Grandparent Scam: How Callers Know Your Name Before They Dial

The phone rings in the late afternoon and somebody on the other end is crying. The voice says your name, it says “Grandma”, it breaks off and starts again. Then a second, calmer voice takes over: there has been an accident, bail has been set, and every minute counts now. The grandparent scam and its harder cousin, the shock call, have been running for decades and they still work. That has very little to do with how gullible the people answering are.

Plenty has been written about what to do on the call, and the standard advice is correct: hang up, call back yourself, hand over nothing. What that advice leaves out is the question that tends to stick afterwards. How did the caller know my name? Where did the number come from? Why did my screen say police, and why did it genuinely sound like my grandson? This piece answers that part, because those answers explain the scam better than any checklist of warning signs.

Why the grandparent scam keeps working

One point up front, because it matters more than it sounds. These calls do not catch the naive, they catch the attentive. Investigators and consumer agencies have collected plenty of accounts from people who study fraud professionally and still came close to paying: prosecutors, a retired police officer, a fraud researcher who recognised the script only halfway through the conversation. The pattern repeats internationally, from the German Enkeltrick to the virtual kidnapping calls documented by the FBI.

The reason is blunt and unflattering. A person who believes a family member is in danger stops reasoning about probabilities. The callers work inside that state and actively maintain it. No pause is left in the conversation, hanging up is framed as putting the relative at risk, and one speaker after another is handed the line. A call centre with trained staff runs this script several times a day, the person answering encounters it once in a lifetime. That asymmetry is the actual weapon, and age has nothing to do with it.

The data trail behind the call

Here is the part the official advice pages skip. The caller knows your first name, sometimes the grandchild’s name, occasionally the city they live in. It feels like inside knowledge. It is research, mostly in sources anyone can reach. The same techniques you would use to look yourself up online point just as easily at somebody else.

The name and the likely age

Directories are the base layer, printed and online. Name, number and usually an address arrive in one record. The extra ingredient hides in the first name itself: given names follow fashions, so a Dorothy, a Gerald or a Mildred is very probably over seventy. That turns an ordinary directory into a call list pre-sorted by age without a single date of birth being involved. It explains why the same age groups get hit repeatedly, and it is the reason the scam scales.

Obituaries are the second source and unusually rich. They name the deceased, the surviving spouse and the relatives, with relationship and often the town attached. Anyone reading one has a family tree, a fresh emotional wound and, in many cases, the reasonable expectation that money has just changed hands. Funeral home pages being indexed and searchable turns that research into assembly-line work. What families can do about that, and what happens to the accounts a person leaves behind, is covered in our piece on your digital legacy.

Social media supplies the remainder. A public birthday post saying “happy birthday Grandma Helen” ties a young account to a first name and a location. We walk through that kind of inference in more detail in the piece on what Google knows about you.

The number

Phone numbers follow the same logic as ordinary spam calls: rarely one source, usually several. Data brokers, sweepstakes entries, signup forms, breached customer databases and plain sequential dialling through an area code add up to more than enough raw material. A landline with a directory entry is the jackpot, because name and number already sit next to each other.

For this particular scam the list gets filtered once more. The area code reveals a region, which makes lines like “I am just around the corner” plausible, and a landline in 2026 is itself a statistical hint at an older household. Two database fields produce a remarkably precise target group.

Why the police number appears on your screen

The number your phone displays travels along with the call setup as a plain data field, and along the way it usually goes unchecked. Anyone injecting calls through an internet telephony service can put whatever they like in it. The practice is called caller ID spoofing, and we took it apart in a separate article.

This matters here because the impersonated numbers are chosen for authority: a local police department, a federal agency, a courthouse, your own bank. The United States has had a countermeasure since 2021, STIR/SHAKEN, which requires carriers to sign calls cryptographically as they enter the network. It helps, and it has limits that are well documented: the signature only survives on IP networks, and calls originating abroad or crossing legacy equipment arrive unsigned. In much of Europe no equivalent obligation exists at all. So a displayed number remains what it always was, a claim.

One detail is worth memorising regardless of country. Emergency lines are built to receive calls, not to place them. If your display shows the emergency number itself, the call is fake on that basis alone, before a single word of it needs evaluating.

The cloned voice

The component added in recent years genuinely changes the picture. Voice synthesis no longer requires expertise or expensive equipment, only a few seconds of audio and a commercial website. Material is everywhere: public videos, voice notes forwarded through family group chats, interviews, podcast episodes, an outgoing answering machine message.

Over a phone line the quality is more than sufficient. A narrowband channel swallows exactly the fine detail that would otherwise give a synthetic voice away, and if the supposed grandchild is sobbing or whispering, the rest goes unnoticed too. The FBI issued a public warning about criminals using AI-generated voice messages to impersonate officials, which is the same technique aimed at a different target. For families the consequence is uncomfortable: a familiar voice has stopped being proof. Calling back on the saved number still is, and that requires no technical understanding, only the habit.

The four variants at a glance

The stories rotate, the frame stays put. This table sorts the versions currently doing the rounds.

Classic grandparent scam

The opening is famous: “Guess who this is.” The person answering supplies a name and the caller adopts it. Then comes the predicament, typically a property purchase or a car deal that needs cash today. A courier collects, because the grandchild is supposedly stuck with a lawyer.

Shock or emergency call

Here the emotional pressure is pushed to its maximum. Crying, a serious accident, often a fatality, then the handover to an alleged officer or attorney who names a bail figure. Switching roles is part of the method: one voice manufactures the panic, the other sells the way out. In its most aggressive form this is the virtual kidnapping call, where background screaming stands in for a hostage who was never taken. No court and no police force collects bail over the phone.

Police or agency impersonation

This variant invents an investigation. A burglary ring has been arrested, your address was on a list they carried, so the cash and jewellery in your home are no longer safe. An officer will stop by and take it into custody. The display shows a real department number. No law enforcement agency anywhere collects valuables for safekeeping, and none asks for gift cards, wire transfers or cryptocurrency.

Hi Mum, Hi Dad

The newest version runs through messaging apps. An unknown number introduces itself as a son or daughter, the old phone broke, banking access is gone with it, and a bill has to go out today. There is a lot of typing and never a phone call, which is precisely where the whole thing falls apart if you insist on one. The overlap with smishing is obvious, since the sequence is identical: urgent pretext, new sender, payment. The romance scam plays the same game over weeks instead of minutes, with fake dating profiles that build trust first and deliver the emergency later.

The one pattern worth remembering

Warning-sign lists have limited value because the stories get rewritten every year. What does not change are the three elements that have to appear together for the scam to function: urgency, a demand for money or valuables, and a request for secrecy.

Each piece is ordinary on its own. Together they describe a conversation that essentially does not occur in real life. A bank, a court or a relative in genuine trouble does not simultaneously require you to hurry, to pay and to tell nobody. Secrecy is the most revealing of the three, because it serves exactly one purpose. A single conversation with a second person ends these calls reliably, so that conversation is what gets prevented.

What actually matters if it happens

The practical part is short, because it genuinely is short.

Hang up. No explanation, no apology. There is no duty of politeness toward an unknown caller asking for money. If that feels rude, rehearse the sentence in advance: “I will call back myself.”

Call back on your own number, the one in your address book. Not the one on screen, not one dictated to you during the call. If nobody picks up, ring somebody else in the family. A real emergency tolerates five minutes.

No cash, no jewellery, no handover. No police force, prosecutor or court sends anyone to collect valuables, and there is no urgent exception to that rule. The same goes for gift card codes, which remain the single most common payment method demanded in these scams.

Already paid? The order matters. Bank first, because transfers can sometimes be stopped in the first hours and instant payments leave only minutes. Then the police, and in the United States the FBI complaint portal at ic3.gov and the FTC alongside it. Write down whatever is still fresh: time, displayed number, receiving account, a description of the courier. Handover locations are on camera more often than people assume.

Report the attempt too. Failed attempts are what map a campaign, and a cluster in one neighbourhood is what gets an investigation opened. Reporting takes a few minutes and costs nothing.

Where this sits legally

In most jurisdictions this is straightforward fraud, with organised or repeat offending pushing the sentencing range upward, and impersonating a police officer carries its own separate offence. The practical point for victims is a different one: filing a report is worth it even when the money is probably gone. The couriers who collect the cash are the weakest link in the chain and are arrested with some regularity, and without reports there is nothing to build a case from.

Talk about it before the call comes

The most effective protection costs nothing and fits into a family conversation. Agree on a code word that only you know and that gets asked for whenever money comes up on a phone call. It needs no mystique, the name of the first family dog will do. What matters is that it appears nowhere public and that everyone knows it exists. Against a cloned voice this is the one method that still holds when everything on the line sounds right.

The tone of that conversation matters just as much. Telling your parents not to fall for something like this achieves the opposite, because it builds shame, and shame is the best ally these callers have. Victims often stay silent for days out of embarrassment, and those are precisely the days in which money might still have been recovered. The better framing is the reverse one: these calls are professionally made, they reach everyone, and you talk about them the way you would talk about an attempted break-in.

If you want to see how much about your own family sits online without anyone having put it there deliberately, our guide to searching for yourself is the practical starting point. An afternoon with a search engine, a directory and a funeral home archive shows fairly precisely what a caller knows before dialling. It is not a pleasant afternoon. It does change how you react the next time the phone rings.

Frequently asked questions

What is the grandparent scam?

A stranger calls pretending to be a close relative, usually a grandchild, and describes a sudden emergency: a car crash, an arrest, a deal about to collapse. Cash is needed immediately, and a courier will collect it because the relative supposedly cannot come in person. The story is interchangeable. The engine of the scam is time pressure, engineered so that nobody gets the chance to hang up and call the real grandchild back.

How did the caller get my name and phone number?

From several open sources combined. Printed and online directories still pair a name with a number and often an address, and the first name itself hints at a birth decade. Obituaries list surviving relatives by name and relationship. Social media fills in the rest, down to which city a grandchild lives in. Data brokers and breached customer records supply the bulk phone data. No hacking is involved, the pieces are simply lying in public.

Why does my phone show a police or government number?

Because the number your handset displays is a claim made by the caller, not a verified fact. Anyone injecting a call through an internet telephony provider can set that field freely, which is known as caller ID spoofing. Police departments, courts and banks are routinely impersonated this way. In the United States carriers have to sign calls under STIR/SHAKEN, but the scheme only covers IP networks, so spoofed numbers still arrive.

Can AI really clone my grandchild voice?

Yes, and a few seconds of audio is enough. Voice cloning is an off-the-shelf online service now, requiring no technical skill. Source material sits in public videos, voice notes forwarded through group chats, podcast episodes and answering machine greetings. Over a narrowband phone line the result is convincing, and crying or whispering hides the remaining artefacts. A familiar voice no longer proves identity. A callback to the number already in your contacts does.

I already sent money, what now?

Call your bank first, before anything else. Wire transfers can sometimes be recalled within the first hours, and with instant payments the window is measured in minutes. Then report it to the police, and in the United States also to the FBI Internet Crime Complaint Center and the FTC. Write down everything still fresh: the displayed number, the time, the receiving account, the courier description. Handover locations are on camera more often than people expect.

How do I protect my parents or grandparents?

Have the conversation before the call comes, and have it without condescension. Agree on a family code word that gets asked for whenever money comes up on the phone, and agree that callbacks always go to the number saved in the address book. Then talk about it openly as something that targets everyone. Shame is what keeps victims quiet for days, and those days are exactly the window in which money could still be recovered.

Is a shock call the same as the grandparent scam?

They are relatives rather than twins. The classic grandparent scam runs on familiarity and an urgent favour. The shock call, sometimes called the virtual kidnapping or emergency scam, opens with distress: screaming or crying, a fatal accident, an imminent jail cell, followed by a second voice claiming to be an officer or a lawyer who names a price. Same destination, different speed. The shock call is built so the target never gets a quiet second.

Should I report an attempt if I lost nothing?

Yes, and it takes a few minutes. Attempted fraud is still a crime, and clusters of attempts in one neighbourhood are what triggers an actual investigation. In the United States the FTC takes reports at reportfraud.ftc.gov and the FBI at ic3.gov, in the United Kingdom Action Fraud handles it, elsewhere your national police cybercrime portal does. Give the date, the time, the number displayed and a few sentences about what was said.