There's a version of this conversation that goes badly. You know the one. You bring up something you read about phone scams, your parent says "I know, I know," you both feel slightly worse than before, and nothing actually changes. The topic gets filed away under Things We Don't Talk About, somewhere near politics and the will.
There's another version that goes fine.
The difference between them usually isn't the content of what you say. It's the timing, the framing, and honestly, whether or not your parent feels like they're being talked down to.
I've watched people sit through cybersecurity presentations where the message, underneath all the good intentions, was basically this: you're vulnerable and you don't know it. And I've watched the people in those seats smile and nod and then go home and do nothing, because nothing in that presentation made them feel capable of doing anything. It made them feel like a target. Nobody wants to see themselves that way.
That's the thing about fear as a strategy. It gets attention. It doesn't get action. Mostly it gets defensiveness.
So here's what I'd suggest instead.
Lead with curiosity, not concern
The fastest way to get a parent to stop listening is to open with "I'm worried about you." Even if that's true. Even if it's loving. It positions you as the expert and them as the problem before you've said a single useful thing.
Try this instead: "Have you been getting more of those weird calls lately? Or texts that seem off?"
That question does something different. It assumes they've noticed something. And they probably have. Most seniors are getting targeted regularly and they're already filtering it out, or trying to. What they often don't have is someone to talk to about it who isn't going to panic on them.
You're not coming in as a worried child. You're coming in as someone who's curious about their experience. That's a conversation. Not a lecture.
Listen for what they already know
When you ask that question, actually wait. Really listen. Because here's what I've found: a lot of seniors know more than they get credit for. They know the IRS doesn't call. They know the Nigerian prince thing is a joke. What they're often less sure about is the newer stuff: the calls that sound official, the texts that look like they're from their bank, the Facebook messages from "friends" they haven't spoken to in three years.
So don't start from zero. Start from what they already have. If your parent says "I got a weird call last week from someone saying they were from Medicare," that's real. That's an opening. You can work with that.
Conversely, if they say "I never really get those," that's worth a gentle follow-up. Not because they're wrong, but because those calls are often so normalized that they stop registering. "Did you ever get one where they're really urgent about something? Almost aggressive about it?" Sometimes that jogs a memory they hadn't categorized as a scam attempt yet.
One rule beats ten tips
The instinct, once you've got the conversation going, is to cover everything. Passwords. Two-factor authentication. Phishing emails. Don't.
You'll lose them. Not because they can't handle it, but because nobody can hold ten new rules in their head at once. Really. You can't either.
Give them one thing. The one thing I keep coming back to, because it works against so many of the threats targeting seniors right now: hang up and call back the official number. Always. Every time. No matter how urgent the caller makes it sound.
That's it. That's the rule. The bank will still be there. Medicare will still be there. Their grandchild will still be there. The only thing that requires you to act in the next three minutes is a scam.
If your parent can build that one reflex, they've got a defense that works against a wide range of threats. A rule you can actually remember is worth more than a checklist nobody opens again.
What this conversation is actually doing
The people who design these scams are counting on isolation. They count on your parent not having someone to call when something feels off. They count on the silence being easier than the conversation, and on the shame being strong enough to keep the whole thing quiet afterward.
The conversation you're having, even just once, even if it feels a little awkward, is a counter to that. It opens a door. It says: you can tell me things. I'm not going to make you feel foolish for getting a weird call. I'm going to help you figure out what to do next.
That's what protection looks like, really. Not a locked phone. Not a complicated password manager. A person they trust who they know they can call.
Pick a low-pressure moment and ask: "Have you been getting more of those weird calls lately?" That question opens the door. Everything else follows from there.