Back to Home

My Parent Fell for a Phishing Scam: What to Do Right Now

You just found out your mom or dad clicked a fake link, shared their password, or sent money to a scammer. Your heart sinks. Take a breath. Here's exactly what to do in the next 24 hours to minimize the damage and protect them going forward.

Time matters. Some actions, like stopping wire transfers or freezing credit, are only possible within a short window. Work through the steps below as quickly as you can.

First: Assess the Situation

Before taking action, you need to understand what happened. Gently ask your parent:

Keep your tone calm and supportive. They're likely already embarrassed and scared. Blame won't help—action will.

Immediate Steps Based on What Was Compromised

1 If They Shared Banking Information

Call the bank immediately. Use the number on the back of their debit/credit card, not any number from the suspicious email or call.

  • Report the fraud and ask to freeze the account
  • Request new cards with new numbers
  • Ask about reversing any unauthorized transactions
  • Set up fraud alerts on the account

Most banks have 24/7 fraud hotlines. Don't wait until morning.

2 If They Sent Money

The recovery options depend on how the money was sent:

  • Wire transfer: Contact the bank immediately. Wires can sometimes be recalled within 24-48 hours.
  • Gift cards: Call the gift card company (Apple, Google, Amazon). While recovery is rare, reporting helps law enforcement track scammers.
  • Zelle/Venmo/CashApp: Report through the app and their bank. Recovery is difficult but not impossible.
  • Cryptocurrency: Unfortunately, crypto transactions are nearly impossible to reverse. Report to the exchange if applicable.

3 If They Shared Login Credentials

Change passwords immediately, starting with the most critical accounts:

  1. Email (this is the master key to everything else)
  2. Banking and financial accounts
  3. Social Security / Government portals
  4. Amazon, PayPal, and shopping sites with saved payment info
  5. Social media accounts

Use a different device if possible—the compromised computer may have malware.

Enable two-factor authentication on all accounts that support it.

4 If They Shared Their Social Security Number

This requires aggressive action to prevent identity theft:

  • Freeze credit at all three bureaus:
    • Equifax: 1-800-685-1111 or equifax.com/personal/credit-report-services/credit-freeze
    • Experian: 1-888-397-3742 or experian.com/freeze
    • TransUnion: 1-888-909-8872 or transunion.com/credit-freeze
  • Report to the IRS: File Form 14039 (Identity Theft Affidavit) to prevent tax fraud
  • Report to Social Security Administration: oig.ssa.gov/report
  • Consider an Identity Theft Protection service for monitoring

5 If They Gave Remote Computer Access

If your parent let someone remotely control their computer (common in tech support scams):

  • Disconnect from the internet immediately (unplug ethernet or turn off WiFi)
  • Don't use the computer until it's been cleaned
  • Have a professional check for malware, keyloggers, and remote access tools
  • Change all passwords from a DIFFERENT device
  • Consider a full factory reset if you're not sure it's clean

Report the Scam

Reporting helps authorities track and stop scammers. It also creates documentation if you need to dispute charges later.

Where to Report

  • FTC: reportfraud.ftc.gov
  • FBI Internet Crime Complaint Center: ic3.gov
  • Local police: File a report for your records
  • State Attorney General: naag.org/find-my-ag
  • AARP Fraud Watch Network: 1-877-908-3360

The Next 30 Days: Ongoing Monitoring

The immediate crisis may be over, but you'll need to stay vigilant:

Preventing Future Scams

Once the immediate crisis is handled, take steps to prevent this from happening again:

Install Automatic Protection

The best defense is blocking scam sites before your parent can interact with them. Browser extensions that maintain blocklists of known phishing sites work silently in the background, requiring no action from your parent.

Simplify Their Setup

Establish Verification Habits

Don't Let It Happen Again

SafeBrowse360 automatically blocks phishing sites, fake bank logins, and tech support scams before they can load. Install it on your parent's browser for invisible, always-on protection.

Add to Chrome - Free

The Emotional Side: Helping Your Parent Cope

This is important

Scam victims often experience shame, depression, anxiety, and loss of confidence. These emotional wounds can be worse than the financial loss. Your parent needs support, not judgment.

What to say:

What NOT to say:

"My dad didn't tell anyone about the scam for three months because he was so ashamed. By then, there was nothing we could do. I wish he'd felt safe enough to tell us right away."

Consider connecting your parent with support resources:

You're Doing the Right Thing

The fact that you're reading this article means you're taking action to help. That's what matters. Scammers are sophisticated criminals who steal billions every year from smart, capable people.

Work through the steps above, focus on what can be recovered, put protections in place for the future, and most importantly—be there for your parent. They need you right now.

You've got this.