The Household Scam Protocol: 5 Rules for Sunday Dinner

The Household Scam Protocol: 5 Rules for Sunday Dinner

It's 6:40 on a Sunday. The pot roast is on the table, somebody's phone buzzes, and your dad says, "Huh. The bank says my account's locked."

Everyone at the table has a different reaction. Your sister says it's obviously fake. Your mom says to just call the number. Your dad is already reaching for the link. Nobody agrees, because nobody ever sat down and agreed on anything.

That's the real gap. Most families have heard scams exist. Very few have a plan. So here's one. It's five rules, it fits on a napkin, and I'd run it at your next family dinner before the dessert comes out.

Why a plan beats a lecture

Scammers don't need your family to be foolish. They need one panicked minute. A call that sounds like your kid in trouble, a "fraud department" that sounds calm and professional, a text with a countdown. Under that kind of pressure, nobody reasons their way out of it in the moment. People follow whatever they decided in advance.

So you decide in advance. If you're worried about how to bring it up without the eye-rolling, I wrote a separate piece on warning family without lecturing. This one assumes you've got everyone at the table and are ready to set rules.

The FTC's advice lines up with this. Its guide to avoiding scams tells people to "resist the pressure to act immediately," and says "anyone who pressures you to pay or give them your personal information is a scammer." A plan is how you actually resist, because the decision is already made.

Rule 1: Everyone has the safe word

Pick one random phrase. Not a pet's name, not a street, not anything a scammer could pull off Facebook. "Concrete penguin" works. "Haunted pineapple" works.

Anybody calling with an emergency, whether it's your kid, your grandkid or your spouse, gets asked for the word first. No word, no money, no more conversation. The full setup is in the family safe word guide, and it's worth reading why this beats cloned voices, because voice cloning is the reason this rule exists.

Say it out loud at dinner so everyone hears it. Don't text it. Don't put it in a group chat.

Rule 2: Hang up and dial back

This is the one that does most of the work. If anybody contacts you asking for money, a code, a password or a decision, you end the contact and reach them yourself, using a number you already have.

The FTC is specific here: "don't call a number they gave you or the number from your caller ID," because "the name and number you see might not be real." Look up the bank's number on the back of your card. Call your granddaughter's actual cell. Hanging up feels rude in the moment. Scammers count on that, and I'd say it's the most abused piece of politeness in America.

If the caller is real, they'll still be there in two minutes. If they're a scammer, they'll push harder to keep you on the line, and that pushing is your answer.

Rule 3: Nobody sends money on the same call

This is the money rule, and it has no exceptions. Nobody in the household sends money, buys gift cards, moves funds to a "safe account" or reads out a code on the same call where they heard about the emergency.

A gap in time, even twenty minutes, is the whole defense. The FTC lists the payment methods scammers prefer: wire transfers, payment apps, gift cards and crypto. It also says "never pay someone who insists that you can only pay with cryptocurrency." A real hospital, bail office or government agency doesn't need the money in the next eleven minutes. A scammer does, because eleven minutes is how long the spell lasts.

Add a sub-rule that keeps this honest: anything over a number you choose (say $500) gets a second set of eyes from the person in Rule 4.

Rule 4: One designated person gets the weird stuff

Pick one person, ideally the one who doesn't spiral, as the family's designated forwarder. Strange texts, screenshots, emails, letters and voicemails go to them before anyone clicks or calls.

Make it easy. One group chat or one phone number, no judgment, no "why would you even look at that." If your mom forwards you something that turns out to be real, you thank her anyway. The thing you're protecting is the habit of asking, and a forwarded false alarm is that habit working.

For the person who gets the forwards, here's a playbook for when your mom sends you a screenshot. You can also run a text or screenshot through our scam text checker for a second opinion. There's one free trial scan, 1 per 30 days with no card needed, and ongoing use is Cautellus Plus at $9.99/mo. It's a second opinion on the message in front of you, not a guarantee, so the callback rule still applies.

Rule 5: Freeze the front door

Last one is a one-time setup, not a habit. Put a credit freeze in place for the adults who aren't about to apply for credit, and for kids too.

The FTC's credit freeze page says "there's no cost to place or lift a credit freeze," and that you contact all three bureaus (Equifax, Experian and TransUnion) separately. For a child under 16, it says to "request a free credit freeze." A freeze doesn't stop a scammer from calling, but it takes away much of what they'd do with your Social Security number if they get it.

Also add the boring baseline: turn on account alerts at the bank, and make sure everyone knows who to call if a card is compromised. Our elder fraud protection guide covers the extra account-level protections for older relatives.

Running it at dinner

You don't need a binder. Here's the whole napkin:

1. Safe word. Ask for it on every emergency call.
2. Callback. Hang up, then dial a number you already have.
3. Money gap. No sending anything on the call where you heard about it.
4. One forwarder. Weird stuff goes to them first.
5. Freeze. Credit freezes done, alerts on.

Run it for ten minutes. Practice once: have someone play the panicked grandkid and make the rest of the table use the rules. It feels silly for about forty seconds, and then it stops feeling silly, because the table realizes how fast the pressure works even when you know it's a drill.

If you want the longer reading by topic, grandparent emergency scams and the senior scam protection guide cover the specific scripts. Everything lives under our elder scams hub if you want the full set.

If it already happened

Nobody gets blamed at this table. If someone already sent money, the first call is to their bank or payment app, fast, and then a report at ReportFraud.ftc.gov. The first 24 hours after sending money walks through the order. Shame is the scammer's second-best tool, right after urgency, so don't hand it over.

FAQ

How do I protect my parents from scams without taking over their finances? Agree on shared household rules instead of monitoring them: a safe word, a hang-up-and-call-back rule, a no-money-on-the-same-call rule, and one person they forward suspicious things to. Rules everyone shares feel like a family habit, not surveillance.

What is the callback rule? If anyone contacts you asking for money or information, you hang up and reach that person or company using a number you already have or looked up yourself. The FTC says not to call a number the caller gave you or the one on your caller ID, because caller ID can be faked.

Should my family freeze our credit? It's a sensible baseline. The FTC says there is no cost to place or lift a credit freeze, and that you contact Equifax, Experian and TransUnion separately. For a child under 16, a parent or guardian can request a free freeze.

What if my parent gets angry about the plan? Make it a rule for everyone, including you, and frame it as "scammers are good, so we all use the same checklist." Nobody is being told they're gullible. The plan is for the call engineered to make anyone panic.

What should we do if someone in the family already sent money? Move fast and skip the blame. Contact the bank or payment app right away, then report it at ReportFraud.ftc.gov. Our guide to the first 24 hours walks through the order of calls.

Can Cautellus check a suspicious message for my family? Yes. You can paste in a suspicious text or upload a screenshot for a second opinion before anyone acts on it. There is one free trial scan, 1 per 30 days with no card needed, and continued use requires Cautellus Plus at $9.99/mo.

Scammers have a script. Now your family has a better one.

Sources: FTC, How to Avoid a Scam; FTC, What to Know About Credit Freezes and Fraud Alerts.