The Mega-Sena 3021 results just dropped, and within minutes your phone could already be blowing up with messages like: "Congratulations, you've been selected to receive a portion of an unclaimed prize!" or "Click here to see if you won the federal lottery." Sounds tempting? That's exactly what the scammer wants.
Lotteries have always been prime bait for fraud. And the bigger the jackpot, the harder the criminals work. It's no coincidence — they follow the drawings in real time and start blasting messages and spinning up fake sites within hours. The speed at which they move is alarming.
Why does the Mega-Sena make such easy bait?
The appeal is simple: everyone wants to come into easy money. That's not a weakness — it's human nature. Scammers know that when the drawing happens, people are excited, curious, and often a little less guarded. That's the opening they exploit.

The Mega-Sena is Brazil's most well-known lottery. Any message that mentions it automatically gains credibility. When money and hope are involved, the brain tends to want to believe before it stops to verify.
On top of that, these scams have gotten a lot more sophisticated. In the old days, the messages were poorly written and full of typos. Today, fake sites carry the Caixa Econômica logo, use the exact same colors as the real site, and even feature a "live chat" window to look legitimate. They're much harder to catch at first glance — but you can still spot them if you know what to look for.
The most common scams circulating right now
Knowing the format helps you recognize it in the moment. Here are the most common ones:
- Fake prize notification: you get a WhatsApp message, text, or email saying you won something — even though you never played. The link takes you to a site that collects your personal information and, at the end, asks for a "small fee" to release your prize. Spoiler: there is no prize.
- Cloned Caixa website: the URL looks legitimate at first glance, but something's slightly off. Instead of
caixa.gov.br, it might becaixa-loterias.netorresultados-megasena.com. Anything other than the official domain is an immediate red flag. - Fake pool share scam: someone offers you a spot in a "winning" lottery pool and asks for an entry fee so you can collect your share. You pay up — and the scammer vanishes.
- Fake social media profile: an account impersonating Caixa Loterias on Instagram or Facebook, with polished posts, announces winners and asks you to reach out to "claim your prize."
How to tell if a site or message is fake
Here's what you need to check before clicking on anything lottery-related:
- Look closely at the website address. The only official Caixa lottery site is
loterias.caixa.gov.br. If you see any variation of that, close the tab without a second thought. - Look for the padlock and "https." Every secure site displays a padlock next to the address bar. But be careful — a padlock doesn't mean the site is trustworthy, only that the connection is encrypted. A fake site can have a padlock too. Use this as a secondary check, not the only one.
- Be suspicious of any message telling you that you won without having played. Caixa does not notify winners via WhatsApp or unsolicited email. To find out if you've won, you check the results on the official site or at an authorized lottery retailer.
- No legitimate prize requires an upfront payment. This is the golden rule. If anyone asks you to send money in order to receive a prize, it's a scam. Full stop.
- Search the phone number or site name on Google. Add the word "scam" to your search. Chances are other victims have already reported the fraud on a forum or consumer complaint site.
Warning signs in the message itself
Sometimes the scam reveals itself before you ever visit a site. The message already gives it away. Watch out for:
- Over-the-top urgency: "You have 24 hours to claim or you forfeit the prize"
- Grammatical errors, even subtle ones
- Shortened links like bit.ly or l.ink that hide the real destination
- Requests for personal information right out of the gate (Social Security or tax ID number, banking details, a photo of your ID)
- An unusually hyped-up tone, loaded with exclamation points and money emojis
These tactics are deliberately designed to pull you out of rational thinking and push you into acting fast without stopping to think. The moment you notice that happening, stop. Take a breath. Verify.
What to do if you got scammed — or think you might have
It happens to people every day. There's no reason to be embarrassed, but there is every reason to act fast.
If you shared your banking information or sent a PIX payment to a scammer, contact your bank immediately. Depending on how much time has passed, the bank may be able to reverse the transaction. The sooner you call, the better your chances.
If you shared personal information (tax ID, national ID, a photo of your documents), file a police report online through your state's digital police portal. This creates an official record in case your identity is used in a fraud later on.
You can also report the fake site directly to Caixa through their official channel, to your state's consumer protection agency (Procon), and to safernet.org.br — an NGO in Brazil that specializes in cybercrime.
If someone asks you to pay money in order to receive a prize, it's a scam. It doesn't matter how official the message looks.
Questions a lot of people have about Mega-Sena and scams
Will Caixa contact me on WhatsApp if I win the Mega-Sena?
No. Caixa Econômica Federal does not reach out to winners via WhatsApp, text message, or email. If you win, you need to go to a Caixa branch in person to claim your prize. Any message claiming otherwise is a scam.
How do I check the official Mega-Sena results?
Go directly to loterias.caixa.gov.br or visit any authorized lottery retailer. Avoid clicking links from social media posts or WhatsApp messages to check results.
Can I play online safely?
Yes — but only through the official Loterias Online app from Caixa, available on the App Store and Play Store, or through the official website. Any other platform offering "online bets" on the Mega-Sena is suspicious and likely fraudulent.
What is phishing?
It's when someone creates a fake message or website to "fish" for your information. Think of it as digital bait. You click thinking it's real, type in your details, and they go straight to the scammer.
The next step is simple
Save this article on your phone. The next time the Mega-Sena results come out and a suspicious message shows up, you'll know exactly what to do: check the URL, be skeptical of any request for money or personal data, and always verify through Caixa's official site.
And if someone close to you received a sketchy message like this, send them the link to this article. Sometimes the right information at the right moment can prevent a very real financial loss.