TL;DR: Identity thieves target people who have recently died, because accounts may stay open and nobody checks their credit for months. Report the death to Social Security (funeral homes usually do this, but you can call too), order several certified death certificates, and write to Equifax, Experian and TransUnion asking for a deceased alert. Keep birth dates and addresses out of the obituary, and close or retitle accounts promptly.
Why the dead are targeted
When someone dies, their Social Security number, bank accounts and credit file don't disappear straight away. Credit cards can still be used, new credit can be applied for, and tax refunds can be claimed in their name. Families are grieving, mail goes unopened, and the fraud may only surface when the estate is being settled. This is sometimes called "ghosting."
The first steps
These follow guidance from the California Attorney General and the New York Department of State:
- Report the death to the Social Security Administration. Funeral directors usually do this, but family can call SSA at 1-800-772-1213. Delays give thieves time.
- Order at least ten certified copies of the death certificate. Banks, credit bureaus, insurers and agencies will each want one.
- Keep the obituary lean. Leave out date of birth, home address, mother's maiden name and the times of the service, which tell thieves when the house will be empty.
- Limit who handles personal documents. Pick one person to hold the ID, Social Security card and financial papers.
Flag the credit files
The surviving spouse or executor should write to all three credit bureaus, Equifax, Experian and TransUnion, enclosing a copy of the death certificate and proof of authority (such as letters testamentary or a marriage certificate). Ask them to add a deceased alert to the file and to send you a copy of the credit report. Check the bureaus' websites for the current mailing address for deceased notices. The report also gives you a full list of open accounts to close.
Our guide to freezing credit in the US explains how the bureaus handle freezes, and how to place a fraud alert covers alerts.
Close and retitle accounts
- Banks and credit cards: notify each in writing with a certified death certificate. Close individual accounts and remove the deceased from joint ones. You'll need to show you're the spouse or executor.
- Online accounts: email, social media, shopping and streaming. Most platforms have a memorial or deactivation process for next of kin.
- Utilities, phone and subscriptions: cancel or transfer them.
- Mail: add the person to the free DMAchoice Deceased Do Not Contact List; see how to stop junk mail.
- Driver's licence and passport: notify the DMV and State Department so the documents are cancelled.
Taxes
A final tax return is due for the year of death. Tax refund fraud using a deceased person's SSN does happen; if the IRS rejects an e-filed return because one was already filed, follow our guide to reporting tax identity theft to the IRS.
If fraud has already happened
- Write to each creditor or collector explaining the account was opened or used fraudulently after death, enclosing the death certificate and your proof of authority. Ask them to close it and stop collection.
- File a police report where the person lived.
- Report it to the FTC at IdentityTheft.gov; see how to report identity theft to the FTC.
- Remember that family members generally aren't personally responsible for fraudulent debts, or for the deceased's debts beyond the estate, unless they co-signed. Ask a lawyer if a collector pressures you.
Outside the US
In the UK, the Tell Us Once service notifies many government departments at once, and the Deceased Preference Service and Bereavement Register reduce mail. Our guides to UK identity theft, Canada and Australia cover reporting where you live.
The deceased's email accounts may also appear in old breaches, giving thieves a way in. Run a free email exposure check on their address before closing it.
Frequently Asked Questions
What is deceased identity theft?
When criminals use a dead person's identity to open credit, use existing accounts or claim tax refunds. It is sometimes called ghosting.
How do I notify the credit bureaus of a death?
The spouse or executor writes to Equifax, Experian and TransUnion with a certified death certificate and proof of authority, asking for a deceased alert and a copy of the credit report.
Who reports a death to Social Security?
Funeral homes usually do, but family can also call SSA at 1-800-772-1213 to make sure it is recorded quickly.
What should not be in an obituary?
Date of birth, home address, mother's maiden name and details that reveal when the home will be empty.
Am I responsible for debts opened fraudulently in a deceased relative's name?
Generally no, unless you co-signed. Write to the creditor with the death certificate, report the fraud, and get legal advice if pressured.
Sources
- California Attorney General: Identity theft and the deceased
- New York Department of State: Key steps to protecting a deceased loved one's identity