How Online Scams Actually Reach Your Parent
Older adults spot scams better than younger adults — and lose far more when one lands. Here's why, and what actually changes the odds.
Start with a number that should reset how you think about this.
In 2025, Americans aged 60 and over filed 201,266 complaints with the FBI's Internet Crime Complaint Center and reported losing $7.75 billion. That's a 59% jump in losses over the prior year, against a 37% rise in the number of victims — meaning the losses grew considerably faster than the number of people affected. The average reported loss was around $38,500. More than 12,400 older adults reported losing over $100,000 each.
And here's the part that reframes everything: adults 60 and over filed about one in five complaints, but accounted for roughly 37% of all reported losses across every age group.
Now hold that against a finding from the Federal Trade Commission that almost nobody mentions. Older adults report losing money to fraud at a lower rate than younger adults do. They've been finding this year after year. The most plausible reading is that older adults are, on average, somewhat better at recognizing a scam and walking away.
Both things are true at once. Your parent is more likely to spot it and hang up. And if one does get through, it takes vastly more.
That's not a story about gullibility. It's a story about exposure and stakes — a lifetime of savings sitting in accounts that can be moved in an afternoon, and a class of attacks specifically engineered to reach the people holding them.
The mental model that gets families into trouble
Most people picture online fraud as a badly-spelled email from a foreign prince. That image is twenty years old and it's actively harmful now, because it teaches a detection method — look for the mistakes — that no longer works.
Generative AI removed the grammar errors. It removed the awkward phrasing, the wrong logos, the tell-tale formatting. It also removed the language barrier that once kept a lot of this offshore and clumsy. The FBI's 2025 report included a dedicated section on AI for the first time; older adults filed more than 3,100 complaints specifically referencing AI, with reported losses exceeding $352 million — and the Bureau notes plainly that most victims never realized AI was involved at all, which means that figure understates it by an unknown margin.
So the old heuristic is gone. Something else has to replace it, and it isn't sharper eyes.
The four doors
Almost everything that reaches your parent comes through one of four entry points. Knowing which one matters, because they demand different responses.
The pop-up. A window appears — usually while doing something entirely ordinary — announcing that the computer is infected, the accounts are compromised, and here is a number to call. It's designed to look like it came from Microsoft or Apple. It's designed to be hard to close. And it's designed to convert a screen into a phone call, because the phone is where the actual work happens.
The phone call. Still the most productive channel for the biggest losses. In FTC data on older adults who lost $10,000 or more to business or government imposter scams, 41% said the contact began with a phone call — roughly triple the share that began with an email. Caller ID is trivially spoofed. The number on the screen means nothing.
The text. A missed delivery. An unpaid toll. A fraud alert from a bank. Low effort, sent at enormous volume, and mostly a filter — the goal is to find the small percentage who reply, then move them to a call.
The relationship. The slowest and the most expensive. A friendly stranger on Facebook, a dating profile, a WhatsApp message that arrived at the wrong number and turned into a months-long conversation. Nothing is asked for at first. This is the category that produces the six-figure losses — investment fraud was the single largest loss category for older adults in 2025 at $3.52 billion, and much of it is romance and confidence fraud wearing a trading-platform costume.
Notice how few of these are "the internet" in the way families imagine. Three of the four end up on a telephone with a human being talking to your parent in real time.
Why they work: the vigilance trap
The cruelest design feature in modern fraud is that it exploits caution rather than carelessness.
The FTC named this directly in a 2025 analysis: fake security alerts prey on older adults' vigilance about protecting their own money. Sit with that for a second. The pitch isn't you've won something. The pitch is your accounts are under attack and you need to act to protect them. It recruits exactly the instinct that's supposed to keep people safe.
Which means the person most likely to be caught by the biggest version of this is not the careless parent. It's the careful one — the one who checks her statements, who worries about identity theft, who takes it seriously when someone official-sounding says her savings are at risk.
Three mechanics do the rest:
Urgency. Every version compresses the timeline so there's no interval in which a second opinion can form.
Isolation. They keep the person on the phone. For hours. Sometimes across days. Not out of thoroughness — because a continuous call is a sealed room. Nobody can interrupt, nobody can be consulted, and the frame the scammer built cannot be tested against anyone else's judgment.
Secrecy. They instruct the target not to tell family, and they give a reason that sounds responsible: the investigation is confidential, a relative may be involved, the bank has insiders. This is the single most reliable tell in all of fraud, and it's worth teaching as a standalone rule. No legitimate bank, agency, or investigator has ever needed you to keep a transaction secret from your own family.
What actually reduces risk
Not scam awareness. This is worth saying bluntly, because the default family response is to forward articles and repeat warnings, and the evidence for that approach is thin. Everyone already knows scams exist. That knowledge doesn't engage during a live call precisely because the call is engineered to bypass reflection. Repeated warnings also carry a real cost: they read as we think you'll be fooled, which makes a parent measurably less likely to tell you when something has gone wrong. And silence is the whole ballgame — the FTC's own research suggests fewer than one in twenty fraud victims ever report to a government agency.
What works is structural.
One rule, memorized, that covers most of it: hang up and call back on a number you looked up yourself. Not the number they gave you. Not the number on the caller ID. Not the number in the email. The number on the back of the card, or on the statement, or on the institution's actual website. This single habit defeats nearly every impersonation scam, and it requires no ability to judge whether the caller sounds legitimate — which is fortunate, because they sound extremely legitimate.
A second rule for the money: nobody legitimate asks for gift cards, cryptocurrency, wire transfers to a "safe account," cash by courier, or gold. The government has never once needed any of these. Payment method is the cleanest signal available, and it's the last checkpoint before the money becomes unrecoverable. In FTC reporting on older adults with losses over $10,000 to imposter scams, cryptocurrency was the most common payment method — and among the very largest losses, bank transfers, with a small but real share of cases where the victim was directed to buy gold.
Make a second person available and easy to reach. Isolation is the mechanic that does the most damage, so the countermeasure is a person, not a filter. Someone your parent can call, without embarrassment, at nine at night, to say does this sound right to you? The value isn't expertise. It's interrupting a sealed room. This is the highest-leverage thing a family can build, and it's the one almost nobody builds deliberately.
Put eyes on the money regularly. Not control — visibility. A monthly look at recurring charges, utilities, and statements. Most of what this catches isn't dramatic fraud; it's the doubled subscription, the service that quietly re-rated, the charge nobody recognizes. But it also shortens the time between a first loss and someone noticing, and in this category that interval is nearly everything.
Handle the technology once, properly. Automatic updates on. Reputable pop-up and call blocking. Remote-access software removed if it's on the machine and nobody can explain why it's there. Multi-factor authentication on the bank and the email. An hour of setup removes a meaningful fraction of the surface area, permanently.
If it has already happened
Move fast on the practical, slowly on the emotional.
Call the institution that moved the money — bank, card issuer, gift card company, crypto exchange — immediately, because reversibility drops sharply with time and some of these have a window measured in hours. Report to ic3.gov and to ReportFraud.ftc.gov. Change the passwords for the bank and the email, in that order, from a device that wasn't involved. If remote-access software was installed, treat the machine as compromised until someone qualified has looked at it.
And then the part that matters more than any of it: do not ask your parent how they didn't see it. Nobody has ever recovered from that sentence. These are full-time professionals running scripts refined across thousands of calls. Say that out loud. What you're protecting isn't the money that's already gone — it's whether you hear about the next one, and shame is the single largest reason people don't tell their families.
Frequently asked questions
Are older adults really more likely to be scammed? Not exactly, and the distinction matters. FTC data has consistently found that older adults report losing money to fraud at a lower rate than younger adults — but when a scam does succeed, the amounts are dramatically larger. The 60+ group filed about 20% of complaints to the FBI in 2025 and accounted for roughly 37% of total reported losses. It's a severity problem more than a susceptibility one.
What's the single most useful thing to teach a parent? Hang up and call back on a number you found yourself. It defeats nearly every impersonation scam, it requires no judgment about whether the caller sounds real, and it's short enough to actually stick.
Should I take over my parent's finances? Rarely the right first move, and often counterproductive — it damages the relationship, removes their engagement with their own money, and frequently relocates the vulnerability rather than removing it. Start with visibility: view access to accounts, a monthly review, alerts on large transactions. Escalate to control only if visibility shows it's needed.
How do I know if my parent is currently being targeted? The behavioral signals are more reliable than the financial ones early on. New secrecy about money or phone calls. Unusual defensiveness about a new friend or advisor. Taking calls in another room. Preoccupation. Scammers instruct people to keep it quiet, so unexplained privacy around money is one of the earliest visible signs.
Ommpo Care watches a parent's recurring bills, utilities, and known charges and surfaces anything new or doubled to the family, and staffs a live line your parent can call before acting on something that doesn't feel right. Plans from $49/month.
This article is general information, not legal or financial advice. If you believe fraud is underway, contact your financial institution, local law enforcement, and report at ic3.gov.
Figures cited: FBI Internet Crime Complaint Center, 2025 Annual Report (released 2026); Federal Trade Commission, Protecting Older Consumers 2024–2025 report to Congress and August 2025 data spotlight on imposter scams.
