A company is asking me to upload the death certificate to an unfamiliar website to 'verify' a claim. Is this safe?
Be very cautious: a death certificate contains sensitive personal information that can enable identity theft, so only upload it to verified, official portals belonging to institutions you've independently confirmed are handling a genuine claim.
Last reviewed: 5 July 2026
Explanation
A death certificate typically includes the deceased's full name, date of birth, date and cause of death, and sometimes parents' names and social security or national insurance numbers, all of which are valuable to identity thieves. Legitimate institutions, such as banks, insurers, and pension providers, do require a death certificate copy to process claims, but they typically have secure, verifiable upload portals or accept certified copies by mail, and you would have initiated contact with them as part of a claim you know is genuine.
Scammers sometimes pose as one of these legitimate institution types, or invent a plausible-sounding claim process, specifically to collect a death certificate copy through an unfamiliar or insecure website. Once obtained, the document can be used to attempt identity theft against the deceased, apply for fraudulent credit, or even be resold to other criminals as verified 'proof of death' data, which is valuable for the obituary-based scams targeting surviving family members.
Before uploading a death certificate anywhere, verify independently that the requesting organization is genuinely handling a claim connected to the deceased, ideally by contacting them yourself through officially published contact details rather than a link or portal provided in an unsolicited message.
Common red flags
- Request comes through an unsolicited message rather than a claim process you initiated
- Website URL doesn't match the institution's official domain
- No secure upload indicator (such as a valid padlock/HTTPS) on the page requesting the document
- Vague explanation of what the certificate will actually be used for
- Pressure to upload quickly without time to verify the request
What to do now
- Verify the requesting organization independently before uploading any document
- Check that the website URL matches the institution's official domain exactly
- Consider sending certified copies by mail or through a confirmed secure portal instead of an unfamiliar website
- Ask what specifically the death certificate will be used for and whether a redacted version might suffice
- Report any suspicious request to consumer protection authorities and monitor for identity theft afterward
Frequently asked questions
Can I redact parts of a death certificate before sharing it?
Some institutions accept certified copies with certain fields redacted for privacy, though this depends on their specific requirements; it's worth asking if full disclosure of sensitive fields like social security numbers is genuinely necessary.
How many copies of a death certificate should I order?
It's common to need multiple certified copies for different institutions like banks, insurers, and government agencies, so ordering several from the start can avoid repeatedly requesting new copies later.