Three weeks after her husband’s funeral, Carol’s phone rings. The caller knows her husband’s name, their address and their daughter’s name, even mentioning that she lives across town.

He says he’s calling from a life insurance company and that there’s a policy ready to be paid out. He just needs Carol’s Social Security number and bank routing details to process it.

This scenario draws from real scams reported by fraud investigators and elder abuse advocates across the country. The details change, but the playbook stays the same.

The reason these attacks work so well comes down to something most grieving families never think to check.

HOW SCAMMERS TARGET YOU EVEN WITHOUT SOCIAL MEDIA

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
• Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Why scammers target widows and how they find you so fast

Losing a spouse creates a perfect storm for scammers. Grief can leave you overwhelmed, and at the same time, you are handling financial decisions, paperwork and major life changes. That combination makes it easier for someone to catch you off guard.

THE ONE THING SCAMMERS CHECK BEFORE TARGETING YOU ONLINE

Meanwhile, your personal information becomes easier to find. Obituaries often include names, relationships and locations. Death records get filed with the Social Security Administration and added to the Death Master File. Probate filings can reveal property transfers, beneficiaries and account details.

Data brokers collect all of this and turn it into detailed profiles that almost anyone can access. According to research from a data privacy company analyzing five years of FBI Internet Crime Complaint Center data, about 52.5% of crimes reported by Americans over 60 in 2023 were either enabled or worsened by personal data available online. Widows, especially those managing estates alone, sit high on that target list.

Here’s what you should do in the first 90 days

Despite being in a high-risk group, taking these protective steps should keep scammers at bay. I know how overwhelming this time can be, so I recommend asking a trusted family member or friend for assistance setting things up. Though you should always refrain from sharing sensitive details like account numbers and your Social Security number.

THE DATA BROKER OPT-OUT STEPS EVERY RETIREE SHOULD TAKE TODAY

Days 1-30: Limit what enters the system

The first month is when the most damaging data gets published. So your first job is damage control.

1) Be strategic about the obituary

Obituaries are the single most accessible data source scammers use after a death. A traditional obituary lists full names, survivor relationships, hometowns and sometimes even ages. That’s a complete family map, and in the wrong hands, it can be a powerful weapon.

You don’t have to skip the obituary. But consider removing or abbreviating the exact home city (use the region instead), names of minor grandchildren and the surviving spouse’s first and last name combined with their address. “Carol of Cleveland” is safer than “Carol Patterson of 114 Birchwood Lane, Cleveland.”

HOW TO REMOVE YOUR PERSONAL INFO FROM PEOPLE-SEARCH SITES

2) Search your name on people-finder sites

Before you can remove anything, you need to see what’s already there.

Go to Spokeo, Whitepages, BeenVerified and Intelius. Search your name and your spouse’s name. What you find will likely include your address, phone number, email addresses, relatives’ names and property records.

This snapshot is your starting point. Take screenshots. You’ll need them.

10 SIGNS YOUR PERSONAL DATA IS BEING SOLD ONLINE

3) Set up a Google Alert for your name and address

It takes two minutes, and it’s free. Go to google.com/alerts and create alerts for:

• Your full name
• Your spouse’s full name
• Your street address.

If your information gets published anywhere new, you’ll get an email notification. This is your early warning system.

REMOVE YOUR PERSONAL INFO FROM THE WEB — STOP IT FROM COMING BACK

Days 31-60: Start removing and automating what you can’t do manually

By now, your information has had weeks to spread. Manual opt-outs are worth doing, but here’s the reality: there are hundreds of data broker sites. Each one has its own removal process. Many require you to submit ID, wait days for confirmation and then re-submit when your data reappears, because it will.

1) Opt out of people-search sites

Prioritize manual opt-outs from the sites that appear in your Google search results. These carry the most weight because scammers often start with whatever Google surfaces first.

You can find these exposures quickly and easily with Incogni’s free scanner. This tool will scan the web for your personal information and email you a report with a list of results you can start with.

HOW TO HAND OFF DATA PRIVACY RESPONSIBILITIES FOR OLDER ADULTS TO A TRUSTED LOVED ONE

If you’d rather go about it on your own, some of the most common sites include:

• Spokeo: spokeo.com/opt_out/new
• Whitepages: whitepages.com/suppression_requests
• BeenVerified: beenverified.com/opt-out
• Intelius: intelius.com/opt-out.

Each one will ask you to verify your email. Follow through on every confirmation; unconfirmed requests don’t get processed.

Keep in mind that removing your information takes time and persistence. There are hundreds of data broker sites, and many of them re-list your information after it has been removed, especially when new public records become available.

Because of that, some people choose to use automated data removal services that send ongoing opt-out requests on their behalf. These services can help reduce the workload by continuously monitoring and removing listings as they reappear.

No matter which approach you take, consistency matters. Checking your information regularly and following up on removals helps limit what scammers can find.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com

2) Update security questions on all financial accounts

This step is urgent, and most people skip it entirely.

Data broker profiles almost always contain the exact answers to your bank’s security questions. Mother’s maiden name. Previous address. City where you were born. Scammers use these to impersonate you and access your accounts.

WHAT HACKERS CAN LEARN ABOUT YOU FROM A DATA BROKER FILE

Call your bank, brokerage and insurance companies. Ask to update your knowledge-based authentication questions. Use answers that are completely made up, something only you know and store them in a password manager. Don’t use any answer that appears anywhere in a data broker profile.

Days 61-90: Lock down the perimeter

By now, the most urgent exposure has been addressed. These final steps close the remaining gaps and protect you in the long term.

1) Place a credit freeze on your account and your spouse’s

A credit freeze prevents new credit accounts from being opened in your name. It’s free at all three major bureaus: Equifax, Experian and TransUnion.

HOW TO SAFEGUARD YOUR CREDIT SCORE IN RETIREMENT AS FRAUD AND IDENTITY THEFT RISE AMONG SENIORS

Critically: freeze your spouse’s credit too. After a death, identity thieves frequently open new accounts in the deceased person’s name before the credit bureaus are updated. This is called ghosting, and it can haunt an estate for years.

To freeze a deceased spouse’s credit, contact each bureau individually and provide the death certificate. It’s a few phone calls. It’s worth every minute.

2) Request removal from the Social Security Death Master File

Families can submit a request to limit access to a deceased person’s Social Security data in certain contexts. Visit ssa.gov for current guidance. This won’t scrub the record entirely, but limiting access to the Death Master File reduces the pool of parties who can use it to enrich your data broker profile.

3) Review all joint account access and update beneficiary information

This isn’t directly a data privacy step, but it protects you from a related threat. Scammers who know about an estate sometimes pose as financial advisors, attorneys or government representatives to intercept beneficiary changes. Confirm all account changes directly through institutions you contact yourself, never through a number someone else gives you.

4) Set up simple safeguards to stop scams early

By this stage, your data is more controlled. Now the focus shifts to stopping scams before they escalate. Start by setting clear expectations with your family. Let them know you will never ask for money through an unexpected call, text or email. Creating a simple code word or check-in rule can stop panic-driven decisions, which is exactly what scammers rely on.

Next, slow down any urgent financial request. Scammers create pressure to force quick action. If someone claims there is a payout, problem or deadline, pause and verify it using a phone number or website you trust, not one they provide. It also helps to keep a short list of your financial institutions and their official contact details in one place. That way, you always know how to reach them directly without relying on incoming calls or messages.

INSIDE A SCAMMER’S DAY AND HOW THEY TARGET YOU

Finally, be cautious in real-time conversations. Scammers often build trust by collecting small details over multiple interactions. Keeping answers brief and avoiding unnecessary personal details makes it that much harder.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com

Get a free scan to find out if your personal information is already out on the web: CyberGuy.com

Kurt’s key takeaways

The first few months after losing a spouse bring enough decisions without adding fraud risks on top. Yet that is when your personal information spreads the fastest. Public records and data broker sites can quietly build a profile that scammers use against you. Early action makes a real difference. Limiting what gets published, removing existing data and securing your accounts all reduce your exposure. Even small steps, like updating security questions or freezing credit, can stop a scam before it starts. You do not need to handle everything at once. Start with a simple search of your name and review what appears. From there, take control at your own pace and protect what matters most.

If someone can piece together your personal life within days of a loss, how much of your information are you comfortable leaving online? Let us know by writing to us at CyberGuy.comCyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
• Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com.  All rights reserved.

Earlier this year, more than 25 million Americans began receiving letters from a company most of them had never heard of. The sender was Conduent Business Services, a contractor that processes benefits records and human resources data for state Medicaid programs, employer health plans and government agencies. Between October 2024 and January 2025, ransomware operators pulled names, Social Security numbers, dates of birth, home addresses, medical diagnosis codes and health insurance claim numbers out of Conduent’s systems. In February 2026, Texas Attorney General Ken Paxton called it the largest data breach in U.S. history.

The letters ended the way most of these letters end, with an apology, a phone number and an offer of one year of free credit monitoring. Once your data is already out, can you realistically protect your identity on your own, or has it become something most people are better off outsourcing?

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.

FAKE SSA EMAIL ALERT: SPOT THIS SCAM FAST

Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

What you can do for free today

Federal law and tools from the Federal Trade Commission cover more ground than many people realize. None of these cost anything. When used together, they close the most common entry points fraudsters target.

1) Freeze your credit

Start by freezing your credit at all three bureaus. A freeze blocks new accounts from being opened in your name. It has been free at Equifax, Experian and TransUnion since 2018. You can lift it temporarily when you need to apply for credit.

2) Get an IRS Identity Protection PIN

Next, get an Identity Protection PIN from the IRS at irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin. This six-digit code blocks fraudulent tax returns filed using your Social Security number. The IRS issues a new one each year.

3) Check your credit reports regularly

You should also check your credit reports regularly. Equifax, Experian and TransUnion now offer free weekly access through AnnualCreditReport.com. Checking once every few months can help you catch suspicious activity early.

4) Use IdentityTheft.gov for recovery

It also helps to bookmark IdentityTheft.gov. The site creates a personalized recovery plan, generates the affidavit creditors require and provides prefilled dispute letters.

5) Opt out of prescreened credit offers

Another simple step is opting out of prescreened credit offers. This removes you from mailing lists lenders use for unsolicited credit and insurance offers. You can do this online at OptOutPrescreen at optoutprescreen.com, which is run by the major credit bureaus. The process takes just a few minutes. Choose a five-year opt-out for a quick fix, or print and mail the form for a permanent opt-out. Once processed, you should see fewer “pre-approved” offers in your mailbox. 

6) Turn on two-factor authentication

Finally, turn on two-factor authentication (2FA) for every financial, government and benefits account. Even if someone steals your password, they cannot access your account without the second factor.

For many people, these steps create a strong baseline.

When DIY identity monitoring falls short

The do-it-yourself approach works until something goes wrong. That is where the gap becomes clear.

According to the Identity Theft Resource Center’s 2025 Consumer Impact Report, the average victim spent more than 200 hours and $1,343 out of pocket recovering from identity theft. About one in five reported losses above $100,000. Many also reported significant emotional stress.

The financial impact adds up quickly at a national level. A February 2026 report from the U.S. Senate Joint Economic Committee estimates identity theft tied to major data broker breaches has cost Americans more than $20 billion over the past decade. That estimate includes incidents like Equifax, Exactis, National Public Data and TransUnion.

Free tools also have clear limits. They will not monitor the dark web for your data or remove your personal details from data broker sites. They also cannot contact creditors or dispute fraudulent accounts on your behalf.

Instead, you handle every step yourself. IdentityTheft.gov gives you a roadmap, but you still have to make the calls, file the paperwork and follow up repeatedly.

SSA IMPERSONATION SCAMS ARE GETTING MORE PERSONAL

What paid identity protection services add

For anyone whose data was exposed in a breach like Conduent or National Public Data, free tools alone leave real gaps. That is where paid identity protection services come in.

These services run continuous scans for your name, Social Security number, email and bank accounts on the dark web, as well as across data broker and people search sites that resell your home address and family ties. They submit opt-out requests on your behalf and repeat the process when your information shows up again. When fraud happens, many services assign a case manager who works with credit bureaus, banks and creditors to help resolve the issue.

Some plans also include identity theft insurance and dedicated fraud resolution support, which can help cover certain losses and reduce the time it takes to recover.

Paid services have limits. No service can prevent every breach, and even the best monitoring only helps shorten recovery time. The do-it-yourself approach can still work if you are comfortable managing your own checklist. However, for families, for anyone already exposed in past breaches and for those who want less hands-on involvement, adding a paid service on top of free protections can make the process easier to manage.

See my tips and best picks on Best Identity Theft Protection at CyberGuy.com

Kurt’s key takeaways

Most people can handle the basics of identity protection on their own, at least at first. Free tools cover the biggest risks and help block common types of fraud. However, the situation changes once your data is exposed in a major breach. At that point, monitoring, cleanup and follow-up can turn into a long and frustrating process. That is where paid services can make a real difference. They reduce the workload, track exposure across more sources and step in when fraud happens. Still, no service eliminates risk completely. The decision comes down to how much time you want to invest and how much support you would need if something goes wrong. For many households, a layered approach works best. Start with the free protections, then decide if adding a paid service fits your situation.

If your identity were stolen tomorrow, would you have the time and patience to fix it yourself?  Let us know by writing to us at CyberGuy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

• Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
• For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
• Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com.  All rights reserved.