How to Remove a Deceased Person's Data from the Internet (Executor's Guide 2026)
Identity theft of the deceased, "ghosting", exploits the gap between death and the Social Security Death Master File propagating to data brokers. Here is the 48-hour checklist, the full data broker sweep, and what executors need to know.
Identity theft of the deceased is real enough that the FTC maintains a dedicated consumer alert on the pattern. The industry term is "ghosting": a thief uses a death notice, often from a public obituary or social media post, to open credit cards, file false tax returns, or build a synthetic identity on a Social Security number that no longer has an active human watching it.
The window between a death and the Social Security Death Master File propagating to data brokers and credit bureaus can span weeks or months. During that window, the deceased person's SSN still pulls up a clean credit record with an established history, address, and relative associations. It is, from a fraudster's perspective, a pristine identity with no owner to report unauthorized activity.
This guide is for executors, surviving spouses, and next of kin. It covers the 48-hour actions that close the exploitation window, the data broker cleanup that follows, digital account management, the legal basis for your removal authority, and the monitoring schedule that matters.
Key Takeaways
- "Ghosting" fraud exploits a 4–8 week gap between death and the Social Security Death Master File fully propagating to credit bureaus and data brokers: the deceased's SSN remains a pristine, unwatched identity during this window
- Placing deceased alerts at all three credit bureaus immediately closes the credit fraud portion of that window before DMF propagation completes; this is the single highest-priority 48-hour action
- Most data brokers have no separate "deceased" removal process: the executor submits the standard opt-out with a note identifying executor authority and references the death certificate
- Ghosting attacks typically surface 6–18 months after death, after the estate settles and monitoring stops, because fraudsters "season" new credit before making large fraudulent purchases
- Tax refund fraud requires a separate defense: file IRS Form 56 and submit the deceased's final tax return as early as possible; the IRS does not use credit bureau data, so a credit freeze does not stop it
- Voter registration must be actively cancelled by contacting the county election office; automatic deregistration timing varies and an active voter record continues to feed people-search databases with the deceased's last registered address
Who Has Legal Standing to Remove Data
To submit data removal requests on behalf of a deceased person, you need to be one of:
Tired of dealing with data exposure?
Your personal data is likely on 545 data brokers. Use OfflistMe to generate pre-filled opt-out emails for all of them in one go.
The executor named in the will with letters testamentary issued by the probate court. These letters are issued by the probate court when the will is admitted, usually within 1–4 weeks of filing. Get at least ten certified copies, you will use more than you expect.
The court-appointed administrator if there was no will. The administrator has the same authority as an executor for data removal purposes once appointed by the court.
A surviving spouse, parent, or adult child presenting a certified death certificate. Most data brokers accept next-of-kin status with a death certificate, even without formal probate. Include a written note identifying your relationship.
What to prepare:
- 10+ certified copies of the death certificate (not photocopies; certified originals from the county vital records office)
- Letters testamentary from probate court (if available)
- Your own government ID showing the same surname or a relationship document
The 48-Hour Priority Checklist
These are the actions with the shortest exploitation window and the most permanent protective impact.
1. Confirm SSA notification. Most funeral homes notify the Social Security Administration directly. Confirm this was done and request a death certificate with the decedent's SSN. The SSA adds the decedent to the Death Master File, which is the primary signal that credit bureaus, banks, and major data brokers use to flag a deceased status.
2. Place deceased alerts at all three credit bureaus. The deceased alert prevents new credit from being opened under the SSN. Submit with a certified death certificate:
- Equifax: equifax.com/personal/help/
- Experian: experian.com/help
- TransUnion: transunion.com/credit-disputes/deceased-notification
This alert is immediate. The Death Master File propagation takes 4–8 weeks. The bureau alert is what protects you in the gap.
3. Request the deceased's credit reports. Obtain reports from all three bureaus to see existing open accounts, recent inquiries, and any accounts already opened by identity thieves. AnnualCreditReport.com offers free reports.
4. File IRS Form 56. This "Notice Concerning Fiduciary Relationship" registers you with the IRS as the executor or administrator. All tax correspondence, including any fraudulent refund notices, will route to you instead of sitting unclaimed at the deceased's address.
5. Secure the deceased's email access. Executors with legal authority can typically work with the email provider to access the account or place a security hold. The email address is the master key to password resets for every linked account.
Step 1: Close the Public Record Sources
Data brokers re-scrape government records every 60–180 days. Closing the upstream sources prevents new records from re-populating the deceased's profile after you remove it.
Voter registration: Most states deregister a voter automatically after SSA notification, but the timing varies. Call the county election office to confirm deregistration within 30 days of death. Until deregistered, the voter record continues to feed people-search databases with the deceased's last registered address.
DMV/Motor vehicles: Submit the driver's license and request cancellation of the record. In most states, the estate must also transfer or dispose of registered vehicles, which is a separate process from DMV deregistration.
Property records: If property is sold or transferred during probate, the deed transfer creates a new public record. Consider how the transfer is structured, transfer to a trust, for example, records the trust as owner rather than a named individual.
State professional licenses: If the deceased held professional licenses (medical, legal, contractor, real estate), notify the licensing board. An active license with a deceased holder's name and address creates an ongoing data broker source.
Step 2: Credit Bureau Deceased Alerts and Account Closure
The credit bureau deceased alert (described in the 48-hour checklist) prevents new credit applications. But existing open accounts need to be addressed separately.
Account closure process:
- For each open account: contact the creditor directly with the death certificate, request account closure, and request a written confirmation
- For joint accounts: the surviving account holder typically takes over; the deceased's name should be removed
- For accounts with no surviving joint holder: work through the estate process to close or pay off balances
Watch for:
- Pre-existing fraudulent accounts opened before death
- New accounts opened during the Death Master File propagation window
- Tax refund fraud, file the deceased's final tax return as early as possible; fraudsters sometimes file false returns to claim refunds before the legitimate return
Step 3: Data Broker and People-Search Site Removal
Most people-search sites do not have a documented "deceased person" removal process. They have standard opt-out processes that work the same way for deceased records as for living individuals.
What changes when submitting as an executor:
- Include "I am the executor/administrator of the estate of [name], deceased [date]" in the opt-out form or email
- Reference the death certificate in your submission
- Use an executor email address if you cannot access the deceased's email for verification steps
- A few sites may request documentation, a copy of the death certificate satisfies most
Priority sites for executor removal:
| Site | Opt-Out URL | Processing |
|---|---|---|
| Whitepages | whitepages.com/suppression-requests | 24–72 hours |
| TruePeopleSearch | truepeoplesearch.com/removal | Same day |
| FastPeopleSearch | fastpeoplesearch.com/removal | 24 hours |
| Spokeo | spokeo.com/optout | 24–48 hours |
| BeenVerified | beenverified.com/app/optout/search | 24 hours |
| Radaris | radaris.com/page/privacy | 48–72 hours |
| Intelius | intelius.com/optout | 72 hours |
| MyLife | mylife.com/optout or 1-888-704-1900 | 5–14 days |
For a one-pass submission across 500+ brokers, OfflistMe generates the removal emails which the executor sends from their own address with a note on executor authority. Brokers respond at similar rates to executor requests as to personal opt-outs.
The legal basis for your authority: Under CCPA and most state privacy laws, the right to deletion belongs to the data subject or their authorized representative. An executor has legal authority to act on behalf of the estate, which includes personal data rights. Include the applicable statute in your requests: for California, "California Civil Code § 1798.105, submitted by the legal executor of the estate."
Step 4: Digital Accounts and Online Presence
The data broker cleanup handles what is publicly searchable. Digital account management handles what is privately accessible.
Email accounts: Most major providers (Google, Microsoft, Apple) have legacy contact or estate access processes. Google's Inactive Account Manager can designate what happens to the account. For immediate estate access, submit a death certificate through each provider's estate support process. Email accounts should be either accessed and monitored (to catch fraud notifications) or secured against unauthorized access and eventually closed.
Social media accounts: Options vary by platform:
- Facebook: Memorialization (profile becomes a memorial page) or removal; submit death certificate to Facebook's memorialization/removal request
- Instagram: Same process as Facebook (shared parent company)
- LinkedIn: Removal via linkedin.com/help/linkedin/ask/ts-rdmlp
- Twitter/X: Removal via help.twitter.com/forms/account-ownership
Subscriptions and services: Check bank and credit card statements for recurring charges. Cancel subscriptions the estate is paying for. Watch for services that auto-renew post-death and may require estate funds to resolve.
Google and search results: After broker pages are removed, use Google's "Results About You" tool or the Outdated Content Removal Tool to de-index cached pages. The deceased's obituary and memorial pages typically remain (and are appropriate to keep); the data broker profiles listing their home address and family members are the targets.
Step 5: The Death Master File Timeline
The Social Security Death Master File (DMF) is the primary signal that commercial entities use to recognize a deceased record. Understanding its propagation timeline helps you plan.
| Milestone | Typical timeline |
|---|---|
| SSA notified by funeral home | Day of filing death certificate |
| SSA adds to Death Master File | 1–2 weeks after notification |
| Major credit bureaus flagged | 1–4 weeks after DMF update |
| Large data aggregators update | 4–8 weeks after DMF update |
| People-search sites update | Varies: 1–6 months, or never unless opted out |
| Tax refund fraud window | From death until final return filed |
The gap between SSA notification and universal data broker propagation is the exploitation window. The credit bureau deceased alert closes the credit fraud portion of that window immediately. The data broker opt-outs close the people-search exposure independently.
Monitoring: 12 to 24 Months Post-Death
Ghosting attacks typically surface 6–18 months after a death, when the estate has been settled and the family has stopped monitoring. The fraud takes time to develop because fraudsters often "season" new credit by waiting before attempting large fraudulent purchases.
Quarterly monitoring tasks:
- Check annualcreditreport.com for new accounts or inquiries under the deceased's SSN
- Search the deceased's name on TruePeopleSearch, Spokeo, and Whitepages, re-listings happen as brokers ingest new probate records
- Review any mail still arriving at the estate address addressed to the deceased
Watch for these red flags:
- Unexpected tax notices or IRS correspondence referencing the deceased's SSN
- Credit card or loan offers addressed to the deceased (suggests SSN is still active in some databases)
- Creditor contact about accounts you don't recognize
- Court filings listing the deceased as a defendant in financial disputes
If identity theft is discovered:
- File a report at identitytheft.gov using the "deceased family member" pathway
- File a police report in the jurisdiction where the fraud originated
- Contact each affected creditor with the FTC affidavit and police report number
- Dispute the fraudulent accounts with all three credit bureaus using the Deceased Alert status
Frequently Asked Questions
Can I remove the deceased's social media posts and obituaries?
Family-posted obituaries and memorial content are generally appropriate to leave online. The focus for removal should be data broker profiles that display the deceased's home address, phone number, and living relatives, information that enables ghosting fraud. Social media platforms offer memorialization options that preserve the memorial aspect while preventing unauthorized account access.
Do data brokers have a special deceased person removal process?
Most do not have a formal process separate from their standard opt-out. The executor note ("submitted by the executor of the estate of [name], deceased [date]") is typically sufficient for standard people-search sites. For background check sites that may flag an active criminal record or court history, include documentation that the subject is deceased.
How long does executor authority last?
Letters testamentary are issued by the probate court and remain valid for the duration of the estate administration, which can be months to years. Some states issue letters with expiration dates; check your state's requirements. For data broker removal purposes, you generally only need to submit requests during the first year.
Is there a risk that removing the deceased's data will interfere with estate processes?
Removing data from people-search sites does not affect official government records or the estate process. It only removes public-facing searchable profiles. Probate court records, property deeds, and estate filings remain as official records regardless of data broker opt-outs.
People feel pressure to do all of this immediately after a death, and the 48-hour checklist above is designed so you can move fast where it matters. The broader data broker opt-out pass can wait a few weeks while you handle the funeral, the estate paperwork, and the people. The credit bureau alerts, the SSA notification, and the voter registration removal are the pieces that close the exploitation window. Everything else follows when you are ready.
Generate executor opt-out requests for 500+ brokers →
Managing Deceased Relatives' Privacy
Identity thieves frequently target deceased individuals ("ghosting") to open fraudulent accounts, exploit estate assets, and file tax returns. Data brokers continue to publish profiles of deceased people.
How to Request Deceased Deletion:
- Submit Death Certificates: Major credit bureaus and data compilers require an official death certificate copy to mark a file as deceased and prevent new credit inquiries.
- Estate Representative Requests: Under CCPA and other state statutes, estate representatives can submit deletion requests on behalf of deceased individuals.
- Direct Opt-Out Submission: Submit standard opt-out forms for deceased relatives on major search directories, citing the person's name and last known address.
Related Guides
Understand your privacy rights
Every removal request cites a specific statute. These plain-English explainers show what each law covers and how enforcement actually works.
Related Data Broker Removal Guides
Take back your privacy today
Remove your personal information from data brokers and platforms in seconds.
Remove Your Personal Data NowFrom $7.00 one-time · 545 data brokers · No subscription
