UMVA has learned that a disturbing trend of scammers targeting grieving families has been uncovered, exploiting public records and data broker profiles to extract sensitive information and money.
The risk begins the moment a death certificate is filed, as it acts like a signal that moves through government databases, county records, property filings, and data broker pipelines automatically, relentlessly, and in many states, publicly.
By the time you're home from the funeral, that signal may have already reached people waiting for it, and it's essential to understand what happens next to disrupt it before scammers use it against you.
State death records vary in accessibility, with some states treating them as fully public, while others restrict access to immediate family for a period of years, but even restricted records flow to entities that qualify as "interested parties," including insurance companies, financial institutions, and commercial data brokers.
The funeral home typically notifies the Social Security Administration, triggering the Death Master File update, a federal database that certified entities, including many data aggregators, receive on a weekly basis.
Cybersecurity researchers have documented that automated scrapers monitor obituary pages continuously, beginning within hours of publication, extracting names, relationships, cities, ages, military service, church affiliation, employment history, and more.
By the end of Day 3, a data broker profile that already existed on you has been quietly refreshed, carrying a new status signal: recently bereaved, which changes everything about how you're targeted.
Data broker profiles do more than list your contact information; they collect details about your household, property, estimated income, and relatives, which can become extremely valuable to criminals.
Within the first two weeks, scammers may begin calling, sounding official and confident, knowing your spouse's name, where they worked, or sharing a detail that feels too specific to be random.
Any caller demanding immediate personal payment should raise a red flag, especially if they ask for a wire transfer, gift card, payment app, or cryptocurrency; never pay on the spot.
When transferring the home into your name alone, you may have to file paperwork at the county recorder's office, which can update your data broker profile, reflecting your new status as the sole owner of a property.
Around the same time, if the estate requires probate, that filing becomes public, revealing the value of the estate, a list of assets, the names of beneficiaries, and the executor's identity.
Fraudsters pose as attorneys, debt collectors, and estate service providers, demanding immediate payment of invented fees, which is sometimes called the "inheritance trap."
While managing the estate, someone may already be applying for credit in your spouse's name, a form of identity theft called ghosting, which can go undetected until bills, statements, or collection notices arrive later.
The fix is straightforward but time-sensitive: freeze your spouse's credit at all three bureaus, Equifax, TransUnion, and Experian, as soon as you have a death certificate in hand.
Not every scammer wants a quick payment; some of the most financially devastating attacks take weeks to build, using obituary data, death records, property filings, and data broker profiles to create a skilled criminal's leverage.
The scam doesn't start with a lie; it starts with something true, as obit-scouring criminals pretend to be long-lost friends or relatives of the deceased, contacting surviving spouses out of the blue to commiserate and reminisce.
The FBI reports that people over 60 reported more than $7.7 billion in fraud losses, with confidence and romance scams being especially dangerous, and the average loss per victim reaching $38,500.
Here's what connects every phase of this timeline: the data broker ecosystem, which can give scammers a roadmap, including your address, relatives, household changes, property ownership, and possible financial clues.
Removing your information once may not be enough; data brokers often re-list personal details as they pull from new public records and commercial sources.
To protect yourself, search your name on people-search sites, submit opt-out requests directly, and focus on sites that show your home address, phone number, relatives, age, or property details.
Freezing your deceased spouse's credit, checking for accounts you don't recognize, and verifying any call or letter claiming your spouse owed money are essential steps to take.
Treating unexpected calls about money with skepticism and verifying everything can help prevent scammers from using your personal information against you.
