Obituary Scam Protection: How to Write a Safe Death Notice

Why Obituaries Are a Security Risk

Every piece of personal information in an obituary is a piece of a puzzle that identity thieves use to exploit the deceased. A full name, a date of birth, a city of residence, a maiden name, the names of surviving family members — each one narrows down the SSN match, answers a security question, or helps a criminal impersonate a family member during a phone verification.

Fraud networks actively monitor obituary sites — Legacy.com, Tributes.com, local newspaper websites, and funeral home directories — to identify new targets. They aren't reading for sentiment. They're reading for data points: exact birth dates (used for credit applications), maiden names (used for security question bypass), and home addresses (used for mail interception and physical burglary during the funeral).

The challenge is that obituaries serve a real purpose. They inform the community, honor the deceased, and provide service details. The goal isn't to eliminate the obituary — it's to write one that serves its purpose without handing criminals the keys.

What to Leave Out

Exact date of birth. "Born in 1948" provides enough context for the community. "Born March 15, 1948" gives identity thieves a data point that appears on almost every credit application and security verification form. The exact date adds nothing for the reader that the year doesn't already cover.

Mother's maiden name or family maiden names. This is one of the most common security questions for bank accounts, insurance policies, and online services. Mentioning that someone "was born Jane Thompson" or listing maiden names in the survived-by section hands over a credential.

Home address. State the city or neighborhood if relevant, but never include a street address. If the obituary reveals exactly where the deceased (or their surviving spouse) lives, it tells burglars where an empty house will be during the funeral service.

Exact funeral service times (when possible). If the funeral home publishes the schedule independently, you can't control that. But your written obituary doesn't have to include "services at 2:00 PM Saturday at First Baptist Church." "Services will be held Saturday afternoon — contact [funeral home] for details" achieves the same purpose while adding a layer of friction for anyone trying to plan around your absence.

Financial details. This should be obvious, but obituaries sometimes mention that someone "retired after 35 years at [employer]" or "was a longtime patron of [bank]." These details help criminals identify financial accounts and employer-provided benefits that may still be active.

What to Include Safely

Full legal name and age or birth year. The community needs to know who died. A name and general age provide identification without the granularity that enables fraud.

Accomplishments and character. This is the heart of an obituary — what the person did, who they were, what they cared about. None of this creates security risk.

Service location and general timing. Name the funeral home and the day of the service. For specific times, direct people to call the funeral home or visit their website.

Charitable donation instructions. "In lieu of flowers, donations may be made to [organization]" is both safe and meaningful.

A contact for condolences. Use the funeral home's address or a dedicated email address — not a personal home address.

Online Obituary Considerations

Digital obituaries create additional risks that print obituaries don't:

They're indexed by search engines. A print obituary in a local newspaper reaches a limited audience. An online obituary on Legacy.com or a funeral home website is globally searchable and may remain accessible for years.

Comment sections can be exploited. Some scammers post fraudulent links in obituary comment sections — fake GoFundMe pages, phishing sites disguised as memorial tributes, or requests for donations that go to the scammer. If the obituary platform allows comments, designate someone to monitor them.

Social media amplification. When family members share the obituary on Facebook, Instagram, or other platforms, they expand its reach far beyond the original audience. Remind family members not to add personal details (addresses, phone numbers, travel plans) in their shares or comments.

After the Obituary Is Published

Even a carefully written obituary puts the deceased's name into public circulation. Complement it with these protective steps:

• Notify credit bureaus immediately so the deceased's credit file gets flagged before criminals act on the information
• File IRS Form 56 to notify the IRS of your fiduciary relationship and help route tax correspondence to your address
• Submit data broker opt-out requests to remove the deceased's information from people-search websites that aggregate and resell personal data
• Arrange property security during the funeral — ask someone to stay at the deceased's home and your own

The Identity Theft Prevention After Death toolkit includes an obituary safety checklist along with pre-drafted letters for credit bureaus, data broker removal instructions, and a chronological timeline for every identity protection step — designed for families handling these decisions alongside grief.