What to Do When a Parent Has Called a Scammer's Number

You get a call from a sibling, or you find out during a regular visit. Your parent has been on the phone with someone they thought was their bank. They've given a code from a text message. Or they've given their Social Security number. Or — in the worst version of this — they've wired money. Whatever happened, the moment of finding out is hard, and the next hour matters more than the next week.

Below is the order of operations. The order matters because the things that protect accounts are time-sensitive, and the conversation with your parent is not. Take care of the accounts first; have the conversation second.

The first thirty minutes

Sit down with your parent in person if possible. If not, get on a video call where you can both see each other.

Ask, calmly and without judgment, exactly what was shared. Specific information matters: the name and number that called, what was given to them, whether any money was sent. Write it down. Do not lead with "did you give them your password?" Lead with "let's figure this out together."

Many parents in this situation are deeply embarrassed and will minimize what they shared. Ask twice. The second answer is usually more complete than the first.

What to protect, in order

If a six-digit text-message code was shared with the caller, that almost certainly means the caller was trying to break into a specific account at that moment. Move quickly.

The bank. Call the bank's fraud line using the number on the back of your parent's card, not any number the scammer provided. Tell them what happened. Ask them to: freeze unusual transactions for 72 hours, change the online banking password, change all linked phone numbers, review any Zelle or wire transactions from the last 24 hours, and put a verbal-passphrase requirement on the account if they offer one.

The email account. Email is the keys to every other account. Change the password. Turn on or re-confirm two-factor authentication (covered in our 2FA piece). Review the "recent sign-in activity" section in the email account's security settings and sign out any unknown devices.

The Apple ID or Google Account. Same procedure: change password, review devices, sign out unknown ones.

The credit bureaus. Place a fraud alert with one of the three (Equifax, Experian, TransUnion); they're required to notify the other two. The alert is free and lasts a year. Consider a credit freeze, which is more protective but slightly more inconvenient to manage. Both can be done online from your phone in about ten minutes.

The Social Security Administration if a Social Security number was shared. Their fraud reporting line is 1-800-269-0271.

If money was sent

The recovery options depend on how the money moved.

Wire transfer: very difficult to recover. Call the bank immediately. Some banks can recall a wire within a few hours if the receiving bank hasn't released the funds. After that window, recovery is rare.

Zelle: also very difficult. Zelle is designed to be irreversible. Call the bank anyway. Some banks have begun offering scam reimbursement for elderly victims under specific programs.

Gift cards: occasionally recoverable if the cards haven't been used yet. Call the gift card issuer (Apple, Amazon, Target — number on the back of the card) and report the cards as part of a scam. They sometimes freeze the funds.

Cash mailed: not recoverable unless the package can be intercepted. Contact USPS Postal Inspectors at 1-877-876-2455 if it might still be in transit.

Cryptocurrency: not recoverable. The whole point of cryptocurrency is that transactions are irreversible.

For everything, file a report with the FBI's Internet Crime Complaint Center at ic3.gov and the FTC at reportfraud.ftc.gov. The chance of recovery through law enforcement is low; the reports help build cases.

The conversation that comes next

Once the accounts are protected, the conversation is its own kind of emergency. The most important thing to convey is that your parent is not stupid and not alone. Scammers target older adults specifically because the techniques work; falling for one is not evidence of decline.

What helps:

Frame it as a system problem, not a personal one. "These scams are designed to fool intelligent people. Falling for one means you ran into someone who's professionally good at this."

Don't take phones or accounts away as the first response. The instinct is protective; the impact is to remove your parent's independence at exactly the moment they need to feel less diminished, not more.

Talk about a specific change that's protective. Maybe: "Let's set up a rule that any time anyone calls about money, you hang up and call me before doing anything. No matter who they say they are." A specific protocol is easier to follow than a vague "be more careful."

Tell them you love them. The shame after one of these calls is usually larger than the financial damage.

The follow-up over the next month

Watch the accounts daily for the first week, weekly after that, for the first month. Set up transaction notifications on every bank account, brokerage account, and credit card (covered in our banking piece). Scammers sometimes circle back weeks later to test whether the protections were thorough.

Consider whether the patterns that allowed the scam are likely to recur. Was it a single incident or part of a longer pattern of vulnerability? The answer guides what changes are appropriate — additional protections from our dementia piece if cognitive decline is part of the picture; simplified setup if not.

And for you

Adult children in this situation often carry guilt — the "I should have known" or "I should have set this up better." Some of that is appropriate accountability; most of it is not. The scammers are professionals. Your parent is a person who was targeted by professionals. The next month is a chance to put better protections in place. The previous month is over.

One last thing. If your parent will let you, tell one other person — a sibling, another adult child, a trusted friend. The burden of being the only one who knows is real. Sharing it makes the next few weeks easier on everyone.

Written by David Chen. Last verified 19 June 2026.