U.S. family protocol · Last verified 2026-07-05

Scam Defense for Your Parents: The Scripts, the Code Word, and What to Do After

Victims are targeted, not stupid. Use this page to set up the family protocol in one afternoon, recognize the payment-method tell mid-call, and move fast after a loss without shame.

201,266IC3 reports from people 60+ in 2025
$7.748Breported 60+ losses to IC3 in 2025
$38,500average reported 60+ loss
12,44460+ complainants lost more than $100k

IC3 figures are reported cyber-enabled crime, not a population survey; underreporting is expected.

Print this for the fridge

Stop the scam before money moves.

No real business or government agency demands gift cards, wire transfers, crypto, cash couriers, or gold.
The payment method is the tell. End the contact.
Urgency plus secrecy equals scam.
Anyone who says "do not tell your family" is trying to separate you from your protection.
Hang up. Look up. Call back.
Use a number from the card, statement, official website, or a saved family contact. Caller ID is not proof.
Family code word: If a relative calls in distress, they must say our private phrase: ________________________
Choose a phrase not posted online. Do not make it a pet name, birthday, street, school, or team. Rotate it if anyone outside the family hears it.

The one-afternoon setup

Do this with your parent, not to your parent. The protection works because it becomes a family norm, not a competence test.

  1. Pick the code word at dinner. Practice one fake emergency call. Keep the phrase boring and private.
  2. Make the money pact mutual. "Before either of us sends money to someone new, we tell one trusted person."
  3. Set alerts and trusted contacts. Banks and brokerages can call a trusted adult when exploitation is suspected.
  4. Freeze credit at all three bureaus. Free, reversible, and a strong block against new-account identity theft.
  5. Default unknown callers to voicemail. A legitimate caller can leave a message; a scammer loses momentum.
Scam catalog

Recognize the script, then use the counter-move.

9:41 100%
"BANK FRAUD DEPT"
Caller ID can be spoofed. Treat it as decoration.
We detected fraud. Move your money to a safe account now.
Hang up. Call the number on the back of the card.
Grandparent or family-emergency scam AI voice cloning, bail money, secrecy
The script"Grandma, I was in an accident. My lawyer says I need bail today. Please do not tell Mom."
The tellsUrgency, secrecy, courier or wire, and refusal to answer a family-only question. AI can mimic a voice; it cannot know the code word.
Counter-moveAsk for the code word, hang up, call the relative or parent from your own contacts, then call local police/court if needed.
ScaleIC3 2025 reports over $5M in losses to AI-linked distress scams; older adults reported 3,143 AI-related complaints.
Romance scam Long grooming, never meets, escalating money asks
The script"I am deployed, on an oil rig, or working overseas. I love you. I need airfare, customs fees, or medical money before we can meet."
The tellsNo live in-person meeting, reasons video fails, isolation from family, money requests that grow after emotional commitment.
Counter-moveDo not mock the relationship. Reverse-image-search together, ask for a live video call with a specific gesture, and slow the payment down.
ScalePeople 60+ reported $584M in confidence/romance losses to IC3 in 2025 across 10,188 complaints.
Pig butchering / fake investment platform Relationship to crypto dashboard to withdrawal trap
The scriptA wrong-number friend or romantic contact shows a crypto account "making" money, then coaches you to deposit more before a limited opportunity closes.
The tellsUnsolicited relationship, app or site outside known brokerages, fake gains, and "tax," "verification," or "liquidity" fees to withdraw.
Counter-moveStop deposits. Save wallet addresses, URLs, screenshots, chats, and bank wires. Call the bank and file IC3 quickly.
ScaleIC3 2025: investment was the largest 60+ loss category at $3.519B; 60+ crypto investment losses were $2.764B.
Tech-support popup Frozen browser, remote access, refund overpayment
The script"Your computer is infected. Call Microsoft/Apple support. Install this remote tool. We accidentally refunded too much, so send back the difference."
The tellsBrowser lock screen, inbound warning, remote-control request, bank login while screen sharing, and gift-card or wire repayment.
Counter-moveForce-close the browser, disconnect internet if remote access was granted, call the bank, then change passwords from a clean device.
ScaleOlder adults reported about $1.041B in tech/customer support losses to IC3 in 2025.
Government imposter scam SSA, IRS, Medicare, law enforcement
The script"Your Social Security number is suspended," "You owe taxes and will be arrested," or "Your Medicare card must be replaced today."
The tellsThreatened arrest, demanded secrecy, caller ID that looks official, payment by gift card, crypto, prepaid card, wire, cash, or courier.
Counter-moveHang up. SSA and IRS warnings say not to rely on caller ID. Re-initiate through ssa.gov, irs.gov, Medicare, or mailed notices.
ScalePeople 60+ reported $413M in government-impersonation losses to IC3 in 2025.
Bank imposter / "fraud department" call The scam warns you about fraud
The script"This is your bank. Your account is compromised. Move funds to a safe account, share the one-time code, or keep us on the line."
The tellsMoving money to "protect" it, sharing SMS codes, screen sharing, secrecy, and pressure to stay on the phone.
Counter-moveSay nothing useful. Hang up. Call the number on the card or statement. A real bank can see the account without your code.
ScaleFTC and SSA guidance both flag "move your money to keep it safe" as a scammer pattern, not a legitimate protection step.
Sweepstakes, lottery, or inheritance scam You won, pay first
The script"You won a prize or inherited money. Pay taxes, customs, bonding, or legal fees before we release it."
The tellsYou did not enter, secrecy, upfront fees, cashier checks, prepaid cards, crypto, or a courier.
Counter-moveNo upfront payment. Search the organization independently, call a known number, and report the contact.
ScaleIC3 2025: people 60+ reported $136M in lottery/sweepstakes/inheritance losses.
Charity scam Disaster, war, illness, fake local cause
The script"Donate now for fire victims, veterans, police, or a sick child. We can take payment by text, wire, gift card, or cash pickup."
The tellsUrgent emotional pitch, vague charity name, payment methods that avoid normal card rails, and refusal to send written details.
Counter-moveGive only through a charity you search yourself. Use a credit card through the official site, not a link from the solicitation.
ScaleCharity losses are smaller in IC3 data, but disaster-chasing makes them recurring and high-pressure.
Contractor / driveway knock Leftover materials, today-only repair
The script"We are working nearby and have extra asphalt or roofing material. Pay cash today and we will fix the driveway or roof cheaply."
The tellsUnsolicited door knock, no written scope, cash discount, large deposit, no license proof, and pressure before family can check.
Counter-moveDo not buy at the door. Get written bids, verify license and insurance, and wait 24 hours before paying.
ScaleOften handled locally rather than in IC3 categories. The risk is large deposits and unfinished work.
Funeral / obituary vultures Death notice becomes a lead list
The script"Your spouse owed money," "Pay this funeral balance," or "Click to buy flowers for the service" after a public obituary appears.
The tellsImmediate contact after death, vague debt, payment before documentation, links to lookalike memorial or flower pages.
Counter-moveRoute all claims through the executor. Demand written proof. Use the funeral home number you already have.
RelatedUse the death logistics checklist for debt, funeral, and account handling after a death.
Check overpayment scam Deposit this, return the difference
The script"I accidentally sent too much. Deposit the check, keep your fee, and wire/gift-card the difference back today."
The tellsCheck appears available before it truly clears, overpayment, return-the-difference demand, and pressure to act before reversal.
Counter-moveDo not send money from a deposited check until your bank confirms final settlement. Availability is not final clearance.
ScaleIC3 2025: people 60+ reported $8.0M in overpayment losses.
Toll or package smishing Small fee, credential harvest
The script"Unpaid toll," "USPS/UPS delivery failed," or "small customs fee due." The link asks for card, login, or identity data.
The tellsShortened or odd domain, tiny urgent fee, address confirmation, card entry, or account password outside the official app.
Counter-moveOpen the carrier or toll agency site yourself. Never use the text link. Replace the card if credentials were entered.
ScaleLow dollars, high volume. The real damage is card theft, account takeover, and identity data resale.
Recovery scam The second hit after the first loss
The script"We are investigators, hackers, lawyers, or exchange staff. Pay an upfront fee and we guarantee recovery of your stolen money."
The tellsGuarantees, upfront payment, secret process, fake badges, and exact knowledge of the earlier loss.
Counter-moveDo not pay. Report to IC3/FTC and the original bank or platform. Real recovery is through institutions and law enforcement, not paid strangers.
ScaleIC3 2025: recovery scams produced 10,516 complaints and $1.4B in losses across all ages.
Targeting mechanics

Why parents get targeted, without blame.

Lists are resold

A person who paid once becomes more valuable to criminals. Expect follow-up calls, fake investigators, and "refund" scams after the first incident.

Isolation is leverage

Long cons work by becoming the daily relationship. Regular family contact is a security control, not just a social nicety.

Caller ID is decoration

SSA OIG explicitly warns that names and phone numbers can be spoofed. A familiar number proves almost nothing.

AI raises the baseline

IC3 2025 logged more than 22,000 AI-related complaints. Use procedures that do not depend on detecting fake audio or perfect grammar.

Checklist

Hardening checklist: do these with your parent.

Right now

"I think it is happening right now."

What not to do

  • Do not ridicule. Shame pushes the victim back toward the scammer.
  • Do not issue an ultimatum first. Romance and investment scammers pre-script: "Your family will say I am fake."
  • Do not grab the phone and escalate. Slow the money down before you try to win the whole argument.

What works better

  • Side-by-side verification: "Let's call the bank together using the number on your card."
  • Bank fraud team: ask for a hold, recall, or teller note before money leaves.
  • APS as a resource: Adult Protective Services can advise in exploitation cases; state rules vary.
  • Romance slow-play: request a live video call, a specific gesture, or a no-money waiting period.
After the loss

No-shame damage-control checklist.

Act in hours, not days. Recovery is never guaranteed, but delay makes it worse.

Common mistakes

Anti-patterns that make the next scam easier.

Caller ID as identity

Spoofing makes the displayed name or number weak evidence. Always re-initiate through a number you find yourself.

Gotcha tests

Quizzing a parent in front of others teaches embarrassment, not safety. Build a protocol together.

Taking over everything

A first incident may call for alerts and view-only access, not immediate financial seizure. Escalate by risk.

"Too smart to fall for it"

High-status, educated people lose large sums because the scripts target emotion, urgency, and trust.

Public shaming

Posting identifiable details teaches the victim never to tell you next time. Share patterns, not humiliation.

Recovery firms

Guarantees and upfront fees after a scam are usually the second scam. Use banks, platforms, IC3, FTC, and police.

Sources

Verified source register.

FBI IC3 2025 Annual Report
ic3.gov annual report PDF
60+ complaints/losses, crypto, AI, recovery scams, crime category losses.
FTC older adults report
FTC 2024-2025 release
Older adult loss trends, tech support, investment, romance, impersonation findings.
CFPB and FTC payment warnings
CFPB older-adult scam guidance
Wire, gift card, and cryptocurrency payment red flags.
FINRA Rule 4512
Trusted contact rule
Brokerage trusted-contact mechanics and limits.
FTC credit freeze and fraud alert
FTC credit guidance
Fraud alerts, credit freezes, and bureau contact pattern.
SSA scam warnings
SSA OIG identify the scam
Caller-ID spoofing, suspended SSN, and payment demands.
IRS tax scam guidance
IRS recognize tax scams
Arrest threats, urgent calls, and fake tax bills.
FTC gift card recovery
FTC gift card scams
Keep receipt/card, contact issuer, ask for money back, report to FTC.
DOJ Elder Fraud Hotline
OVC hotline page
833-FRAUD-11 victim support and reporting help.
Checklist progress0 / 28