Why elderly people are targeted
Scammers buy lists of people who've responded to past scams. They know who's home during the day, who's lonely, who answers unknown numbers. In 2024 the FBI's Internet Crime Complaint Center (IC3) recorded $4.885 billion in losses reported by people aged 60+ — a 43% jump from the year before, and the highest of any age group.
The con works because it stacks three pressure levers at once — urgency ('act in the next 20 minutes'), authority ('this is Sergeant Miller with the Social Security fraud desk'), and isolation ('do not tell anyone, it will compromise the investigation'). Even careful, previously-scam-savvy people fall for it, because the script is written to override the checks you'd normally run.
The most common patterns targeting elderly parents in 2026 are: the grandparent scam (a 'grandchild' arrested and needing bail), the tech-support pop-up ('your computer is infected, call Microsoft'), the government-impersonation call (IRS, SSA, Medicare), the romance/companionship long-con, and the 'refund' scam where the victim is talked into wiring money back to a fake company.
The pause rule (the one conversation)
Have this exact conversation, calmly, without judgment. Frame it as your rule that protects both of you, not as something they need because they're old — that framing gets rejected. Say: 'I've been reading about scams targeting people my age and yours. Can we agree on a rule together — for any request for money, gift cards, codes, or account info, no matter who calls, we both wait 24 hours and call each other first?'
The reason a 24-hour pause works: every one of these scams depends on same-day action. A real IRS notice arrives by mail and gives 30 days. A real grandchild in jail is still in jail tomorrow. A real bank fraud freeze can be resolved by calling the number on the back of the card. Waiting a day breaks the script.
- ALWAYS hang up on unexpected calls asking for money, codes, or personal info — even if caller ID looks legit (caller ID is trivial to spoof)
- Wait 24 hours before sending, wiring, buying gift cards, or reading codes out loud
- Call the family member back on the number they already have — never a number the caller gave you
- Log into accounts by typing the URL yourself (chase.com, ssa.gov) — never through links in messages
- If a caller says 'don't tell anyone', that alone is a scam signal — tell someone immediately
- If it's a real emergency, it will still be there in 24 hours. Scams cannot survive 24 hours.
Practical phone + account setup
Set up their environment so the pause rule is easy to follow. Most of these take under an hour together and prevent the majority of successful attacks.
- Enable Silence Unknown Callers (iPhone: Settings → Phone → Silence Unknown Callers; Android: Phone app → Settings → Blocked numbers → Unknown)
- Register their number on the National Do Not Call Registry (donotcall.gov) — reduces cold-call volume within 31 days
- Add a sticker on the phone and on the fridge: 'STOP. Wait 24 hours. Call [your name] at [number].'
- Practice the exact hang-up script out loud together twice: 'I have a rule that I think about it for 24 hours. Goodbye.' — then hang up
- Turn on trusted-contact / view-only access on their bank (most major US banks now offer this) so you can spot unusual transfers
- Freeze credit at all three bureaus (Equifax, Experian, TransUnion) — free, done online in ~15 minutes, blocks new-account fraud
- Set a large-transfer alert (>$500) via SMS on their checking account
- Install a call-blocker app (Nomorobo, RoboKiller) if the carrier's built-in blocking isn't enough
Red-flag phrases to memorize
The scripts have not changed much in 5 years. If any of these phrases show up in a call, text, or pop-up, it's a scam — no follow-up thinking required, just hang up.
- 'Pay with gift cards / Apple Cards / Google Play cards' — no legitimate business, agency, or family member has ever asked for this
- 'Wire the money to a Bitcoin ATM' — no legitimate refund, tax, or bail is ever paid this way
- 'Do not tell your family / do not tell the bank teller / do not hang up'
- 'You've won a prize but need to pay fees / taxes first'
- 'Your Social Security number has been suspended' — SSNs are never suspended
- 'This is Microsoft / Apple support, your computer is infected' — Microsoft and Apple never cold-call
- 'Your grandchild is in jail and needs bail — don't tell their parents'
If they already sent money
Speed matters more than blame. In the first 24 hours, banks can sometimes recall wire transfers, Zelle can occasionally reverse, and gift-card companies can freeze unspent balances. After 72 hours the odds drop sharply.
Do NOT respond to any 'recovery service' that reaches out afterward — they are 100% follow-on scams targeting people who just lost money to the first one. Legitimate law enforcement never DMs you asking for a fee to recover funds.
- Call the bank on the number printed on the card, immediately — ask to recall the transfer and freeze the account
- For gift cards: call the card issuer (number on the back), report the card number as fraud-used — some balances can still be frozen
- File a report at ic3.gov (US) or your national cybercrime unit — this is what triggers any coordinated recovery
- Report at /report to help protect the next person and to get it into our blacklist
- Change email password from a clean device (a different phone or computer), enable 2FA, revoke active sessions
- Ignore every 'we can get your money back' DM, email, or call for the next 90 days
