How to Scam-Proof a Parent's Phone in One Afternoon

Settings to change, a family code word, and a simple pause-and-call-back rule, set up together in about three hours without lecturing.

9 min readFor beginners

You can make a parent’s phone much harder to scam in one afternoon by changing a few settings, agreeing on a family code word, and practicing one rule: pause, hang up, and call back on a number you already know. Do it together, as a team, and not as a lecture.

Scammers rely on pressure. They create urgency, fear or excitement so a person acts before thinking. No setting stops every scam, but the right setup removes many of the easy openings, and a shared habit handles the rest.

This is general information. For a specific case of fraud, contact your bank, local police and the Federal Trade Commission at ReportFraud.ftc.gov.

Start with the right tone

How you begin matters more than any setting. Many parents feel embarrassed or defensive when their children raise this. A few ways to open well:

“I got a weird text today and it made me want to set up our phones better. Can we do yours and mine together?”
“Everyone gets these now. Even experts get fooled. Let’s make it hard for them.”
“I’d love to do this for the whole family, so it’s not just you.”

Avoid “You’re easy to trick.” Anyone can be tricked when the story is good and the moment is stressful. Make it a family project, and bring snacks.

Before you start: gather what you need

Your parent’s phone and passcode, with their permission
Their email address and the password for their main accounts (or help to reset them)
Their bank and credit card phone numbers (from the back of the cards)
A pen and paper, or a printed contacts page
About three hours, with breaks

Hour one: lock the front door

Update the phone

Open the settings and check for system updates. Turn on automatic updates so security fixes install by themselves.

Set a strong screen lock

Use a passcode of at least six digits, or a fingerprint or face unlock if your parent is comfortable with it. Avoid birthdays and simple patterns like 123456.

Turn on a SIM or account PIN

Call the phone carrier and ask about account protections. Many carriers offer a PIN or passcode that must be given before any change to the account. This helps block “SIM swap” fraud, where a thief moves a phone number to a new device.

Use two-step verification on key accounts

Turn it on for email first, because email can reset all the other accounts. Then do the bank, the Apple ID or Google account, and any shopping or payment accounts. A text code is better than nothing; an authenticator app is stronger when your parent can manage it.

Check the email account

Look at the recovery phone number and backup email. Make sure they are current and belong to your parent or a trusted family member. Check forwarding rules and signed-in devices for anything unfamiliar.

Hour two: filter the noise

Calls

Turn on the phone’s built-in feature that silences unknown callers, or sends them to voicemail. On iPhone, this is “Silence Unknown Callers.” On Android, look for “Caller ID and spam” and “Filter spam calls.”
Ask the carrier about free spam-blocking tools and turn them on.
Add important contacts, like family, doctors and the pharmacy, so real calls come through.
Register the number on the National Do Not Call Registry at donotcall.gov. It won’t stop scammers, but it limits legal telemarketers, which makes the odd calls stand out.

Texts

Turn on “Filter Unknown Senders” on iPhone, or the spam protection setting in Google Messages.
Show your parent how to use “Report Junk” or “Report Spam.”
Explain that they never need to reply “STOP” to a suspicious text. Replying can confirm the number is active. Delete and block instead.

Email

Turn on the spam filter and check the spam folder with them.
Show how to hover over a link to see where it really goes, or better, not click links at all.
Unsubscribe from a few extra newsletters to cut the noise.

Apps and browser

Remove apps they don’t recognize or use.
Turn on the browser’s safe browsing feature.
Set the app store to require a password or face check for every purchase.
Turn off “install from unknown sources” on Android.

Hour three: set the family rules

Settings handle the machine. These steps handle the person.

Choose a family code word

A code word is a private word or phrase that only your family knows. If someone calls claiming to be a grandchild in trouble, your parent can ask for the word. A real family member will know it. A scammer, even one using a cloned voice, will not.

Pick a code word that is:

Easy to remember and hard to guess
Not a name, address, birthday or pet
Not posted anywhere online
Shared in person or by a private call, not in a group chat

Practice using it, so it doesn’t feel awkward. Everyone in the family should know that asking for the word is expected and never rude.

Agree on the pause-and-call-back rule

Write this on a card by the phone:

If someone asks for money, gift cards, passwords or codes: stop, hang up, call back on a number I already know. No real bank, agency or family member will mind the wait.

Learn the common patterns

Walk through the typical stories, and name the red flags together:

Scam	What it sounds like	Red flags
Family emergency	“Grandma, I’m in jail and need bail.”	Secrecy, urgency, odd payment method
Bank fraud alert	“We’ve seen suspicious activity. Confirm your code.”	Asks for codes or to move money
Government impersonation	“Your Social Security number is suspended.”	Threats, demands for gift cards or crypto
Tech support	“Your computer has a virus. Let us fix it.”	Pop-ups with a phone number, remote access
Package delivery	“Your parcel is held. Click here to pay a fee.”	Unexpected text with a link
Romance	“I love you, but I need money to travel.”	Never meets in person, asks for money
Prize or lottery	“You’ve won. Pay a small fee to claim.”	Pay to receive

The shared thread: urgency, secrecy and unusual payment. Anyone asking for gift cards, wire transfers, cryptocurrency or cash in the mail is a red flag.

Keep a list of real numbers

Write the numbers your parent may need on one sheet near the phone: the bank, credit card companies, pharmacy, doctor, you and the other family members. If a caller claims to be from the bank, your parent can look up the number and call back. Our guide on building a household binder has a place for this page.

What to do if something happens

Stay calm, and tell your parent that you won’t be angry. Shame stops people from reporting. The faster you act, the better.

Stop all contact with the scammer.
Call the bank or card company from the number on the card. Ask them to freeze or monitor the account.
Change passwords on affected accounts, starting with email.
Place a fraud alert or credit freeze with the credit bureaus.
Report it to the FTC at ReportFraud.ftc.gov, and to local police if money was lost.
Tell the family, and update the code word if it was shared.

The afternoon checklist

Keep it going

A single afternoon gets the setup done, but habits need a light touch. Once a month, spend 10 minutes on a call or visit going over one new scam you’ve seen in the news, and check that the settings are still on. Treat it as a chat, not a test. Use a quick check-in with yourself afterward to see how it went.

If you’re also starting to help your parent in other ways, see our guide on helping an aging parent without taking over.

A calm next step

To begin with the code word, The Family Code Word Card is free and walks you through choosing a word, agreeing the pause-and-call-back rule and keeping a wallet card, in about 15 minutes. For the whole plan, The Family Scam Plan Bundle adds a 7-lesson course, a two-week setup plan, monthly drill scripts, a first-hour checklist and large-print cards. You can do everything above without either one. The goal is a phone and a family that pause before they pay.