Agree it before you need it
Agree the rules in advance
Choose a family code word for emergency calls and never post it online. Agree that nobody moves money because of a call, text or email without calling back on a saved number. Save the real numbers for your banks and key services in your phone. Talk through the voice-clone scam with older relatives and teenagers in particular; knowing it exists is most of the defence.
Lock the doors that matter
Turn on two-step verification for email, banking and social media, ideally with an authenticator app or passkey rather than text messages. Use a password manager so every account has a different password. Make social profiles more private, especially videos with your voice and details like your children's school, which scammers use to make their stories convincing.
If you clicked, shared or paid
Act quickly and without shame. Call your bank on the number on your card straight away; fast action can stop or recover payments. Change any password you typed in, starting with your email, and sign out other sessions. If you installed software at someone's request, disconnect from the internet and get the device checked. Keep the messages and details as evidence.
Report it
Reporting helps you and others. Report fraud and cybercrime to your national reporting service or the police. In the US, report to the FTC at ReportFraud.ftc.gov and, for internet crime, the FBI's IC3. Contact your bank too. Then tell people you trust: shame keeps scams working.
Who in your family is most likely to be targeted, and have you talked to them about these scams?