The Anatomy of Elder Fraud: How Criminal Networks Exploit Trust, Fear and Financial Security

Financial scams targeting older adults are often described as a consumer-awareness problem: recognise a suspicious call, refuse an unusual payment request and report the incident. That framing is increasingly inadequate. Modern elder fraud is a structured form of financial crime combining impersonation, cyber-enabled deception, psychological manipulation, account takeover, money-mule networks and rapid cross-border movement of stolen funds.

The scale of reported harm has risen sharply. In 2025, the FBI’s Internet Crime Complaint Center received more than 201,000 complaints from people aged 60 and above, involving approximately $7.75 billion in reported losses. Complaints increased by 37% from the previous year, while losses rose by 59%. The average reported loss was around $38,500, and more than 12,400 complainants reported losing over $100,000. These figures capture only incidents reported to the FBI and should not be treated as a complete measure of victimisation.

For a FinCrime audience, the key point is that fraud against older people is not a single typology. It includes technology-support fraud, government and bank impersonation, investment schemes, romance scams, family-emergency fraud, lottery deception, identity theft and exploitation by relatives, caregivers or other trusted persons.

The strongest fraud networks do not simply ask for money. They construct a believable crisis, isolate the target from independent advice, direct the method of payment and move the proceeds through accounts, cryptoassets, couriers and money mules before the victim or financial institution can intervene.

Listen the podcast

Watch the video

Why older adults are attractive targets

Older adults are not inherently less capable of recognising fraud. Highly educated, financially experienced and technologically competent people can be deceived when criminals use credible information, sustained contact and carefully engineered pressure.

The attraction for organised fraud groups is frequently economic. Older people may have accumulated savings, investments, retirement accounts, valuable property and stronger credit histories. A successful scheme can therefore generate substantially larger returns than high-volume, low-value consumer fraud.

Life circumstances can also affect exposure. Retirement, bereavement, reduced social contact, illness or reliance on others for transportation and financial administration may create opportunities for manipulation. These factors are not universal, but criminals actively search for individuals who appear isolated, anxious or willing to engage with unsolicited callers.

Publicly available information makes targeting more precise. Social-media posts, property records, breached credentials, professional histories and family details can help fraudsters identify relatives, imitate trusted organisations and construct convincing explanations for why immediate action is required.

The victim is rarely deceived because one email looked genuine. The fraud succeeds because multiple details reinforce the story.

From unsolicited contact to managed fraud journey

Many schemes begin with a telephone call, text message, email, social-media message or computer pop-up. The initial communication is designed to create one of three emotional conditions: fear, concern for another person or anticipation of financial gain.

The criminal may claim that the victim’s bank account has been compromised, that their identity is connected to criminal activity, that a family member is in danger or that an investment opportunity is about to close.

Once the target responds, the interaction becomes increasingly controlled. Fraudsters may keep the person on the telephone for hours, transfer them between supposed departments and introduce additional actors posing as bank employees, police officers, lawyers or government investigators.

Each new participant appears to validate the previous story.

The victim may be ordered not to speak to relatives or bank staff because the investigation is supposedly confidential. They may be instructed to misrepresent the purpose of a withdrawal, divide payments across several institutions or remain on the telephone while entering a bank branch.

The payment stage is engineered to reduce reversibility. Criminals favour bank transfers, cryptocurrency, cash, gift cards, precious metals and courier collections because these methods can move value rapidly and complicate recovery.

The final stage is laundering. Recipient accounts may belong to professional money mules, shell companies, compromised businesses or other victims recruited through romance and employment scams. Funds can then be layered through additional accounts, converted into cryptoassets or transmitted overseas.

The false-security-alert model

Some of the most damaging schemes begin by pretending to protect the victim from fraud. A message may claim that a suspicious purchase has been made, that the victim’s computer contains malware or that their identity has been used in money laundering.

The target is connected to a supposed security specialist, bank investigator or government official. The criminal then explains that the victim’s genuine bank account is unsafe and that funds must be transferred to a “secure,” “protected” or “government-controlled” account.

No legitimate institution creates secret safe accounts for customers in response to an unsolicited call.

The FTC has identified a growing pattern in which older adults are persuaded to empty bank accounts, liquidate retirement assets, use cryptocurrency ATMs or surrender cash and gold to couriers. The fraud works because victims believe they are correcting a security problem rather than voluntarily paying a stranger.

Technology-support scams can provide the entry point. A fake warning instructs the victim to call a number, after which the criminal requests remote access to the device. Once connected, the attacker may view financial information, manipulate what appears on the screen, install persistence tools or guide the victim into online banking.

The presence of genuine account balances and transactions on the screen makes the subsequent deception more persuasive.

Investment and relationship-based fraud

Investment scams produced the highest reported losses among older complainants to the FBI in 2025. Cryptocurrency was associated with more than 42,000 complaints from people over 60, while investment fraud generated billions of dollars in reported harm.

These schemes frequently begin through social media, messaging applications, dating platforms or online investment groups. The criminal develops trust before introducing an opportunity involving cryptocurrency, foreign exchange, precious metals or shares.

A professional-looking website or application displays fabricated account balances and profits. Small withdrawals may initially be permitted to convince the victim that the platform is genuine. The criminal then encourages progressively larger investments, sometimes persuading the target to borrow money, liquidate retirement funds or release equity from property.

When the victim attempts to withdraw, the platform demands additional payments for taxes, verification, insurance or anti-money-laundering clearance. Every payment is described as the final obstacle, but the money is never released.

Romance and friendship scams use the same architecture with a stronger emotional component. The criminal invests weeks or months building a relationship before requesting financial assistance or recommending an investment.

In some cases, the victim is recruited as an unwitting money mule and asked to receive funds from other victims. This can expose the individual not only to financial loss but also to account closure, law-enforcement enquiries and potential legal consequences.

Family-emergency and voice-cloning scams

The traditional grandparent scam relies on panic. A caller claims that a child or grandchild has been arrested, injured, kidnapped or involved in an accident. A second person may impersonate a police officer, lawyer or doctor and demand immediate payment.

Artificial intelligence has increased the credibility of this typology. With a short audio sample obtained from social media or another public source, criminals can generate a voice resembling a family member. The call does not need to withstand lengthy examination; it only needs to create enough urgency for the victim to stop verifying the story independently.

Families can reduce this risk by establishing a verification process before an emergency occurs. This may include a private question, a family phrase or an agreement that unexpected financial requests must be confirmed through a second relative.

The important control is not the secrecy of one word. It is the requirement to end the incoming call and re-establish contact through a known telephone number.

Prize, inheritance and service-related scams

Lottery and sweepstakes fraud tells victims they have won money but must first pay taxes, legal charges, insurance or processing fees. Genuine prizes do not require payment through gift cards, cryptocurrency or personal transfers before winnings are released.

Inheritance and advanced-fee schemes use similar logic. The criminal presents a supposedly valuable asset that can be accessed only after repeated administrative payments.

Home-repair, medical-service and product scams may be less technologically sophisticated but can be equally damaging. A contractor may exaggerate urgent repair needs, demand a large advance payment or repeatedly expand the scope of work.

Fraud can also arise through misleading television, telephone or online promotions for financial products, health treatments and subscription services. The common feature is an imbalance of information combined with pressure to commit before obtaining independent advice.

When the exploiter is a trusted person

Elder financial exploitation is broader than stranger-initiated scams. Relatives, caregivers, friends, legal representatives and persons holding powers of attorney may misuse legitimate access to an older person’s finances.

Funds may be withdrawn without consent, assets transferred, wills or powers of attorney changed, property sold or payments made for services that were never provided.

Warning signs include a new person taking control of communications, unexplained changes to contact details, sudden amendments to estate-planning arrangements and an older customer appearing fearful or unable to speak privately.

A caregiver may insist on answering questions, prevent the customer from reviewing documents or display excessive interest in account balances.

This form of abuse requires a careful response. A relative conducting transactions is not automatically acting improperly, and older customers retain the right to make decisions that others may consider unwise. Institutions must distinguish between legitimate assistance, voluntary gifting, undue influence and theft.

The analysis should focus on consent, capacity, documentation, customer behaviour and deviation from established financial patterns.

What a resilient personal control stack looks like

The most important protective habit is independent verification. An unexpected caller, message or pop-up should never determine how the recipient verifies the claim.

The individual should end the communication and contact the organisation through a known application, statement, card or official directory. Caller identification, email branding and telephone numbers supplied by the caller cannot be trusted.

No bank, police force, regulator or technology company should instruct a customer to transfer money to protect it, buy gift cards, deposit cash into a cryptocurrency ATM or surrender valuables to a courier.

Account alerts should be enabled for transfers, withdrawals, new payees, contact-detail changes and device registrations. Strong, unique passwords and multifactor authentication should protect banking and email accounts. Remote-access software should not be installed at the request of an unsolicited caller.

Older customers may also consider naming a trusted contact whom a financial institution can approach when exploitation is suspected. A trusted contact does not automatically receive authority over the account; the purpose is to give the institution an independent person to contact when it cannot reach the customer or observes serious warning signs.

Family involvement should preserve autonomy rather than remove it. Regular, respectful conversations about scams are more effective than surveillance or assumptions that age alone justifies restricting financial access.

What to do after suspected fraud

Speed can determine whether funds are recovered. The victim or family member should contact the relevant bank, card issuer, payment provider or cryptoasset platform immediately and explain that the transaction resulted from fraud.

Transfers may still be traceable or capable of recall if reported quickly. Accounts and cards may need to be frozen, online credentials changed and compromised devices disconnected.

Evidence should be preserved, including messages, telephone numbers, receipts, account details, courier descriptions, transaction references and screenshots. The incident should be reported to the appropriate police, fraud-reporting and adult-protection authorities in the victim’s jurisdiction.

Victims should be warned about recovery scams. Criminals frequently return after an initial loss, claiming that they can recover the stolen money for an advance fee. The new contact may possess detailed information because the original fraud network retained or sold the victim’s data.

Shame is one of the criminal’s strongest protections. Delayed reporting allows funds to move further and leaves the victim exposed to repeat targeting. The appropriate response is practical assistance, not blame.

What financial institutions should detect

Banks and payment providers are uniquely positioned to observe changes that family members and law enforcement may not see.

Relevant indicators include large withdrawals from previously stable accounts, liquidation of deposits without concern for penalties, new international wires, repeated gift-card purchases, sudden cryptocurrency activity and transfers to unrelated third parties.

Behavioural indicators are equally important. The customer may appear frightened, be unwilling to end a telephone call or repeat language supplied by another person. A caregiver may refuse to leave the customer alone or a new individual may begin controlling transactions without appropriate authority.

FinCEN guidance stresses that no single indicator proves exploitation. Institutions should assess activity against the customer’s history and the surrounding circumstances.

Effective programmes combine customer-specific behavioural baselines, transaction monitoring, recipient-account intelligence and trained frontline employees. Potential responses include enhanced questioning, escalation to specialist teams, transaction holds where legally permitted, contact with a designated trusted person and timely suspicious-activity reporting.

Receiving institutions also have an important role. Detection should not stop at the victim’s account. Networks of mule accounts, repeated payments from older customers, rapid pass-through activity and conversion into cash or cryptoassets can identify the infrastructure used to monetise the scam.

What this means for financial crime leaders

Fraud against older adults cannot be solved by telling customers to be more careful. The most serious schemes are professionally organised, emotionally sophisticated and designed to defeat ordinary verification habits.

Resilience requires coordination between financial institutions, telecommunications providers, technology platforms, retailers, cryptoasset businesses, law enforcement and social-protection agencies.

For FinCrime leaders, the challenge is to connect human behaviour with financial data. A transfer may be authorised and technically authenticated while still resulting from coercion or deception. A customer may insist that the transaction is legitimate because the criminal is controlling the narrative in real time.

The strongest controls create an opportunity for independent thought before irreversible value leaves the financial system. That means recognising unusual behaviour, introducing proportionate friction, identifying mule infrastructure and treating customer interaction as an intelligence source rather than a routine service process.

Protecting older adults is not about assuming incapacity. It is about recognising how criminals exploit trust, fear, isolation and accumulated wealth—and building financial systems capable of intervening before a manufactured emergency becomes a permanent loss.