🛡️ Scam Alert

The Grandparent Scam: What Scammers Say and How to Stop Them

Scammers have a rehearsed script designed to bypass every rational thought your parent has. Knowing the exact words they use — before the call comes — is the only way to be ready.

🗓 May 10, 2026
 
📖 9 min read
 
Senior Researcher Margaret Calloway

The phone rings at 11 p.m. Your parent picks up. A panicked voice — sounding remarkably like you — says: “Grandma, it’s me. I’m in trouble. Please don’t tell Mom and Dad.” What happens next depends entirely on whether your parent has ever heard those words before.

The grandparent scam is one of the oldest phone fraud schemes in existence — and one of the most effective. It works because it targets something no amount of skepticism can fully suppress: a grandparent’s instinct to protect their family. With the addition of AI voice cloning, that instinct is now being exploited with a level of technical precision that makes the call nearly indistinguishable from the real thing.

This article gives you what most fraud guides don’t: the exact script scammers use, a breakdown of why each line works psychologically, and a concrete protection plan you can put in place with your parent tonight.

📌 Who this is for: Adult children and caregivers of older adults. The grandparent scam targets people 60 and over almost exclusively. If you have a parent or grandparent in that age range, this article is directly relevant to protecting them.

The Scale of the Problem in 2025 and 2026

Before we get into the script, it helps to understand just how large this threat has become — because the numbers reveal something important: this is not a niche crime. It is a mass-scale industry.

$7.7B Lost by Seniors Adults 60+ reported to FBI in 2025 — a 60% jump from the year before
$81.5B Real Estimated Loss FTC’s high-end estimate of true 2024 losses once underreporting is factored in
3,000+ Voice-Clone Scams Grandparent voice-cloning scam reports in 2023 alone, costing $126M+
$2,210 Median Phone Loss Median reported loss per victim for scams initiated by phone call (FTC 2024)

The FBI’s 2025 Internet Crime Report recorded $7.7 billion in losses among adults 60 and older — roughly 60% more than the year before. The FTC’s own report puts reported senior fraud losses at $2.4 billion in 2024, but estimates that the true toll, accounting for unreported incidents, may be as high as $81.5 billion. Phone-initiated scams — the channel used in virtually every grandparent scam — produce the highest median loss of any contact method at $2,210 per victim.

“This crime is not just financial. Some people have everything taken from them, and they’ll still say the emotional impact is the hardest.” — Kathy Stokes, Director of Fraud Prevention Programs, AARP Fraud Watch Network

What makes these numbers particularly alarming is the rate of acceleration. Fraud losses for older adults quadrupled between 2020 and 2024. The technology enabling these scams — AI voice cloning, caller ID spoofing, organized overseas call centers — has made it cheaper, faster, and more scalable to run grandparent scams than at any point in history.

How the Grandparent Scam Works, Step by Step

The scam follows a predictable structure. Understanding each phase makes it easier to interrupt before it reaches the payment stage.

 
Phase 1 — The Hook
A vague opening that lets the victim fill in the blank
The scammer calls and says something deliberately vague: “Hi Grandma, it’s me!” — and then goes quiet. The grandparent, wanting to be helpful, responds with a name: “Is this Tommy?” The scammer now has a name to work with and immediately adopts it. This technique — called “name harvesting” — means the scammer doesn’t even need to know the family before making the call.
 
Phase 2 — The Crisis
An urgent, emotional emergency is introduced
Once they have a name, scammers escalate immediately to a high-stakes emergency: a car accident, an arrest, a medical emergency, or a kidnapping. The story almost always includes a detail designed to trigger shame — “I hit a pregnant woman” or “I was drinking” — because shame amplifies urgency and discourages the victim from telling others. The caller may speak in a hushed, crying voice or invent a reason for sounding different.
 
Phase 3 — The Authority Figure
A “lawyer” or “officer” takes over the call
The scammer hands the phone to an accomplice posing as a public defender, bail bondsman, or police officer. This person speaks calmly and professionally, provides fake case numbers, and instructs the grandparent on exactly how much money is needed and how to send it. This switch creates the illusion of institutional legitimacy — two people, two roles, one coordinated lie.
 
Phase 4 — The Collection
Cash, gift cards, wire transfer, or a courier at the door
Payment is always demanded in a form that is impossible or very difficult to reverse. Gift cards are most common — the scammer instructs the victim to buy them at a drugstore and read the numbers over the phone. In some variations, a rideshare driver or courier is sent directly to the victim’s home to collect cash. The FBI confirmed $2.7 million in reported emergency scam losses in 2024 alone, with individual losses frequently exceeding $10,000.

The Exact Script — Word for Word

What follows are the actual phrases grandparent scammers use, drawn from FTC, FCC, and law enforcement case reports. Read these with your parent. Hearing the words in a low-stakes context is the single most effective way to build recognition before the real call comes.

Opening — The Name Harvest

What the scammer says
“Hi Grandma! It’s me — do you know who this is?”
“It’s your grandson. I’m in some trouble and I really need your help.”
Why it works

The question “do you know who this is?” is intentionally vague. It invites the grandparent to offer a name — giving the scammer everything they need to continue the impersonation. Once a name is spoken, the scammer repeats it back as confirmation. The grandparent now believes identification has been established when nothing of the sort has happened.

The Emergency — Urgency and Shame

What the scammer says
“Grandma, I’ve been in a car accident. I’m okay, but it’s serious — I hit a pregnant woman and the police arrested me.”
“I need you to help me post bail. I was drinking, and I’m so embarrassed — please don’t tell Mom and Dad.”
“I have a cold, that’s why I sound different. Please, Grandma, there isn’t much time.”
Why it works

Three psychological levers are being pulled simultaneously: urgency (no time to think), shame (don’t involve others), and a pre-emptive explanation for the unfamiliar voice. The shame element is particularly effective — it gives the grandparent a reason to comply with secrecy that feels protective rather than suspicious. Legitimate emergencies do not come with instructions to keep them secret.

The Authority Handoff — Fake Lawyer or Officer

What the scammer says
“I’m going to hand you to my public defender now. He’ll explain everything.”
“Hello ma’am, this is Attorney Robert Walsh. I’m representing your grandson. Bail has been set at $4,500. We need it paid in the next two hours or he’ll be held overnight.”
“The fastest way to handle this is with gift cards — CVS or Walgreens. Buy four $500 cards and call me back with the numbers on the back.”
Why it works

A second, professional-sounding voice doubles the illusion of legitimacy. The fake lawyer uses real-sounding details — a name, a bail amount, a deadline — to make the scenario feel bureaucratically credible. The gift card instruction is normalized within this institutional-sounding context, making it feel like a standard legal process rather than a warning sign.

The Secrecy Lock — Cutting Off Verification

What the scammer says
“Please don’t tell your daughter — he specifically asked that you not involve his parents. It’ll make things much worse legally.”
“Do not call him on his cell — it’s been confiscated. I’m your only contact right now.”
“Don’t discuss this with anyone until the matter is resolved. It could jeopardize his release.”
Why it works

This is the most critical phase of the scam. Every instruction in this block is designed to eliminate the one action that would expose the fraud instantly: calling another family member to verify. The FCC explicitly warns that the secrecy demand — “please don’t let mom and dad know” — is the clearest single red flag in a grandparent scam call.

🚨 The rule that stops every grandparent scam: No legitimate emergency — legal, medical, or otherwise — requires keeping a family member in the dark. The secrecy demand is not a request from your grandchild. It is the scammer’s most important tool. Teach your parent: secrecy demand = hang up, call back directly.

How AI Voice Cloning Makes This Scam Nearly Undetectable

The traditional grandparent scam relied on a caller who was moderately convincing. The AI-enhanced version is something different entirely — and it is now the default for organized operations.

Scammers pull audio clips from public social media — TikTok videos, Instagram reels, YouTube content, even a voicemail greeting — and feed them into commercially available voice synthesis software. The result is a clone that replicates tone, accent, cadence, and emotional register. According to McAfee Labs research, just three seconds of audio is enough to generate an 85% voice match. In 2023, over 3,000 voice-cloning grandparent scams were reported to authorities, costing victims more than $126 million.

The FBI’s 2025 IC3 report explicitly named AI-driven “family in distress” calls — the technical category that includes grandparent scams — as a rapidly growing enforcement priority, with distress scam losses surpassing $5 million in reported incidents in 2025 alone.

⚠️ The FTC’s official guidance is unambiguous: “Don’t trust the voice.” Even if the caller sounds exactly like your grandchild, that is no longer reliable evidence that it is your grandchild. The only reliable verification method is ending the call and dialing a number you already have saved.

The Six Red Flags — Ranked by How Often They Appear

Every grandparent scam call contains at least three of these six elements. The more that appear in a single call, the more certain it is a scam.

Red Flag Frequency in Confirmed Grandparent Scam Cases
Secrecy demand
98%
Urgency / time pressure
96%
Gift card / wire payment
91%
Fake lawyer / officer
78%
Excuse for voice change
62%
Vague opening / name harvest
54%
Source: Frequency estimates based on FTC, FCC, and law enforcement case descriptions, National Cybersecurity Alliance, Cuyahoga County Consumer Affairs, and Minnesota Attorney General Office scam case documentation. Percentages are illustrative of reported pattern prevalence, not a single-study dataset.

What to Do When the Call Comes

The following steps work regardless of whether the caller is using AI voice cloning or a basic impersonation. Share them with your parent word for word — then practice them together.

✋
Step 1
Pause Before Saying Anything
Do not volunteer a name. “Who is this?” is a complete, appropriate response.
→
🔑
Step 2
Ask for the Safe Word
Every family should have one. If the caller can’t say it, hang up immediately.
→
📵
Step 3
Hang Up and Call Back
Use the number already saved in your phone — never a number provided by the caller.
→
👨‍👩‍👧
Step 4
Tell Another Family Member
The secrecy demand is the scammer’s biggest weapon. Breaking it ends the scam.

Two Calls, Two Outcomes

Here is what these steps look like in practice — and what happens without them.

✅ The Call That Failed — With Preparation
The Call:A caller says “Grandma, it’s me” in a voice that sounds like her grandson. He’s been arrested. Bail is $5,000 in gift cards. Don’t tell anyone.
Response:She says “What’s our safe word?” Silence. She hangs up and dials her grandson’s real number — he answers from his apartment, completely fine. Scam defeated in under 60 seconds.
❌ The Call That Worked — Without Preparation
The Call:Same script, same AI-cloned voice. She fills in the name when asked. The “lawyer” calls back with instructions. She buys $4,500 in gift cards at three stores.
Outcome:Her grandson was at work the entire time. She lost $4,500, nearly impossible to recover. She didn’t report it out of shame for months.
✅ The Courier Variant — Stopped
The Call:A scammer arranges for a rideshare driver to come to the door to collect $3,000 cash for “attorney fees.”
Response:He remembers the rule: no payment method demanded by a caller is legitimate. He calls his daughter before opening the door. She’s at work. He does not open the door. He calls the police.
❌ The AI Clone Variant — No Word
The Call:The voice is a perfect AI clone — her daughter’s exact voice, crying, saying she was in a crash abroad and needed $8,000 wired immediately.
Outcome:She wired the money before she even tried calling her daughter’s number. Her daughter had been at a conference all day with her phone on silent.

Your Same-Day Protection Checklist

Call your parent after reading this. Work through these steps together. The whole conversation takes fifteen minutes and may be worth thousands of dollars.

🛡️ Grandparent Scam Protection — Do This Today
🔑

Establish a family safe word right now

Pick two random, unrelated words — not a pet name or birthday. Share it by phone call only, never by text. Every immediate family member should know it. The rule: no safe word, no action.

📞

Teach the name-harvest trap

If someone calls and says “It’s me!” — do not say a name in response. Say “Who is this?” instead. Giving away the name is the first domino in the scam sequence.

🚩

Drill the secrecy-demand rule

Any caller who says “don’t tell Mom and Dad” or “don’t tell anyone” is almost certainly a scammer. That instruction alone is enough to hang up without further discussion — even if the voice sounds exactly right.

💳

Memorize the payment red flag

No legitimate legal system, bail system, or emergency service accepts gift cards, wire transfers, or cryptocurrency as payment. If those methods are requested, it is a scam — no exceptions.

📵

Practice the hang-up-and-call-back protocol

After hanging up, call the family member using only the number already saved in their contacts — never a number given by the caller. This takes thirty seconds and ends every grandparent scam permanently.

🔒

Lock down social media audio and video

Scammers harvest voice samples from public posts. Set all family members’ accounts to friends-only, and audit what audio or video is publicly visible. Even a three-second clip is enough for AI voice cloning tools.

📰

Stay ahead of evolving scam scripts

Scammers update their scripts constantly in response to growing public awareness. A weekly scam alert that tracks new variations is the most reliable way to stay ahead of what’s being deployed right now.

Frequently Asked Questions

What is the grandparent scam and how does it work?
The grandparent scam is a phone fraud in which a criminal impersonates a grandchild or other family member in a fabricated emergency — typically an arrest, car accident, or medical crisis — and demands immediate payment in gift cards, wire transfers, or cash. The scammer uses urgency, shame, and a secrecy demand to prevent the victim from verifying the story with other family members. With AI voice cloning technology now widely available, the caller’s voice can sound nearly identical to the real family member’s, making detection significantly harder.
What are the exact phrases grandparent scammers use?
The most common opening is a vague “Hi Grandma, it’s me — do you know who this is?” which invites the victim to supply a name. The emergency is then introduced with shame-laden details (“I was drinking,” “I hit a pregnant woman”) to discourage reporting. The secrecy demand — “please don’t tell Mom and Dad” — follows almost universally, and is the single most reliable red flag. A second caller posing as a lawyer or officer provides payment instructions, almost always requesting gift cards, wire transfers, or cryptocurrency.
How do I protect my parent from the grandparent scam?
The most effective single protection is a family safe word — a pre-agreed code that any legitimate family member in an emergency can provide on demand. If a caller cannot say the word, hang up immediately and call the real family member using a number already saved in your contacts. Beyond the safe word, teach your parent to never volunteer a family member’s name in response to a vague opening, and to treat any secrecy demand or gift card payment request as automatic confirmation of a scam.
🔍
Margaret Calloway — Senior Researcher, Family Scam Shield

Margaret tracks emerging fraud tactics targeting older adults and their families, with a focus on AI-enabled voice scams, impersonation fraud, and practical low-tech countermeasures. Her research draws on FTC, FBI IC3, AARP, and McAfee data.

📚 Sources

  1. AARP — FBI Report: Internet Crime Losses Hit $20.9 Billion. April 2026. aarp.org
  2. Federal Trade Commission — FTC Issues Annual Report to Congress on Agency’s Actions to Protect Older Adults. December 2025. ftc.gov
  3. Federal Communications Commission — Grandparent Scams Get More Sophisticated. Updated 2024. fcc.gov
  4. National Cybersecurity Alliance — When Scammers Call Grandma. July 2024. staysafeonline.org
  5. Bitdefender / FBI IC3 — FBI: Cybercrime Losses Hit $21 Billion in 2025, Fueled by AI. April 2026. bitdefender.com

Know the Next Scam Script Before Your Parent Hears It

Family Scam Shield delivers a plain-language weekly alert covering the exact scams targeting families right now — including new grandparent scam variations, AI voice cloning tactics, and the specific phrases scammers are currently testing.

  • ✅ Weekly briefings written in plain language your parent can actually use
  • ✅ Real-time alerts when new grandparent scam scripts go live
  • ✅ Shareable summaries you can forward to your parent in one tap