Institutions are frequently the first to see financial exploitation of older customers, and many states now provide both reporting duties and protective authority.

Indicators. Sudden changes in transaction patterns; new joint account holders or powers of attorney; wire requests inconsistent with history; a customer accompanied by someone who answers for them; reluctance to explain; large withdrawals following unexplained calls; and requests to purchase gift cards or transfer to cryptocurrency.

Reporting. Many states designate financial institution staff as mandatory or permissive reporters to adult protective services, with immunity for good-faith reports. Federal guidance clarifies that reporting suspected exploitation of an older adult does not violate consumer privacy rules.

Transaction delay authority. Numerous states permit an institution to place a temporary hold on a disbursement where exploitation is suspected, for a stated period, extendable by an agency or court. Using it requires an internal escalation path that works in real time.

Trusted contacts. Collecting an optional trusted contact at account opening creates an avenue for verification that does not exist otherwise.

Training is the control that matters, because the detection happens at a teller window or a call center, not in compliance. Scenario-based training with a clear, low-friction escalation route outperforms policy circulation.