Protecting Your Parents Without Taking Over Their Life

Last verified: August 4, 2026

Margaret is 78. She taught high school chemistry for thirty-one years and still does the crossword in pen.

In February she got a call from a man who knew her bank, her branch, and the last four digits of her account. He said there was fraud on her account and he needed to help her move the money somewhere safe while they sorted it out. He stayed on the line with her for forty minutes, kind and patient, walking her through it.

By the time her daughter found out, $31,000 was gone.

Her daughter's first reaction was the one most people have. How did she fall for that?

She didn't fall for anything. She was targeted by someone doing this professionally, using a script refined across thousands of calls, working from data bought for a few dollars. The call was designed by people whose full-time job is defeating exactly the kind of judgment Margaret spent seventy-eight years building.

The short answer

Three things protect elderly parents from online scams better than any amount of warning them to be careful: a rule about phone calls, a PIN on their phone account, and a second set of eyes on large transfers. All three take under an hour total, and none of them require your parent to learn anything technical or hand over control of their finances.

Why telling aging parents to be careful does not work

Here is what your parent is actually up against.

The person calling them has your parent's name, address, bank, and often the last four digits of an account, all purchased from data stolen in breaches your parent had nothing to do with. They call from a number that displays as the bank. They are trained, they are patient, and they run the same script dozens of times a day.

The script works by creating urgency and then offering rescue. Your money is in danger. I am here to help you. Stay on the line with me.

That is not a test of intelligence. It is a test of whether a person can override a lifetime of instinct that says a calm, helpful professional on the phone is probably who they say they are. The same pressure shows up in email phishing, where the message looks official and asks you to act before you think.

Telling your parent to "be careful" gives them nothing to hold onto in that moment. What works is one specific rule they can remember when their heart is pounding.

One: the phone rule

Sit down with your parent and agree on a single sentence.

Your bank will never call you.

Ever. Not about suspicious activity. Not to verify a transfer. Not to help move money somewhere safe. Not to ask for a code that was just texted to them.

If someone calls claiming to be the bank, they hang up and call the number on the back of the card.

That is the entire rule. It works because it does not require any judgment in the moment, which is exactly what the scam is designed to overwhelm. Hanging up breaks the script.

Two things make it stick:

Make it about the caller, not about them. "These people are very good at this, and the only thing that beats them is hanging up" lands better than "don't fall for it."

Give them permission to be rude. A lot of older adults will not hang up on someone who sounds nice, because they were raised not to. Say it explicitly: it is fine to hang up on someone mid-sentence. It is fine to be wrong about it. A real bank will not mind.

Two: the phone account PIN

This is the one almost nobody knows about, and it takes ten minutes.

Someone can call your parent's phone company, claim to be them, and have their phone number moved to a different device. It is called a SIM swap. Once they have the number, every verification code your parent's bank sends goes to the criminal instead.

They do not need your parent's phone. They need a busy employee at a call center.

The fix: call the carrier and ask them to add a port-out PIN or account PIN to the line. Every major carrier offers it. It is free. Nothing can be changed on the account without that PIN.

Do this one yourself if your parent will let you, with them on the line. It is the single highest-value ten minutes in this article.

Three: a second pair of eyes

The hardest part of this whole subject is that the thing that would help most, someone else watching the money, is also the thing that feels most like losing independence.

The way through it is to make it mutual and small. If your parent is heading toward retirement, the same idea shows up in the pre-retirement cybersecurity checklist: small structures that keep working without constant supervision.

Transaction alerts. Most banks let you set a text or email alert for any transaction over an amount you choose. Set it low, around $200. Your parent gets the alert. If they want, you can be added as a second recipient. This is not you controlling anything. It is a smoke detector.

A trusted contact on the account. Many banks and brokerages let an account holder name a trusted contact. That person cannot move money or make decisions. They can be called if the institution notices something worrying. It costs nothing and it is reversible.

A "call me first" agreement. The simplest version, and often the most effective: your parent agrees that before sending money to anyone for any reason, they call you first. Not for permission. Just to say it out loud to another person. Scammers work hard to keep their target from talking to anyone, so this single habit defeats most of them.

Frame all three as something you are doing together, not something you are doing to them. "Can we set this up so I stop worrying" is a very different sentence from "you need to let me handle this."

About the guilt

One more thing, because it comes up in almost every conversation I have about this.

If you do not live near your parents, you are probably carrying some low-grade guilt about it. The instinct is to compensate by trying to manage everything remotely, which usually goes badly, because it feels like surveillance to the person on the other end.

You cannot be there. That is not a moral failure, and it is not fixable with software.

What you can do is set up three specific things that keep working when you are not paying attention, and then let it go. That is the actual goal here. Not vigilance. Structure that does not depend on vigilance.

Passwords, briefly

You will notice a password manager is not one of the three.

That is deliberate. For most people over 70, introducing new software is a bigger project than it looks, and it is not where the risk actually lives. Phone calls and stolen data are.

That said, if your parent is comfortable with technology and willing, a password manager genuinely helps, particularly because it stops them reusing one password everywhere.

If you are going to do it, use a family plan rather than setting them up separately. Most cover six people for roughly the price of one, so your parent's account effectively costs nothing on top of your own, and you can help them from your own device when they get stuck.

Affiliate disclosure: some links below are affiliate links. If you buy through them, SPG earns a commission at no extra cost to you. It does not change what I recommend, and I have been specific below about when the answer is to buy nothing.

Add your parent to a family plan for free →

Around $3.69 a month in the first year for six people. It renews higher, so check the rate at checkout. Set it up on their device with them, not remotely, and add three accounts to start: email, bank, and their pharmacy or health portal. Do not try to add everything in one sitting.

If it has already happened

A lot of people reading this are not planning ahead. Something has already happened and you are trying to work out what to do.

In the first 24 hours:

1. Call the bank's fraud line directly, using the number on the card. Ask them to freeze the account and reverse what can be reversed. Speed matters more than anything else here.
2. Report it at reportfraud.ftc.gov. This creates a record, which insurers and banks often ask for.
3. Change the password on their email first, then the bank. Email first, because that is what resets everything else.
4. Freeze their credit at all three bureaus. It is free, it takes about fifteen minutes total, and it stops new accounts being opened in their name.

Then, the harder part.

Once someone's information has been used successfully, it usually gets resold. The same data circulates for years, and the same person gets targeted repeatedly because a successful mark is a valuable record.

This is where monitoring earns its cost. Not as a general precaution, but for someone who has already been hit. Services like Coveron watch for a person's details appearing in new breaches, on dark web markets, and in credit applications, and include help with the cleanup if something happens again. That restoration piece is the part that matters most for an older adult, because the recovery process itself is exhausting and confusing.

Check what Coveron covers for a parent →

Who should not buy this: if nothing has happened to your parent and their information has not turned up anywhere, this is not the thing to spend money on yet. Do the phone rule and the carrier PIN first. Those are free and they prevent more than monitoring does. Monitoring tells you after the fact; the first two stop it happening.

If you just want to know whether their information is already circulating, you can check that for free before deciding.

Check if your parent's email is already exposed →

The conversation

The practical steps are the easy part. Raising it is not.

A few things that help:

Lead with a story, not a warning. "I read about a retired teacher who lost $31,000 to someone pretending to be her bank" opens a conversation. "We need to talk about your online safety" closes one.

Ask rather than tell. "Has anyone ever called you claiming to be from the bank?" Almost everyone over 70 has a story. Starting there makes them the expert instead of the problem.

Do it in one sitting, not as an ongoing project. Set aside an hour, do the three things, and then stop. Turning it into a recurring subject makes people defensive and makes them stop telling you when something happens, which is the opposite of what you want.

Say the actual reason. "I worry about you and this would help me worry less" is honest and it is much easier to say yes to than a lecture about security.

Where this leaves you

Not with a parent who has become tech-savvy. That was never the goal and it was never realistic.

With three things in place that keep working whether or not anyone is paying attention. A rule they can remember when they are frightened. A PIN that stops their phone number being stolen. And someone who gets a text when money moves.

An hour of work, most of it on the phone, and then you can stop thinking about it.

While you are mapping accounts and who can reach them, it is also worth reading what happens to your accounts when you die. The same gaps show up for parents and for you.

If you want to work through the whole picture, including which accounts exist and who can reach them if your parent cannot, the 30-Minute Digital Life Audit walks through it in one sitting. It is $9, with a free 5-page starter if you want to see it first. It is also worth doing for yourself while you are at it, since the same gaps tend to exist in both directions.

Frequently asked questions