The safest way to protect retirement accounts from AI scams is to use a plan that still works when a convincing message catches you off guard. I once nearly answered a call from a familiar number before remembering that caller ID can be faked. That tiny pause matters.
In 2025, adults 60 and older filed 201,266 complaints with the FBI’s Internet Crime Complaint Center and reported more than $7.7 billion in losses. Reported losses rose 59 percent from the prior year, and the average reported loss exceeded $38,000. At least 12,400 people reported losing six figures or more.
Four practical moves can add protection: verify requests independently, secure account access, add friction to changes and transfers, and check investment offers before acting. AI can make scams sound familiar, look polished, and arrive with convincing urgency. None of that makes the request real.
You do not need to become an artificial intelligence expert or learn to spot every fake voice. I certainly won’t be winning a tech quiz anytime soon. These defenses rely on steady habits, not perfect instincts.
Key Takeaways
- Check money requests through a separate, trusted channel.
- Use unique passwords and multifactor authentication.
- Ask your brokerage to document safeguards for changes and transfers.
- Freeze credit to help block new accounts opened in your name.
- Report suspicious transfers quickly, even if you feel embarrassed.
How to Protect Retirement Accounts from AI Scams Before the Pressure Starts
Durable safeguards matter more than detecting every AI trick. Build checks into how you handle money before a caller or message creates urgency. Artificial intelligence can make voices, images, profiles, and written messages more convincing, while pressure and isolation remain familiar scam tools.
A trusted contact is a person a brokerage may contact about suspected exploitation or trouble reaching you, with no authority to trade or withdraw from your account. Financial firms may use tools to monitor transactions, but those tools cannot replace your own safeguards.
Build checks into how you handle money, before a convincing message creates urgency.
A convincing presentation is not proof of legitimacy. These common patterns show how to pause and check the request without relying on its polish.
| Scam pattern AI | I or impersonation tactic | Pressure used | Independent check |
|---|---|---|---|
| Relative-emergency voice clone | Copied voice from a short clip | “Send bail money now” | Call the relative’s saved number |
| Government or bank imposter | Spoofed caller ID or fake message | Move money to a “safe” account | Call the number on a statement |
| Romance or investment pitch | Fake profile, images, or endorsements | Invest before an offer expires | Check the person and firm elsewhere |
The scale of reported fraud helps explain why a system-first approach matters. FTC fraud complaints doubled between 2019 and 2023, while reported losses rose from $1.9 billion to $10 billion.
For adults 70 and older, the median reported loss was $10,000. For consumers younger than 50, it ranged from $450 to $3,000. In 2025, the FBI Internet Crime Complaint Center recorded 3,143 complaints from victims 60 and older that identified AI as a factor, with reported losses of about $352 million.
Start with the person asking, not the story they tell. Verify who is contacting you before discussing money.
Step 1: Verify Callers Before You Discuss Money
Your niece calls in a panic and asks you to send money before anyone gets hurt. Even a familiar voice can be copied, so verify the person before you discuss account details or act on urgency.
Among older adults who lost $10,000 or more to a business or government imposter scam in 2024, 41 percent said contact began by phone. The phone feels personal, but it is not proof.
| Contact channel Share | e of reported contacts | Safer response |
|---|---|---|
| Phone call | 41 percent | Hang up and call a saved number |
| Online ad or pop-up | 15 percent | Close it and find the company yourself |
| 13 percent | Contact the sender through a known address |
Agree on a Family Code Word for Emergency Requests
Choose an arbitrary code word with your family, then share it through a channel you trust. Avoid a pet’s name or a birthday posted online; scammers can collect those details with a few searches.
Agree that no code word means no money or account details, even during an emotional emergency. A real family member can wait while you check. Since 2023, the FTC has warned that scammers can clone a relative’s voice from a short audio clip.
Hang Up and Call Back Using a Number You Already Trust
Hang up, then dial a number from a bank statement, payment card, or saved contacts. Never call a number supplied by the caller or trust the number shown on caller ID. Scammers can spoof caller ID and use Voice over Internet Protocol to make calls appear to come from an impersonated agency.
Common stories include a relative supposedly in trouble, an official demanding a transfer to a “safe” account, or a romantic contact facing a crisis. A real-sounding voice is not verification. You can slow the conversation down, even if the caller insists every second counts.
Once you have checked who is calling, turn to the devices and accounts they may try to reach.
Step 2: Lock Down Account Access and Identity Details
If you reuse one password, a breach at a shopping site could give someone a key to your email and financial accounts. One exposed login can open several doors, so use a different password for every account.
Unique passwords, multifactor authentication, and alerts make account takeovers harder. A password manager can create and store long passwords, so you do not have to memorize a string that looks like a cat walked across your keyboard.
Use Unique Passwords and Multifactor Authentication
Multifactor authentication (MFA) requires a second proof beyond a password. Choose app-based MFA when an account offers it, and turn on alerts for sign-ins and account changes.
Do not open links in unexpected messages; go to the company’s site or app yourself. Refuse requests from strangers to remotely access your computer, even if they claim to fix a security problem. A stranger with screen control can see far more than you intended to share.
Protecting retirement accounts from AI scams online means securing logins and blocking account changes, not just avoiding suspicious emails. Account security also means limiting what someone can change after gaining access.
Block Unwanted Changes to Your Social Security Record
The Social Security Administration offers two separate blocks for your my Social Security account. The eServices block prevents online viewing or changing of personal information, including by you.
The Direct Deposit Fraud Prevention block prevents online enrollment in direct deposit or changes to address and banking details through my Social Security or financial-institution auto-enrollment. These blocks also restrict you, and removing either one requires you to prove your identity through a local field office.
That tradeoff can make sense if you do not expect to change your record online. If you may need online access, weigh the extra protection against the added steps to restore it. A limited Social Security record can also stop a big headache.
As intruders face more hurdles, the next step is giving financial institutions clear ways to pause suspicious activity.
Step 3: Add Human and Written Guardrails at Each Institution
A caller knows your account balance and wants a same-day wire to a new recipient. Familiar account details do not prove the request is safe, so ask your brokerage to set clear checks before money moves.
Documented rules can give a firm and a trusted person more ways to flag unusual activity. These steps add human oversight, not a promise that every transfer will be stopped.
Put a Trusted Contact on Brokerage Accounts
Contact every brokerage custodian and confirm that your chosen trusted contact is currently listed. FINRA Rule 4512 requires brokerage firms to make a reasonable effort to obtain a trusted contact for non-institutional accounts.
The trusted contact is not your power of attorney and cannot trade, withdraw, or make account decisions for you. Under FINRA Rule 2165, a firm may place a temporary hold if it reasonably believes a customer age 65 or older is being exploited. The hold can last up to 55 business days, with notice to the trusted contact.
In August 2026, FINRA filed a proposal that remains pending. It would raise the hold limit to 145 business days and add a suspected-fraud delay of up to 10 business days for customers of any age. Those proposed protections are not in effect.
Write Down Disbursement and Account-Change Rules
Ask what the firm can document and enforce. Depending on its rules, you might request a live callback to a number on file before a large wire, a delay for a first-time payee, or notice to your trusted contact after a large disbursement.
Firm capabilities vary, and a verbal preference may not be enough unless the firm records it. Ask what counts as a large transfer and how the rule works for checks, wires, and online payments. A little paperwork is less exciting than a spy movie, which is probably why it helps.
Turn on alerts for these events:
- Address or contact information changes
- New payees added to the account
- Password resets or recovery changes
- Withdrawals above a threshold you choose
Written guardrails can slow certain transfers, but they do not replace credit checks or careful review of investment offers.
Step 4: Freeze Credit and Check Investment Offers Carefully
A credit freeze does not freeze money already held in an IRA or brokerage account. It restricts access to your credit file and can help stop someone from opening new accounts in your name.
A freeze helps with new-account identity theft, not withdrawals from existing retirement accounts. You must request one separately from Equifax, Experian, and TransUnion. Each bureau must place an online or phone freeze within one business day and lift it within one hour.
Know What a Credit Freeze Can and Cannot Stop.
A fraud alert is different: it lasts one year, and the bureau receiving your request notifies the other two. It asks creditors to take extra steps before opening credit in your name, while a freeze limits access to your credit file.
Both tools address identity theft tied to new credit. Neither one controls what happens inside an account you already own. Keep that distinction clear, because the word “freeze” sounds like it ought to stop everything.
Verify an Investment Offer Outside the Pitch
Be wary of no-risk promises, pressure to invest immediately, and claims of unusually strong performance. Scammers use fake AI trading platforms, fabricated news or endorsements, and social-media accounts with fake followers.
Check an advisor through FINRA BrokerCheck, then confirm the firm or offer using contact details you find independently. Do not use a phone number, link, or email address supplied in the pitch.
An AI-generated-looking message is not proof of fraud by itself. Verify the offer and its source, rather than judging by appearance alone. A polished page can be fake, and a clumsy message can come from a real person.
If a convincing scam has already led to a transfer or exposed information, contact the institution right away and ask what it can do.
What Should You Do If a Scammer Gets Through?
If you just sent money to a suspicious recipient, call your bank or investment custodian immediately and request a recall. Fast notice gives the firm a chance to try to reverse the transaction.
Do not let embarrassment delay the call. Record transaction details, account numbers, caller numbers, messages, and timestamps while they are easy to find.
Call the bank or custodian now. Prompt notice gives the institution a chance to act.
- Call the bank or custodian and request a transaction recall.
- Secure affected logins, then contact your phone carrier if your number may be compromised.
- Report suspected AI scams at ic3.gov and to the Federal Trade Commission at (866) 275-2677.
- Report identity theft at IdentityTheft.gov.
Taking the next step matters more than assigning blame. Then review your accounts one by one, starting with the institution that handled the transfer.
Conclusion
A small security task is easier to finish than a vague promise to “get safer someday.” I say that as someone who has put off simple chores until they somehow become a weekend project.
Choose one institution today and confirm the trusted contact and written rules it has on file. Then schedule time to make the same review for your remaining retirement accounts.
No plan makes an account bulletproof, but clear records and a few firm rules can help you act with less guesswork. Call your custodian and ask which account protections are currently documented.
