If a scammer calls pretending to be your daughter, your grandson, or your brother, AI can now make the voice sound right. What it can’t do is know something only your family knows.
That’s the whole idea behind a family code word: a short word or phrase you agree on ahead of time, so anyone calling in a genuine emergency can prove who they are. The FBI recommends it, and it’s one of the simplest protections a family can have against voice-clone scam calls.
Here’s how to set one up in a single conversation.
Step 1: Pick a word nobody could look up
The most common mistake is choosing something meaningful that also happens to be public. When one family in my book tried this, the college-age grandson suggested the name of his childhood dog, until his mother pointed out it had appeared in a dozen of her social media posts. His grandfather suggested the name of his old machine shop, until someone found it in an online business directory in about ten seconds.
A good code word is:
- Not findable online. Skip pet names, street names, schools, team names, birthdays, maiden names, and anything that has ever appeared on social media.
- Easy to remember under stress. You’ll need it in a frightening moment, so avoid anything long or anything you’d have to look up.
- A little odd. A random pairing of two ordinary words works well, like “purple stapler” or “Tuesday pancakes,” or an inside joke only your family would connect. (Don’t use those two. They’re on the internet now.)
Don’t reuse a real password or anything you log in with. The code word should be its own thing.
Step 2: Decide who needs to know it
At minimum, two groups:
- People likely to get an emergency call, especially grandparents and older relatives.
- People likely to be impersonated, especially teenagers and young adults who are away at college or living on their own, and anyone with lots of video or audio online.
Many families include parents, grandparents, grown children, and teenagers old enough to understand the rule. Younger kids can join when they’re ready.
Step 3: Share it the safe way
Say it in person, or on a phone or video call. Don’t put it in a text, an email, or a family group chat. Messages get forwarded, accounts get hacked, and phones get lost. If it’s written down at all, keep it somewhere physical and private, not on the refrigerator next to the phone numbers.
Step 4: Agree on the rule, not just the word
The word is only half of it. The other half is what you do when someone can’t give it. Agree on this out loud:
If a caller claiming to be family can’t give the word, we hang up and call them back on a number we already have.
Then agree on what doesn’t change the rule. A scammer will push back: there’s no time, they’re too upset to remember, the phone is about to die, a lawyer is waiting. None of that matters. A real family member who forgot the word will completely understand a callback. A scammer won’t stay on the line for one.
It also helps to agree that nobody will ever be upset with anyone for checking. People get scammed because they’re too polite, or too worried about bothering someone, to verify. Taking that worry off the table in advance removes the pressure.
Step 5: Practice once, out loud
This sounds silly. It’s the step that makes the rest work.
Pick a time when everyone’s together and announce that you’re doing a practice run. Never spring a surprise test on someone, especially an older relative. It builds suspicion of family, not confidence. Then have one person step into another room and call, playing the panicked relative. The person answering asks for the word. The “caller” stalls, the way a scammer would. The person answering says, “I’m going to call you right back,” hangs up, and dials the real number.
The whole thing takes about two minutes. Afterward, talk about how it felt. Most people say asking for the word felt awkward, even a little rude. That’s exactly why practicing helps. The first time you do something under pressure is always the hardest, and a practice run makes sure the real first time isn’t the one that matters.
Step 6: Keep it current
Choose a new word if:
- it’s ever said in front of someone outside the circle,
- it ends up in a text or email by accident,
- someone leaves the circle, or
- a call ever feels off and you’re not sure whether the word is still safe.
Picking a new one takes five minutes. Some families choose a fresh word once a year just to keep it top of mind.
What a code word doesn’t do
A code word is a strong check for calls and video calls that claim to be family. It doesn’t replace the other basics:
- No money moves because of a call, text, email, or video alone. Check first, through a number you already have.
- Never share a verification code sent to your phone with anyone who calls or texts asking for it. No real company will ask.
- Anyone who wants payment by gift card, wire transfer, cryptocurrency, or payment app is a scammer until proven otherwise.
Together, these habits stop most scams before they start, whatever technology the scammer is using.
The ten-minute version
If you only do one thing this week, make it this. At your next family dinner or video call, ask: “Do we have a code word?” If the answer is no, pick one before you hang up, and agree that anyone who can’t give it gets a callback.
That one conversation closes the door on the most convincing scam call out there.
