Blog · Legal and Identity Protection

Identity Theft After the Death of a Family Member: How to Protect Them, Step by Step

Identity theft after the death of a family member happens more than people expect. A person who just died still has a Social Security number, open accounts and a clean credit file, and for a while nobody is watching any of it. Thieves know that. The good news is that a few letters and forms in the first weeks close most of the doors.

This guide walks through what to do, in order, with the California details most checklists leave out. It is written for the spouse, adult child or executor who is already juggling a funeral, a house and a lot of paperwork.

Quick note on who is talking. opfinances.com is a licensed life insurance and annuity agency in Los Gatos. We are not a law firm, not a financial advisor, and not a fiduciary. We are also a LegalShield associate, which you will see mentioned below. This is general education, not legal advice.

The short version

• Tell the credit bureaus about the death so they add a deceased alert to the person's credit report. Experian says one bureau passes the notice to the other two.
• Only a spouse or someone with legal authority, like an executor, can report the death to the bureaus, and you send a copy of the death certificate, never the original.
• If someone misuses a deceased person's Social Security number on a tax return, IRS Form 14039 has a section for exactly that.
• In California, only certain people can get an authorized certified copy of a death certificate. Others get a copy stamped as not valid to establish identity.
• Keep the obituary light on details like birth date and address, and watch the mail in the person's name for months.

Why identity theft after the death of a family member is a real risk.

When someone dies, their information does not disappear. Their name, date of birth and Social Security number still work in plenty of systems until each one is told about the death. Meanwhile, a lot of that information becomes easy to find. Obituaries often print the full name, birth date, hometown and family names. Mail keeps arriving at an empty house. Bank and card statements pile up.

There is also timing. The family is grieving and busy, and nobody is checking the person's credit or accounts. That gap is what a thief uses to open a new card, file a tax return for a refund, or take over an existing account. The steps below are about closing that gap quickly.

Step one: tell the credit bureaus about the death.

This is the single most useful move against new account fraud. When a credit bureau is notified of a death, it adds a deceased alert to the person's credit report. A lender pulling that report sees it and should not open a new account in that name.

According to Experian, notifying one bureau covers all three, because the bureau you contact passes the notice to the other two. Plenty of families still send the notice to Equifax and TransUnion as well, just to be sure, and that does no harm.

• Who can report it: Experian says only a spouse or another legally authorized person, such as the executor of the estate, can report a death. If you are not the spouse, expect to show court documents.
• What to send: a copy of the death certificate, plus the person's full name, Social Security number, date of birth and date of death, and your relationship to them. Experian says plainly not to send the original death certificate.
• How to send it: Experian takes the notice by online upload or by mail to its Consumer Assistance Center, P.O. Box 4500, Allen, TX 75013.

Step two: get the right copies of the death certificate in California.

You will need several copies. Banks, the insurer, the credit bureaus and others will each want one, so order more than you think you need.

California splits death certificate copies into two kinds under Health and Safety Code section 103526. An authorized certified copy goes only to people the law lists, including a spouse or domestic partner, child, parent, grandparent, grandchild or sibling, an attorney for the person or the estate, and anyone appointed by a court or empowered by statute to act for the estate. You sign a sworn statement saying you are one of them.

Anyone else gets an informational certified copy. That copy carries a legend that says INFORMATIONAL, NOT A VALID DOCUMENT TO ESTABLISH IDENTITY, and the state redacts signatures from it. That rule is part of the protection. It makes it harder for a stranger to use a death certificate as proof of identity.

Keep the obituary short on personal details.

An obituary is there to remember someone. Leaving out the exact birth date, the home address, and the mother's maiden name takes away the pieces a thief would need most. The age, the city and the people who loved them tell the story just fine.

Step three: protect the tax side with the IRS.

Tax refund fraud is one of the most common ways a deceased person's identity gets used. Someone files a return in their name before the family does and collects the refund.

The IRS says to prepare a deceased person's final income tax return the same way you would if they were alive, reporting income up to the date of death. Filing it, through the executor or the person handling the estate, is part of keeping the account clean.

If you think someone filed a fake return in their name.

IRS Form 14039, the Identity Theft Affidavit (the February 2026 version is current), lets you report it on behalf of a person who has died. What you attach depends on who you are. A surviving spouse needs no attachments, not even a death certificate. A court appointed or certified personal representative attaches a copy of the court certificate showing the appointment. If no personal representative has been appointed, you attach a copy of the death certificate or the government notice of death sent to next of kin.

The IRS prefers the online version of the form, though attachments cannot be uploaded that way, so a filer who needs to attach something uses mail or fax instead. File it once. The form itself warns that a second copy for the same incident causes delays. For identity theft that is not about taxes, the form points people to the FTC at IdentityTheft.gov.

Step four: close accounts and watch the mail.

Once the bureaus and the IRS are handled, work through the person's accounts one by one.

• Banks and credit cards: tell each one about the death and ask how they handle the account. Ask that no new cards be issued.
• Subscriptions and online accounts: cancel or memorialize them, and change passwords on anything you need to keep running for a while.
• Mail: keep checking it for months. A new card offer or a bill nobody recognizes is often the first sign something is wrong.
• Social Security: Experian notes that funeral homes often report deaths to Social Security, and that you can call 800-772-1213 to report it yourself. Confirm it was done.

What to do if you find fraud anyway.

Report it at IdentityTheft.gov, where the FTC builds a recovery plan and letters for you. In California, Penal Code section 530.6 lets someone who knows or suspects their information was misused file a police report with the local agency where they live or work, which must take the report and give a copy. Bring the death certificate and proof that you have authority over the estate when you contact any creditor about a fraudulent account. And if a collector shows up asking you to pay a debt in the person's name, read our answer on whether children inherit a parent's debt before you agree to anything.

Protecting the family around the big money moments.

Scammers do not only target the person who died. They also target the family around the moments when money moves, like a life insurance claim, an annuity payout or an estate account. Calls pretending to be the insurer, the probate court or a bank are common. Before giving anyone information, hang up and call the company back at a number you found yourself.

It also helps to have your own protection in place. Our post on whether identity theft protection is worth it covers the free credit freeze and what paid services actually do. If the estate is going through court, our guide to how long probate takes in California explains the timeline and who has authority to act. Dealing with identity theft after the death of a family member is one more task on a long list, and a legal plan membership is one way to get access to a provider law firm for questions along the way. If you would rather talk it through, reach out to us.

FAQ

Questions people ask.

How do I protect a deceased parent's identity?

Notify the credit bureaus so a deceased alert goes on the credit report, get the right certified copies of the death certificate, make sure the final tax return is filed, close the person's accounts, and watch their mail for months. Keep personal details like the birth date out of the obituary.

Do I need to notify all three credit bureaus when someone dies?

Experian says notifying one bureau covers all three, because it passes the notice to the other two. Many families still notify Equifax and TransUnion directly to be safe. Only a spouse or someone with legal authority, such as an executor, can report the death.

What if someone filed a tax return using a deceased person's Social Security number?

File IRS Form 14039, the Identity Theft Affidavit, on their behalf. A surviving spouse needs no attachments. A court appointed personal representative attaches the court certificate, and others attach a copy of the death certificate or the government notice of death.

Who can get a certified death certificate in California?

Authorized certified copies go to people listed in Health and Safety Code section 103526, including a spouse or domestic partner, children, parents, grandparents, grandchildren, siblings, an attorney for the estate, and court appointed representatives. Others get an informational copy marked as not valid to establish identity.

Getting it done

Getting the documents in place.

Reading about a will or a trust does not put one in place. If you want an attorney to draft or review your will, living trust, or power of attorney, a LegalShield membership gives you access to a provider law firm for a flat monthly fee instead of an hourly bill. You can also call with a question before it turns into a problem.

See LegalShield plans

Disclosure: Michael Le, the licensed agent behind opfinances.com, is also an independent LegalShield associate and may earn a commission if you enroll. LegalShield is not a law firm; it provides access to legal services offered by independent provider law firms. On Point Finances is not a law firm and does not give legal advice. Plan prices and coverage vary by state.

Where this fits.

This post covers one piece of a bigger plan. Life Insurance walks through the whole decision, and the answer library takes the follow up questions one at a time.

On Point Finances is a licensed insurance agency, not a tax, legal, or investment adviser. This post is general education, not a recommendation, and reading it does not create a client relationship.

Start with a conversation

Sources

• Experian: how to report a relative's death to the credit bureaus
• IRS Form 14039, Identity Theft Affidavit (Rev. February 2026)
• IRS: file the final income tax returns of a deceased person
• California Health and Safety Code section 103526, authorized and informational certified copies
• California Penal Code section 530.6, police reports for identity theft victims
• FTC: credit freezes and fraud alerts

Checked November 7, 2026. Rules and limits change; confirm current figures with the source or your own tax or legal professional before acting.