The phone rings late in the evening. It sounds exactly like your grandson. He's crying, he's been in a car accident, and he needs money for bail right now. "Please don't tell Mom and Dad." Then someone who says he's a lawyer gets on the line and explains how to pay.
Calls like this have been around for years. What's new is that the voice on the other end can now be a convincing copy made with free or cheap AI tools, built from a few seconds of someone talking in a video posted online. The FTC and the FBI have both warned families about it, and the FBI's advice includes one of the simplest security tools there is: a family code word.
Here's how these calls work, how to spot them, and how to set up a code word with your family in about ten minutes.
Want it all on one printable page? Get the free Family Code Word Checklist, with a wallet card for grandparents.
How the "family emergency" scam works
The script almost never changes. Only the voice got better.
- A loved one in trouble. A car accident, an arrest, a hospital, a trip abroad gone wrong. Sometimes it's a fake kidnapping with someone yelling in the background.
- Panic and urgency. You have to act right now, before you can think it through.
- Secrecy. "Don't call Mom." "Don't tell anyone, it'll make things worse." That keeps you from checking.
- A hand-off. A "lawyer," "officer" or "doctor" takes over the call and gives the payment instructions.
- Payment that's hard to undo. Gift cards, a wire transfer, a payment app, cryptocurrency, or even a "courier" who comes to your door to pick up cash.
The scammer doesn't need to hack anything. A short clip from a social media video, a voicemail greeting or a public post is often enough to copy how someone sounds. Caller ID can be faked too, so the call may even appear to come from a number you know.
Warning signs to share with everyone in the family
- The call is about an emergency and someone is asking for money.
- You're told to keep it secret or not to call other family members.
- They want gift cards, a wire, crypto, a payment app or cash picked up in person.
- The story is short on details and gets vague when you ask questions.
- The person won't let you hang up and call back.
Any one of these is a reason to slow down. Two or more together is almost always a scam.
The fix: a family code word
A family code word is a word or short phrase that only your family knows. If someone calls in an emergency asking for money or help, you ask for the code word. A real family member will know it. A scammer with a cloned voice won't.
It's free, it works on any phone, and it takes the guesswork out of a scary moment. You don't have to judge whether the voice sounds "right." You just ask.
How to set one up (about 10 minutes)
- Pick it together, in person or on a call you started. Don't choose it over text or email, and don't post about it.
- Make it something nobody could guess or look up. Skip pet names, street names, birthdays, school mascots and anything that's on social media. A random pair of words works well, like "purple tractor" or "pancake lighthouse."
- Keep it easy to remember under stress. Silly is good. Long and complicated is not.
- Tell everyone who might get a call. Grandparents especially, since they're often the target, plus older kids, college students and anyone who travels.
- Agree on the rule. No code word, no money, no matter how real the voice sounds.
- Practice once. Have a quick, low-key run-through at dinner so it feels normal to ask.
- Change it if it's ever used or shared. Treat it like a password you only use in an emergency.
Younger kids can learn it too. It's the same idea many families already use for "who's allowed to pick you up from school."
What to do if you get one of these calls
- Take a breath. The pressure is the scam. A real emergency will still be real in five minutes.
- Ask for the code word. If they don't know it, or dodge the question, hang up.
- Hang up and call back yourself. Use the number you already have saved for that person, not one the caller gives you. Then call another family member to check.
- Don't send money or gift cards, and never hand cash to a courier who comes to your door.
- Report it. Tell the FTC at ReportFraud.ftc.gov and the FBI at ic3.gov. If you already paid, call your bank or the gift card company right away; the sooner you call, the better the chance of stopping it.
And if a family member did get fooled, be kind. These calls are built to work on loving, careful people. Being embarrassed is what keeps people from reporting it.
Small habits that make you a harder target
- Think about what's public. Long, public videos of family members talking give scammers more to work with. Consider setting social accounts to friends-only.
- Use a generic voicemail greeting instead of a recording of your own voice.
- Let unknown numbers go to voicemail. If it's important, they'll leave a message.
- Lock down the accounts scammers use to learn about you. Strong, unique passwords and two-step login on email and social media make it harder for anyone to take over an account and message your family. Our Family Password Playbook walks your household through that one step at a time.
- Know the cousins of this scam. The same tricks show up in texts. See How to Spot a Scam Text.
A 2-minute family checklist
- We picked a code word together, not over text.
- Grandparents, teens and college kids all know it.
- Our rule: no code word, no money.
- Everyone knows to hang up and call back on a saved number.
- We know where to report: ReportFraud.ftc.gov and ic3.gov.
Print it for the fridge or the grandparents: get the free one-page Family Code Word Checklist.
If you only do one thing this week, make it the code word. Then pick something from our 5 Things to Do This Weekend to Protect Your Family Online, or browse our plain-language guides.
Worried about your security? So are we. Let's fix it together.