The New Con: How Scams Actually Work in 2026
How Scams Actually Work in 2026 — and the Six Habits That Protect Almost Everything
Friday, July 10, 2026 · Technology · 9 min read
There is a sentence worth reading twice before anything else in this article: falling for a scam is not a failure of intelligence.
The people who lose money to modern fraud include retired judges, physicians, engineers, and at least one former director of a federal agency whose job was fraud prevention. The most recent FBI data puts annual reported losses for Americans over 60 at nearly five billion dollars — and the FBI itself estimates that the true figure is far higher, because the crime most likely to go unreported is the one that comes wrapped in embarrassment.
Here is the reframe that matters. Scams stopped being the work of lone con artists years ago. Fraud is now an industry — organized, international, well-capitalized, and staffed by trained professionals working from scripts refined against millions of previous calls. When a persuasion professional with institutional resources spends forty-five minutes on the phone with you, the contest is not between a criminal and a fool. It is between an industry and an individual. Individuals do not win that contest through cleverness. They win it through habits — a small set of fixed rules, decided in advance, that work even on a day when you are tired, distracted, or frightened.
This article covers the five cons doing the most damage to the 55-and-better community in 2026, and then the six habits that defeat nearly all of them at once.
Why this industry targets you
Not because you are naive. Because you are worth the effort.
Adults over 55 hold the majority of American household wealth. You are more likely to answer the phone, more likely to be courteous to a stranger, and more likely to have retirement accounts large enough to justify a patient, multi-week con. You are also more likely to be navigating something — a bereavement, a move, a health event, a divorce — and every fraud script ever written is designed to land on a person under strain.
Understand that targeting logic and the shame evaporates. They did not find you because you are weak. They found you because you built something worth stealing.
The five cons of 2026
The impersonation call. Someone claiming to be your bank’s fraud department, the Social Security Administration, Medicare, Amazon, or even your county sheriff calls with alarming news: your account is compromised, your identity has been stolen, there is a warrant with your name on it. The signature move is the “safe account” — you will be told to move your money somewhere protected while the problem is investigated. Fix this in your mind permanently: no bank, no government agency, and no legitimate business will ever call you and tell you to move money. That instruction, from anyone, on any pretext, is the scam itself. Not a warning sign of one. The thing itself.
The tech-support takeover. A pop-up fills your screen — often with an alarm sound — announcing a virus and displaying a support number. Or a caller says they are from Microsoft, Apple, or your internet provider and have detected a problem. The goal is remote access to your computer, and from there, your bank. The real Microsoft and the real Apple do not know your computer has a problem and will never call you about one. If a pop-up locks your browser, hold the power button until the machine shuts off. Nothing legitimate is lost by doing so.
The voice-clone emergency. The old “grandparent scam” — a late-night call from a grandchild in trouble, needing bail or hospital money quietly wired — has been supercharged by AI. Thirty seconds of audio from a social media video is enough to clone a family member’s voice convincingly. The call now genuinely sounds like your grandson. The defense is not your ear. It is a protocol, covered below.
The long game. Romance and investment fraud — what investigators call “pig butchering” — is the most expensive category per victim, with individual losses routinely in the six figures. It begins innocently: a friend request, a “wrong number” text that turns into conversation, a warm connection on a widows-and-widowers forum. Weeks or months of daily attention follow before money is ever mentioned — and when it is, it is often an “opportunity,” usually cryptocurrency, complete with a polished app showing your investment growing. The growth is fiction. The test is simple and unforgiving: anyone you have never met in person who eventually steers the relationship toward money, investment, or crisis is running a script. The length of the courtship is not evidence against this. The length of the courtship is the script.
The everyday phish. Fake delivery notices, unpaid toll texts, “your subscription has renewed” emails, jury-duty threats. These are cruder and cheaper, which is exactly why they arrive constantly. Their sole aim is a click — and one click on the wrong link can harvest a password. The rule: never act on the link or number in the message. If you think FedEx or your bank really wants you, go to the website or app yourself, the way you normally would.
The six habits
Individual scams change monthly. These six rules do not, and together they defeat nearly everything above.
1. Hang up and call back on a number you find yourself. This is the master habit. Any unexpected call about money, accounts, or family trouble — no matter how urgent, no matter how convincing, no matter what the caller ID says (it is trivially faked) — gets one response: “I’m going to hang up and call back on the official number.” A legitimate caller will respect that completely. A fraudster will resist it desperately, and that resistance is your confirmation. Then find the number on the back of your card, on a statement, or on the official website — never from the call, text, or email itself.
2. Adopt the 24-hour rule for money. No transfer, gift card purchase, cryptocurrency transaction, or “investment” happens the same day it is proposed. Ever. Urgency is the load-bearing wall of every con — the entire structure depends on you acting before you think or, worse, before you talk to someone. A person who will not let you sleep on a decision has told you everything you need to know. And note the payment method tells you too: gift cards, wire transfers, crypto ATMs, and couriers sent to your home are the currencies of fraud. No legitimate institution collects money that way.
3. Establish a family code word. Choose a word or phrase with your children and grandchildren — something no stranger could guess, never posted anywhere. Any emergency call requesting money must include it. This single dinner-table conversation, which takes five minutes and costs nothing, completely neutralizes voice-cloning. If the voice on the phone cannot produce the code word, you hang up and call the family member directly.
4. Freeze your credit. A credit freeze at the three bureaus — Equifax, Experian, and TransUnion — prevents anyone from opening credit in your name, and it is free by law. Most adults over 55 are not applying for new credit often, which makes the freeze nearly costless to live with; it can be temporarily lifted online in minutes when you do need it. This is the highest-value thirty minutes of financial self-defense available to you.
5. Upgrade the locks: a password manager and two-factor authentication. Reused passwords are how one leaked account becomes ten. A password manager creates and remembers a unique password for every site, so you only remember one. Then turn on two-factor authentication for email and financial accounts — email first, because whoever controls your email can reset everything else. If a site offers a “passkey,” take it; it is both easier and safer than a password.
6. Talk about attempts openly. Scam attempts thrive on silence. Make them dinner conversation. “I got the Medicare call today — they’re still trying” costs nothing to say and inoculates everyone who hears it. Households that discuss fraud attempts casually are dramatically harder to defraud, because the scripts lose their power the moment they are familiar. If you are the adult child reading this over a parent’s shoulder: the goal is a partnership of equals, not supervision. Shame drives this crime underground. Openness starves it.
If it has already happened
Move fast and skip the self-recrimination — the first hours matter and the shame does not.
Call your bank or card issuer immediately; wires can sometimes be recalled and card charges disputed if you act quickly. Report the crime at ic3.gov (the FBI’s Internet Crime Complaint Center) and reportfraud.ftc.gov — these reports drive real investigations and takedowns. If you shared a Social Security number, freeze your credit at all three bureaus that day and file at identitytheft.gov for a personal recovery plan. If a scammer had remote access to your computer, stop using it for banking until it has been checked. And tell your family — not as a confession, but as intelligence they need, because your name may now be on a list of responsive targets that gets resold. Expect the “recovery scam”: a caller offering to get your money back for a fee. That is the same industry, making a second pass.
The bottom line
You do not need to become suspicious of the world, and you do not need to master the technology behind any of this. You need six habits, most of which take minutes to set up and none of which require trust in your own quick thinking under pressure — that is the whole point of deciding them in advance.
The con industry is patient, professional, and well-funded. It is also, against a person with fixed rules, remarkably powerless. Hang up and call back. Sleep on every money decision. Agree on the code word this weekend.
Boldness, in this chapter, sometimes looks like a polite voice saying, “I’m going to hang up now and call the real number.” Wisdom is having decided to say it long before the phone rang.
The Bold & The Wise publishes every Monday, Wednesday, and Friday at 6:30 AM Central. Friday is Travel, Tech & Learning.