If Your Parent's Device Gets Hacked: A Calm Recovery Plan

If you're reading this because your mom or dad's computer just did something strange, or they told you a scary popup took over the screen, or money is missing and nobody's sure why, take a breath first. This is fixable. Almost every hacked device situation follows the same shape, and there's a clear order of operations that gets it under control fast, even if right now it feels like everything is happening at once.

You don't need to be a security expert to do this right, and you don't need to do it alone. You just need to do the steps in order, starting with the one that matters most: getting the device off the network. Everything else follows from there, and we've broken it down below so you can move through it calmly instead of guessing.

1. Get the device off the network, right now, before anything else

Turn off Wi-Fi or switch the device to airplane mode. If it's connected by an ethernet cable, unplug it. This is the very first move, before you troubleshoot anything or try to figure out exactly what happened, because it cuts off whoever or whatever is on the other end. It takes about ten seconds and it buys you time to think clearly before doing anything else.

2. Don't log into anything financial from that same device

Don't check the bank account, PayPal, or Venmo from the device you think is compromised, even just to see how bad things are. If something is watching that device or logging what's typed on it, signing in hands over the exact passwords you're trying to protect. Curiosity is completely normal here, but it's the one thing that can turn a manageable problem into a much bigger one.

3. From a different, clean device, change the email password first

Grab a different phone, tablet, or laptop, one you're confident wasn't affected, and start changing passwords from there. Email first, always, because email is usually the master key to everything else. If someone can get into your parent's email, they can reset almost every other password on the account just by clicking "forgot password." Once email is locked down and secure, move on to banking and financial logins next.

4. Call the bank using the number on the back of the card

Contact the bank or card company directly, using the number printed on the back of the physical card or on a real, recent statement. Do not use any phone number or link that showed up during the incident itself, in a text message, an email, or a popup, even if it looks completely official. Scammers are very good at making fake numbers and fake sites look exactly like the real thing, so the safest number is always the one you already had before any of this started.

5. Consider a credit freeze, and know that OC has real help for this

If financial information, a Social Security number, or account numbers were exposed, a credit freeze with the major credit bureaus is worth doing, since it stops new accounts from being opened in your parent's name while everything else gets sorted out. If money was taken or there's any sign of ongoing exploitation, Orange County Adult Protective Services is a real, local resource for older adults in situations like this, and it exists specifically to help. It's worth knowing they're there, especially if things feel bigger than a simple password reset, or if you're not sure who else to call.

6. Once things are calm, have someone actually check the device

A device that seems fine again isn't necessarily clean. Sometimes it's just quiet for now, waiting. Once passwords are changed and accounts are secured, have someone local sit down with the actual computer or phone and look for what's still running in the background, what got installed without permission, and what settings changed during the incident. That's not a step to skip, and it's not something to guess about over the phone.

Here's the part that generic hacked-device articles never mention: shame is usually the single biggest reason people don't get help fast. A lot of people wait hours or even days before telling anyone, because they're embarrassed they clicked the link, answered the call, or gave out a number they shouldn't have. If you're the adult child in this conversation, lead every part of it with reassurance, not questions about how it happened. Scammers do this professionally, all day, every day, and they're specifically good at fooling smart, careful people who've never made a mistake like this before. Your parent isn't careless. They ran into someone whose entire job is tricking people just like them, and the fastest way through it is to skip the blame and get straight to fixing it, together.

Keep reading

More from the blog