Family Protection Protocol
Complete System · Module 04

Protect
Every
Person
You Love.

You've removed your own exposure and hardened your infrastructure. But your children, spouse, and elderly parents are still completely exposed — and they have no idea. This protocol extends your privacy shield to cover your entire household.

One-Time
$97
Complete family system
4
Member Profiles
50+
Specific Actions
6
Talk Scripts
∞
Household Members
$0
Tools Cost
Your family members are the easiest way to get to you — and they're almost certainly exposed right now.
Data brokers don't just list you. They list your spouse, your children's names, your parents' address — often linked directly to your profile. Scammers use family data to craft believable emergency schemes. Predators use children's public social profiles to establish contact. Elderly relatives are the number one target for identity theft — and the least likely to know it's happening.

This protocol adapts the Digital Ghost Protocol system for each family member type — with age-appropriate steps, conversation scripts for difficult privacy conversations, and a master household audit checklist you run together.
Threat Landscape
Who In Your Family
Is Most At Risk

Each family member faces different threats based on their age, habits, and how much of their life is online.

👴
Elderly Parents
Primary targets for phone scams, Medicare fraud, IRS impersonation, and grandparent emergency schemes. Often have clean credit and retirement savings — the ideal target.
Highest Financial Risk
🧒
Children (Under 18)
Children have clean credit histories that go unmonitored for years. Identity thieves open credit lines in a child's name and may not be discovered until they apply for college loans at 18.
Clean Credit Target
💑
Spouse / Partner
Your spouse's data is linked to yours in data broker profiles. Their exposure is your exposure — shared address, phone, employer, relatives all appear in the same record.
Linked Profile Risk
📱
Teenagers (13–18)
Active social media users with public profiles, location sharing, and no understanding of data broker aggregation. Digital footprint accumulates rapidly without awareness.
Social Exposure Risk
🎓
College Students
First independent financial accounts, new email addresses on public directories, campus websites with full name + department, and low security awareness.
New Identity Risk
🏠
The Household
Data brokers aggregate entire households — linking everyone at your address into a single findable record containing names, ages, and relationships of all residents.
Aggregate Profile Risk
01
// Priority Member
Protecting Elderly Parents
The highest-priority protection in this entire system. Elderly relatives are targeted by sophisticated fraud operations specifically because they're trusting, have savings, and rarely monitor their credit. This section covers the exact steps to reduce their exposure and — more importantly — how to talk to them about it.
Run their name on all major data broker sites
Use the Ghost Protocol search queries with their full name. Note every site listing their address, phone, or relatives. Submit removal requests on their behalf.
Freeze their credit at all 4 bureaus
If they're not actively applying for credit, a freeze costs nothing and blocks all new credit lines. Do this with them — they'll need a PIN to unfreeze later. Start at Equifax →
Set up a shared password for family contact verification
Create a secret family code word. If they receive a call claiming to be from a family member in trouble, they ask for the code word. If the caller doesn't know it — it's a scam.
Register their number on the Do Not Call Registry
Free, takes 2 minutes. donotcall.gov — this won't stop scam calls but reduces legitimate telemarketing that bad actors disguise as.
Enable call screening / spam filtering on their phone
Android: Enable Google's call screening. iPhone: Settings → Phone → Silence Unknown Callers. This routes unrecognized numbers to voicemail automatically.
Add their email to breach monitoring
Set up a HIBP notification alert for their email address at haveibeenpwned.com/NotifyMe — breach alerts will come to you or to them.
⚠ The Grandparent Scam — Explain This To Them Caller claims to be a grandchild in jail, hospital, or stranded abroad. Asks for gift cards or wire transfer. Begs them not to tell other family members. The "don't tell anyone" instruction is the clearest signal it's a scam. Establish a rule: any unexpected request for money from a "family member" requires a direct callback to that person on their known number before any action is taken.
⚠ NEW AI THREAT: Voice Cloning Scams Are Now Indistinguishable AI voice cloning tools can duplicate anyone's voice from as little as 3 seconds of audio — found in a social media video, voicemail, or YouTube clip. Scammers now call elderly relatives using a cloned voice of their grandchild or child, making the grandparent scam nearly impossible to detect by ear alone. The family safe word is now essential, not optional. It must be a word or short phrase that would never appear in natural conversation, known only to immediate household members. Rotate it annually or any time you suspect it may have been overheard. Whenever an "emergency" call comes in — no matter how real the voice sounds — the rule is: ask for the word first, act second.
// Conversation Script — How To Bring This Up
"Mom/Dad, I've been doing some research on identity theft and I found out that your name and address are publicly listed on websites that anyone can search. It's not your fault — these sites collect information automatically. I want to help you get your information removed and set up a few things that will protect you going forward. It'll take about an hour and I can walk you through everything. When's a good time?"
02
// Children Under 18
Protecting Your Children's Identity
Children are ideal identity theft targets. Their Social Security numbers are clean, their credit history is blank, and parents rarely check. Thieves open credit lines under a child's name and may not be discovered for 5–10 years. Here's how to lock it down before it's touched.
Under 13

No social media accounts. COPPA prohibits platforms from collecting data on children under 13 without parental consent. Most platforms violate this if unsupervised. Check for any accounts created without your knowledge and delete them. Freeze their credit now — it can be done for minors.

⚠ AI Profiling Warning (Under 13): AI recommendation systems on YouTube, TikTok, and gaming platforms build detailed behavioral profiles on children — including inferred emotional states, attention patterns, and social vulnerabilities — using engagement data. These profiles persist even without an account, built via device fingerprinting and household IP association. At this age, restrict device use to parent-supervised environments, enable YouTube Kids instead of standard YouTube, and audit app permissions quarterly. Any app that requests microphone, camera, or location access on a child's device should be denied or removed.

Ages 13–15

If they have social accounts: all profiles set to private, no real name as username, no school name in bio, no location sharing enabled. Review their follower/friend lists with them — explain why unknown followers are a risk, not a compliment.

Ages 16–18

More independence, same rules. Add: freeze their credit now before they turn 18. Teach them the Ghost Protocol search so they can audit themselves. Set up a password manager account they control. Explain that every app they install has a privacy policy that sells their data.

⚠ SE 2.0 Targeting Warning (Ages 16–18): Social engineering attacks targeting teenagers have evolved dramatically with AI. Attackers scrape their public social profiles to identify: their social circle, current stressors (college apps, relationships, friend conflicts), favorite brands, and regular locations. They then craft fake messages from trusted contacts — using cloned writing styles or impersonated accounts — to manipulate teens into sharing login credentials, explicit photos, or financial access. Teach them one rule: if anyone contacts you urgently and asks you to keep it secret from your parents, that's a manipulation attempt, not a real emergency. Review their direct message settings together — most platforms allow anyone to DM by default.

// Conversation Script — Talking to Teens About Privacy
"I want to show you something. When I Google your name, this is what comes up. That means any adult, any stranger, can find this information about you instantly. I'm not trying to control your accounts — I want you to understand what's visible so you can decide what you're comfortable with. Let me show you how to lock these settings down without losing your followers."
03
// Spouse / Partner
Protecting Your Partner's Data
Data brokers link partners together in the same household record. Your removal work benefits your partner too — but they have their own independent data footprint that needs to be addressed separately. This is also where joint financial exposure lives.
Run the Ghost Protocol exposure audit on their name
Use all 30+ search queries from the Ghost Protocol with their full name and any previous names (maiden names, former addresses). Document what's found.
Submit data broker opt-outs for their name separately
Each broker requires a separate opt-out per person. Your removal doesn't cover them. Work through the broker table from the Ghost Protocol using their info.
Set up their password manager account (Bitwarden)
Create a separate Bitwarden vault for them — not shared. Each person needs independent credential management with their own master password.
Enable 2FA on all their high-value accounts
Walk them through enabling authenticator-based 2FA on email, banking, and social accounts. Use the same priority order from Ghost Stack Module 03.
Review shared accounts for over-exposure
Joint Amazon, Netflix, streaming accounts — check what personal data is stored (addresses, payment info, purchase history) and whether account security settings are adequate.
Add a fraud alert to their credit profile
File a fraud alert at one bureau — it notifies all three. This adds a verification step before any credit can be opened in their name, even without a full freeze.
Handling Resistance — Common Objections & Responses
Objection: "I have nothing to hide, I don't care."
Privacy isn't about hiding — it's about control. Right now, strangers can find our home address in 30 seconds. That's not about secrets, it's about basic safety. It takes one afternoon to fix and then we don't have to think about it again.
Objection: "It won't happen to us."
Data breaches hit 422 million people in the US last year. Identity theft affects 1 in 4 Americans over their lifetime. The question isn't if — it's when. This is just like car insurance: you don't expect to crash, but you have it anyway.
Objection: "I don't want to change my passwords."
We don't have to change all of them today. Let's just start with the bank and email. Bitwarden will remember the new ones — you won't have to. It'll take 15 minutes and then it's done.
04
// Ongoing System
Master Household Audit Checklist
Run this checklist together as a family every quarter. Takes 30–45 minutes. Catches new exposure before it compounds. Click each item to track your progress.
Quarterly Family Privacy Audit
0 of 20 complete
You
Google your full name + city — review top 10 results
Quarterly
You
Check email at HaveIBeenPwned for new breaches
Quarterly
You
Re-check top 5 data brokers for re-listing after removal
Quarterly
You
Pull one credit report (rotate Equifax / Experian / TransUnion)
Quarterly
Spouse / Partner
Google their full name + city — review top 10 results
Quarterly
Spouse / Partner
Check their email at HaveIBeenPwned
Quarterly
Spouse / Partner
Pull their credit report — check for unknown accounts or inquiries
Quarterly
Children
Google each child's full name — check school sites, rosters, public posts
Quarterly
Children
Review all social media privacy settings together
Quarterly
Children
Check their credit is still frozen (no activity under their SSN)
Annually
Children
Review follower/friend lists on any social accounts with them
Quarterly
Elderly Parents
Google their name — check broker sites for new listings
Quarterly
Elderly Parents
Ask them about any suspicious calls or emails received
Monthly
Elderly Parents
Confirm their credit freeze is still active at all 4 bureaus
Annually
Elderly Parents
Review their bank and financial statements for unknown charges
Monthly
Household
Search home address on Google and top broker sites — resubmit removals if re-listed
Quarterly
Household
Review and update the family secret code word for scam verification
Annually
Household
Delete any apps from all devices unused in the last 90 days
Quarterly
Household
Check that all family member passwords are stored in their password managers
Quarterly
Household
Run through scam awareness refresher — review latest scam types together
Quarterly
Elderly Parents
Play a 60-second AI voice cloning demo — so they hear what fake voices sound like. Reinforce the family safe word protocol.
Quarterly
Children (Under 13)
Audit all apps on their devices — remove any with microphone, camera, or location access that can't be explained. Check YouTube Kids is the only YouTube access.
Quarterly
Teenagers (16–18)
Review direct message settings on all platforms — confirm strangers cannot initiate contact. Check if school or location appears anywhere in bios or posts.
Quarterly
Household
Re-submit AI training opt-out requests to ChatGPT, Google, Meta, and Microsoft — platforms silently re-enable data collection after major updates.
Quarterly
Household
Rotate the family safe word. Confirm all household members know the current word and the rule: ask for it on any unexpected "emergency" call before taking action.
Annually
// Protocol Complete
Your Family Is Protected.

You've extended the full Ghost Protocol system to every member of your household. Run the quarterly audit together, keep your family's information off broker sites, and you've built one of the most comprehensive household privacy defenses available — without spending anything on tools.

The complete Digital Ghost Protocol system is now deployed.