Protect Elderly Parent from Online Scams: Prevention and Response Playbook

The Scale of the Problem

Adults aged 60 and older lost $7.74 billion to cybercriminals in 2025 — a 59% increase from the previous year, according to the FBI's elder fraud report. These aren't careless people falling for obvious tricks. The scams are sophisticated, personalized, and designed to exploit exactly the psychological vulnerabilities that come with aging: social isolation, trust in authority, unfamiliarity with current technology patterns, and cognitive decline that makes it harder to spot inconsistencies.

Prevention works better than recovery. Once money leaves a bank account through a wire transfer or gift cards, recovery rates are below 5%. The goal is to harden the parent's digital environment so that scams are blocked before the parent ever sees them, and to establish monitoring so that if something slips through, you catch it fast.

Prevention: Hardening the Digital Environment

Block Scam Calls

Phone scams remain the most common vector. Enable "Silence Unknown Callers" on iPhone (Settings > Phone > Silence Unknown Callers) or "Screen calls" / "Filter spam calls" on Android. This sends calls from unknown numbers directly to voicemail. Legitimate callers — doctors, pharmacies — leave messages. Scammers don't.

Register the parent's phone number on the National Do Not Call Registry (donotcall.gov). This won't stop criminal scammers who ignore the registry, but it reduces legitimate telemarketing volume, making suspicious calls stand out more.

Secure the Email

Email phishing is the second most common vector. Configure the parent's email to flag or quarantine suspicious messages:

• Gmail: Spam filtering is aggressive by default. Make sure "Conversation view" is off if the parent finds threaded emails confusing. Report phishing attempts (three dots > Report phishing) to train the filter.
• Outlook: Enable "Focused Inbox" to separate important mail from bulk messages. Junk email filtering is on by default.

Add your email address as the parent's recovery email. This way, if a scammer gains access and tries to change the password, the recovery notification comes to you.

Enable Transaction Alerts

Set up real-time transaction alerts on every bank account and credit card. Most banks allow alerts for any transaction over a threshold (set it to $0 or $1 to catch everything). These alerts go to the parent's phone and, ideally, to yours as well through a shared notification or by adding your number to the alert profile.

If the bank supports it, set up alerts specifically for: new payee additions, wire transfers, address changes, and PIN resets. These are the actions a scammer takes after gaining account access.

Freeze Credit at All Three Bureaus

A credit freeze prevents anyone from opening new accounts in the parent's name. This blocks identity theft at the source — a scammer who has the parent's Social Security number and date of birth can't take out loans or credit cards.

Place freezes at all three bureaus:

• Equifax: equifax.com/personal/credit-report-services/credit-freeze/
• Experian: experian.com/freeze/
• TransUnion: transunion.com/credit-freeze

Freezes are free and can be temporarily lifted (with a PIN) if the parent legitimately needs to open a new account. Most seniors don't open new credit accounts, so the freeze creates no practical friction.

Warning Signs: What to Watch For

Watch for these behavioral changes — they often indicate a scam in progress before any money has been lost:

• The parent mentions a new "friend" they met online who needs financial help
• Unusual secrecy about phone calls or computer activity
• Gift card purchases (scammers frequently request payment in gift cards because they're untraceable)
• New, unfamiliar software installed on the computer (remote access tools like AnyDesk or TeamViewer, which tech support scammers use)
• The parent mentions they've "won" something or are expecting a large payment
• Unexplained wire transfers or large withdrawals
• The parent becomes defensive when asked about financial transactions

Response: What to Do After a Scam

Phishing (Email or Text)

If the parent clicked a phishing link or entered credentials on a fake site:

1. Change the password on the compromised account immediately
2. Change the password on any other account that uses the same credentials (password reuse is how one phishing email cascades into a full breach)
3. Enable 2FA on the compromised account if it wasn't already active
4. Check the account's recent activity for unauthorized logins, forwarding rules, or security setting changes
5. If financial accounts were exposed, call the bank directly (use the number on the back of the card, never a number from the suspicious message)

Romance Scam

Romance scams are emotionally devastating and financially destructive. The parent has developed a genuine emotional attachment to the scammer, which makes intervention extremely delicate.

1. Don't lead with accusations — the parent will defend the "relationship" and shut you out
2. Document everything: screenshots of conversations, wire transfer receipts, gift card purchases
3. Report to the FTC at reportfraud.ftc.gov and to the FBI's Internet Crime Complaint Center (ic3.gov)
4. Contact the bank to flag and potentially reverse recent transfers
5. If the scam used a specific platform (Facebook, a dating site), report the scammer's profile
6. Consider involving the parent's doctor — cognitive assessments can help determine whether the parent's judgment was impaired by a medical condition, which may be relevant for fraud recovery claims

Tech Support Scam (Remote Access)

If the parent gave a scammer remote access to their computer:

1. Disconnect the computer from the internet immediately (unplug ethernet, turn off Wi-Fi)
2. Do not turn the computer off — a forensic examiner or IT professional may want to see what software was installed
3. Change every password that was visible or stored on that computer (banking, email, social media)
4. Call the bank and credit card companies to flag potential unauthorized transactions
5. Have the computer professionally cleaned or factory-reset before the parent uses it again
6. File a report with the FTC and local law enforcement

Financial Recovery

Contact the parent's bank immediately. For wire transfers, request a recall — the window is narrow (often 24 to 72 hours). For credit card charges, file a fraud dispute. For gift card payments, contact the gift card issuer, though recovery rates for gift card fraud are extremely low.

If the parent lost a significant amount, consult an elder-law attorney about whether the parent's state has enhanced penalties for elder financial exploitation. Many states have specific elder fraud statutes that provide stronger remedies than general consumer fraud laws.

Building the Ongoing Safety Net

One-time hardening isn't enough. Scammers evolve their tactics, and a parent with progressive cognitive decline becomes more vulnerable over time. Set a quarterly check-in to review transaction alerts, update spam filters, and verify that credit freezes are still in place.

The Managing a Parent's Digital Life toolkit includes a device security hardening checklist, a credit freeze walkthrough, and a scam response protocol — all designed to be set up once and maintained with minimal ongoing effort.