Family group chats, intended to foster connection, have become a lucrative target for scammers who exploit the personal details shared within them. These criminals utilize information gleaned from data broker sites and public social media to craft convincing impersonation schemes, often leading to significant financial losses for victims, particularly older adults.

Criminals may start by gathering basic information available on data broker sites like Spokeo and Whitepages, which can reveal names, addresses, phone numbers, and familial relationships. This baseline information is then enhanced by details shared in family group chats, such as travel plans, appointment schedules, or updates about family members. For instance, a post about a beach vacation could inform a scammer that a person's home is unoccupied, while details about a grandchild's trip to Europe could be used in a fabricated emergency scenario.

The FBI's Internet Crime Complaint Center reported that Americans aged 60 and older lost $7.7 billion to scams in 2025, with over 201,000 complaints filed. A significant portion of these losses, approximately 86%, were attributed to cases where victims' personal data was readily available online, underscoring the link between online data exposure and financial fraud.

AI and Voice Cloning Amplify Scams

Emerging technologies, including artificial intelligence and voice cloning, are making these scams even more sophisticated. AI can be used to create highly convincing fake websites that mimic legitimate brands, leading to phishing attacks. Furthermore, voice cloning technology can replicate a person's voice from a short audio sample, enabling scammers to impersonate family members with alarming accuracy. One notable case involved a scam that defrauded over 400 victims across five states of more than $5 million, with the average victim age being 84.

Account Hijacking and Other Tactics

Beyond exploiting shared information, scammers also target the group chats themselves. Techniques include tricking users into forwarding verification codes, which can lead to the hijacking of messaging accounts like WhatsApp. SIM swapping, where a scammer convinces a mobile carrier to transfer a victim's phone number to a new device, can also grant unauthorized access. Facebook Messenger accounts are also vulnerable to cloning or hijacking.

Protecting Against Scams

While the threat is significant, individuals can take steps to protect themselves and their families without disconnecting from their digital social lives. Experts recommend several security measures:

  • Enable Two-Step Verification: This adds an extra layer of security to messaging, social media, and email accounts. Users can find this option in the security settings of most platforms.
  • Never Forward Verification Codes: A family rule should be established that no one forwards verification codes, as legitimate services will not request this, and genuine family members typically do not need them.
  • Create a Family Codeword: A secret word or phrase known only to family members can be used to verify the identity of someone making an urgent request, especially before sending money.
  • Delay Sharing Travel Updates: Posting photos or details about trips after returning home can prevent scammers from knowing when a residence is unoccupied.
  • Review Privacy Settings: Tightening privacy settings on messaging apps can limit the visibility of personal information like profile photos and last seen status.
  • Verify Suspicious Messages: If a family member requests money or asks to forward a code, it is crucial to call them directly using a known phone number to confirm the request.
  • Use a Password Manager: Employing a password manager to create and store unique, strong passwords for all online accounts reduces the risk of account compromise.

Reducing exposure on data broker sites is also critical. While individuals can request removal of their information, this process can be lengthy and may require ongoing effort. Utilizing data removal services can assist in managing this exposure and making it more difficult for scammers to assemble comprehensive profiles.