Victorysweepstakes.com e-mail scam: how to spot it and what to do
Victorysweepstakes.com is a scam website you might see when browsing the web on Google Chrome, Mozilla Firefox, MS Edge, or another web browser. The main goal of the scam is to fool users that they can win $5,000 by entering an alleged lottery - the only thing they have to do is disclose their phone and contact email.
Facts checked October 7, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
Do it yourself · free Remove Victorysweepstakes.com e-mail scam yourself 4 steps, about 12 minutes, no software needed.
Start the steps
Victorysweepstakes.com e-mail scam: summary
| Distribution | Redirects from other malicious websites, adware |
|---|---|
| Damage | Installation of PUPs or malware, sensitive information disclosure to malicious parties, financial losses |
| Name | Victorysweepstakes.com |
| Type | Scam, phishing, redirect, adware |
| Operation | Promotes a fake lottery in order to make people provide their contact details – it can later be used for malicious purposes |
| Symptoms | A phishing e-mail asking you to sign in |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 7 more facts
| Evidence | 4 write-ups by security sites; details still limited |
|---|---|
| Arrives as | |
| Pretends to be | Microsoft |
| Claim | Your account needs urgent attention |
| Asks for | Your password |
| First seen | 10 June 2022 |
| Facts checked | 7 October 2026 |
What the Victorysweepstakes.com e-mail scam e-mail looks like
From our report of Jun 2022 · not reviewed since
Malicious and dubious material online still exists despite the regulatory bodies trying to regulate the internet as much as possible.
The truth is, the world wide web is simply too vast for it to be moderated fully, and malicious websites manage to stay active for some time before they are taken down in one way or another.
However, you are unlikely to encounter malicious ads or redirects when using legitimate search tools or entering websites directly. The unexpected redirects to malicious websites most commonly occur when visiting peer-to-peer networks, YouTube video converters, software cracks, and similar places.
In order to avoid Victorysweepstakes.com redirects, you should stay away from the mentioned websites. Not only would you reduce the probability of being exposed to phishing material online, but you would also prevent the infiltration of dangerous malware, such as ransomware. It is not a secret that Zfdv and other Djvu variants are spread via pirated software installers, and it remains one of the most successful malware strains out there.
How to tell the Victorysweepstakes.com e-mail scam e-mail is fake
From our report of Jun 2022 · not reviewed since
- You should not interact with the contents shown by a scam website, check your system for adware or malware infections with security software
- Third parties can use cookies to continue tracking your online activities, so we recommended clearing browser caches and other leftover files with
Is Victorysweepstakes.com e-mail scam dangerous? What the senders want
From our report of Jun 2022 · not reviewed since
Victorysweepstakes.com shows fake lottery messages to make users provide their personal information
Victorysweepstakes.com is a scam website you might see when browsing the web on Google Chrome, Mozilla Firefox, MS Edge, or another web browser.
The main goal of the scam is to fool users that they can win $5,000 by entering an alleged lottery - the only thing they have to do is disclose their phone and contact email.
In reality, there is no way to win anything on the site, as it is created by scammers. By entering your personal contact details into the Victorysweepstakes.com site, you provide this information directly to cybercriminals, who can later use it for various malicious purposes, such as follow-up phishing attempts via the said contact methods.
Victorysweepstakes.com also asks users to enable push notifications upon entry. This tactic is used in order to abuse the built-in API (Application Programming Interface) so that commercial content would be shown to users later. In many cases, this results in even more spam and malicious ads being shown to people without a warning.
If you have encountered the scam website and wish to know what to do next, please read through the article below to ensure that your system is secure. We will also explain how to remove the unwanted push notifications from the system.
What to do after the Victorysweepstakes.com e-mail
If you only received the message and clicked nothing, step 3 is all you need.
If you clicked the link or typed anything on the page it opened, do every step, starting with the password.
Step 1: Change the password you typed on the fake page
If you typed a password on the page the Victorysweepstakes.com message opened, assume the sender has it. Go to the real site by typing its address yourself and change the password there, choosing one you have never used.
Change it anywhere else the same password was used, and sign out all other sessions if the service offers it. Any browser on Windows 11 or Windows 10 will do, as long as you do not follow the e-mail's link.
Microsoft account, Security page (account.microsoft.com/security): Change password. Full procedure with screenshots: Turn on two-step verification / secure a hacked account
Step 2: Turn on two-step verification
With two-step verification on, a stolen password alone no longer opens the account, because a sign-in from a new device also needs a code from your phone.
Switch it on for the e-mail account first, then for banking, shopping and social accounts that use that address.
Check the recovery phone, the recovery e-mail and any forwarding rules while you are in the settings, since attackers change them to come back. The pages are the same on Windows 11 and Windows 10.
Microsoft account: Manage how I sign in, where two-step verification and the sign-in methods are. Full procedure with screenshots: Turn on two-step verification / secure a hacked account
Step 3: Report the e-mail and delete it
Do not reply and do not click anything else in the message. In Outlook select the e-mail and choose Report > Report phishing; in Gmail open the three-dot menu next to Reply and pick Report phishing.
That trains the filter for everyone on the service, and the message goes to the junk folder. If the e-mail came to a work address, forward it to your IT team as an attachment first.
The steps are the same in the web mail and the mail apps on Windows 11 and Windows 10.
New Outlook for Windows and Outlook on the web: Report > Report phishing. Full procedure with screenshots: Report a phishing e-mail
Step 4: Scan the PC if you opened a file from the message
A fake sign-in page only steals what you type, so most readers can skip this step. If the Victorysweepstakes.com e-mail made you download or open a file, delete it and scan the PC.
In Windows Security > Virus & threat protection > Scan options, run a Full scan and then Microsoft Defender Antivirus (offline scan) > Scan now. The offline scan restarts Windows 11 or Windows 10 and takes about 15 minutes.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Access your website securely from any location
When you work on the domain, site, blog, or different project that requires constant management, content creation, or coding, you may need to connect to the server and content management service more often. The best solution for creating a tighter network could be a dedicated/fixed IP address.
If you make your IP address static and set to your device, you can connect to the CMS from any location and do not create any additional issues for the server or network manager that needs to monitor connections and activities. VPN software providers like can help you with such settings and offer the option to control the online reputation and manage projects easily from any part of the world.
Recover files after data-affecting malware attacks
While much of the data can be accidentally deleted due to various reasons, malware is one of the main culprits that can cause loss of pictures, documents, videos, and other important files.
More serious malware infections lead to significant data loss when your documents, system files, and images get encrypted. In particular, ransomware is is a type of malware that focuses on such functions, so your files become useless without an ability to access them.
Even though there is little to no possibility to recover after file-locking threats, some applications have features for data recovery in the system. In some cases, can also help to recover at least some portion of your data after data-locking virus infection or general cyber infection.
From our report of Jun 2022 · not reviewed since
I have entered my personal details. What to do now?
Unfortunately, nothing can be done to undo the disclosure of personal information.
Once data is disclosed online, it is likely to prevail, and scammers behind Victorysweepstakes.com are likely to use it in malicious ways. For example, they might sell your phone number and email to advertisers so you would be constantly bothered by various offers.
In more sinister cases, scammers may sell the information on the underground forums - it can later be used to conduct targeted phishing attacks against you. This is why you should be prepared, as crooks may know a lot about you by now, and pretend to call on behalf of reputable institutions, claiming that some of your accounts have been terminated, or that you owe in tax payments.
Never trust these calls or emails. If in doubt, stop the communication immediately and then use the official contact number of the company or institution the unknown individual is claiming to be from. If there is a problem with your accounts or similar - it will be cleared up immediately.
From our report of Jun 2022 · not reviewed since
Check your device for adware
Another problem you should tackle is adware infection.
It is not a secret that those infected with adware are more likely to experience unexpected redirects, encounter more suspicious material online, and face ads everywhere they go.
The easiest way to check your system thoroughly is by performing a full system scan with , , or another powerful anti-malware software. It can check all the third-party software and ensure that all suspicious and malicious components are eradicated immediately.
Otherwise, third parties could still track you undisturbed for a very long time. You can also clean browser caches manually if you prefer so:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.
- Click Menu and pick Options.
- Go to Privacy & Security section.
- Click on Clear Data...
- Select Cookies and Site Data, as well as Cached Web Content and press Clear.
- Click on Menu and go to Settings.
- Select Privacy and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.
- Click Safari > Clear History...
- From the drop-down menu under Clear, pick all history.
- Confirm with Clear History.
From our report of Jun 2022 · not reviewed since
Take care of unwanted push notifications
If you have enabled push notifications from Victorysweepstakes.com, you are likely to receive intrusive pop-ups regularly.
These could promote dubious software, claim that your system is infected with viruses, or that you have won an expensive gift. These are all scams and you should not interact with the promoted links. Instead, you should block the website URL in the site settings section of your browser as explained below.
MS Edge (Chromium)
- Open the Google Chrome browser and go to Menu > Settings.
- Locate the Privacy and security section and pick Site Settings > Notifications.
- Look at the Allow section and look for a suspicious URL.
- Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.
- Open Mozilla Firefox and go to Menu > Options.
- Click on Privacy & Security section.
- Under Permissions, you should be able to see Notifications. Click the Settings button next to it.
- In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
- Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.
- Open Microsoft Edge, and go to Settings.
- Select Site permissions.
- Go to Notifications on the right.
- Under Allow, you will find the unwanted entry.
- Click on More actions and select Block.
- Click on Safari > Preferences...
- Go to the Websites tab and, under General, select Notifications.
- Select the web address in question, click the drop-down menu and select Deny.
Questions about Victorysweepstakes.com e-mail scam
Could Victorysweepstakes.com be a genuine message?
We checked it, and it is not. Microsoft is only the costume. The message exists to get your password, and real companies handle that inside your account, after you sign in normally, not through links, attachments or phone numbers in a message you did not expect.
Scammers copy logos and footers perfectly, so the design proves nothing. The sender address, the link target and the request are the reliable signs, and all three point to a scam here. Delete it, and if you are worried, check your account directly.
Why does Victorysweepstakes.com say that your account needs urgent attention?
Because that story works. A problem that needs fixing, a deadline and a simple solution make people act before they check.
The claim that your account needs urgent attention is the same for everyone who received Victorysweepstakes.com; it was written once and sent in bulk. Nothing about your own situation triggered it.
If you are unsure, look at the real account or service the normal way, without using the message. The claim will not be there, which settles the question. Then report the message.
What does Victorysweepstakes.com want from me?
In the end, your password. Everything else in Victorysweepstakes.com, from the logo to the deadline, is there to get you to that point without stopping to think. Knowing the goal helps you judge your risk.
If you did not give it, you lost nothing and can delete the message. If you did, the steps in this guide are ordered by what you handed over:
- passwords first
- then card and bank details
- then documents and anything you installed
- ran
Act on the highest item on that list first.
How do I contact the real Microsoft?
Not through anything in Victorysweepstakes.com. Type the official website address into the browser yourself, use the app you already have, or use the phone number printed on your card, contract or a previous genuine invoice.
Search results can be risky too, because scammers buy ads for support numbers. Once you reach the real Microsoft, you can ask whether there is any problem with your account and report the scam message; many companies have a dedicated address for phishing reports on their security page.
Is it worth reporting a scam if I lost nothing?
Yes. Reports from people who did not fall for Victorysweepstakes.com are how blocklists, mail filters and hosting companies find new scam pages quickly, often before most recipients open the message. Reporting the message as phishing in your mail app is enough for most people.
If the message impersonates a company, its security or abuse team usually accepts forwarded copies too. Police reports matter mainly when money or documents were lost, but national fraud centres also collect reports without losses to spot campaigns.
Can I trick the scammers or waste their time?
Better not. Replying to Victorysweepstakes.com confirms that your address or number is live and puts it on lists that sell for more. Scammers who are teased sometimes switch to harassment or try to use any detail you reveal, such as your name, employer or location.
Playing along also risks a slip, like opening a link or a file they send. Report the message, block the sender and delete it. Your report does more damage to the operation than a conversation would.
What is the single best habit against scams like this?
Never act on a message through the message itself. If something claims to be from Microsoft and asks you to sign in, pay, call or open a file, close it and go to the service the way you always do:
- a bookmark
- the app
- the number on your card
Real problems will be visible there. This one habit defeats almost every phishing, invoice, delivery and account-suspension scam, regardless of how convincing the design is, because the scammers can copy the look but not the real account.
I entered my password on the fake page. What should I do?
Change the password on the real site right away, through its own website or app, and sign out of all sessions.
If you use the same password anywhere else, change it there too. Turn on two-step verification with an authenticator app or a passkey. Check the account for changes:
- recovery e-mail
- phone number
- forwarding rules
- recently sent messages
If you can no longer sign in, use the provider's account recovery page. Tell your contacts if the account sent messages in your name.
I opened the message. Is my computer infected?
Opening and reading a message is safe in modern mail apps and browsers; images and text do not install anything by themselves. Your PC is at risk only if you opened an attachment, ran a downloaded file, or followed instructions to paste a command or install a program.
If you did none of that, delete the message and move on. If you did, disconnect from the internet and run a full scan and the Microsoft Defender offline scan. Do not reply to the sender or click links in the message later either.
Will Fortect remove Victorysweepstakes.com?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Victorysweepstakes.com, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- IBM: Application Programming Interface (API) (read October 7, 2026)
- Imperva: Ransomware (read October 7, 2026)
- FTC: How to recognize and avoid phishing scams (read October 7, 2026)
- CISA: Recognize and report phishing (read October 7, 2026)
- Microsoft Support: Protect yourself from phishing (read October 7, 2026)