What is Phishing?: A Practical Guide for Families Planning Senior Care

Fraud prevention depends on slowing an unexpected request and checking it through an independent channel. National Institute on Aging guidance supports person-centered decisions that attend to health, function, and individual goals (National Institute on Aging, 2024).

1. What does a phishing message try to do?

Phishing uses email, texts, calls, social media, or fake websites to obtain money, passwords, codes, or personal information. Urgency is a tactic, not proof. In phishing, this point is stronger when the family records the date, setting, and practical consequence instead of relying on a general impression. That record helps identify a pattern, lets the older adult explain their experience, and gives a clinician or qualified adviser a focused question to answer. It also prevents a rushed decision based on the most recent incident alone. The appropriate response should be proportionate: address the present risk, retain as much control as possible, and schedule a review when new information is available. A plan is safer when responsibilities, next steps, and limits are explicit rather than assumed (National Institute on Aging, 2024).

2. Which clues are most useful?

Mismatched addresses, unexpected attachments, gift-card payment, cryptocurrency, secrecy, or a request for a one-time code are meaningful warnings. In phishing, this point is stronger when the family records the date, setting, and practical consequence instead of relying on a general impression. That record helps identify a pattern, lets the older adult explain their experience, and gives a clinician or qualified adviser a focused question to answer. It also prevents a rushed decision based on the most recent incident alone. The appropriate response should be proportionate: address the present risk, retain as much control as possible, and schedule a review when new information is available. A plan is safer when responsibilities, next steps, and limits are explicit rather than assumed (National Institute on Aging, 2024).

3. Why avoid clicking?

A link can lead to an imitation site or harmful software. Opening a message is different from entering credentials or codes. In phishing, this point is stronger when the family records the date, setting, and practical consequence instead of relying on a general impression. That record helps identify a pattern, lets the older adult explain their experience, and gives a clinician or qualified adviser a focused question to answer. It also prevents a rushed decision based on the most recent incident alone. The appropriate response should be proportionate: address the present risk, retain as much control as possible, and schedule a review when new information is available. A plan is safer when responsibilities, next steps, and limits are explicit rather than assumed (National Institute on Aging, 2024).

4. How is a request verified safely?

Use a known phone number, bookmarked site, or official app. Do not reply to the message or use its number; contact a relative another way. In phishing, this point is stronger when the family records the date, setting, and practical consequence instead of relying on a general impression. That record helps identify a pattern, lets the older adult explain their experience, and gives a clinician or qualified adviser a focused question to answer. It also prevents a rushed decision based on the most recent incident alone. The appropriate response should be proportionate: address the present risk, retain as much control as possible, and schedule a review when new information is available. A plan is safer when responsibilities, next steps, and limits are explicit rather than assumed (National Institute on Aging, 2024).

5. What should caregivers discuss?

Agree on a pause rule: no money, password, or code is shared during an unexpected call. This protects autonomy without shame. In phishing, this point is stronger when the family records the date, setting, and practical consequence instead of relying on a general impression. That record helps identify a pattern, lets the older adult explain their experience, and gives a clinician or qualified adviser a focused question to answer. It also prevents a rushed decision based on the most recent incident alone. The appropriate response should be proportionate: address the present risk, retain as much control as possible, and schedule a review when new information is available. A plan is safer when responsibilities, next steps, and limits are explicit rather than assumed (National Institute on Aging, 2024).

6. What if information was shared?

Change affected passwords from a known device, use multifactor authentication, contact the institution officially, and review account activity. In phishing, this point is stronger when the family records the date, setting, and practical consequence instead of relying on a general impression. That record helps identify a pattern, lets the older adult explain their experience, and gives a clinician or qualified adviser a focused question to answer. It also prevents a rushed decision based on the most recent incident alone. The appropriate response should be proportionate: address the present risk, retain as much control as possible, and schedule a review when new information is available. A plan is safer when responsibilities, next steps, and limits are explicit rather than assumed (National Institute on Aging, 2024).

7. How can accounts be protected?

Use unique long passwords, update software, review privacy settings, and never share verification codes with claimed support staff. In phishing, this point is stronger when the family records the date, setting, and practical consequence instead of relying on a general impression. That record helps identify a pattern, lets the older adult explain their experience, and gives a clinician or qualified adviser a focused question to answer. It also prevents a rushed decision based on the most recent incident alone. The appropriate response should be proportionate: address the present risk, retain as much control as possible, and schedule a review when new information is available. A plan is safer when responsibilities, next steps, and limits are explicit rather than assumed (National Institute on Aging, 2024).

8. When is reporting worthwhile?

Report fraud to the platform, financial institution, and government channel. A report can document the event and sometimes interrupt a transfer. In phishing, this point is stronger when the family records the date, setting, and practical consequence instead of relying on a general impression. That record helps identify a pattern, lets the older adult explain their experience, and gives a clinician or qualified adviser a focused question to answer. It also prevents a rushed decision based on the most recent incident alone. The appropriate response should be proportionate: address the present risk, retain as much control as possible, and schedule a review when new information is available. A plan is safer when responsibilities, next steps, and limits are explicit rather than assumed (National Institute on Aging, 2024).

Scammers can use social media, public records, or a compromised account to make a message feel personal. A caller who knows a grandchild?s name or a recent purchase still needs independent verification.

Preserve the message, number, link, receipt, and date before deleting anything. These details help institutions investigate. Shame makes fraud more powerful, so respond with practical support rather than blame.

Regular short conversations about new scams are more effective than one warning. Rehearsing a polite refusal gives everyone words to use under pressure.

A practical next step is to discuss what is phishing? in a scheduled conversation, compare the written information with lived experience, and decide who will check back. Small changes should be tested deliberately, with a date for review and a clear path for raising new concerns. This approach respects the older adult while keeping important details from being lost between conversations. If the situation changes quickly, the planned review should move sooner rather than waiting for the original date.

Saving an official contact number in advance makes it easier to verify a worrying request without relying on the suspicious message.

• National Institute on Aging. (2024). Health resources.
• Administration for Community Living. Eldercare Locator.
• Federal Trade Commission. Consumer advice.