How to Prevent Digital Identity Theft After Death

Deceased individuals are prime targets for identity theft. Their Social Security numbers, addresses, and personal data exist in dozens of databases, and no one is monitoring for suspicious activity. Stolen personal information can be used for credit applications, tax refunds, and account openings.

The window between death and proper account closure is when the estate is most vulnerable.

Why the Deceased Are Easy Targets

Credit monitoring stops. Bank fraud alerts go unchecked. Data breaches expose credentials that no one updates. Meanwhile, obituaries publish full names, dates of birth, and hometowns — exactly the information identity thieves need.

Common schemes targeting the deceased:

• Ghost credit applications: Opening new credit cards or loans using the deceased's Social Security number and personal information
• Tax refund fraud: Filing a fraudulent tax return to claim the deceased's refund
• Medical identity theft: Using the deceased's insurance to file false claims
• Utility and phone account fraud: Opening service accounts in the deceased's name

Notify Credit Bureaus Promptly

Contact each credit bureau using its current deceased-person reporting process. The AnnualCreditReport.com deceased-person instructions explain how a spouse or executor can request the report and list the current mailing details for Equifax, Experian, and TransUnion.

You'll need the deceased's full name, Social Security number, date of birth, date of death, and a certified death certificate.

The deceased alert tells potential creditors that the person has died and can make fraudulent applications harder; it does not guarantee that every application will be blocked.

Important: This is different from a credit freeze on a living person's file. A deceased alert informs creditors of the death; it is not a freeze that blocks access to the credit report.

Close High-Risk Accounts First

Not all accounts carry equal identity theft risk. Prioritize:

1. Email accounts — the skeleton key to password resets on every other account. A compromised email lets a thief reset banking passwords, intercept verification codes, and take over financial accounts.
2. Financial accounts — banks, credit cards, investment accounts, crypto exchanges. Report the death to each institution and close or transfer the accounts.
3. Government portals — Social Security (report the death; the funeral home usually handles this), IRS, state tax agencies, DMV.
4. Health insurance — notify the insurer to prevent medical identity theft.
5. Social media — memorialize or delete to prevent impersonation.

Monitor for 12 Months

Identity theft targeting the deceased often doesn't surface for months. Set up ongoing monitoring:

• Request the deceased's credit report quarterly for the first year (you can do this as executor with proper documentation)
• Forward mail to the executor's address to intercept suspicious correspondence — pre-approved credit offers, unfamiliar bills, or collection notices
• File the deceased's final tax return as early as possible to prevent a fraudulent return from being filed first
• Set up a Google Alert for the deceased's full name to catch any online activity

If Identity Theft Has Already Happened

If you discover fraudulent activity:

1. File a report with the FTC at IdentityTheft.gov
2. File a police report — many institutions require one for fraud claims
3. Contact each affected institution with the death certificate and fraud documentation
4. For tax-related identity theft, notify the IRS using the current Form 14039 instructions. A court-appointed representative must include proof of appointment; a surviving spouse does not need to attach a death certificate. If no personal representative has been appointed and the filer is not the surviving spouse, the form instructions call for a death certificate or government death notice and the requestor's relationship to the deceased.

Digital Accounts Are Data Exposure Points

Every active online account — streaming services, shopping sites, loyalty programs — stores personal information. An account the deceased used to order groceries may hold their full name, home address, phone number, and credit card details.

Closing accounts isn't just about stopping charges. It's about reducing the number of places where the deceased's personal data sits exposed, waiting for the next data breach.

The Digital Estate Toolkit includes an identity protection checklist with bureau contact information, a high-risk account priority list, and monitoring templates for the first 12 months.