What to Do If Your Elderly Parent Is Being Scammed: The 2026 Family Action Plan (Step-by-Step)

You saw the withdrawal on your dad's bank statement. Or your mom mentioned 'a very nice man from Microsoft' who helped her fix her computer. Or a $500 gift card charge appeared, and she can't quite explain why. Your stomach drops — and then, almost immediately, the questions pile up. Do you call the bank first, or the police? Will they get the money back? Should you take over their finances? What if they get angry at you for asking?

You are not alone, and you are not overreacting. The FBI's 2024 Elder Fraud Report shows Americans over 60 lost $4.885 billion to scams last year — a 43% jump from the year before — and the average loss per victim was $83,000. Most victims never tell their family, and only about 1 in 25 reports the crime. That means by the time you notice, the scammers have often been at it for weeks or months.

This guide is the plan we wish every adult child had bookmarked before the phone rang. It walks you through the first 60 minutes (stop the bleeding), the first 24 hours (contain the damage), the first 7 days (report, recover, protect), and the first month (rebuild and prevent). Every step is written for a family, not a fraud analyst — no jargon, no shame, no blame.

First: know what kind of scam it is (it changes what you do next)

Not every scam is recoverable the same way, and the reporting path is different for each. Before you make a single phone call, take 5 minutes with your parent (or their bank statement, or their phone) and figure out which of these it is. If you're not sure, paste the message or invoice into our free Scam Check tool — it will name the scam in seconds.

• Tech support scam — a pop-up or caller claimed the computer was hacked and 'Microsoft,' 'Apple,' or 'Geek Squad' needed remote access, gift cards, or a bank transfer.
• Grandparent / impostor scam — someone called claiming to be a grandchild (or their lawyer) in jail, in an accident, or kidnapped, needing bail money in cash, gift cards, or crypto.
• Romance scam — a months- or years-long online relationship with someone who won't video chat and keeps asking for money for emergencies, plane tickets, or 'investment opportunities.'
• Government impostor — 'IRS,' 'Social Security,' 'Medicare,' or the 'Sheriff's Office' threatening arrest, benefits suspension, or a warrant unless a fine is paid immediately.
• Investment / pig butchering — a stranger (often via text or WhatsApp) walked them into a crypto or forex app that showed fake gains, then locked withdrawals.
• Sweepstakes / lottery — a letter or call saying they won Publishers Clearing House, a foreign lottery, or a car, and just need to pay 'taxes' or 'fees' up front.
• Bank / PayPal / Zelle phishing — a text or email that looked like a bank fraud alert, tricking them into 'verifying' a transaction that was actually them sending the money.
• Medicare / health insurance fraud — a caller offering a 'free' back brace, DNA test, or new Medicare card in exchange for their Medicare number.

Write the scam type on a sticky note. You'll say it four or five times in the next hour — to the bank, to the FTC, to the police, and to whoever else you need to loop in. Having it in one sentence keeps you calm and makes every call shorter.

The first 60 minutes: stop the bleeding

Whatever your parent did — clicked a link, gave a stranger remote access, wired money, bought gift cards — assume the scammer still has the door open. Your only job in the first hour is to close every door faster than the scammer can walk through it.

1. Get your parent off the phone and off the computer

If they are on a call with the 'agent' right now, hang up. Do not argue with the scammer, do not tell them you're onto them — that just gives them a chance to escalate the manipulation. Just hang up. If their computer shows a 'do not turn off' warning or a remote-control session (blue LogMeIn, AnyDesk, or TeamViewer window), unplug it from the wall and from the internet. A powered-off computer cannot be drained.

2. Call every bank, card, and payment app they used

Call the number on the back of the card or on the bank's official website — never a number the scammer gave. Ask specifically for the fraud department and say the words: 'My parent was the victim of a scam. I need to freeze the account, reverse any pending transactions, and open a fraud case.' If a wire was sent in the last 72 hours, ask them to file a SWIFT recall or Fedwire reversal. If Zelle, Venmo, Cash App, or PayPal was used, report it inside the app and by phone — both create a paper trail.

3. Change passwords on any account the scammer touched

From your device, not your parent's, change the passwords on their email first (that's the master key), then their bank, then anywhere they reuse the password. Turn on two-factor authentication using an authenticator app, not SMS. If they gave the scammer remote access, assume every saved password in their browser is compromised.

4. Freeze credit at all three bureaus

This is the single most important thing you can do in the first hour, and it's free. A credit freeze stops new accounts from being opened in your parent's name. You need to freeze at all three separately: Equifax (1-800-685-1111), Experian (1-888-397-3742), and TransUnion (1-888-909-8872). It takes about 10 minutes total.

The first 24 hours: contain the damage

Once the accounts are frozen, you need to write down what happened while it is still fresh. Every agency you call in the next week will ask for the same facts, and telling a coherent story is what gets money returned.

5. Build a one-page incident timeline

1. How the contact started (phone call, text, email, pop-up, Facebook message, dating app).
2. The exact phone number, email address, sender name, or website URL used.
3. Every date and amount of money sent, and the exact method (wire, Zelle, gift card brand and serial numbers, crypto wallet address, cashier's check).
4. The story the scammer told — 'grandson in jail,' 'IRS warrant,' 'refund overpayment,' etc.
5. Any names, badge numbers, or case numbers the scammer used.
6. Whether they gave the scammer remote computer access or sent photos of ID, Social Security card, or Medicare card.

6. Report to the FTC — this is the master report

File at ReportFraud.ftc.gov. It takes about 15 minutes. The FTC does not investigate individual cases, but this report feeds the FBI, state AGs, and the Consumer Sentinel Network — and it's the report every bank and card issuer will ask for a copy of. Print the confirmation.

7. Report to the FBI's IC3 (Internet Crime Complaint Center)

File at ic3.gov. The IC3 is where the FBI's Elder Fraud unit works, and it's the only place a wire or crypto recall has a realistic chance of going through. If the loss is over $50,000 or involved a wire, IC3 is not optional. Include the wallet address or wire routing info from step 5.

8. Call the National Elder Fraud Hotline

1-833-FRAUD-11 (1-833-372-8311), 10 a.m.–6 p.m. ET, Monday through Friday. It's run by the U.S. Department of Justice and staffed by real case managers who will walk your parent through recovery, connect them with local victim services, and follow up. It is free, confidential, and the single most under-used resource in this whole guide.

The first 7 days: report, recover, protect

9. File a local police report

Some banks and insurance companies require a police report before they'll reverse charges or pay a claim. Call the non-emergency line (not 911) and ask for the financial-crimes or elder-abuse unit. Bring the incident timeline from step 5 and every confirmation number from steps 6–8.

10. Report to the state Attorney General and Adult Protective Services

Every state has an AG consumer-protection division and an Adult Protective Services (APS) office. APS is not just for physical abuse — financial exploitation is the fastest-growing category of APS reports. Find your state's numbers at napsa-now.org. If your parent is being repeatedly targeted or lives alone, APS can also arrange in-home support.

11. Lock down identity and monitor for 12 months

• Order free credit reports at annualcreditreport.com from all three bureaus and look for accounts your parent didn't open.
• Place a fraud alert (in addition to the freeze) — one call to any bureau alerts all three, and it's free for 1 year.
• If a Social Security number was shared, create an account at ssa.gov/myaccount to lock it before the scammer does.
• If a Medicare number was shared, call 1-800-MEDICARE to request a new number.
• Sign up for free identity monitoring at IdentityTheft.gov — the FTC's site also generates a personalized recovery plan.

12. Ask the bank about Reg E and elder-financial-abuse reimbursement

Under federal Regulation E, unauthorized electronic transfers (including some Zelle and debit-card fraud) may be reimbursable if reported within 60 days of the statement. Many banks also have internal elder-abuse policies that go beyond Reg E — you have to ask by name. Get the denial or approval in writing, and if it's denied, file a complaint with the CFPB at consumerfinance.gov/complaint. The CFPB complaint has a ~90% response rate and often reverses initial denials.

The first month: the hard conversation and long-term prevention

The paperwork is the easy part. The harder work is making sure this doesn't happen again — without making your parent feel like a child. Here is what actually works, based on what geriatric social workers and the AARP Fraud Watch program recommend.

13. Have the conversation as a team, not a lecture

Sit down with your parent, at their kitchen table, with coffee. Do not stand over them. Do not bring the bank statement. Say: 'Mom, these people are professional criminals. They fool judges, doctors, and FBI agents. This isn't about your judgment — it's about the fact that they've gotten really good. Can we come up with a system together so they can't get through next time?' A system feels collaborative. A rule feels condescending.

14. Set up a 'trusted contact' at the bank and brokerage

FINRA and every major bank now allow (and encourage) a trusted-contact designation — a family member the bank can call if they see suspicious activity. It does not give you access to the money; it just gives them permission to call you before a big withdrawal leaves. Set this up on every account: bank, credit union, IRA, brokerage.

15. Turn on account alerts and set a withdrawal limit

Ask the bank to lower the daily ATM and wire-transfer limits, and to text you (and your parent) any transaction over $500. Same for credit cards. Most seniors never touch these settings — the defaults are set for a 35-year-old with three paychecks a month.

16. Install caller-ID and scam-blocking on their phone

Verizon Call Filter, AT&T ActiveArmor, and T-Mobile Scam Shield are free and block roughly 70% of scam calls. On the phone itself, turn on 'Silence Unknown Callers' (iPhone) or 'Filter Spam Calls' (Android). Add every real family member to the contact list so those calls still ring through.

17. Give them one number to call before they send money

This is the single most protective habit. Agree on a family rule: 'Before any money leaves — for any reason, to anyone, in any amount over $200 — you call me first.' Write your number on a card and tape it to the phone and the refrigerator. Most scams collapse the moment the victim is asked to wait 10 minutes and check with someone.

18. Consider a durable power of attorney (before it's needed)

If cognitive decline is part of the picture, talk to an elder-law attorney about a springing or durable POA and, in some states, a revocable trust. These aren't just for end-of-life — they let a trusted family member step in during a scam without a court fight. NAELA.org has a free directory of elder-law attorneys.

Frequently asked questions

Can I get my parent's money back after a scam?

Sometimes. Wire transfers reported within 24–72 hours are recoverable about 40% of the time if the bank files a SWIFT recall or Fedwire reversal. Zelle and debit-card fraud is often reimbursed under Regulation E if reported within 60 days. Gift cards, crypto, and cashier's checks are almost never recovered — but reporting still matters because it can stop future victims and, in rare cases, restitution comes years later after an FBI takedown.

Should I take over my parent's finances?

Usually no, and not immediately. Losing financial autonomy is one of the fastest ways to accelerate cognitive decline in seniors. Start with trusted-contact designations, joint account visibility (view-only), and daily alerts. Move to a formal power of attorney only if a doctor documents cognitive impairment or if the scam pattern repeats despite protections.

Are scammers ever prosecuted?

The FBI's Operation Cookout, Operation Chain Reaction, and the DOJ's Elder Justice Initiative have resulted in thousands of indictments over the last three years, and the DOJ recovered over $1 billion in 2024 alone. Most call-center scams are run from overseas, so the money is rarely returned in full — but U.S.-based mules (people who move the money) are prosecuted routinely, and restitution can arrive 2–4 years later. Reporting is what makes those cases possible.

How do I know if my parent is still being scammed?

Watch for: new secretiveness about the phone or computer, whispered calls, an unfamiliar 'friend' or 'financial advisor' they mention often, cash withdrawals in odd amounts, gift-card purchases at drug stores, unopened mail piling up, or a sudden interest in cryptocurrency. Any two of these together is a strong signal to check in — gently.

What's the single best thing I can do today?

Freeze credit at all three bureaus, add yourself as a trusted contact on their bank accounts, and program the National Elder Fraud Hotline (1-833-FRAUD-11) into their phone. That's 30 minutes of work that stops most of the damage most of the time.

You are the reason this stops

The scammers count on shame and silence. They count on your parent not telling anyone until the second or third payment. The moment you found out is the moment their playbook stops working — because you're going to make the calls, freeze the accounts, and stay in the loop. That's what recovery looks like, and it starts today.

If you'd like a second set of eyes on any suspicious message, call, or email your parent receives from now on, paste it into our free Scam Check — you'll get a plain-English verdict in under 10 seconds. And if you want new scams targeting seniors in your parent's state to arrive in your inbox before they arrive on their phone, Safe Retire Watch sends real-time alerts written for retirees (and the adult children who love them).