My Parents Are Aging
Menu

Safety content

Impersonation Scams: Bank, Utility, Tech-Support, and Government

Scammers don't invent trust — they borrow it. The bank, the power company, "Microsoft," the IRS — these are costumes, and every impersonation scam is the same play in a different mask. Learn the play once and you can spot them all.

Last reviewed: 2026-08-08 Freshness class: F3 (scam patterns change fast) Reading time: 7 minutes

The short version: every impersonation scam has the same skeleton — a fake emergency or threat, a demand for money/codes/remote access, and pressure to act now without checking. The defense is one habit: never act on the message; verify through a channel you looked up yourself. That single habit defeats every scam on this page.

The one rule that beats all of them

Whatever the costume, the scam is always: "Something is wrong with [trusted thing] and you must act right now." Real banks, utilities, and agencies never need an instant decision from a cold call, text, or pop-up. So the universal defense is the verify-independently habit: hang up or ignore, look up the official number yourself, and call back. If it's real, they'll be glad you checked.

Bank impersonation

  • The script: "This is the fraud department at your bank — we see suspicious activity on your account. To confirm you're the owner, read us the code we just texted you."
  • The tell: your bank already knows who you are. It never needs you to "confirm" by reading a one-time code aloud — the code is the key to your account. Anyone asking you to read one back is taking your account, full stop.
  • The defense: hang up. Call the number on the back of your card (not the one in the call, text, or email). Ask: "Did you contact me about suspicious activity?"

Utility impersonation

  • The script: "This is [power/water/gas company]. Your service is being disconnected unless you pay the past-due balance immediately — here's how to pay with gift cards/crypto/Zelle."
  • The tell: utilities don't demand gift cards or cryptocurrency, ever. They also send written notices — real disconnection is a documented process, not a 10-minute phone ultimatum.
  • The defense: don't pay. Look up your utility's official customer-service number (from a past bill) and ask about the account.

Tech-support impersonation

  • The script: a pop-up or call claiming "your computer is infected" with a number to call, where a "technician" asks for remote access and payment to "fix" it.
  • The tell: real tech companies (Microsoft, Apple, Google) don't scan your computer and call you about the results. They never ask for remote access or payment to remove a "virus" they found.
  • The defense: close the pop-up or hang up (don't call the number). If someone already got remote access, disconnect from the internet, then have a trusted professional remove the software and change passwords from a different device.

Government impersonation

  • The script: "The IRS/Social Security is filing charges / suspending your number unless you pay now" — usually demanding gift cards, wire, or crypto, and threatening arrest.
  • The tell: government agencies don't call demanding immediate payment by gift card, and they don't arrest people over the phone. The real IRS and SSA communicate by mail first.
  • The defense: hang up. Report to the FTC (reportfraud.ftc.gov), and for Social Security impersonation specifically, ssa.gov/scam has the official guidance.

Family impersonation (the one with your voice)

  • The script: "Grandma, it's me — I'm in jail / the hospital / I need bail. Don't tell Mom and Dad. Send money." Sometimes the caller uses an AI voice clone of a real family member.
  • The tell: the urgency, the secrecy, and the demand for untraceable payment (gift cards, wire, crypto).
  • The defense: a family safe word — a code word only your family knows. No safe word, no money. And call the family member at their real number, not the one in the message.

What to do when a parent has been targeted

  • If nothing was lost: report it (forward texts to 7726, report to the FTC), reassure them they did nothing wrong, and set the one rule: "if a call asks for money, codes, or account info, we hang up and call back on a number we looked up."
  • If codes or account info were shared: treat accounts as compromised — change passwords, sign out of other devices, call the company's fraud line.
  • If money was sent: report immediately (timing matters for recovery) to the FTC and, if a crime occurred, FBI IC3. Gift-card companies and banks have specific recovery processes — call them first.
  • If your parent is being repeatedly targeted or pressured by someone they know: contact your local Adult Protective Services. The Eldercare Locator (1-800-677-1116) can point you to local help.

The full first-hour response — including what to say to your parent so they report the next one instead of hiding it — is in the suspicious-text-and-call playbook.

Prevent the next one

Sources & verification

This page follows the evidence hierarchy in our editorial policy, preferring government sources for scam patterns. Reviewed 2026-08-08:

Found an error? Report it — we log and correct material mistakes publicly.