How to Talk to Your Parents About Online Scams

You know the feeling. Your mom mentions she got an email from "Microsoft" asking her to call a number immediately. Your stomach drops. You want to help, but you also don't want to sound like you're treating her like a child who can't handle her own affairs.

This is one of the most delicate conversations adult children face today. According to the FBI's Internet Crime Complaint Center, Americans over 60 lost $3.4 billion to internet scams in 2023 alone. But here's what makes this tricky: talking about online safety with our parents can feel like we're questioning their judgment, their independence, or worse, treating them like they're losing their edge.

I remember watching my own father navigate this exact tension with my grandfather. One conversation about a phishing email turned into a week of uncomfortable silence. Nobody wants that.

So how do we have this conversation without it feeling like a lecture or an intervention?

Start With Your Own Story (Even If It's Embarrassing)

Here's the thing: scammers are getting better. Like, really good. The social engineering tactics they use would fool most of us on a bad day.

Instead of leading with "Mom, you need to be more careful," try this: share your own close call. Maybe you almost clicked on that Amazon package notification. Or that time you got a text that looked exactly like it was from your bank.

When we lead with our own vulnerability, we're not positioned above our parents looking down. We're standing beside them, acknowledging that this stuff is genuinely confusing and sophisticated.

"I nearly fell for this thing last week..." is a much better opening than "You need to watch out for..."

Reframe It as Partnership, Not Protection

Our parents have decades of life experience that we don't have. They survived without smartphones, built careers, raised families, and navigated plenty of challenges we can't imagine.

What they're dealing with now isn't a deficit in intelligence or capability. It's simply unfamiliarity with a rapidly evolving digital landscape that didn't exist for most of their lives.

The conversation shifts when we acknowledge this:

"These scammers spend all day, every day, figuring out new tricks. I read about the latest ones, and honestly, some are so clever they'd fool anyone who isn't up to speed. Want me to walk you through what I'm seeing out there?"

This isn't about them being unable to manage. It's about the playing field changing faster than anyone can keep up without active effort.

Focus on Specific Scenarios, Not General Warnings

"Be careful online" is about as useful as "drive safely." It's too broad to be actionable.

Instead, walk through actual scenarios together:

"If you get an email that says your account will be closed unless you click this link, here's what to look for..." Then show them. Open your own email together and examine a real suspicious message side by side.

"When someone calls claiming to be from tech support, here's the dead giveaway..." And talk through why legitimate companies never cold-call asking for remote access.

Make it concrete. Make it real. Make it something they can picture themselves encountering.

Create a "Before You Click" Checklist Together

This isn't about creating rules for them. It's about building a simple decision tree you create together:

When they get a surprising email or call, suggest three quick checks:

• Does this message make you feel urgency or panic? (That's the biggest red flag)

• Is it asking for information you wouldn't normally share over email or phone?

• Can you verify this by contacting the company directly using a phone number you look up yourself?

Write it down together. Maybe it goes on the fridge, maybe in their phone notes. The act of creating it together matters more than the perfect wording.

Make Yourself the "Second Opinion" Person

Here's where the rubber meets the road: tell them explicitly, without shame or judgment attached, that you want to be their verification partner.

"If you ever get something that feels off, even a little bit, I want you to text me a screenshot or call me before responding. I promise I won't make you feel bad for asking. I'd rather look at a hundred false alarms than miss the one real threat."

And then, when they do reach out, keep your word. No "I told you so." No exasperation. Just "Thanks for checking with me. Here's what I see..."

Acknowledge What They're Giving Up

There's a real loss happening here that we don't talk about enough. Our parents grew up in an era where people generally meant what they said. Where a phone call from someone claiming to be from the bank probably was from the bank. Where you could trust that the person on the other end wasn't systematically trying to steal from you.

The constant vigilance we're asking them to maintain represents a genuine shift in how they've navigated the world for 60, 70, 80 years. That's not nothing.

Acknowledging this loss, this necessary suspicion, this erosion of basic trust in everyday interactions, matters. "I know this isn't how the world used to work, and I hate that you have to think this way now" goes a long way.

Set Up the Tech Side (Without Making It Feel Like a Takeover)

There are practical tools that can help without being invasive:

Suggest setting up two-factor authentication together on their important accounts. Frame it as something everyone should do, not something just for them.

Offer to help update their devices and browsers. Outdated software is one of the biggest vulnerabilities, and it's not something most people think about regularly.

Talk about password managers, but only if they're genuinely interested. Some people will never love them, and that's okay. Meeting them where they are matters more than perfect security.

What If They've Already Been Scammed?

This is the conversation nobody wants to have, but if it happens, how you respond will determine whether they tell you about problems in the future.

Skip the "How could you fall for this?" and go straight to "What information did they get? Let's figure out what we need to do right now to protect you."

Action mode, not judgment mode.

Call the banks together. File the reports together. Change the passwords together. And then, after the crisis is handled, maybe gently revisit prevention, but only if they're open to it.

Remember: It's Not About Winning

If this conversation turns into a power struggle, everyone loses. The goal isn't to prove you're right about the dangers. The goal isn't to establish that you know better.

The goal is to keep someone you love safe while respecting their autonomy and dignity.

Sometimes that means letting them make their own choices, even ones you disagree with. Sometimes that means backing off and trying again another day. Sometimes it means accepting that they'll learn from experience rather than from your warnings.

What matters most is keeping the door open. Not the perfect conversation, not saying everything you wanted to say, not getting them to follow every piece of advice.

Just keeping the door open so they'll come to you when something feels wrong.

Because in the end, that's the real security system: a relationship strong enough that asking for help feels natural, not like an admission of failure.

Are you worried about your parents' digital safety in the Greater Sacramento area? We offer 'Peace of Mind' tech audits, where we meet with your parents in their home (Roseville, Folsom, or Sacramento) to secure their devices and educate them in a patient, non-judgmental way. Book Today.

If you or your parents live in Folsom or Roseville, we recommend following the Placer PROTECT task force or the Sacramento County District Attorney’s Elder Abuse page for real-time local alerts.