Deceased Estate Account Takeover Scams via Bank Transfer
How scammers exploit the gap between a death and a bank being notified to move money out of the deceased's real accounts by bank transfer before the family can secure them.
Part of: Deceased Estate Account Takeover Scam
Last reviewed: 13 July 2026
After someone dies, there is usually a window of days or weeks before every bank, brokerage, and card issuer is formally notified and the accounts are frozen or transferred into an estate. Scammers who obtain a deceased person's banking credentials, through phishing before death, data breaches, mail theft, or information gathered from an obituary or probate filing, race to move funds out by bank transfer before that window closes.
Bank transfer is the preferred method because it can be initiated online or by phone using login details or personal information the scammer already holds, requires no physical card, and moves the full account balance in a single transaction. Families are often unaware anything is wrong until they finally contact the bank to close the account and discover the balance has already been transferred out.
How this scam works on Bank Transfer
A scammer who has obtained a deceased person's online banking login, personal details, or even just an obituary with enough identifying information contacts the bank pretending to be the account holder, or logs directly into online banking, and initiates a bank transfer to an account they control before the death has been reported. Some schemes work faster than the family or executor, who may not think to secure or freeze accounts within the first days after a death, especially if the death was sudden or the family is out of the area. Obituaries that list detailed personal information, a middle name, date of birth, or address, can give scammers exactly what they need to pass a bank's identity checks or answer security questions over the phone.
Common red flags
- A bank statement or online banking shows a transfer out of the deceased's account that the family did not authorize
- The transfer occurred in the days immediately following the death, before the bank was formally notified
- An obituary or public notice included detailed personal information such as a date of birth or address
- The deceased's mail, including bank statements, has gone missing or appears to have been intercepted
- Online banking access details for the deceased were stored in an unsecured location or shared insecurely before death
- The bank confirms account activity that neither the family nor the executor recognizes
How to protect yourself
- Notify every bank, brokerage, and card issuer of the death as soon as possible to freeze accounts
- Avoid including a full date of birth, address, or other identifying details in public obituaries
- Secure or shred the deceased's mail promptly and set up mail forwarding to the executor if possible
- Change or disable the deceased's online banking access once you have the legal authority to do so
- Request the bank place a hold or alert on the account while probate or estate administration is underway
- Monitor the deceased's accounts closely for any transaction in the days immediately following the death
How to report it
- Report unauthorized transfers to the bank's fraud department immediately and request an investigation
- File a police report, since account takeover after death may be treated as both fraud and identity theft
- Report the incident to your national fraud reporting agency (e.g., IC3 in the US or Action Fraud in the UK)
- Notify the estate's attorney or executor so the loss can be reflected in probate proceedings
Frequently asked questions
Can a bank transfer out of a deceased person's account be reversed?
It depends on how quickly the fraud is reported and whether the receiving bank still holds the funds. Contact the bank's fraud department immediately, but recovery is not guaranteed once funds have been withdrawn or moved on from the receiving account.
How soon should banks be notified after a death?
As soon as reasonably possible. Even a short delay can give a scammer with existing account access enough time to move funds, so notifying the bank is worth prioritizing alongside other early estate tasks.
Does including details in an obituary really make this scam more likely?
It can. A full date of birth, home address, or other identifying details published in an obituary can help a scammer pass identity checks with a bank or other institution over the phone. Keeping obituaries general reduces that risk.
Who is responsible for a loss if the account was drained before the bank was notified?
Responsibility can depend on the bank's own fraud policies, whether the transfer was authenticated with the deceased's real credentials, and local law. Report it promptly and let the bank's fraud team and, if needed, the estate's attorney determine next steps.
What is the fastest way to protect a deceased relative's accounts?
Contact each bank directly by phone to report the death and request an immediate account freeze, rather than relying only on written notice, which can take longer to process.