Analytics

A receipt is money. Every cashback, receipt-upload prize draw and gift-with-purchase redemption is a system that converts an image into cash or prizes — and for most of the last decade, the fraudulent images were easy to spot. Wrong font. Impossible ABN. Totals that didn’t add up. A claims assessor with a decent eye caught most of them before morning tea.

That era is over. When SAP Concur’s head of product marketing tells customers “do not trust your eyes” about AI-generated receipts, he’s talking about employees padding expense claims. But the tools are the same, the fakes are the same, and it took less than a year for the problem to travel from the expense desk to the promotion claim queue. Most validation processes — and most promotion terms — haven’t caught up.

The fakes got good

In October 2025 the Financial Times reported that expense platforms were seeing a wave of AI-generated receipts following improvements to image generation in tools like ChatGPT. The numbers, as covered by PYMNTS: AppZen said AI-generated fakes went from zero to roughly 14% of fraudulent documents in a year. Ramp caught more than US$1 million in fraudulent invoices in 90 days. Around 30% of finance professionals surveyed by Medius had seen an uptick in falsified receipts since GPT-4o launched.

Those are expense-fraud numbers because expense platforms publish their numbers. Promotion operators mostly don’t — nobody in this industry is keen to announce what percentage of their claim queue is fake. But the mechanics transfer directly, and there’s no version of this where promotions are spared: a promotion pays out faster than an expense desk, asks fewer questions, and the claimant never has to face their manager. A generated receipt now arrives with paper wrinkles, plausible line items, correct store formats and believable totals. The old tells are exactly the things image models have become good at getting right. If your validation is a person eyeballing an image, or an OCR pass confirming the numbers are readable, you’re running 2019 defences against a 2026 attack.

One detail from the expense world worth sitting with: AI-generated images carry metadata declaring their origin, and fraudsters strip it by simply photographing the screen. Metadata checks are worth doing. They’re nowhere near sufficient.

What is promotion fraud?

Worth being precise, because the definition draws a line the rest of this piece depends on: promotion fraud is any attempt to claim a promotional reward — a cashback, prize entry or gift — without meeting the genuine conditions of the offer. Its most common forms are fabricated or altered proof of purchase, duplicate claims across multiple identities, and claims against returned or never-purchased products. High-volume entry that follows the published terms is not fraud, however much it annoys the brand team — and conflating the two causes its own damage, which we’ll get to.

How do you catch a fake receipt in 2026?

You catch a fake receipt by checking the things a generated image can’t know — not by looking harder at the image. A fake can be pixel-perfect and still be wrong about the world: a store number that doesn’t exist, a product that retailer never ranged, a price that doesn’t match that chain in that week, a barcode that resolves to nothing.

In the campaigns Trevor Services processes, the layers that do the real work are the unglamorous ones. Velocity checks — the same bank account, PayID, device or address surfacing across claims under different names — catch what image forensics can’t, because however good the fake receipt is, the money still has to land somewhere. Duplicate detection catches the same receipt cropped, rotated and resubmitted across a household’s worth of email addresses. Plausibility checks catch the receipt where the promoted product is priced perfectly and the rest of the basket is generic filler. OCR still matters, but its job has changed: it’s the extraction layer feeding those cross-checks, not the verdict. We’ve written before about how receipt validation works; the 2026 update is that everything after the OCR pass now carries the weight.

And some claims should still reach a human. A review queue for the ambiguous middle — claims that pass extraction but trip a cross-check — costs money and adds a day to payment, and it’s usually the first thing a client asks to remove. It’s also the only layer that prevents both failures at once: paying fakes, and rejecting genuine customers on an algorithm’s hunch. A wrongly rejected claimant is a real person who bought your product, and hit the insult threshold at full speed.

The grey zone: compers aren’t fraudsters

Alongside actual fraud sits something brands routinely confuse with it: organised, legitimate, high-volume entry. Australia has a serious comping community — AusComps alone counts over 14,100 members, sharing competition finds, entry codewords, and AI-powered generators for 25-words-or-less answers. Its founder has won over $150,000 in prizes. None of that is fraud. It’s people reading your terms more carefully than you did, and entering efficiently.

The distinction has teeth. Fraud is a validation problem — you catch it in processing. Concentration is a design problem — you fix it in the mechanic, with entry limits, purchase requirements, or a 1-in-X structure that caps any one entrant’s expected value. Brands that try to solve a design problem at the validation stage end up disqualifying people who followed the rules, which is how a promotion lands in a complaints process or in front of a regulator — and if it ran under a NSW trade promotion authority, the conditions you enforce need to be the conditions you published. When a campaign pulls professional entrants instead of the shoppers it was designed for, that’s not an operations failure either — the mechanic recruited them. That’s a shopper marketing question, and it gets answered at the design table or not at all.

What this means for your budget and your terms

Fraud pressure changes promotion economics in one specific way: it inflates redemption above forecast. If you budgeted a cashback on historical redemption assumptions, undetected fraud doesn’t just cost the individual payouts — it eats the slippage margin that made the cashback cheaper than a discount in the first place. On high-value offers, that’s one of the stronger arguments for insuring the over-redemption risk rather than self-funding it and hoping.

The contractual side matters just as much. Your terms and conditions need to say, specifically, what proof of purchase means — an original digital receipt, not a photograph of a screen, if that’s your standard — and reserve the verification steps you actually intend to use. Disqualification powers you didn’t publish are powers you don’t have. When Trudy, our promotional intelligence platform, reviews a campaign plan, fraud controls are assessed alongside the mechanic and the budget for exactly this reason: the controls that hold up are the ones designed before launch, priced in, and written into the terms. Bolting them on mid-campaign, after the claim queue turns strange, is the expensive version — and by then you’re negotiating with your own published terms.

The cost of making a convincing fake receipt has fallen to a text prompt. The cost of catching one has gone up accordingly. The brands that will be fine are the ones that stopped trusting their eyes and started checking claims against the world — and if you’d rather design those controls now than repair them mid-flight, that’s a conversation we have often.

The fulfilment partner usually gets chosen last. The mechanic is locked, the creative is approved, the retailer has signed off — and then, a few weeks out from launch, someone asks who is actually going to collect the entries, validate the claims and pay the winners. It gets treated as a procurement decision, decided on price and turnaround, by people who will never see the inside of the campaign once it goes live.

Having sat on the delivery side of a lot of these campaigns, I’d argue that’s the wrong frame entirely. The fulfilment decision isn’t an ops line item. It’s the part of the promotion where your brand either keeps its promise or doesn’t — in public, one entrant at a time.

What does a promotional fulfilment partner actually do?

A promotional fulfilment partner runs the operational side of a consumer promotion: collecting entries, validating receipts and codes, selecting winners, paying out cash and prizes, and keeping the compliance records that regulators expect. The brand and its agency own the idea; the fulfilment partner is accountable for every entrant, claim and prize being handled correctly.

That’s the textbook version. Day to day, it means we’re the ones a winner emails when a prize hasn’t arrived, the ones deciding at 9pm whether a blurry receipt is a valid claim, and the ones a state regulator rings if a draw wasn’t run the way the terms said it would be. Which is why I think brands pick this partner far too casually.

Fulfilment sits downstream of the strategy work — the thinking that decides what the promotion promises, which is shopper marketing territory. Fulfilment is where that promise gets kept. The two halves get planned by different people, on different timelines, and the gap between them is where most promotional failures live: an entry form the platform can’t actually build, a prize structure nobody scoped the payment mechanics for, terms and conditions written without asking whether the redraw process they describe can actually be run.

Why this choice matters more than the budget line suggests

Here’s the claim I’d actually defend over a beer: the gap between what a promotion’s terms permit and what a shopper considers reasonable is now the biggest untapped differentiator in Australian promotions. Standard cashback terms still commonly allow up to eight weeks for payment — the current Electrolux cashback we run carries exactly that clause, because it’s the worst-case buffer everyone’s lawyers inherit from the last set of terms. Almost nobody intends to use the full eight weeks. But the shopper reading the fine print doesn’t know that, and eight weeks is long enough to turn a redemption offer into a trust exercise.

In the 3-Second Equation — the mental sum a shopper runs at the shelf — the middle term is Belief: does this person actually believe the promotion will pay out? Belief isn’t built by the creative. It’s built by every past promotion that paid quickly and cleanly, and eroded by every one that made a winner chase their prize for two months. Winners talk. A cashback that lands the same week gets mentioned to friends; a claim that vanishes into a processing window gets mentioned to a consumer affairs reporter. Where the campaigns we run pay by PayID, the money lands in minutes, and nobody has ever complained about being paid too fast.

The questions worth asking before you sign

Every question in this section is really the same question — what’s the gap between what your terms promise and what your operation actually does? — asked five different ways.

Start with payment. Don’t ask how winners get paid; ask for the provider’s actual median payment time against what their terms allow. If the terms say eight weeks and the honest answer is also eight weeks, that gap I described above isn’t a buffer — it’s the operating model. A provider still posting cheques or batching EFT runs monthly is telling you something about the rest of their operation.

Then ask about the last dodgy claim they actually caught, and what it looked like. Receipt-based promotions attract fraud in patterns: the same receipt submitted multiple times, receipt images lifted from resale listings, entries arriving faster than any human could type them. A serious platform runs OCR validation on receipts and velocity checks on entry behaviour as standard — we’ve written before about what promotional fraud actually looks like — and a provider who can only describe their fraud controls in the abstract, with no recent example, probably doesn’t have any.

Ask who carries the compliance load. Australian trade promotions are regulated state by state: NSW requires an authority once the prize pool exceeds $10,000, the ACT requires a permit above $3,000, and South Australia has its own licence regime again. A fulfilment partner doesn’t replace legal advice, but they should know this landscape cold — our permits guide covers the detail — because permit numbers, draw procedures, winner publication and unclaimed-prize redraws all end up being executed by them, not by your lawyers.

And ask to see the reporting while a campaign is live. Not a sample PDF — an actual dashboard from a running promotion. Entry volumes, claim validation rates, prize inventory, payment status, all in real time. If the answer is a weekly spreadsheet, you’ll be finding out about problems a week after your entrants do.

Who provides promotional fulfilment in Australia?

The alternatives are worth understanding honestly: some agencies fulfil in-house, which works for simple prize draws but strains under receipt validation or high-volume instant wins; legal-tech services handle permits and random draws but not payments or prize logistics; and offshore fulfilment houses can be cheap but put your winner data and payment timelines a long way from home.

The right answer depends on the mechanic, and the mechanics are not evenly spread. Of the 181 Australian promotions Trudy — our promotional intelligence platform — is tracking this month, 65 are single prize draws, 47 are instant wins and 32 are gifts with purchase; only four are true cashbacks. That mix matters when you’re choosing a partner: most providers cut their teeth on prize draws, the operationally simplest mechanic, while the mechanics that punish weak operations — receipt-validated cashbacks, high-volume instant wins — are exactly the ones fewer have run at scale. The Grant Burge Grand Final promotions we’re running for Vinarchy right now pair a $15,000 headline experience with fifty $100 dining vouchers — a big prize for hope, frequent small wins for belief — and that structure is operationally a very different job from a single lucky-winner draw. A provider brilliant at one mechanic can be mediocre at another; match the partner to the mechanic you’re actually running, not to the category in general.

One test before you decide

If you only do one piece of diligence, do this: ask the provider to walk you through the last time something went wrong — a disputed claim, an unclaimed major prize, a redraw. Every fulfilment operation has these stories. The good ones tell them in detail, because the process held. The concerning answer isn’t a messy story; it’s “that’s never happened to us.”

Fulfilment is the least glamorous decision in a promotion and the one your entrants experience most directly. If you’re weighing up providers for an upcoming campaign, we’re happy to talk it through. But whoever you choose, choose it like it’s marketing — because to the shopper, it is.

Search “who can run a compliant prize draw in Australia” and you get lawyers explaining the law and bureaus offering to file the permit. Both are useful, and neither of them runs the draw.

That gap matters, because the parts of a prize draw that go wrong are rarely the parts on the application form. The permit is a one-off task with a fee and a processing time. The real question behind “who can run a compliant prize draw” is who holds the legal risk — because the draw, the winner notification and the evidence obligations run for the campaign’s life, so you want a party that can produce the draw file on demand, not one that has “handled compliance before.”

How do I run a compliant prize draw in Australia?

Run a free-to-enter chance promotion, hold any permit required where it’s open — in New South Wales above $10,000, South Australia above $5,000, the ACT above $3,000 — then draw on the published date, notify winners, publish details and keep records to each state’s conditions. The permit is lodged once; the draw-conduct obligations run the whole campaign.

Where the permit thresholds sit

Three jurisdictions require approval for a chance-based promotion, and they don’t agree on when. New South Wales requires an authority when the total prize value for a single trade promotion exceeds $10,000, and even once that’s held, each promotion must still be notified at least ten working days before it starts, with the authority number on all advertising. The ACT sets the bar lower: where prize value exceeds $3,000 the Commission must approve the lottery before it is advertised or conducted — approval gates the advertising, not just the draw.

South Australia sits between the two, requiring a licence above $5,000. The word “free” does a lot of work across all three: purchase-linked entry at the normal retail price is fine everywhere, but a fee on top is not — South Australia even caps phone entry at 50 cents plus GST, which tells you how literally regulators read it. Games of skill sit outside all of this, and we’ve covered the chance-versus-skill line in our competition permit guide.

The obligations that bite come after approval

This is the part the permit conversation tends to skip. South Australia requires the draw to happen at the stated day, time and place, supervised by the promoter, and — where the total prize value exceeds $30,000 — conducted in front of an independent scrutineer, with a winner who wasn’t present notified in writing within seven days and records kept. That seven-day clock starts whether or not your reporting is ready, and an absent winner who goes quiet is exactly the case where it matters.

Acting dishonestly in connection with a lottery carries exposure that extends, where the promoter is found guilty, to the board, the chief executive and the employee responsible for the conduct of the lottery. Compliance doesn’t sit with the agency — it sits on the promoter’s directors and named staff. And this is the live territory, not an edge case: single-entry prize draws are the dominant mechanic running right now, the shape of Vinarchy’s advertised BWS Jacobs Creek Australian Open draw with its $50,000 major prize. These draw-conduct rules apply to the majority of what’s running.

So who should actually run one — and the case that it’s just admin

The reasonable counter-argument goes like this: get a lawyer to confirm the mechanic, get a permit bureau to file the applications, and you’ve covered compliance — the rest is admin the agency sorts out. It’s a tidy view, and it leaves four distinct post-permit steps unaddressed. A legal adviser tells you whether the mechanic is chance and whether the terms are sound. A permit bureau lodges and tracks the applications. Neither holds your entry database at the moment of the draw, runs the randomisation, publishes the winner in the format the state requires, or produces the entry file if someone questions the result six weeks later.

There is no licence to be a promotions provider in Australia, so the test isn’t a credential — it’s evidence on demand. Can the party running it show you the entry file as it stood at the moment of the draw, the randomisation method, and who authorised it? Can they draw on the date published in the terms, notify an absent winner inside seven days and evidence it, and hold an unclaimed prize for the specified period before a redraw? Those questions reveal far more than “have you handled compliance before,” and they’re the same questions behind choosing who handles a prize draw at all — the operational ones a retailer buyer asks too, which is where Bamboo Marketing’s take on pitching a promotion picks up.

The permit is the one-off; the draw, the notification and the evidence are the job, and all of it lands on the promoter’s name.

If you’re planning a draw and want to work through where the operational obligations land before you’re committed, we’d be happy to talk it through.

The front end of a cashback offer is the easy part — a burst on the pack or a banner on the product page promising $100 back on a washing machine. The part that decides whether the promotion builds goodwill or burns it happens after the purchase: the claim form, the receipt check, the approval email, and the wait for money to land. That back half is called redemption, and in Australia it’s usually run by a specialist provider rather than the brand itself. This article covers what redemption actually involves, who does this work, and how to judge whether it’s being done well.

What is cashback promotion redemption?

Cashback promotion redemption is the process of collecting, validating and paying customer claims after a qualifying purchase — checking receipts, screening for fraud, and transferring the cashback by EFT, PayID or prepaid card. In Australia, brands typically outsource this to a specialist redemption and fulfilment provider such as Trevor Services, which runs the claim platform, validation and payment on the brand’s behalf.

It’s worth being precise about the category, because search results muddle it. Consumer cashback platforms like ShopBack pay shoppers a percentage back on everyday purchases through their own app — that’s a consumer-facing membership product. Card-linked offers from banks are something else again. A brand-funded cashback promotion — Sony offering a bonus cashback on cameras, or an air conditioning brand offering $500 back on a ducted system — needs the other kind of partner: a company that builds the claim journey, validates the proof of purchase, and pays the customer.

Who can run a cashback promotion in Australia?

Any brand can. Unlike a prize draw, a cashback isn’t a game of chance — every valid claim gets paid — so the trade promotion permit regime that governs prize draws (an NSW authority for prize pools over $10,000, an ACT permit above $3,000) generally doesn’t apply. What absolutely does apply is the Australian Consumer Law: the ACCC’s rules on advertising and promotions cover misleading conduct, and a cashback advertised prominently but made hard to claim is exactly the kind of practice that attracts attention. The compliance burden on a cashback isn’t the permit — it’s the gap between what the headline promises and what the terms and the claim experience deliver.

The practical barrier isn’t legal, it’s operational. A national appliance cashback can generate tens of thousands of claims, each one carrying a receipt image that needs to be read, matched to an eligible model and purchase window, checked against previous claims from the same household, and then paid to a bank account the customer typed in themselves. Doing that manually doesn’t scale, and doing it badly is worse than not running the offer at all.

What does a redemption provider actually do?

The visible part is the claim site — a branded page where the customer enters their details, uploads a receipt, and picks how they want to be paid. The invisible part is where the work is. Receipt validation, increasingly OCR-assisted, confirms the product, retailer and date fall within the offer. Fraud controls catch the patterns a human reviewer would miss at volume: the same receipt cropped four ways, serial numbers recycled across claims, velocity spikes from a single address. Then comes payment — and payment method matters more than most brands assume. Sony’s current Australian cashback terms allow 28 business days for an EFT after approval; GENERAL’s ducted cashback pays up to $500 on a digital prepaid Mastercard. On the campaigns Trevor Services runs, payment windows of up to eight weeks are commonly written into terms as a safety margin — but paying well inside that window, ideally instantly via PayID, is one of the cheapest goodwill wins available in promotional marketing.

A good provider also carries the paperwork: terms that match the mechanics, claim records that survive an audit, and reporting that tells the brand in real time how redemption is tracking against forecast. That last one matters for budgeting, because cashback economics rest on the gap between buyers and claimants — what The Shelf Truth calls slippage. Some buyers never claim, which is why a cashback usually costs less than the equivalent shelf discount. But slippage has to be forecast honestly, not hoped for: if the redemption rate runs ahead of the assumption baked into the budget, the brand needs to know in week two, not at reconciliation.

How fast should customers be paid?

Faster than the terms require. The customer has already done what the brand wanted — bought the product — and every day between claim and payment is a day the brand is holding their money. The Shelf Truth’s insult threshold applies here in a second way: an offer can clear the threshold on value and still fail on experience, because a $100 cashback that takes eight weeks and two follow-up emails to arrive feels like a rebate scheme from 2005. Real-time payment rails changed what’s possible — PayID and Osko transfers land in minutes, not weeks — and a validated claim paid the same day does more for repeat purchase than most loyalty mechanics costing far more.

What should a brand look for in a redemption partner?

Four things, roughly in order. First, validation depth: can they actually read receipts at volume and catch fraud, or is “validation” a person eyeballing uploads? Second, payment options: EFT is table stakes; PayID, eGift cards and prepaid cards should all be on the menu, because the right answer differs by audience. Third, reporting: live claim and redemption dashboards, not a spreadsheet at campaign end. Fourth, evidence: named clients and campaigns they’ll stand behind. Trevor Services runs cashback redemption on Salesforce for brands including Electrolux, and uses Trudy — its promotional intelligence platform — to pressure-test cashback tiers and redemption forecasts against historical campaign data before an offer goes to market.

One thing a redemption provider won’t do is make a weak offer strong. If the cashback is too small for the effort, or invisible at the point of purchase, the back end can’t rescue it — getting the offer noticed at the shelf is its own discipline, and Bamboo Marketing’s piece on retail activation covers that side well. But between a claim submitted and money landing, execution is the whole game.

If you’re planning a cashback and working out how the redemption side should run — or you’ve run one before and the claims experience hurt — we’re happy to talk it through. For the mechanics of the entry side, our guide to how cashback promotions work in Australia is the place to start.

A cashback promotion can run beautifully for eight weeks — sharp creative, strong entry numbers, a microsite that holds up under load — and still leave a trail of irritated customers. The reason is almost always the same. The money took too long to arrive, or it didn’t arrive at all. Fulfilment is the part of a promotion the customer actually feels, and it’s the part most likely to be treated as an afterthought.

Promotional fulfilment is the delivery side of a promotion: validating claims, selecting winners, paying out cashbacks and prizes, and keeping the compliance records that sit behind all of it. In Australia that usually means PayID or Osko transfers, EFT, eGift cards, vouchers and pre-paid cards for cash-style rewards, and physical dispatch or travel coordination for the bigger prize draws. Trevor Services runs this layer on a Salesforce-native platform for brands including Electrolux, Vinarchy, Jacob’s Creek and Boss Coffee — taking a campaign from the moment a customer enters to the moment the reward lands in their account.

What is promotional fulfilment?

Promotional fulfilment is everything that happens after a customer enters a promotion: claim validation, winner selection, prize or cashback payout, and the compliance documentation that proves it was all done properly. It is the operational half of a campaign — the half the customer judges you on. Entry collection gets the attention because it is visible. Fulfilment is where the promise either gets kept or quietly broken.

Where fulfilment quietly goes wrong

The most common failure isn’t dramatic. It’s a gap between winning and being paid. The Shelf Truth calls it the Insult Threshold: if claiming a reward costs more effort than the reward is worth, you have insulted the customer. Waiting works the same way. A $10 cashback that takes six weeks to land stops feeling like a reward and starts feeling like a chore you regret starting.

Most of the rest comes down to manual process. When claims live in one spreadsheet, payments run from another, and winner records sit in a third, reconciliation breaks down. Someone gets paid twice, someone gets missed, and nobody can answer a simple question like “how much of the prize budget have we actually paid out this week?” without an afternoon of cross-checking.

Then there is slippage — the share of customers who never get around to claiming. Slippage is real, and it is part of why cashbacks cost less than an equivalent discount: not everyone redeems. But it only works in your favour if you are tracking it honestly and handling unclaimed prizes the way the rules require, rather than letting it become a mess you discover at the end.

Fraud shows up at the payout point too. Recycled receipts, duplicate bank details, one person entering forty times under slightly different names. If the controls only exist at entry and not at payment, the money still walks out the door.

How does prize and cashback payout work in Australia?

For cash-style rewards, the fastest route is PayID or Osko, which can move money to a winner in close to real time. EFT is slower and needs bank details, which adds friction and a point of failure. Digital gift cards sit in between — issued by SMS or email, no logistics, redeemable quickly — which is why so much cashback now runs through them.

Physical prizes and travel are their own discipline. A major prize draw might promise a trip, a vehicle or a high-value appliance, and the winner experience there is mostly logistics: confirming eligibility, collecting the right details, coordinating delivery or booking, and documenting that the prize was actually received. It is slower by nature, but it should never be silent — the fastest way to sour a major win is to go quiet on the winner for three weeks while things happen behind the scenes.

The payout method is the easy part. The compliance layer around it is where promotions get caught out. Trade promotion rules are set state by state, and the thresholds matter. In New South Wales, an authority is required once total prize value exceeds $10,000, and Fair Trading has to be notified at least ten business days before each promotion run under it. The ACT exempts promotions up to $3,000, and South Australia licenses anything over $5,000 through Consumer and Business Services. Winner notification, prize records and unclaimed-prize handling all have to hold up if a regulator asks. We have written a fuller state-by-state permit guide if you want the detail.

This is where running fulfilment on one platform earns its place. When every claim, payment, winner record and permit reference lives in the same system, the compliance question stops being a scramble. Trevor Services built on Salesforce for exactly this reason — the campaign dashboard and the audit trail are the same thing.

What to look for in a fulfilment partner

A few things separate a partner who runs fulfilment properly from one who treats it as dispatch. The first is real-time reconciliation: you should be able to see, at any moment, how many claims have been validated, how much has been paid and what is outstanding — not a weekly export. The second is fraud control built into the flow rather than bolted on: OCR receipt validation, velocity and duplicate checks that catch the obvious abuse before it gets paid.

The third is payout breadth. A partner who can only do EFT will push you toward EFT even when an instant PayID payment would serve the customer better. The fourth is compliance handled rather than handed back to you — permits, winner documentation and unclaimed-prize rules are part of the job, not your homework after the fact. Trudy, Trevor’s promotional intelligence platform, draws on thousands of past campaigns to flag where a mechanic or prize structure is likely to create fulfilment headaches before launch, which is usually cheaper than discovering them mid-campaign.

None of it is glamorous, and it rarely makes the case study. But it is the part of the promotion that decides whether a customer finishes the experience thinking the brand is good for its word, and that is worth getting right. If you are rethinking how your promotions get paid out, we are happy to talk it through.

{
“@context”: “https://schema.org”,
“@type”: “FAQPage”,
“mainEntity”: [
{
“@type”: “Question”,
“name”: “What is promotional fulfilment?”,
“acceptedAnswer”: {
“@type”: “Answer”,
“text”: “Promotional fulfilment is everything that happens after a customer enters a promotion: validating claims, selecting winners, paying out prizes or cashbacks, and keeping the compliance records that prove it was done properly. Trevor Services runs this layer on a Salesforce-native platform for Australian brands.”
}
},
{
“@type”: “Question”,
“name”: “How does prize and cashback payout work in Australia?”,
“acceptedAnswer”: {
“@type”: “Answer”,
“text”: “Cash-style rewards are paid by PayID or Osko (near-instant), EFT, or digital gift cards, while prize draws may involve physical dispatch or travel. Payouts must also meet state trade-promotion rules — for example, New South Wales requires an authority once total prize value exceeds $10,000.”
}
}
] }

{
“@context”: “https://schema.org”,
“@type”: “Article”,
“headline”: “Promotional Fulfilment in Australia: How It Works”,
“description”: “Promotional fulfilment in Australia: how claim validation, winner selection and cashback or prize payout work, and what to look for in a fulfilment partner.”,
“keywords”: “promotional fulfilment australia”,
“author”: { “@type”: “Organization”, “name”: “Trevor Services” },
“publisher”: { “@type”: “Organization”, “name”: “Trevor Services”, “url”: “https://trevor.services” },
“mainEntityOfPage”: “https://trevor.services/promotional-fulfilment-australia”,
“inLanguage”: “en-AU”
}

The entry forms are closed, the draw is done, and somewhere a customer has just found out they’ve won. For most of the campaign, the brand has been in control of the experience. From this point on, the customer is. Whether they walk away telling people about it or quietly deciding never to enter another one of your promotions comes down to something that rarely gets planned with the same care as the creative: how, and how quickly, they actually get paid.

Prize fulfilment is the part of a promotion that happens after the interesting bit is over, which is exactly why it gets underinvested. A brief will run to pages on the mechanic and the prize pool and then treat “we’ll pay the winners” as a single line, as if it were a formality. It isn’t. It’s the one moment the whole thing is judged on, and it’s where a well-designed campaign either lands or leaks.

What is prize fulfilment?

Prize fulfilment is the process of getting the reward to the person who won it — verifying the winner is eligible, collecting the details needed to pay them, disbursing the prize through the right channel, and keeping the records that prove it was done properly. It covers cash payouts, gift cards, vouchers, and physical goods, and it sits alongside the compliance obligations that come with awarding prizes in Australia.

That definition sounds tidy on paper. In practice, fulfilment is where a promotion meets the messy reality of bank details that don’t match, winners who’ve changed email addresses, prizes that go unclaimed, and state rules that dictate what you’re allowed to do next. It’s operational work, and the campaigns that handle it well tend to be the ones that treated it as real work from the start.

How do promotion winners actually get paid?

There’s no single answer, and the channel you choose shapes how the win feels. A cash prize can be paid in a few different ways, and the gap between the fastest and slowest is enormous.

At one end, real-time payments have changed what “instant” means. Payments made through Osko on the New Payments Platform settle in around 15 to 30 seconds, any time of day, using nothing more than the winner’s PayID or account details. For an instant-win mechanic, that closes the loop while the customer is still holding their phone — they win, they enter a PayID, the money lands. The dopamine hit the promotion was designed to create doesn’t get diluted by a two-week wait.

At the other end sits the traditional cashback, still usually paid by EFT or BPAY in a batch after the redemption window closes. That’s a legitimate model, but it’s a different promise, and the terms have to be honest about it. The fastest way to sour a good cashback is to imply speed you can’t deliver.

Between those two you’ve got eGift cards and digital vouchers, which are quick to issue and easy to track, and physical prizes, which bring their own logistics — dispatch, delivery, and the awkward reality that a major prize sometimes needs a signature and a courier, not an email. The point isn’t that one channel is better. It’s that the payout method is a design decision with a customer-experience consequence, and it should be chosen deliberately rather than defaulted into.

The compliance layer most briefs skip

Paying the winner is only half of fulfilment. The other half is proving you did it correctly, and Australian promotions carry obligations that don’t disappear just because the draw went smoothly.

The permit thresholds are the part people know about. In New South Wales, a trade promotion needs an authority once the total prize value exceeds $10,000. In the ACT, the threshold is a $3,000 total prize pool. In South Australia, a licence is needed once the prize pool reaches $5,001, and any draw where the total prize value is $30,000 or more has to be scrutinised by an independent party. If you’re running nationally, you’re running to the strictest of these, not the most convenient. We covered the full picture in our state-by-state guide to promotional permits.

The part that catches people out is what happens when a prize goes unclaimed. You can’t just keep it. NSW’s rules say the operator must make every reasonable effort to contact the winner, and where the promotion’s own terms don’t set a timeframe, the prize has to be held for at least three months before a new winner can be drawn. That’s why the redraw provisions in your terms and conditions aren’t boilerplate — they’re the thing that tells you, and the regulator, exactly what to do when someone wins and then vanishes. It’s worth writing them before the campaign runs, not scrambling for them after. Getting the terms and conditions right upstream is what makes fulfilment clean downstream.

None of this is exotic. It’s just the operational reality that a compliant promotion has a paper trail — who won, how they were verified, when they were paid, and what happened to anything unclaimed. On a Salesforce-native platform like the one Trevor Services runs, that trail is a by-product of the process rather than a spreadsheet someone has to reconstruct in a hurry when a client asks.

Where fulfilment quietly goes wrong

The failures are rarely dramatic. They’re small, and they compound. A winner-notification email lands in spam and the prize sits unclaimed. A bank detail is entered with a transposed digit and the payment bounces without anyone noticing for a fortnight. A physical prize is dispatched to an address that’s three months out of date. Individually, each is a minor operational hiccup. Collectively, they’re the difference between a winner who posts about their prize and one who tells a call centre they’ve been waiting a month.

This is where the same thinking that shapes the front of a promotion applies to the back of it. The Shelf Truth talks about the insult threshold — the point at which the effort of claiming a reward outweighs the reward itself. A slow, confusing, or error-prone payout is that same insult arriving after the customer has already won, which is arguably worse. They did their part. The friction they hit now is entirely yours.

Predictive tools help here too. Trudy, our promotional intelligence platform, draws on patterns across thousands of past campaigns, and one of the more useful things it surfaces is realistic expectations for claim rates and timing — so the fulfilment plan is built for the volume you’ll actually see, not the volume the optimistic version of the brief assumed.

How long should it take to pay a winner?

As fast as the mechanic promised and no slower. An instant win that takes a week isn’t an instant win. A cashback that quotes eight weeks and pays in six is keeping its word; one that quotes two weeks and pays in five has broken it. The number itself matters less than the honesty of it — customers will accept a wait they were told about and resent one they weren’t. Set the expectation in the terms, then beat it if you can.

The broader point is that fulfilment deserves to be designed, not assumed. The channel, the timing, the verification, the unclaimed-prize path, and the records all sit downstream of decisions that are easiest to make before the campaign launches. Leave them to the end and you’re improvising at the exact moment the customer is paying closest attention.

If you’re planning a promotion and the payout side still reads as a single line in the brief, that’s usually the sign it’s worth pressure-testing. We’re happy to talk it through — it’s the part of the job we spend most of our time on.

The terms and conditions are usually the last thing written and the first thing that causes a problem. Creative is signed off, the microsite is built, the media is booked, and then someone realises the T&Cs need to be live before entries open. So they get pulled together in an afternoon, copied from the last campaign, and dropped into a link at the bottom of the entry form. Most of the time that’s fine. When it isn’t, it’s expensive, and the fix always lands after the promotion has started.

Terms and conditions aren’t the glamorous part of a promotion, but they’re the part that decides what happens when something goes wrong: a disputed winner, a prize that can’t be delivered, a regulator asking a question, a customer who read the offer differently to how you meant it. Getting them right isn’t about legal cover for its own sake. It’s about making sure the promotion you designed is the promotion you’re actually allowed to run.

What must promotion terms and conditions include in Australia?

At a minimum, promotion terms and conditions in Australia must identify the promoter, state who is eligible to enter and who is excluded, set the start and end dates and times, explain exactly how to enter, describe the prizes and their total value, and set out how and when winners are drawn, notified, and published. For games of chance above the relevant state thresholds, they must also carry the trade promotion permit numbers. These aren’t optional extras — they’re the clauses a regulator or a disgruntled entrant will look for first.

The detail underneath each of those is where campaigns come unstuck. “Who is eligible” sounds simple until you have to decide whether employees of the client’s distributors count, whether entrants need to be residents or just physically in Australia, and what the minimum age is for a prize that includes alcohol or travel. “How to enter” has to match the mechanic precisely — if the microsite lets someone enter twice but the terms say one entry per person, the terms are wrong, not the site. The receipt validation rules and any purchase requirement need to be spelled out in the same language the entry form uses. Small mismatches between what the terms say and what the platform does are the most common source of avoidable disputes we see.

The permit clauses that trip up national campaigns

Australia doesn’t have one set of promotion rules. It has eight, and a national campaign has to satisfy all of them at once. Most states have moved away from individual permits, but the ones that still require them are the ones that catch people out.

In New South Wales, an authority to conduct a trade promotion lottery is required once the total prize value exceeds $10,000, and that authority is granted for a period of one, three, or five years rather than per campaign. In the Australian Capital Territory, a permit is needed once the prize pool goes over $3,000. In South Australia, the threshold is $5,000 — and an instant win element requires a permit regardless of prize value. Queensland, Victoria, Western Australia and Tasmania don’t run permit systems for trade promotions.

The practical consequence is that your terms and conditions have to be written for the strictest applicable jurisdiction, not the easiest. If your prize pool clears the ACT and SA thresholds, the permit numbers for those jurisdictions have to appear in the terms, and a copy of the terms usually has to accompany the permit application itself — which means the terms need to be finalised before you apply, not after. This is the sequencing that derails launch dates: brands treat the permit as a formality to sort out later, then discover the regulator wants the finished terms weeks before entries were meant to open. If you’re unsure which thresholds apply, our state-by-state permit guide walks through each one.

Do promotion terms and conditions need to show a permit number?

Yes — where a permit or authority is required, the permit number must be publicly displayed, and the accepted place for it is the terms and conditions and the promotional advertising. If your promotion crosses the NSW, ACT or SA thresholds, leaving the number off the terms isn’t a formatting oversight; it’s running a regulated promotion without meeting the condition of the permit. The terms also generally have to be available at the point of entry, so an entrant can read them before they commit, not buried three clicks away after they’ve handed over their details.

Where terms and conditions actually get tested

Permits get the attention because they’re a hard requirement with a form to fill in. But the clause most likely to cause you grief isn’t a permit — it’s the gap between what the promotion promised and what the entrant thought it promised. That’s Australian Consumer Law territory, and it applies to every promotion in the country regardless of prize value or state.

The test the ACCC applies is the overall impression, not the fine print. If the headline says “win a car” and the terms quietly reveal it’s a two-year lease with conditions, the terms don’t rescue the headline — the misleading impression has already been created. Fine print can clarify an offer, but it can’t contradict it. This is where good terms earn their keep: they’re not there to walk back the promise, they’re there to make the promise precise enough that nobody can reasonably read it two ways. A well-drafted set of terms describes the actual prize, the actual odds context, and the actual conditions in plain language, so the advertised offer and the delivered offer are the same thing.

The other place terms get tested is at the finish line, when a winner can’t be contacted or a prize can’t be delivered as described. Your terms need to say what happens to an unclaimed prize, how long you’ll try to reach a winner, whether there’s a redraw, and what happens if a prize becomes unavailable and has to be substituted. These clauses feel remote when you’re writing them and very immediate when a major prize is sitting unclaimed. Deciding the rule in advance — in writing — is a great deal easier than improvising it under pressure with a regulator’s thresholds in mind.

What happens if promotion terms and conditions are misleading?

If terms and conditions are misleading or contradict the advertised offer, the promotion can breach the Australian Consumer Law, and the ACCC can pursue penalties for conduct that is misleading, deceptive or unconscionable. Beyond the legal exposure, a promotion that has to be corrected or pulled mid-flight does real damage to the brand running it — the fix is always public, and it always lands after entrants have already formed an impression. The cost of getting the terms right is a few hours of care up front; the cost of getting them wrong is paid in front of an audience.

Getting the terms to match the promotion

The through-line in all of this is that terms and conditions are a description of the campaign you actually built, checked against the rules that actually apply. They’re not boilerplate, and last year’s terms with the dates changed will quietly carry last year’s mistakes into this year’s campaign. The most reliable way to keep them honest is to write them alongside the mechanic rather than after it — so the entry rules, the permit thresholds, the prize description, and the winner process all agree with each other before anything goes live.

It’s the least visible part of a promotion and one of the few parts that can stop the whole thing. If you’re pulling a campaign together and want the terms pressure-tested before they go live, we’re happy to talk it through.

Every cashback campaign carries a quiet risk: that some of the money you set aside to reward real buyers ends up paying people who never bought anything. It rarely announces itself. The dashboard looks healthy, entries are climbing, and then the redemption rate creeps past what the budget assumed. By the time anyone asks why, the payouts have already gone out.

Promotional fraud is the part of campaign delivery that most plans skip until it bites. It is also one of the few areas where good execution shows up directly on the bottom line. At Trevor Services we build and run promotions for Australian brands, and the controls that keep fraud out are the same ones that keep a campaign’s results honest. Here is how we think about it.

What does promotional fraud actually look like?

Promotional fraud is any attempt to claim a reward without meeting the genuine conditions of a promotion. It splits into two rough camps, and they need different defences.

Most of what you will see is opportunistic. A shopper submits the same receipt twice under two email addresses. Someone photographs a friend’s receipt. A claimant edits the date or product name on an image to squeeze past the eligibility window. This is low-effort, high-volume, and usually solvable with good validation rules.

The other camp is organised, and it has become more capable. In a recent piece for Retail TouchPoints, Opia’s head of fraud described how groups now cycle through multiple identities, exploit loopholes in qualification rules, and time high-volume claim runs to short promotional windows where monitoring is weakest. The newer wrinkle is generative AI: bots that auto-fill claim forms with rotating identities, synthetic names and addresses that look real, and AI-generated receipts that pass a visual check but fail at the metadata or font-rendering layer. None of this requires much technical skill any more, which is exactly why it is spreading.

The uncomfortable part, as that article notes, is that most promotional vendors process claims but do not actively defend against fraud. Claims handling and fraud defence are different jobs, and assuming the first covers the second is how budgets quietly leak.

The controls that actually matter

Fraud defence is not one feature. It is a series of checks layered across the life of an entry, and each layer catches something the others miss.

It starts at entry. Unique single-use codes stop a code being shared and reused. Where a purchase has to be proven, receipt validation does the work: optical character recognition reads the retailer, date, products and spend off the image, then checks them against the promotion’s rules before anything is approved. On the campaigns Trevor runs, this is configured per promotion — which SKUs qualify, which dates count, whether a receipt is required at all, whether a code is needed. Getting those rules right at setup removes a large share of opportunistic claims before they ever reach a human.

The next layer is about pattern, not paperwork. A receipt can look perfect and still be the fiftieth one submitted from the same device. This is where velocity and behavioural signals matter — entry limits per person, daily caps, device and IP checks, and duplicate detection that hashes each receipt image and compares it against everything already processed. Snipp, another platform in this space, describes the same architecture: image-integrity analysis for signs of manipulation, cross-campaign duplicate hashing, and device and address clustering to surface organised submission patterns that individual images would never reveal. A claim that looks legitimate on its own often looks very different next to the hundred others sharing its fingerprint.

The last layer is the one people forget: the winner. Before a major prize or a large cashback is paid, it is worth verifying the claimant properly — confirming the purchase, the identity, and that the entry behaved like a real one. The cost of a failed check here is not just the prize. It is the compliance exposure if a fraudulent winner is announced publicly, and the cost of clawing back a payout that has already cleared.

How do you stop fraud without punishing real customers?

This is the question that actually decides whether a fraud strategy works, because the lazy answer — add more checks — quietly kills the promotion. Every extra step you ask of an entrant costs you genuine entries. In The Shelf Truth we call this friction as a cost, and it compounds: each additional form field or verification hurdle shaves entries off the top, and the people you lose are disproportionately the honest, casual participants you actually wanted.

The way through is to treat fraud risk as a score rather than a gate. Most submissions are low-risk and should sail through to approval with no extra friction at all. Only the entries that trip a threshold — unusual velocity, a duplicated image hash, a device already linked to dozens of claims — get routed to closer review. Done well, the vast majority of your real customers never notice a thing, and your review effort concentrates where the risk genuinely sits. This is also where predictive tools earn their place: Trudy, Trevor’s promotional intelligence platform, draws on patterns across thousands of past campaigns to help anticipate where a given mechanic is likely to attract abuse, so the controls can be set before launch rather than bolted on after the first bad week.

Why fraud belongs in the Promo P&L

There is a measurement reason to take this seriously that goes beyond the payouts themselves. Fraud does not just cost money — it distorts what you think happened. Inflated entry numbers make a campaign look more successful than it was. If those numbers feed your next budget, your next plan, or your case to the category manager for shelf space, you are building on figures that include claims that were never real. The integrity of the result is part of the result.

That is the honest case for getting fraud controls right: not fear, but accuracy. A promotion you can trust the numbers on is one you can actually learn from. Across the cashback, instant win and prize draw campaigns Trevor Services delivers, the brands that treat fraud defence as part of the setup — not a clean-up job — are the ones whose post-campaign reports hold up to scrutiny.

If you are planning a promotion and want to pressure-test where it might be exposed before it goes live, we are happy to talk it through.

Most purchase-to-enter promotions report two numbers that look the same but aren’t: entries received, and entries that actually count. The gap between them is where receipt validation lives. A receipt upload box looks like the simplest part of a campaign — snap a photo, tap submit, done. The hard part is everything that happens after the photo lands: deciding what a valid proof of purchase looks like, catching the ones that aren’t, and doing it fast enough that genuine entrants don’t give up waiting.

Of the roughly 170 live Australian promotions we track at Trevor Services, the large majority ask the shopper to prove a purchase before they can enter — prize draws and gift-with-purchase offers tied to a receipt, a unique code, or a loyalty card scan. That makes validation the quiet engine under most of the work. Get it right and nobody notices. Get it wrong and you either pay out on fraud or punish your best customers with rejected claims. Neither is a good look.

What is receipt validation in a promotion?

Receipt validation is the process of confirming that an entry is backed by a real, qualifying purchase before the entrant is allowed into the draw or paid a reward. In practice it answers three questions: did this purchase actually happen, does it meet the entry conditions, and has this proof already been used? The first is about authenticity, the second about eligibility, and the third about duplication. A campaign can be airtight on one and leaky on the others.

It matters because the entry barrier is also the fraud barrier. The same friction that makes a shopper pause — upload a photo, type a code — is the thing standing between your prize pool and someone running a script. The Shelf Truth talks about friction as a cost, every form field shaving entries off the top, and that’s true. But on a purchase-to-enter promotion, a little friction is also load-bearing. The trick is putting the effort where it stops fraud rather than where it annoys honest people.

Where do purchase-to-enter promotions actually leak?

The failure modes are fairly consistent. The most common is the duplicate: one valid receipt submitted again and again, sometimes across multiple accounts, sometimes with small edits to dodge an exact-match check. Then there’s the doctored receipt, where a total or a date or a product line has been altered to qualify a purchase that didn’t happen the way it’s claimed. Above both of those now sits a newer problem — wholly fabricated receipts, including ones generated by AI from a text prompt, which never modify a real document because there was never a real document to begin with.

The detail worth sitting with is that these aren’t mostly lone opportunists. As Snipp lays out in its guide to anti-fraud checks for receipt programs, a lot of receipt fraud is coordinated — one operator or a small ring submitting at abnormal rates, recycling images, cycling through addresses and devices. That changes how you defend against it. You’re not just inspecting one image at a time; you’re looking for patterns across the whole entrant pool. A receipt that looks fine in isolation can be obviously wrong once you notice it’s the fourteenth submission from the same device in an hour.

The checks that actually do the work

No single test catches everything, which is why validation works in layers. At the image level, systems fingerprint each receipt — hashing the picture and combining transaction details like store, total, date and a receipt or transaction ID into a unique signature — so the same purchase can’t be reused even if it’s lightly altered or re-photographed. Metadata helps too: a receipt photo missing the device and location data you’d expect, or carrying signs of editing, earns a second look. On top of that sits behavioural analysis, watching submission velocity and device or IP anomalies to flag accounts that simply don’t behave like real shoppers.

Then there’s eligibility, which is a different question from authenticity. A receipt can be completely genuine and still not qualify — wrong product, wrong store, outside the campaign dates, under the minimum spend. This is where product and SKU recognition matters, checking that what’s on the receipt is actually what the promotion required. It’s also where most of the honest-entrant friction comes from, because a real customer who bought the right thing can still get knocked back if the rules and the validation logic don’t match exactly.

Worth being honest about: automation does the heavy lifting, but it doesn’t do all of it. The genuinely ambiguous cases — a faded receipt, an unusual but legitimate purchase pattern — still need a human looking at them, and the campaigns that run cleanest are the ones that decide in advance which decisions a person makes and which the system makes on its own. On the platform side, this is the part Trevor Services spends real time on: OCR-based receipt checks, duplicate and velocity controls, and per-campaign entry rules, with manual review reserved for the edge cases rather than the bulk.

Why most of this is a design decision, not a detection problem

The biggest lever on promotion fraud isn’t the cleverness of your detection — it’s the rules you set before anyone enters. Entry caps per person, daily submission limits, a clear minimum spend, a defined product list, a sensible window for how old a receipt can be: these are configured at setup, and they quietly remove whole categories of abuse before detection ever has to fire. A promotion with no entry limit and a vague product requirement is doing detection on hard mode for no reason. This is the kind of pre-launch pressure-testing Trudy is built to help with, drawing on patterns from thousands of past campaigns to flag where a mechanic is likely to leak.

The rules also have to line up with your legal obligations, and in Australia those vary by state. The ACCC’s guidance on advertising and promotions is clear that terms and conditions have to be set out plainly and made known before people enter — which means your validation logic and your published T&Cs need to say the same thing. Permits add another layer: NSW now runs a time-based trade promotion authority rather than per-promotion permits, required once total prize value passes $10,000, while the ACT and South Australia still require permits for promotions above their own thresholds. The compliance and the fraud controls aren’t separate jobs — the permit conditions, the T&Cs and the validation rules all have to describe one consistent promotion.

If your validation is stricter than your terms, you reject valid entries and field the complaints. If it’s looser, you pay out on entries that should never have qualified. Lining the two up is unglamorous work, and it’s most of what keeps a campaign out of trouble.

A reasonable place to start

If you’re planning a purchase-to-enter promotion, the most useful thing you can do early is write down what a valid entry looks like in plain language — which products, which dates, how much, how many times a person can enter — and then check that every one of those conditions can actually be validated from what the entrant submits. If a rule can’t be checked, it isn’t a rule, it’s a hope. The campaigns that run cleanly are the ones where the terms, the permit conditions and the validation logic were all written to say the same thing before launch, not reconciled afterwards.

If you’re working through how to keep a receipt or code-based promotion clean without making it a chore for genuine entrants, we’re happy to talk it through.