How to Prevent Family Members from Being Scammed in Crypto

A difficult truth: the person most likely to be drained by a crypto scam in your family is probably not you. It is the parent who trusts phone calls, the sibling going through a divorce, the grandparent who just discovered Facebook Marketplace, or the young adult who believes a charismatic "investment mentor" on Instagram. The people with the least defense are not stupid — they simply have not been trained to recognize the specific patterns that crypto fraudsters rely on.

Prevention in a family context is different from prevention for yourself. You cannot force another adult to change their passwords. You cannot monitor their screen. What you can do is have the right conversation at the right time, help them set up defenses that work even when they forget the rules, and establish a tripwire so that if something does go wrong, you hear about it early — not after $400,000 is gone.

Start with the Conversation, Not the Technology

Every family prevention effort that actually works starts with a conversation. Every one that fails starts with someone trying to install software on a reluctant parent's phone. The order matters.

The most effective framing I have found is this: "I read about something terrible that happened to someone and I want to make sure it doesn't happen to anyone in our family." Then you tell a specific, recent story. Not a generic warning. A story with a name, a dollar amount, and a mechanism. Real cases are published every week — pick one where the victim was demographically similar to your family member.

After the story, ask open questions:

• "What would you have done if that call came to you?"
• "Have you ever had anyone reach out to you online who you didn't know personally?"
• "If I were traveling and you got a call saying I was in trouble and needed money, how would you verify it was really me?"

Do not lecture. Do not list red flags. Let them tell you their own mental model and then gently fill in the gaps. People defend conclusions they reach themselves; they resist conclusions imposed on them.

Identify Who in the Family Is Actually at Risk

Not everyone in your family needs the same level of protection. A useful mental model splits people into four groups:

Group 1 — Tech-savvy and skeptical. They probably do not need intervention. A quick check that they use a hardware wallet and 2FA is enough.

Group 2 — Tech-savvy but overconfident. These people get drained by sophisticated scams — approval phishing, fake airdrops, malicious smart contracts — precisely because they believe they are too smart to fall for anything. The conversation with them focuses on technical attack vectors, not social ones.

Group 3 — Not technical but cautious. The most protectable group. Clear rules, simple tools, and a single trusted point of contact (you) are enough.

Group 4 — Emotionally vulnerable and/or isolated. Recently widowed, going through a health scare, socially isolated, cognitive decline in early stages. This group is the primary target of romance scams, pig-butchering, and recovery-scam re-victimization. They need the most support and are also the most likely to resist it because the scammer has already filled an emotional gap in their life.

Device and Account Setup That Protects Automatically

Good prevention does not rely on the user making the right decision every time. It makes wrong decisions harder.

For the Crypto-Curious Family Member

• Use a reputable exchange with strong identity verification. Coinbase, Kraken, or Gemini in the US. This keeps funds custodial and recoverable in most scam scenarios, rather than lost to a self-custody mistake.
• Enable hardware-key 2FA (YubiKey) on the account, not SMS. SIM-swap attacks defeat SMS 2FA instantly.
• Turn on withdrawal allow-listing. Most major exchanges let you require that withdrawals only go to pre-approved addresses, with a 24–48 hour delay to add new ones. This single setting stops most completed scams cold.
• Set a low daily withdrawal limit. If they only need to move $500 at a time for normal use, cap it there.

For Any Family Member Using Any Device

• Turn on automatic OS updates.
• Enable two-factor authentication on email — email is the master key to every financial account.
• Install an ad-blocker (uBlock Origin on desktop). A huge percentage of crypto scams arrive through malicious Google ads impersonating real wallet and exchange brands.
• Remove any browser extensions they do not actively use. Malicious extensions that read clipboard contents are a common wallet-drainer vector.
• Add your phone number as the emergency contact on their phone and their exchange accounts where possible.

The Warning Signs Family Should Watch For

Train yourself and the rest of the family to recognize these patterns in the behavior of the person you are trying to protect:

• New secrecy about finances, especially in a family that was previously open.
• A new online "friend," "mentor," or "romantic partner" they have not met in person.
• Sudden interest in a specific crypto platform they had never heard of a month earlier.
• Showing "profits" on a website or app you have never heard of — almost universally a pig-butchering interface that lets them watch fake gains until they try to withdraw.
• Unexplained large transfers from checking accounts, HELOCs, or retirement accounts.
• Defensiveness when asked basic questions about the platform or person involved.
• Unusual purchases of gift cards, gold, or cash-deposit receipts.
• New requests to borrow money from other family members with vague reasons.

The Intervention Conversation

If you suspect a family member is already mid-scam, the conversation is very different from the prevention conversation. The scammer has almost certainly told them: "Your family will try to stop you because they don't understand." You are walking into a pre-built defense.

Things that work:

• Get in the same room. No phone calls. No texts.
• Do not attack the scammer directly; attack the mechanism. Instead of "this person is a scammer," try "can we call the platform's published support number together, just to confirm your withdrawal is real?"
• Involve their bank. Banks have seen thousands of these cases and will often do the harder part of the conversation for you.
• Ask them to screenshot the platform and send it to you. A professional forensic assessment can frequently confirm the platform is fraudulent within minutes.
• If they have not yet sent funds, ask them to wait just 48 hours. Most scammers cannot survive a 48-hour pause; the pressure escalates in a way that makes the fraud obvious.

If Prevention Fails

Even with every precaution, sometimes a family member will still fall for a scam. The most important thing in the first 24 hours after a loss is not assigning blame. Shame is what causes victims to hide losses, avoid professional help, and fall for secondary recovery scams.

Move directly to: freeze what can be frozen, document everything, report to the exchange, file with IC3 and local law enforcement, and consult a legitimate forensic investigator before paying anyone who promises to "recover" the funds for an upfront fee — because that is almost always a second scam targeting the first victim. Follow the first 72 hours guide for the exact sequence, and check are crypto recovery firms legit before engaging anyone.