Giveaways & Contests

How to pick a giveaway winner

Choose a winner the right way — random, repeatable, and defensible if challenged.

6 min read Updated April 29, 2026

The winner pick is the part of a giveaway that gets challenged most often and documented least. A defensible draw is random, repeatable, and audited — meaning you could explain it to an entrant, a regulator, or a state attorney general's office without scrambling for a screenshot. Here's how to run one.

Define the eligible entry pool first

Before you draw a winner, decide which entries are eligible. The official rules already specify this — eligibility (age, geography, employee exclusions), entry-period cutoff, and any disqualification criteria. Run the deduplication and disqualification pass before the draw, not after, so the random pick is over a clean pool.

A typical pre-draw cleanup removes duplicate entries from the same email or IP, entries from disposable email domains, entries from outside the eligible geography, entries received after the close timestamp, and entries that didn't complete the required action (followed, commented, submitted the form). Document each disqualification reason; if a runner-up is ever challenged, you'll need that record.

Pick a random method you can show

Random means pseudorandom-with-an-audit-trail, not "I scrolled and stopped." Three approaches work and survive scrutiny:

  • Platform-side random draw — your giveaway tool selects a winner from the eligible entry pool with a documented seed. Best for form-based giveaways because the entry list is already structured.
  • Random.org or equivalent third-party RNG — generate a number between 1 and N (the eligible-entry count), then map to the entry list ordered by submission time. Save the certificate or screenshot.
  • Recorded live draw — for high-value prizes or media-friendly giveaways, a livestreamed draw with a numbered list and an on-camera RNG is the most defensible. Keep the recording for at least a year.

The method to avoid is "we picked our favorite comment." That's a contest with judging, not a sweepstakes — and contest judging has its own rules around criteria disclosure. Sweepstakes vs contest vs lottery covers the legal distinction; if you're doing judged selection, your rules and process need to look different.

Build the audit trail as you go

The audit trail is whatever you'd need to prove the draw was fair if a non-winning entrant or a regulator asked. At minimum, capture:

  1. Total entries received and the count after disqualification (with reasons)
  2. The timestamp of the entry-period close and the timestamp of the draw
  3. The random method used (platform, RNG service, or recording link)
  4. The seed, certificate, or screenshot from the random method
  5. The chosen entry's identifier (entry number, order, or anonymized email)
  6. The notification sent to the winner and the response timeline

Store the audit trail in a single folder per giveaway. If a winner doesn't respond and you fall back to a runner-up, the trail picks up there too. For a deeper compliance backdrop, see Instagram giveaway rules and compliance and sweepstakes legal requirements by state.

Runner-up rules and the unresponsive winner

The most common failure mode in winner selection is not the draw — it's the winner who never responds. Your official rules should already specify the response window and the runner-up procedure. The standard pattern:

  • Notification — email and any secondary channel listed at entry, sent within 48 hours of the draw.
  • Response window — 5 to 7 days is typical. Set it explicitly in the rules and the notification.
  • Identity verification — request the eligibility documentation listed in the rules (age confirmation, residency, signed affidavit for high-value prizes).
  • Forfeiture and runner-up — if the winner doesn't respond or fails verification, the prize is forfeited and a runner-up is drawn from the same eligible pool using the same method.

You can pre-draw two or three runner-ups during the original draw to avoid running multiple separate draws. Document each one in order; only contact the next runner-up after the previous one has forfeited.

Handling disqualification cleanly

Disqualification is unpleasant but inevitable on any giveaway with real volume. Common reasons: ineligibility (under-age, outside geography), duplicate entries, fraudulent referral activity, or a winner who's an employee or affiliate of the sponsor. Two principles keep this clean:

First, the disqualification reasons must already be in your official rules. Adding a reason after the draw to push a winner out is challengeable. Second, document the disqualification with the same audit trail you used for the draw — the entry IDs, the reason, and the date. If you ever face a "why did you disqualify me" complaint, the documentation does the work.

For very high-value prizes, ask the winner to sign an affidavit of eligibility and a publicity release before the prize ships. This both confirms eligibility and gives you the right to use the winner's name and likeness in announcements. For end-to-end giveaway operations beyond the draw itself, see how to run an online giveaway.

Defensible-draw checklist: eligibility filter run pre-draw, random method documented (platform, RNG, or recording), audit trail captured (entry counts, method, seed, chosen entry), runner-ups pre-drawn, response window stated in rules, disqualification reasons in rules, affidavit for high-value prizes. All seven true, the draw holds up.

Frequently asked

How long should winners have to respond before forfeiting?
Five to seven days from notification is standard for most consumer giveaways. The response window must be stated in the official rules and reiterated in the notification email. Higher-value prizes sometimes use shorter windows to push faster verification.
Can I disqualify a winner for using a referral loophole?
Only if the disqualification criteria are already in your official rules. The standard language covers fraudulent activity, automated entries, multiple-account entries, and any attempt to circumvent the entry mechanic. Without that language, disqualification is hard to defend.
Do I need to publish the winner's name?
Sweepstakes regulations in some states require winner-list disclosure on request, and your official rules typically reserve the right to use the winner's name and state of residence in announcements. A signed publicity release covers most use cases for higher-value prizes.
Is Random.org sufficient for a defensible draw?
Yes for most consumer giveaways. The certificate or screenshot becomes part of the audit trail. For very high-value prizes or judged contests, a recorded live draw with witnesses adds an extra layer of defensibility.
How many runner-ups should I pre-draw?
Two or three is typical. Pre-drawing during the original draw saves you from running multiple separate draws if winners forfeit. Contact runner-ups in documented order, only after the previous winner has officially forfeited.
What if the winner is an employee or affiliate?
Your eligibility rules should already exclude employees, affiliates, and immediate family members of the sponsor. If an excluded person is selected, disqualify and move to the next runner-up. Document the disqualification with the same audit trail.