How to Protect a Deceased Person's Mail and Identity

A person’s identity doesn’t end when they die. Their Social Security number, credit file, and mailing address stay active in systems that don’t automatically know they’re gone. A short list of actions closes that gap, and most of them cost nothing but a few stamps and a little time.

Can someone’s identity really be stolen after they die?

Yes. It’s sometimes called “ghosting.” The Iowa Attorney General notes that identity thieves read obituaries for personal information they can use to open new accounts, claim a tax refund, use medical insurance, or apply for government benefits. It doesn’t happen to most families, but it’s preventable.

The same office points out that this kind of theft is sometimes committed by someone close to the family. That’s a reason to keep the person’s passwords, credit records, and identifying documents in a secure place, limit access to a few trusted people, and shred junk mail or paperwork that no longer matters.

What’s the single most important step?

Notify the three credit bureaus: Equifax, Experian, and TransUnion. Here’s why it matters. The Social Security Administration periodically reports deaths to the bureaus, and the bureaus share that information with one another. But the Iowa Attorney General warns that clerical errors happen and the sharing can take several months, which leaves a window of vulnerability. The Identity Theft Resource Center likewise says SSA notification may happen but is not guaranteed.

The fix is to notify each bureau yourself, rather than relying on one to pass it along. The Iowa Attorney General recommends sending each bureau a death certificate by mail with a return receipt requested. The bureau then flags the file, commonly with a notice along the lines of “deceased, do not issue credit,” which warns lenders not to approve new credit. Once it’s processed, check that the notice actually appears.

Each request should include:

• About the person who died: legal name, Social Security number, date of birth, date of death, last known address, and a copy of the death certificate
• About you: your legal name, a copy of your ID, your address, and proof you’re authorized to act, such as Letters Testamentary or another document with a court seal naming you as executor

Each bureau sets its own requirements and mailing addresses, and some ask for a certified copy of the death certificate, so check each one’s current instructions before you send anything.

Who can do this, and what if I’m not the executor?

The Identity Theft Resource Center says that to close accounts opened in someone’s name you generally need to be the executor or have other legal authority, and you’ll need to provide proof of it. The Iowa Attorney General adds that a spouse or executor can request a copy of the deceased person’s credit report. If you aren’t the executor or surviving spouse, the person who is will usually need to handle the formal requests, and you can help by gathering documents. See our guide on executor responsibilities.

Why should I also request the credit reports?

Because they show which accounts exist, which tells you who to contact, and they let you spot accounts you don’t recognize, which could signal fraud. The Iowa Attorney General notes the reports are also useful in the probate process. See our guides on handling debts after a death and banks, credit cards, and bills after a death.

Who else should be told, so their records are marked deceased?

The Iowa Attorney General lists the Social Security Administration, the state motor vehicle agency, the U.S. Department of State (for a passport), and the U.S. Postal Service, plus credit, financial, and insurance companies. Other places worth considering include employers, memberships and subscriptions, utility companies, professional licensing boards, the Department of Veterans Affairs if the person was a veteran, and immigration services if they weren’t a U.S. citizen. The Identity Theft Resource Center adds email and social media companies.

Most funeral homes report the death to Social Security, but some may not, so it’s worth confirming. See our guides on notifying Social Security and government agencies, which accounts to cancel first, and digital accounts after a death.

Many of these notices need a copy of the death certificate. The Iowa Attorney General suggests about 10 as a rule of thumb and the Identity Theft Resource Center suggests 12 to 15, depending on how many accounts there are. See our guide on getting death certificates.

Who can stop or forward a deceased person’s mail?

It depends on whether you share an address, according to the U.S. Postal Service.

If you shared the address, you may open and manage the mail as needed. You can forward all of it to a different address, or forward a single piece, for example to the executor, without going to a Post Office: cross out your address, print “Forward to” and the new address on the front, and put it back in your mailbox, a blue collection box, or a Post Office lobby drop.

If you have a different address, you must go to a Post Office in person to submit a change of address request, and bring documented proof that you’re the appointed executor or administrator. The USPS is explicit that a death certificate alone is not enough.

Why does the mail matter so much?

The Postal Service notes that when mail builds up after a death, it can attract unwanted attention. Mail also carries the bills and account statements that tell you what accounts exist and what the estate may owe. So the goal is neither to let it pile up nor to throw it out unopened. Keep a simple list of what arrives, and pass anything important to the executor. See our guide on securing a home after someone dies for the wider picture.

For the full search beyond mail, see our guide on how to find everything a person owned.

How do I stop the junk mail and marketing?

The Data & Marketing Association maintains a Deceased Do Not Contact list, and the Postal Service points families to it, with registration through DMAchoice.org. USPS says advertising mail should decrease within about three months of registering the person’s name.

This targets marketing mail only. Bills, statements, and notices from companies that already have the person on file need to be handled with each company directly.

What if I think identity theft has already happened?

• Contact the company where the fraud occurred and explain that the account holder has died
• Tell the credit bureaus, and confirm the deceased notice is on the file
• Report it to the Federal Trade Commission at IdentityTheft.gov, the federal government’s reporting site
• File a report with your local police
• Keep a written record of dates, names, and reference numbers

The Identity Theft Resource Center also publishes an action plan specifically for reporting identity theft of a deceased person. Writing to companies by certified mail with a return receipt, as the Resource Center suggests, creates a record that they received your notice.

How long should I keep watching for problems?

Because the reporting delays are the weak point, it’s worth reviewing the credit reports again after a few months, and watching for mail or notices addressed to the person from companies you don’t recognize. There’s no single official schedule, so use your judgment, and ask the executor’s attorney or tax preparer if anything looks unusual.

If you’re reading this to prepare for your own family, listing your accounts and where your important documents are makes every step above faster for them. Add that to your Final Day Plan.

This is general educational information, not legal advice. Requirements differ among the credit bureaus, companies, and states - the executor’s attorney and each institution’s current instructions can address the specifics of your situation.