Tech Support Scam Elderly Parent: What to Do Right Now

How the Tech Support Scam Actually Works

The scam almost always starts the same way. A pop-up fills your parent's screen — flashing, sometimes with an alarm sound — warning that their computer is infected and they need to call a number immediately. The person who answers sounds calm, professional, and helpful. They ask your parent to install remote-access software like AnyDesk or TeamViewer, which hands the scammer full control of the machine.

From there, the playbook varies. In the classic version, the scammer runs a fake "diagnostic," shows fabricated virus results, and charges a few hundred dollars for a "fix." But the FBI's IC3 now tracks a more dangerous variant called the Phantom Hacker scam, where a second or third caller impersonates a bank fraud investigator or government agent and convinces the victim to move their savings into a "safe" account. Adults over 60 lost $7.7 billion to cybercrime in a single recent year, and tech support fraud is one of the top reported categories.

If your parent just called you about something like this, here's exactly what to do.

Step 1: Disconnect the Device Immediately

Don't wait to finish a conversation with the scammer. If the remote session is still active, unplug the ethernet cable or turn off Wi-Fi on the affected computer. Power it down completely if you need to. Every minute the scammer has remote access, they can install keyloggers, copy saved passwords, or access banking sites through cached browser sessions.

Once the device is offline:

• Uninstall the remote-access software (AnyDesk, TeamViewer, UltraViewer, SupRemo — check recently installed programs)
• Run a full anti-malware scan with a trusted tool like Malwarebytes
• Change the passwords for every account your parent accessed on that computer, starting with email and banking
• Enable two-factor authentication on their email — if the scammer has email access, they can intercept password-reset links for everything else

Step 2: Call the Bank Using a Verified Number

Do not use any phone number the scammer provided. Find the number on the back of your parent's debit card or on the bank's official website.

Tell the fraud department:

• Your parent was the victim of a tech support scam
• The date and approximate time the remote session started
• Whether your parent entered banking credentials while the scammer had remote access
• Whether any unusual transfers, wire requests, or new payees appeared on the account

If your parent wired money or sent a bank transfer, ask the bank to initiate a wire recall immediately. Under Regulation E in the US, unauthorized electronic transfers must be reported within two business days to cap liability at $50. The longer you wait, the harder recovery becomes.

For UK families, call 159 — the service that routes directly to your parent's bank fraud team. In Canada, contact the bank's dedicated fraud line (most major banks have one separate from general customer service).

Step 3: Freeze Credit Reports

Tech support scammers who had remote access to a computer often harvest enough personal information to open new credit accounts. Place a security freeze — not just a fraud alert — at all three bureaus:

• Equifax: 888-298-0045
• Experian: 888-397-3742
• TransUnion: 800-916-8800

In the US, credit freezes are free and legally protected under federal law. They block anyone from opening new credit in your parent's name until the freeze is lifted.

In Canada, credit freezes are available free in Quebec (under Bill 53) and Ontario (free Credit Locks under Bill 142 starting July 1, 2026). In other provinces, place identity alerts directly with Equifax Canada and TransUnion Canada.

Step 4: File Official Reports

Reporting won't get the money back immediately, but it creates the paper trail needed for bank disputes and potential law enforcement action.

• FBI IC3: File at ic3.gov — select "tech support fraud" as the crime type
• FTC: Report at ReportFraud.ftc.gov
• Local police: Request an incident report number (some banks require this for dispute processing)
• Adult Protective Services: If your parent has cognitive decline, file a report through the Eldercare Locator at 800-677-1116

In the UK, report to Action Fraud at 0300 123 2040. In Canada, report to the Canadian Anti-Fraud Centre at 1-888-495-8501.

When the Parent Doesn't Think They Were Scammed

This is common. The scammer was polite, solved the "problem," and your parent may feel they received a legitimate service. Don't lead with accusation — that triggers defensiveness and can shut down the conversation entirely.

Instead, frame it as a verification step: "Let's just double-check this company is real — can you show me the receipt or the number you called?" Once you find no verifiable business registration or other independent evidence that the service was legitimate, the evidence speaks for itself.

If your parent is repeatedly targeted or refuses to acknowledge the scam, that pattern may indicate cognitive vulnerability. The product research report on elder fraud notes that financial judgment changes often appear years before a formal dementia diagnosis. A conversation with their primary care doctor about a cognitive screening (the Montreal Cognitive Assessment is more sensitive than the standard MMSE for this purpose) is worth having.

Protecting Against the Next Attempt

Tech support scammers keep lists of successful victims and share them. Your parent will likely be called again, sometimes within days, sometimes posing as a "refund department" from the original fake company.

A few practical steps that reduce the attack surface:

• Configure the browser to block pop-ups and disable notifications from unknown sites
• Install an ad blocker (uBlock Origin is free and lightweight) to prevent the fake virus alerts
• Set the computer's default search engine to reduce the chance of clicking a malicious sponsored result
• Post a note near the computer: "NEVER call a number from a pop-up. Call [your name] first." — simple, but it works as a circuit breaker in the moment of panic

For families managing this from a distance, the Scam and Fraud Shield for Aging Parents includes a complete device lockdown checklist and conversation scripts for exactly this situation — along with the reporting directories and bank enforcement templates you'll need if a POA is involved.

The Recovery Timeline

Most bank disputes for unauthorized electronic transactions resolve within 10 business days in the US, with provisional credit issued if the investigation takes longer (up to 45 days, or 90 for new accounts and foreign transfers). UK payment service providers must reimburse eligible victims within 5 business days under the APP fraud reimbursement scheme, with a maximum of £85,000 per claim.

The emotional recovery takes longer. Your parent may feel embarrassed, angry, or anxious about using their computer again. That's normal. The goal isn't to take away their independence — it's to make the next attempt fail before it starts.