Grandparent Scams: How the Emergency Story Works and How Families Can Prepare

How the grandparent scam works

The call opens with a young voice in distress, often crying or muffled, saying something like a car accident, an arrest, a hospital, or a problem in another country. The caller either says a name or waits to be given one. Then a second person takes over: a lawyer, a bail bondsman, an officer, a doctor, someone with a title and a solution.

The Federal Trade Commission describes the shape directly: someone calls or contacts you saying they are a family member or close friend, and they say they need money to get out of trouble.

From there the call follows a fixed sequence.

• An emergency that cannot wait. A hearing this morning, a hospital that will not treat without payment, a border crossing that closes.
• A reason not to tell anyone. Embarrassment, a parent who cannot find out, a legal instruction. The FTC notes the scammer might say it is important to keep it secret, because they do not want you talking to other family members and realizing it is a scam.
• A payment method that does not come back. The FTC lists wiring money, sending cryptocurrency, using a payment app, or putting money on a gift card. A newer version sends a courier to the door to collect cash in an envelope.
• A follow up. If the first payment goes through, there is almost always a second call with a new complication and a new amount.

Everything in the call has one purpose: to keep the person on the phone until the money has moved. Nothing in it is meant to survive a second phone call.

Why the story works on careful people

The scam does not rely on someone being confused. It relies on a normal reaction that every functioning family has, which is that a grandchild in trouble comes before checking anything.

Three ordinary things make the call land. The first is that the caller is not trying to be believed for an hour, only for four or five minutes. The second is that the details can come from the listener: a caller who says only that there was an accident will often be handed a name, a city, and a relationship for free, and can then repeat them back as proof. The third is that details about real people are easy to find, because birthdays, trips, schools, and photographs are public on the accounts of people who never thought of them as security questions.

Anyone who paid money on one of these calls was responding to information they had no way to check while the clock was running. That is a design that worked as intended, not a mistake someone made.

AI voice cloning changes the sound, not the defense

Cloned audio makes the call harder to doubt and does not change a single step of the response. The defense was never recognizing the voice, because a sobbing voice on a bad connection was already unrecognizable on purpose. The defense is hanging up and calling back on a number you already have.

The FTC explains how little is needed: a scammer could use artificial intelligence to clone the voice of a loved one, and all that takes is a short audio clip of the family member’s voice, possibly from content posted online, plus a voice cloning program. Its advice in the same alert on AI in family emergency schemes is four words long: do not trust the voice. Call the person who supposedly contacted you and verify the story, using a phone number you know is theirs. If you cannot reach them, try another family member or their friends.

What to do while the call is happening

Stop the call before deciding anything. A real emergency is still an emergency in ten minutes, and every real institution can be called back.

1. Say you will call back, and hang up. You owe a stranger nothing, including an explanation. The FTC’s advice is to resist the pressure to react and send money immediately, and to hang up or tell the person you will call them right back.
2. Call the family member on the number already in your phone. Not a number the caller gave you. If there is no answer, call their parent, partner, roommate, or a sibling.
3. Tell the person you were told not to tell. Secrecy is a requirement of the scam. Breaking it is usually enough to end it.
4. Verify any institution separately. If a jail, hospital, or law office was named, look up its main number yourself and ask whether the person is there and whether they take payment that way. They will not take gift cards.
5. Do not give a name first. If a caller asks who you think it is, that is the question of someone who does not know. Ask them to say their own name.
6. Do not open the door for a money pickup. No court, hospital, or law firm sends a person to a home to collect cash in an envelope.

The family password, and how to pick one that works

A family password is a word or short phrase agreed in advance and asked for in any emergency call about money. It works because it moves the check out of the middle of the call, where a scared person has to improvise, and into a calm afternoon months earlier.

What makes one usable:

• Pick something unfindable. Not a pet, a street, a school, a birthday, or a middle name. Those sit in public posts and old forms. An unrelated pair of words works better than a meaningful one.
• Never write it in a message or an email. Say it out loud in person or on a call. It does not belong in a group chat, a shared note, or a photo caption.
• Make it everyone’s, not the grandparents’. Grandchildren, adult children, and siblings should all know it, because the same call also goes to parents and to spouses.
• Agree on what happens when it is missed. The rule is not that the wrong answer proves a scam. The rule is that no money moves without the word, whatever the caller says about why they cannot remember it.
• Change it if it is ever said on a call you did not verify.

A password is not a lie detector, and someone genuinely panicking may blank on it. That is why the second half of the rule matters more than the first: without the word, the answer is always a callback, never a payment.

What to do if money was already sent

Call whoever moved the money first, because that is the only party with a chance of stopping it, and make that call the same day. The reports come afterward and still matter.

1. Call the bank, wire company, gift card issuer, or payment app using a number from your own statement, card, or app, and say you were tricked into the payment. Ask for the claim number.
2. Call local police if cash was collected in person. A courier pickup has a time, an address, and often a vehicle or a camera, which is more than most fraud reports ever have.
3. Report to the FTC at ReportFraud.ftc.gov, and to the FBI at ic3.gov if any of it arrived by text, email, or online.
4. If cash went by mail, call the U.S. Postal Inspection Service at 1-877-876-2455, which can sometimes intercept a package still moving through the system.
5. Call the National Elder Fraud Hotline at 833-372-8311 if the person targeted is sixty or older. The Department of Justice Office for Victims of Crime runs it Monday through Friday, 10:00 a.m. to 6:00 p.m. eastern time, and assigns a case manager who stays with the case through the reporting.
6. Expect a second approach. Save the phone numbers used, and do not answer calls from them.

What comes back depends on the payment method, and the honest answer for wires, gift cards, and cash is often nothing. The full breakdown by method, and what each agency does with a report, is in how to report a scam and try to recover your money.

If the person targeted is an older adult and there are wider concerns about who has access to their accounts, elder financial abuse covers the resources built for that, including Adult Protective Services and the Department of Justice hotline.

How a family can prepare before the call comes

Preparation is a fifteen minute conversation, not a project, and it works best when it is framed as a family rule rather than as a warning to one person. A rule everyone follows does not single anyone out.

Agree on the password and say it out loud together. Agree that nobody in the family will ever ask for money by gift card, wire, crypto, or cash in an envelope, so that any such request is automatically wrong no matter who appears to be asking. Agree that hanging up to call back is polite, not rude, and that anyone can do it with anyone.

Then reduce what is findable. Tighten who can see posts about travel, hospital stays, schools, and family events, and think of a public photo caption naming a grandchild and a city as raw material. A family that discusses this once tends to lose nothing on the day it matters.

Talk to the grandchildren too. The grandchild in the story is a prop, and they are usually the last to hear that their name was used. They are also the person a grandparent will try to call, so their phone being reachable is part of the defense.

Finally, agree on what happens afterward if it works on someone. The most expensive part of these scams is silence: the second call arrives precisely because the first one was never mentioned to anyone.

The versions that use the same story

The same emergency script runs without a phone call. A text arrives from an unknown number opening with something like a new phone and a lost contact list, and the conversation builds for a day or two before money is mentioned. A message comes from a friend’s real social media account after it was taken over. An email claims a relative is stranded abroad.

All of them are the same machinery described in impostor scams and in the FTC’s overview of how to avoid imposter scams: borrowed trust, an invented problem, and a payment that cannot be reversed. The response does not change with the channel. Contact the person through a route you already had, not through the one that reached you.

One difference is worth noting. A text or a message leaves a record you can screenshot, share with family, and attach to a report, which a phone call does not. If the contact came in writing, keep it before blocking the number.

Grandparent scam FAQ