Elder Financial Exploitation: How Banks Can Detect and Prevent It

Elder financial exploitation is the fraud category where bank employees have the greatest ability to prevent a loss and the least confidence about whether they are permitted to act.

The hesitation is understandable — privacy obligations, the customer's right to manage their own money, and the discomfort of questioning someone's judgment all push toward processing the transaction. But federal guidance and most state laws have moved substantially toward encouraging financial institutions to intervene, and staff who understand the protections available act with more confidence.

Two Different Problems

Exploitation by a stranger. Romance scams, lottery and prize fraud, grandparent scams, tech support fraud, and government impersonation. The victim is deceived and is usually cooperating actively, sometimes over months, and frequently defends the transaction when questioned.

Exploitation by someone known. A family member, caregiver, friend, or fiduciary misusing access or authority. Far more common than stranger fraud in reported cases, harder to detect because the person has legitimate access, and much harder to address because the victim may be dependent on the person exploiting them.

The second is where bank staff make the most difference, because the signals are relational and visible in the branch rather than transactional and visible in a system.

What It Looks Like

At the counter:

• A customer accompanied by someone who answers for them, hovers, or discourages private conversation
• The customer appears coached, confused about the purpose of the transaction, or uses phrasing that does not sound like them
• Reluctance or embarrassment when asked routine questions
• Fear or deference toward the accompanying person
• A previously engaged customer who has become withdrawn or unkempt

In the activity:

• A sudden change in transaction patterns — large withdrawals from an account with decades of stable behavior
• Wires or cryptocurrency purchases from a customer who has never made one
• Gift card purchases in unusual amounts
• New joint owners, signers, or beneficiaries added, particularly a recent acquaintance
• A new power of attorney presented by someone unfamiliar
• Checks written to unfamiliar payees, or an increase in checks written to cash
• Withdrawals just below reporting thresholds
• Account statements redirected to a new address
• Loans or credit lines taken by a customer with no history of borrowing

In what the customer says:

• A story involving a prize requiring a fee, a relative in trouble abroad, a government agency demanding immediate payment, a computer problem requiring remote access, or a romantic partner who needs help but cannot meet
• Instructions not to tell the bank the real reason for the withdrawal — a particularly strong signal, because the scammer has anticipated the bank's question

What Staff Can Actually Do

Slow the transaction down. This is the single most effective intervention available. Excusing yourself to consult a supervisor, asking the customer to step to a private desk, or explaining that a wire requires additional verification creates the space in which many victims begin to question the story themselves.

Separate the customer from the companion, safely. A private conversation frequently produces a different account of the transaction. Asking the accompanying person to wait — for a routine reason — is a normal service practice, not an accusation.

Ask open questions rather than yes-or-no ones. "What are the funds for?" produces information. "Is everything all right?" produces reassurance.

Escalate under the institution's procedure, promptly, and document what was observed in specific factual terms rather than conclusions.

File a SAR where the standard is met. Elder exploitation is explicitly within the scope of suspicious activity reporting, and interagency guidance has encouraged filing.

Never confront the suspected exploiter or accuse anyone. This creates a safety risk for the customer and destroys the possibility of a controlled response.

Reporting Protections and Obligations

Two distinct legal frameworks apply, and staff should know both exist.

Protection for reporting. The Senior Safe Act provides immunity from liability for disclosures about suspected exploitation made to covered agencies by trained employees of covered financial institutions, provided the training requirement is met. Interagency guidance has also clarified that privacy rules do not prohibit reporting suspected elder financial exploitation to appropriate authorities.

Obligations to report. Many states impose mandatory reporting duties on financial institutions or their employees for suspected exploitation of a vulnerable adult, with defined recipients — commonly adult protective services and sometimes law enforcement — and timeframes.

NOTE TO EDITOR: State mandatory reporting requirements for elder financial exploitation vary substantially, and several states have amended them recently. Confirm the current requirements for the states served before publishing, or link to a maintained state-by-state resource.

Transaction holds. A number of states permit financial institutions to place a temporary hold on a disbursement or transaction where exploitation is suspected, subject to conditions on notice, duration, and reporting. Where such authority exists, using it correctly is powerful; using it without meeting the statutory conditions creates its own exposure.

Program Design

An institution serious about this has six things:

1. A written program that names the red flags, the escalation path, the decision authority, and the reporting obligations in the states served.
2. Training that satisfies the Senior Safe Act conditions, so the immunity is available, delivered to the staff who actually encounter customers.
3. A designated escalation contact reachable in real time — exploitation is frequently detected mid-transaction, and a process requiring an email and a next-day response is no process.
4. A trusted contact program — asking customers to designate someone the institution may contact if it has concerns. This is a low-cost control that changes the options available later, and it should be offered at account opening rather than only to older customers.
5. Documentation standards — specific observations, in the employee's own words, recorded contemporaneously.
6. Relationships with adult protective services and local law enforcement established before they are needed.

The Hard Part

Competent adults are entitled to make decisions others consider unwise, including giving money away. The institution is not the customer's guardian, and treating older customers as presumptively incapable is both wrong and a fair lending problem under ECOA's age provisions.

The distinction worth training is between an unwise decision the customer understands and a decision made under deception or coercion. The customer who says "I know it's a lot, I'm helping my grandson buy a car" and can explain it consistently is exercising judgment. The customer who cannot explain the purpose, whose story shifts, who was told not to discuss it with the bank, or who is being directed by someone else is in a different situation.

When staff are uncertain — and they frequently will be — the correct action is to escalate and document, not to decide alone at the counter.

Structured coverage is available through our bank fraud prevention training, the Certificate in Fraud Prevention, and Financial Crimes Red Flags Training.

When the Customer Insists

The most difficult scenario is the one training rarely addresses: staff are confident the customer is being scammed, the customer is adamant, and the transaction is lawful.

Several things remain available. Document the warning given. Telling the customer plainly what the institution believes is happening, and recording that the warning was given and declined, matters both for the customer — who may recall it later — and for the institution.

Use any statutory hold authority correctly if the state provides it and the conditions are met, recognizing that a hold buys days, not a resolution.

Contact the trusted contact if one was designated and the program permits it.

File the SAR regardless of whether the transaction was completed. The report's value to investigators does not depend on the bank having prevented the loss, and a pattern of reports against the same beneficiary account is frequently what enables law enforcement to act.

Report to adult protective services where the state requires or permits it.

And then process the transaction if it is lawful and the customer has capacity and insists. That outcome is genuinely unsatisfying, and staff should be told in advance that it happens — because employees who believe they failed when a customer overrode them are the ones who stop intervening. What the institution asks of them is to notice, slow it down, warn, escalate, and document. Those steps prevent a substantial number of losses, and no process prevents all of them.

Building Staff Confidence

The limiting factor in most institutions is not detection ability but willingness to act, and the fix is specific rather than motivational.

Give staff explicit language. Employees hesitate because they do not know what to say. Providing actual sentences — "Before I process this, I need to ask what the funds are for; it's a standard step on larger withdrawals" — removes the improvisation that makes people avoid the conversation entirely. Framing questions as routine procedure rather than as suspicion protects both the customer's dignity and the employee's comfort.

Make escalation costless. If raising a concern means filling in a form, justifying it to a supervisor, and possibly being wrong in front of a customer, it will not happen at the volume it should. A named person, reachable immediately, whose job is to take the call, changes the calculation.

Tell staff that most escalations will be nothing. Employees who believe a referral is an accusation will only escalate when certain, which means they will escalate after the money is gone. The standard should be explicitly low.

Close the loop. Someone who slowed a transaction and never learned the outcome will process the next one. Even a brief note back sustains the behavior.

Address the emotional weight. Staff who watch a customer they have known for years hand money to a scammer, and who cannot stop it, carry that. Institutions that acknowledge this — in training, and in how supervisors respond afterward — retain people willing to keep engaging. Institutions that treat the completed transaction as a personal failure teach staff to stop looking.

The measure of a functioning program is not the number of transactions blocked. It is the number of conversations that happened at all.

Frequently Asked Questions

What are the warning signs of elder financial exploitation?

A companion who answers for the customer or discourages private conversation, a customer who appears coached or cannot explain the purpose of a transaction, sudden departures from decades-stable patterns, first-ever wires or cryptocurrency purchases, unusual gift card activity, new joint owners or beneficiaries who are recent acquaintances, statements redirected to a new address, and instructions not to tell the bank the real reason for a withdrawal.

Can bank employees report suspected exploitation without violating privacy rules?

Yes. Interagency guidance has clarified that privacy rules do not prohibit reporting suspected elder financial exploitation to appropriate authorities, and the Senior Safe Act provides immunity from liability for covered disclosures made by trained employees of covered institutions, provided the training condition is satisfied.

Are banks required to report elder financial exploitation?

It depends on the state. Many states impose mandatory reporting duties on financial institutions or their employees regarding suspected exploitation of a vulnerable adult, with specified recipients and timeframes. Federal law provides protection for reporting rather than a general mandate, so the state requirements are the ones to confirm.

Can a bank refuse to complete a transaction it believes is a scam?

A number of states permit temporary holds on disbursements where exploitation is suspected, subject to statutory conditions on notice, duration, and reporting. Absent that authority, a competent adult is entitled to make decisions others consider unwise, and the institution's role is to warn, document, escalate, and report rather than to override.

What is a trusted contact, and why does it matter?

A person the customer designates whom the institution may contact if it has concerns about the customer's account or wellbeing. It is a low-cost control that materially expands the options available when exploitation is suspected, and it should be offered to all customers at account opening rather than only to older ones.

What should staff do when they suspect exploitation mid-transaction?

Slow the transaction down, ask the accompanying person to wait so the customer can be spoken with privately, ask open questions rather than yes-or-no ones, escalate immediately to the designated contact, and document specific observations rather than conclusions. Never confront the suspected exploiter, which creates a safety risk for the customer.