Direct answer: Protecting seniors from identity theft is mostly free work. Freeze credit at the three bureaus, then open online Social Security and Medicare accounts before a thief can claim them. As a family, agree that no money moves because of a phone call until a second person checks.
The defenses that matter most here cost nothing. Most paid plans sold on TV warn you after a problem starts. A credit freeze blocks many problems before they start, and federal law makes it free, as the FTC explains.
If you are reading this at the kitchen table, worried about a parent, take a breath. You can do most of this in one afternoon, side by side.
So the trade-off is time against money. The free steps take some setup and a little patience. A paid plan costs a monthly bill and still misses the biggest gap, which is a person being talked into sending their own savings.
This guide covers both problems. It shows what the agencies say, where sales pitches mislead, and what to do first.
Identity theft or a scam: which one are you facing?
Identity theft means someone uses your personal details without you. They open a card, file a tax return, or bill Medicare in your name.
A scam is different. Someone tricks you into handing over money or information yourself. A freeze cannot stop a person from wiring their own savings.
Most schemes aimed at older adults mix the two. A fake Social Security caller wants your number first. Then they ask you to move your savings to keep them safe.
Swipe sideways to see every column.
| Identity theft | Scam | Medical identity theft | |
|---|---|---|---|
| What happens | Thief opens accounts or files taxes as you | You are talked into paying | Thief bills Medicare with your number |
| Main defense | Credit freeze and IRS IP PIN | A family rule to pause and verify | Reading every Medicare Summary Notice |
| Where to report | IdentityTheft.gov | SSA OIG for Social Security impostors | 1-800-MEDICARE |
Why do thieves go after older adults?
Gullibility has nothing to do with it. Scams fool people of every age. Older adults get targeted for what they have and when they have it.
- Savings and home equity. There is more to take.
- Strong credit. Fake accounts get higher limits.
- Steady deposits. Social Security and pension payments land on known dates.
- A Medicare number. It can be used to bill for care nobody received.
- Big life changes. Widowhood, illness, and moves bring stress and new paperwork.
I spent 18 years in lead generation, and I know how marketers buy lists sorted by age and home value. Criminals buy the same kind of data. Your parent is not being picked at random.
What do Social Security and Medicare say a real contact looks like?
The Social Security Administration lists four signs found in nearly every government impostor scam:
- The caller claims to be from an agency you know.
- They say there is a problem, or that you won a prize.
- They push you to act right now.
- They tell you to pay in one specific way, such as gift cards, wire transfers, crypto, or cash in the mail.
SSA says it will not threaten to suspend your Social Security number. It will not threaten arrest. It will not ask for sensitive details by text, email, or social media. SSA also warns that other companies and agencies cannot transfer your call straight to SSA or its Inspector General.
If something feels off, hang up. Call SSA at 1-800-772-1213, using a number you looked up yourself. Then report the attempt to the SSA Office of the Inspector General.
Medicare rules are similar. Medicare.gov says Medicare will only call and ask for personal details in a few cases. One is when you already belong to the plan that is calling. Another is when you called 1-800-MEDICARE and asked for a callback.
How a stolen Medicare number turns into a bill
Medicare took Social Security numbers off cards in 2018 to 2019. The new Medicare number still has value to criminals. A common setup is a call offering a free back brace, a free genetic test, or free supplies. All they want is the number.
Here is a worked example using 2026 figures from Medicare.gov. Say a fake supplier bills Part B for a knee brace your mother never got, and Medicare approves $1,200. If she has not met her deductible yet, her notice could show this:
Swipe sideways to see every column.
| Line | Amount |
|---|---|
| Medicare-approved amount for the fake brace | $1,200.00 |
| 2026 Part B deductible applied | $283.00 |
| 20% coinsurance on the remaining $917 | $183.40 |
| Share shown as hers | $466.40 |
That fake claim also uses up her yearly deductible. Her real doctor visits later in the year then get billed differently than they should. A false diagnosis can also land in her medical records.
The fix is to read every Medicare Summary Notice and question anything unfamiliar. The Senior Medicare Patrol, funded by the Administration for Community Living, offers free local help reviewing those notices.
Where freezes and alerts fall short
A freeze is the strongest free tool. It still has limits. Plan for each one.
- It does not guard existing accounts. A thief with a bank login can still drain checking. Turn on bank alerts for large withdrawals and new payees.
- It does not stop tax fraud. An IRS Identity Protection PIN blocks others from filing a return with your Social Security number. Anyone who can verify their identity can get one.
- It does not touch Medicare billing. Only reading your notices catches that.
- It does not stop a scam. If your parent wires money willingly, the freeze never comes into play.
- It must be lifted to apply for credit. Lifting is free. Store each bureau login in a safe place so this does not turn into a hassle.
Voice cloning adds a newer risk. A short clip from social media can be enough to fake a grandchild’s voice. A family code word that only relatives know helps here.
Is a paid identity protection plan worth the money?
The usual advice says to buy a monitoring service and relax. I push back on that, because monitoring and prevention are two different things.
When monitoring helps
Monitoring can be useful for someone who will not check their own credit reports. It can also help a busy adult child who manages a parent’s affairs from far away. You get an alert when something changes.
When it falls short
An alert comes after the new account already exists. A freeze stops that account from opening in the first place. Free weekly credit reports, covered on the FTC credit report page, let you check for yourself.
What the insurance part covers
The FTC notes that identity theft insurance generally does not pay back money stolen from you. It tends to cover costs of cleanup, like mailing and phone time. The FTC also notes you can do much of the recovery work yourself at little or no cost.
If you still want a plan, ask three things. What exactly does it watch? What does the insurance pay, in writing? How do you cancel?
Where the money goes
Identity protection is a subscription business, and fear sells subscriptions. Ads often show a stolen wallet or a ringing phone, then point to a monthly plan. Many of those ads are run by affiliates who get paid for each sign-up.
In my years in insurance and health marketing, I have seen free trials built to roll quietly into a monthly charge. Read the trial terms before you enter a card number.
The free brace call works on the same model, with a criminal twist. The caller is gathering Medicare numbers to sell or to bill. There is no free product. The product is your parent’s number.
After a loss, watch for recovery scams. People who promise to get stolen money back for a fee are often the same crooks working from a victim list.
Related: if you are setting up phones and tablets for a parent, start with essential tech for seniors, compare devices to stay in touch with grandparents, and read about privacy and consent with senior monitoring devices.
Eight moves to make this week
Do these with your parent, with their permission, at their pace.
- Freeze credit at all three bureaus. The FTC freeze page shows how to reach each one. It does not hurt the credit score.
- Pull free credit reports. Look for accounts, addresses, or inquiries nobody recognizes.
- Open a my Social Security account at SSA.gov. This keeps a thief from opening one first, and SSA alerts you to address or deposit changes.
- Create a Medicare.gov account. Read each Summary Notice as it arrives.
- Get an IRS IP PIN. It renews each year, so put a reminder on the calendar.
- Set bank alerts and name a trusted contact. The CFPB explains that a trusted contact is someone the bank can call if it suspects exploitation. That person gets no access to the money.
- Register phones at DoNotCall.gov and turn on the carrier’s call blocking. Real telemarketers stop calling, so scam calls stand out.
- Agree on a code word and a pause rule. Nobody sends money to a caller until they have called a family member first.
If money already moved
- Call the bank or payment company right away to try to stop the transfer.
- Go to IdentityTheft.gov for a recovery plan and an Identity Theft Report.
- Place a fraud alert with one bureau, which must tell the other two. It lasts one year. Victims can get an extended alert that lasts seven years.
- Change passwords, starting with email.
- Report Social Security scams to SSA OIG and Medicare fraud to 1-800-MEDICARE.
- Call the National Elder Fraud Hotline at 1-833-372-8311 for help from a case manager.
What not to do
- Do not call back a number given in a text, email, or voicemail.
- Do not pay anyone who promises to recover lost money.
- Do not carry the Social Security card in a wallet.
- Do not shame your parent. Shame keeps people from reporting.
Some scam pitches now use AI-written messages. ChatGPT for seniors covers how to check answers and spot those schemes.
Frequently asked questions
What is the single most useful free step?
A credit freeze at all three bureaus. Federal law makes it free, and it blocks most new credit accounts opened in your parent’s name. It does not touch existing cards or the credit score. When your parent needs new credit, such as a car loan, they can lift the freeze for a short time at no cost, then let it return.
Will Social Security ever call and threaten to suspend my number?
No. SSA says threats to suspend your number are a sign of a scam. Threats of arrest and demands for gift cards, wire transfers, crypto, or cash are also scam signs. Hang up without arguing. Then call SSA at a number you looked up yourself, and report the call to the SSA Office of the Inspector General online.
What should we do if someone got my parent’s Medicare number?
Read every Medicare Summary Notice closely for services, tests, or equipment nobody received. Report anything suspicious to 1-800-MEDICARE. Contact your local Senior Medicare Patrol for free help reading notices and filing reports. If charges keep appearing, ask Medicare about the next steps for a compromised number, and keep copies of every notice and call.
Does my parent need a paid identity theft protection service?
Most people do not. Freezes, free weekly credit reports, bank alerts, and online SSA and Medicare accounts cover much of what those services do. The FTC notes that identity theft insurance generally does not repay stolen money. If you buy a plan anyway, get in writing what it watches, what it pays, and how you cancel it.
Who can help if a relative or caregiver is taking my parent’s money?
Adult Protective Services handles suspected financial exploitation, including by family members or paid helpers. Find your local office through the Eldercare Locator at 1-800-677-1116. The National Elder Fraud Hotline at 1-833-372-8311 can also connect you with a case manager. The CFPB’s Managing Someone Else’s Money guides explain the legal duties of agents and trustees.
Your next step
Pick one afternoon this week and sit down together. Start with the credit freeze, then the my Social Security account. Those two steps close the biggest doors, and neither one costs a dime.
Sources