Toronto Man Charged After $7,500 Grandparent Scam Call

A Familiar Voice That Wasn't

According to CTV News, 27-year-old Diego Armando Lillo was arrested and charged in August 2026 after allegedly defrauding an elderly Toronto woman out of $7,500. The method was simple and cruel: call the victim, pretend to be her grandson, claim to be in legal trouble, and ask for emergency bail money.

Police say Lillo didn't stop there. He allegedly attempted a second grandparent scam targeting another senior, this time for $15,000.

How the Grandparent Scam Works

The grandparent scam has been around for years, and it keeps working for a specific reason.

The caller pretends to be a grandchild in crisis. The crisis is always urgent: an arrest, a car accident, a hospital visit. The ask is always cash. And the instructions always include one key phrase: don't tell anyone else in the family.

That last part is deliberate. Isolation is the whole strategy. If the victim calls a son or daughter to check, the scam falls apart. So the fraudster creates urgency and shame to prevent exactly that.

Sometimes a second caller joins, posing as a lawyer or police officer, to add legitimacy. The emotional pressure is intense. Grandparents who love their grandchildren don't stop to question. They act.

Why Seniors Are Targeted

This isn't about being gullible. It's about being loving. Grandparents are targeted because they respond. They care. When a voice on the phone sounds like their grandchild and says they're scared and need help, the instinct is to help.

Fraudsters study that instinct and exploit it.

The FBI reports that Americans over 60 lose more than $3.4 billion to fraud annually, with impersonation scams among the most common category. In Canada, the Canadian Anti-Fraud Centre has flagged grandparent scams as one of the top fraud types affecting seniors year after year.

The Role of AI Voice Cloning

The Toronto case appears to involve a human caller doing the impersonation directly. But the broader picture is shifting.

Voice cloning technology now requires as little as 20 to 30 seconds of audio to produce a convincing replica of someone's voice. That audio is easy to find. A grandchild's voice might appear in a birthday video on Facebook, a short TikTok clip, or a family group chat video.

Fraudsters who use cloned voices don't need to sound exactly like your grandson. They just need to sound close enough to create doubt in someone already shaken by a distressing story.

Once you're hearing what sounds like your grandchild crying on the phone, your brain fills in the rest.

Verification Is the Missing Step

The Toronto case could have been stopped easily. One question to the real grandson. One call to his actual phone number. One quick check with a parent.

But the scammer's instructions specifically discourage that. "Don't tell Mom and Dad. They'll be so upset. Just please help me."

The solution isn't suspicion. It's a system that holds up even under emotional pressure.

What Three Words Can Do

A family's three rotating codewords stop this kind of call cold.

Trust Onion is a free app that gives every family a set of three words, updated every few hours, calculated on your phone with no server needed. When you get a distressing call from someone claiming to be a family member, you ask one question: "What are the words?"

If the caller knows them, great. If they don't, the call is over.

A fraudster posing as your grandson can learn your grandson's nickname, his voice, his birthday, his college. He cannot learn three codewords that changed two hours ago and only exist on your family's phones. There's no social media post to scrape, no database to breach, no way to fake knowing something that private and that recent.

For families with elderly grandparents, this matters. You don't have to teach Grandma to spot phishing emails or judge whether a voice sounds synthetic. You just teach her one habit: ask for the words before doing anything else.

"What are the words?" A fraudster can't answer that. Her actual grandson can answer it in two seconds.

Proofies: A Step Further

For situations where more certainty helps, Trust Onion also offers Proofies. A Proofie is a selfie with the current three words shown in the image, signed so the recipient can verify it's real. It combines what your family member looks like, what they know (the words), and when the photo was taken.

You can't fake a Proofie, and you can verify one without any technical knowledge.

What Families Can Do Right Now

While law enforcement does the work of catching fraudsters like Diego Armando Lillo, families don't have to wait for arrests to protect themselves.

Talk about it openly. Grandparent scams work partly because families don't discuss them. Tell your parents and grandparents that this type of fraud exists and what it looks like.

Establish a verification habit. Agree as a family that anyone who calls in a crisis will be asked for a codeword or called back on their known number before any money moves.

Set up Trust Onion. It takes minutes, it's free, and it turns "What are the words?" into an automatic reflex that costs a scammer nothing but their script.

Never send cash, gift cards, or wire transfers based on a phone call alone. Legitimate legal situations do not require grandparents to scramble for bail money in secret.

The Bigger Picture

Diego Armando Lillo faces charges and the legal process will run its course. But the grandparent scam didn't start with him and it won't end with his arrest. Thousands of similar calls go out every week across North America.

The families who don't get defrauded aren't necessarily more skeptical or more tech-savvy. They're the ones who have a plan before the call comes.

Three words. That's the plan.