Lecturing usually reads as "you're careless," and most people, parents included, get defensive fast when that's the implied message — even when the warning is completely accurate.
1. Make it about the scam being sophisticated, not about them being gullible: "these are actually designed by professionals to fool smart people — it's not about you being careless." That framing removes the shame that triggers the defensiveness in the first place.
2. Give them one simple, repeatable rule instead of a long list: "if it asks you to act fast, stop and call me before clicking anything." One rule sticks; ten rules don't.
3. Set up practical safety nets instead of relying purely on vigilance — fraud alerts on their bank accounts, two-factor authentication where possible, a direct line to you to double-check anything suspicious before they act on it.
4. Celebrate the catches, not just the misses — when they do catch one and ask you first, make that the visible win, not just a footnote.
The goal isn't to make them permanently suspicious of everything, which backfires into its own problems — it's to give them one clear habit that catches most of what matters.