Social Media Lotteries: UK's Warning Just Cost You €5,000

By Harvey Specter Jr. | Law, Business & Power Correspondent

---

€5,000. That is the maximum fine the UK Gambling Commission can issue to an individual running an unlicensed lottery through social media. In Malta, the equivalent ceiling under the Lotteries and Other Games Act sits at €25,000 — and the Malta Gaming Authority has the administrative muscle to pursue it without ever setting foot in a courtroom. The UK Commission just published research confirming what anyone who has spent twenty minutes on Instagram already knows: illegal draws, raffles, and prize competitions are everywhere, most participants cannot tell the difference between a legitimate promotion and a criminal one, and almost nobody is reading the terms closely enough to care. That is not a consumer education problem. That is a legal exposure problem — and it sits directly on the shoulder of every Maltese business owner who has ever run a "like and share to win" post without understanding what they just created.

Here is what most people do not know: in Malta, a competition where entry requires a purchase, a donation, or any form of payment — including a social media follow that has commercial value — can cross the threshold from a free promotional draw into a regulated lottery. The moment it crosses that threshold without a licence, the promoter is not just non-compliant. They are operating an illegal lottery. The MGA does not need a complaint to act. They can initiate enforcement on their own motion. The fine arrives before the lawyers do.

The UK Commission's research found that participants were far more focused on whether a draw *looked* genuine — professional graphic, credible-sounding prizes, a large follower count — than on whether the operator held any licence or legal authority. This matters enormously because the people running these draws are often not organised criminals. They are small business owners, influencers, and brand managers who genuinely did not understand that a competition without a genuine free entry route is not a promotion. It is a product. And unlicensed products carry consequences.

The weapon most people leave on the table here is called the *free entry route*, and it is the single mechanism that separates a lawful promotional competition from a licensable lottery. Under Maltese law, mirroring the UK Gambling Act 2005 framework that Malta's legislative architecture has closely tracked, if participants can enter for free — through a genuine, equally accessible route that does not require a purchase — the draw is a prize competition, not a lottery. But here is the detail that costs businesses: the free entry route must be *genuinely equal*. If buying a product speeds up entry, increases the chances, or provides any material advantage over the free route, regulators have the argument that the free route is cosmetic. Cosmetic compliance is not compliance. It is evidence of intent.

I had a client — years before the suits, back when I was working out of a borrowed office in Floriana — who ran a small clothing brand and organised what she called a "monthly giveaway" on Facebook. Forty thousand followers. Every post required participants to tag friends and follow the account. No free alternative entry. She had been running it for eleven months when a competitor filed a complaint with the MGA. She came to me two days before she received the formal correspondence. We moved fast, restructured the mechanic, documented the change, and got in front of the authority before any formal determination was made. The case was closed without a fine. The speed of the response and the sincerity of the corrective action were the entire argument. We never filed anything. The best move always happens before anyone does.

The UK Commission's warning is useful because it articulates something regulators everywhere are increasingly focused on: the platform is not the shield. Running an illegal lottery on Instagram does not make it Instagram's problem. It makes it yours. Meta and its platforms have no obligation to police your legal compliance — they have community standards, and those standards are not law. Your licence status is your problem, and it follows you regardless of which platform you use.

For EU-based businesses, the General Data Protection Regulation (GDPR) adds another layer that most prize competition operators ignore entirely. Collecting personal data as a condition of entry — name, email, phone number — means you are processing data under Article 6 GDPR. If your entry mechanic bundles consent to marketing inside the competition entry, you do not have valid consent under Article 7. You have coerced consent. That is unenforceable, and if you then use that