A Scam Safety Checklist for Older Parents
Scams are part of daily life in Australia now. They arrive by text, by email, by phone, and on Facebook, and they are getting better at looking real. The good news is that almost all of them rely on the same trick: rushing you into acting before you have time to think. A few calm habits stop most of them cold.
This is a simple checklist you can run through with an older parent, or keep by the phone yourself. It is not about living in fear of every message. It is about having a steady routine so that when something odd turns up, you already know what to do. You will find more advice like this in our main guide to staying safe online.
Quick answer
The one rule that beats most scams is this: slow down and check, using a number or website you found yourself. Never act on a link, never share a password or one-off code, and never feel rushed. If money is involved, call your bank straight away. For free, calm advice in Australia, Scamwatch lists current scams at scamwatch.gov.au, and IDCARE supports anyone whose details have been exposed on 1800 595 160.
The everyday scam safety checklist
Run through these once together, then keep them somewhere handy. They cover the situations that catch people out most often. None of them takes any special knowledge, just the habit of pausing before you act.
The checklist
- Slow down. A real bank, government department or company can always wait. Urgency is the warning sign.
- Never tap a link in a text or email you were not expecting. Go to the website or app yourself instead.
- Never share a password, PIN or one-off code, even if the caller sounds official. No real organisation will ask for these.
- Remember that under the banks’ Scam-Safe Accord, Australian banks have removed links from their text messages. A bank text with a link is a scam.
- If a caller claims to be your bank, hang up and call the number on the back of your card.
- Treat any unexpected request for money or details as a scam until you have checked it yourself.
- Do not trust the name or number on your screen. Scammers can fake both.
- If you are unsure, ask someone you trust before you act. A quick phone call to family beats a costly mistake.
- If a website looks suspicious, do not buy or log in. Look the business up independently and check Scamwatch at scamwatch.gov.au for warnings.
The red flags that should make anyone pause
Most scams share a handful of telltale signs. If a message or call has any of these, treat it as suspect. There is a sudden sense of urgency, a threat of some loss if you do not act now, a request for a password or code, a link you did not ask for, or a push to keep the whole thing secret. A genuine organisation will never mind you hanging up and calling back on a number you trust. If a caller objects to that, you have your answer.
One pattern worth naming for families is the grandparent scam, where a caller or texter pretends to be a grandchild in trouble and needs money fast. Agreeing on a simple family question only the real person would know is a quiet, effective defence. Our guides to spotting text message scams and phone call scams from fake ATO, Centrelink and bank callers go into the common ones in more detail.
The new rules that protect you in Australia
It helps to know the system is shifting in your favour. Under the new Scams Prevention Framework, banks, phone companies and large online platforms now have legal duties to prevent, detect and disrupt scams, and the Australian Financial Complaints Authority (AFCA) is becoming the single free place to take a scam complaint if a bank or telco does not do its part. You can reach AFCA on 1800 931 678.
On top of that, the banks’ Scam-Safe Accord has removed links from bank texts and brought in a “Confirmation of Payee” name check, which warns you when the account name does not match before you send money. One honest note, though: Australia does not have a guaranteed scheme that pays everyone back. Banks can often stop, trace or refund money, and unauthorised charges are frequently put right, but money you were tricked into sending yourself is much harder to recover. That is exactly why the pause-and-check habit matters so much.
If something has already happened
If a parent has clicked a link, shared a detail, or sent money, the worst thing anyone can do is panic or scold. Stay calm and work through it. Acting quickly matters far more than working out how it happened.
- If money has been sent or taken, contact the bank straight away. They may be able to stop or reverse it, and the sooner the better.
- If a password was shared, change it on that account, and on any other account that used the same one.
- Keep any texts, emails or numbers as a record. They help when you report it.
- Be wary of anyone who later offers to recover your money for a fee. That is a common second scam aimed at people who have already been caught.
For the full set of steps after a suspicious link, see our guide on what to do if you clicked a scam text link.
Who to contact in Australia
You do not need to work out which agency handles what. Reporting a scam, even one that cost you nothing, helps protect others. These are the main places to go.
- Your bank, first and fast, if any money or banking detail is involved.
- Scamwatch, to report the scam and see current warnings. Report online at scamwatch.gov.au; there is no phone line, but every report helps warn others.
- IDCARE on 1800 595 160 if any personal or identity details were exposed. It is free and confidential.
- ReportCyber at cyber.gov.au for online fraud or cybercrime. The free Australian Cyber Security Hotline is 1300 292 371.
- The Police Assistance Line on 131 444 to report a fraud, or Triple Zero (000) if someone is in immediate danger.
It also helps to have the basics solid before anything goes wrong. A strong, separate password on the important accounts and a calm habit around online banking safety are worth setting up while everything is quiet. And if you help a parent with their devices from afar, our guide to setting up remote access safely shows how to do it without falling for the very tech support scams this checklist warns about.
Before you finish
Download the free Family Tech Safety Checklist to help check phone safety, passwords, scam messages, emergency contacts and medical alarm details.
FAQ: Scam safety for older parents
What is the single most useful habit?
Slow down and verify. Look up the organisation’s number or website yourself, rather than using the link or number you were sent, and call back to check. That one habit stops most scams.
My parent clicked a link but did not enter anything. Are they at risk?
Usually the click alone is low risk. Do not enter any details, close the page, and watch for anything odd. If they did type in a password or bank detail, change the password and contact the bank.
How do I report a scam in Australia?
Contact your bank first if money is involved. Then report to Scamwatch at scamwatch.gov.au and, if your identity is exposed, call IDCARE on 1800 595 160. You can report online fraud through ReportCyber at cyber.gov.au, or call the Police Assistance Line on 131 444. Reporting helps even if nothing was lost.
How do I raise this without worrying my parent?
Keep it matter-of-fact and on your side, not theirs. Frame it as a routine everyone follows now, like locking the door, rather than something they are getting wrong.
Is it rude to hang up on a caller?
No. A genuine organisation will not mind, and will follow up another way if it matters. Hanging up and calling back on a trusted number is exactly the right thing to do.
