How to set up scam and identity protection for a parent

Four different jobs, sold as one word

"Identity protection" gets used for four separate mechanisms that do not overlap. Buying one and assuming it covers the others is the common mistake.

Prevention at the credit file. A freeze or a lock stops new credit being opened in your parent's name. This is done directly with each of the three national credit bureaus and it is the strongest single step available.

Monitoring and alerts. A paid service watches credit files, and sometimes bank accounts, court records and data-breach dumps, then tells you when something appears. It does not stop anything. It shortens the time between something happening and someone noticing.

Recovery and insurance. Most paid plans include case managers who do the paperwork if an identity is stolen, plus a reimbursement policy with a stated limit. For many families this is the real value, because the paperwork is the exhausting part.

The phone and the inbox. Call blocking, spam filtering and a family conversation about what to do when someone calls. This is where most money is actually lost, and no credit-file product touches it.

Some links on this page are affiliate links and we may earn a commission if you buy through one. The free steps below come first for a reason: they are the ones that do the most.

Do the free things first

None of this costs money, and all of it takes an afternoon.

- Freeze the credit file at all three national bureaus. Each bureau runs its own process online or by phone. Check the current requirements and identity documents on each bureau's own site, because the steps change. A freeze can be lifted temporarily when your parent genuinely needs new credit.
- Add a trusted contact at the bank and the brokerage. Most institutions let an account holder name someone the firm may call if they suspect something is wrong. It does not give that person control of the account. Ask the branch what their form is called.
- Switch on account alerts. Text or email for every transaction over a threshold, every new payee, every password change, every login from a new device. Set the threshold low.
- Register the phone number on the national do-not-call list, and turn on the carrier's own spam-blocking feature, which is usually free and off by default.
- Turn on two-factor authentication on the email account first. Email is the recovery route for everything else.
- Ask the tax authority about an identity protection PIN. Eligibility and process are on the IRS site; check them there rather than relying on a summary.

Write down what you did and the date. You will not remember in March.

What a paid service is worth, and what it is not

Once the free steps are done, a paid plan buys three things: broader monitoring, a person who handles recovery, and an insurance limit.

When you compare plans, the differences that matter are these:

- How many bureaus are monitored. One-bureau monitoring is common on cheaper tiers and is much weaker than three.
- Whether alerts go to you as well as your parent. Some plans allow a designated family member to receive alerts. This is the feature that makes a plan useful for a caregiver, and it is often missing.
- What counts as a covered loss under the insurance, and the deductible. Read the policy summary, not the headline number.
- Whether the plan covers more than one person, and what a second adult adds per month.
- Whether bank and investment account monitoring is included or is a higher tier.
- What the price is in year two. First-year discounts are the norm across the category.

What a paid plan does not do: it does not stop a scam phone call, it does not prevent a wire transfer your parent authorises themselves, and it does not undo a gift-card purchase. Those are the scenarios where most money is lost. Confirm current pricing and inclusions on the provider's own site before you subscribe.

The phone call is the real risk

Credit-file fraud is slow and paper-based. The phone call is fast and personal, and it is where the losses concentrate.

The patterns are consistent. Someone claims to be from a government agency, a bank's fraud department, a utility, a computer support line, or a grandchild in trouble. There is urgency. There is a request for secrecy. There is an unusual payment method: gift cards, a wire, a cash courier, cryptocurrency.

What helps is not a lecture. It is a rule that is easy to remember and does not require judgement in the moment. Agree one with your parent and write it on a card by the phone:

Nobody legitimate needs a decision today. Hang up, then call me or call the number on the back of the card.

Then make the follow-up easy. Put your number, the bank's real number and the pharmacy's number on the same card, in large print. If your parent hangs up and calls you, the scam is over.

Also agree in advance that there will be no blame if something goes wrong. The reason losses stay hidden is embarrassment. A parent who expects a calm response reports it in hour one instead of month three, when recovery is still possible.

What to do if something has already happened

Work in this order and write down every reference number as you go.

1. Call the bank or card issuer on the number printed on the card, not one given to you by the caller. Ask them to freeze the account and open a fraud case.
2. Report it to the Federal Trade Commission at their reporting site. The report generates a recovery plan and a document other institutions will ask for.
3. Report it to local police and ask for the report number. Some institutions require it.
4. Contact the three credit bureaus to place a fraud alert or confirm the freeze is in place.
5. Change passwords, starting with the email account.
6. Write a single-page incident record: what happened, when, the amounts, who you called, the reference numbers, what each person said and the date they said it.

That last page is the one that matters. Fraud recovery is a paperwork process spread over months and several institutions, and the person who has kept a dated record of every call gets a very different experience from the person who has not.

Whether any of this has wider legal consequences for your parent's accounts or arrangements is a question for an attorney, not for a forum.

Where to keep the record

All of this produces documents: freeze PINs from three bureaus, account numbers, alert settings, trusted-contact forms, the plan you subscribed to and its renewal date, and, if something has gone wrong, a stack of reference numbers.

Keep them together, keep them off the kitchen counter, and make sure exactly one other person in the family knows where they are and can get to them. A freeze PIN that only you have is a problem the day you are unreachable.

Our Complete Care System is the full set of printable records for an ageing parent, and it includes the parts this page produces: the document index that says what exists and where it is kept, the money and paperwork tracker that logs accounts and who holds what, the contact record, and the family handover sheet. Every form is blank. You fill it once and copy the sections the rest of the family needs.

It is a filing system, not advice. What your parent should do about their accounts is a conversation for them, their bank and, where it gets complicated, their attorney.

Questions