Elder Fraud Protection: What to Do and Prevent Scams

The short answer

If you think your parent is being scammed, focus on stopping the next loss first, not on proving how the scam worked or what to call it. End the contact, stop any further payments, and call the company the money or information actually went through — the bank, card issuer, payment app, wire service, gift-card issuer, cryptocurrency platform, or delivery service — on a number you find independently. Whether anything can be stopped, recalled, disputed, or reversed depends on the payment method and how fast you act, so ask the company what is possible rather than assuming the money is gone or promised back. Then work out what was exposed — money, identity information, passwords, a phone number, or access to a device — because each has a different first call. When it is safe, make those calls sitting beside your parent. A sophisticated criminal manipulated them; that is a crime, not a verdict on their judgment. If anyone is in immediate danger, call 911.

Three rules carry most of the weight:

• Call the payment company before you call anyone else. Only the bank, card issuer, app, wire service, or gift-card issuer can attempt a stop, recall, or dispute. The FTC, the police, and Adult Protective Services cannot move the money back.
• Never use a phone number, link, or email address the suspected scammer supplied. Look the real one up on a bill, on the back of the card, or on the company's own site.
• No safeguard goes on without your parent's agreement. The accounts, the identity, and usually the legal say are theirs.

Where should your family start?

• Anyone is in immediate danger or is being threatened in person — call 911 now. Everything else waits.
• A payment, transfer, package, or purchase may still be in motion — call the bank, payment app, wire service, gift-card issuer, or delivery company before anything else, on a number you look up yourselves.
• Money or information already changed hands, but nothing is pending — work the Fraud Response Ladder below in order, starting at step 2.
• You suspect someone with access to your parent — a relative, a caregiver, an acquaintance. Do not confront them. Contact the financial institution, then local police or Adult Protective Services, and use the reporting routes below.
• You only suspect a scam and nothing has changed hands — end the suspicious contact, then call the real company or family member together on a number from a real bill or your own contacts. If it is legitimate, it will still be legitimate in ten minutes.
• You are not sure which of these you are in — start with the Fraud Response Ladder below. Step 1 is safe in every case.

On this page

• What should you do first if your parent is being scammed?
• Who should you call first, based on what was exposed?
• How fast do you have to report, and to whom?
• What can you actually do on your parent's behalf?
• How do you report elder fraud, and what evidence should you save?
• How do you talk with your parent about the scam without blame?
• How do you recognize common scam tactics and warning signs?
• How do you prevent the next scam without taking over?
• Which safeguard fits: account alerts, a trusted contact, a credit freeze, or power of attorney?
• When is broader help needed beyond fraud response?
• Frequently asked questions about helping a parent after a scam

What should you do first if your parent is being scammed?

Fraud response goes better when you separate three jobs and do them in order: contain the exposure, document and report it, then build prevention with your parent. You do not need to be certain it was a scam, know the scam's name, or agree on how it happened before making the first call. The Fraud Response Ladder below is the whole sequence at a glance; the rest of this guide fills in the details for each step.

Step	What to do	You are done when
1. Stop	End the call, chat, remote session, or visit, and stop any additional payment. Do not use phone numbers, links, or email addresses the suspected scammer supplied.	No new money, information, or access is going out.
2. Contact the channel	Call the real bank, card issuer, payment app, wire service, gift-card company, cryptocurrency platform, carrier, or delivery service using a number you find independently.	A fraud case, stop, dispute, recall, or security review has been requested, and you have a case number.
3. Secure the exposure	Change reused passwords, turn on stronger authentication, recover a taken-over phone number, remove remote access, run a security scan, and consider a credit freeze, which your parent places or agrees to, when identity information was exposed.	The route the scammer used is closed or under review.
4. Preserve	Save original messages, transaction details, receipts, account changes, phone numbers, URLs, names used, and the instructions your parent was given.	A factual timeline and an evidence folder exist.
5. Report	Report to the FTC, and use the police, Adult Protective Services, or specialized route that fits the incident.	Reports are filed through the appropriate channels and the confirmation numbers are saved.
6. Prevent	With your parent, choose one or two safeguards: a family verification phrase, account alerts, a trusted contact, a credit freeze, or an advance-planning conversation.	The safeguard is consent-based, someone owns it, and there is a date to review it.

Speed helps more than strict sequence here. Do not wait for business hours — card issuers and banks commonly staff fraud lines beyond weekday hours, and the online reporting portals are open around the clock, so ask when you reach a recording whether there is a 24-hour fraud option before hanging up. And if two of you are available, split the work rather than doing it serially: one person sits with your parent and makes the institution calls while the other secures passwords and devices and starts one running written log of every call, name, case number, and instruction. Under stress, that log is what turns a frightening afternoon into an organized response that banks, investigators, and family members can actually use.

Who should you call first, based on what was exposed?

Choose the first call by what left your parent's hands, not by what the scam was called. A romance scam, a fake government call, and a tech-support pop-up all end in the same five exposures: money moved, identity information was shared, credentials were given up, a phone number was taken over, or a device was accessed. The Exposure-First Call Matrix below matches each one to the right company and the right request. Two ground rules apply to every row. First, speed matters and outcomes are never guaranteed, so ask what the company can do rather than demanding a specific remedy; whether a payment can be reversed depends on the method, the timing, the facts, and the account terms, and the reporting clocks below set the outer limits. Second, describe what happened factually. If your parent was talked into approving a transfer, say so; let the institution classify the transaction rather than insisting up front that it was unauthorized.

What was exposed	Call first	Ask or do	Keep in mind
Money moved · Credit or debit card	The card issuer or bank, using the number on the card or statement	Report the fraudulent charge and ask about reversing or disputing it; replace the card if advised.	Rights and outcomes depend on the facts, timing, and account terms.
Money moved · Bank transfer or withdrawal	The bank's fraud department, immediately	Report the transaction connected to the scam and ask about a recall, reversal, or hold; secure online banking.	Describe the facts; the bank determines how the transaction is classified.
Money moved · Wire transfer	The bank or wire transfer company, immediately	Report the fraudulent transfer, ask whether it can be stopped or reversed, and ask for a recall and a hold-harmless letter — the written request one bank sends another asking it to return the funds.	Speed matters; reversal is not guaranteed.
Money moved · Payment app	The app provider and the linked bank or card	Report the transaction and ask about reversal; secure the app and every linked account.	The app and the funding source may each need a separate report.
Money moved · Gift card	The company that issued the card	Report that the card was used in a scam and ask about a refund.	Some issuers refund when the money has not yet been drawn off the card, so ask either way — and keep the card and the purchase receipt.
Money moved · Cryptocurrency	The platform or exchange used	Report the fraud and ask whether any intervention is possible; secure the account.	These payments typically are not reversible; be wary of anyone who says otherwise.
Money moved · Cash or a package	The delivery service; for U.S. mail, the U.S. Postal Inspection Service at 877-876-2455	Ask for a package intercept as soon as possible.	Interception is time-sensitive and not always possible.
Identity information · Social Security number or identity details	IdentityTheft.gov, plus any institution involved	Follow the personalized recovery plan; consider a credit freeze; watch for misuse.	A freeze blocks new credit accounts, not every type of fraud.
Credentials · Username or password	The affected service, and every service where the password was reused	Change to unique, strong passwords and turn on stronger authentication; review active sessions.	Changing one site is not enough if the password was reused.
Phone number · Mobile number or carrier account	The mobile carrier	Recover the number and account, then change the carrier password and the credentials on linked accounts.	Recover the phone number before trusting text-message reset codes again.
Device access · Remote access to a computer or phone	End the session and disconnect; then security software or a qualified technician, then the financial institutions	Remove the access, run a scan, change passwords from a different safe device, and review financial accounts.	Do not wipe the device before evidence is saved and the accounts are secured.

A gift-card scam in motion. Your dad mentions he is halfway through buying $800 in gift cards because a caller said his utility account is about to be shut off. Stop the purchase, end the calls, and do not read out any remaining card numbers. For cards already redeemed, call the number on the issuer's official site, report the scam, and ask about a refund, keeping the cards and receipts. Then check the utility account directly using the number on a real bill, and save the caller's number and any texts for the report.

A remote-access scam, in the right order. A pop-up told your mom her computer was infected, and a "technician" ran it remotely for an hour. The order matters: end the session and disconnect the machine, then have security software or a qualified technician remove the access and scan it, then change her banking and email passwords from a different device, then review her accounts with each institution. Keep the pop-up screenshot and the technician's phone number, and do not reset or wipe the computer until the evidence is saved.

If identity information was involved, treat IdentityTheft.gov as its own track alongside the phone calls: it builds a step-by-step recovery plan for the specific information exposed. And if the scammer calls back with a new story, that is a continuation, not a coincidence; end the contact and add it to the log.

How fast do you have to report, and to whom?

Speed matters for a specific reason: federal rules that limit what your parent can be held responsible for run on clocks that start without anyone telling you.

Before the clocks, one distinction decides which rules apply at all. An unauthorized transfer is one your parent did not permit — a stolen card number, a drained account, a transfer they never approved. An authorized payment is one they were manipulated into making themselves. The federal limits below were written for the first kind. Scam-induced payments of the second kind often fall outside them, which is why institutions treat the two differently, and why it is better to describe what happened factually and let them classify it than to argue for a label.

Clock	What it governs	The window	Source, checked August 11, 2026
A lost or stolen card, PIN, or other access device	Caps your parent's liability for unauthorized electronic transfers at $50	Report within 2 business days of learning it was lost or stolen	12 CFR 1005.6(b)(1)
An unauthorized transfer made with that lost or stolen card or access device, reported later than two business days	Caps liability at $500	Within 60 days of the statement being sent	12 CFR 1005.6(b)(2)
An unauthorized transfer on the statement that did not involve a lost or stolen access device	No liability for it when reported inside the window; past it, liability for the transfers that follow can be unlimited	Within 60 days of the statement being sent	12 CFR 1005.6(b)(3)
Unauthorized use of a credit card — use by someone with no actual, implied, or apparent authority, from which your parent received nothing	Caps your parent's liability at $50 whenever it is reported, and many issuers waive even that — ask yours	No deadline attaches to the cap itself	12 CFR 1026.12(b)
A disputed charge on a credit card statement	Requires the card issuer to investigate and resolve a billing error, including a charge your parent did not make	Written notice within 60 days after the first statement showing the charge	12 CFR 1026.13(b)
The bank's own investigation, once your parent reports an unauthorized electronic transfer	Sets how long the institution may take, and when it must credit the account while it looks	10 business days to investigate, or provisional credit and up to 45 days — 90 days for new accounts, point-of-sale debit, or transfers initiated abroad — with results reported within 3 business days of finishing	12 CFR 1005.11(c)
A delay caused by extenuating circumstances	Requires the institution to extend the consumer-side windows above; hospitalization and extended travel are the regulation's own examples	Extended by a reasonable period	12 CFR 1005.6(b)(4)

So put a card dispute in writing even if you call first, because the credit card rule runs on written notice. And if your parent has not opened statements in a while, open them now: the 60-day clocks run from when the statement was sent, not from the day you found out. Provisional credit, in that last row, means money put back temporarily while the bank investigates — not the claim decided; if those ten business days pass with neither an answer nor a provisional credit, name that missed deadline to a supervisor, and again in a complaint if it comes to that.

What these clocks do not do. They do not require a bank to return money your parent authorized. They do not apply to wire transfers, cryptocurrency, or gift cards. They do not set any deadline for reporting to the FTC, the police, or Adult Protective Services — report those whenever you are ready. And they are a floor, not a ceiling: many institutions do more than the rules require, so call first and then ask what their own policy allows.

What can you actually do on your parent's behalf?

Everything on this page assumes one thing worth checking early: whether the person making the calls is allowed to.

If your parent is present and willing, this is simple. Make the calls together, on speakerphone, and let them authorize you at the start of each one — most institutions will note verbal permission for that call. It is their account, their identity, and usually their legal say, and staying inside the conversation is also how they keep their footing after being manipulated.

If your parent is not available, expect friction. A bank will not discuss an account with someone whose name is not on it and who holds no authority, and the representative declining you is following the rule rather than being difficult. What you can still do without any authority: report the incident to the FTC and the FBI's complaint center in your own name as the person reporting it; call the police; call Adult Protective Services; help secure devices and passwords your parent has asked you to help with; and call the institution's general fraud line to report that an account may be compromised, without expecting account details in return.

What you cannot do without lawful authority: move money, open or close accounts, place a credit freeze on your parent's credit file, or receive account information. If you need those and your parent wants you to have them, that is a planning conversation with its own page — see our guide to power of attorney for an aging parent — and it belongs to a calm week, not to the afternoon of a scam.

Distance changes the logistics, not the rules. Every local route in this guide follows your parent's county and state, not yours: their police non-emergency line, their state's Adult Protective Services, their Area Agency on Aging. If you live elsewhere, look those up by your parent's ZIP code and make the institution calls jointly by phone with your parent on the line.

And if your parent cannot take part because of a hospitalization, a health event, or changes in their thinking, do not try to solve authority over the phone. Contact an elder-law attorney in your parent's state, and route any immediate safety concern to Adult Protective Services in the meantime.

How do you report elder fraud, and what evidence should you save?

Save the evidence before it evaporates. Keep the original messages rather than retyping them, screenshot anything that could disappear, and resist the urge to re-engage the scammer to collect more proof. The FBI's elder fraud guidance asks for exactly the kind of detail a calm log captures. A complete log includes:

• Timeline: who contacted whom, when, and through what channel
• The story: what the person claimed, and what they told your parent to do
• Payment details: method, amount, date and time, accounts, reference numbers, destination
• Contact data: phone numbers, email addresses, URLs, usernames, and names used
• Institution cases: every case number and instruction from banks, carriers, and platforms
• Reports: confirmation numbers for each report you file below

Handle these records carefully: they contain your parent's sensitive information, so keep them off group texts and casual email.

Reporting comes after the institution calls, not instead of them. The channels below serve different purposes, and it is normal and appropriate to use more than one. None of them can promise an investigation, an arrest, or reimbursement, and how Adult Protective Services — the state agency that screens suspected abuse, neglect, and financial exploitation of older and vulnerable adults — defines and handles a case varies by state and territory. The CFPB's guide to finding help after elder financial abuse is a good companion directory, and if you genuinely cannot tell which route fits, the hotline and locator rows below exist for exactly that call.

Before you dial: local routes follow your parent's county and state, not yours, and the contact details below were verified as of August 1, 2026 — numbers, hours, and portals can change.

Situation	Where to report	What it does	What it does not do
Any consumer scam, whether or not money was lost	ReportFraud.ftc.gov	Files an FTC report, feeds law-enforcement databases, and returns tailored next steps.	The FTC does not resolve individual cases or recover the money itself.
Internet-enabled fraud: email, pop-ups, online relationships, crypto	FBI Internet Crime Complaint Center (IC3)	Files a federal internet-crime complaint that can support investigations.	Filing does not guarantee contact from investigators.
A crime, a threat, or a local paper trail you may need	Local police in your parent's county (911 only for emergencies)	Creates an official report many banks and agencies ask for; addresses local crime and safety.	A report is not the same as an active investigation.
Suspected abuse, neglect, or exploitation of an older or vulnerable adult living in the community	Adult Protective Services; find your parent's state agency through the NAPSA state map, which is where the Department of Justice routes reports	Screens concerns and can offer protective services, particularly when someone with access is involved.	Definitions, processes, and outcomes vary by state; APS is not an emergency service.
Your parent lives in a nursing home, assisted living, or board and care, and the concern involves staff, another resident, or the facility's handling of their money	The Long-Term Care Ombudsman for your parent's district, found through the Eldercare Locator below	An advocate who works on residents' behalf, takes complaints, and pursues resolution with the resident's consent.	Not a licensing body or a law-enforcement agency, and not a route for recovering funds.
You want a person to walk you through reporting	National Elder Fraud Hotline, 833-372-8311, Mon-Fri 10 a.m.-6 p.m. ET	DOJ case managers help victims 60 and older, and their families, report and find services.	Not an emergency line and not a substitute for calling the bank.
You need local aging, legal-aid, or caregiver services	Eldercare Locator, 800-677-1116	A federal public service that connects families to local agencies and resources by ZIP code.	It is a navigator, not a care or investigation provider.
The scam used U.S. mail	U.S. Postal Inspection Service, 877-876-2455	Handles mail-related fraud and time-sensitive package intercepts.	Interception windows are short.
The scam impersonated Social Security	SSA Office of the Inspector General	Takes reports of Social Security-related scams and misuse.	Reporting does not by itself resolve benefit or identity issues.
The scam impersonated the IRS	Treasury Inspector General for Tax Administration, 800-366-4484	Takes reports of IRS impersonation calls, letters, and messages.	Not a route for resolving an actual tax bill, refund, or notice.
Your parent, or you, is struggling emotionally after the loss	988 Suicide and Crisis Lifeline — call or text 988, any hour	Free, confidential support from a trained counselor, including for someone worried about a loved one.	Not a fraud-reporting route.

A note on the sources behind that table. The Department of Justice publishes conflicting hours for the National Elder Fraud Hotline: its Elder Justice Initiative help page and the FBI's IC3 elder fraud page both list Monday to Friday, 10 a.m. to 6 p.m. Eastern, while other Department pages list seven days a week, 6 a.m. to 11 p.m. Eastern. We publish the Elder Justice Initiative's hours because that is the program's own contact page — but if you reach the line outside them, it may still answer.

Which agency takes an Adult Protective Services report in your parent's state?

Adult Protective Services is organized state by state, and in several states county by county, which is why the report follows your parent's address rather than yours. The NAPSA state and territory directory names the responsible agency state by state, including the District of Columbia and the territories, and it is where the Department of Justice sends reporters. Three examples of what you find at the other end, verified August 11, 2026:

If your parent lives in	The agency is	How to report
Florida	Department of Children and Families, Adult Protective Services	Florida Abuse Hotline, 1-800-962-2873, 24 hours a day; web reporting is available for concerns that are not urgent
Texas	Department of Family and Protective Services, Adult Protective Services	Texas Abuse Hotline, 1-800-252-5400, 24 hours a day, or the secure online report linked from that page
California	Department of Social Services, county Adult Protective Services	Statewide line, 1-833-401-0832, 24 hours a day; entering your parent's ZIP code routes the call to their county agency

Those three are worked examples, not a national table. For every other state, the District of Columbia, and the territories, use the NAPSA directory above, which names the governing agency for each one. Wherever your parent lives, calling their agency does not commit them to anything: Adult Protective Services screens the concern first and decides whether it meets that state's definition.

Large losses are hard on people, and shame does more damage here than the money often does. If your parent seems to be struggling, 988 is there for them and for you.

This guide is general information from Aging Parent HQ, an independent publisher. It is not legal advice, financial advice, a law-enforcement finding, or a forensic or capacity assessment. Recovery options depend on the payment method, facts, timing, institution rules, and applicable law.

How do you talk with your parent about the scam without blame?

Shame is the scammer's last line of defense. The FBI notes that older adults often do not report fraud because they are ashamed of having been scammed, which delays the calls that matter most. Your job in this conversation is not to establish fault; it is to keep your parent talking, get the facts you need for step two, and make the next decision together. Four moves help.

Lead with support and the shared goal. Open with the next action, not the mistake: you are on their side, and the point right now is stopping the next loss. Ask for the sequence in neutral questions. You need the order of events for the log, so ask what happened first, what the person said, and how the payment worked, the way you would reconstruct any timeline. Separate the tactic from their character. These operations are scripted, rehearsed, and run at scale; being caught by one says something about the criminal's skill, not your parent's competence. Choose the next call and one safeguard together. Agreement, even on something small, restores the sense of control the scam took away.

Moment	Try	Avoid
Opening	"This is a crime, and it happens to sharp people every day. Let's stop the next loss together. Can we call the gift-card company now?"	"How could you fall for that?" or any recap of the warnings you gave before.
Getting details	"Walk me through it from the first call. What did they say, and what happened next?"	Rapid-fire questioning that feels like an interrogation or an audit.
They insist it is legitimate	"You might be right. Let's hang up and call the company on the number from a real bill. If it's real, it will still be real in ten minutes."	Arguing about the caller. Verify independently instead of debating.
They fear losing control	"This doesn't change who runs your money. I'm asking to help with this one problem, and you decide what happens next."	Threats to take away devices, cards, or accounts, or secret monitoring.

Keep your parent inside the response, not just informed of it. Make the institution calls together on speakerphone, with your parent doing the talking wherever they want to, since it is their account, their identity, and often their legal say. Ask before looping in siblings or anyone else, and share on a need-to-know basis; the fastest way to teach a parent to hide the next incident is to turn this one into a family broadcast. If they ask you to keep it between the two of you, you can usually honor that while still completing every call, report, and safeguard on this page.

Siblings often land in different places here, and the disagreement is usually about how much control to take rather than about the facts. Three rules keep that from stalling the response:

• Decide the immediate calls first. Containment rarely divides anyone, and it is the part with a clock on it.
• Hold the safeguard conversation for a scheduled call with your parent present. That is the part people actually disagree about, and it is not urgent.
• Never run the decision through a group text about your parent. If they are the subject, they belong in the conversation.

If the suspected person is a relative or caregiver, the conversation changes: prioritize your parent's safety and privacy, do not stage a confrontation, and take your questions to the financial institution, local police, or Adult Protective Services first. And if disclosure stays hard, or the same argument keeps looping days after the incident, that is a broader dynamic than one scam; our guide to talking with an aging parent about accepting help covers resistance, family disagreements, and finding the smallest step everyone can accept.

How do you recognize common scam tactics and warning signs?

You cannot memorize every scam, and you do not need to. The names change weekly; the underlying tactics barely change at all. The FBI's catalog of common frauds and scams — romance, tech support, grandparent, government impersonation, sweepstakes and lottery, home repair — all run on the same handful of levers: manufactured urgency, borrowed authority, secrecy, relationship-building, and a payment method that is hard to trace. Anyone, at any age, can be run through these scripts; they are designed by professionals to defeat intelligent people. One verification habit defeats most of them: end the incoming contact, then reach the real institution or family member on a number you find yourselves.

Tactic	What it can sound like	Red flag	The independent check
Authority and threat	"This is the IRS / Social Security / the sheriff. Pay today or face arrest."	Government agencies do not demand gift cards, wire transfers, or crypto, ever.	Hang up; call the agency through its official website.
Family emergency	"Grandma, it's me. I'm in trouble. Don't tell Mom. I need money now."	Secrecy plus urgency plus an untraceable payment. Cloned voices exist; a familiar voice is not proof.	Call the family member back on their own number, or use your family verification phrase.
Romance and trust-building	Months of warm contact, then a crisis or investment "opportunity," always with reasons not to meet.	Money requests from someone never met in person.	Talk it through with someone outside the relationship before any money moves.
Account-protection story	"Your account is compromised. Move your money to a safe account to protect it."	No real bank or agency asks you to move money to protect it.	Call the bank on the number on the card or statement.
Tech support and remote access	A pop-up or call: "Your computer is infected. Let me connect and fix it."	Requests for remote access or payment to fix a problem you never reported.	Close the browser; contact the device or software company directly if concerned.
Prize and fee	"You've won. Just pay the taxes and fees to release it."	Real prizes never require payment to collect.	Do not pay; look up the sweepstakes independently.
Doorstep and home repair	"We noticed your roof needs urgent work. Today-only price, cash up front."	Unsolicited, urgent, cash-only, no written contract.	Get a second written quote; verify the license before any payment.
Exploitation by someone with access	Pressure, isolation from other family, or "help" with money that benefits the helper.	Bills unpaid despite adequate funds, unexplained withdrawals, sudden account or beneficiary changes.	Route concerns through the bank, APS, or police rather than confronting alone.

It also helps to know which of the Two Clocks you are on, because the two kinds are caught in completely different ways.

Clock	How it runs	What it looks like	What catches it
Urgent	Compresses everything into hours, and collapses the moment anyone pauses to verify	The fake arrest, the grandchild in trouble, the account-protection call	The callback rule: end the contact, look up the real number, call back
Long con	Runs for months, delivers small early wins or steady affection, and coaches the target to distrust family doubts	Romance and investment schemes	Patterns in accounts and mood over time; it rarely announces itself through a single alarming transaction

Some changes deserve a calm review rather than an alarm: new secrecy or anxiety around the phone and mail, unfamiliar payments or subscriptions, gift cards without an obvious recipient, or unpaid bills despite adequate money. None of these proves fraud, and a new friendship, a private purchase, or a wish for privacy is not evidence of anything. Look for the pattern, ask open questions, and check the tactic list before reaching a conclusion.

How do you prevent the next scam without taking over?

Prevention is a shared system the two of you build, not a lecture your parent receives. Expect follow-up contact, too. Victims' details circulate among criminals, and anyone who offers, for an upfront fee, to recover what was lost is running a refund-and-recovery scam; treat that call as a new incident and report it. The CFPB's fraud-prevention resources for older adults anchor the habits and account settings below; the credit-file tools and the arrangements that touch authority sit on the safeguard ladder further down. Every control here is one your parent agrees to, sets up with you, or at minimum knows about; nothing on this list is done to them or behind their back.

Control	Risk it addresses	Consent or access needed	Recheck
Family verification phrase, memorized and never texted	Emergency and impersonation calls, including cloned voices	Whole family agrees on the phrase and the rule: no phrase, no money	Test it casually a few times a year
Independent callback rule: hang up, look up the real number, call back	Nearly every phone-based tactic	Your parent's buy-in; a printed list of real numbers by the phone helps	Revisit after any new incident
Pause-and-check habit: no money or information moves the same day it is asked for	Manufactured urgency	Your parent's own rule; you are the person they can call to think it through	Ongoing
Transaction, login, and account-change alerts	Fast detection of new fraud	Your parent sets them up, or consents to alerts that copy you	Confirm alerts still fire twice a year
Unique passwords and multifactor authentication on email, banking, and phone accounts	Credential reuse and account takeover	Set up together; a password manager helps	When any account is exposed
Device updates plus a house rule: no remote access for anyone who called you	Tech-support and remote-access scams	Agree on who legitimately services the devices	At each incident or new device
Less exposure: call blocking and labeling, junk-mail opt-outs, tighter social-media sharing	Target-list building and doorstep or mail approaches. Registering at donotcall.gov reduces sales calls from companies that follow the law but does not stop scammers; blocking is what does	Your parent's preferences govern; carriers and phones have built-in blocking	Annually
A standing low-pressure review: one short money-and-mail check-in on a schedule	Long-running scams that thrive on silence	An invitation, not an audit; your parent sets the depth	Quarterly works for many families

What should you set up this week?

One incident tells you exactly where to start: block the route that was just used, before adding anything else.

• After a phone scam: the callback rule and a family verification phrase, plus a printed list of real numbers by the phone.
• After a device or remote-access scam: password changes from a clean device, multifactor authentication on email and banking, and the no-remote-access house rule.
• After an identity exposure: the credit freeze leads, alongside the recovery plan at IdentityTheft.gov.
• On any account that was touched: transaction and account-change alerts.

The rest can wait for a calm month, decided one item at a time, which is also how the plan survives. Set alerts with your parent at the kitchen table or during a regular bank visit, on their phone first, and add you as a recipient only if they choose to. Keep the verification phrase spoken rather than written into texts or contact notes, pick something an outsider could never guess from social media, and try it casually a few times a year so it is available under pressure. Adding a trusted contact at the bank is worth discussing in the same sitting; it lives on the safeguard ladder below because of what it does and does not permit.

Do not aim for a fortress. No set of controls makes anyone fraud-proof, and a plan your parent experiences as surveillance will quietly get switched off. Two or three layers that block the route just used, plus a standing agreement to talk before money moves, outperform a long list imposed in a single anxious weekend. Skip paid monitoring products as a default; the controls above are free, and the official recovery routes never charge. Most guides in this category recommend a paid monitoring product and we do not, because a credit freeze costs nothing, blocks new accounts outright rather than reporting them after the fact, and no monitoring product recovers money.

Which safeguard fits: account alerts, a trusted contact, a credit freeze, or power of attorney?

One scam does not justify rebuilding who controls your parent's life, and the tools families reach for in this moment are routinely confused with one another. The Least-Restrictive Safeguard Ladder below runs from least restrictive to most, and the right rung is the lowest one that addresses the actual risk. Your parent keeps full control on every rung until the last, which is a separate legal decision, not a fraud-response setting.

Tool	What it actually does	Cost	Control your parent keeps	Confirm in writing before you sign
Account and login alerts	Notify your parent, and anyone they designate, about transactions and changes	Set by the institution — ask	Full control; alerts only inform	Which events trigger an alert? Who receives them, and how is that changed later?
View-only or monitored access, where offered	Lets a chosen person see activity without the ability to move money	Set by the institution — ask	Full transaction control	Do you offer it on this account type? Exactly what does the viewer see? Can view-only access ever become transaction access, and who authorizes that?
Trusted contact on file	Lets the institution reach a chosen person if it spots signs of trouble; the contact gets no access to money and no authority, and can be changed anytime	Set by the institution — ask	Full control	What circumstances would actually prompt you to call the contact? What may you tell them, and what may you not? Confirm this gives no ability to see or move money. How does my parent change or remove the contact?
Fraud alert on the credit file	Tells creditors to verify identity before opening new credit; placed through one bureau, which notifies the other two. An initial alert lasts one year and can be renewed; identity-theft victims can place a seven-year extended alert with an FTC identity theft report or a police report	Free	Full control; credit remains usable	When does the alert expire, and how is it renewed? What documentation does an extended alert require?
Credit freeze	Blocks new credit accounts entirely until lifted; placed separately at each of the three bureaus	Free	Full control; your parent lifts it at will	How is the freeze lifted temporarily, and how quickly? What credentials will my parent need later? Confirm existing accounts and non-credit fraud are unaffected.
Convenience or agency account arrangement	A bank-specific setup, not a legal instrument, that lets a helper pay bills from an account	Set by the institution — ask	Varies by form and state; some create real transaction power	Exactly what does this permit the helper to do? Does it create any ownership or survivorship right? Who can cancel it, and how?
Power of attorney	A separate, state-specific legal instrument granting defined authority to an agent	Attorney fees — varies by state and by complexity	Depends entirely on how the document is drafted	Ask an elder-law attorney, not the teller: what authority does this grant, when does it take effect, and how is it revoked?

How firm is this? The fraud alert and credit freeze rows are verified from FTC consumer materials and the trusted contact and view-only rows from CFPB materials, all checked August 11, 2026. What any particular institution actually offers — whether view-only access exists on that account type, what a trusted contact may be told, what a convenience account permits — varies by provider and is not published in comparable form anywhere; treat those rows as varies by provider, confirm. A power of attorney is a state-specific instrument whose effect depends on drafting, which is why that row routes to an attorney rather than to a form.

Which safeguard fits your family's situation?

Your situation	Start at this rung	Why it fits	When it is not enough
Your parent manages fine and wants this incident over with	Alerts on the accounts that were touched	Adds detection without changing who runs anything	If the same route is used again within weeks, revisit together
Identity information was exposed	Credit freeze, then a fraud alert if they prefer to keep applying for credit	Blocks the actual mechanism — new accounts in their name	It does nothing about existing accounts, so pair it with the bank
You live out of state and cannot be in the room	Trusted contact on file, plus alerts your parent chooses to copy you on	Gives the institution a way to reach you without giving you authority	If bills start going unpaid, that is a care conversation, not a fraud setting
Your parent asks for day-to-day help with bills	A conversation with the bank about what its convenience arrangement actually permits	Some versions create real transaction power your parent did not intend	If the answer is unclear or the amounts are significant, see an elder-law attorney first
You suspect a relative or caregiver with access	None of these yet — call the institution, then police or APS	A trusted contact or shared access can hand a suspected person more reach, not less	This is the situation that most often needs legal advice in your parent's state
Your parent wants to plan authority on their own terms	An elder-law attorney, on their timeline	Authority instruments are state-specific and hard to unwind	Not a same-week task, and not a response to this incident

Before adopting any rung, ask the institution to confirm in writing what the arrangement does and does not permit, who can change or cancel it, and what paperwork it requires; the same label can work differently from one bank to the next. A trusted contact who thinks they can intervene in transactions, or a convenience account that quietly created joint power, causes its own problems. When a question turns on state law, family conflict, or real authority over assets, that is the moment for an elder-law attorney rather than a form at the teller window. If your parent wants to plan authority in advance, on their own timeline and terms, that is a legitimate project with its own page: see our guide to power of attorney for an aging parent. It is planning, not a scam remedy, and nothing about this incident requires it.

When is broader help needed beyond fraud response?

Sometimes the scam is the whole story, and the response above closes it. Sometimes it sits inside a larger pattern: bills going unpaid despite adequate funds, obligations slipping, or day-to-day tasks getting harder. If you are seeing the pattern rather than the incident, our guide to the signs an aging parent may need more help walks through what merits attention and what is ordinary variation. One fraud incident is not a diagnosis of anything; if you are noticing persistent memory or thinking changes beyond this event, start with how early signs of dementia differ from normal aging and bring the pattern to their doctor rather than drawing conclusions at home.

If the incident has instead opened a wider conversation about supporting your parent at home, the room-by-room aging-in-place checklist is a practical place to take it next, at whatever pace they set. For individualized questions, use professionals in their lane: the bank for account arrangements, an elder-law attorney for authority and state law, APS and police for exploitation and crime, and, for everything in between, the local Area Agency on Aging that the Eldercare Locator can find in your parent's community, which can point you to legal aid, benefits counseling, and caregiver support. None of those referrals requires your parent to give up anything; they add help around the life your parent already runs.

What if the bank says no?

Ask for the denial in writing and for the specific reason. Then escalate inside the institution before going outside it — a supervisor or a fraud-claims review often reverses on new facts, particularly a police report you did not have the first time. If that fails, your parent, or you with their authority, can file a complaint with the Consumer Financial Protection Bureau, which forwards it to the company; companies generally respond within 15 days and have up to 60 days for a final response — a different sixty days from the reporting windows earlier on this page. Keep the case numbers from every earlier call — they are what makes a complaint concrete.

What if the money is gone and it mattered?

Some of it may be. Say so plainly to each other, and then treat the aftermath as its own problem rather than a verdict. Every state runs a crime victim compensation program, but these programs reimburse crime-related expenses such as medical care, counseling, lost wages, and funeral costs, and eligibility varies by state and territory, so check your parent's state program rather than assuming stolen funds are covered. The practical routes are usually local: legal aid and benefits counseling through the Area Agency on Aging, and a licensed tax professional if the loss is large enough that its tax treatment matters. Guard against the second wave, too — anyone who contacts your parent offering to recover the money for an upfront fee is running the follow-up scam.

What if your parent does not want to report it?

That is their call for anything involving their own accounts, and pushing usually costs you the next disclosure rather than winning this one. You can still report the scam yourself to the FTC and IC3 as the person who observed it, without their account details. If you believe someone with access is exploiting them, Adult Protective Services accepts reports from family members whether or not your parent agrees — that is the situation where acting without their blessing is appropriate, and the reason APS exists.

What if your parent does not believe it was a scam?

This is the hardest version, and it is the usual shape of a long con. A competent adult can keep making their own payments, and nothing on this page can be imposed over their objection. Arguing about the person rarely works, because the relationship is what they are defending. Move to the check instead: ask them to agree that money and information wait until the two of you have called the real institution or family member on a number you look up together — being wrong about a legitimate request costs ten minutes. You can still report to the FTC and IC3 yourself in the meantime. If someone with access to your parent is involved, contact Adult Protective Services in their state. And if you are seeing changes in memory or judgment beyond this one relationship, bring the pattern, not a conclusion, to their doctor.

Frequently asked questions about helping a parent after a scam

What should I do first if my parent is being scammed?

Stop the contact and any further payment, then call the company the money or information went through, on a number you find independently. The Fraud Response Ladder above covers the full sequence.

Can money sent to a scammer be recovered?

Sometimes, depending on the payment method, the timing, and the provider's rules. Card charges can often be disputed, wire and app transfers can sometimes be recalled if reported fast, and cryptocurrency payments typically are not reversible. Contact the company used immediately and ask what is possible; distrust anyone who promises recovery.

Should I freeze my parent's credit?

If identity information was exposed, a freeze blocks the mechanism — new accounts opened in their name — and a fraud alert is the lighter alternative when they would rather keep applying for credit. Either way, your parent places it or agrees to it; acting for them generally requires lawful authority. The safeguard ladder above compares both, with what to confirm before you set either one up.

When should I call Adult Protective Services?

When you suspect abuse, neglect, or financial exploitation of an older or vulnerable adult, especially if someone with access to your parent may be involved. Definitions, intake processes, and outcomes vary by state and territory. For immediate danger, call 911 instead; APS is not an emergency-response service.

Does insurance cover money lost to a scam?

Do not assume either way — ask, in writing. A homeowners or renters policy, or the account agreement itself, can carry limited coverage for theft or forgery, and whether this loss qualifies turns on the policy language and on the same authorized-versus-unauthorized question the institutions are asking. Describe what happened to the insurer the same factual way you described it to the bank, and ask them to confirm what the policy covers and excludes here. Treat an answer from anyone other than the insurer as a guess.

How long does it take to resolve elder fraud?

One part of it does run on a federal clock: once your parent reports an unauthorized electronic transfer, the bank has ten business days to investigate, or it must provisionally credit the account and may then take up to 45 days. Nothing else has a fixed timeline. The rest is set by the slowest step involved — a wire-recall attempt, the identity-recovery tasks at IdentityTheft.gov, a police or APS process, and, just as legitimately, your parent's own pace in deciding which safeguards they want. Containment usually takes a day or two; reviews and prevention decisions unfold over weeks. Set a review date, not a deadline.

Your next step

Make the first institution call today, write down the case number, and put every detail from this incident into one log. Then sit down with your parent, choose one safeguard from the prevention plan together, and put a review date on the calendar. That sequence, not certainty about the scam or a perfect set of controls, is what protects them.

Sources and last verified date

• What To Do if You Were Scammed — Federal Trade Commission — payment-method recovery actions, identity and password exposure steps, phone and remote-access response, gift-card refund requests, and the USPIS package-intercept number. Checked August 1, 2026.
• Credit Freezes and Fraud Alerts — Federal Trade Commission — what freezes and fraud alerts do, that both are free, three-bureau placement for freezes, one-bureau placement for initial fraud alerts, the one-year initial alert, and the seven-year extended alert with an FTC identity theft report or a police report. Checked August 11, 2026.
• Refund and Recovery Scams — Federal Trade Commission — follow-up scams that charge upfront fees to "recover" prior losses. Checked July 29, 2026.
• IdentityTheft.gov — Federal Trade Commission — official personalized recovery plan for exposed identity information. Checked July 29, 2026.
• Liability of consumer for unauthorized transfers, 12 CFR 1005.6 — Electronic Code of Federal Regulations — the two-business-day and 60-day reporting windows, the $50 and $500 liability tiers, the distinction between transfers involving a lost or stolen access device and those that do not, and the extension for extenuating circumstances. Checked August 11, 2026.
• Procedures for resolving errors, 12 CFR 1005.11 — Electronic Code of Federal Regulations — the bank's own investigation clock: ten business days, provisional credit, the 45-day and 90-day limits, and the three-business-day reporting requirement. Checked August 11, 2026.
• Special credit card provisions, 12 CFR 1026.12 — Electronic Code of Federal Regulations — the definition of unauthorized use and the $50 cap on cardholder liability for it. Checked August 11, 2026.
• Billing error resolution, 12 CFR 1026.13 — Electronic Code of Federal Regulations — the requirement that a credit card billing error notice be in writing and reach the creditor within 60 days of the first statement showing the charge. Checked August 11, 2026.
• Elder Fraud — Federal Bureau of Investigation — why older victims often do not report, and IC3 as the reporting route. Checked August 1, 2026.
• Common Frauds and Scams — Federal Bureau of Investigation — the scheme categories that target older adults: romance, tech support, grandparent, government impersonation, sweepstakes and lottery, and home repair. Checked August 1, 2026.
• Elder Fraud — FBI Internet Crime Complaint Center — steps after a fraud, including requesting a wire recall and a hold-harmless letter, and the National Elder Fraud Hotline number and hours. Checked August 1, 2026.
• Internet Crime Complaint Center (IC3) — Federal Bureau of Investigation — federal complaint portal for internet-enabled fraud. Checked August 1, 2026.
• Find Help or Report Abuse — U.S. Department of Justice Elder Justice Initiative — the 911 gate, National Elder Fraud Hotline number and hours, Eldercare Locator helpline, and the routing of APS reports to the NAPSA state map. Checked August 11, 2026.
• Elder Fraud — U.S. Attorney's Office, Southern District of Indiana — the Department page listing longer daily hours for the National Elder Fraud Hotline, cited to disclose the conflict with the Elder Justice Initiative's own contact page. Checked August 11, 2026.
• Get Help in Your Area — National Adult Protective Services Association — state and territory APS contacts, and the directory of governing agencies for jurisdictions not named on this page. Checked August 11, 2026.
• Adult Protective Services — Florida Department of Children and Families — Florida's reporting agency, the Florida Abuse Hotline number, and its 24-hour availability. Checked August 11, 2026.
• Report Abuse or Neglect — Texas Department of Family and Protective Services — Texas's reporting agency, the Texas Abuse Hotline number, and its online reporting route. Checked August 11, 2026.
• Adult Protective Services — California Department of Social Services — California's county-based structure and the statewide line that routes by ZIP code to the parent's county agency. Checked August 11, 2026.
• Long-Term Care Ombudsman Program — Administration for Community Living — the ombudsman's role for residents of nursing homes, assisted living, and board and care. Checked August 1, 2026.
• Protecting Older Adults from Fraud and Financial Exploitation — Consumer Financial Protection Bureau — prevention planning and financial-institution safeguards. Checked July 29, 2026.
• Choosing a Trusted Contact Person Can Help You Protect Your Money — Consumer Financial Protection Bureau — trusted-contact consent, purpose, limits, and changeability. Checked July 29, 2026.
• Older Americans Are Not Alone in the Fight to Stop Financial Abuse — Consumer Financial Protection Bureau — monitoring account activity without granting access to funds. Checked July 29, 2026.
• How to Find Help Responding to Elder Financial Abuse — Consumer Financial Protection Bureau — the purpose-based directory of reporting and assistance routes. Checked July 29, 2026.
• Submit a Complaint — Consumer Financial Protection Bureau — the complaint route when an institution denies a claim, and the 15-day and 60-day company response expectations. Checked August 11, 2026.
• Victim Compensation — U.S. Department of Justice Office for Victims of Crime — what state compensation programs reimburse and that eligibility varies by state and territory. Checked August 1, 2026.
• Eldercare Locator — Administration for Community Living — the federal public service connecting families to local aging, legal-aid, and caregiver resources. Checked August 1, 2026.
• Report — U.S. Postal Inspection Service — the reporting route and phone number for mail-related fraud and package intercepts. Checked August 1, 2026.
• Avoid IRS-Related Scams — Treasury Inspector General for Tax Administration — reporting route and hotline for IRS impersonation. Checked August 11, 2026.
• How To Block Unwanted Calls — Federal Trade Commission — that call blocking and labeling, not the Do Not Call Registry, is what stops scam calls. Checked August 11, 2026.
• Report a Scam — Social Security Administration Office of the Inspector General — reporting route for Social Security impersonation scams. Checked July 29, 2026.
• 988 Suicide and Crisis Lifeline — Substance Abuse and Mental Health Services Administration — free, confidential, around-the-clock support by call or text, including for people worried about a loved one. Checked August 1, 2026.

Last verified: August 11, 2026

Next review: February 1, 2027