# "Your father has had a fall": the fake texts targeting people who care for elderly relatives

> Scammers are now targeting family carers with fake texts from care homes, community nurses or hospital emergency departments. A breakdown of a scam that exploits the most universal fear of all: that a parent is in danger.

- Source: https://www.envoyer-sms-gratuit.com/en/blog/2026-09-05/arnaques-sms-ehpad-aidants-familiaux-proches-ages
- Published: 2026-09-05 (5 September 2026)
- Author: L'équipe Envoyer SMS Gratuit
- Language: en
- Categories: Guide
- Tags: Cybersécurité, Seniors, SMS, France 2026, Protection des données, Smartphone, Guide

---
"EHPAD Les Tilleuls — Your father had a fall during the night. He is conscious but has been transferred to A&E. Please call this number as a priority: 09 XX XX XX XX."

It is 6:40 a.m. The phone buzzes on the bedside table. Before the light is even switched on, the message has been read, the heart is racing, and a finger is already pressing "call back". At no point did anyone stop to ask why a medical facility would send a text message rather than phone. At no point did anyone check whether "Les Tilleuls" really was the name of the residence. Anxiety did all the work that reasoning should have done.

This scam is the little sister of a well-known fraud: the fake message from a child who has "changed numbers" and needs money. Except that this time it targets the other end of the family chain — **carers**, the 9 to 11 million French people supporting an elderly or dependent parent, spouse or neighbour, according to estimates from the Direction de la recherche, des études, de l'évaluation et des statistiques (DREES). An available audience, anxious by nature, and used to receiving short messages from healthcare professionals.

![Young woman sitting outdoors holding a smartphone and a gold bank card in her hands](/images/blog/2026-09-05-arnaques-sms-ehpad-aidants-familiaux-proches-ages/body-3.jpg)

## Why this scam works better than the others

Classic smishing — the fake parcel, the fake fine, the fake health insurance card — relies on administrative irritation. You are annoyed, so you click. Here, the trigger runs much deeper: it is the **fear of losing someone**.

Social engineering specialists talk about "amygdala hijacking": faced with information perceived as vital, the brain switches into immediate-reaction mode and puts the prefrontal cortex, the seat of critical analysis, on standby. This state lasts a few dozen seconds. The scammers know it: their entire script fits inside that narrow window.

Three features make the message particularly believable:

- **It is plausible.** Falls are the leading cause of accidents among people over 65, as Santé publique France points out. A carer has often already lived through this scene for real.
- **It is incomplete.** The text gives neither a full name, nor a ward, nor an exact time. That is deliberate: the carer fills in the blanks with their own information, and convinces themselves the message is genuine.
- **It asks for nothing illegitimate.** Calling a number back seems harmless. It is the call, not the text, that contains the trap.

## The four most common scenarios

### 1. The fake residential facility

The message claims to come from a care home, an assisted-living residence or a home nursing service. It reports an incident (a fall, a collapse, a hospital admission) and invites you to call back a number that is never the facility's own. On the other end of the line: a professional voice, the background noise of a call centre, and quickly a request to pay "an admission fee", "an advance on the top-up insurance" or "a medical transport not covered by the health service" by instant transfer.

### 2. The fake APA or home-help file

"Conseil départemental — Your Allocation Personnalisée d'Autonomie (APA) file is incomplete. Without a reply within 72 hours, payments will be suspended: [link]." The link leads to a form copying the department's visual identity, demanding a social security number, bank details and sometimes a scanned ID document. These elements then feed document fraud far more lucrative than the immediate theft.

### 3. The relative's own fake number

"Mum? I've broken my phone, here's my new number." The reverse version: it is the elderly parent who receives a message pretending to come from their child. This variant, which the British call the *Hi Mum scam*, has caused considerable damage across Europe. It thrives because it never asks for money in the first message: it first establishes a conversation, sometimes over several days, before the request for "urgent help".

### 4. The fake pharmacy or fake laboratory

"Your test results are available, log in here." The link leads to a fake login page for a health portal. Remember that **Mon espace santé**, the official public service, never sends results via an unsolicited text link, and that genuine laboratories use codes handed over in person or sent by post.

![Black smartphone lying on a dark surface next to its open tray holding a SIM card](/images/blog/2026-09-05-arnaques-sms-ehpad-aidants-familiaux-proches-ages/body-1.jpg)

## The reflex that defuses everything: the independent call-back

There is only one rule, and it is enough in 100% of cases.

> **Never** call back the number given in the message. Call the facility on the number you already know, the one saved in your contacts or printed on an official document.

This principle is known as the *alternative channel*. It rests on a simple idea: a scammer controls the channel they offer you, never the one you choose yourself.

In practice, set this up **before** you need it:

1. Save in your phonebook, under clear names, the care home's switchboard, the nursing practice, the GP and the relevant hospital department.
2. Write those same numbers down on paper — a [classic paper phone address book](https://www.amazon.co.uk/s?k=carnet+r%C3%A9pertoire+t%C3%A9l%C3%A9phonique+papier&tag=ds0608-21) remains your best ally when the phone itself is the object of doubt, or when it is a less tech-confident relative who has to check.
3. Agree with your family on a **verbal password**: a simple word, never posted on social media, to be asked for in the event of a suspicious call. "What colour is the front gate?" is worth every technical check going.

If the message mentions a life-threatening emergency and you cannot reach anyone, dial 15. The SAMU can confirm within seconds whether a patient has indeed been admitted somewhere in the department.

## How to spot the message in five seconds

| Clue | Genuine message | Fraudulent message |
|---|---|---|
| Sender | Known short name, or number already saved | Unknown mobile number (06/07) or a number starting 09 |
| Patient identification | Full first name and surname, sometimes a room number | "Your father", "your relative", with no name |
| Request | Information, appointment reminder | Immediate call-back, link, payment |
| Deadline | No countdown | "within 24 hours", "before suspension" |
| Spelling | Correct, administrative phrasing | Odd punctuation, random capitals |
| Link | Official domain (.gouv.fr, known site) | Shortened domain, unusual extension |

One further detail deserves attention: French healthcare facilities very rarely communicate by text message about serious events. A death, an emergency admission, a deterioration: this information is **always** passed on by telephone, by a member of the care team, in a spoken exchange. A text announcing a tragedy is, in itself, a warning sign.

## Protecting the elderly relative too

The carer is not the only target. The person being cared for also receives their share of booby-trapped messages, and often has fewer reference points to sort them out.

A few simple measures make a big difference:

- **Simplify the device.** For someone with very little digital confidence, a [mobile phone with large buttons](https://www.amazon.co.uk/s?k=t%C3%A9l%C3%A9phone+portable+senior+grosses+touches&tag=ds0608-21) with no internet browser mechanically removes the risk of link-based phishing: a fraudulent page simply cannot be opened. The text remains readable, but harmless.
- **Turn on spam filtering.** On Android as on iPhone, there is automatic sorting of unknown senders. On iPhone: Settings → Messages → "Filter Unknown Senders". On Android Messages: Settings → Spam protection.
- **Lock down the mobile line.** Ask the operator to add a password or a security question to the account, so that no duplicate SIM card can be ordered without verification.
- **Secure the hardware.** A phone that gets dropped is a phone replaced in a hurry, often without properly transferring its protections. A shockproof case and a tempered glass screen protector avoid a lot of trouble, especially for someone whose hands shake.
- **Avoid running out of battery.** A carer who cannot be reached is an open door to panic scenarios. A compact power bank left in the bag, or a dual-port mains charger next to the armchair, guarantees the phone stays on — and therefore checkable.

![Man holding a mobile phone in one hand and a gold bank card in the other](/images/blog/2026-09-05-arnaques-sms-ehpad-aidants-familiaux-proches-ages/body-2.jpg)

## Where do the scammers get their information?

It is the question every trapped carer asks: "How did they know my mother is in a care home?"

In most cases, they did not. The message is sent to tens of thousands of numbers, and only a small fraction of recipients needs to actually be concerned. Statistics do the rest: more than one French person in six supports a relative losing their independence.

But in some cases, the targeting is real. The possible sources are well known:

- **Data breaches.** Health insurers, top-up insurance providers, telecare operators, home-services platforms: several major incidents in recent years have exposed files containing names, dates of birth and phone numbers. The CNIL regularly publishes penalties on the subject.
- **Social media.** A post announcing a parent's move into a facility, a comment mentioning a town, a birthday photo with the age on display: each element sharpens the profile.
- **Fake prize draws and surveys.** "Win a riser recliner chair", "try a telecare service for free": these forms often have no purpose other than harvesting the contact details of carers and older people, which are then sold on.

Reducing your exposure comes down to simple hygiene: never give your phone number on a form where it is not essential, decline the "commercial partners" box, and exercise your right to object with the sites that market to you, as provided for by the GDPR.

## What to do if you have fallen for it

The order matters. Each step has a useful time window.

1. **Within the hour**: call your bank to stop the payment. If an instant transfer has gone through, report it immediately — under the new European rules on instant transfers, banks have strengthened obligations to verify and handle complaints.
2. **The same day**: change the passwords of the accounts concerned (bank, email, health portal) from a device other than the potentially compromised one.
3. **Report the text to 33700**: forward the fraudulent message to this free number, then send back the sender's number when asked. This is France's official reporting platform for unwanted text messages.
4. **Report the link to Signal Conso or Phishing Initiative**, and the fraudulent site to **cybermalveillance.gouv.fr**, which also offers free support.
5. **File a complaint** at a police station or online. Bring screenshots of the text, the call log and your bank statements.
6. **Warn the impersonated facility.** Care homes and nursing practices are not always aware that their name is circulating. An alert can sometimes prevent other victims in the same town.

## A word about guilt

Many carers who have been caught out do not dare talk about it. They judge themselves naive. That is a misreading: they were not trapped despite their attachment to their relative, but **because** of it. The scammer did not exploit weakness of mind, they exploited an emotional bond. That is precisely what makes this fraud so effective — and why it deserves to be talked about rather than hushed up.

Carer support organisations such as France Alzheimer or the Association Française des Aidants are indeed reporting a rise in accounts of this kind. Some run free digital awareness workshops; attending one with the relative concerned is often worth more than a long lecture. A [practical guide to online scams](https://www.amazon.co.uk/s?k=livre+se+prot%C3%A9ger+des+arnaques+sur+internet&tag=ds0608-21), left on the living room table, also does quiet, lasting work with people who do not dare to ask questions.

## Key takeaways

- A text message announcing an accident or hospital admission of a relative must **always** be checked through an independent channel.
- Healthcare facilities announce emergencies by telephone, with an identifiable person on the line, never through a simple message with a call-back number.
- The family verbal password is the most effective and the least expensive protection there is.
- 33700 and cybermalveillance.gouv.fr are the two reporting reflexes worth knowing.
- If you are worried about a relative's health and cannot reach the facility: dialling 15 settles it in seconds.

Thirty seconds of checking. That is all that separates the calm carer from the victim. And those thirty seconds are something no genuine health service will ever hold against you.

{/* image-sources: https://images.pexels.com/photos/28682055/pexels-photo-28682055.jpeg?auto=compress&cs=tinysrgb&dpr=2&h=650&w=940 https://images.pexels.com/photos/63690/pexels-photo-63690.jpeg?auto=compress&cs=tinysrgb&dpr=2&h=650&w=940 https://images.pexels.com/photos/5198284/pexels-photo-5198284.jpeg?auto=compress&cs=tinysrgb&dpr=2&h=650&w=940 https://images.pexels.com/photos/8938729/pexels-photo-8938729.jpeg?auto=compress&cs=tinysrgb&dpr=2&h=650&w=940 */}