A correct answer does not finish the check
Fictional example: Paul and his sister agree on a word. Later he receives an urgent money request that includes it. He still calls his sister using her saved number. This follows their agreement rather than expressing suspicion of her. Someone might have read the word, received it accidentally or found it in an earlier conversation. Their family therefore treats it as one piece of information, not a complete proof of identity or a reason to skip checking the request.
Make the arrangement understandable for everyone
First discuss whether adding a word actually helps. Someone who often mixes up words or feels tested may prefer a simpler callback routine. Agree when the question will be asked and what happens if the answer is missing. The next step should be an independent check, not an accusation. Forgetting has many ordinary explanations. The purpose is to support a calm response, not to create a surprise memory test or make a person reluctant to ask relatives for help.
Use a separate word, never account credentials
Do not use a password, PIN or recovery code from an online account. Avoid simply choosing a pet’s publicly known name or a phrase displayed on your profile. Share the arrangement only with the people who need it. Posting a comment about the family’s supposedly secret word defeats its purpose. If someone needs a written reminder, discuss an appropriately protected place for it. Do not combine this reminder with a convenient collection of everyone’s account passwords or financial access codes.
Money requests still need an independent callback
The FBI lists a family word as one precaution against fraud involving generative AI. That is not a guarantee in every situation. A real person can themselves be deceived or pressured, and a shared word can be disclosed. Check unusual payment requests through an already known contact, including who would receive the money and why. Do not relay banking approvals or security codes during an unexpected call. A convincing manner and correct word do not remove the need to examine the actual request.
Disclosure, replacement and real emergencies
If the word is shared more widely or stored in an account you no longer trust, agree a replacement through an independent route where appropriate. Do not accept a supposedly new word merely because the suspicious message announces one. Update the agreement openly with everyone involved. For concrete immediate danger, seek suitable local help even if someone cannot give the word. A family code is not a condition somebody must satisfy to deserve assistance or obtain professional emergency support.
Your checklist
The checkboxes are for your own reference. No entries are sent to us. To keep a copy, print the page or save it as a PDF using your browser menu.
Common questions
Does a correct word prove the person is genuine?
No. The word may have become known and says little about the reason for a request. An independent callback and examination of the specific request remain useful.
Should I post it in our large group?
A large audience makes a private arrangement harder to control. Share it deliberately with the people actually involved, rather than making it public.
What if someone forgets the word?
Do not accuse them or deny help. Use another known contact route. A clear alternative procedure matters more than passing a memory test.
Sources and further information
Primary sources from public authorities, consumer organisations and providers. A source may be in another language; follow the guidance that applies to your service and where you live.
- FBI IC3: Criminals Use Generative Artificial Intelligence to Facilitate Financial FraudSource review date:
- FTC: Scammers use AI to enhance their family emergency schemesSource review date:
