Your Parent Sent Money to a Scammer. Now What?

First: they're not foolish, they're targeted, and the most important thing you do in the next hour is not about the money. It's about making sure they tell you the next one. Here's the recovery playbook, in order.

Last reviewed August 2026 Reading time: 8 minutes

recovery has an order

The scam recovery timeline

After money or codes move, the order matters: contain first, report second, talk third, protect fourth. The order is what limits the damage.

  1. 1. ContainThe first hourStop contact, change the passwords and codes that were shared, and put holds on the accounts that were touched.
  2. 2. ReportAgencies need the evidenceThe FTC at reportfraud.ftc.gov, the real bank or agency, and the platform the money moved through.
  3. 3. TalkThe real interventionThe conversation with the parent, without blame, so the next attempt gets shared instead of hidden.
  4. 4. ProtectWhat's leftNew passwords, two-factor, and the repeated-targeting watch that expects the second attempt.

What happened

Money, personal information, a code, or device access was shared

Act quickly, but do not guess. The first job is to stop contact and reach the real company through a channel you find yourself.

Do this first

Call the company used to send the money. Use the number on the card, statement, official app, or official website. Report fraud and ask whether the payment can be stopped or reversed.

Do not do this

Do not contact the scammer again, delete messages or receipts, or pay anyone who promises recovery for a fee.

Buy anything?

No. Paid recovery, monitoring, or security products are not the first move. Start with the bank or payment company and the free government recovery steps.

What to preserve

Keep messages, phone numbers, receipts, gift cards, transaction details, dates, and the names used. Write a short timeline while it is fresh.

Choose what left their hands

  • Money: contact the card issuer, bank, wire company, gift-card issuer, or payment app and ask to reverse the fraudulent transaction. Cryptocurrency is typically not reversible, but report it to the sending platform.
  • Password, code, Social Security number, or account details: change affected and reused passwords from a trusted device, check accounts for changes, and follow the recovery plan at IdentityTheft.gov.
  • Computer or phone access: stop the remote session, disconnect the device from the internet, update its security software, run a scan, and check financial accounts for unauthorized activity.

Send the part they need

Text to Mom or Dad

Thank you for telling me. Please stop all contact with them and do not delete any messages or receipts. We will call the real company using a number we find ourselves and ask what can still be stopped. Do not pay anyone who promises to recover the money.

Text to a sibling

Mom/Dad reported a scam. I am contacting the bank or payment company now. Please preserve screenshots and receipts, write a timeline, and file the FTC and IC3 reports. Do not contact the scammer. Reply with the report confirmation numbers and any accounts or information that were shared.

Step 1: The first hour: contain the damage

Contact the company used to send the money as soon as possible. The FTC says it is always worth asking whether the transaction can be reversed, even though recovery is not guaranteed:

  • Gift cards: call the issuer using the number on the card or the brand's official site. Say it was used in a scam and ask for a refund. Keep the card and receipt.
  • Wire transfer: contact the wire company or bank, report a fraudulent transfer, and ask for it to be reversed.
  • Money transfer app: report the fraudulent transaction to the app company. If a card or bank account was linked, report it there too and ask to reverse the charge.
  • Credit or debit card: call the issuer using the number on the card, report a fraudulent charge, and ask for a reversal.
  • Cryptocurrency: these payments are typically not reversible. Contact the company used to send it and ask whether reversal is possible.

If the scammer got codes (texted verification codes) or remote access, treat accounts as compromised: change passwords, sign out of other devices, and disconnect from the internet if remote-access software is involved until it's removed by a professional.

Step 2: Report it so agencies have the evidence

  • FTC: reportfraud.ftc.gov: reports help the FTC build cases, spot trends, educate the public, and share scam data.
  • FBI IC3: ic3.gov: the FBI's central intake for cyber-enabled fraud, scams, and other cybercrime.
  • Forward scam texts to 7726 (SPAM) and report scam calls to your carrier.
  • If Social Security was impersonated: ssa.gov/scam.

Write down every detail while it's fresh: dates, phone numbers, the exact payment method and amounts, the scammer's story. Reports and recovery requests both need these.

Step 3: The conversation with your parent (this is the real intervention)

What you say next can make it easier or harder for your parent to tell you about another attempt. Keep the conversation focused on recovery and future contact, not blame.

  1. "You did nothing wrong. You were targeted by people who practice this." Getting a convincing scam attempt is not a character flaw.
  2. "Thank you for telling me." This is the sentence that matters most. It's the difference between a parent who reports the next weird call and one who hides it.
  3. "Here's the one rule from now on." If a call or message asks for money, codes, or account information, we stop and call back on a number we looked up ourselves. This rule blocks many common scam tactics.
  4. "We'll handle this together." Recovery is a team activity, not a report card.

Never lead with "how did you fall for this." The full conversation script is in the suspicious-text-and-call playbook.

Step 4: Protect what's left

After the immediate recovery steps, reduce the chance that another attempt succeeds:

  • Set up the family safe word so an urgent caller claiming to be family has to prove it.
  • Silence unknown callers on their phone (iPhone or Android) to reduce interruptions from numbers not in their contacts.
  • Consider a credit freeze at Equifax, Experian, and TransUnion if sensitive personal information was shared. The FTC says freezes are free and prevent new credit accounts from being opened while the freeze is active.
  • Ask the bank about a trusted contact and what alerts or account controls are available with the account holder's permission.
  • Set up the family password vault to make unique passwords easier to maintain.
  • Watch for recovery scams: do not pay an upfront fee to someone who promises to recover the money. Start with the payment company and official government reporting channels.

If this is part of a bigger pattern

Repeated losses, a parent who hides calls, or money controlled by a "helper" who appeared recently: those are signs of elder financial exploitation, which is different from a one-off scam and needs different help: contact your local Adult Protective Services and the Eldercare Locator (1-800-677-1116). A sudden change in money habits can also be a sign to get a professional assessment.

The next thing your family needs

Secure every account or device the scammer touched

If a password, verification code, account detail, or remote device session was involved, containment is not finished when the payment call ends.

Use the compromised-account plan

Then: set a family safe word, plan the money conversation, or check the next message before acting.

Sources & verification

This page is checked against the standards in our editorial policy, preferring government sources for scam recovery guidance. Reviewed August 2026:

Found an error? Report it: we log and correct material mistakes publicly.