Protecting a Deceased Person's Online Financial Accounts

Online financial accounts — banking, brokerage, retirement accounts, payment apps — represent some of the most sensitive assets in a deceased person's estate. They are also prime targets for identity thieves and fraudsters who monitor obituaries and exploit the transitional period between death and estate settlement. Here's how to protect them.

The Threat Landscape

Financial account fraud after a death takes several forms:

• Account takeover: Thieves use the deceased's email (if still active) to trigger password resets on financial accounts
• New account fraud: Using the deceased's SSN, date of birth, and other information to open new credit cards, loans, or accounts
• Beneficiary fraud: Attempting to impersonate an heir or redirect beneficiary designations before accounts are settled
• Unauthorized withdrawals: Using known account credentials to drain accounts before the bank is notified of the death

Immediate Steps: First 72 Hours

1. Do not broadcast the death publicly (yet)

Obituaries with detailed personal information (full name, date of birth, city) are essentially an identity theft invitation. If posting publicly, consider limiting the information in the initial announcement and delaying the full obituary until financial accounts are secured.

2. Secure the deceased's email account

Email is the master key to most online accounts — it's used for password resets on virtually everything. Secure it immediately: either change the password to prevent access by others, or begin the process of closing it. See our article on closing email and social media accounts for platform-specific instructions.

3. Notify financial institutions

Contact the deceased's bank(s), brokerage firms, and credit card companies as soon as possible. Provide a death certificate. Ask them to:

• Flag the account as deceased and restrict activity
• Inform you of any pending transactions or unusual recent activity
• Begin the transfer/closure process for the estate

Bank Accounts

For jointly-held accounts, the surviving joint owner typically gains full control automatically — no probate required. For sole accounts, the executor will need letters testamentary from the probate court to access and manage the account.

Ask the bank to flag the account for "reduced activity" or "estate hold" so that automatic payments and pending transactions are paused while the estate is being settled. For details on closing or transferring bank accounts, see our article on closing a bank account after a death.

Investment and Brokerage Accounts

Contact each brokerage (Fidelity, Schwab, Vanguard, TD Ameritrade, etc.) and provide the death certificate. For accounts with named beneficiaries, the beneficiary can typically claim assets directly without going through probate — but they must initiate this process. For accounts without beneficiaries, assets pass through probate. See our article on investment accounts after a death.

Retirement Accounts (IRA, 401k)

Retirement accounts with named beneficiaries transfer directly to those beneficiaries, bypassing probate. The beneficiary must contact the plan administrator, provide a death certificate, and complete the required forms. Inherited retirement accounts have specific tax rules — withdrawals may be required within 10 years of inheritance under the SECURE Act. Consult a tax advisor. See our article on taxes after a death for overview.

Payment Apps: PayPal, Venmo, Cash App, Zelle

These accounts may hold balances that are part of the estate. Contact each service with a death certificate to claim balances and close the account. For details, see our article on PayPal, Venmo, and Cash App after a death.

Cryptocurrency

Cryptocurrency is among the hardest digital assets to recover if access credentials are unknown. For an account held at an exchange (Coinbase, Kraken, etc.), contact the exchange with a death certificate and executor documentation. For self-custodied cryptocurrency (personal wallets), recovery requires the private key or seed phrase — if this is not found among the deceased's documents, the assets may be permanently inaccessible. See our article on cryptocurrency after a death for detailed guidance.

Monitoring for Fraud After Death

After taking the immediate steps, continue monitoring for fraud:

• Review the deceased person's credit reports from all three bureaus (Equifax, Experian, TransUnion)
• Place a deceased indicator at each bureau — see our article on placing a deceased alert with the credit bureaus
• Watch for unexpected mail in the deceased's name: new credit card offers, loan statements, or collection notices for accounts you don't recognize
• Be alert to IRS notices about tax returns filed under the deceased's SSN

Advance Planning Matters

The most important lesson from cases of post-death financial account fraud is that advance planning prevents it. Encourage those you love to:

• Use a password manager and share access with a trusted person
• Maintain a document listing all financial accounts, account numbers, and login methods
• Keep beneficiary designations current
• Complete a digital estate plan specifying who can access and how to handle online accounts

For the complete identity theft prevention strategy, see our guide to protecting a deceased person's identity.