Deceased Identity Theft (Ghosting)

Deceased identity theft, colloquially known as 'ghosting', exploits the lag between a person's death and the updating of national, financial, and credit databases to reflect that death. For a window of days, weeks, or sometimes months, the deceased person's Social Security Number, National Insurance number, and associated credit file remain active — and are therefore exploitable by a fraudster who has obtained the decedent's personal information.

Fraudsters learn of deaths through multiple channels: publicly published obituaries (which often contain date of birth and surviving family details), death announcements in local newspapers, funeral home websites, social media posts, probate court filings (which are public record), and healthcare data that becomes accessible when facilities are notified. This information is sometimes compiled and sold in criminal markets alongside the decedent's last known address, identifier, and date of birth.

The surviving family is the ultimate victim. Unaware that a loved one's identity is being misused, they may discover the fraud only when settling the estate — finding accounts opened in the decedent's name, tax returns filed, or benefits fraudulently claimed — a painful administrative burden layered on top of grief.

After identifying a recently deceased individual, the fraudster assembles their identity package: name, date of birth, last address, and national identifier, typically from obituary notices and public records. They then act quickly, knowing the window before databases are updated is finite.

Common fraud types include: filing a tax return in the decedent's name to claim a refund; opening credit cards, personal loans, or online accounts; claiming government benefits; redirecting any ongoing benefit payments to a new account; and selling the identity package to other criminals.

The Social Security Administration (US) and equivalent agencies in other countries typically take several weeks to process death notifications and propagate them to credit bureaux. Lenders relying on the bureau's data to flag deceased identifiers will not see the marker until after the update. This gap is the fraudster's window of opportunity.

Deceased identity theft exploits the procedural lag inherent in death administration. Death certificates must be issued, physically mailed, and manually processed by multiple agencies before a deceased marker appears in lender databases. Criminals who act quickly — within days of a death being publicly announced — can open accounts, file returns, and make claims before any flag is in place. Surviving families are often too absorbed in grief and estate management to monitor for fraud.

Notice from [Lender]: the estate of [Deceased Name] has an outstanding balance of [Amount] on account [Number]. Please contact us to arrange resolution.

IRS Notice: a tax return has been filed for [Deceased Name] for tax year [Year]. If you are the authorised representative, please contact us with a copy of Letters Testamentary.

[Credit Card Issuer]: a replacement card has been issued for account ending [Number] in the name of [Deceased Name] and delivered to [Address].

[Government Agency]: payment of [Benefit] to [Deceased Name] has been redirected to a new bank account. If you are the executor, please call [Number].

Your application for a [Loan Amount] personal loan in the name of [Deceased Name] has been approved. Documents will be sent to [Address].

As executor, pull a credit report for the deceased from all three bureaux within the first few weeks after death and review it for any post-death activity. Send death certificates by certified mail to each bureau, requesting a 'deceased' flag. The FTC's IdentityTheft.gov has a dedicated checklist for managing a deceased person's identity. In the US, the SSA processes death notification faster if notified by phone or in person by a family member rather than waiting for the funeral home notification alone.