Be Safe Online. Family internet safety guidance
An older person in an armchair under a warm reading lamp, phone face-down on the side table beside a cup of tea

Online safety for seniors: the scam scripts aimed at older adults, and a guide to shutting them down

Last updated · 18 July 2026 Large-print one-pager included

Online safety for seniors is not really a technology subject. Almost every case begins with a message that looked ordinary and a script that has been rehearsed thousands of times, and there are only about five scripts.

There is a version of this subject that consists of being told to be careful, and it helps nobody. The useful version is narrower: learn what the opening thirty seconds of each script sounds like, agree one rule with your family in advance, and know which phone call to make first if money has already left. That is the whole of online safety for seniors in practice, and the scams aimed at older adults are a smaller set than their variety suggests.

Why online safety for seniors is a numbers problem, not a competence one

The reporting makes the scale plain. In its most recent annual report, the FBI’s Internet Crime Complaint Centre recorded more than 201,000 complaints from victims aged sixty and over, with losses more than $7.7 billion (59% higher than 2024). The average reported loss was more than $38,000, and at least 12,400 people lost at least a hundred thousand dollars each.

Two details in that data matter more than the headline. The most common complaint type was phishing and spoofing, more than 48,000 complaints (ordinary messages pretending to be someone), while the largest losses came from investment schemes, more than $3.5 billion. In other words the volume arrives by message and the damage arrives through investment, and those need different defences.

A guide to the five scripts

Nearly everything reduces to five openings. The grandchild in trouble: a panicked voice, then a lawyer or officer who takes over the line, then a courier for cash. The technical support call: your computer is infected, let me connect to it. The prize or refund: money is owed to you, confirm your details to release it. The relationship: weeks of warmth, then a crisis abroad that needs a transfer. And the investment: a friendly introduction, a platform that shows profits going up, and a withdrawal that never completes.

Once a script has a name it loses most of its power, because the recognition arrives earlier in the call. This is why a guide is more use than a warning: a warning tells you to be suspicious, a guide tells you what you are listening for.

What older adults are asked to do, and why it works

Look past the story and every one of these scripts asks for the same three things: act now, keep it quiet, and move money by a route that cannot be reversed. Gift cards, cryptocurrency, couriered cash and instant transfers all share one property, and it is not convenience.

The pressure is not incidental either — it is the mechanism. Urgency prevents the second thought, and secrecy prevents the second opinion. That is why the scams aimed at older adults so often involve an instruction not to tell family: the script knows its weakest point is another person in the room.

The scams that actually arrive, in order of how often

By volume it is messages: a text about a parcel, an email about an account, a call about a payment. These are cheap to send by the million and they are the daily background noise. They are also the easiest to defeat, because the check is always the same: go to the company yourself, never through anything they sent you.

By damage it is the slow ones. Investment and relationship scams unfold over weeks and involve a real relationship with a person, which is what makes them so hard to interrupt from outside. If you are reading this about someone else and not yourself, that is the category to worry about, and the tell is a new contact who has become important quickly and whose plans always need money.

The same verification habits work on the websites these scripts send people to; that side is covered in more detail on the scam websites page.

The first hour, if money has already moved

  1. Call your bank or card issuer, on the number from your card. Say the words “I think I have been defrauded”. That phrase starts the right process.
  2. Do not delete anything. Keep the texts, the emails, the number that called, the name that was used.
  3. Change the password on any account you gave details for, and on your email before the others.
  4. Report it to your national fraud body. It rarely recovers the payment; it is how the operation gets stopped.
  5. Tell one person in your family. The scripts rely on shame to buy time for the second attempt, which is common.

If you are reading this for a parent rather than yourself

Two things help more than warnings do. First, agree the hang-up-and-call-back rule as a household rule, not an instruction to one person; it lands differently when it applies to everyone. Second, make sure the response to a mistake is not a loss of independence, because the fear of being treated as incapable is precisely what keeps these cases quiet for weeks.

The administrative side, what a stolen set of details is actually used for, is on the identity theft page. Practical setup helps too: transaction alerts on the account, a card instead of transfers for anything unfamiliar, and a named person to call before money moves. None of that requires anyone to become technical, which is the part most guidance to online safety for seniors gets backwards.

Questions about scams aimed at older adults

Is it embarrassing to have fallen for one of these?

It should not be, and the numbers make the case: more than 201,000 complaints from people aged sixty and over reached the FBI’s reporting centre in a single year. These scripts are written and rehearsed by people who do this full time, and they are tested on thousands of calls. Being caught by a professional is not a character flaw.

How do I check whether a call is really from my bank?

Hang up and call the number on your card or statement. Never the number the caller gives you, never a number in the message, and never by pressing a key to be transferred; that keeps you on their line. A real bank will not object to being called back; a scammer will find a reason why you cannot.

They knew my name and my address. Doesn’t that prove it is genuine?

No. Names, addresses and even the last four digits of a card circulate on lists after any data breach, and the opening of the script is designed to spend that information for credibility. Knowing something about you is the cheapest part of the whole operation.

What if the message came from my grandchild’s actual account?

Then the account has probably been taken over, which is common and is why the check is a voice, not a channel. Call the person on the number you already have. If the reply to that suggestion is urgency or secrecy, you have your answer.

Should I stop using the internet for banking altogether?

That trade rarely pays. Withdrawing from online services does not remove the phone calls and letters, and it costs you the account alerts that catch fraud early. Keeping a card with a dispute process and turning on transaction notifications does more than avoidance does.

Can I get my money back?

Sometimes, and speed decides it. A card payment usually has a dispute route; a bank transfer often does not, though banks in several countries now operate reimbursement schemes for authorised push-payment fraud. Call the bank before you do anything else: the first hour is worth more than a complete account written the next day.

Where can I report it?

To your national fraud reporting body: in Canada the Canadian Anti-Fraud Centre, in the United States the FBI’s complaint centre, and in most other countries a consumer-protection or cybercrime agency. Reporting rarely recovers a single payment, and it is still what builds the case against the operation.

Sources