The back channel

A private word your family can trust when a voice can't be trusted

Caller ID can display any name and number a scammer types in. Voice-cloning software can imitate a grandchild from a few seconds of video. That means "it sounded exactly like her" and "the screen said her name" no longer count as verification. A code word — plus a call-back habit — is the back channel that still works.

Choosing the word

• Memorable to your family, meaningless to strangers. An inside joke, an old family phrase, the dish someone always burns.
• Not discoverable online. Rule out pet names, streets, birthdays, maiden names, team loyalties — anything on Facebook or in an obituary.
• Agree on it in person or on a call the family started. Never set or change it in response to an incoming call, text, or email — that request could itself be the scam.
• Everyone gets it: parents, siblings, grandchildren old enough to use a phone. Write it nowhere digital; memory and paper at home are fine.

The rules of use

• The caller supplies it, never the listener. Ask "what's our word?" — do not prompt with "is the word ___?" A scammer will simply agree.
• No word, no exceptions. "I'm too shaken up to remember" and "there's no time for this" are pressure tactics, not excuses. Hang up and call back on the number saved in contacts.
• The word verifies identity, not requests. Even with the right word, a request for gift cards, wire transfers, or secrecy still fails the three-flag test. Identity plus a legitimate request — both are required.
• Refresh it about once a year, or immediately if it is ever said around outsiders.

The call-back protocol

The code word covers calls claiming to be family. This sequence covers every caller — banks, agencies, tech support, family, all of them:

1. Hang up. It is not rude. It is the entire defense. Scripts are built to keep people on the line, because everything falls apart in silence.
2. Wait one minute. Panic has a half-life. Sixty seconds restores the thinking that the script was designed to bypass.
3. Call back on a number you already have. The contact card, the back of the bank card, a paper bill. Never the number that just called, and never a number the caller provided.
4. Can't reach them? Call the next family member. A parent should have two or three verify-first numbers on the printed card. A real emergency is never invisible to the whole family at once.
5. No verification, no action. No money moves, no codes are read out, no personal information is confirmed until a known person on a known number says it is real.

Practice it once — out loud

A sixty-second rehearsal at a family dinner makes the habit real. One person plays the scammer:

That is the whole skill. The person being rehearsed should also hear this said plainly: if a call ever gets past the defenses, telling the family is always safe, always blame-free, and always the fastest path to getting money back.