What to Do Immediately If They've Been Scammed

Real-world analogy

What is it?

This is your step-by-step crisis protocol for the first 24 hours after discovering your parent has been scammed. Scammer pipelines are designed for speed — once money moves via gift cards, cryptocurrency, or international wire transfers, it's essentially irreversible after a few hours. But there's a critical window (usually 2-24 hours) where banks can stop transfers, credit card companies can reverse charges, and gift card companies can deactivate codes. Acting immediately during this window is the difference between losing some money and losing everything.

Real-world relevance

A man discovered on Thursday morning that his mother had been scammed on Tuesday -- a fake 'Microsoft' caller convinced her to buy thousands in gift cards and authorize a large wire transfer. The gift card codes were already redeemed and that money was gone. But the wire transfer had not processed yet -- it was scheduled for the next day. He called the bank's fraud line immediately. They contacted his mother to verify, she confirmed the wire was unauthorized, and they blocked it. He lost the gift card money but saved the larger wire transfer by acting within 24 hours. Every hour mattered.

Key points

• Step 1 — Stay Calm and Reassure Your Parent (Minute 0) — Your parent is panicking. They feel stupid and devastated. Your job is NOT to blame them. Say: 'This is not your fault. These criminals fool smart people. Your job right now is to help me understand what happened. We're going to fix this together.' Do NOT say: 'How could you fall for that?' Save the post-mortem for later.
• Step 2 — Gather the Facts Fast (First 5 Minutes) — You need six pieces of information immediately: (1) What type of scam — impersonation call, email, text, fake website? (2) Who did they give money to, and how — wire transfer, gift cards, crypto, cash app? (3) How much money — exact amount? (4) When did it happen — exact day and time? (5) Do they have proof — email, text, receipt, confirmation? (6) What personal information was shared — SSN, bank numbers, passwords?
• Step 3 — Call the Bank Immediately If Money Just Moved — If a wire transfer happened within the last 2 hours, call the bank's fraud line IMMEDIATELY — the number on the BACK OF THEIR CARD, not a number the scammer provided. Banks can call the receiving bank and request a hold on funds. It works about 50% of the time if caught within 2-4 hours. Even if they can't reverse it, they'll flag the account and start documentation.
• Step 5 — File a Police Report (First 2 Hours) — Go to your local police station or file online. You need the police report number for: insurance claims, FBI IC3 filing, credit agency disputes, and identity theft protection. Some departments are slow — get the case number even if the full report takes days. Local reports also help law enforcement track scam patterns in your area.
• Step 6 — Report to FBI IC3 and FTC (First 2 Hours) — File at IC3.gov (Internet Crime Complaint Center) — takes 10 minutes. Provide: scammer's contact info, scam details, amount taken, accounts compromised, police report number. Then file at reportfraud.ftc.gov — also 10 minutes. Report to both because IC3 handles cybercrime while FTC handles consumer fraud. Both databases lead to actual law enforcement action.
• Step 7 — Lock Down Identity If SSN Was Compromised (First 24 Hours) — If the scammer got your parent's Social Security number, immediately call all three credit bureaus: Equifax (800-525-6285), Experian (888-397-3742), TransUnion (800-680-7289). Request both a fraud alert (lasts 1 year, notifies lenders to verify identity) and a credit freeze (prevents new accounts entirely until unfrozen). Both are free.
• Steps 8-9 and Ongoing Recovery — Change all compromised passwords (email FIRST -- it is the master key), call the Elder Fraud Hotline (833-FRAUD-11), monitor statements weekly for 3-6 months, and document everything in a crisis folder. The book contains the complete step-by-step recovery timeline with specific hotline numbers, monitoring checklists, and documentation templates.

Code example

SCAM CRISIS PROTOCOL — KEY STEPS
================================================

FIRST 30 MINUTES:
1. Stay calm. Say: 'This is NOT your fault.'
2. Document: What scam? How much? When? What info shared?
3. If money moved recently → CALL BANK FRAUD LINE NOW

FIRST 24 HOURS:
4. File police report and FBI IC3 report (ic3.gov)
5. If SSN compromised → Credit freeze with all 3 bureaus

... plus 11 more critical steps covering retailer fraud lines,
password changes, credit monitoring, the Elder Fraud Hotline,
and a 3-6 month ongoing monitoring schedule.

Get the complete printable Crisis Protocol in:
'Protecting Aging Parents' by Teamz Lab — Available on Amazon
https://www.amazon.com/dp/B0F2PJ1MG4

Line-by-line walkthrough

1. 1. Step 1 (Stay Calm): Your emotional response sets the tone. If you panic or blame, your parent shuts down and stops sharing critical details you need.
2. 2. Step 2 (Gather Facts): The six key facts — scam type, payment method, amount, timing, evidence, and info shared — determine every action that follows.
3. 3. Step 3 (Call Bank): Wire transfers have a 2-4 hour window where banks can contact the receiving bank to freeze funds. After that, the money is typically gone.
4. 4. Step 4 (Call Retailer): Gift card codes can sometimes be deactivated if they haven't been redeemed yet. Scammers typically convert codes to crypto within hours.
5. 5. Step 5 (Police Report): The case number is required for insurance claims, credit bureau disputes, and federal filings. Get this even if the full report takes days.
6. 6. Step 6 (IC3 + FTC): These federal databases track scam patterns nationally. Your report helps catch repeat offenders and may lead to fund recovery if the operation is shut down.
7. 7. Step 7 (Credit Bureaus): A fraud alert flags your parent's credit file for 1 year. A credit freeze completely blocks new accounts. Both are free and essential if SSN was exposed.
8. 8. Step 8 (Passwords): Email is the master key — if a scammer controls email, they can reset passwords for every other account. Always secure email first.
9. 9. Step 9 (Elder Fraud Hotline): These specialists know recovery options that most families don't, including victim advocacy services and local legal resources.
10. 10. Steps 10-11 (Monitor): Scammers often test stolen information with small charges before attempting larger fraud. Weekly monitoring for 3-6 months catches these test charges.

Spot the bug

Scenario: Your father calls you, upset. He wired $3,000 to someone claiming to be from the IRS two days ago. You respond: 'Dad, that's terrible. Let me look into this over the weekend. On Monday I'll call the bank and see what we can do. In the meantime, don't worry about it.'

Explain like I'm 5

Fun fact

Hands-on challenge

More resources

• FBI Internet Crime Complaint Center (IC3) (FBI)
• FTC Fraud Reporting (Federal Trade Commission)
• National Elder Fraud Hotline (Department of Justice — 1-833-FRAUD-11)
• Free Annual Credit Reports (U.S. Government Authorized)
• Identity Theft Recovery Steps (FTC)