Your mother's name is still out there, and it is still useful. It sits in the obituary you wrote through tears, next to her birth year and hometown, and the names of her children. It sits in a credit file that no one is watching. To a stranger with a laptop, a dead person's identity is close to ideal: the victim will never notice, and the people who might notice are busy with a funeral.

This is not a rare horror story, and it is not a reason for panic. It is a gap, and the gap is easy to close once you know it is there.

Why the dead make good targets

Most identity theft gets caught because the living victim notices something. A statement looks wrong. A card is declined. A collections call arrives. They dispute it, and the fraud unravels.

A person who has died does none of that. Their credit file stays open and their Social Security number stays valid. Meanwhile, mail keeps arriving at a house that may be empty. Even after the death is recorded, it can take time for that fact to reach every lender, bureau and agency. In that window, someone can apply for credit, file a tax return, or open accounts using the deceased person's details.

The family usually finds out late. They find out when a bill, a collections notice or an IRS letter turns up during the long slog of settling the estate. By then the trail is cold, and the executor is untangling fraud while also grieving.

There is also an emotional cost people do not expect. Learning that someone used your father's name after he died feels like a second violation. It is worth preventing for that reason alone.

The obituary is the first leak

The obituary is where most families hand over the raw material, with the best intentions. We want to honor the person fully, so we include the full date of birth, the full legal name, the street they grew up on, and their mother's maiden name.

That last detail matters more than most people realize. A mother's maiden name is a classic security question, and a full birth date is one of the main identifiers lenders and agencies use to match a person to a file.

You can write a loving, specific obituary without any of it. Use the birth year or the age, not the full date. Skip the exact address. Leave out the maiden name and the full middle name if you can. Describe the person by what they did and loved, which is what readers want anyway. Nothing about the tribute gets smaller.

Also watch the funeral-home page and any memorial site, since those often repeat the same details. And be careful with the "home will be empty during the service" detail. Some burglars read obituaries for exactly that reason.

The record of death does not reach everyone automatically

A common assumption is that once the funeral home files the paperwork, the world finds out. Part of the world does. The funeral director commonly reports the death to the Social Security Administration, which is helpful, but you should confirm that it happened rather than assume it. Other institutions learn on their own schedules, if at all.

Social Security payments need particular care. As a general rule, benefits are not payable for the month of death, so a deposit that arrives afterward may have to be returned. If a payment lands in the account, do not spend it. Contact the SSA to sort it out, because money that gets pulled back later can leave the account short.

Credit bureaus are the piece that families most often skip. Equifax, Experian and TransUnion each maintain files, and you can ask them to flag a file as deceased. That flag tells lenders not to extend new credit in that name. This is the single most protective step on the list, and it costs nothing but a few letters.

What the bureaus generally want

Each bureau has its own process and its own current instructions, so check the details on their sites before you send anything. In general, expect to provide a copy of the death certificate and proof of your authority. That means either being the executor or the surviving spouse. They may also want your ID and the deceased person's identifying information.

You can usually also request a copy of the credit report. Reading it is useful for two reasons. It shows you any fraud that has already begun. It also gives you a complete list of the person's debts and accounts, which is something every executor needs anyway. In a quiet way, protecting the identity and inventorying the estate are the same task.

Close the doors that stay open

A few other places deserve attention because they are quiet and slow.

Mail is one. If the deceased lived alone, forward their mail to the executor or a trusted family member through the postal service, so that preapproved credit offers and statements do not pile up in an empty mailbox.

Taxes are another. When an executor takes over, the IRS wants notice of the fiduciary relationship, which is done with Form 56. It also helps establish who is authorized to deal with the deceased person's tax matters, which makes a fraudulent return harder to slip through unnoticed.

Then there are the accounts. Cancel or close the credit cards you can, after you have noted any autopays and recurring charges. Do this in the right order: first record which bills those cards were paying, then close them, then move any needed payments. Closing a card that quietly pays the electric bill creates a different problem.

Finally, there are the digital accounts. Email, in particular, is the master key. Anyone who controls the email can reset passwords across everything else. Securing it, or following the provider's process for deceased users, belongs near the top of the list.

Your next moves

  • Rewrite the obituary before it publishes. Use the birth year or age instead of the full date. Remove the street address and mother's maiden name. Ask the funeral home to do the same on its memorial page.
  • Order extra certified death certificates. You will need a separate copy for each bureau, bank and agency. Ordering more up front saves weeks later.
  • Contact all three credit bureaus. Ask each to place a deceased flag on the file and to send a copy of the report. Check each bureau's current instructions first. Read the reports for accounts you do not recognize.
  • Confirm the death was reported to Social Security. Ask the funeral home, and call the SSA if you are unsure. Do not spend any payment that arrives after the date of death.
  • Forward the mail and file Form 56 if you are the executor. Send the deceased person's mail to you, and notify the IRS of your role so that you are the recognized point of contact.

What this has to do with the paper trail

The reason this protection is so tedious is that nobody knows where everything is. Which accounts exist? Which bureau has a file? Where are the statements kept, and who has the logins? Families spend months reconstructing a map that the person could have drawn in an afternoon.

A clear, current inventory of accounts, documents and contacts shortens that scramble and makes fraud easier to spot, because you know what should be there. It is one of the kinder things you can leave behind. We built Heirloom to help people keep that map in one place, so the family is not starting from scratch on the worst week of their lives. If you want to see how it works, you can look at it at heirloom.lumenlabs.works. The steps above will protect you either way.