Why This Matters More for Older Adults
Federal Trade Commission data has consistently shown that older adults report disproportionately high dollar losses to fraud compared to other age groups, and a recurring pattern in these scams is a caller who already knows real, specific details about the victim, a home address, a relative’s name, an approximate age, details that are readily available on people-search sites and make a scam call sound far more credible than a generic one. Data broker exposure isn’t the only factor in elder fraud, but it’s a genuine, addressable piece of the problem.
Approaching This as a Family, Not a Takeover
If you’re an adult child wanting to help a parent with this, the most important thing is framing it as help, not a takeover of their independence or privacy. Most removal services can be set up and managed with a parent’s knowledge and consent, and several explicitly support family or account-sharing arrangements for exactly this situation.
Practical Steps
- Search your parent’s name together on Spokeo, Whitepages, BeenVerified, and similar sites so they can see directly what’s publicly available, this is often the most persuasive step, since the exposure is abstract until someone sees their own address and phone number on a public listing.
- Submit opt-out requests together or use a removal service, walking through the process with your parent rather than doing it invisibly on their behalf helps them understand what’s happening and stay comfortable with it.
- Set up call-blocking on their phone. Most carriers offer free spam-call identification, and dedicated call-blocking devices exist for landlines specifically marketed to seniors, worth setting up alongside the broker cleanup.
- Establish a check-in habit for large financial requests. A simple family rule, “we always call each other back on a known number before acting on any urgent financial request”, blunts most of the social engineering scams that broker-sourced details are used to make convincing.
- Freeze their credit at all three bureaus if it isn’t already, this is one of the highest-value, lowest-effort protections available and takes about fifteen minutes total.
- Consider a removal service for ongoing monitoring so this isn’t a one-time project that quietly lapses. See our comparison of Incogni, DeleteMe, Optery, and Aura, useful if you want to set it up once and have it keep working without repeated manual check-ins.
The Bottom Line
Data broker exposure is one piece of a real, well-documented pattern in elder fraud, scammers using specific, broker-sourced personal details to make a con more convincing. Helping a parent clean up that exposure, done collaboratively rather than unilaterally, is a concrete, low-friction way to reduce their risk without taking over decisions that should stay theirs.
You Can File for a Parent Without Taking Over Their Accounts
The framing problem in this whole topic is that most privacy help requires credentials, and asking an aging parent for passwords is exactly the intrusion the section above warns against. California’s DROP platform sidesteps that. CalPrivacy allows a resident to submit a deletion request for another California resident, and names a family member filing for an elderly relative as an example of the intended use.[1] A single request reaches more than 600 registered data brokers, and it is free.[1]
What makes this fit the collaborative approach is what it does not require: no account takeover, no password sharing, no access to their email. A submission needs a name, date of birth, and ZIP code, with additional phone numbers and email addresses optional but helpful for matching.[2] That is information a parent can read out to you across a kitchen table in about two minutes, which is a very different conversation from asking for logins.
Set the Expectation Before You File, Not After
Older adults are, reasonably, suspicious of anything promising to fix a problem instantly, and an overpromise here damages the trust the rest of this depends on. Be concrete about the timeline. Brokers were required to begin processing requests on August 1, 2026 and have up to 90 days to report how they handled one, so the honest description is “this takes a few months and then keeps working,” not “this fixes it today.”[3][2]
The keeps-working part is the strongest argument for using the platform with a parent rather than doing a one-time manual sweep. After processing an initial request, brokers must re-check and delete newly matching data at least every 45 days, and CalPrivacy describes DROP as ongoing rather than a one-time action.[2] A cleanup you do together in March and never revisit will quietly decay. This one does not depend on either of you remembering.[1] Our guide to the Delete Act covers the filing steps.
Read the Status Report Together, Because “Opted-out” Looks Like Failure
Sit down once, roughly three months after filing, and go through the result. The statuses are not self-explanatory, and one of them reads as a failure when it is not: “Opted-out” means the broker could not make an exact match, still holds the data, but can no longer sell or share it.[2] Adding another former address or an old phone number to the profile can convert those entries into actual deletions, and doing that together is a natural, low-stakes second conversation rather than a new project.[2] “Exempted” means the broker is legally allowed to keep the data, so no amount of re-filing changes it.[2]
Be Accurate About What Do Not Call Does and Does Not Stop
Registering a parent’s number on the Do Not Call Registry is worth doing, but overstating it sets them up to assume any call that gets through must therefore be legitimate, which is the exact opposite of the instinct you want. The FTC is clear that the Registry does not cover political calls, calls from non-profits and charities soliciting on their own behalf, or legitimate survey organizations, since a survey is not selling anything. It does cover telemarketers calling on behalf of a charity, and it permits calls from companies you have done or sought to do business with.[4] The Registry itself contains only phone numbers and no other personally identifiable information.[4]
The sentence worth actually saying out loud to a parent: being on the list does not make an incoming call safe, and the callback rule below is what protects them.
The Short Version to Do Together This Month
- Search their name together first. Seeing their own address on a public listing is what makes the rest of this feel worth doing.
- File a DROP request for them if they are a California resident, using information they read to you, not credentials they hand over.
- Freeze credit at all three bureaus and turn on the carrier’s spam filtering.
- Agree the callback rule, that any urgent financial request gets ended and returned on a number you both already know. This is the one that survives the calls nothing else on this list will stop.
- Put one calendar reminder at 90 days to read the status page together.
References
- Delete Request and Opt-out Platform (DROP). CalPrivacy, State of California
- How DROP works. CalPrivacy, State of California
- Data Broker Registry. California Privacy Protection Agency
- The Do Not Call Registry. Federal Trade Commission
Some links on this site are affiliate links, meaning we may earn a commission if you sign up through them. This does not affect our editorial independence or the price you pay. See our affiliate disclosure for details.
