Grandparent scam UK 2026

Criminals impersonate grandchildren by phone — often using AI voice cloning that's now indistinguishable from the real grandchild — claim emergency, ask for urgent money transfer. UK Finance reports this as the fastest-growing fraud category targeting over-70s in 2024-2026. The defence is process-based: a pre-agreed family safe word that proves identity before any urgent action.

Last reviewed: 15 May 2026 · Fact-checked by the SignalTools Research Team

The 5 scenarios you'll hear

1. "Arrested abroad — bail money"

"Nan, I've been arrested for [drink driving / drug offence / wrong place wrong time]. I need £2,000 bail. Please send it to my solicitor's account."

2. "Hospital — emergency treatment"

"I've been in an accident. I need £1,500 for emergency surgery. The hospital won't let me leave without payment."

3. "Lost phone — temporary number"

"This is my new number. My phone got [stolen / dropped / lost]." Followed days later by money request. This is the Hi Mum variant aimed at grandparents.

4. "Kidnapped — don't tell parents"

"Please pay £5,000 ransom and don't tell Mum and Dad — they'll panic." The secrecy element is the criminal's protection.

5. "Stranded abroad — flight cancellation"

"My flight was cancelled, I'm stuck in [airport / hotel] with no money. Can you wire £800 so I can get home?"

All five share: urgency, secrecy, payment route that's hard to reverse (bank transfer, cryptocurrency, gift cards), an unfamiliar phone number "because mine got lost".

Why AI voice cloning has made this worse

Pre-2023: criminal used garbled audio ("bad reception") to cover for not actually sounding like the grandchild. Many victims doubted the voice but were rushed into compliance by panic.

2024-2026: AI voice cloning produces 85%+ voice match from 3 seconds of audio (McAfee research). Sample sources criminals use:

  • TikTok / Instagram / YouTube videos posted publicly
  • Voicemail greetings on the grandchild's mobile
  • Podcast appearances or work-related interviews
  • Voice messages forwarded in WhatsApp groups

The cloned voice is convincing enough that close family members report being unable to tell. The defence can no longer be "does it sound like them?" — it has to be "have they confirmed via a separate verified channel?".

The family safe-word protocol

A pre-agreed word or phrase known only to your family, used to verify identity during urgent or unusual contact.

How to set one up

  1. Choose a word. Something specific to your family (a shared memory, a pet's name from childhood, an in-joke). Must NOT be something findable on social media. Avoid: maiden names, pet names you've posted publicly, kids' names, addresses.
  2. Share it verbally in person. Not by text or email — criminals can intercept written messages. A face-to-face conversation at a family gathering is the right channel.
  3. Agree the use case. "If anyone says they're in trouble and needs money urgently, ask the word. If they can't provide it, end the call. No exceptions."
  4. Update annually — at a family gathering. Old safe words can leak.
  5. Brief everyone. All grandchildren + adult children + spouses should know the word.

Full walkthrough: family safe-word setup guide.

What to do if you've already sent money

  1. Call your bank fraud line immediately — use the number on the back of your card. Within 60 minutes is critical for recovery. UK bank transfer fraud is covered by the PSR Mandatory Reimbursement Scheme — qualifying claims refunded within 5 working days.
  2. Don't call the scammer back. Don't reply to messages. Engagement gives them more attack surface.
  3. Save all evidence — call logs, screenshots of messages, payment confirmations, any voicemails.
  4. File Report Fraud report at reportfraud.police.uk or call 0300 123 2040.
  5. Tell family. Break the secrecy that the scammer instructed. Family support during recovery materially helps emotional + practical outcomes.
  6. Start a PSR claim for formal reimbursement.
  7. If any ID details were shared: CIFAS Protective Registration. £25 / 2 years.
  8. Victim Support at 0808 16 89 111 — free, confidential, 24/7. The emotional impact of being targeted because someone you love is in danger is significant.

You are not foolish. Grandparent-scam victims are typically intelligent, careful, loving people whose instinct to protect a grandchild was weaponised. Falling for it reflects the sophistication of the criminal (AI voice cloning, social-media data harvesting, scripted urgency) not the intelligence of the victim.

Frequently asked questions

What is the grandparent scam?

A scam targeted at over-65s in which a criminal impersonates a grandchild (or sometimes nephew / niece) — claiming to be in urgent trouble (arrest, hospital, stranded abroad, car accident) and asking for an immediate money transfer. The scam relies on the panic response: 'my grandchild is in trouble' bypasses normal scepticism. Often timed during evening or weekend when banks are harder to reach. UK Finance reports the grandparent scam as the fastest-growing fraud category targeting over-70s in 2024-2026 — driven primarily by AI voice cloning making the impersonation convincing.

How does AI voice cloning make it worse?

Three seconds of audio is now sufficient for an 85% voice match (McAfee research, 2024). Criminals harvest voice samples from: TikTok / Instagram videos posted publicly by the grandchild; voicemail greetings; YouTube uploads; podcast appearances. The cloned voice is then used on a phone call: 'Nan, it's me, I'm in trouble.' Even close family members report being unable to tell cloned voices from real ones. Previously the scam relied on garbled audio ('bad reception') to cover for not actually sounding like the grandchild; now the audio matches convincingly. The defence has to be process-based, not perception-based.

What's a family safe word?

A pre-agreed word or phrase known only to your family that's used to verify identity during urgent or unusual contact. Example: 'butterscotch', 'green Wednesday', or a specific shared memory only family knows. If 'grandchild' calls asking for urgent money, you say 'what's our safe word?' — real grandchild knows; criminal doesn't. The word must be agreed BEFORE an emergency and shared verbally in person (not by text or email where a criminal might intercept). Update annually. See our dedicated walkthrough at /scamsupport/protect/family-safe-word-setup.

What are the typical scam scenarios used?

Five dominant patterns. (1) 'I've been arrested abroad, need bail money'. (2) 'I'm in hospital after an accident, need to pay for treatment'. (3) 'My phone got stolen / lost / damaged, this is my temporary number' followed by money request days later. (4) 'I've been kidnapped, please pay ransom and don't tell my parents'. (5) 'I'm stranded abroad after flight cancellation, need money for hotel and flight home'. All five share: urgency, secrecy ('don't tell Mum/Dad'), a payment route that's hard to reverse (bank transfer, cryptocurrency, gift cards), an unfamiliar phone number 'because mine got lost'.

What should I do if someone claiming to be my grandchild calls?

Three-step protocol. (1) Pause. The criminal needs urgency; you don't have to respond fast. Say 'let me call you back' and hang up. (2) Call your real grandchild on their known phone number — the one in your contacts, not the one the call came from. If they answer normally, the original call was a scam. If you can't reach them: call their parent. (3) Ask the safe word if you've set one up. If 'grandchild' can't provide it, end the call. NEVER send money based on a phone call or text alone, no matter how convincing the voice sounds. If money has been sent: call your bank fraud line immediately on the number on the back of your card.

I've already sent money — what can I do?

Act in the next 60 minutes if possible. (1) Call your bank fraud line immediately — use the number on the back of your card. UK bank transfer to a fraudster account is covered by the PSR Mandatory Reimbursement Scheme. Qualifying claims refunded within 5 working days. (2) Don't try to call the scammer back; don't reply to messages. (3) Save all evidence — messages, phone call records, payment confirmations. (4) File Report Fraud report at reportfraud.police.uk for a reference number. (5) Tell family — break the secrecy that's part of the scam pattern. Family support during recovery matters. (6) Start a PSR claim at our wizard. (7) Add CIFAS Protective Registration if any ID details were shared. (8) Speak to Victim Support 0808 16 89 111 — free, confidential, 24/7.

Related scam guides

Related scam guides