Settings (three vertical dots).
  • Select Notifications.
  • Locate the unwanted URL and toggle the button to the left (Off setting).
  • Open Mozilla Firefox and go to Menu > Options.
  • Click on Privacy & Security section.
  • Under Permissions, you should be able to see Notifications. Click the Settings button next to it.
  • In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
  • Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.
  • Open Microsoft Edge, and go to Settings.
  • Select Site permissions.
  • Go to Notifications on the right.
  • Under Allow, you will find the unwanted entry.
  • Click on More actions and select Block.
  • Click on Safari > Preferences...
  • Go to the Websites tab and, under General, select Notifications.
  • Select the web address in question, click the drop-down menu and select Deny.

From our report of Nov 2021 · not reviewed since

How to recover from being scammed online

Online scams are plenty - they try to imitate legitimate services or brands, they try to intimidate users by showing fake malware infection alerts, and much more.

In other words, there are plenty of ways you could get scammed online, especially if you are not that familiar with how they work. Hopefully, the information we provided here will help you in preventing being a victim of an online scam in the future.

However, there is a great deal of anxiety that people feel after they get scammed online. They are worried about their personal information, bank accounts, monetary losses, and other issues. Do not worry, however, as there are always ways to improve your online security.

The recovery steps depend on how you interacted with the scam, what information you provided and what files you have downloaded.

  • Perform a full system scan with , , or another powerful security software to check your system for malware;
  • If you have entered your password anywhere on one of the phishing websites, you should immediately change it (if you reuse it, change it everywhere else; never reuse your passwords in the future);
  • Contact your bank if you paid for anything - the transaction might be reversible as long as you explain your situation;
  • Monitor your online banking to ensure there's no illegal activity is going on
  • Clean your browsers from cookies, caches, and other web data to prevent tracking. You can employ for maintenance purposes.

Questions about Ultimate-sweepstakes.biz e-mail scam

I opened the "Congratulations, Facebook App user!" e-mail. Am I hacked?

No. Opening and reading a phishing e-mail does not give anyone access to your account or your PC. Modern mail programs block scripts and remote content by default, so reading the message "Congratulations, Facebook App user!" only showed you text and pictures.

The danger comes from clicking the button and typing your password on the page it opens, or from opening an attached file. If you did neither, report the message as phishing and delete it.

If you clicked but closed the page without typing anything, there is also nothing to fix. If you did type a password, change it from another device and turn on two-step verification.

I typed my password after "Congratulations, Facebook App user!". What now?

Act within the hour. From another device, open the real site of the account the message "Congratulations, Facebook App user!" imitated and change the password. If the same password is used anywhere else, change it there too.

Sign out of all other sessions, check the recovery e-mail and phone number, and look for mail forwarding rules or filters you did not create. Then turn on two-step verification with an authenticator app or a passkey.

If the fake page also asked for a card number or a bank login, call your bank and ask them to block the card. Finally, report the e-mail so others are warned.

Could Ultimate-sweepstakes.biz be a genuine message?

We checked it, and it is not. Facebook is only the costume. The message exists to get your password, and real companies handle that inside your account, after you sign in normally, not through links, attachments or phone numbers in a message you did not expect.

Scammers copy logos and footers perfectly, so the design proves nothing. The sender address, the link target and the request are the reliable signs, and all three point to a scam here. Delete it, and if you are worried, check your account directly.

Why does Ultimate-sweepstakes.biz say that your account needs urgent attention?

Because that story works. A problem that needs fixing, a deadline and a simple solution make people act before they check.

The claim that your account needs urgent attention is the same for everyone who received Ultimate-sweepstakes.biz; it was written once and sent in bulk. Nothing about your own situation triggered it.

If you are unsure, look at the real account or service the normal way, without using the message. The claim will not be there, which settles the question. Then report the message.

What does Ultimate-sweepstakes.biz want from me?

In the end, your password. Everything else in Ultimate-sweepstakes.biz, from the logo to the deadline, is there to get you to that point without stopping to think. Knowing the goal helps you judge your risk.

If you did not give it, you lost nothing and can delete the message. If you did, the steps in this guide are ordered by what you handed over:

  • passwords first
  • then card and bank details
  • then documents and anything you installed
  • ran

Act on the highest item on that list first.

How do I contact the real Facebook?

Not through anything in Ultimate-sweepstakes.biz. Type the official website address into the browser yourself, use the app you already have, or use the phone number printed on your card, contract or a previous genuine invoice.

Search results can be risky too, because scammers buy ads for support numbers. Once you reach the real Facebook, you can ask whether there is any problem with your account and report the scam message; many companies have a dedicated address for phishing reports on their security page.

Does Ultimate-sweepstakes.biz mean my PC is hacked?

Not necessarily. The sign reported, an e-mail with the subject "Congratulations, Facebook App user!", is usually caused by a password that leaked or was phished, not by malware on the PC.

Passwords leak in breaches of other websites and are tried on many services. Still, rule out the PC:

  • run a full scan in Windows Security
  • check Installed apps for anything you do not recognise
  • look at the browser's extensions

If all is clean, the problem lies with the account, and changing the password with two-step verification turned on is the fix.

What should I do first after Ultimate-sweepstakes.biz?

Secure the account involved. From a device you trust, open the official app or website directly, change the password and sign out of all sessions. Turn on two-step verification with an app or a passkey rather than text messages if the service allows it.

Then check recent activity, linked e-mail addresses and recovery phone numbers for changes you did not make. If an e-mail with the subject "Congratulations, Facebook App user!" involved money, call your bank using the number on the back of your card. Only after that look into how it happened.

Why did I receive Ultimate-sweepstakes.biz?

Scam messages go to millions of addresses and numbers collected from data breaches, public websites and simple guessing. Receiving Ultimate-sweepstakes.biz does not mean your PC is infected or that an account of yours was hacked.

If the message includes an old password of yours, it comes from a breach of some website; change that password wherever you still use it. Mark the message as spam or phishing so your provider blocks similar ones. Never reply to ask to be removed from the list: the sender treats a reply as proof that the address works.

Will Fortect remove Ultimate-sweepstakes.biz?

Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.

For Ultimate-sweepstakes.biz, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.

Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.

Sources

More removal guides

Remove Immediate Action Required

Immediate Action Required is a fake notification that might pop-up out of nowhere and prompt users to download useless bogus software Immediate Action Required is a scam that users mightAdwareMedium riskUgnius Kiguolis ·

Remove ReceiverHelper Mac virus

ReceiverHelper virus is a high threat to your personal safety and Mac security ReceiverHelper is a harmful application targeting Mac devices, classified under the Adload malware family. It is notoriousAdwareMedium riskJake Doevan ·

Remove Casalemedia

Casalemedia is a legal advertising service but is sometimes abused by crooks to gain personal income Casalemedia is a legitimate advertising service that provides assistance in monetizing on online contentAdwareMedium riskJake Doevan ·

Remove D1ue3yi0hkdsdl.cloudfront.net ads

D1ue3yi0hkdsdl.cloudfront.net ads is the content related to scam campaigns and fake errors or warnings D1ue3yi0hkdsdl.cloudfront.net is the program that causes notifications and advertisements that may appear unexpectedly, preventing you fromAdwareMedium riskJulie Splinters ·

Questions and experiences: Ultimate-sweepstakes.biz e-mail scam

Still seeing it, or found something we did not cover? Ask here: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

5,441 members already hereReading, writing, commenting and voting. 0 verified · 166 joined this year