A family operating manual for protecting older adults from scam calls, fake tech support, impersonators, gift-card fraud, and panic-based money traps
This is not a generic “be careful online” article.
This is for the real fear:
- your parent clicks strange links
- your dad trusts callers too easily
- your mom gets frightened by pop-ups
- someone says their bank account is at risk
- a caller pressures them to act fast
- they are too polite to hang up
- they are embarrassed to admit something already happened
That is where people lose money.
The good news is that scam defense does not require high technical skill.
It requires a few strong rules, repeated clearly, until they become habits.
The Federal Trade Commission’s consumer guidance is very consistent on the big red flags: no legitimate business or government agency will ask for payment by gift card; scammers often push remote access to devices; and anyone telling you to move your money to “protect it” is running a scam. (Consumer Advice)
1) What this manual is for
Use this if:
- you are worried about a parent or older relative getting scammed
- they already fell for something once
- they trust incoming calls, pop-ups, or texts too easily
- they get flustered under pressure
- you want a practical family safety system, not tech jargon
This manual helps with:
- scam red flags
- exact scripts to say
- what to do after a click or payment
- how to set up simple family rules
- how to reduce shame so people tell you fast
2) The core truth: scams work by pressure, not intelligence
Most victims are not “bad at tech.”
They are:
- rushed
- frightened
- isolated
- polite
- confused by authority
- emotionally hijacked
Scammers often create:
- urgency
- fear
- authority
- secrecy
- confusion
- fake relief
That is the pattern.
So the real goal is not:
teach every scam in the world
The real goal is:
teach a handful of rules that beat most scams fast
3) The family red-flag rule
If a caller, text, email, pop-up, or message tells your parent to do any of these things, the correct response is to stop immediately:
- buy gift cards
- move money to “protect” it
- withdraw cash urgently
- give a one-time code
- install remote access software
- click a surprise login/security link
- keep the situation secret
- act right now or lose money/services/access
These are not “maybe” signs.
These are hard stop signs.
The FTC says no real business or government agency will ever tell you to pay them with gift cards. FTC guidance also warns against scammers who ask people to move money to “protect it,” or who seek remote access to devices in fake tech-support flows. (Consumer Advice)
4) The one-minute rule for older adults
Teach this exact rule:
The Stop-Hang Up-Call Back rule
If someone contacts you first and asks for money, codes, passwords, computer access, or urgent action:
- Stop
- Hang up
- Call family
- Call the official number yourself
Not the number in the message.
Not the number from the popup.
Not the number the caller gives you.
The official number from:
- the back of the bank card
- the monthly statement
- the real company website typed by hand
- a saved family contact sheet
That simple pattern is stronger than most long explanations.
5) The biggest scam families need to understand
Scam Type 1: Fake tech support
What it sounds like:
- “Your computer has a virus”
- “Your bank account is compromised”
- “There was a suspicious charge”
- “Call this number immediately”
- “We need remote access to fix the problem”
FTC guidance says tech support scammers try to scare people into believing there is a problem with the computer, then push for remote access or payment details. (Consumer Advice)
Family rule
Never let strangers take control of the computer.
Script
I do not give remote access to my device. I will contact the company myself using the official number I already have.
What not to do
- do not click the support popup
- do not call the popup number
- do not install AnyDesk, TeamViewer, or similar software because a caller told you to
- do not read card details aloud
Scam Type 2: Gift card scams
This one should be taught brutally clearly:
Gift cards are for gifts. Not for bills. Not for taxes. Not for fraud protection. Not for customer support. Not for bail.
FTC consumer guidance says only scammers will tell you to buy gift cards and give them the numbers; no real business or government agency will ask for gift-card payment. (Consumer Advice)
Script
I do not pay for anything important with gift cards.
Family poster version
If someone says:
- “Go to Target”
- “Buy Apple cards”
- “Get Google Play cards”
- “Read me the numbers”
that is a scam.
Scam Type 3: “Move your money to protect it”
This is one of the nastiest ones because it sounds sophisticated.
The scammer claims:
- your bank account is under attack
- your identity is being used
- your retirement money is unsafe
- they can help you “secure” the funds
Then they tell the victim to move money.
FTC guidance says that anyone telling you to move money from a bank, investment, or retirement account to “protect it” is scamming you. (Consumer Advice)
Script
I do not move money because of incoming calls or messages. I will call my bank myself.
Family hard rule
If the phrase “protect your money” comes from an incoming caller, hang up.
Scam Type 4: Impersonator scams
The scammer pretends to be:
- FTC
- IRS
- Social Security
- Medicare
- bank fraud team
- Amazon support
- Apple or Microsoft support
- utility company
- police
- a family member in trouble
The FTC says the agency itself will never threaten you, tell you to move money to protect it, or tell you to withdraw cash or buy gold and hand it to someone. (Consumer Advice)
Script
I do not verify personal or financial information on incoming calls. I will hang up and call the official number myself.
Rule
Incoming authority is not proof.
It is often the scam.
Scam Type 5: Fake customer service / refund scams
This usually starts with:
- a fake “purchase confirmation”
- a fake subscription renewal
- a message saying “call within 24 hours to dispute”
- a fake refund process
FTC consumer guidance warns that in these scams, people who call the number are pushed toward fake support sites, remote access, or entering bank/card information. (Consumer Advice)
Script
I do not call phone numbers from surprise messages. If I need help, I will contact the company through the official website I enter myself.
6) The five household rules that beat most scams
Print these if needed.
Rule 1
We do not trust incoming calls with money matters.
Rule 2
We do not pay with gift cards, wire transfers, crypto, or cash because of pressure.
Rule 3
We do not give passwords or one-time codes to callers.
Rule 4
We do not let strangers into our devices.
Rule 5
We tell family quickly, even if we feel embarrassed.
That fifth rule matters more than people realize.
7) The no-shame rule
A lot of older adults hide scam situations because they feel foolish.
That is exactly what helps scammers.
Family script
You will not get in trouble for telling me early. Telling me early helps us protect your money and accounts. Silence helps the scammer, not us.
Why this matters
FTC reporting and recovery tools are most useful when people act promptly after the incident. ReportFraud.ftc.gov is for fraud reports, and IdentityTheft.gov gives step-by-step recovery plans when personal information has been misused. (Federal Trade Commission)
8) What to do if they already clicked, answered, or paid
Do not waste time on blame.
Move straight to containment.
If they gave remote access to the computer
- Disconnect the device from the internet.
- Stop using it for banking or passwords.
- Get trusted tech help to remove remote-access tools or clean/rebuild the device.
- Change important passwords from a different, clean device.
- Contact bank/card providers if financial info may have been exposed.
FTC guidance notes that if someone gains control of the computer, they may install malicious software and steal personal information. (Consumer Advice)
If they paid with a gift card
- Contact the gift-card company immediately.
- Keep the card and the receipt.
- Ask for a refund or freeze if funds remain.
- Report it to the FTC.
FTC consumer guidance specifically says to contact the gift-card company right away, keep the card and receipt, and ask for your money back. (Consumer Advice)
If they gave bank/card information
- Call the bank/card issuer immediately using the official number.
- Ask to review recent activity.
- Ask whether cards/accounts should be locked, replaced, or monitored.
- Change related passwords.
If they gave passwords or one-time codes
- Change passwords immediately from a clean device.
- Check whether multi-factor settings, recovery email, or phone numbers were changed.
- Secure the email account first if it is linked to everything else.
If personal information was exposed
If identity information was stolen or misused, report it and get a recovery plan through IdentityTheft.gov. FTC materials describe it as the federal government’s one-stop resource for reporting and recovering from identity theft. (Federal Trade Commission)
9) The exact scripts families need
Script for older adults: default defense
I do not make money or computer decisions from surprise calls, texts, or popups. I check with my family first.
Script for fake fraud calls
I do not discuss my account on incoming calls. I will call my bank myself.
Script for fake tech support
I do not give remote access to my device. Goodbye.
Script for gift-card demand
I do not pay with gift cards for services, support, taxes, or account problems.
Script for “move your money”
I do not move money based on incoming calls or messages. I will speak to my bank directly.
Script for secrecy pressure
If you are telling me not to talk to my family, I am ending this call.
Script for adult children to send parents
If anyone asks you for money, gift cards, one-time codes, passwords, or computer access, stop and call me first. Even if it feels urgent.
10) The scam phrase library
Teach people to react to phrases, not just scam types.
If they say:
- “Do this right now”
- “Your money is at risk”
- “Do not tell anyone”
- “We need to verify your code”
- “Download this so we can help”
- “Buy gift cards”
- “Withdraw cash”
- “Move your money to a safe account”
- “We are from fraud prevention”
- “Read me the numbers on the back”
These are danger phrases.
The correct reaction is not “let me think.”
The correct reaction is hang up.
11) Common scenarios in messy real life
Scenario: “Your Amazon account was charged”
A message says a purchase happened and gives a number to call.
Correct response:
- do not call the number in the message
- log into the account by typing the real website yourself
- or call the official support number from the real site
Scenario: “Your bank account is compromised”
A caller sounds calm and professional and says they are from the fraud department.
Correct response:
- do not continue the call
- hang up
- call the number on the bank card
Scenario: “Your computer is infected”
A popup blares warnings and gives a support number.
Correct response:
- do not call
- do not click
- close the browser / device if needed
- ask family or a trusted helper
Scenario: “A grandchild is in trouble”
Caller says a family member was arrested, hospitalized, or stranded.
Correct response:
- hang up
- call the actual family member or another relative directly
- do not wire money or share details in panic
12) The home safety setup
You do not need a complex security stack.
You need a few defaults.
Set up these basics
- a printed family contact sheet
- bank/card fraud numbers written down from real cards/statements
- one trusted family contact for scam checks
- clear rule: no decisions from incoming calls
- device updates turned on where possible
- call screening enabled where possible
- browser popup clutter reduced where possible
- a safe method for passwords that the person can actually use
Practical rule
A weak system used consistently is better than a perfect system nobody understands.
13) Password and code rules
Household rules
- do not share passwords over the phone
- do not share one-time text codes
- do not reuse one password for everything if it can be avoided
- keep recovery information current
- if using a password manager is too much, use a family-approved fallback method that is safer than random scraps everywhere
Script
I do not share passwords or security codes by phone, text, or email.
14) What adult children should say, exactly
Many people lecture their parents.
That usually fails.
Use calm, concrete language.
Better script
You do not need to figure out whether it is a scam by yourself. Your only job is to stop, hang up, and call me first if anyone asks for money, codes, passwords, or access to your device.
That is much better than:
- “be careful”
- “don’t click weird stuff”
- “you need to learn technology”
15) When the victim is stubborn, private, or ashamed
This is common.
Do not begin with:
- “How could you fall for this?”
- “I told you so.”
- “Why would you ever do that?”
Begin with:
- “Thank you for telling me.”
- “We can deal with this step by step.”
- “The faster we act, the more we can protect.”
- “You are not the first person this happened to.”
The recovery window is more important than your ego.
16) The family emergency checklist
Use this when something happened.
[ ] Stop all further contact with the scammer
[ ] Save screenshots, phone numbers, receipts, emails
[ ] Contact bank/card company if money info was exposed
[ ] Contact gift-card company if gift cards were used
[ ] Change passwords from a clean device
[ ] Check email account security first
[ ] Report fraud at ReportFraud.ftc.gov
[ ] Use IdentityTheft.gov if personal information was stolen or misused
FTC resources distinguish between general fraud reporting and identity-theft recovery steps. ReportFraud.ftc.gov is for reporting scams and fraud; IdentityTheft.gov is for identity-theft recovery planning. (Federal Trade Commission)
17) The one-page fridge version
BEFORE YOU CLICK, PAY, OR TALK
- Stop
- Hang up
- Call family
- Call the official number yourself
NEVER DO THESE ON A SURPRISE CALL
- move money
- buy gift cards
- read a text code aloud
- install remote access software
- give passwords
- keep it secret
FAMILY RULE
If something feels urgent, frightening, or confusing, do not decide alone.
18) What makes this work
This manual is not trying to turn older adults into cybersecurity analysts.
It is doing something smarter:
- reduce decision load
- reduce politeness traps
- reduce panic
- replace judgment with rules
- create one family playbook everyone remembers
That is how you protect people.
19) One-paragraph summary
The safest rule for older adults is simple: never trust incoming calls, texts, or popups with money, codes, passwords, or device access. The FTC’s guidance is clear that gift-card payment demands are always scams, fake tech-support flows often seek remote access, and anyone telling you to move money to “protect it” is trying to steal it. The best defense is a repeatable family rule: stop, hang up, call family, and call the official number yourself. (Consumer Advice)
31 Days to Scam proof Your Life
101 Days of Digital Savvy for Seniors
