The three definitions, with their scope stated, because a definition read outside its own statute is a common source of error.
Sixty. The Elder Justice Act, enacted as part of the 2010 health care law, opens its definitions section at 42 USC 1397j with the words "In this division", and then provides at (5) that "the term 'elder' means an individual age 60 or older." At (8) it defines "exploitation" as "the fraudulent or otherwise illegal, unauthorized, or improper act or process of an individual, including a caregiver or fiduciary, that uses the resources of an elder for monetary or personal benefit, profit, or gain, or that results in depriving an elder of rightful access to, or use of, benefits, resources, belongings, or assets." Two features are worth keeping. The definition names a caregiver or fiduciary expressly, so a person acting under a power of attorney is inside it rather than outside. And it covers the denial-of-access case as well as the taking case. Because of the "in this division" limitation, this is the definition for the Elder Justice Act's own programs, not a general federal definition of the term.
Sixty-five. Section 303 of Public Law 115-174, enacted on 24 May 2018 as part of the Economic Growth, Regulatory Relief, and Consumer Protection Act, appears in the Code at 12 USC 3423 under the heading "Immunity from suit for disclosure of financial exploitation of senior citizens". It is commonly called the Senior Safe Act, after the bill whose text it carries. Its definitions apply "in this section", and at (a)(1)(N) "the term 'senior citizen' means an individual who is not younger than 65 years of age". Its own definition of exploitation, at (a)(1)(G), tracks the Elder Justice Act's two limbs but is scoped to a senior citizen rather than an elder.
Sixty-five, or eighteen with an impairment. FINRA Rule 2165, the brokerage temporary-hold rule, defines a "specified adult" as a natural person aged 65 and older, or a natural person aged 18 and older whom the member firm reasonably believes has a mental or physical impairment that renders the individual unable to protect their own interests. Supplementary material provides that the reasonable belief may rest on the facts and circumstances observed in the firm's business relationship with the person. The same rule defines "financial exploitation" broadly: the wrongful or unauthorized taking, withholding, appropriation or use of a specified adult's funds or securities, or any act or omission, including through the use of a power of attorney or guardianship, to obtain control of their money or property through deception, intimidation or undue influence, or to convert it.
So the answer to "am I covered?" is three answers. A 62-year-old with no impairment is an elder under the Elder Justice Act, is not a senior citizen under the Senior Safe Act, and is not a specified adult under FINRA's rule unless a firm reasonably believes an impairment leaves them unable to protect their own interests. State law adds a fourth layer, with its own age and its own definition, and that is usually the layer that carries a duty to report.
The federal statute people reach for is an immunity, not a duty, and that distinction is the whole design. 12 USC 3423 protects an individual from liability, "including in any civil or administrative proceeding, for disclosing the suspected exploitation of a senior citizen to a covered agency", on three conditions: the individual has received the training the section describes, held a supervisory, compliance or legal role or was an affiliated registered representative, investment adviser representative or insurance producer, and made the disclosure in good faith and with reasonable care. A parallel immunity protects the institution itself where its people were trained. The section does not require anybody to report anything. It removes a reason not to.
Its two closed lists are what give it practical shape. A covered agency, at (a)(1)(C), means a state financial regulatory agency including a state securities or law enforcement authority and a state insurance regulator, any federal agency represented on the Federal Financial Institutions Examination Council, a registered securities association, the Securities and Exchange Commission, a law enforcement agency, or a state or local agency responsible for administering adult protective service laws. A covered financial institution, at (a)(1)(D), means a credit union, a depository institution, an investment adviser, a broker-dealer, an insurance company, an insurance agency, or a transfer agent. A disclosure to somebody outside the first list, or by somebody outside the second, is not protected by this section. And under (c) the section does not preempt state law except where it gives greater protection against liability than state law does.
Which firm can do what, and why the honest version is less flattering than the simple one. The temporary-hold power and the trusted-contact requirement come from FINRA rules, and FINRA rules bind broker-dealers. A registered investment adviser is not a FINRA member and has neither of those obligations nor those powers under those rules; the analogous authority for advisers is state law, which varies. The Senior Safe Act's immunity does reach an investment adviser, because the definition above names one. So the accurate summary is that the reporting immunity is broad and the transaction-stopping power is narrow, and a client should ask a particular firm what it can actually do rather than assume the protections travel together. The practical detail on both, including the hold's duration and the trusted contact's role, sits on the family and life events guide and on the trusted contact person page.
On reporting duties, one sentence and a pointer, because the ground is easy to get wrong in both directions. There is no general federal duty to report suspected elder financial abuse, and specifically none on a bank, a brokerage or a family member; there is a narrow federal duty on staff of long-term care facilities that receive federal funds, and the suspicious-activity reporting that banks and brokerages owe the Treasury is a different obligation with a different purpose. The duty to report elder abuse itself is state law, which is why the practical route usually runs through adult protective services. The family and life events guide sets that out in full and should be read for it rather than this page.