Self-Reliance · Planning
Fraud is a hazard like weather. It has known patterns, known defenses, and a known season, which is all year. This guide covers how scams work, how to protect the people you love, and what to do in the first hours if one lands.
Start with the patternThe quiet hazard
Most hazards announce themselves. A storm shows up on radar days out. Fraud arrives as a phone call on an ordinary Tuesday, and it takes more from American households every year than most natural disasters combined. The FBI's Internet Crime Complaint Center recorded $16.6 billion in reported losses in 2024 alone, and more than $50 billion over the past five years. Those are only the losses people reported.
The good news is the same as with any other hazard: preparation works. Scams succeed by catching people unrehearsed. A household that knows the patterns, has locked down its credit, and has agreed on a few simple verification habits is a dramatically harder target. None of it requires technical skill, and most of it is free.
One more thing before we start. Being targeted is not a judgment on your intelligence. Scam operations are professional, scripted, and rehearsed on thousands of people before they reach you. Engineers, attorneys, and bank employees get taken every year. The defense is not being smarter than the scammer. It is having a system that does not depend on being sharp in the moment.
The anatomy
There are thousands of scam scripts and new ones every month. Memorizing them all is impossible, and unnecessary. Nearly every one runs on the same four levers, and recognizing the levers protects you against scams that have not been invented yet.
Act in the next hour or lose money, face arrest, miss the opportunity. Real institutions almost never require immediate action over the phone. Urgency exists to stop you from thinking, checking, or calling someone you trust.
The caller claims to be the IRS, the Social Security Administration, your bank's fraud department, tech support, or law enforcement. Caller ID can be faked. A badge number proves nothing. Authority claims are the costume, not the person.
Do not tell your spouse. Do not tell your bank teller why you are withdrawing cash. This is a confidential investigation. Any instruction to keep a transaction secret from your own family or your own bank is the clearest single warning sign that exists.
Gift cards, wire transfers, cryptocurrency, payment apps, or cash handed to a courier who comes to your door. No government agency and no legitimate business collects payment this way. The payment method is where the scam becomes visible, because it is the one part the scammer cannot disguise.
Hang up, look up, call back. If anyone contacts you claiming to be your bank, a government agency, a utility, or a family member in trouble, end the contact. Find the organization's real number yourself, from the back of your card, a paper statement, or the official website. Call that number and ask.
A legitimate caller loses nothing when you verify. A scammer loses everything. This one habit, practiced until it is automatic, defeats the urgency lever, the authority lever, and the isolation lever all at once.
Current patterns
These are the patterns the FTC and FBI are actively warning about. Notice how every one is built from the same four levers.
Government impersonation
Calls, texts, and emails claiming you missed jury duty and face arrest, owe the IRS, or have a suspended Social Security number. Government agencies do not call to demand payment, do not threaten immediate arrest, and do not accept gift cards. The SSA also warns about companies charging fees for services it provides free, like replacement Social Security cards.
Tech support and the Phantom Hacker
A popup or call says your computer is infected. A fake technician finds fake fraud, transfers you to a fake bank investigator, then a fake government official, who tells you to move your savings to a safe account. The FBI calls this the Phantom Hacker scam, and it drains entire life savings. No real institution will ever ask you to move money to protect it.
Investment and cryptocurrency schemes
Often opening as a friendly text from a wrong number, these build trust over weeks before introducing an investment platform showing fake gains. The FTC recorded $7.9 billion in reported investment scam losses in 2025, with a median individual loss above $10,000. Some operations now send couriers to collect cash in person.
Romance scams
A relationship built entirely online, moving quickly to devotion, followed eventually by an emergency that only money can solve. The person can never video call and can never meet. The relationship is the product, and the emergency is the invoice.
Fake listings
Rental homes copied from real listings and reposted at attractive prices by someone who cannot show the property but will take a deposit. Fake health plans that turn out to be discount cards. If you cannot walk through it, verify the owner. If the price is far below market, that is the hook.
Disaster-chasing fraud
Fake FEMA fees, door-to-door contractors demanding cash up front, and charity solicitations that appear within hours of a major event. Our financial resilience guide covers post-disaster scams in detail.
New patterns appear constantly, which is why the four levers matter more than any list. When something feels urgent, official, secret, and payable only in gift cards, you already know what it is.
Elder fraud
Fraud targeting adults over 60 is one of the fastest-growing crime categories in the country, and it is personal in a way other fraud is not. Scammers deliberately target older adults for their savings, their homes, and their trust. Protecting parents and grandparents is household security work in the fullest sense.
A late-night call: a grandchild is in jail or in the hospital and needs money quietly, right now. Voice cloning has made these calls frighteningly convincing. The FBI warns that some operations now send couriers to the door to collect cash or valuables. The defense is a family verification word, agreed on in advance, that a real grandchild would know.
These target seniors specifically because the script exploits unfamiliarity with technology and trust in institutions. Recent versions direct victims to ship cash through package carriers. Any instruction to move, withdraw, or ship money to protect it is the scam itself.
Widowed and isolated adults are targeted deliberately. The relationship feels real because the attention is real, even though the person is not. Shame keeps victims quiet, which is exactly what the operation counts on.
Sometimes the threat is closer to home. A representative payee who receives Social Security benefits on someone's behalf is legally required to spend them on that person's needs. Misuse can be reported to the Social Security Administration, which investigates, can replace the payee, and works to recover misused funds. The same vigilance applies to anyone holding a power of attorney.
Federal investigators have flagged hospice fraud schemes that enroll Medicare recipients in hospice care without their full understanding, along with billing for equipment never delivered. Review Medicare statements the way you would review a credit card bill, and question services you do not recognize.
The talk fails when it sounds like a competency review. It works when it is framed as it truly is: professional criminal operations target everyone, and your household is setting up defenses together. Share a news story about a scam rather than lecturing. Ask what they would do, and let the plan come from them.
Agree on three things as a family. First, a verification word for any emergency call involving money. Second, a standing rule that no one sends money, buys gift cards, or signs anything the same day someone asks; a real emergency survives a one-hour delay. Third, that being targeted gets talked about without embarrassment, because silence is the scammer's best friend.
Ask their bank about adding a trusted contact, a person the bank can call if it sees suspicious activity. Set up transaction alerts on their accounts so unusual withdrawals are visible the same day. If they are comfortable with it, review statements together monthly, framed as bookkeeping help rather than supervision.
The DOJ Elder Fraud Hotline at 833-372-8311 (weekdays, 10 a.m. to 6 p.m. Eastern) helps older adults and their families report fraud and will walk callers through filing an FBI complaint. Save that number in their phone and yours.
Identity protection
Identity theft is what turns a stolen number into new credit cards, drained accounts, and years of cleanup. The strongest defenses are preventive, free, and take about an hour to set up for the whole household.
A credit freeze blocks new creditors from pulling your credit file, which stops most new-account fraud cold. Federal law makes freezes free, and you can lift one temporarily in minutes whenever you actually apply for credit. Freeze at all three bureaus: Equifax (800-685-1111), Experian (888-397-3742), and TransUnion (888-909-8872).
A freeze does not affect your existing accounts, your credit score, or your ability to use your cards. It only stops someone from opening something new in your name. For most households there is no good reason to leave credit files unfrozen between loan applications.
Child identity theft often runs undetected for years, discovered only when a teenager applies for a first loan and finds a ruined credit history. Parents and guardians can request a freeze on a minor child's credit file at all three bureaus. The bureaus will create a file for the child if one does not exist, then freeze it. It is paperwork once, and protection until adulthood.
Create your own my Social Security account at ssa.gov before someone else creates one in your name. Once it exists, review it yearly for earnings you do not recognize, which can signal someone working under your number.
The SSA also offers two account locks most people have never heard of. The eServices block prevents anyone, including you, from viewing or changing your information online until you remove the block through a local office. The Direct Deposit Fraud Prevention block stops anyone from redirecting your benefit payments or changing your address remotely. For retirees and anyone receiving benefits, these two free blocks close off a favorite scammer target.
Do not carry your Social Security card. Shred documents with account numbers before discarding them. Check your credit reports from all three bureaus through AnnualCreditReport.com, the official free source. Strong, unique passwords and two-factor authentication guard the digital side; our documents and records guide covers password managers and account recovery in detail.
Account defenses
Habits protect you in the moment. Account settings protect you when the moment gets past you. An afternoon of setup builds a second line of defense that works even on a bad day.
Every bank and card issuer offers transaction alerts by text or email. Set them for withdrawals, transfers, and purchases above a threshold you choose. Fraud caught the same day is an inconvenience. Fraud caught at the end of the statement cycle is a project.
Adopt a household rule that no wire transfer, large withdrawal, or investment above an agreed amount happens without a second person knowing first. This is not about permission. It is a tripwire, because scammers isolate their targets, and a mandatory second conversation breaks the isolation every time.
Ask your mobile carrier to add a port-out PIN so no one can hijack your phone number, which attackers use to intercept verification codes. Sign up for USPS Informed Delivery so you see what mail should arrive and notice what goes missing. Switch any federal benefit payments to direct deposit so there are no paper checks to steal.
Keep a written list of the real customer service numbers for your bank, card issuers, and insurers with your household documents. When a suspicious call comes, you are not searching the internet under pressure. You hang up and dial a number you wrote down on a calm day.
If it happens
Reporting is not just paperwork. Reports feed the investigations that shut operations down, and in some cases the FBI can freeze stolen funds before they disappear. If a scam reaches your household, speed matters far more than embarrassment.
Call your bank and any financial institution involved before anything else. If money was wired, ask the bank to request a recall and provide a hold harmless letter. The FBI notes that moving quickly on a recall can reduce or even eliminate the loss. Then freeze your credit at all three bureaus. Our step-by-step guide to the first days after a scam walks the whole sequence, hour by hour.
ic3.gov is the central intake for internet-enabled fraud of every kind. File even if you are unsure your situation qualifies. The IC3 never contacts victims directly and never works with recovery companies, so anyone claiming to represent it is running a second scam.
ReportFraud.ftc.gov collects fraud reports, and IdentityTheft.gov generates a personal recovery plan plus the FTC Identity Theft Report that banks and credit bureaus recognize. Federal portals are occasionally offline during government funding lapses, so if one is down, file with the IC3 and your state attorney general and return to the federal portal later.
Your state attorney general's consumer protection office investigates fraud and takes reports independently of federal systems. Local police reports create the paper trail that banks and insurers often require. For fraud or abuse involving a vulnerable adult, your county's Adult Protective Services takes reports and can intervene.
Elder fraud: the DOJ Elder Fraud Hotline at 833-372-8311. Social Security fraud or payee misuse: the SSA Office of the Inspector General at oig.ssa.gov or 800-269-0271. Medicare fraud: 800-MEDICARE. Save the ones relevant to your household now, next to your bank numbers.
Fraud victims land on lists that scammers sell to each other, and a common follow-up is a recovery company or fake investigator offering to get your money back for a fee. No legitimate agency charges to investigate, and none will contact you out of the blue promising recovered funds. The people who can actually help are the ones you call, never the ones who call you.
Common misconceptions
Everyone believes this, including the people who lost their savings last year. Scam scripts are engineered by professionals and refined on thousands of targets. Confidence without systems is exactly the vulnerability the scripts are designed for. The households that stay safe are the ones with freezes, alerts, and verification habits, not the ones with the highest opinion of their own judgment.
Caller ID is trivially faked. Scammers routinely display your bank's real name and number. The display tells you nothing. The only verification that counts is you ending the call and dialing the number on the back of your card.
A freeze has no effect on your score, your existing cards, or your ability to spend. It only blocks new credit checks, and you can lift it online in minutes when you apply for a loan. It is free by federal law at all three bureaus.
Reported losses span every age group, and younger adults report fraud more often than seniors in several categories. Seniors lose larger amounts per incident, which is why elder protection gets its own section, but no one ages out of being a target and no profession is immune.
Silence is the scammer's business model. Reporting can freeze funds if it happens fast, feeds the cases that shut operations down, and creates the documentation your bank needs to help you. Filing a report is what a capable household does, and the investigators reading it have seen thousands of cases exactly like yours.
Action steps
Listed in priority order. The first four take about an hour combined and cost nothing.
Freeze your credit at all three bureaus
Equifax, Experian, TransUnion. Free, reversible, and the single strongest defense against new-account identity theft. Include minor children.
Turn on transaction alerts for every account
Text or email alerts for withdrawals, transfers, and purchases above your chosen threshold. Same-day detection changes everything.
Create your my Social Security account
Claim it before anyone else does, at ssa.gov. If you receive benefits, ask about the eServices and Direct Deposit Fraud Prevention blocks.
Agree on a family verification word
One word a real family member in trouble would know. Pair it with the standing rule: no money moves the same day anyone asks.
Practice hang up, look up, call back
Say it out loud with your household until it is the reflex. Keep a written list of your institutions' real phone numbers with your documents.
Set up safeguards with older family members
Trusted contact at their bank, account alerts, the verification word, and the Elder Fraud Hotline (833-372-8311) saved in their phone.
Add a port-out PIN and Informed Delivery
Call your mobile carrier for the PIN. Sign up for USPS Informed Delivery. Both take minutes and close common attack routes.
Check credit reports yearly
AnnualCreditReport.com is the official free source for reports from all three bureaus. Review yours and your children's, and question anything unfamiliar.
Next steps
Starting out
One hour, three phone calls, zero dollars. The strongest single defense against identity theft, done before dinner.
Lock it downProtecting family
The verification word, the trusted contact, the account alerts, and the conversation with aging parents that respects their dignity.
Protect the family