Digital Legacy Account Access Scam
Scammers pose as tech support, platform 'legacy contact' services, or account recovery agents offering to unlock a deceased person's email, social media, or cloud accounts for a fee.
Last reviewed: 5 July 2026
What this scam is
Families dealing with a death increasingly face the practical challenge of accessing or closing a deceased relative's digital accounts — email, social media, cloud storage, photo libraries — which may hold sentimental content, financial information, or subscriptions that need to be cancelled. Most major platforms have official, free processes for this, often called a 'legacy contact', memorialization, or account closure request, but these processes are not always fast, intuitive, or well publicized, creating an opening for scammers offering to 'help' for a fee.
The digital legacy account access scam involves a fraudster posing as a platform representative, a specialized 'digital estate' service, or independent tech support, who contacts a bereaved family member or is contacted by one searching online for help, and offers to unlock, recover, or transfer access to a deceased person's digital accounts in exchange for payment — sometimes for a service that is actually free, sometimes for a service that is never delivered at all, and sometimes as a pretext to gain unauthorized access to the accounts for further exploitation.
How it works
A family member, needing to access or close a deceased relative's email, social media, or cloud account, searches online for help and encounters an advertisement or search result for a 'digital estate recovery' or 'account access' service, or is contacted directly by someone offering this help after a public death notice. The service claims that platform account recovery requires a paid 'verification' or 'unlocking' process.
The scammer may request the family member's own login credentials, the deceased's old passwords, or personal identifying information supposedly needed to prove the relationship and process the request, along with an upfront fee. In some cases, the scammer uses the credentials or information provided to gain unauthorized access to the deceased's or the family member's own accounts for further fraud, such as accessing linked financial accounts or sending scam messages to the deceased's contact list.
In other cases, no genuine recovery attempt is made at all — the fee is simply pocketed and the family is left exactly where they started, sometimes with a fabricated excuse about why the recovery ultimately failed.
Why this scam works
Most people are unaware that major platforms offer free official processes for memorializing or closing a deceased person's account, and the technical unfamiliarity of dealing with account recovery, combined with grief and the desire to resolve the matter quickly, makes an offer of paid, 'expert' help seem like a reasonable shortcut. The request for credentials or personal information is often framed as a routine verification step, which does not immediately raise suspicion to someone unfamiliar with how genuine platform verification actually works.
A typical pattern
After a relative dies, a family member searches online for help closing the deceased's email account and finds an advertisement for a 'digital estate' service offering to handle it for a fee. They pay and provide the deceased's old password along with personal details. The service does not actually complete anything meaningful — it simply logs into the account using the provided password, and the family later discovers unauthorized activity linked to the account, along with no real progress on the closure they originally wanted.
Common red flags
- Request for payment to access a service the platform actually offers for free
- Request for login credentials or passwords as part of 'verification'
- Unsolicited contact offering help shortly after a public death notice
- No official affiliation with the platform that can be independently verified
- Pressure to act quickly or pay before any real progress is shown
- Vague explanations of exactly what the fee covers
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
We specialize in recovering deceased loved ones' digital accounts — a processing fee of [amount] is required to begin.
Please provide the account password so we can verify ownership and process the closure request.
Unfortunately the recovery attempt failed, but a further fee of [amount] is needed to try an alternative method.
As the official legacy contact service, please confirm your details and payment to proceed with the memorialization request.
Common variations
- Fake 'digital estate' company charges a fee for a service the platform offers for free
- Scammer requests login credentials under the guise of 'verification', then misuses account access
- Fee taken with no genuine attempt at recovery, followed by a fabricated failure excuse
- Scammer contacts the family directly after a public death notice, offering unsolicited 'help'
- Phishing email impersonating a specific platform's official 'legacy contact' process
How to verify before you act
Every major platform — including large email providers, social media networks, and cloud storage services — publishes an official, free process for reporting a death, requesting memorialization, or closing an account, typically found by searching the platform's own official help center directly rather than through a general web search that may surface paid third-party services first. Genuine platform processes never require payment and are handled entirely through the platform's own official website, not through a third-party company or unsolicited caller.
Never provide login credentials to any third party claiming to help with account recovery — legitimate platform processes verify identity and the fact of death using documentation such as a death certificate submitted directly through the platform's own official form, not by requesting the account password.
Payment methods used
- Cryptocurrency
- Bank/wire transfer
- Gift cards
- Money transfer services
- Payment apps to 'friends & family'
Who is usually targeted
- Family members unfamiliar with platform account closure processes
- People searching online under time pressure for quick help
- Older adults less familiar with digital account management
What to do immediately
- Stop engaging with any paid third-party 'digital estate' service
- Go directly to the platform's official help center to find its free deceased-account process
- Never provide login credentials to any third party
- If credentials were already shared, change passwords immediately on any account that may be affected
- If a payment was made, contact your bank or card provider to dispute the charge
- Report the fraudulent service to your national fraud reporting body
How to prevent it
- Search directly on the platform's own official help center for its free deceased-account process
- Never pay a third party for a service a platform provides free of charge
- Never share login credentials or passwords with anyone claiming to help with account recovery
- Use official documentation, such as a death certificate, submitted directly through the platform's own form
- Be skeptical of unsolicited offers of help following a public death notice
- Check reviews and independent sources before engaging any paid 'digital estate' service
Evidence to preserve
- Advertisements, emails, or messages from the service
- Payment records and receipts
- Any correspondence describing what the fee was supposed to cover
- Screenshots of unauthorized account activity, if any occurred
Where to report it
- Action Fraud (UK) — UK national fraud & cybercrime reporting centre
- FTC ReportFraud (US) — US Federal Trade Commission fraud reports
- FBI IC3 (US) — US Internet Crime Complaint Center
- Scamwatch (Australia) — Australian competition & consumer reporting
- Your bank's fraud line — Use the number on the back of your card or in your banking app — never a number the caller gives you
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Frequently asked questions
Do I have to pay to close or access a deceased relative's social media or email account?
No. Major platforms provide free official processes for reporting a death, memorializing an account, or requesting closure, accessible through the platform's own official help center. Any service charging a fee for this is unnecessary at best and fraudulent at worst.
Is it safe to give someone the deceased's old password to help with recovery?
No. Legitimate platform processes verify the death using official documentation submitted through the platform's own form, not by requesting the account password. Sharing a password with a third party risks unauthorized access and further fraud.
How do I find a platform's official deceased-account process?
Go directly to the platform's own website and search its help center for terms like 'memorialization', 'legacy contact', or 'deceased user account', rather than relying on general search engine results, which can surface paid third-party services first.
What should I do if I already paid a fraudulent digital estate service?
Contact your bank or card provider to dispute the charge, change any passwords that may have been shared, and report the service to your national fraud reporting body.