2026 Sweepstakes & Promotions Compliance Guide

Promotions Compliance in 2026: Sweepstakes, Instant Win, and UGC Rules Marketers Must Know

A sweepstakes that technically requires a purchase to improve the odds of winning is an illegal lottery in the United States. An instant win game whose winner selection can be influenced by player behavior is a contest requiring skill-based judging standards, not a sweepstakes. A social media promotion that asks entrants to post about a brand in exchange for a prize entry is a compensated endorsement requiring FTC disclosure in every qualifying post. A user-generated content campaign that republishes customer photos without adequate rights clearance creates copyright liability regardless of whether the brand believed the submission implied permission.

Each of these errors is common. Each is preventable with the correct regulatory understanding applied before launch. Each has generated enforcement actions, civil penalties, or litigation that the relevant brands would have preferred to avoid.

The promotions compliance landscape in 2026 is more complex than it was five years ago in three specific ways: FTC enforcement on social media promotions has intensified, particularly for influencer-run giveaways and UGC campaigns where the line between organic content and compensated endorsement is easily blurred; state attorneys general in New York, California, and Florida have increased enforcement activity on digital promotions that fail to meet state-specific registration, bonding, and disclosure requirements; and data privacy obligations have expanded to apply to the personal information collected through promotion entry flows, adding a compliance layer that promotion teams frequently overlook.

This article maps the key compliance requirements for the three promotion types most commonly run by marketing teams — sweepstakes and random-draw promotions, instant win games, and UGC contests — and provides the disclosure, official rules, state registration, and FTC guidance requirements that apply to each.

The Lottery Tripwire: Why Promotion Structure Determines Legality

The foundational compliance principle in US promotion law is the lottery tripwire: a promotion that simultaneously includes a prize, selection by chance, and consideration (requiring purchase or payment to participate) is an illegal lottery. Federal law and every state's gambling statutes prohibit private companies from operating lotteries without specific governmental authorization. A promotion that crosses this line exposes the sponsor to criminal liability, civil enforcement by the FTC or state attorneys general, and private civil litigation.

The mechanism that makes sweepstakes legal is the elimination of consideration: by offering a free Alternative Method of Entry (AMOE) that provides genuine parity with purchase-based entry, the sweepstakes removes the third element of the tripwire. The AMOE must be a genuine alternative — it cannot impose requirements so burdensome that they effectively deter non-purchasers from entering.

The Three Promotion Types and Their Legal Structures

Sweepstakes. Winners are selected by chance (random drawing). Entry is free, with a purchase-based entry option available only if a genuine free AMOE exists and purchase does not improve odds. The prize, odds, and all material terms are disclosed in the official rules.

Contests. Winners are selected by skill or merit rather than by chance, using judging criteria defined in advance. Because selection is by skill, the consideration element does not make a contest an illegal lottery — purchase requirements are permissible where judging is genuinely merit-based and the criteria are specific, disclosed, and applied consistently. The legal risk runs the other way: if the judge's discretion is so broad that selection is effectively random, the promotion may be reclassified as a lottery.

Instant win games. Winners are determined by pre-seeded game pieces, scratch-off cards, or digital mechanics where the winning determination is made before the participant receives the game piece. Because the win is pre-determined, instant win games are treated as sweepstakes from a legal-structure standpoint: they require a free AMOE, all winning game pieces must be available to non-purchasing AMOE entrants, and selection is by chance (the random distribution of winning pieces) rather than skill. McDonald's Monopoly is the canonical example of a purchase-based instant win game with an AMOE: winning game pieces were available by mail to non-purchasing participants.

Consideration: What Counts as Purchase-Based Entry

The consideration element is broader than a cash purchase. Non-monetary consideration — requiring significant time, effort, or action beyond a simple free entry form — can constitute consideration that triggers the AMOE requirement. Examples promotion lawyers have flagged as problematic: requiring entrants to attend an extended sales presentation before receiving an entry; requiring entrants to visit multiple distant locations to complete a multi-step entry process; requiring entrants to generate substantial creative content that primarily benefits the sponsor before receiving an entry. The threshold is not always clear and requires legal judgment for specific designs.

Official Rules: The Elements That Must Be Present

Official rules are legally binding contract documents between the sponsor and every eligible entrant. They must be available to all entrants before entry, should be linked in all promotional materials, and must contain every material term that would affect a participant's decision to enter.

Judges and arbitrators in promotion disputes evaluate official rules as contracts. Missing or ambiguous terms are interpreted against the drafter — the sponsor — which typically produces the least favorable outcome for the sponsor's position. The prevention is explicit, complete official rules written before launch and reviewed by qualified promotions counsel.

Required Elements in Every Set of Official Rules

• Promotion title and type (sweepstakes, contest, instant win game).
• Sponsor identity — full legal name, address, and contact information.
• Eligibility — geographic restrictions (eligible states/countries), age minimum, employee exclusions, and any other criteria.
• Entry period — specific start and end dates, including time zone.
• How to enter — all entry methods, including the AMOE for sweepstakes; entry limits per person per period.
• Prize description — each prize, the number of each type, and the Approximate Retail Value (ARV) of each and of the total prize pool.
• Odds of winning — for sweepstakes, that odds depend on the number of eligible entries; for instant win, the overall odds of any prize.
• Winner selection — how and when winners are selected; for random draws, the selection date; for instant win, the seeding process.
• Winner notification and prize claim — notification method, the claim deadline (commonly 30 days after notification), and required documentation.
• Tax responsibility — prizes are income; sponsors issuing prizes valued at $600 or more must file and distribute IRS 1099 forms; income taxes are the winner's responsibility.
• Limitations of liability — the sponsor's right to cancel or modify for technical failures or extraordinary circumstances; dispute resolution; release of liability.
• Data privacy statement — what personal information is collected, how it is used, and whether it is shared with third parties.
• Governing law — the jurisdiction whose laws govern the rules and any disputes.
  
  

State Registration and Bonding: New York, Florida, and Rhode Island

Three US states maintain active registration requirements for games of chance: New York, Florida, and Rhode Island. These requirements apply regardless of where the sponsor is located — if a promotion is open to residents of these states and meets the threshold, the requirement applies.

New York

New York requires registration with the New York Department of State for any game of chance with total announced prize value over $5,000 (N.Y. Gen. Bus. Law Art. 24-A, § 369-e). The Games of Chance Registration must be filed at least 30 days before the start date, with a $100 nonrefundable filing fee and a surety bond (or certificate of deposit) equal to the total prize value. After the promotion ends, the sponsor files a winners list with the Department of State. Failure to register before launch can expose the sponsor to criminal liability under New York law. Registration turns on state-residency eligibility, not the medium — it applies whether the promotion runs online, in-store, by mail, or through any other channel.

Florida

Florida requires registration and bonding for any game promotion with total prize value over $5,000 that is open to Florida residents (Fla. Stat. § 849.094). The filing goes to the Florida Department of Agriculture and Consumer Services at least 7 days before the start date (versus New York's 30 days), and the operator must post a surety bond or establish a trust account equal to the total retail value of the prizes. Florida also requires the operator to maintain and file a list of winners with the state after the promotion concludes.

Rhode Island

Rhode Island's requirement is narrower in trigger but lower in threshold. It applies to retail/in-store promotions — games of chance run in connection with a Rhode Island retail establishment — where the total announced prize value exceeds $500. These must be registered with the Rhode Island Secretary of State (Business Services Division). Unlike New York and Florida, Rhode Island does not require a surety bond and does not require filing a winners list with the state. The sponsor must, however, retain records identifying winners of prizes over $25 for at least six months after the promotion ends, and the official rules must be posted conspicuously in each participating retail location. The $500 threshold is the lowest of the three states, but the requirement is triggered by an in-state retail presence and in-store entry — not simply by Rhode Island residents being eligible for a national online sweepstakes.

Practical Implication: Nationwide Promotions

Any sweepstakes open to US residents nationally with total prizes over $5,000 should be treated as requiring New York and Florida registration. Rhode Island registration is generally triggered only where the promotion has an in-store/retail mechanic and a Rhode Island retail presence, at the lower $500 threshold. Excluding New York and Florida from eligibility eliminates their registration requirement — but also removes two of the largest consumer markets in the US, a commercial trade-off that should be considered deliberately rather than defaulted into. Where the New York/Florida audience is commercially significant, registration is the right path; the cost and timeline are modest if built into the pre-launch calendar.

FTC Compliance for Social Media Sweepstakes and Influencer Promotions

The FTC's oversight of promotions focuses on deceptive practices: mechanics that mislead consumers about the nature of the promotion, the odds of winning, or the material relationships between the sponsor and promotional content. The FTC's enforcement focus in 2026 has sharpened on two areas: social media sweepstakes that fail to provide clear and conspicuous disclosures, and influencer-promoted giveaways that blur the line between organic content and compensated endorsement.

Disclosure Requirements for Social Media Sweepstakes

When a sweepstakes requires entrants to post content — a photo, a tweet, a TikTok, a product tag — to receive an entry, the FTC requires every qualifying post to clearly disclose the material connection: that the content was posted in exchange for a sweepstakes entry. The entry is something of value, so the post is a compensated endorsement subject to the FTC Endorsement Guides (16 CFR Part 255).

The FTC's requirements for disclosure clarity: the disclosure must be ‘clear and conspicuous,’ meaning a typical consumer engaging with the content can easily see and understand it. Disclosures buried in hashtags at the end of a caption, placed where they require scrolling, or expressed in abbreviations are inadequate. ‘Sweepstakes’ must appear in full — ‘#sweepstakes’ is adequate; ‘#sweeps’ is not, because many consumers would not recognize it. The disclosure should appear at the beginning of the content, not the end.

UGC Promotions: Compensated Endorsement Requirements

UGC promotions — campaigns inviting customers to submit photos, videos, or written content for a chance to win or be featured — become subject to FTC endorsement requirements the moment an incentive is involved. The FTC has been explicit: if a brand incentivizes content creation, even through something as modest as a drawing entry, the resulting content is a compensated endorsement requiring disclosure.

Brands are responsible for ensuring entrants include proper disclosures — the obligation is not limited to content the brand reposts. Official rules for UGC promotions should require entries to include the necessary disclosure language, specify what that language must include, and reserve the sponsor's right to disqualify entries that do not comply.

The FTC's rule on the Use of Consumer Reviews and Testimonials (16 CFR Part 465) — published August 14, 2024 and effective October 21, 2024 — added an expedited path to civil penalties for knowing violations involving, among other practices: fake or AI-generated reviews; buying reviews conditioned on a particular sentiment; insider reviews without disclosed material connections; and fake indicators of social media influence. Brands repurposing UGC from social media into paid advertising need to ensure the original post carried adequate disclosure and that the repurposed ad carries disclosure as well.

FTC Penalties

FTC civil penalties for violations of FTC rules and orders are adjusted annually for inflation. The maximum reached $53,088 per violation in 2025 — and that figure remains in effect for 2026: in April 2026 the Office of Management and Budget cancelled the year's inflation adjustment (the October 2025 CPI-U was not published during the federal funding lapse) and directed agencies to keep 2025 penalty levels (OMB Memo M-26-11). Each non-compliant post can be treated as a separate violation. For a campaign with ten influencers each posting twice without adequate disclosure, the exposure is twenty violations — over $1 million in potential civil penalties. The FTC has also sought structural remedies: mandatory compliance programs, enhanced monitoring, and injunctive relief that constrains future promotional activity.

Compliance Requirements by Promotion Type: Reference Table

This table is the quickest reference for a team that runs multiple promotion formats and needs to know which requirements apply to which.

Data Privacy in Promotion Entry Flows

Every promotion that collects personal information from entrants — name, email, phone, mailing address, date of birth, or any other identifying data — triggers data privacy obligations that vary by the entrant's state of residence. For promotions open to US residents nationally, that effectively means complying with multiple state frameworks at once.

State Privacy Law Compliance

By 2026, roughly 20 states had comprehensive privacy laws in effect — including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), and Montana (MCDPA) — with Indiana, Kentucky, and Rhode Island taking effect January 1, 2026. These laws collectively require brands to provide a privacy notice at or before the point of collection; disclose what data is collected, how it is used, and with whom it is shared; honor consumer rights to access, correct, and delete; and implement reasonable security. Most are enforced exclusively by the state attorney general (California is the principal exception for a private right of action, and only for certain data breaches), with civil penalties commonly in the $7,500–$10,000-per-violation range.

The promotion entry form is a high-visibility collection point. A sponsor who gathers email addresses through a sweepstakes flow and then uses them for marketing without adequate disclosure has a privacy exposure on top of any promotion-specific issue. The privacy notice linked from the entry form and referenced in the official rules should specifically disclose any post-promotion use of entrant data — including the marketing-list addition many sponsors intend.

International Promotion Considerations

US-based promotions that accept entries from outside the United States trigger additional requirements. EU and UK entrants fall under GDPR and UK GDPR, which impose stricter obligations on consent, retention, and cross-border transfer than US state laws. Canadian entrants are subject to PIPEDA and provincial privacy laws. The most practical solution for US-focused promotions is to limit eligibility to US residents (or specific states), which eliminates the international burden. For intentionally global promotions, qualified counsel with international privacy expertise is essential.

UGC: Intellectual Property Rights and Rights Clearance

UGC promotions raise intellectual property issues that compliance discussions frequently underemphasize. When an entrant submits a photo, video, or written piece, they own the copyright in it unless they explicitly transfer it or grant a license. A brand that repurposes submitted UGC — on brand channels, in advertising, or in marketing materials — without adequate rights clearance is infringing the entrant's copyright.

Required Rights Language in Official Rules

• An explicit grant of rights from entrants to the sponsor, covering the specific uses the sponsor intends.
• The geographic scope and duration of those rights (a perpetual license is standard for promotional UGC).
• Whether the grant is exclusive or non-exclusive.
• A representation and warranty that the submitted content is the entrant's original work and does not infringe third-party rights.
• A representation that the entrant has the right to grant the rights being transferred.

Scope matters: a sponsor who uses UGC in paid advertising (broader commercial exploitation) needs broader rights than one who uses it only for organic social posts. Rules that grant ‘the right to use submitted content for promotional purposes’ are often ambiguous about whether paid advertising is included. The rights language should match the intended commercial use.

Third-Party Content in UGC

Entrants frequently embed third-party content: copyrighted music in a video, trademarked logos in a photo, another person's likeness captured without a release. The official rules should require entrants to warrant that submissions do not include third-party content they lack the right to submit, and should reserve the sponsor's right to disqualify submissions that include infringing or non-compliant content.

Prize Fulfillment, Affidavit Requirements, and Tax Compliance

Prize fulfillment creates obligations that extend well past the promotion's end date. The most common gaps involve winner-notification procedures that fail to follow the official rules' timeline and method; affidavit-of-eligibility and publicity-release requirements that are not enforced consistently; and IRS 1099 reporting for prizes above the $600 threshold.

Winner Notification

The official rules must specify how winners are notified (email, phone, postal mail), within what timeframe after selection, and what they must do to claim. The claim deadline — commonly 30 days after notification — must be stated. If a winner does not respond by the deadline, the prize typically passes to an alternate, and that process should be described in the rules. Sponsors who deviate from their stated notification and selection process create contractual-breach exposure to entrants.

IRS 1099 Reporting

Prize value is taxable income for US winners. Sponsors must file and distribute IRS 1099 forms (1099-MISC or 1099-NEC, depending on prize type) for any winner receiving prize value of $600 or more in a calendar year. The reporting obligation is the sponsor's, not the winner's, and requires collecting the winner's taxpayer identification number (via Form W-9) before releasing the prize. Affidavit-of-eligibility forms should incorporate W-9 collection for any prize above $600. Sponsors running multiple promotions in the same year should aggregate prize values by winner so that winners crossing $600 in total are reported correctly.

Conclusion

Promotions compliance is not optional overhead — it is the legal infrastructure that makes promotional marketing possible. A sweepstakes that runs without an adequate AMOE, without New York and Florida registration, without FTC-compliant disclosures, without complete official rules, or without appropriate data privacy notices is not a promotion that got away with cutting corners. It is a promotion that accumulated legal exposure that has not yet been enforced.

The 2026 enforcement landscape has raised the stakes. The FTC is actively monitoring social media promotions and has issued warning letters where disclosure practices fell short of the clear-and-conspicuous standard. State attorneys general in the most populous markets are investigating digital promotions that miss state-specific registration requirements. And the data privacy environment has expanded to make the promotion entry form a personal-data collection point with meaningful obligations across many state frameworks.

The practical response is not to avoid promotions — they remain one of the most effective tools for acquisition, engagement, and data collection. It is to build the compliance infrastructure — legal review of official rules, a registration calendar, FTC-disclosure protocols for social entry mechanics, privacy-notice integration in entry forms, and fulfillment processes that include 1099 reporting — into promotion planning before launch, rather than discovering its absence during enforcement.

Sources and Further Reading

Primary authorities. These are the issuing sources for the figures and rules cited above.

• New York Department of State — Games of Chance Registration (N.Y. Gen. Bus. Law Art. 24-A, § 369-e): $5,000 threshold, 30-day filing, $100 fee, surety bond. — dos.ny.gov
• Florida Statutes § 849.094 — Game Promotion in Connection with Sale of Consumer Products or Services: $5,000 threshold, 7-day filing, bond/trust account. — leg.state.fl.us
• Rhode Island Secretary of State — Games of Chance / retail promotion filing: $500 in-store threshold, no bond. — sos.ri.gov
• FTC — Rule on the Use of Consumer Reviews and Testimonials, 16 CFR Part 465 (published Aug 14, 2024; effective Oct 21, 2024). — ftc.gov
• FTC — Guides Concerning the Use of Endorsements and Testimonials in Advertising, 16 CFR Part 255. — ftc.gov
• FTC — inflation-adjusted civil penalty amounts; OMB Memo M-26-11 (Apr 17, 2026) cancelling the 2026 adjustment and holding 2025 levels. — ftc.gov / whitehouse.gov
• IRS — 1099-MISC / 1099-NEC reporting; $600 threshold and Form W-9 collection. — irs.gov
• State comprehensive privacy laws in effect 2026 (CCPA/CPRA, VCDPA, CPA, CTDPA, TDPSA, and others; IN, KY, RI effective Jan 1, 2026). — state AG offices

Background and secondary references. Practitioner and industry guides consulted for context

• Snipp — A Quick Guide to Sweepstakes Laws and Rules 2026 (snipp.com)
• Brandmovers — The Complete Legal Guide for Running Sweepstakes, Contests, and More (brandmovers.com)
• Realtime Media (RTM) — Navigating the Key Legal Requirements for Sweepstakes; No Purchase Necessary Laws (rtm.com)
• Thompson Coburn — Got an in-store sweepstakes? Better register in Rhode Island (thompsoncoburn.com)
• Klein Moynihan Turco / Lexology — Sweepstakes Law: A Primer (lexology.com)
• McDermott Will & Emery — Legal 101 for Sweepstakes and Other Promotions (mwe.com)
• MultiState / Koley Jessen — 2026 state privacy law effective dates (multistate.us; koleyjessen.com)

Notes for Editor

• The legal disclaimer callout must be the first content element after the masthead/author box — do not move it below the introduction.
• The compliance requirements table is the most reference-worthy content — ensure it renders as a full-width HTML table in the CMS.
• Verified June 2026: NY § 369-e ($5,000 / 30-day / $100 / bond); FL § 849.094 ($5,000 / 7-day / bond); RI Secretary of State ($500 in-store / no bond). Re-confirm RI agency name on the live filing page before publication.
• FTC penalty figure ($53,088 per violation): the 2026 inflation adjustment was cancelled (OMB M-26-11), so the 2025 figure remains current for 2026. Re-verify at next FTC adjustment cycle.
• Open item flagged to legal/compliance: the prior draft stated NY non-registration is a ‘Class B misdemeanor.’ That specific classification was not independently confirmed against the statute for this revision; the article now says ‘criminal liability under New York law.’ Confirm the exact offense class with counsel before re-adding the Class B characterization.
• Internal links: Brandmovers complete legal guide for digital promotions; Brief 25 (Gamified Data Collection); Brief 34 (How to Write Loyalty Program T&Cs).
• Comparison-adjacent / legal content — route through legal review before publishing.

Editor note: This revision was rebuilt from the graded draft — Expertise scaffold added (named byline, author bio, editorial-process note, primary-source citations, legal/compliance review line); Rhode Island, FTC penalty framing, fake-reviews dates, and the state-privacy roster corrected against primary sources; one unverified Florida claim and the ‘Class B misdemeanor’ characterization removed pending counsel confirmation. US English; Arial; #1B3A6B headings; single CTA.