Spot the three dominant family-emergency scam patterns in 2026 — lost-phone SMS, AI voice-clone phone emergency, and bail-money grandparent scam — with the family safe-word that defeats them all.
Last reviewed: 13 May 2026 · ScamSupport research
The family-emergency scam category in 2026
Family-emergency scams are an umbrella category covering any scam that fabricates an urgent family crisis to extract money. They include the “Hi Mum / Hi Dad” SMS scam (typically lost-phone framing), the AI voice-clone family-emergency call, and the grandparent / bail-money phone scam that has been targeting older adults since long before AI cloning existed. They share a common structure: an apparent close family member is in trouble, money is needed immediately, and the victim is steered away from verification with a believable urgency hook.
Report Fraud’s 2025 reporting placed family-emergency scams in the top five highest-loss-per-victim categories in the UK. Older adults (60+) are over-represented as victims of voice-call variants; parents and grandparents of teenagers are over-represented as targets of SMS variants because the “lost-phone” pretext is more plausible there. Average loss per case in 2024-2025 ranged from £800 to £15,000, with voice-cloned variants pushing average losses higher each quarter.
Every family-emergency scam, regardless of channel, is defeated by the same defence: a pre-agreed family safe-word that the impersonator does not know. Set it up tonight. Brief every close family member. It costs nothing and defeats almost every variant of this scam category.
Three family-emergency scam variants currently in circulation
Variant 1 — “Hi Mum, lost my phone” SMS
From: An unknown UK or international number, on WhatsApp or SMS.
Body: “Hi Mum, this is my new number, my phone got stolen / dropped in the toilet / broken. Can you message me on WhatsApp on this number? I need help with something urgent.” Followed by escalation when the parent responds: “I’m so glad you replied. I’m locked out of my online banking until tomorrow and have to pay this bill / rent / supplier today. Can you transfer £X to this account — I’ll pay you back as soon as I’m logged back in”.
Red flags:
The opening message is generic. “Hi Mum” / “Hi Dad” / “Hi Nana” with no specific name reference. Real family members usually use a name or a recognisable signature greeting.
The reason for the new number is plausible-but-vague. Phone stolen, dropped, broken, screen smashed. Real family rarely has a single-day phone loss without other context.
Steering you to WhatsApp. Moving the conversation off SMS to an encrypted channel where you can’t cross-reference the contact in your phonebook.
Urgency without verification. “Can you transfer now / today / before 5pm” with no way to confirm the underlying need.
Account details from an unknown sort code. Real family members usually have the same bank you’ve sent money to before. A new sort code / account with a name that doesn’t match the family member is the diagnostic moment.
Refuses to take a quick voice call. “I can’t talk now — in a meeting / on the bus / loud” is a stock excuse. Real family will pick up briefly.
Variant 2 — AI voice-clone family emergency call
How it presents: An incoming call from a number you don’t recognise (or, increasingly, from your family member’s actual saved number via caller-ID spoofing). The voice on the line sounds like your son / daughter / partner / grandchild. They are distressed: “Mum, I’ve had an accident”, “I’ve been arrested and need bail money”, “I’m in hospital, need to pay private clinic fees”. They’ll often hand the phone to a “solicitor”, “police officer”, or “hospital administrator” who reinforces the request for immediate transfer.
Red flags:
The voice is convincing but the script is generic. Real family members in genuine emergencies will know your address, recent events in their life, and shared context. Cloned voices reading a generic script don’t.
The voice is “distressed”, which masks subtle clone artifacts. Distress framing limits speech to short, emotional utterances where clones are most convincing.
A “solicitor” / “police officer” takes over. UK police never demand bail money over the phone. UK criminal proceedings have bail set by a magistrate or police custody officer through a formal process; family members do not need to wire money to a personal account or to a “legal escrow”.
Payment requested via wire transfer / cryptocurrency / gift cards. No legitimate UK emergency uses these channels. Even genuine medical bills are paid via card / direct invoice, never gift cards.
Pressure not to call other family members. “Please don’t tell Dad, he’ll be so angry” / “don’t worry your mother, just sort it quickly”. The scammer needs you isolated from any reality check.
The number that called you doesn’t match. Or it appears to match (caller-ID spoofing). Always call back on the saved number for the family member — the spoofed call cannot redirect a callback.
How it presents: A phone call to an older adult. The caller says “Hi Nan, it’s your grandson” / “Grandma, it’s your favourite grandchild”. They’ll wait for the grandparent to guess a name: “Tom? Is that you?” — and immediately confirm. The story: arrested for DUI, in a foreign country / in hospital / detained at airport. They need bail / treatment / legal fees urgently. Often paired with a “don’t tell mum and dad, they’ll kill me” isolation hook.
Red flags:
The opener invites you to name the grandchild. “Hi Grandma, it’s me”. The scammer uses your response (“Tom?”) as the identity confirmation. Real grandchildren introduce themselves by name.
The story is dramatic but vague on detail. No address, no specific hospital name, no real police station. When asked, the scammer becomes evasive or hangs up.
UK police, hospitals and embassies do not ask families to wire money. Genuine arrest / hospital / detention processes have formal channels involving documented requests and verifiable institutions.
Payment requested via wire transfer (Western Union, MoneyGram), gift cards, or unusual bank accounts. Legitimate institutions invoice directly to verifiable recipients.
Targets older adults who may live alone or be more cautious about cross-checking with family. If you have older relatives, brief them on this pattern specifically — it predates AI voice cloning and is the second-most-reported family-emergency variant in UK consumer fraud statistics.
The call ends before you can verify. “The judge is calling me back in 10 minutes, need to wire it now or I’ll be detained overnight.” Urgency replaces verification.
The family safe-word — the single defence that defeats every variant
Every family-emergency scam — SMS, voice-clone, grandparent — relies on the same gap: the impersonator cannot prove shared family knowledge. A safe-word closes that gap.
Pick a phrase no scammer could guess. Avoid pet names, birthdays, addresses, or anything that’s on social media. Use something obscure: a private joke (“blue cheese” / “Aunty Mavis”), a childhood nickname, an unusual word.
Share it only verbally, in person. Not in WhatsApp messages (could be screenshot). Not in email (could be in a breach). In-person only, at a quiet moment.
Establish the rule: any urgent money request triggers a safe-word challenge. “What’s the safe-word?”. Real family will know it. Scammers won’t. The challenge is non-negotiable.
Brief your older relatives explicitly about Variant 3. Many older adults haven’t heard of the grandparent scam, and don’t know that the “voice that sounds right” could be a clone. A 5-minute conversation closes most of the risk.
Don’t feel awkward. The family will respect the rule once briefed. The cost of getting it wrong (lost retirement savings) far outweighs the awkwardness of a polite verification.
What to do if you’re mid-call right now with a suspected family emergency scam
Apply the safe-word challenge. “What’s our safe-word?”. If they hesitate or refuse, hang up immediately.
If you don’t have a safe-word yet: ask a question with a private answer. “What did we have for lunch last Sunday?” — not something on social media. Real family members will answer. Scammers won’t.
Hang up and call the saved number. If a family member is truly in trouble, they can wait 60 seconds while you call them back on the number you have saved. If the “original” caller refuses to wait, that’s diagnostic.
If the “solicitor / police officer” insists, ask for their name, badge number, and the specific police station or court. Tell them you’ll call back on the publicly-listed number for that station. Then hang up and verify.
Refuse all urgent money transfers by phone. No genuine UK emergency requires same-call money transfer. Real situations allow 15 minutes to verify; if the caller refuses that, the call is fake.
Brief other family members immediately afterwards. The same operation often calls multiple family contacts in sequence.
If you’ve already sent money
UK bank transfer: Call your bank’s fraud line immediately on the number on the back of your card. Use the PSR Claim Wizard. PSR Mandatory Reimbursement covers up to £85,000 within 5 working days for APP fraud — family-emergency scams are explicitly covered.
Wire transfer (Western Union, MoneyGram), gift cards, crypto: Report to Report Fraud on 0300 123 2040 immediately. Recovery probability is low but contact the wire service directly — some Western Union transfers can be reversed if reported within hours of sending.
Call all family members to confirm everyone is actually safe, and to warn them the operation may target other contacts.
Set up the family safe-word tonight. Don’t wait for a calmer moment. Brief every close family member.
If personal details were shared during the call (DOB, NI number, banking details): consider CIFAS Protective Registration for credit-file protection.