The death of a loved one can trigger a cascade of public records that scammers are poised to exploit, according to cybersecurity experts. This exploitation can begin as early as the filing of a death certificate, long before an obituary is published.

Phase 1: The Initial Data Flow

When a death occurs, a funeral home is required to file a death certificate with the state's vital records office. The accessibility of these records varies by state, with some treating them as immediately public while others restrict access to immediate family for a period. Regardless of state-specific restrictions, these records often flow to entities like insurance companies, financial institutions, and commercial data brokers.

Additionally, funeral homes typically report deaths to the Social Security Administration, which updates the Death Master File. Data aggregators receive this information weekly. While not everyone publishes an obituary, those who do become targets for automated scrapers that monitor obituary pages. These tools extract details such as names, relationships, locations, and employment history, accelerating the exposure of personal information. By the third day after a death, a data broker's profile for a grieving individual may be updated to signal a recently bereaved status, which can alter how they are targeted.

Phase 2: Profile Enhancement and Early Scams

Within the first two weeks, data broker profiles, which can include household information, property ownership, and estimated income, may be updated with details indicating a recent widow or single homeowner. This information can be highly valuable to scammers, who may use it to target individuals managing finances alone for the first time or dealing with inheritances. Scammers may pose as debt collectors, government agents, or life insurance representatives, using specific details harvested from public records or obituaries to create a sense of legitimacy.

Calls demanding immediate payment, particularly via wire transfers, gift cards, or cryptocurrency, are red flags. Experts advise against immediate payment and recommend asking for caller identification and independently verifying any claims with the actual company or agency. Fake insurance agents may attempt to extract personal information under the guise of processing a claim, while fake government officials might solicit sensitive data like Social Security numbers, despite agencies like the Social Security Administration or Medicare not making unsolicited calls for such information.

Phase 3: Public Filings and the Inheritance Trap

In the weeks following a death, if property needs to be transferred or if the estate enters probate, further public records are generated. Property records, such as deed transfers at the county recorder's office, are generally public and are ingested by data brokers. A change in property ownership can signal a change in household composition and financial status.

Probate records, accessible in most jurisdictions, can reveal estate values, assets, beneficiaries, and executors. This information can lead to predatory calls and letters from individuals posing as attorneys or service providers demanding payment for invented fees, a tactic sometimes referred to as the "inheritance trap." It is crucial to verify any unsolicited contact regarding an estate with an estate attorney.

Phase 4: Ghosting and Identity Theft

Weeks after a death, scammers may engage in "ghosting," a form of identity theft where they apply for credit using the deceased's name and information. This is possible due to a timing gap in which financial institutions, credit bureaus, and the IRS may take weeks or months to fully register and share death records across their systems. Criminals exploit this window by using harvested information, including Social Security numbers potentially obtained from the dark web, to open credit cards or loans before accounts are flagged.

To combat this, experts recommend freezing the deceased spouse's credit with Equifax, TransUnion, and Experian immediately upon obtaining a death certificate. It is also advisable to pull the deceased's credit report before freezing it to identify any fraudulent activity already initiated. Freezing one's own credit is also recommended, as the surviving spouse becomes a more attractive target.

Phase 5: The Long Game and Relationship Scams

Some scammers employ a long-term strategy, aiming to build relationships rather than secure immediate transactions. By the fourth week, a combination of obituary data, death records, property filings, and data broker profiles can provide scammers with significant leverage. They may impersonate long-lost friends or relatives, using specific, accurate details gleaned from public records to build trust. These interactions can evolve into romance scams or attempts to defraud beneficiaries of inheritance money.

The FBI reports significant financial losses to individuals over 60 from confidence and romance scams, which can build slowly over time and result in substantial average losses per victim. The scammer's advantage lies in their knowledge of the victim's recent life events, making their outreach feel personal and safe.

The Data Broker Ecosystem

The common thread connecting these phases is the data broker ecosystem. Information from death certificates, probate filings, and property deeds feeds into comprehensive profiles that can be bought, sold, and shared across various platforms. While individual records may seem routine, collectively they can provide a roadmap for scammers.

Experts emphasize that removing personal information from data broker sites is not a one-time task but an ongoing process. Regularly searching one's own name on people-search sites and submitting opt-out requests, particularly for sites listing home addresses, phone numbers, relatives, or property details, is advised. Automated data removal services can assist with this continuous effort to make it harder for scammers to connect personal and financial information into a single target profile.

Immediate Actions for Grieving Families

In the first two weeks following a death, families are advised to take several critical steps:

  1. Freeze Credit: Immediately freeze the credit of the deceased spouse with the three major credit bureaus, using a death certificate. Freeze your own credit as well.
  2. Pull Credit Reports: Before freezing, pull the deceased's credit report to check for unrecognized accounts and potential fraud.
  3. Verify Payments: Treat any unsolicited calls or letters claiming outstanding debts from the deceased as potential scams. Request written debt validation and avoid immediate payment.
  4. Initiate Data Removal: Begin searching for your personal data on data broker sites and start the removal process, ideally with the assistance of a data removal service.
  5. Run Exposure Scan: Utilize available tools for a free scan to identify where personal information appears online.

Experts stress that while bereavement fraud is cruel, taking proactive steps such as freezing credit, verifying all financial inquiries, and actively managing personal data can help protect grieving families from becoming victims.