On September 29, 2023, the FBI published a public warning about a scheme it named the "Phantom Hacker." It described three callers in sequence: a tech support worker, then someone from the bank, then a government official. Each handed the victim to the next. By the end, people had moved their life savings to "protect" it.
The same warning gave the scale. In the first six months of 2023, the FBI received 19,000 complaints about tech support scams as a category, with reported losses over $542 million. Almost half of the people reporting were over 60, and that group accounted for 66 percent of the money lost.
Read that warning again and notice what it describes. Not a trick. A process, with stages, handoffs and a script. That is what most families are never taught, and it is the single most useful thing you can teach a parent.
Why a list of scams does not protect anyone
Most advice for families is a list of scams to watch out for. The grandparent scam. The IRS call. The prize that needs a fee. The list is accurate and it does not work, because the caller is not using last year's list. The story changes every week. The method underneath it does not.
If your parent learns the method, they can recognize a scam they have never heard of. If they only learn the list, they are protected against the ones that already happened to someone else.
So this post does two things. First it walks through the sequence every stranger-run scam follows. Then it sorts the familiar scams by the instruction each one ends in, because that instruction is the part worth memorizing.
The six steps, in plain language
They choose your parent. Nobody is picked at random. Lists of names, ages, phone numbers and recent life events are bought and sold, and criminals buy them. A person who has lost a spouse, moved, or answered one call before is more likely to be on a list. Your parent did nothing to cause this.
They open with a story. The call, text, email or pop-up arrives wearing a costume: the bank, the government, a grandchild, a company, a romantic interest. The costume is chosen to match something your parent already trusts. It is interchangeable, and the criminal will switch it if the first one does not land.
They build trust and cut off everyone else. This is the step to teach. Somewhere in the conversation comes an instruction not to tell anyone. The bank is being investigated. The grandchild is embarrassed. Telling someone would "obstruct the case." That instruction removes the one person who could have stopped it.
They create a deadline and the money moves. Then comes the emergency. The account is compromised right now. The warrant is issued tonight. The window closes in an hour. Under that pressure, your parent is told exactly how to move money: wire, gift cards, a cryptocurrency machine, cash to a courier at the door. This works on everyone, and the reason has a name: the Fear Override. The Fear Override is an induced state in which verification behaviour stops. It is not a failure of intelligence or financial sophistication - it is what a manufactured emergency does to anyone's decision-making for as long as it lasts. That sentence matters because it changes who is at fault. A smart, careful, financially experienced person will comply once the state is induced. The protection is a rule they set before the call, not a judgment they make during it.
The first hours after. If money has moved, the first hours matter more than anything that comes later. This is the Golden Hour. A wire can sometimes be recalled. A gift card number can sometimes be frozen. Every hour of silence closes a door. This is why shame is the criminal's best friend.
They come back. A person who paid once is now on a list of people who pay. The next call is often someone offering to recover the lost money, for a fee. The sequence starts again at step one, and the costume this time is "help."
The common scams, sorted by the instruction underneath
Here is the rundown, organized the way it should be taught. The names are costumes. The instruction is the scam.
"Move your money somewhere safe."
The Phantom Hacker, the fake bank fraud department, the fake Social Security or Medicare caller, the fake federal agent, the courier collecting cash or gold "for safekeeping." One thing to know: no bank, agency or government employee will ever tell you to move money to protect it. That sentence ends every version of this scam.
"Pay something to receive something."
The sweepstakes, the lottery, the inheritance, the grant, the unclaimed refund. The Federal Trade Commission put it in one line in June 2025: "Real prizes are free. If there's a charge, it's a scam." Taxes, fees, insurance, shipping. A real prize never costs money first.
"Pay to get someone out of trouble."
The grandparent call, the bail call, the lawyer calling about a crash, the warrant that goes away if you pay today. Voice is not proof anymore. A few seconds of audio from a social post is enough to copy a grandchild's voice. The answer is a family code word, agreed in advance.
"Let me fix your computer."
The pop-up that locks the screen with a phone number, the "refund" that was overpaid and must be returned, the subscription that needs cancelling. Each ends with a stranger controlling the computer or the bank login. The rule: never call a number on the screen, and never let someone who called you take control of the device.
"Trust me, and invest with me."
The online romance that later needs money, and the investment a new friend is doing so well with. These run slowest and take the most. The signal is not the story. It is the moment savings get turned into cash that can be moved, for a reason the new person supplied.
"I can get your money back."
The recovery scam. It arrives after a loss, often claiming to be the FBI, a law firm or a crypto recovery service, and it asks for a fee or for account access. Real recovery never starts with you paying someone who contacted you.
Notice that these six instructions cover almost every scam you have ever heard of. When a new one appears next month, it will end in one of them too.
What to actually teach
Three things, and they are small enough to say at the kitchen table.
The callback rule. Any call, text or message that asks for money, a password or remote access ends the same way: hang up and call back on a number you already have. The back of the card. Your own contacts. Never the number the caller gives you, and never the number on the screen.
The pause. Nobody legitimate punishes you for taking a day. Agree on an amount as a family. Above that amount, nothing moves for twenty-four hours, no matter who is asking or how urgent it sounds. The urgency is the tell, not a reason to hurry.
The tell-me rule. Say it to your parent directly: "If anyone ever tells you not to tell me about something, that is exactly when to tell me." The instruction to keep a secret is the most reliable sign of a scam there is, because every version of the scam needs it.
How to say it without it turning into a fight
Older adults are talked down to constantly and they notice. Do not open with "you need to be careful." Open with what is true: these are built to beat anyone, and you want a plan for both of you. Make the rules yours as well as theirs, and tell them you did.
If your parent has already been contacted, or already paid, lead with the mechanism and not the mistake. "They do this for a living and it works on everyone" is a sentence that keeps the conversation open. "How could you fall for that" ends it, and the criminal is counting on it ending.
A companion post, Being Careful Is Not a Plan, covers the protections a family can set up in an afternoon: credit freezes, mail monitoring, and property alerts. This post is about what your parent needs to understand. That one is about what to switch on.
If money has already moved
Call the bank or card company first, before anyone else, and say the words "fraud" and "recall." Then report it to the FBI at ic3.gov. Then call your county's Adult Protective Services, which exists for exactly this and does not need proof.
If you do not know where to start, the Department of Justice runs the National Elder Fraud Hotline at 1-833-372-8311, weekdays from 10 a.m. to 6 p.m. Eastern. The Eldercare Locator at 1-800-677-1116 will connect you to local services. Expect the recovery call afterward, and treat it as step six.
The one rule
If a family agrees on one sentence, make it this one, and say it out loud together: "If anyone asks for money, a code, or a password, we hang up, we call back on a number we already have, and we tell each other."
Then put it on the refrigerator. The call will still come. It will just end differently.
Sources