Identity Theft of a Deceased Person

Why the Dead Are Easy Targets

Criminals exploit the 30- to 60-day gap between a death and the formal updating of credit and government records. During that window, the deceased person's Social Security number is still active in most databases, their credit file is still open, and their mail is still arriving at an empty house.

Fraudsters monitor obituaries, online death notices, and social media posts to harvest personally identifiable information — full names, birthdates, addresses, and family details. They use this information to open new credit cards, take out personal loans, intercept mail, and redirect existing bank accounts.

If the deceased shared joint accounts with a surviving spouse, the spouse's credit score and personal finances are also at risk.

The First 48 Hours: Defensive Actions

Report the death to the Social Security Administration. The funeral director is legally required to submit a death report to the SSA, but call 1-800-772-1213 directly to confirm it was processed. This adds the Social Security number to the national Death Master File, which credit bureaus and banks use to screen new applications.

Request deceased flags from all three credit bureaus. Send certified mail — with return receipt requested — to Equifax, Experian, and TransUnion. Include a certified death certificate, your Letters Testamentary or Letters of Administration, and the decedent's full legal name, SSN, date of birth, date of death, and last known address. Ask each bureau to place a "Deceased — Do Not Issue Credit" alert on the file.

Forward the mail. Present your court letters and death certificate at the post office to redirect all incoming mail to your address for up to 12 months. Monthly statements, tax documents, and credit card bills arriving at an empty residence are a security vulnerability.

Cancel the driver's license. Contact the DMV to cancel the deceased person's license. This prevents criminals from manufacturing counterfeit physical IDs.

Warning Signs of Postmortem Identity Theft

• Bills or collection notices arriving for accounts the deceased never opened
• Credit card applications or pre-approved offers continuing to arrive months after death
• The IRS rejecting an estate tax return because one was already filed
• Unfamiliar withdrawals or charges appearing on estate bank statements
• Medical bills for services the deceased never received (medical identity theft)

How to Check for Existing Fraud

Pull a credit report from each of the three bureaus 30 days after the death. Look for accounts the deceased didn't open, hard credit inquiries they didn't authorize, and addresses they never lived at.

You can request the deceased person's report through AnnualCreditReport.com by mailing a request to each bureau. A spouse or executor should include the deceased's identifying details and a copy of the death certificate or Letters Testamentary; an executor should also include proof of appointment.

Obituary Safety Rules

When writing the obituary, omit:

• The exact day and month of birth (list only the birth year)
• The street address
• The mother's maiden name
• Place of employment

Also consider the timing of the memorial service announcement. Publishing the exact date and time tells burglars when the family home will be empty.

If Identity Theft Has Already Happened

File an identity theft report at IdentityTheft.gov (FTC). Then file a police report with the local department. Contact every financial institution where fraudulent accounts were opened to report and dispute them, and follow its identity-theft process. Notify the IRS Identity Protection Specialized Unit at 1-800-908-4490 if tax fraud is involved.

Register the deceased's name with the Deceased Do Not Contact List at DMAchoice.org to suppress commercial marketing mail.

The Bank Accounts & Financial Claims After Death toolkit includes a complete identity theft prevention checklist, obituary safety guidelines, and communication scripts for reporting fraud to banks and credit bureaus.