Identity Theft After Death: How Criminals Prey on the Deceased (And How to Stop Them)

The Moment You Die, You Become a Target

Maria had just buried her father when the credit card statements started arriving. Her father had been dead for three weeks — but someone had opened four new accounts in his name, taken out a personal loan, and racked up over €14,000 in debt.

It took Maria two years to clean it up.

Post-mortem identity theft — fraud committed using the identity of a deceased person — is one of the fastest-growing crimes in Europe. And the reason is brutally simple: the victim can never report it.

No alerts on your phone. No suspicious login notifications. No angry calls wondering why your credit score dropped. The dead don't notice. Their families often don't either — not until the damage is enormous.

Why Dead People Are the Perfect Victims

Fraudsters are strategic. They exploit the same vulnerabilities you do when you're trying to build a business: low risk, high reward.

A deceased person's identity offers something almost no living person's does: a clean window of vulnerability.

Here's how it works:

1. Fraudsters scan obituaries, death notices, and social media. These are public records.
2. They cross-reference with data leaked in breaches to recover dates of birth, addresses, and national ID numbers.
3. They open bank accounts, apply for credit, file fraudulent tax refunds, or take out loans — all in the name of someone who will never check their email.
4. The fraud runs undetected for months. Sometimes years.

According to UK fraud prevention body CIFAS, post-mortem fraud accounts for tens of thousands of cases annually. The average time before detection: over 12 months.

The Three Windows Criminals Exploit

Window 1: The gap before death registration

In most European countries, there is a delay of days to weeks between a person's death and the official registration with tax authorities, banks, and credit agencies. During this window, a fraudster with enough information can impersonate the deceased.

Window 2: The notification gap

Even after death is registered, not all institutions are automatically notified. Banks, utility companies, subscription services, social media platforms, loyalty programmes — each requires separate cancellation. Most families are overwhelmed by grief and miss many of them.

Window 3: Dormant accounts

Email accounts, cloud storage, loyalty points, PayPal balances — these often sit untouched for years after death. Each one is a potential entry point for a fraudster who acquires a password through a data breach.

What Fraudsters Actually Do With a Dead Person's Identity

• Credit fraud: Opening personal loans, credit cards, or overdrafts
• Tax fraud: Filing false tax refund claims using the deceased's tax number
• Rental fraud: Signing rental agreements or utility contracts
• Account takeover: Accessing dormant financial accounts using reset emails
• SIM swap attacks: Transferring a deceased person's phone number to access two-factor authentication codes
• Business fraud: Registering companies using the deceased's identity and address

In Germany, the UK, France, and the Netherlands, all of these have been documented in fraud cases involving deceased people's identities.

The Emotional Toll on Families

The financial damage is serious. But the emotional toll is often worse.

You are grieving. You are exhausted. You are sorting through a lifetime of paperwork. And now you have to call a bank fraud department for the fourth time this week to explain that your father is dead — and no, he didn't take out that loan.

Families describe it as a second violation — as if a stranger broke into the house, went through the drawers, and stole from the corpse.

This is not a rare edge case. It happens to tens of thousands of families across Europe every year. And it is largely preventable.

What You Can Do Right Now

For the person planning their own estate:

1. Create a complete digital inventory

Document every account: banking, email, social media, subscriptions, government portals. Include usernames and, ideally, a method for your executor to access them. This doesn't mean writing passwords in a document — it means using a properly secured digital vault with controlled posthumous access.

2. Designate an executor who can act fast

Time is everything. Every day your accounts sit open and unmonitored is a day a fraudster can exploit. Your digital executor needs to know exactly what to close and in what order.

3. Enable legacy contacts where available

Apple, Google, and Facebook all offer mechanisms for trusted contacts to access or close accounts after death. Set these up now, not later.

4. Store your identity documents securely

National IDs, passports, tax numbers, social security details — these are the keys to post-mortem identity theft. They should be stored in an encrypted vault that only your designated executor can access.

For families managing a bereavement:

1. Register the death with credit agencies immediately

In the UK, use CIFAS's Protective Registration service and contact Experian, Equifax, and TransUnion with a death certificate. In the EU, contact your national credit bureau (BKR in the Netherlands, Schufa in Germany, Banque de France in France).

2. Notify banks and financial institutions within days, not weeks

Don't wait until everything is settled. Contact banks, insurers, and pension providers as soon as you have the death certificate. Many will freeze the accounts immediately.

3. Cancel or transfer active subscriptions and accounts

Create a checklist: email, streaming services, phone contracts, loyalty programmes, cloud storage. Each open account is an attack surface.

4. Monitor for fraud even after you close accounts

Request a credit report in the deceased's name three months after death. Fraud often appears on a delay.

The Hardest Truth

Most families don't know any of this when it matters most.

They find out about post-mortem fraud the same way Maria did — through a debt collection letter arriving months after the funeral, when grief is finally starting to lift, and when the last thing they need is to fight a bank over a fraudulent loan in their dead father's name.

Digital estate planning is not just about accessing sentimental photos or favourite playlists. It's about closing the door before the predators walk through it.

Protect your family's digital legacy — start with LegacyShield

LegacyShield gives your family the access they need when it matters, and the protection that keeps fraudsters out the rest of the time.