The grandparent scam: how it works and what to do

By the Protect & Assist team Last updated:

In a grandparent scam, a caller pretends to be a grandchild or another relative in trouble, often after an arrest or an accident, and asks for money quickly and in secret. The best defenses are simple: agree on a family code word ahead of time, and when a call like this comes in, hang up and call the relative back on the number you already have for them. Never send gift cards, cash, cryptocurrency or a wire transfer to a caller you haven't checked.

On this page

How the grandparent scam works

The FCC's grandparent scam alert and the FTC's advice on fake emergencies describe how these calls usually go:

  1. The call. A frightened voice says "Grandma, it's me" or uses a grandchild's name. Scammers find names and details by mining social media or buying stolen data, and sometimes they simply guess.
  2. The crisis. An arrest or a car accident, and a plea to keep it quiet: "please don't let Mom and Dad know".
  3. The handoff. Someone posing as a lawyer, a police officer or a court official comes on the line to demand bail, fines or fees right away.
  4. The payment. Gift card numbers read over the phone, a wire transfer, cryptocurrency, a payment app, money orders, or a request to meet in person and hand over cash.

Caller ID doesn't settle it: scammers can "spoof" the caller ID so the call appears to come from a trusted number. And in 2025, gift cards were the payment older adults most often reported in scams where someone posed as a friend or family member, according to the FTC report on older consumers.

Why it's harder to spot now: cloned voices

With a short audio clip, perhaps from a video posted online, and a voice-cloning program, a scammer can sound like a specific family member. The FTC, the FCC and the FBI all warn about it; the FBI describes criminals generating short audio clips of a loved one's voice to impersonate a close relative in a crisis.

The FCC says calls using AI-generated voices are illegal unless the person agreed to receive them or the caller is exempt, but scammers don't follow the rules. So "it sounded just like him" is not proof. The FCC's advice is direct: don't trust the voice on the phone.

Set up a family code word

A code word gives your family a check that a cloned voice alone can't pass. The FBI suggests creating a secret word or phrase with your family to verify identity, and the FCC suggests a "safe word" that only you and your family know, chosen ahead of time.

  1. Pick something easy to remember and impossible to guess. Two unrelated words work well, like "purple walrus". Avoid pet names, birthdays, street names and anything that has ever been posted online.
  2. Share it in person, or on a call you started. Make sure grandparents, parents and the grandchildren who might call all know it.
  3. Agree on the rule. Anyone who calls asking for help or money gives the code word. If they can't, the grandparent hangs up and calls back on the number they already have.
  4. The grandparent asks; the caller answers. Never offer the word or a hint, like "is it the walrus one?"
  5. Change it if it's ever shared outside the family, written somewhere public, or used in a real emergency.

When a call like this comes in

  1. Slow down. The FTC's advice is to resist pressure to send money right away. A real emergency can wait the few minutes it takes to check.
  2. Ask for the code word, or ask something only the real person could answer, like the name of the family dog.
  3. Hang up and call back on the number saved in your contacts, as the FCC advises. If you can't reach them, call their parents or another relative, even if the caller begged you to keep it secret.
  4. Don't pay a caller you haven't checked, whether by gift card, wire transfer, cryptocurrency, payment app or cash.
  5. Report the call to your local police, as the FCC advises, and to the FTC at ReportFraud.ftc.gov.

What the rest of the family can do

  • Grandchildren: make sure grandparents have your current number saved, and tell them you'll never mind a call back to check.
  • Everyone: limit the photos, videos and voice recordings you post publicly, and set social media accounts to private. The FBI suggests both.
  • Parents: tell grandparents that "don't tell Mom and Dad" is exactly the moment to call Mom and Dad.

If money was already sent

Act fast, and without blame. Contact the bank, gift card company or money transfer service right away and ask them to stop or reverse the payment, then report it at ReportFraud.ftc.gov and ic3.gov and to local police. The National Elder Fraud Hotline, 833-FRAUD-11 (833-372-8311), can help with reporting on weekdays from 10 a.m. to 6 p.m. Eastern. Our phone scams guide lists the steps for each way of paying.

How Protect & Assist handles "it's me" calls

When a number that isn't saved calls your parent, the call comes to Protect & Assist first, and the caller has to say who they're trying to reach and why. An AI reads that reason, and a relative in trouble or an urgent money problem is the kind it treats as questionable: Protect & Assist calls the emergency contact you saved first, or warns your parent.

If you've set a family code word, a screened caller who says they're family, like "Grandma, it's me", is asked for it before your parent hears them. If they can't give it, Protect & Assist can call the relative they named, on that relative's own saved phone, and ask whether they're calling right now. If the check fails, the caller isn't put through and the family is told.

What it can't do: calls from saved numbers ring straight through, so a scammer who fakes a saved family number isn't screened, and screening can make mistakes. Keep the call-back habit as well.

Common questions

What is the grandparent scam?

A caller pretends to be a grandchild or another relative in trouble, often after an arrest or a car accident, and asks for money right away and in secret. Sometimes a second person posing as a lawyer, police officer or court official takes the phone to demand payment.

Can scammers really copy a grandchild's voice?

Yes. The FTC, the FCC and the FBI warn that scammers can use AI to clone a voice from a short audio clip, so a familiar voice is not proof of who is calling.

What makes a good family code word?

Something easy to remember but impossible to guess or find online, such as two unrelated words. Agree on it ahead of time, share it in person, and have the grandparent ask for it rather than say it.

What if the caller says not to tell anyone?

That is a warning sign. Hang up, call the relative back on the number you already have for them, and call their parents or another family member, even if the caller asked you to keep it secret.

Where do we report a grandparent scam call?

Report it to your local police and to the FTC at ReportFraud.ftc.gov. If money was sent, call the bank or payment company first; the National Elder Fraud Hotline, 833-372-8311, can help with reporting.

Does Protect & Assist ask callers for a family code word?

Yes, if you set one. When a screened caller says they're family, Protect & Assist asks for the code word before your parent hears them, and if they can't give it, it can call the relative they named on that relative's own saved phone. Calls from saved numbers ring straight through, so keep the call-back habit too.

Still have a question?

Sources

  1. 'Grandparent' Scams Get More Sophisticated, Federal Communications Commission, updated April 24, 2026.
  2. Scammers Use Fake Emergencies To Steal Your Money, FTC Consumer Advice, September 2023.
  3. Criminals Use Generative Artificial Intelligence to Facilitate Financial Fraud (public service announcement), FBI, published by IC3, December 3, 2024.
  4. Stop Unwanted Robocalls and Texts, Federal Communications Commission, updated February 27, 2026.
  5. Protecting Older Consumers 2025-2026: A Report of the Federal Trade Commission, Federal Trade Commission, October 19, 2026.
  6. What To Do if You Were Scammed, FTC Consumer Advice, June 2026.
  7. Elder Fraud, FBI Internet Crime Complaint Center (IC3), checked October 2026.
  8. National Elder Fraud Hotline, Office for Victims of Crime, U.S. Department of Justice, checked October 2026.

We read every source on its publisher's site in October 2026. Figures are the latest each publisher had released.

More guides for families

All guides for families

Want help screening a parent's calls?

Protect & Assist asks unsaved callers who they're calling and why before your parent's phone rings, and keeps the family in the loop. Plans start at $49.99 a month, and you can cancel any time in settings.

Screening can make mistakes: it can miss a harmful call or stop a legitimate one. Medication reminders are informational, can be missed, and are not a substitute for medical care. Protect & Assist is not an emergency service or a medical provider. For emergencies, call 911.