While visiting family for the holidays, a family member received a "paypal" email asking for account updates. She clicked on the link, provided her login information and started filling out a form until she asked us about it.
Looking at it together, this was clearly a phishing scam, but she had already given them her password.
We changed her password, added two-factor authentication, and had a long discussion about not clicking on any banking-related links in emails.
Still, it remains that if we were not here, she might have either continued to provide information, or not changed her compromised password.
Are there any tools available that could help prevent banking-related phishing scams from happening in the first place, or detect when those occur to family members?
She is using Internet Explorer and has a hotmail account... changing those habits is probably not so easy.