Elder Financial Exploitation
The illegal or improper use of an older adult's funds by strangers (scams) or trusted persons (theft), seen at the transaction layer through behavior changes, new payees and unusual liquidations.
What it is
EFE is defined by who the victim is. Any technique can be involved, and it cuts across almost every authorized-payment mechanism in this vault. It gets its own note for four reasons:
- Concentration of loss. The FBI's IC3 recorded $7.75B in 2025 losses reported by people 60 and older, up 59% from 2024, from 201,266 complaints (up 37%). The average loss was about $38,500, and 12,444 older complainants lost more than $100,000 each.
- Distinct legal tools. US broker-dealers have FINRA Rule 4512 (trusted contacts) and Rule 2165 (temporary holds for "specified adults": 65+, or 18+ with an impairment). Many states have equivalent bank-hold and reporting laws. Banks work with Adult Protective Services (APS) and FinCEN SAR expectations.
- The trusted-person problem. Theft by family and caregivers looks like authorized activity by design. The perpetrator often has legitimate access, a power of attorney, or joint ownership.
- Capacity questions. Diminished capacity changes what "authorized" means, and when it's appropriate to override a customer's instruction.
Scams vs theft (FinCEN). FinCEN's analysis of EFE-related BSA filings from June 2022 to June 2023 found:
| Elder scams | Elder theft | |
|---|---|---|
| Share of EFE filings | ~80% | ~20% |
| Average / median per filing | $129,483 / $33,499 | $98,863 / $23,762 (avg $70,695 excluding two outliers) |
| Perpetrator | Stranger: tech support, romance, government impersonation, investment, lottery, family-in-need | Adult children (~40%), then professional caregivers; occasionally neighbors and advisors |
| Common movement | Checks and wires; growing P2P, ATM and crypto | Funds transfers, checks, card purchases, cash withdrawals, online bill pay |
In total, FinCEN received 155,415 EFE-related filings covering about $27B in suspicious activity in that year. Account takeover was the most cited typology in scam filings.
How it works
Transaction footprint
| Stage | What you see in the data | Decision point |
|---|---|---|
| Behavior shift | A long-tenured, stable customer suddenly changes: new channels (first mobile login, first P2P), unusual hours, new devices | Customer Tenure and History baselines; long tenure makes deviations more informative |
| Access changes | New authorized user, POA, joint owner, address or phone change; online banking enrolled by a third party | Account Change Events; verify independently with the customer |
| Liquidation | Early CD redemption, IRA or 401(k) distribution, brokerage sell-off, home-equity draw | Brokerage: Rule 2165 holds for specified adults; bank: outreach |
| Outbound | First-time large wire to an individual; repeated cashier's checks; P2P to new payees; kiosk or gift-card purchases; large cash withdrawals | Payee Confirmation and Payment Friction; teller escalation |
| Erosion (theft) | Steady checks or transfers to a caregiver or family member; ATM use when the customer is housebound; bills unpaid despite outflows | Batch Transaction Monitoring on payee concentration and lifestyle mismatch |
| Interaction | Customer accompanied by someone who answers for them; confused about the transaction's purpose; insists on secrecy | Frontline training; Customer Contact Signals |
| Post-event | Trusted contact or family reports concern; APS or law enforcement inquiry | Hold, document, report (SAR and APS); preserve evidence |
Scale per event matters. EFE losses are often whole life savings, so a single missed case can exceed a month of losses from other typologies. Weight your EFE alerting by potential exposure (total balance) as well as transaction amount.
Common variants
| Variant | Family | What's different | Where it shows up |
|---|---|---|---|
| Tech support / phantom hacker | Scam | Multi-persona; "protect your money" | Banks, brokerages; see Impersonation Scams |
| Romance | Scam | Long grooming; emergency requests | Wires, gift cards, crypto |
| Investment / pig butchering | Scam | Fake platform; liquidation of retirement assets | See Investment Scams (Pig Butchering) |
| Grandparent / family emergency | Scam | Voice cloning; courier pickups | Cash, wire; see Generative AI and Deepfake Fraud |
| Courier cash and gold | Scam | In-person collection after digital friction | IC3 2024–2026 PSAs |
| Caregiver theft | Theft | Gradual; uses legitimate access | Checks, cards, ATM |
| Family / POA abuse | Theft | Legal authority misused; title and beneficiary changes | Banks, brokerages, real estate |
| Advisor or employee misconduct | Theft | Insider position | See Insider Fraud |
| Unauthorized account transfer | Theft (third party) | Dormant retirement accounts pulled to another firm | See ACATS Transfer Fraud |
Where it shows up
- Banks and neobanks: the main venue for scam payouts and caregiver theft. Branch staff are a key detection channel. Neobanks lack that channel and have to compensate with behavioral detection.
- Brokerage and Investing: large retirement balances. Rule 2165 holds and Rule 4512 trusted contacts are the main tools. FINRA's pending proposal (filed with the SEC August 13, 2026) would extend the maximum Rule 2165 hold from 55 to 145 business days and add a fraud-delay rule (2166) of up to 10 business days for all adults.
- Payments and P2P: P2P and crypto kiosks. FinCEN's 2025 kiosk notice found people 60+ more than three times as likely as younger adults to report a kiosk-related loss.
- Retail and Ecommerce: gift-card and gold purchases at the register. Retailers are an under-used intervention point.
- Cashback, Coupons and Rewards: less directly, through older users' rewards accounts taken over in impersonation scams and gift-card payouts redirected.
Impact
- IC3 2025 (60+): $7.75B total; investment fraud $3.52B; tech support about $1.04B; confidence/romance $584M; BEC $568M; government impersonation $413M. Crypto kiosk complaints from people 60+: 6,188, with $257M in losses.
- FTC: in 2025, consumers 50+ reported $4.3B in losses. FINRA's 2026 rule filing cites FTC estimates that fraud cost older adults about $81.5B in 2024 after adjusting for underreporting.
- Human cost: loss of independence, housing and health. Recovery is rare.
- Regulatory: SAR expectations (FinCEN advisory FIN-2022-A002), state reporting and hold laws, FINRA Rule 2165 supervision requirements, and growing scrutiny of how firms handle trusted-contact data.
Red flags
- Sudden change in an older customer's transaction or channel behavior → Customer Tenure and History, Transaction Pattern Anomalies
- New third party added to the account, or contact details changed → Account Change Events
- Liquidation of retirement or savings followed by transfers to new payees or VASPs → Funding Source Signals, Payee and Counterparty Risk
- Customer coached, confused, isolated or accompanied by a controlling person → Customer Contact Signals, Scam Victim Indicators
- Remote-access software or unusual session behavior → Remote Access Tool Detection, Session Behavior Anomalies
- Repeated cash withdrawals or gift-card purchases with no plausible purpose → Velocity Signals
Prevention and detection at a glance
| Layer | Control or signal | What it does here |
|---|---|---|
| Prevent | Trusted Contact and Senior Investor Holds (collect trusted contacts proactively) | Gives you someone to call. FINRA's NFCS data cited in its 2026 filing: 42% of respondents had named one. |
| Prevent | Customer Education and Scam Warnings aimed at older customers and their families | Specific scam scripts beat generic warnings |
| Detect | Age-aware Real-Time Transaction Risk Scoring (avoid age-only rules; see Privacy and Data Use in Fraud Prevention) | Combine tenure, behavior change and liquidation context |
| Detect | Batch Transaction Monitoring for theft patterns | Caregiver erosion is slow and invisible in real time |
| Respond | Holds (Rule 2165 / state law), APS and law enforcement reports, SAR | Buys time for an investigation |
| Respond | Specialist outreach team working a dedicated queue (Manual Review Queues); Customer Support Verification Protocols | Older victims often need a conversation with a trained person; a pop-up warning is rarely enough |
| Prevent | Opt-in Velocity and Exposure Limits (customer- or trusted-contact-set caps on new payees, kiosks, wires) | Limits single-event exposure without blanket age rules |
| Govern | Elder-protection policy; frontline training (Support Team Fraud Training) | Front-line staff see in-person cues that models can't |
Emerging variants and adversary adaptation
- Faster, bigger losses. IC3's 60+ losses grew 59% year over year in 2025, faster than overall cybercrime losses (26%).
- Offline workarounds. As banks add digital friction, scammers send couriers for cash and gold. IC3 counted 725 gold-courier complaints and $311.8M in 2025. The June 2026 PSA describes couriers stepping in when transfers are blocked.
- AI voice and video. Voice-cloned "grandchildren" and deepfaked officials add credibility. See Generative AI and Deepfake Fraud.
- Age targeting varies by typology. FinCEN's 2023–2025 analysis of digital-asset investment scams found elder exploitation in about 25% of reports, roughly in line with older adults' share of the population. It found no evidence of disproportionate targeting in that typology. Don't over-index detection on age alone.
- Regulatory toolkit expanding. FINRA's SR-FINRA-2026-018 (filed with the SEC August 13, 2026; awaiting SEC action as of October 2026) would lengthen holds, allow fraud-prevention specialists to place them, cover "other assets" (including payment stablecoins), and add Rule 2166 for fraud delays of up to 10 business days for all adult customers. Banks should watch for parallel state legislation.
Related mechanisms
- Authorized Push Payment (APP) Scams: parent hub
- Impersonation Scams, Investment Scams (Pig Butchering): the dominant scam typologies by dollars
- Account Takeover (ATO), ACATS Transfer Fraud: third-party theft of older customers' accounts
- Insider Fraud: advisor and employee misconduct
- Gift Card Fraud, Money Mules: payment and receiving rails
Real-world examples
- Case Study - Zelle Scam Liability Disputes (2024-2025): older victims of P2P impersonation scams are a central part of the liability debate
- IC3's Operation Level Up (since January 2024) has notified more than 8,000 crypto-investment-fraud victims, many of them older adults, with an estimated $500M in savings
Sources and further reading
- FBI IC3 2025 Internet Crime Report: 60+ losses and complaints, by crime type; kiosk and gold-courier figures
- FinCEN Financial Trend Analysis: Elder Financial Exploitation (June 2022–June 2023): 155,415 filings and about $27B; scams vs theft split; perpetrator profiles; payment methods
- FinCEN Advisory FIN-2022-A002 on Elder Financial Exploitation: the June 2022 advisory (typologies, red flags and SAR key term in the linked PDF)
- FINRA Rule 2165: specified adults, hold types and durations
- FINRA Rule 4512: trusted contact person requirement
- FINRA Regulatory Notice 22-05: 2022 amendments adding transaction holds and the 55-day maximum
- FINRA Regulatory Notice 26-02 and SR-FINRA-2026-018: proposed 145-day holds, Rule 2166 fraud delays, FTC and IC3 statistics, trusted-contact adoption data
- FinCEN Notice FIN-2025-NTC1 on crypto kiosks: older-adult concentration in kiosk scam losses
- FBI IC3 PSA I-061526-PSA: couriers in crypto investment scams: courier pickups, typically from older victims
- AARP: FBI and FTC 2025 loss reports: FTC 50+ losses ($4.3B) and context