How to Protect Your Parents From Scams Without Taking Over

The plan in five points

1. A sentence that buys time, chosen by the person who will use it, to end any urgent request. How to pick one.
2. Two trusted contacts, on numbers already saved in the phone, for confirming money requests.
3. The official channel for each service, written down from the app, the card, or an address typed in by hand, never from a message that arrived.
4. Alerts and limits reviewed together, set the way the account holder decides.
5. A plan for afterward, with no scolding in it: end the contact, keep the evidence, call the bank. The steps.

Helping your parents with scams starts as a conversation between adults. Age by itself does not cause a scam. These stories are engineered to feel urgent, familiar, and true, and they work on people of every age, which is why the FTC writes its guidance on fake emergencies for everyone rather than for one age group.

The job of the family is to make it easy to step out of a conversation when something feels off, without taking the phone away, reading messages, or approving every payment. The person involved has to help make these choices, because they are the one who knows their own routine, their contacts, and the services they actually use. The CFPB has a whole set of resources for older adults on protecting against fraud built around the same idea.

Start with an agreement you make together

Pick a calm moment, well away from any live scam attempt, and talk about specific situations: a relative asking for money, someone saying they are from the bank, a bill that arrives with a short deadline. Instead of trying to memorize every scam, decide what each of you will do when a story like that turns up.

The agreement can be simple: nobody has to resolve an urgent request inside the same conversation it arrived in. The person who got the message can end the contact, call a number they already had, and ask for company if they still are not sure. CISA gives the same instruction in its guidance on recognizing and reporting phishing: do not use the contact details in a suspicious message.

Make it a household rule rather than a rule for one person. An agreement everyone follows is easier to accept, and easier to bring up later, than a policy written for whoever is oldest.

Pick a sentence that buys time

A ready-made line helps when the other person is demanding an answer immediately. It can be as plain as “I will check on that and get back to you.” It ends the pressure without arguing, without explaining, and without having to prove that anything is wrong.

The sentence should be chosen by the person who will use it, and it should sound like something they would actually say. Some people prefer saying they need to talk to family first, or that they want to open the app, or that they need to find a document. What matters is that the answer hands back the time to decide.

That call is worth naming for what it is. The FTC says directly, in its guidance on impersonation scams, that no bank or government agency asks anyone to move money to keep it safe. Anyone making that request is running the scam, whatever name they used.

Agree on a second way to check

For a request that claims to come from a family member, pick numbers already saved in the phone, and a second person to try when the first one cannot pick up. If a message arrives from a new number, the call goes to the old number. If the story involves a bank, a store, or a government agency, the check happens in the app, on the site, or on the number printed on the card.

This separation matters because a call placed to the number in the message can land right back with the same person. The FCC covers why the number on the screen proves nothing in its guidance on caller ID spoofing.

A voice does not settle it either. The FTC has warned that scammers use AI to make family emergency stories more convincing, including audio built to sound like a relative from a short clip. Some families add a word or a question that only they would know, agreed in advance and never sent by text. Our guide to grandparent scams covers how that works and what it does not cover.

Review alerts and limits together

Open the apps only with the account holder present and willing, and go through the settings that already exist. They can choose which transaction alerts they want, whether the transfer limits match how they actually spend, and whether to turn on any extra confirmation their bank offers.

Two-step sign-in adds a real barrier and is worth turning on. CISA explains the options in its guidance on multi-factor authentication, and our guide to two-factor authentication compares the methods. It does not stop every kind of scam, and it should not be sold as if it does.

Do not set up a password only a relative knows. That blocks legitimate access and takes away independence, and it creates a problem the day that relative is unreachable. The account holder needs to know how to get into their own accounts and where the recovery information is kept.

Lower limits can reduce how much can leave in one go, but they have to fit the payments the person actually makes. Check what the bank or payment app offers rather than assuming a number exists. A credit freeze is worth considering too, since it blocks most new accounts from being opened in someone’s name until it is lifted, it is free, and the FTC explains it in credit freezes and fraud alerts. Our walkthrough is how to freeze your credit. Do not change settings quietly, and do not treat a different preference as a mistake. The point is a decision both of you understand.

Keep the useful contacts within reach

A short list keeps someone from looking for help inside the same ad, message, or call that caused the doubt. Include:

• two family members or friends on numbers already known;
• the bank’s official number, copied from the card, the app, or the statement;
• the phone carrier, in case the phone or the line stops working;
• the route to recover important accounts, without writing passwords on a sheet left in the open;
• the reporting addresses, reportfraud.ftc.gov and ic3.gov, so nobody has to search for them under pressure.

The list can be printed and kept at home, or saved under a name that is easy to find. Update it when a number changes. If more than one person is helping, decide who does what, so nobody gets two different instructions at the same time.

What to agree on for each kind of request

Nobody has to investigate an entire message. A few short actions are enough to step outside the story being told.

• A request for money: reach the person on the old number, and read the name on the payment screen before approving anything. If it does not match the story, do not send it.
• A request for a code or a password: do not share it. End the contact and open the service through a route you know.
• A request to install an app or allow access to the phone: do not install anything during a call. Look up official support separately.
• A link about a bill or a delivery: do not use the address in the message. Open the site or the app the person already uses.
• A request for secrecy: talk to someone you trust. Any attempt to prevent a second opinion is worth pausing over.

The same applies to government callers. The IRS explains how it actually makes contact, and the Social Security Administration takes reports of impersonation at oig.ssa.gov. Agencies do not demand payment by gift card, wire, or cryptocurrency, and they do not threaten arrest over the phone.

The other stories that keep repeating are in the most common online scams, and the everyday habits are in how to avoid getting scammed. Nobody needs to examine every message. If something stays confusing, not paying and not clicking is a complete answer.

Practice the plan without scaring anyone

Once the sentence and the contacts are chosen, run through it once with a situation everyone knows is made up. One person says: a money request just came in from a number I do not recognize. The other says how they would end the conversation, where they would find the old number, and who they would try if nobody answered. The point is that the route is familiar before it is needed.

Do not send a fake scam message to test someone’s reaction. Beyond the worry it causes, it damages the trust that makes someone willing to say “this came in, what do you think” next time. If a step turns out to be awkward, fix it together: put the contacts somewhere easier to reach, increase the text size, write down the path to official support. The change should solve a difficulty the person named themselves.

Help without turning it into control

Do not open with “you do not understand phones” or “send me everything before you pay.” That treats an adult as incapable, and the usual result is that they stop mentioning things they are unsure about. Ask instead which situations worry them and what kind of help they would actually want.

Say what you do yourself, too. An agreement that applies to everyone is easier to accept than a rule invented for one person. If they would rather ask a different relative or a friend for help, that choice deserves respect as well.

Do not read messages without permission, do not ask for passwords, and do not change limits quietly. If closer support genuinely becomes necessary, talk about why, what will be watched, and for how long. When money is being taken by someone close to the family, that is a different problem with its own path, covered in elder financial abuse, and the CFPB explains the legal arrangements in managing someone else’s money.

If something has already happened

Start without blame. Scams are built to deceive, and the responsibility sits with the person who ran one. Ask what happened, and whether there was a payment, a shared code or password, an app installed, or an account they can no longer get into.

1. In the first hour, call the bank or card issuer on the number from the card or the app, say the payment was fraudulent, and ask whether it can still be stopped. Ask for a case number. For an instant transfer, a payment app, or a wire, see what to do after an instant payment scam, which is honest about what banks can and cannot do.
2. End the contact and keep the evidence: messages, numbers, receipts, and the address of any page that was opened.
3. Change any password that was shared, from a device you trust, and anywhere it was reused.
4. If an account was taken over, use the service’s own recovery process and warn the contacts who might get requests in that person’s name. See what to do when a messaging account is stolen.
5. Report it at reportfraud.ftc.gov and, if money was lost, at ic3.gov. If identifying details were shared, start the plan at identitytheft.gov. File a police report too, since banks often ask for one. The FTC sorts the next steps by payment method in what to do if you were scammed.

Older adults targeted by fraud can also reach the Department of Justice National Elder Fraud Hotline through the Office for Victims of Crime, which helps with reporting and follow-up, and Eldercare Locator connects families to local services including Adult Protective Services. If anyone is being threatened or is in immediate danger, call 911.

Recovery is not guaranteed, and it often does not happen. That is worth saying out loud early, so nobody spends the next month waiting for a refund that was never likely, and so nobody pays a second time to someone promising to get the money back.

Protecting your parents FAQ

Sources we checked

The guidance and services in this article come from these pages:

• Federal Trade Commission: scammers use fake emergencies to steal your money
• Federal Trade Commission: scammers use AI to enhance family emergency schemes
• Federal Trade Commission: how to avoid a government impersonation scam
• Federal Trade Commission: credit freezes and fraud alerts
• Federal Trade Commission: what to do if you were scammed
• Consumer Financial Protection Bureau: protecting against fraud, resources for older adults
• Consumer Financial Protection Bureau: managing someone else’s money
• Cybersecurity and Infrastructure Security Agency: recognize and report phishing
• Cybersecurity and Infrastructure Security Agency: turn on multi-factor authentication
• Federal Communications Commission: stop unwanted robocalls and texts
• Internal Revenue Service: how to know if it is really the IRS
• Social Security Administration Office of the Inspector General: report Social Security fraud
• Office for Victims of Crime: National Elder Fraud Hotline
• Eldercare Locator