Scam tactics evolve constantly, and a few have become dramatically more sophisticated and more damaging in just the past year or two. Here’s what’s actually active right now, in rough order of how serious the threat currently is.
1. AI Voice Cloning (“The New Grandparent Scam”)
This is the most alarming development in elder fraud in years, and it’s genuinely new enough that many families haven’t heard of it yet. Scammers can now clone a real family member’s voice using just a few seconds of audio pulled from social media, TikTok, old voicemails, or Facebook videos. The cloned voice — not an impersonation, an actual AI reproduction of tone, pacing, and inflection — calls a parent or grandparent claiming to be in a crisis: a car accident, an arrest, a kidnapping, and urgently needs money.
Reports on this have climbed sharply in 2026, with hundreds of millions of dollars in losses tied specifically to this scheme so far this year. Because it sounds exactly like the real person, it defeats the old advice about listening for “something off” in a caller’s voice.
The one real defense: a family code word — a phrase agreed on in advance that only real family members would know — combined with always calling the person back on a number you already have, not one provided by the caller. Hanging up and verifying independently defeats this scam completely, every time.
2. The “Phantom Hacker” Scam
The FBI has specifically flagged this as a fast-growing, three-phase scheme that has cost seniors billions of dollars, with an average loss per victim in the tens of thousands of dollars. It unfolds in stages, each one building trust for the next:
- Phase one: a fake “tech support” contact claims your computer has been hacked, and talks you into installing remote-access software.
- Phase two: a second scammer, posing as your bank’s fraud department, “confirms” the hack and says your money needs to move to a “safe account” to protect it.
- Phase three: a third scammer, posing as a government official, pressures the victim to stay quiet about the transfer — reinforcing the whole scheme as legitimate.
By the end, victims have voluntarily wired their own savings directly to the scammers, believing they were protecting themselves. Because it isn’t one caller but three separate, coordinated impersonations, it’s convinced even careful, skeptical people.
The real defense: never call a phone number provided in a pop-up, text, or unsolicited call, and never let someone you didn’t contact first install software or gain remote access to your computer. No legitimate bank or government agency will ever ask you to move money to a “safe” account.
3. Classic Family Emergency Scams (Non-AI Version)
The original version of the grandparent scam is still very much active — a caller says they’re a grandchild in trouble, sounding upset or vague enough to be plausible, needing bail money or medical payment immediately, and asking that you not tell the rest of the family. No AI required; just urgency and a willingness to believe.
4. Romance Scams
An online relationship — dating apps, social media, even a “wrong number” text that turns into an ongoing conversation — develops over weeks or months before the other person eventually needs money: a plane ticket to finally meet, a medical emergency, a business opportunity. These often cause both the largest financial losses and the deepest emotional harm, since the relationship itself feels real to the victim.
5. Government Impersonation
Calls claiming to be from the IRS, Social Security Administration, or Medicare, warning of a suspended benefit, unpaid tax, or compromised account — all resolved, of course, by an immediate payment. None of these agencies initiate contact this way or demand immediate payment by phone.
6. Tech Support Pop-Ups
A browser pop-up, often with an alarming sound, insists the computer is compromised and provides a number to call immediately. This is frequently the entry point into a Phantom Hacker scheme rather than a standalone scam.
What Ties All of These Together
Whatever the story, the pattern is consistent: urgency, secrecy (“don’t tell anyone”), and a request for payment that can’t be reversed or traced — gift cards, wire transfers, cryptocurrency, or cash. The single most effective habit against all of these, including the AI voice cloning threat, is the same: slow down, hang up, and verify independently before acting — call the person or institution back using a number you already have, not one given to you during the call.
What to Actually Do
A short, calm conversation with your parent about the specific scams above — before any of them ever reach their phone — is worth far more than a lecture after the fact. If it’s ever happened already, our earlier guide on the first 24 hours after suspected fraud walks through exactly what to do next.
If you want help putting real protections in place — account monitoring, a family code word, the legal authority to act quickly if something does happen — that’s exactly what we help families set up.