How scammers win: the psychology behind the con

-

I’ve watched it happen up close: smart, capable older folks get cornered by scams that feel personalurgent, and official. These aren’t “dumb mistakes.” They’re engineered attacks—social engineering—built to exploit trust, routine, loneliness, fear, and the simple fact that most people were raised to be polite.

This is my deep-dive, from my point of view, on how elderly people get scammed, the scams they’re most often targeted with, and the habits that actually stop threat actors in their tracks.

Most scams aren’t “hacks.” They’re persuasion campaigns.

Threat actors typically follow a pattern:

  1. They establish authority or intimacy
    • “I’m from the bank.”
    • “I’m from Medicare.”
    • “I’m your grandson.”
    • “I’m the fraud department.”
    • “I’m tech support.”
  2. They manufacture urgency
    • “Right now.”
    • “Within 30 minutes.”
    • “Your account will be frozen.”
    • “The police are on the way.”
    • “Don’t tell anyone.”
  3. They isolate the target
    • “Stay on the phone.”
    • “Don’t call the bank—this line is secure.”
    • “Don’t tell your family—this is sensitive.”
    • Isolation kills the victim’s access to reality checks.
  4. They push a weird payment method
    • Gift cards.
    • Wire transfer.
    • Crypto ATM.
    • Cash courier.
    • Zelle/Venmo “to yourself” (but it’s really to them).

That last step is the giveaway: legitimate organizations don’t demand gift cards, crypto, or secrecy.


Why older adults are targeted (and why it works)

From what I’ve seen, older adults are often targeted because:

  • They’re more likely to pick up the phone and stay on it.
  • They were raised to respect authority (banks, police, doctors, government).
  • They may be less familiar with modern fraud tactics, especially QR codes, crypto ATMs, phishing pages, and spoofed phone numbers.
  • They often have stable assets—home equity, savings, retirement accounts.
  • They may be isolated—scammers love isolation because it removes witnesses.

And here’s the brutal truth: scammers don’t need to fool someone forever—only long enough to get a transfer approved.


The scams elderly people fall for most often

1) “Bank Fraud Department” / Account takeover scams

How it goes:
A call (often spoofed to look like the bank) claims suspicious activity. The scammer “helps” secure the account.

Common moves:

  • They ask for a one-time code (2FA). That code is the key to the account.
  • They convince the victim to move money to a “safe account.”
  • They have the victim read numbers off a card or confirm personal details.

Red flags:

  • They ask for a login code.
  • They pressure you to act immediately.
  • They tell you not to hang up and call the number on the card.

How to avoid it:

  • Hang up. Call the bank using the number on the back of the card.
  • Never share one-time codes with anyone—ever.
  • Treat “move money to protect it” as a scam by default.

2) Tech support scams (Microsoft/Apple/Geek Squad popups)

How it goes:
A computer shows a scary pop-up: “Your PC is infected. Call support.” Or they call claiming to be from a known company.

What they want:

  • Remote access (AnyDesk, TeamViewer, etc.).
  • Money for “service.”
  • Access to banking while they watch.
  • Sometimes they plant malware or create persistence.

Red flags:

  • Pop-ups with phone numbers.
  • Anyone insisting you install remote access software.
  • “Refund” schemes where they “accidentally” refund too much and demand repayment.

How to avoid it:

  • Never call numbers from pop-ups.
  • Close the browser (or power off if needed).
  • Only use support numbers from official websites (typed manually) or device documentation.
  • Set a rule: no remote access unless a trusted family member is physically present.

3) Grandparent scam / “family emergency” impersonation

How it goes:
A call: “Grandma, it’s me. I’m in trouble.” Then someone else (fake lawyer/police) takes over with instructions.

What they want:

  • Cash.
  • Wire transfers.
  • Gift cards.
  • Courier pickup.

Red flags:

  • Requests for secrecy.
  • Urgency and emotional manipulation.
  • Pressure not to call other family members.

How to avoid it:

  • Create a family safe word (a phrase only real family would know).
  • Hang up and call the family member directly using a saved number.
  • Verify through a second person before sending money.

4) Government impersonation (IRS, Social Security, Medicare, police)

How it goes:
Threats: arrest, suspended benefits, back taxes, or “your SSN was used in a crime.”

What they want:

  • Payment (gift cards/crypto/wire).
  • Personal data (SSN, Medicare number).
  • Identity documents.

Red flags:

  • Threats of immediate arrest.
  • Payment demands by phone.
  • “Keep this confidential.”

How to avoid it:

  • Government agencies don’t handle enforcement like that over the phone.
  • Hang up and call official numbers from statements or official websites.
  • Never give SSN/Medicare info to inbound callers.

5) Romance scams and companionship cons

How it goes:
They build a relationship over weeks/months, then a crisis hits: travel money, medical bills, customs fees, “business problem,” or crypto “investment.”

What they want:

  • Money transfers.
  • Access to accounts.
  • Sometimes gift cards.
  • Sometimes they groom the victim to act as a money mule.

Red flags:

  • Quick intensity, love-bombing.
  • Refuses video calls or has excuses.
  • Always a crisis that needs money.
  • Asks to move the conversation off-platform.

How to avoid it:

  • Verify identity with live video and consistency checks.
  • Never send money to someone you haven’t met in person.
  • Treat crypto investment tips from online relationships as hostile by default.

6) Investment and crypto scams (pig-butchering, fake platforms)

How it goes:
They show fake profits on a website/app. Victim invests more. Withdrawals get blocked unless “fees/taxes” are paid.

What they want:

  • Larger and larger deposits.
  • Identity documents (to “verify”).
  • Control over phone/computer.

Red flags:

  • Guaranteed returns.
  • Pressure to “act now.”
  • A platform you’ve never heard of with no credible history.
  • Withdrawal requires extra payment.

How to avoid it:

  • Use only well-known, regulated financial institutions.
  • Don’t take investment advice from strangers or social media.
  • Independently verify the firm using official regulator databases and known contact channels.

7) Medicare/health insurance scams

How it goes:
They offer “new Medicare cards,” free braces, genetic tests, or “coverage updates.”

What they want:

  • Medicare numbers.
  • Personal identity info.
  • Billing fraud opportunities.

Red flags:

  • “Free” medical devices/tests without your doctor.
  • Requests for Medicare number over the phone.
  • Robocalls about benefits.

How to avoid it:

  • Only discuss coverage changes via official providers or your doctor’s office.
  • Guard Medicare numbers like a credit card.

8) Sweepstakes, lottery, and “you’ve won!” scams

How it goes:
“You won, but you must pay taxes/fees first.”

What they want:

  • Payment up front.
  • Identity data.

Red flags:

  • You didn’t enter.
  • They want money to release winnings.

How to avoid it:

  • Real winnings don’t require payment via gift cards or crypto.
  • If it smells like a carnival game, it is.

9) Home repair, contractor, and “handyman” fraud

How it goes:
They target seniors with offers for roofs, driveways, tree trimming—then demand cash deposits and disappear.

Red flags:

  • “Leftover materials.”
  • High-pressure “today only.”
  • Refuses written contract.

How to avoid it:

  • Get 3 quotes.
  • Verify license/insurance.
  • Never pay full amount up front.
  • Pay by check/credit, not cash.

10) Charity scams (especially after disasters or during holidays)

How it goes:
They leverage emotion and urgency.

Red flags:

  • Pushy solicitors.
  • Unclear organization details.
  • Requests for unusual payment methods.

How to avoid it:

  • Donate directly through official sites you type in yourself.
  • Research the charity before giving.

The “never rules” I teach people (simple and brutally effective)

These stop most scams cold:

  1. Never pay anyone who contacts you unexpectedly with gift cards, crypto, wire, or cash courier.
  2. Never share one-time login codes. Not to a bank, not to a “fraud agent,” not to anyone.
  3. Never let a stranger remote into your computer.
  4. Never trust caller ID. It can be spoofed.
  5. Never act under pressure. Urgency is a weapon.
  6. Never keep it secret from family. Secrecy is a trap.
  7. Always hang up and call back using a known number (back of card, official statement, saved contact).

If somebody gets mad that you’re verifying? That’s not customer service—that’s a predator losing control.


Practical defenses that actually work in the real world

Phone defenses

  • Silence unknown callers (smartphones can do this; landlines can use call blockers).
  • Voicemail-first policy: if it matters, they’ll leave a message.
  • Create a “trusted contacts” list: bank, doctor, family—saved numbers only.
  • Use call screening where possible.

Account defenses

  • Enable 2FA (two-factor authentication) on email and bank accounts—prefer authenticator apps over SMS when possible.
  • Set transaction alerts on bank/credit cards for any purchase/transfer.
  • Lock credit with credit bureaus to reduce new-account fraud.
  • Use a separate email for banking vs social signups.

Family/process defenses

  • Make a “money rule”: any transfer over a set amount requires a second person review.
  • Safe word: one phrase that verifies real family in emergencies.
  • Practice scripts (sounds silly, works perfectly):
    • “I don’t handle money on incoming calls. I’ll call back.”
    • “I need to talk to my family/accountant first.”
    • “Send it by mail. I don’t do urgent payments.”

Computer defenses

  • Keep systems updated.
  • Use built-in anti-malware (Windows Security is fine for many people).
  • Use an ad blocker to reduce malicious popups.
  • Have one trusted person for tech help—no random “support” numbers.

If someone already got scammed: what I do immediately

Time matters. The goal is to stop bleeding and preserve evidence.

  1. Stop all contact with the scammer.
  2. Call the bank/credit card company using official numbers and report fraud.
  3. Change passwords (starting with email), enable 2FA.
  4. Check for remote access tools and remove them; consider a professional cleanup or reinstall.
  5. Report it (local police report helps with banks/insurance).
  6. Tell family/caregiver—not for shame, for containment.

Shame is the scammer’s aftershock weapon. Silence creates repeat victims.


The hard truth (and the empowering truth)

Threat actors aren’t looking for “stupid.” They’re looking for human. They exploit decency: trust, politeness, compassion, fear of trouble, desire to help family, and discomfort with technology.

Examples of online scams from my friends at Scammer Payback on Youtube.com

SCAM SAFETY CARD

For Seniors, Families, and Caregivers

STOP. BREATHE. VERIFY.


🚫 THE NEVER RULES

(If any of these happen, it is a scam.)

  • Never send gift cards, cryptocurrency, wire transfers, or cash.
  • Never share one-time codes, passwords, or login links.
  • Never let anyone remote into your computer or phone.
  • Never trust caller ID, email names, or text display names.
  • Never act under pressure or urgency.
  • Never keep money problems secret from family or caregivers.

⚠️ COMMON WARNING SIGNS

  • “This must be handled right now.”
  • Don’t tell anyone.”
  • Threats of arrest, frozen accounts, or lost benefits.
  • Requests to “move money to a safe account.”
  • Pop-ups or calls claiming to be tech support.
  • A family emergency that demands secrecy.
  • Anyone who gets angry when you say you want to verify.

🗣️ WHAT TO SAY (USE THESE WORDS)

  • “I don’t handle money on incoming calls.”
  • “I’m hanging up and calling back using a known number.”
  • “I need to speak with my family first.”
  • “Send it by mail. I don’t do urgent payments.”
  • “No. Remove my number.”

If they argue, rush you, or threaten you—hang up.


🛑 IF YOU THINK A SCAM IS HAPPENING

  1. Hang up. Close the browser. Power off if needed.
  2. Call a trusted person immediately.
  3. Contact your bank or credit card company using the number on the card.
  4. Change passwords, starting with email.
  5. Check recent transactions and alerts.
  6. Report the incident. Acting fast can limit damage.

📞 TRUSTED CONTACTS

(Fill this in and keep it updated)

  • Family / Caregiver: ______________________
  • Bank Phone Number: ______________________
  • Credit Card Fraud Line: __________________
  • Local Emergency (non-911): _______________

✅ REMEMBER

  • Urgency is the scam.
  • Real organizations give you time.
  • It’s okay to hang up.
  • It’s okay to say no.
  • It’s okay to ask for help.

When in doubt: STOP — VERIFY — CALL SOMEONE YOU TRUST

Share this article

Recent posts

Popular categories

Recent comments