How to Protect Elderly Parents from Scams: A 2026 Family Playbook

If you’re reading this, something probably already happened. Maybe your mom mentioned a weird phone call from “the Social Security office.” Maybe your dad started getting unusually protective of his phone. Maybe a sibling forwarded a news story and said, “this is going to be Mom next.”

You’re not paranoid. The numbers are genuinely that bad, and they got worse again last year.

The FTC’s Consumer Sentinel data tells a complementary story: adults 60+ reported $2.4 billion lost to scams in 2024, up from about $600 million in 2020. The number of older adults who reported losing more than $100,000 to a single scam grew eight-fold in four years. And those are just the people who reported. The FTC estimates the real cost to older Americans could be as high as $81.5 billion once you adjust for the shame that keeps most victims silent.

This playbook is for the adult child who wants to help without taking over. It is built from FTC, FBI IC3, and AARP Fraud Watch data from 2024 and 2025, the scam types spiking right now, and the practical conversations that actually move the needle with a parent who insists they’d “never fall for something like that.”

Why the usual advice isn’t working

Most “protect your parents” articles say something like: “Tell them not to click suspicious links.” That advice is thirty years old. It was written for a world where scams looked like scams — where the emails had typos, where the person claiming to be from Microsoft had a thick accent, where the bank text came from a number that obviously wasn’t a bank.

That world is gone. In 2025, scammers used AI-generated voices that sounded exactly like a victim’s daughter, AI-generated text with perfect grammar and personalized context pulled from LinkedIn, and video calls with deepfake faces. The FBI’s 2025 IC3 report documented $893 million in losses specifically attributed to AI-enabled scams, and that’s only the subset the agency could identify.

Meanwhile, the part of the brain that processes fear and urgency — the amygdala — doesn’t get slower with age. If anything, it gets faster. Your 74-year-old father isn’t less smart than he was at 40. He’s dealing with a class of attack that didn’t exist at 40.

Which means telling him to “be more careful” is roughly as useful as telling someone to “just be faster” in a car race against a vehicle that didn’t exist last year.

The five scams hitting seniors hardest right now

Before you can have a useful conversation, you need to know what’s actually out there. These are the five scam categories showing up most often in 2025 FTC data and in the weekly top posts on r/Scams:

1. Imposter scams — up four-fold in the past five years

The FTC reported in August 2025 that impersonation scammers stealing tens or even hundreds of thousands of dollars from older adults had grown more than four-fold. The scammer poses as someone with authority — a Social Security officer, the FBI, Amazon fraud prevention, “your bank’s fraud team.” They invent an emergency: your account has been compromised, your identity is being used for crimes, you’re about to be arrested. They offer to “help” by walking the victim through moving money to a “secure account” (which is actually theirs).

The call often includes a real-sounding transfer to a “federal officer” or “supervisor” to add legitimacy. Some victims spend hours on the phone, being walked step-by-step to a Bitcoin ATM or a wire transfer counter.

2. Tech support scams

Older adults reported $159 million in losses to tech support scams in 2024 alone. These typically start with a pop-up that locks the browser (“Your computer has been infected! Call Microsoft support now!”) or an unsolicited call. Once the scammer gets remote access to the computer, they can see banking details, drain accounts, or lock the machine and demand payment.

3. Grandparent & family-emergency scams — now with AI voices

The classic grandparent scam — “Grandma, it’s me, I’m in jail, don’t tell Mom” — is not new. What’s new is that the voice on the line now actually sounds like their grandchild. Scammers scrape 10-30 seconds of audio from TikTok, Instagram, or a voicemail greeting and use consumer AI tools to clone it.

In July 2025, Sharon Brightwell of Dover, Florida, lost $15,000 in cash to a courier after hearing what she was sure was her daughter’s voice, sobbing, confessing to a car accident that killed a pregnant woman. It wasn’t her daughter. It was 30 seconds of her daughter’s voice fed into a cloning tool. We wrote a detailed breakdown of this specific scam in our guide to AI voice cloning scams.

4. Investment & pig-butchering scams

In 2024, older adults reported losing more money to investment scams than to any other fraud type. Many started on social media or with a “wrong number” text that blossomed into weeks of friendly conversation before the scammer introduced a “can’t-miss” crypto opportunity. This scam has its own name — “pig butchering” — and its own dedicated playbook on our blog.

5. Romance scams

Romance scams cost Americans $1.16 billion in the first nine months of 2025, according to the FTC. The median loss per victim was $2,218, but losses of $10,000+ are increasingly common. Older widowed or divorced adults are disproportionately targeted on Facebook, dating apps, and Words With Friends-style games. If you’ve ever thought “I wonder who Mom is messaging so much lately,” that instinct is worth a conversation.

The framework: Observe, Equip, Rehearse, Verify

This is the four-part framework we recommend to every family that signs up for ScamDrill. It’s based on what actually works, not what feels productive.

Step 1: Observe (before you say anything)

Before you bring it up, pay attention. Warning signs aren’t what you’d expect. They’re rarely “Mom talked about a Nigerian prince.” They’re more often:

• New secrecy around finances or the phone. A parent who used to leave their laptop open now closes it when you walk in.
• New online “friend” or “advisor” who only communicates by text, WhatsApp, or Telegram, and whom no one in the family has met.
• Unusual purchases of gift cards — iTunes, Google Play, Target, Amazon — in amounts over $100. Gift cards are the number-one payment method in impersonation scams. The FTC specifically flags this as a red flag worth acting on immediately.
• Wire transfers or cash withdrawals that the parent can’t quite explain, or explains in convoluted language.
• New remote-access software installed on a computer: AnyDesk, TeamViewer, LogMeIn, Splashtop.
• Emotional volatility around a specific app or contact — anger when asked about “Michael,” tears when a phone call is interrupted.

If you see any of these, the conversation has become urgent. If you see two or more, call your parent today.

Step 2: Equip (the conversation that actually works)

Now, the conversation. We’ve watched thousands of these unfold and there are two dominant failure modes:

Failure mode 1: The lecture. You sit your dad down and explain scams to him like he’s an eight-year-old. He shuts down. He feels infantilized. Next time something happens, he tells you less, not more.

Failure mode 2: The intervention. You arrive with a sibling, a spreadsheet of red flags, and a printed copy of their bank statement. Your parent experiences this as an ambush, and you lose the relationship for six months.

What works instead is a specific, collaborative conversation framed around you:

1. “Dad, I just read something scary. I want to set up a family code word so if I ever call you in an emergency, you’ll know it’s really me. Can we pick one?”
2. “If anyone — anyone — calls claiming to be from my company, the IRS, or Medicare, and they say it’s urgent, can you just text me first? I promise I’ll answer within 15 minutes. Deal?”
3. “I keep getting these weird texts about packages. You too? Let’s compare — I want to see what the latest ones look like.”

Notice the pattern: none of these positions your parent as the person who might be fooled. All of them build a habit of pausing that protects them when a real attack happens.

Step 3: Rehearse (this is the step everyone skips)

Here is the uncomfortable truth that corporate security teams have known for fifteen years: knowing about scams does not protect you from scams. Rehearsal does.

A 2025 UC San Diego study of more than 19,500 healthcare employees found no correlation between the recency of annual security-awareness training and phishing-failure rates. Reading about scams, watching videos about scams, even taking quizzes about scams — none of it reliably changes behavior when a real scam arrives.

What does? Being walked through a near-miss — in the moment — by a trusted source. Research consistently shows that susceptibility to phishing drops by an average of 40 percent when training happens immediately after a click on a simulated attack, because that’s when the brain is primed to learn.

This is the exact gap ScamDrill was built to fill for families. You add your mom, dad, or grandparent to a family plan. We send them realistic-but-safe simulated scam emails and texts — calibrated to their situation — on a schedule they never see. If they fall for one, they see a gentle, friendly “gotcha” page that walks them through the red flags they missed. If they spot it, they get a small celebration.

Step 4: Verify (close the easy holes)

A few structural changes that quietly remove the highest-dollar risks:

• Set up large-transaction alerts on every account. Most banks let you configure a text alert for any transaction over, say, $500. Have those alerts go to both your parent and a trusted adult child.
• Turn on two-factor authentication on email, banking, and any account with saved payment info. If your parent uses “the same password for everything,” you must fix this one. Everything else hinges on it.
• Freeze their credit at all three bureaus (Equifax, Experian, TransUnion). It’s free, it takes about 20 minutes total, and it prevents a scammer from opening new credit in their name even if they get the SSN. Unfreeze only when actively applying for credit.
• Install an ad-blocker and enable the browser’s built-in phishing protection. This alone blocks a huge percentage of tech-support pop-ups.
• Register for the Do Not Call list (donotcall.gov) and enable the phone carrier’s spam-call filter. It won’t stop determined scammers, but it removes a lot of noise.
• Establish a family verification ritual. If someone calls claiming to be a relative in an emergency, your parent hangs up and calls back on the known number. No exceptions. This single rule neutralizes 90% of grandparent-scam attempts.

The one conversation to have this weekend

If you read this entire article and do nothing else, do this:

Call your parent today. Not to talk about scams. Call to set up a family safe word — a specific, meaningless phrase that only the two of you know. “Blue giraffe.” “Uncle Larry’s boat.” Whatever.

Tell them: “If anyone ever calls you claiming to be me in an emergency, ask them for the safe word. If they don’t know it, hang up and call me back.” Then add: “I’ll do the same if I get a call claiming to be you.”

That two-minute conversation is one of the highest-leverage pieces of scam protection available to a family in 2026. It costs nothing. It works against voice cloning, against emotional manipulation, against urgency-based attacks. And your parent will thank you for treating it as a mutual protection pact rather than a “you’re old and might fall for something” lecture.

Then sign them up for ScamDrill (or don’t — but do set up some form of ongoing rehearsal). One conversation is a start. A habit of pausing is the actual defense.

Further reading on ScamDrill: our breakdowns of AI voice cloning scams, pig butchering crypto cons, and how to help a family member who thinks they’re in love with a scammer. For two practical companion routines: the 20-minute monthly statement review that catches scam-related charges before they auto-renew, and our age-by-age guide to teaching kids about online scams without scaring them — useful in households where grandkids and grandparents share devices.