A Seven Day Family Scam-Protection Plan

Most families discuss scams after something frightening happens.

A parent receives a cloned emergency call, a fake bank warning, a delivery text, or an investment offer. Everyone becomes alert briefly, but the family may still lack a shared rule for the next contact.

A useful scam-protection plan should not depend on remembering hundreds of warnings. It should give every family member a calm response that works across many different scams.

The Sunday call that changed the family routine

Consider an illustrative family: 74-year-old Margaret, her son David, and her granddaughter Nina.

One Sunday evening, Margaret receives a call from a young woman who sounds distressed. The caller says she has been arrested after a car accident and needs money immediately. A man claiming to be a lawyer takes the telephone and tells Margaret not to discuss the case with anyone.

Margaret almost sends the money.

She stops only because David happens to call on the other line. Nina is safe at home.

The family does not blame Margaret. The voice sounded familiar, and the caller used secrecy and urgency exactly as intended. Instead, they spend seven days building a plan.

By the following Sunday, Margaret has a family safe word, two trusted call-back numbers, bank alerts, stronger email protection, updated devices, a printed pause card, and a written response for suspicious payments.

The scammers have not disappeared.

The family has simply decided what to do before the next one arrives.

Before starting the seven-day plan

This is not a takeover of an older person’s finances or technology. It preserves independence by making safer choices easier under pressure. The older adult should remain central to every decision.

Choose a convenient week and keep each session between 30 and 45 minutes. Bring:

• the phones and devices normally used
• recent bank and card statements
• a notebook or printed worksheet
• official contact details for banks and service providers
• the names of two trusted family members or friends

Do not ask anyone to reveal passwords. The goal is safer recovery, not unnecessary sharing.

Day One: Create a shame-free family agreement

Begin with the most important protection: the freedom to speak.

Scammers benefit when a victim feels embarrassed or fears losing independence. A family plan fails when someone hides suspicious contact to avoid criticism.

Each person should agree to these statements:

• Anyone can be deceived by a well-prepared scam.
• No one will be mocked for answering, clicking, paying, or nearly paying.
• Reporting quickly is more important than defending a decision.
• Pausing a payment is responsible, not rude.
• The same rules apply to older and younger family members.

The FTC’s Pass It On approach encourages families to begin with older adults’ experience. Ask what scams they have already recognised and avoided.

Choose two trusted contacts. One should be the main person called during uncertainty; the other is the backup when the first is unavailable.

“In this family, no one gets into trouble for telling us about a suspicious call. We would rather hear about it early than discover it after the scammer has more time.”

Day One result: Write the two trusted names and numbers at the top of the family plan.

Day Two: Build identity and call-back rules

A familiar voice, number, logo, photograph, or caller ID is not proof of identity.

Create a private family safe word for AI voice scams. It should not be a birthday, pet name, address, school, or phrase visible on social media.

Then create the stronger rule:

The safe word helps confirm family. The call-back rule also protects against fake banks, police, couriers, advisers, technical support, and government impersonators.

Practise this script:

“I do not make decisions during incoming calls. I will end this conversation and contact the person or organisation myself.”

Save complete numbers, including international codes for relatives living abroad. Create a small contact card beside the main telephone.

Read the warning signs of an AI emergency call together and agree that urgency, secrecy, and blocked verification always trigger the call-back rule.

Day Two result: A safe word, two trusted family numbers, and one call-ending script.

Day Three: Strengthen banking and payment safeguards

Contact financial providers through official channels and ask which protections are available.

• transaction alerts for transfers, card purchases, withdrawals, and new payees
• lower daily transfer or cash-withdrawal limits where appropriate
• extra verification for unusual transactions
• a trusted contact for brokerage or other eligible accounts
• procedures for reporting suspected elder financial exploitation
• account notifications sent to the customer in an accessible format

The CFPB recommends planning with trusted contacts and financial institutions. A brokerage trusted contact does not normally access the money but may be contacted when exploitation is suspected.

Create a family payment rule:

“No unexpected request receives money through gift cards, cryptocurrency, wire transfer, payment app, cash, gold, or courier collection. New investments and unusual transfers wait 48 hours and are reviewed by a second trusted person.”

Review how investment scams target retirees and what banks will never ask by phone.

Do not add a joint owner, power of attorney, or signer casually. Obtain independent advice when decision-making support is needed.

Day Three result: Active alerts, agreed payment limits, trusted-contact information, and a 48-hour rule.

Day Four: Protect email and important accounts

Email deserves special protection because it can be used to reset many other accounts.

The UK National Cyber Security Centre recommends a strong, separate email password, current software, two-step verification, password-management tools, and backups.

Complete these tasks:

1. Give email a unique password that is not used elsewhere.
2. Turn on two-step verification for email, banking, shopping, social media and other important accounts.
3. Use a reputable password manager when practical.
4. Review recovery telephone numbers and email addresses.
5. Remove unknown devices and active sessions.
6. Check email forwarding rules for unfamiliar addresses.
7. Replace reused passwords, beginning with the most important accounts.

Never share a one-time security code with someone who called or messaged unexpectedly. A genuine code may be the final key a criminal needs to enter an account or approve a payment.

Choose a system the older adult can use confidently. A password manager, private-device browser storage, or written passwords kept securely away from the computer may be safer than repeated weak passwords.

Day Four result: A protected email account, stronger recovery settings, and two-step verification on priority accounts.

Day Five: Secure phones, computers and messages

Update every commonly used phone, tablet, and computer. Turn on automatic operating-system and application updates where available.

Then:

• use a non-obvious device PIN, fingerprint, or face recognition
• turn on spam-call and junk-message filtering
• remove unused remote-access and screen-sharing applications
• review application permissions
• back up photographs, contacts, and important documents
• bookmark genuine bank, courier, retailer, and government websites
• save one trusted technical-support contact

The NCSC explains that updates contain important security fixes, while backups protect important information if a device is lost, damaged, infected, or locked.

Place a simple notice near the computer:

Read how to recognise fake technical support calls and how QR code and delivery-text scams target older adults.

Day Five result: Updated devices, backups, filtering, safer permissions, and verified support contacts.

Day Six: Practise realistic scam scenarios

Practise the response before it is needed. One family member can play the caller while another calmly ends the contact.

Scenario 1: The family emergency

“Grandma, I have been arrested. Please do not tell Mum. I need bail money now.”

Response: Ask for the safe word, end the call, and contact the relative through the saved number.

Scenario 2: The bank fraud department

“Your account is under attack. Read the code we sent and move your savings to a protected account.”

Response: Share nothing. End the call and contact the bank through the card or official app.

Scenario 3: The failed delivery

“Your parcel will be returned today. Pay $1.79 through this link.”

Response: Do not click. Open the genuine retailer or courier account separately.

Scenario 4: The investment opportunity

“This AI trading system is available to only ten more investors. Deposit today to lock in the return.”

Response: End contact, wait 48 hours, verify the professional and investment, and involve the second trusted person.

After each scenario, ask:

• What created pressure?
• What information appeared convincing?
• Which family rule stopped the scam?
• Who would be called next?

Day Six result: Four practised responses that feel familiar before a real emergency.

Day Seven: Write the emergency and monthly plan

Bring the week together on one page.

At the top, write:

PAUSE. END CONTACT. VERIFY INDEPENDENTLY. PROTECT. REPORT.

Then add:

• the two trusted family contacts
• the family safe word
• the bank and card fraud numbers
• the trusted technical-support contact
• the rule for new investments and unusual payments
• the country’s main fraud-reporting routes
• where evidence and incident notes will be kept

Create an incident record for the date, caller, claimed organisation, number, website, payment method, information shared, and action taken.

United States reporting routes

Contact the payment provider first. Report fraud through ReportFraud.ftc.gov and internet-enabled crime through IC3. Locate Adult Protective Services through 800-677-1116. The National Elder Fraud Hotline is 1-833-FRAUD-11.

United Kingdom reporting routes

Contact the bank immediately, then report fraud through Report Fraud. Follow Police Scotland guidance where applicable. Suspicious texts can usually be forwarded to 7726, and suspicious emails can be sent to the National Cyber Security Centre’s reporting service.

European reporting routes

Contact the bank or payment provider, national police or cybercrime service, and the relevant national financial regulator. Use official national or EU sources rather than contact information supplied by the suspected scammer.

Set a monthly twenty-minute review

Once a month, check:

• unfamiliar payments or new payees
• security alerts and unrecognised account sessions
• device and app updates
• new software or browser extensions
• recent suspicious calls, texts, emails, or online relationships
• whether trusted numbers and reporting contacts remain current

The CFPB describes a practical protection cycle of preventing, recognising, recording, and reporting financial abuse. A monthly review helps the family notice changes before they become a crisis.

Day Seven result: One written plan and a recurring monthly review date.

Adapting the plan for different needs

For an older adult living alone

Use two trusted contacts, not one. Arrange a regular check-in and identify someone nearby who can visit when a device must be disconnected or a bank branch needs to be contacted.

For hearing or vision difficulties

Use large-print cards, high-contrast text, captioned calls, and accessible bank alerts. Do not rely on recognising a voice.

For mild memory difficulties

Reduce the plan to three instructions displayed near the phone:

Do not send money during an incoming call. Do not share a code. Call the trusted person.

Repeat the same language during practice so it becomes familiar.

For significant cognitive impairment

Families may need medical, legal, financial, and safeguarding advice. Any formal authority should be established lawfully and used in the older adult’s interests.

For families living in different countries

Save complete international numbers, agree which person responds first, keep a shared list of expected visits and major purchases, and identify one trusted local contact.

One-page family scam-protection checklist

• We have two trusted contacts.
• We have a private family safe word.
• We end unexpected calls and verify independently.
• We never move money to a “safe account.”
• We never share passwords, PINs, card security codes, or one-time codes.
• New investments and unusual payments wait 48 hours.
• Bank and card alerts are active.
• Email has a unique password and two-step verification.
• Phones and computers update automatically.
• Important photographs and documents are backed up.
• We do not call numbers shown in pop-ups or suspicious messages.
• We know what to do after clicking, paying, or granting remote access.
• Reporting numbers are written down.
• No family member will be shamed for reporting a mistake.
• We review the plan every month.

Frequently asked questions

Can a family really complete this plan in seven days?

Yes. Each day focuses on one manageable area. The goal is not perfect security. It is a clear improvement in verification, account protection, device safety, and emergency response.

Should adult children have their parents’ passwords?

Not automatically. Unnecessary sharing creates new risk. Use secure recovery options, password managers, trusted contacts, and lawful authority where needed. Any access arrangement should respect privacy and capacity.

What is the most important family scam rule?

No important decision is made during unexpected contact. End the call or message and reconnect through a trusted route chosen independently.

Is a family safe word enough?

No. It helps verify relatives during urgent calls, but it does not protect against every scam. Combine it with call-back rules, payment delays, account safeguards, and independent verification.

How often should the plan be reviewed?

Review it briefly every month and fully every six months. Update telephone numbers, trusted contacts, bank procedures, devices, reporting routes, and the safe word when necessary.

What if an older parent refuses to discuss scams?

Begin with a scam that targeted someone younger or with a rule the whole family will follow. Ask for their experience and advice rather than presenting the conversation as a test of competence.

What should happen first after money is sent?

Contact the bank, card issuer, payment platform, wire service, gift-card company, or cryptocurrency exchange immediately. Speed may improve the chance of stopping or tracing the transaction.

What if the family suspects exploitation by someone known to the older adult?

Preserve evidence and seek help promptly. Depending on the situation and country, this may include the financial institution, adult safeguarding services, police, legal aid, a regulator, or another qualified professional.

A safer family is a connected family

Scam protection is not created by fear.

It is created by preparation.

One family conversation makes disclosure easier.

One safe word interrupts a cloned emergency.

One call-back rule defeats a false identity.

One payment delay creates time to think.

One protected email account blocks access to many others.

One written response plan prevents panic from choosing the next step.

After seven days, the family may not know every scam, but it will know what to do when something unexpected demands money, information, access, or secrecy.

Use the Complete Seven-Day Family Guide

My full-color guide, Protect Aging Parents from AI Voice Clones, Fake Bank Calls and Online Scams, includes realistic scenarios, ready-to-use scripts, printable checklists, emergency-response pages, and the complete 7-Day Family Protection Plan.

View the Family Guide

About the author

Michael Onoja is a Microsoft MVP, technology leader, software engineer, researcher, and published author. He writes about AI safety, digital trust, cybersecurity, and practical ways families can protect one another from emerging online threats.

Start with the full guide to protecting aging parents from AI voice scams, then review how caller ID spoofing makes fake bank calls look real.

This article provides general educational information and is not legal, financial, medical, technical, safeguarding, or law-enforcement advice. Account features, reporting routes, and legal arrangements can change. Verify important information through official organisations and qualified professionals.

Tags:Aging ParentsElder FraudFamily Scam ProtectionOnline SafetyScam Prevention