Senior Safety Update 2026: Simple, Actionable Steps to Avoid Quishing, Robocalls and Fake Support Scams

Quick overview: Why this matters now

Scammers are using QR codes, automated calls and even AI‑generated voices to trick people into giving up money or account access. These tactics have grown more convincing and more targeted — especially toward older adults — but there are simple, repeatable steps seniors and their families can use right away to lower risk.

This article explains what "quishing" (QR‑code phishing) is, why robocalls and voice‑cloning ("vishing") are increasingly dangerous, and exactly what to do — in plain language and with easy scripts to use on calls, texts and popups.

Snapshot (short):

• Don't scan unexpected QR codes or click unknown links.
• Never give remote access or payment info to an unsolicited caller.
• When in doubt, hang up and call a trusted number or family member.

Sources behind these warnings include recent FBI and industry advisories, FCC rulings on AI‑voice robocalls, and consumer protection guidance from the FTC and others.

Key official notices and trend reports are linked in the sections below.

Quishing (QR‑code phishing): what to watch for and what to do

Quishing is when criminals embed a malicious website link or action inside a QR code so that when you scan it, your phone goes to a site that asks for logins, installs malware, or asks for payment. These QR codes can arrive in email, text messages, printed cards, or unexpected packages.

Red flags

• You receive a QR code in an unexpected email, text, or a package you didn’t order.
• The message pressures you to act immediately ("confirm your payment", "verify account now").
• The QR code is attached to an unfamiliar sender or a generic domain name when previewed.

Easy, safe steps (use these every time)

1. Don’t scan first, verify first. If the QR code came via email or text, call the company or person at a phone number you already have (not the one that came in the message) to confirm.
2. Preview the URL before you tap anything. On many phones the camera or QR app shows the destination link — read it. If it looks odd (a long string, wrong brand name, misspelling), don’t open it.
3. Use trusted apps for payments. Enter payment info only through apps or websites you already use (bank app, PayPal, Apple Pay). Don’t enter passwords after scanning an unfamiliar QR code.
4. When unsure, take a picture instead of scanning. Take a photo of the code and ask a trusted family member or local help desk to check it first.
5. Report suspicious quishing attempts. If you suspect you were targeted, report it to the FBI’s Internet Crime Complaint Center (IC3) and to local consumer protection; the FBI and other agencies are tracking quishing incidents.

Tip for caregivers: practice with the senior once — show how to preview a link and how to call a company's verified number. Make a simple card with the phone numbers for the bank and key services that the senior can use to verify any unexpected request.

Robocalls, spoofing and AI‑voice scams (vishing): safe habits

Robocalls and spoofed caller ID remain a major source of fraud. Scammers mask numbers to look local or to impersonate trusted organizations. In addition, the FCC has clarified that AI‑generated call voices are treated under robocall rules, and criminal actors have used synthetic audio to impersonate public figures or relatives. That means calls can sound very convincing — but the same safety rules apply.

Practical rules to follow

• Don’t trust caller ID alone. Spoofed numbers can display a trusted name or local area code; if you weren’t expecting the call, let it go to voicemail and verify.
• If the caller asks for money or threatens consequences, hang up. Government agencies, banks and utilities will not demand immediate payment by gift card or wire transfer over the phone.
• Confirm by calling back. If a caller claims to be from your bank, hang up and call the bank using the number on your card or official statement.
• Enable carrier call‑filtering and use a trusted call‑blocker app. Most carriers and many smartphones offer spam labeling and automatic blocking. These reduce volume but won’t stop everything.

What to do if a call uses a familiar voice:

If the caller appears to be a family member or official but asks for money or strange actions, hang up and call that person back at a number you already have. Don’t rely on the number they provide. The FBI and other agencies have warned that AI‑cloned voices are being used in targeted scams.

Fake tech‑support and remote‑access scams: stop, then verify

One of the most damaging scams affecting older adults is the "tech support" con: someone calls claiming your computer or account is compromised and asks for remote access or immediate payment. The FBI and FTC say these remain major sources of loss for seniors. Never give control of your computer or passwords to an unsolicited caller.

Step‑by‑step checklist

1. Pause and ask for proof. If someone calls saying they are from a familiar company, ask for a reference number and then hang up to call the company back via its official website or a number on your statement.
2. Never install remote‑access software for an unexpected caller. Legitimate companies don’t call first and demand access. If you already gave access, disconnect the device from the internet, tell a trusted family member, and contact your bank if money or account credentials were exposed.
3. Refuse unusual payment methods. Scammers often insist on gift cards, wire transfers or cryptocurrency — these are red flags.
4. Report and get help. If money was sent, report it immediately to your bank and to the FTC and FBI. Community groups such as AARP’s Fraud Watch Network offer help and information.

Short scripts you can use

• "I don’t accept calls asking for account info. I’ll hang up and call your official support number."
• "Please send your department ID and a phone number I can verify from my statement."
• "I’ll check with my family/IT person and call back on the number I already have."

Reporting, recovery and extra protections

If you or someone you care for is targeted or has lost money, act quickly:

• Contact the bank or payment provider immediately to try to stop or reverse payments.
• Report the incident to the FTC at ReportFraud.ftc.gov and file a complaint with the FCC and the FBI’s IC3 if the scam involved fraud or threats. These agencies collect reports that help trace trends and shut down schemes.
• Consider extra account protections: add alerts for large transfers, place fraud alerts with credit bureaus if sensitive identity information is exposed, and ask your phone carrier about port‑out or SIM‑lock protections.

Final tips for caregivers and communities

Make a short checklist sheet (trusted phone numbers, the bank’s fraud line, a nearby family contact) and keep it near the phone. Run through one practice scenario (a fake robocall or QR text) so the senior knows the “pause and verify” routine. Education plus a simple plan reduce mistakes under pressure.

For ongoing updates and local resources, bookmark official guides from the FTC, FBI, and AARP’s Fraud Watch Network — they publish alerts and recovery steps as scams evolve.

Need a printable quick‑reference card for a senior or caregiver? Contact ScamWatch.com for the downloadable one‑page checklist (calls, QR codes, remote access) and the exact wording to say when you hang up on a scammer.