Senior Scam Prevention
How to Protect Your Parents From Online Scams
You can't watch their inbox for them. But one afternoon of setup and one ongoing habit can close most of the risk.
Quick answer
The most effective protection is a combination of one setup afternoon and one ongoing habit. Set up: two-factor authentication on their email and bank, a password manager on the device they already use, a credit freeze at all three bureaus, and a saved contact for check@spamcheck.com so they can forward any doubtful email and get a plain-English answer in under a minute. The ongoing habit: a standing agreement that they forward anything suspicious before acting on it — framed as 'get a second opinion,' never as 'you can't be trusted.' Lead with respect, not control; parents who feel monitored hide incidents, and hidden incidents are how small scams become large losses.
Warning signs to look for
- They mention a 'nice person' they've been emailing or talking to
- New secrecy around money, or unexplained withdrawals
- They've bought gift cards recently 'for a friend'
- They say the bank or Social Security 'called' them
- They get flustered or defensive when you ask about a message
- Their computer has remote-access software you didn't install
Start with the conversation, not the technology
The setup only works if your parent will actually use it — and that depends entirely on framing. Don't lead with 'you're vulnerable.' Lead with the shared enemy: 'These scams are designed by professionals to fool smart people. The FBI reports billions lost every year, and the victims include doctors, lawyers, and retired FBI agents. Even I forward suspicious emails to get them checked.' The goal is to make getting a second opinion feel like what competent, careful people do — because it is.
The one-afternoon technical setup
In a single visit you can close most of the realistic risk: (1) Turn on two-factor authentication for their primary email and bank accounts. (2) Set up the built-in password manager on their phone or computer and move the important logins onto unique passwords. (3) Freeze their credit at Equifax, Experian, and TransUnion — free, and it stops new accounts being opened in their name. (4) Save a contact in their phone called 'SpamCheck' with the address check@spamcheck.com. (5) Agree on a family code word that must be spoken before anyone acts on an urgent money request. Write the essential recovery details on paper and keep it somewhere safe at home — not in an email account.
Give them a reflex, not a rulebook
Lists of scam warning signs don't survive contact with a well-written fake email from 'their bank.' What survives is a single reflex: when in doubt, forward it. That's why SpamCheck works well for parents — forwarding an email is a skill they already have, and the reply tells them in plain English whether it's safe and what to do next, usually in under a minute. Make the agreement explicit and mutual: 'Anything that asks you to click, pay, or reply — forward it to SpamCheck first. I do the same thing.' A reflex that gets used beats a rulebook that doesn't.
Set up the money tripwires
The most damaging scams end in a wire, gift cards, or a cash handoff. Two practical barriers help enormously. First, tell their bank (with your parent present) that you'd like to be alerted to unusual withdrawals — many banks offer a 'trusted contact' designation for exactly this. Second, agree as a family that gift cards are never a payment method: no government agency, utility, bank, or grandchild-in-trouble ever takes gift cards. That one sentence, internalized, stops a large category of losses cold.
What to do about the phone
Many email scams escalate by phone, and many phone scams never touch email at all. Three habits cover most of it: (1) Never act on an incoming call — hang up and call the number on the back of the card or the official website. (2) Let unknown numbers go to voicemail; real callers leave messages, scammers usually don't. (3) The family code word applies to calls too, especially anything involving a grandchild in trouble. AI voice cloning makes 'it sounded exactly like him' worthless as evidence — the code word is the fix.
If a scam has already happened
Move fast and skip the shame. The speed of your response determines whether money is recoverable: call the bank's fraud line (number on the back of the card), then report at ic3.gov and reportfraud.ftc.gov. Our guide 'I Sent Money to a Scammer: What Should I Do?' walks through each payment method step by step. Just as important: tell your parent explicitly that they did the right thing by telling you. Victims who feel judged go silent — and silence is what the scammer is counting on for round two, because 'recovery scam' follow-ups target recent victims within days.
What not to do
Don't take over their accounts or demand passwords — it breeds resentment and secrecy. Don't forward them scary articles as a substitute for a system. Don't assume one conversation is enough; scammers adapt, so make 'anything weird happen online this week?' a normal part of your regular calls. And don't wait for the first incident. The families who avoid the worst outcomes are the ones who set up the reflex before it's needed.
Frequently asked questions
- My parent insists they would never fall for a scam. How do I get through?
- Don't argue about likelihood — reframe around verification. 'Nobody thinks they'll fall for it, including the retired FBI agents who did. This isn't about you being fooled; it's about having a second set of eyes, the same way I do.' The SpamCheck habit is easiest to sell precisely because it's not about competence — it's a tool, like spellcheck.
- Should I get access to their accounts to monitor them?
- Generally no — joint access creates confusion, security risk, and family conflict. A bank 'trusted contact' designation gets you alerted to unusual activity without any access to the money. That's the right balance for most families.
- They already lost money and won't talk about it. What now?
- Lead with warmth, not investigation. Share a story of someone else who was scammed and recovered. Focus on the practical: 'Let's just make sure it can't happen again' — freeze credit, change passwords, set up the forwarding habit. The FBI's IC3 and the FTC both accept reports filed by family members.
Sources
SpamCheck provides informational risk assessments and cannot guarantee that any message is completely safe. When money or sensitive information is involved, independently contact the organization using a trusted phone number or website.
About SpamCheck
SpamCheck helps people understand suspicious emails by letting them forward the message to check@spamcheck.com and receive a plain-English analysis. This guide was published by SpamCheck and written and reviewed by the SpamCheck Editorial Team.
Related guides
The Top 10 Online Scams Targeting Seniors Right Now
Scammers target older adults deliberately, not accidentally. Here are the ten plays they run most — and the counter for each.
How to Talk to an Older Loved One About a Scam (Without Shame)
The first conversation after a scam determines whether there will be a second one. Here's how to get it right.
I Gave a Scammer My Information — What Should I Do?
What you should do depends on exactly what you handed over. Find your situation below and work through it in order — the first hour matters most.
Is This Email a Scam? How to Check
You have a suspicious email open right now. Here is the fastest reliable way to decide whether it is a scam, without clicking anything in it.
The 3 Best Internet Safety Tools for Seniors
Most 'security tools' are built for IT departments. These three are built for real people — and each one works with skills seniors already have.