Why Older Adults Are Frequently Targeted
Online criminals are not random in their targeting. They study behavior, and they have identified older adults as a group that is disproportionately affected by digital fraud. The FBI's Internet Crime Complaint Center consistently reports that Americans over 60 lose more money to internet crime than any other age group.
Several factors contribute to this pattern. Older adults may be less familiar with the specific tactics scammers use online, making deceptive messages harder to identify. They are also more likely to have accumulated savings, making them financially attractive targets. Scammers exploit trust — impersonating Medicare, the Social Security Administration, banks, or grandchildren in distress — because these are relationships older adults reasonably expect to be reliable.
Understanding that targeting is deliberate and sophisticated is the first step. It is not a reflection of intelligence; it is a reflection of how well-resourced these criminal operations are. The good news is that a small number of practical habits substantially reduce your risk.
Phishing
A scam delivered via email or fake websites that tricks you into revealing passwords, account numbers, or other personal information by pretending to be a trusted source.
Two-Factor Authentication (2FA)
A security feature that requires you to confirm your identity in two ways — usually your password plus a code sent to your phone — before allowing access to an account.
Vishing
Voice phishing — a scam conducted over the phone where callers impersonate a trusted organization to extract personal or financial information.
Password Manager
An app or program that securely stores all your passwords in one place, encrypted, so you only need to remember a single master password.
Credit Freeze
A free service offered by credit bureaus that blocks anyone from opening new credit accounts in your name, helping prevent identity theft.
Social Engineering
Manipulation tactics that exploit trust, fear, or urgency to trick people into giving up information or money, without using any technical hacking.
The Most Common Online Scams to Know
Recognizing scam patterns is one of the most powerful defenses available. The most frequently reported schemes include:
- Impersonation scams: A caller or email claims to be from Social Security, the IRS, Medicare, or a bank, warning that your account is frozen or you owe money. They create panic and demand immediate action.
- Grandparent scams: A caller pretends to be a grandchild in legal or medical trouble, urgently requesting money — often via gift cards or wire transfer — and asks you not to tell other family members.
- Tech support scams: A pop-up or call claims your computer has a virus and offers to fix it remotely. The "technician" gains access to your device and may steal financial information or charge for fake services.
- Romance scams: Someone builds a relationship online over weeks or months, then invents a crisis requiring money. These are emotionally damaging and often involve significant financial loss.
- Lottery and prize scams: You're told you've won a prize but must pay fees upfront to claim it. Legitimate contests never require payment to receive winnings.
A common thread across all these scams is urgency. Scammers want you to act before you think. If any contact — by phone, email, or text — pressures you to act immediately, that pressure itself is a warning sign. See our guide to phishing, smishing, and vishing for a deeper look at how each method works in practice.
Gift Cards Are Never a Legitimate Payment Method
No government agency, utility company, or legitimate business will ever ask you to pay a bill or penalty using gift cards. If anyone — by phone, email, or text — instructs you to buy gift cards and read them the numbers, stop all contact immediately. This is one of the clearest signs of a scam in operation.
Protecting Your Accounts
Your email, banking, and social media accounts are the front doors to your digital life. Keeping them secure comes down to two priorities: strong passwords and a second layer of verification.
Use Strong, Unique Passwords
A strong password is long (at least 12 characters), uses a mix of letters, numbers, and symbols, and is not reused across different accounts. If one site is breached and you've used the same password elsewhere, every account sharing that password becomes vulnerable. A password manager — a secure app that stores and autofills your passwords — makes this manageable without memorizing dozens of complex strings.
Turn On Two-Factor Authentication
Two-factor authentication (2FA) means that even if someone learns your password, they still can't get in without a second code sent to your phone or email. Most banks, email providers, and social platforms offer this in their security settings. Enabling it takes about five minutes and adds significant protection.
For broader device habits that reinforce account security, see our guide on everyday habits that keep your devices secure.
A Simple Rule for Passwords
Think of a passphrase: three or four random, unrelated words strung together (for example, "carpet-moon-river-seven"). It's far easier to remember than a jumble of symbols but much harder for software to guess. Add a number or symbol to meet most site requirements, and you have a genuinely strong password.
Managing Your Privacy Online
Privacy online is about controlling who can see your information and how it gets used. A few straightforward adjustments make a meaningful difference.
- Review social media privacy settings: Limit who can see your posts, friend list, and personal details to people you actually know. Information like your birthday, hometown, and family members' names can be used to answer security questions or craft convincing scams.
- Be cautious about what you share publicly: Even seemingly harmless details — vacation plans, health updates, or photos of your home — can give scammers material to work with.
- Check app permissions: Many apps request access to your camera, microphone, location, or contacts. Periodically review which apps have which permissions and remove access that seems unnecessary.
- Use secure, private email for sensitive communication: Avoid sending Social Security numbers, financial account details, or medical information over email whenever possible.
When you're ready to do a thorough review of your digital safety, the Digital Safety Audit checklist walks through accounts, devices, and privacy settings in one structured process.
Privacy Settings Change Over Time
Social media platforms and apps periodically update their privacy policies and default settings, sometimes in ways that make more of your information visible than before. It's worth reviewing your settings every six months or so, even if you've done it before. Most platforms have a dedicated "Privacy" or "Security" section in their account settings.
What to Do If Something Goes Wrong
Even cautious, informed people can encounter a scam that catches them off guard. If you believe you've been targeted or have already shared information, taking prompt action limits the damage.
- Contact your bank or credit card company immediately if any financial information was shared. They can freeze accounts, reverse transactions where possible, and flag suspicious activity.
- Change the passwords for any accounts that may have been compromised, starting with your email — since it's often used to reset other accounts.
- Report the incident to the FTC at ReportFraud.ftc.gov. Your report helps law enforcement identify patterns and pursue scam operations.
- Consider placing a fraud alert or credit freeze with the three major credit bureaus (Equifax, Experian, and TransUnion). A freeze prevents anyone from opening new credit in your name.
- Tell someone you trust. Scammers often rely on shame or secrecy to prevent victims from reporting. Talking to a family member or trusted friend can help you navigate next steps and avoid further loss.
You don't need to handle it alone, and reporting it is not a sign of embarrassment — it is the right step for your protection and the protection of others.
