Familiarity is not verification
The phone rings during a storm. A voice sounds like your child, a relative, or a coworker. The caller says there is an urgent problem and someone will explain how to send money. You feel the physical rush to act before you have established what happened. That reaction is human. A household verification plan gives you a next step that does not depend on staying perfectly calm or becoming an expert at detecting synthetic audio.
The US Federal Trade Commission warns that scammers can clone a loved one's voice and recommends calling the person using a number you already know. Treat the apparent voice as a claim about identity, not proof. This does not mean every distressed caller is fraudulent. It means help should begin through an independently verified route, especially before money, credentials, or sensitive information changes hands.
Agree on a household callback rule
Choose a clear rule before a crisis: urgent requests involving money or accounts require a callback through a trusted saved number or another established channel. Explain the rule to relatives, caregivers, and anyone likely to contact the household. Keep key numbers available offline. If the claimed person cannot be reached, contact another trusted person who may know their location rather than continuing only through the caller's instructions.
Do not use the callback number, link, or new account supplied in the suspicious message as your only verification route. A claimed hospital, utility, bank, or employer can be contacted through a number from its official website, a known statement, or an existing record. If there is an immediate threat to life, contact the appropriate local emergency service through its established number. A verification process should support urgent help, not require amateur investigation of a dangerous situation.

A family phrase helps, with limits
A private family phrase can add a useful checkpoint when used thoughtfully. The FBI's guidance on generative-AI fraud includes creating a secret word or phrase with family members. Choose something that is not a public biographical detail, and agree how authorized household members will learn it. Do not display it on social media, a shared public document, or the outside of an emergency bag.
Treat the phrase as one layer. It can be forgotten, disclosed, or obtained through a compromised account. A caller who knows it should not automatically gain permission to move money. Combine it with an independent callback and a clear understanding of the requested action. If the phrase becomes exposed, replace it through a trusted route. The household's strongest habit is verifying the channel, not depending on a single clever question.
Watch the action the message demands
During disruption, fraudulent messages can impersonate charities, relief agencies, utilities, delivery services, employers, or local authorities. Instead of trying to judge whether the grammar or logo looks authentic, examine the requested action. Does it ask you to enter a password through a link, share a security code, send money to a new destination, install remote-access software, or keep the situation secret from someone you trust?
Pressure is a reason to slow the payment or account action while verifying. In its family-emergency scam guidance, the FTC describes urgency and payment demands that can make losses hard to reverse. Avoid treating any payment method as automatically safe; the key first question is whether the recipient and reason are independently verified. Be especially careful when a person insists that only one unusual route can solve the emergency.

Build a trusted information starting page
Create a short list of official local emergency-management, weather, utility, public-health, transport, and school sources. Bookmark the actual sites and keep the important numbers on paper. Include the sources and languages used by household members who may not follow the same media as you. If a warning appears in a forwarded screenshot, navigate independently to the named authority to check its current information.
Separate an alert from commentary about the alert. A dramatic video, a persuasive voiceover, or a familiar account sharing a claim does not establish location, time, or authenticity. If you cannot verify a post, do not present it to others as confirmed. You can tell relatives you are checking a report and direct them to official local updates. Correcting uncertainty early can prevent your own group chat from becoming a distribution system for an unverified claim.
Secure accounts before service becomes unreliable
Start with the accounts that unlock the rest of your life: primary email, financial services, mobile service, and any account used for recovery. CISA's Secure Our World guidance emphasizes strong unique passwords, multifactor authentication, recognizing phishing, and software updates. Use a reputable password manager if it suits your circumstances, enable available protections, and understand how to regain access if the usual device is lost.
Keep recovery information securely, with access arrangements for authorized people. Do not put passwords or one-time security codes into a shared household chat. Review who has access to shared accounts, and remove access that is no longer appropriate. Download essential documents through legitimate accounts before an emergency where practical. A protected backup and a known recovery process can reduce the pressure to trust a stranger offering an instant fix.
If you already responded, switch to containment
Stop communicating through the suspicious route. Contact the relevant bank, card provider, payment service, or account provider using an official number or app and explain what happened promptly. If a password was disclosed, change it through the genuine service and address any other account using the same password. Follow the provider's recovery instructions. Do not pay an unsolicited stranger who promises to retrieve stolen money or repair the incident for a fee.
Preserve relevant messages, transaction details, and the timing of events without engaging further. In the United States, report suspected fraud through ReportFraud.ftc.gov and internet-related crime through IC3.gov where appropriate; outside the US, use your local reporting authority. Household members should know they can disclose a mistake without humiliation. Fast, factual communication is more useful than blame.
Practise one ordinary scenario
Walk through a pretend call at a calm moment. Someone requests urgent help; the listener names the trusted callback route and the person who can assist with verification. Do not use a realistic hoax that frightens an unsuspecting relative. Finish by checking the offline numbers and replacing weak assumptions. The objective is a shared routine: care about the person, verify the request, and move through a channel you can trust.
Your next useful moves
- Use a known callback number for urgent money or account requests.
- Keep trusted contacts offline.
- Combine a private family phrase with independent verification.
- Secure primary email, financial, and mobile accounts.
- Report promptly and preserve evidence if a scam occurs.
Digital Recovery Map gives you a small first step.
Get the free resource →Local instructions, individual needs and product specifications can change. This research edition is educational; follow current authorities and appropriate qualified professionals.
Report a correction →

