My Parent Fell for a Phishing Scam: What to Do Right Now
You just found out your mom or dad clicked a fake link, shared their password, or sent money to a scammer. Your heart sinks. Take a breath. Here's exactly what to do in the next 24 hours to minimize the damage and protect them going forward.
First: Assess the Situation
Before taking action, you need to understand what happened. Gently ask your parent:
- What did they click on or respond to?
- What information did they share? (Passwords, Social Security number, banking details, credit card numbers)
- Did they send any money? How? (Wire transfer, gift cards, Zelle, crypto)
- Did they download anything or give remote access to their computer?
- When did this happen?
Keep your tone calm and supportive. They're likely already embarrassed and scared. Blame won't help—action will.
Immediate Steps Based on What Was Compromised
1 If They Shared Banking Information
Call the bank immediately. Use the number on the back of their debit/credit card, not any number from the suspicious email or call.
- Report the fraud and ask to freeze the account
- Request new cards with new numbers
- Ask about reversing any unauthorized transactions
- Set up fraud alerts on the account
Most banks have 24/7 fraud hotlines. Don't wait until morning.
2 If They Sent Money
The recovery options depend on how the money was sent:
- Wire transfer: Contact the bank immediately. Wires can sometimes be recalled within 24-48 hours.
- Gift cards: Call the gift card company (Apple, Google, Amazon). While recovery is rare, reporting helps law enforcement track scammers.
- Zelle/Venmo/CashApp: Report through the app and their bank. Recovery is difficult but not impossible.
- Cryptocurrency: Unfortunately, crypto transactions are nearly impossible to reverse. Report to the exchange if applicable.
3 If They Shared Login Credentials
Change passwords immediately, starting with the most critical accounts:
- Email (this is the master key to everything else)
- Banking and financial accounts
- Social Security / Government portals
- Amazon, PayPal, and shopping sites with saved payment info
- Social media accounts
Use a different device if possible—the compromised computer may have malware.
Enable two-factor authentication on all accounts that support it.
4 If They Shared Their Social Security Number
This requires aggressive action to prevent identity theft:
- Freeze credit at all three bureaus:
- Equifax: 1-800-685-1111 or equifax.com/personal/credit-report-services/credit-freeze
- Experian: 1-888-397-3742 or experian.com/freeze
- TransUnion: 1-888-909-8872 or transunion.com/credit-freeze
- Report to the IRS: File Form 14039 (Identity Theft Affidavit) to prevent tax fraud
- Report to Social Security Administration: oig.ssa.gov/report
- Consider an Identity Theft Protection service for monitoring
5 If They Gave Remote Computer Access
If your parent let someone remotely control their computer (common in tech support scams):
- Disconnect from the internet immediately (unplug ethernet or turn off WiFi)
- Don't use the computer until it's been cleaned
- Have a professional check for malware, keyloggers, and remote access tools
- Change all passwords from a DIFFERENT device
- Consider a full factory reset if you're not sure it's clean
Report the Scam
Reporting helps authorities track and stop scammers. It also creates documentation if you need to dispute charges later.
Where to Report
- FTC: reportfraud.ftc.gov
- FBI Internet Crime Complaint Center: ic3.gov
- Local police: File a report for your records
- State Attorney General: naag.org/find-my-ag
- AARP Fraud Watch Network: 1-877-908-3360
The Next 30 Days: Ongoing Monitoring
The immediate crisis may be over, but you'll need to stay vigilant:
- Monitor bank and credit card statements daily for the next month
- Check credit reports at annualcreditreport.com (free weekly reports are available)
- Watch for follow-up scams—scammers often sell victim lists to other criminals, or call back pretending to help "recover" the lost money
- Be alert to unusual mail—new credit cards or account statements they didn't request
Preventing Future Scams
Once the immediate crisis is handled, take steps to prevent this from happening again:
Install Automatic Protection
The best defense is blocking scam sites before your parent can interact with them. Browser extensions that maintain blocklists of known phishing sites work silently in the background, requiring no action from your parent.
Simplify Their Setup
- Use a password manager so they don't reuse passwords
- Set their browser to block popups
- Enable automatic updates for their operating system and browser
- Remove unnecessary browser extensions that could be vectors for attack
Establish Verification Habits
- Create a family code word for emergency calls
- Agree to a "24-hour rule" before any financial decision from an unsolicited contact
- Post legitimate phone numbers for their bank and Medicare near the computer
Don't Let It Happen Again
SafeBrowse360 automatically blocks phishing sites, fake bank logins, and tech support scams before they can load. Install it on your parent's browser for invisible, always-on protection.
Add to Chrome - FreeThe Emotional Side: Helping Your Parent Cope
This is important
Scam victims often experience shame, depression, anxiety, and loss of confidence. These emotional wounds can be worse than the financial loss. Your parent needs support, not judgment.
What to say:
- "This wasn't your fault. These criminals are professionals who do this all day."
- "Even tech experts fall for these scams. You're not stupid."
- "I'm glad you told me. We can fix this together."
- "This doesn't change anything about how I see you."
What NOT to say:
- "How could you fall for that?"
- "I told you to be careful."
- "You should have known better."
"My dad didn't tell anyone about the scam for three months because he was so ashamed. By then, there was nothing we could do. I wish he'd felt safe enough to tell us right away."
Consider connecting your parent with support resources:
- AARP Fraud Watch Network Helpline: 1-877-908-3360 (trained volunteers who have been scammed themselves)
- National Elder Fraud Hotline: 1-833-FRAUD-11
You're Doing the Right Thing
The fact that you're reading this article means you're taking action to help. That's what matters. Scammers are sophisticated criminals who steal billions every year from smart, capable people.
Work through the steps above, focus on what can be recovered, put protections in place for the future, and most importantly—be there for your parent. They need you right now.
You've got this.