How to Protect a Deceased Person from Identity Theft

Every year, more than 2.5 million deceased Americans have their identities stolen. Criminals use stolen Social Security numbers to open credit cards, file fraudulent tax returns, and take out loans. The good news is that a few straightforward steps can dramatically reduce the risk. Here is exactly what to do.

The Scale of the Problem

2.5M+

Deceased identities stolen per year

$1B+

Annual losses from ghosting fraud

6-12 mo

Average delay before fraud is detected

Identity theft of the deceased, sometimes called "ghosting," is one of the fastest-growing forms of fraud in the United States. Unlike living victims who might notice suspicious charges on their accounts, deceased individuals cannot monitor their own credit. This makes them particularly attractive targets for criminals.

The Social Security Administration's Death Master File, which lists reported deaths, can take weeks or months to update. During that window, a deceased person's Social Security number may still pass automated credit checks. Even after the file is updated, sophisticated criminals find ways to exploit the gap between death and administrative closure.

How Criminals Find Targets

Obituaries and Death Notices

Published obituaries provide full names, dates of birth, addresses, and family member names. This information is enough to begin building a fraudulent identity profile. Consider limiting personal details in obituaries, especially maiden names and exact birth dates.

Public Records

Death certificates are public records in many states. Probate filings are also public and can contain Social Security numbers, financial account information, and asset details. Some states have moved to redact SSNs from public probate records, but not all have done so.

Data Breaches

When major data breaches expose personal information, that data remains useful to criminals even after the person dies. Stolen SSNs, dates of birth, and addresses from past breaches are actively traded on dark web marketplaces and combined with death records.

Mail Theft

Mail continues to arrive at the deceased person's address, including pre-approved credit card offers, bank statements, and tax documents. If mail is not redirected or secured, it provides a ready source of personal information for identity thieves.

7 Steps to Protect the Deceased

Take these steps as soon as possible after the death. You do not need to wait for probate to begin. Anyone with a copy of the death certificate can initiate most of these actions, though some require the executor or personal representative.

Notify All 3 Credit Bureaus

Contact each credit bureau to report the death and request a "deceased" alert on the credit file. This is the single most important step. Once the deceased notation is applied, creditors should reject new applications using that identity.

Equifax1-800-685-1111

Experian1-888-397-3742

TransUnion1-800-680-7289

You will need to send a copy of the death certificate to each bureau by mail or fax. Keep certified copies for this purpose.

Request a "Deceased" Alert on the Credit File

When you call each bureau, specifically request that the file be flagged as "deceased." This is different from a standard fraud alert. A deceased alert permanently marks the file and should prevent any new credit applications from being approved. Ask for written confirmation that the alert has been placed.

Send the Death Certificate to Each Bureau

Each bureau requires a certified copy of the death certificate. Send these by certified mail so you have proof of delivery. Include the deceased person's full legal name, date of birth, Social Security number, and most recent address. Allow 4 to 6 weeks for processing.

Notify the Social Security Administration

Report the death to the SSA by calling 1-800-772-1213 (TTY 1-800-325-0778), Monday through Friday, 8am to 7pm local time. Funeral homes often handle this notification, but verify that it has been done. Once the SSA records the death, the deceased person's Social Security number cannot be used to open new credit accounts through most automated systems.

The SSA also updates the Death Master File, which creditors and financial institutions use to screen for deceased applicants.

Notify the IRS

The executor or personal representative should file IRS Form 56 (Notice Concerning Fiduciary Relationship) to establish themselves as the authorized representative for tax purposes. This helps prevent fraudulent tax returns from being filed under the deceased person's SSN.

You can also request an Identity Protection PIN (IP PIN) for the deceased taxpayer. This adds an extra layer of security and prevents anyone from e-filing a tax return using that SSN without the PIN. File the final tax return (Form 1040) as soon as possible to prevent a fraudulent return from being filed first.

Cancel the Driver's License

Contact your state's Department of Motor Vehicles to cancel the deceased person's driver's license or state ID. A valid driver's license is one of the most commonly used forms of identification for opening accounts, and canceling it removes a key tool from an identity thief's toolkit. Most DMV offices will process this request with a death certificate and your ID.

Cancel the Passport

Mail the deceased person's passport to the U.S. Department of State, along with a certified copy of the death certificate and a signed letter requesting cancellation. The address is: U.S. Department of State, Passport Services, P.O. Box 90155, Philadelphia, PA 19190-0155. If you need the passport returned for sentimental reasons, include a note requesting it. The State Department will clip the corners to invalidate it and return it to you.

Warning Signs of Identity Theft

Even after taking all the protective steps above, continue to watch for these warning signs during the estate settlement process. Identity theft of the deceased can occur months or even years after death.

!
Mail from unfamiliar creditors
Bills, account statements, or collection notices from companies the deceased never did business with.
!
Collection calls for unknown debts
Debt collectors calling about accounts the deceased never opened. Do not provide any personal information.
!
Tax return rejected as "already filed"
When you attempt to file the final tax return and the IRS says one has already been submitted. This is a strong indicator of tax fraud.
!
Credit inquiries on the deceased's report
Any new credit inquiries appearing after the date of death indicate that someone is attempting to open accounts.
!
IRS notices for unreported income
IRS notices claiming income that the deceased did not earn may indicate someone is using the SSN for employment.

What to Do If Identity Has Been Stolen

If you discover that the deceased person's identity has been used fraudulently, act quickly. You are not personally liable for debts incurred through identity theft of a deceased person, but you do need to take steps to stop the fraud and protect the estate.

File a Report with the FTC

Go to IdentityTheft.gov to create a personalized recovery plan. The FTC will guide you through each step and provide pre-filled letters to send to creditors.

File a Police Report

File a report with your local police department. While police may not actively investigate every case, the report creates a legal record that creditors and credit bureaus will accept as proof of fraud.

Contact Each Creditor

Reach out to every company where a fraudulent account was opened. Provide the death certificate, your FTC report, and the police report. Request that the account be closed and all charges reversed. Get written confirmation.

Place a Credit Freeze

Request a credit freeze on the deceased person's credit files at all three bureaus. This is stronger than a fraud alert and completely prevents any new credit inquiries. A fraud alert requires creditors to verify identity; a freeze blocks all access.

How to Get a Free Credit Report for the Deceased

As the executor or personal representative, you have the legal right to request the deceased person's credit report from all three bureaus. This is an important step in identifying existing accounts, discovering any suspicious activity, and ensuring all debts are properly handled during estate settlement.

What you will need:

✓Certified copy of the death certificate
✓Letters Testamentary or Letters of Administration (from the probate court)
✓Your government-issued photo ID
✓The deceased person's full legal name, SSN, date of birth, and last address

Send your request by mail to each bureau. The credit report will be mailed back to you. Review it carefully for any accounts you do not recognize, recent credit inquiries, or addresses that look unfamiliar. These could indicate fraud.

Additional Protective Measures

Forward or Secure the Mail

Set up mail forwarding with the USPS so that the deceased person's mail comes to you or another trusted person. Watch for pre-approved credit offers, which should be shredded. Consider placing the deceased on the Direct Marketing Association's deceased do-not-contact list at ims-dm.com.

Close or Secure Online Accounts

Close or memorialize social media accounts, email accounts, and other online profiles. Criminals can use these to gather personal information or impersonate the deceased. Facebook, Instagram, and Google all have processes for memorializing or removing accounts of deceased users.

Be Careful with Obituary Details

Limit the personal information in published obituaries. Avoid including the exact date of birth, mother's maiden name, or home address. These details make it easier for identity thieves. Consider publishing the obituary after you have already notified credit bureaus and the SSA.

Notify Financial Institutions

Contact every bank, credit union, investment firm, and insurance company where the deceased held accounts. Provide the death certificate and request that accounts be flagged and eventually closed through the proper estate process. See our debt after death guide for more on handling financial accounts.

Frequently Asked Questions

How long after death can identity theft occur?

Identity theft can occur at any time after death, but the first 12 months are the highest risk period. Social Security numbers are never reused and remain permanently associated with the deceased, meaning criminals can attempt to use them indefinitely. Some cases of deceased identity theft have been discovered years or even decades after the death.

Can an executor check the credit report of a deceased person?

Yes. An executor or personal representative can request a free credit report from each of the three major credit bureaus (Equifax, Experian, and TransUnion). You will need to provide a copy of the death certificate, your appointment letter from the court (Letters Testamentary or Letters of Administration), and your government-issued ID.

How do I place a deceased alert on a credit report?

Contact each of the three credit bureaus directly. Equifax: 1-800-685-1111. Experian: 1-888-397-3742. TransUnion: 1-800-680-7289. You will need to mail or fax a copy of the death certificate to each bureau. They will add a "deceased" notation to the credit file, which prevents new accounts from being opened.

Should I notify the IRS when someone dies?

Yes. The executor or personal representative should file Form 56 (Notice Concerning Fiduciary Relationship) with the IRS. This notifies the IRS that you are the authorized representative for the deceased taxpayer. You should also request an Identity Protection PIN to prevent fraudulent tax returns from being filed using the deceased person's Social Security number.

What if I discover someone has stolen the identity of my deceased loved one?

File a report at IdentityTheft.gov, which will create a recovery plan for you. File a police report with your local law enforcement. Contact each creditor where fraudulent accounts were opened. Place a fraud alert and credit freeze on the deceased person's credit files. You are not personally liable for debts incurred through identity theft of a deceased person.

Do I need to cancel the deceased person's driver's license?

Yes. Contact your state's Department of Motor Vehicles (DMV) to cancel the license. This prevents the license from being used as a form of identification for fraudulent purposes. Most states will process this with a copy of the death certificate.

Need a Complete Checklist?

Identity protection is just one part of settling an estate. Our personalized guide covers everything you need to do, tailored to your state and situation.

Get Your Free Personalized Guide