Last May, a mother in Missoula, Montana picked up the phone and heard her daughter's voice. Crying. "I know her scared cry," she said later. She nearly wired thousands of dollars before reaching her daughter's actual workplace and learning her daughter was perfectly fine — at her desk, where she had been all morning.
The voice on the phone was a computer-generated copy of her daughter, built from a few seconds of audio scraped from social media. The technology to do this is freely available and costs the scammers next to nothing.
The Missoula story is not unusual anymore. Recent industry data shows roughly 29% of people and businesses experienced a checking, savings, or debit fraud incident in the past year. Almost one in three. If it hasn't happened to someone you love yet, it likely will.
Here is the good news, and the reason for this article: the protections that defeat almost every modern scam are simple, free, and take about an afternoon. You do not need to become an expert in cybersecurity. You need to do three things this weekend, and a few more when you are ready. The rest is conversation.
If you only read one paragraph: The single biggest protection for your family is not a piece of software. It is a few quick agreements that everyone in the family knows by heart — a private code word for any emergency request for money, an understanding that nobody sends money in an unusual way without calling a family member first, and the freedom to ask without embarrassment when something feels off. Get those three agreements in place, and turn on two-factor authentication on your email and bank, and you have already defeated the vast majority of scams in circulation today.
The patterns to watch for
Every major bank and brokerage — Schwab, Chase, Bank of America, Fidelity, your credit union — sends customer alerts about scams. So do Amazon, Apple, and the credit card companies. The institutions tell their customers slightly different stories, but the warning signs they describe are remarkably consistent. Across the industry, four patterns show up in almost every scam:
- Urgency. "Act now." "Your account will be closed." "Your grandchild is in jail." The pressure to decide quickly is the scam. Real institutions almost never demand immediate action.
- Out-of-the-blue contact. A call, text, email, or social media message you didn't ask for. If you didn't start the conversation, treat the conversation as suspect.
- Requests for access, codes, or unusual payment. Anyone who asks you to install software, share a one-time passcode, allow remote access to your computer, or pay by wire, gift card, or cryptocurrency is almost certainly a scammer.
- Offers that are too good to be true. Guaranteed returns, surprise winnings, a free trial that requires a credit card, a deal that disappears in five minutes. If your instinct says "this is too good," your instinct is right.
If any one of these is present, slow down. If two are present, you are being scammed.
What this looks like in 2026
You don't need to memorize every scam to be safe — the four patterns above cover almost everything. But it helps to recognize the most common shapes so you spot them faster.
The family emergency / AI voice cloning. Hits parents and grandparents hardest. A loved one calls in distress — usually a grandchild — and needs money wired immediately. "Please don't tell mom and dad." In 2026, the voice often sounds real because the scammer built a copy from a video on social media. Three seconds of audio is enough.
Pig butchering (romance and crypto). Hits adults of every age. A friendly new connection on Facebook, a dating app, or a "wrong number" text turns into weeks of building trust, then an irresistible cryptocurrency "opportunity." The fake trading platform shows huge profits. Small withdrawals work; the big withdrawal triggers "fees" that never end. Americans lost about $8.7 billion to this pattern in 2025.
Impersonation calls. Hits all ages. "This is your bank fraud department." "This is the IRS." "This is Microsoft Tech Support." "This is Amazon about a suspicious charge." The caller wants you to confirm information, move money to a "safe" account, or install software. No real institution ever does any of this by unsolicited phone call.
Romance scams. Hits adults of every age. A new partner online refuses video calls, moves the conversation off the dating app fast, professes love quickly, and eventually has a crisis that requires money. Americans lost more than $1 billion to romance scams in 2025.
Online marketplace and apartment scams. Hits younger adults hardest. A great deal on Facebook Marketplace. An apartment listing with a too-low rent and an out-of-town "owner." Concert tickets at half price. Pay by wire or Zelle or you'll lose the deal.
Job and task scams. Hits younger adults and recent graduates. A "hiring manager" found on LinkedIn moves the interview to text or Telegram, then sends a check for "home office equipment" and asks you to wire the difference. Real employers never send money before you start working.
Phishing, smishing, and QR code scams. Hits literally everyone. A text says your package needs a redelivery fee. An email says your Apple ID is locked. A QR code at a parking meter has been covered with a sticker pointing to a fake site. Don't click; navigate to the company's site yourself.
Check fraud and mail theft. Most common in retiree-heavy neighborhoods. Scammers steal mail, "wash" the check (chemically remove the recipient and amount), and rewrite it to themselves. Drop outgoing checks at the post office counter rather than the home mailbox; pay bills electronically when you can.
Zelle, Venmo, and other P2P payment scams. Hits all ages. Once money is sent, it is gone. Only Zelle to people you actually know. If anyone asks you to Zelle money in a stressful or unusual situation, you are being scammed.
Recovery scams. Hits anyone who has already been a victim. After someone has been victimized, a new caller offers to recover the lost money for an upfront fee. There is no recovery. Free reporting channels are listed at the bottom of this article.
Three things you can do this weekend
If you do these three things in the next few days, you will be substantially safer than you were last week. None of them require expertise. None of them cost money.
Action 1 — Set a family safe word (15 minutes, at the next family dinner). Agree as a family on a private code word. Choose something nobody could find from your social media — not a pet's name, not a child's name, not a city you've lived in. Pick something unusual and a little memorable. "Lighthouse." "Pumpernickel." Whatever sticks. From that night forward, the family rule is simple: if anyone ever calls in distress asking for money, you ask for the safe word before anything else. A scammer with a perfect voice clone of your grandchild cannot give you a word they never had. If the caller can't produce it, hang up and call your grandchild directly using a number you already know. This single agreement stops the highest-stakes scam in this article cold.
Action 2 — Turn on two-factor authentication on your email and your bank (30 minutes). Two-factor authentication means logging into your account requires a code from your phone in addition to your password. Even if a scammer steals your password, they can't log in without your phone in their hand. Start with your two most important accounts: your email (because your email is the master key to everything else) and your primary bank or brokerage. Both almost certainly already offer 2FA for free — you just need to turn it on. Search the account settings for "two-factor," "two-step verification," or "security." Add 2FA to your other important accounts at your own pace.
Action 3 — Make a family "call me first" agreement (5 minutes, same dinner). Agree as a family: before any of us ever sends money in an unusual way — wire, gift card, cryptocurrency, Zelle to someone we don't personally know — we call one other family member first. Even if it feels urgent. Especially if it feels urgent. Add this: "Nobody in this family is ever in trouble for asking. If you get a call that worries you and turns out to be nothing, that's the right outcome. The wrong outcome is staying quiet because you're embarrassed." Together with the safe word, this defeats almost every scam in circulation.
That's it. Three actions. About an hour total. Done in one weekend. You will sleep better.
Three more things when you're ready
These are the next layer. You don't have to do them this weekend or this month. But each one is worth an hour of your time when you can find one.
Get a password manager. A password manager remembers all your passwords for you. You remember one strong master password. Reputable choices in 2026 include 1Password (about $36/year), Bitwarden (free or $10/year), and Apple's built-in Passwords app (free). The modern guidance is that length matters more than complexity — "copper-cabin-violin-pencil" is much stronger than "P@ssw0rd1!" and much easier to remember.
Freeze your credit at all three bureaus. A credit freeze prevents anyone from opening a new account in your name without your permission. It is free, takes about 15 minutes per bureau, and you only do it once. The three bureaus are Equifax, Experian, and TransUnion.
Add a Trusted Contact to your investment accounts. Schwab, Fidelity, Vanguard, and others let you name a Trusted Contact — a person the institution can call if they see something unusual on your account. The Trusted Contact has no authority to act on your account; they're an extra set of eyes. Setup takes about five minutes per account.
Set up account alerts and glance at your accounts regularly. Every major bank and credit card lets you turn on text or email alerts for large transactions, login attempts from new devices, and so on. Turn the important ones on. Then get into the habit of glancing at your accounts every few days — the earlier you catch fraud, the more your bank can recover.
If it's already happened
Two things matter most: act fast, and don't be ashamed. Speed limits the loss. Shame keeps victims silent and isolated, which is what the scammer is counting on.
- Call your bank or brokerage immediately. Use the number on the back of your card, not a number a stranger gave you. Many fraudulent transfers can be stopped or reversed in the first few hours.
- Report to the FBI's Internet Crime Complaint Center at ic3.gov. The single most important federal report.
- Report to the Federal Trade Commission at reportfraud.ftc.gov.
- Place a fraud alert or credit freeze with Equifax, Experian, and TransUnion if any personal information was shared.
- Change your email password first, then any other affected accounts.
- Tell your family. The shame is misplaced.
- Be alert for recovery scams. Anyone offering to recover your money for a fee is, almost without exception, running the second half of the original scam.
Where to learn more
- Your bank or brokerage. Every major institution maintains a free security center on its website. Save the fraud number in your phone today.
- FBI Internet Crime Complaint Center — ic3.gov.
- Federal Trade Commission — consumer.ftc.gov.
- CISA (Cybersecurity & Infrastructure Security Agency) — cisa.gov. Practical cybersecurity guides for families.
- National Council on Aging — ncoa.org. Particularly useful for families helping older parents.
One more thing
The scammers are organized, professional, and patient. They are not going away, and the tools available to them are getting more powerful every year. But a family that talks openly is harder to scam than any single person, no matter how careful that person is. The conversations protect more than any software.
You don't have to do everything at once. Pick the three weekend actions. Have the dinner conversation. Turn on two-factor authentication on your email. Set the safe word. That is enough to start with, and starting is most of the battle.
Trust your instincts. When something feels wrong, it almost always is. Pause. Call a family member. Hang up if you need to. And keep talking to each other.
John O'Reilly is the founder of O'Reilly Wealth Advisors, an independent, fiduciary Registered Investment Advisor in Carlsbad, California, serving families and small business retirement plans with a focus on evidence-based investing and values-driven financial planning. This article is intended for educational purposes and does not constitute legal, tax, or investment advice. If you suspect you or a loved one has been the victim of a scam, contact your financial institution immediately and report the incident through ic3.gov.