Identity Theft After a Death: A Response Plan

If an unfamiliar account, tax notice, benefit change, or collection letter appears after a death, treat it as an incident to verify, not as a debt to pay. Preserve the evidence, contact the real institution through a channel you locate independently, and document every response.

Knowing the deceased person’s name, relatives, address, or date of death does not prove a caller is legitimate. Obituaries and public records can supply those facts.

Preserve before you respond

Keep the original letter and envelope. Save full email headers, voicemail, phone number, website address, screenshots, transaction details, and dates. Do not click a link, call the number in a suspicious message, or send identity documents in reply.

Create one incident log with:

• what happened and when it was discovered;
• the account, agency, or creditor involved;
• the amount and identifiers shown, redacted in ordinary working copies;
• the official contact route you used;
• the person or department reached and reference number;
• documents requested, sent, and received;
• deadlines and the next follow-up date.

Preserving the first evidence matters because online pages, caller IDs, and account displays can change.

Verify the event through a clean channel

Type the agency or company’s known official address yourself, use a number on a genuine prior statement, or locate the agency through USAGov. Ask whether the notice or account exists and which fraud or deceased-customer unit owns the case.

Do not confirm a full Social Security number, date of birth, account number, or security answer to an inbound caller. If identity proof is required, ask for the institution’s secure upload or documented mailing procedure and verify it separately.

An unfamiliar debt is not automatically an estate debt. Ask the creditor for the application, transaction history, address used, and its written fraud determination. An executor should obtain legal advice before acknowledging liability, settling, or distributing estate assets when a material claim is disputed.

Use the report that matches the harm

The FTC’s IdentityTheft.gov creates a recovery plan and Identity Theft Report for identity-theft matters. Report suspected misuse of Social Security programs to the Social Security Administration Office of Inspector General. Use IRS Identity Theft Central for suspicious federal-tax activity or an IRS notice involving the deceased person.

These reports serve different systems; one does not automatically resolve the others. Follow the specific creditor or bureau dispute process as well. A police report can provide a contemporaneous record and may be requested by an institution, but it does not itself erase a credit item or decide liability.

Report a scam even when no money was lost if someone impersonated an agency or sought sensitive documents. Do not pay a private “recovery” service before checking what the government and creditor processes provide without charge.

Contain the exposed routes

Mark the deceased person’s credit files as deceased through current bureau procedures. Notify affected creditors. Secure forwarded mail, email, cloud storage, mobile service, and devices without impersonating the deceased or bypassing access controls.

Review the survivor’s own credit reports and financial accounts if information was shared. Change passwords on accounts you own, use unique passwords and multifactor authentication, and remove the deceased person’s telephone number or email only through the provider’s authorized process.

Tell relatives handling papers or memorial arrangements not to release copies of death certificates or identity documents casually. Use redacted working copies where the full identifier is unnecessary.

Close with written outcomes

For every affected system, obtain a written result: fraudulent account closed or blocked, credit item removed or under investigation, benefit record corrected, tax case routed, and documents returned or securely retained. Recheck after the promised processing period and keep the file through the estate’s record-retention period.

Escalate to an estate attorney when a creditor asserts estate liability, a fiduciary deadline is near, multiple victims or jurisdictions are involved, or the fraud affects property title, taxes, or distributions.

This is general U.S. educational information, not legal or cybersecurity advice. For prevention, see Protecting a Deceased Person’s Credit File; for mail control, see Protecting the Mail After a Death.