The grandparent scam: how it works, and the one question that stops it
The grandparent scam is a phone call in which someone impersonates a relative in urgent trouble and asks for money. The most reliable defence is a shared code word that only real family members can produce.
It almost always starts the same way. The phone rings, and a voice that sounds shaken says some version of: “Grandma? It’s me.”
What follows is a script, and it is a good one. It has been refined over millions of calls, and it is built to do one thing: get money moving before you have time to think.
The four moves of the script
- Let you name them. The caller rarely says who they are first. They say “it’s me” and wait. When you answer “Jake?”, they have their identity, given to them by you.
- Explain the wrong voice. A car accident, a broken nose, crying, a bad line. This is inserted early because it removes the one clue you had.
- Create a deadline. Bail, a lawyer, a hospital, a customs fee. Something that must be paid in the next hour or it gets worse.
- Ask for secrecy. “Please don’t tell Mom, she’ll be furious.” This is the most important move, because it isolates you from the person most likely to say ‘that sounds wrong’.
Why the usual advice is no longer enough
The standard guidance is to hang up and call the person back on a number you already have. That advice is still correct and you should still do it.
But it has two weaknesses. It takes time and nerve at exactly the moment you feel neither, and it fails in the case the scammers deliberately construct — the one where your relative genuinely is away, on a borrowed phone, hard to reach. That is why the script so often includes travel.
There is also a newer problem. Voice cloning tools now need only a few seconds of recorded speech to produce a convincing imitation. Anyone with a public video has enough. “It didn’t sound like them” is no longer a defence you can rely on.
The question that ends the call
Agree a code word with your family in advance, and ask for it when someone calls claiming to be them.
This works because it inverts the problem. Every other check asks you to detect a lie — to hear something off in a voice, to spot a wrong detail. A code word asks the caller to produce something instead. A real family member has it. An impostor has no way to guess it, no matter how good the voice is or how much they know about your family from social media.
What to do if a call goes wrong
- Hang up. You do not owe a caller politeness, and there is no version of this where staying on the line helps you.
- Call the person yourself, on the number already in your phone.
- Tell one other family member what happened, even if you sent nothing. Scammers try the same family more than once.
- If money has already gone, call your bank immediately and say the word ‘scam’ — the first hour matters most.
Common questions
What is the grandparent scam?
A phone scam in which someone impersonates a grandchild or other relative in urgent trouble — an accident, an arrest, a hospital — and asks for money to be sent immediately, usually with a request to keep it secret from the rest of the family.
How do I know if the person calling is really my grandchild?
Ask for a code word agreed with your family in advance. A real family member can produce it; an impostor cannot, regardless of how convincing the voice sounds. Then hang up and call your relative back on the number already saved in your phone.
Can scammers fake a family member's voice?
Yes. Voice cloning tools need only a few seconds of recorded speech, which is often available from social media. Judging authenticity by how a voice sounds is no longer reliable.
What should I do if I already sent money to a scammer?
Call your bank immediately using the number on the back of your card and say it was a scam — recovery chances are highest in the first hours. If you sent gift cards, call the issuing company and read them the card numbers. Then report it to the FTC at reportfraud.ftc.gov.