Securing or Memorializing a Deceased Person's Social Media Against Bereavement Scams¶

When a family member or close friend dies, their active social media profiles, email inboxes, and cloud storage accounts immediately become targets for organized cybercriminals. Scammers scrape public obituary notices and tribute posts within hours of a death to launch fraudulent funeral livestream links, duplicate GoFundMe campaigns, and account takeovers that exploit grieving friends and relatives. Knowing how to lock down a deceased loved one's digital presence, stop funeral scammers in real time, and submit official memorialization or permanent deletion requests protects both your loved one's legacy and their grieving community.

Uradi ovo sada¶

1. Do not log in using the deceased person's password to delete the account. Under computer crime and data privacy laws in many jurisdictions (including the Computer Fraud and Abuse Act in the United States and the Computer Misuse Act in the United Kingdom), logging into another person's account without explicit legal authorization can violate platform terms of service and trigger automated security lockouts that freeze the profile before you can download family photos.
2. Preserve physical access to the deceased person's smartphone and SIM card. Keep the deceased person's mobile phone charged and do not cancel their cellular phone service right away. If you deactivate their phone number, mobile carriers recycle and reassign that number within 30 to 90 days, allowing a stranger or identity thief to intercept SMS two-factor authentication (2FA) codes and hijack accounts.
3. Post an immediate bereavement scam warning on your own social media profile. Tag immediate family members and inform friends of the exact date, time, and physical location of the memorial service. State clearly that the family will never charge a fee or require credit card verification to watch a funeral livestream, and list the single verified link if a legitimate crowdfunding campaign exists.
4. Assign a trusted family friend to monitor tribute comments as a "digital usher." Scammers post fake livestream links and counterfeit fundraising pages in the comment sections of death announcements within minutes of publication. Having a designated friend hide, report, and block spam comments spares grieving next of kin from facing fraudsters on the day of the funeral.
5. Gather official documentation required by social media platforms. Locate a high-resolution scan or photograph of the official death certificate (or coroner's certificate, obituary link, or memorial program for temporary memorialization) along with proof of your authority as next of kin or estate executor (such as a birth certificate, marriage certificate, power of attorney, or letters testamentary).
6. Submit official Memorialization or Account Removal requests directly to each platform. Decide with your family whether you want the profile converted into a permanent memorial tribute (where the word "Remembering" appears next to their name and nobody can log in) or permanently deleted from the internet, then submit the verified request through each platform's dedicated bereavement portal.

flowchart TD
    Start["Death of a Loved One"] --> DeviceCheck["Secure Physical Phone and Keep SIM Active"]
    DeviceCheck --> ScamGuard["Post Public Warning Against Fake Funeral Livestreams and Crowdfunding"]
    ScamGuard --> Decision{"Family Decision: Memorialize or Delete?"}
    Decision -->|Preserve Profile and Photos as Tribute| MemCheck{"Does Platform Support Memorialization?"}
    MemCheck -->|Yes: Facebook, Instagram, LinkedIn, Apple| SubmitMem["Submit Obituary or Death Certificate via Memorialization Form"]
    MemCheck -->|No: X, TikTok, Snapchat, Pinterest| SubmitDeact["Download Public Media and Submit Verified Deactivation Request"]
    Decision -->|Permanently Remove Account| DocGather["Gather Certified Death Certificate + Proof of Legal Authority"]
    DocGather --> SubmitDel["Submit Official Bereavement Deletion Form to Platform"]
    SubmitMem --> LockCheck["Profile Locked: 'Remembering' Badge Added and Login Disabled"]
    SubmitDeact --> GoneCheck["Account Permanently Closed and Removed from Search"]
    SubmitDel --> GoneCheck

Understanding the post-mortem threat: how bereavement scammers operate¶

Cybercriminals use automated web scrapers to monitor online newspaper obituaries, funeral home websites, and public social media hashtags such as #RIP, #GoneTooSoon, #CelebrationOfLife, i #FuneralService. Within hours of a family posting a tribute or announcement, criminal syndicates launch four distinct attacks targeting the deceased person's social graph.

1. The fake funeral livestream credit card scam¶

This is one of the fastest-growing bereavement scams reported to the United States Federal Trade Commission (FTC), the United Kingdom's Action Fraud, and the Australian Competition and Consumer Commission (ACCC). - How the attack works: Scammers create a Facebook Page, Instagram profile, or Event page using the deceased person's stolen profile photograph and full name, followed by words like "Memorial Service Live Stream" or "Funeral Broadcast HD." - The ambush: Automated bot accounts reply to every grieving comment on the family's real announcement post, pasting a link to an external website or fake Facebook group claiming to broadcast the funeral live for friends and relatives who cannot attend in person. - The theft: When a mourner clicks the link during the actual hour of the funeral, the webpage displays a fake video player that asks the viewer to "Register for Free" or "Verify Your Identity with a Credit Card ($0.00 or $1.00 charge) to Watch the Broadcast." Victims who enter their card numbers have their accounts drained immediately or enrolled in recurring offshore subscription charges, while no livestream ever plays.

2. Cloned crowdfunding and fake memorial fund fraud¶

When a sudden death occurs, especially involving a young person, an accident, or a parent with young children, friends naturally look for ways to contribute to funeral expenses or a family support fund. - How the attack works: Fraudsters copy the exact text and family photographs from a legitimate obituary or real crowdfunding page and launch counterfeit campaigns on GoFundMe, Spotfund, PayPal Pools, or Venmo/CashApp handles using a nearly identical name. - The ambush: The scammers direct-message the deceased person's contacts list or reply to tribute posts asking for urgent donations to "cover remaining burial plot costs before Friday." - The defense: If the family creates an official memorial fund or charity donation link, every family member should share the exact same URL and state explicitly: "This is our family's only authorized memorial fund. Do not send money to any other link, CashApp tag, or direct message request."

3. Dormant account takeover ("ghost hijacking")¶

An unmonitored social media profile is an ideal target for account takeover because the rightful owner will never notice suspicious login alerts or password reset emails. - How the attack works: Attackers check leaked credential databases from historic data breaches to see if the deceased person reused a password across their email or social media accounts. Alternatively, if the family cancels the deceased person's mobile phone plan, the attacker waits until the phone number is reassigned or ports it to intercept SMS recovery codes. - The ambush: Once inside the deceased person's Facebook, Instagram, or X account, the scammer either quietly messages close friends asking for emergency loans or suddenly changes the profile picture and uses the trusted, years-old account to peddle cryptocurrency scams, fake event tickets, or malicious links. Seeing messages arrive from a recently deceased friend's profile causes severe emotional trauma to surviving loved ones.

4. Post-mortem identity theft ("ghosting")¶

Beyond social media, identity thieves harvest three key data points from well-meaning tribute posts and public profiles: the deceased person's full legal name (including middle name and maiden name), exact date of birth, and city of birth or residence. Combined with funeral home notices that list surviving parents' and spouses' names, criminals have enough personal identifiable information (PII) to apply for fraudulent credit cards, tax refunds, or government benefits before credit bureaus and government registries process the death certificate.

Obilježavanje nasuprot trajnog brisanja: odlučivanje šta je ispravno za vašu porodicu¶

Prije slanja službenih formulara na društvene mreže, okupite ključne članove porodice i izvršitelja ostavine kako biste odlučili da li svaki račun treba memorijalizirati ili trajno izbrisati. Nakon što se račun trajno izbriše, njegove fotografije, video zapisi, glasovne poruke i nizovi komentara ne mogu se vratiti nakon kratkog grejs perioda.

Postupci ožalošćenja od platforme do platforme: kako obilježiti ili zatvoriti račune¶

Velike tehnološke kompanije održavaju specijalizirane timove za žalovanje kako bi obradili zahtjeve preživjelih rođaka. Nikada se ne oslanjajte na općenite botove korisničke službe; koristite tačne tokove rada naslijeđa i memorijalizacije koji su detaljno opisani u nastavku.

1. Facebook (Meta)¶

Facebook nudi najsveobuhvatniji skup post mortem opcija, praveći razliku između Memorijalizacije (kojom upravlja Naslijeđeni kontakt ako je odabran prije smrti) i Trajnog uklanjanja za preminulu osobu.

Kako funkcioniraju Facebook memorijalizacija i naslijeđeni kontakti¶

• Kada Facebook obradi zahtjev za obilježavanje sjećanja, riječ Sjećanje pojavljuje se iznad imena preminule osobe.
• Niko se ne može prijaviti na glavni nalog, čak i ako zna lozinku.
• Ako je preminula osoba odredila Naslijeđeni kontakt u svom centru za metaračune prije smrti, taj naslijeđeni kontakt može:
• Napišite zakačenu objavu počasti na vrhu memorijalizovanog profila (na primjer, da podijelite detalje pogrebne službe ili provjerenu dobrotvornu vezu).
• Ažurirajte sliku profila i naslovnu fotografiju.
• Odgovorite na nove zahtjeve za prijateljstvo od starih poznanika koji traže profil.
• Preuzmite arhivu javnih objava preminule osobe, fotografija i informacija o profilu (ako je preminula osoba označila polje koje dozvoljava preuzimanje podataka).
• Zatražite trajno uklanjanje računa.
• Šta naslijeđeni kontakt NE MOŽE učiniti: Naslijeđeni kontakt ne može se prijaviti na originalni nalog, ne može čitati privatne Facebook Messenger poruke, ne može mijenjati ili brisati prethodne objave koje je pokojnik napravio i ne može ukloniti postojeće prijatelje.

Podnošenje korak po korak za Facebook¶

1. Za memorijalizaciju Facebook naloga: Pronađite obrazac Facebook centra za pomoć pod nazivom "Zahtjev za memorijalizaciju" (facebook.com/help/contact/651319028315841). Unesite ime profila preminule osobe, datum kada je preminula i otpremite skeniranu sliku ili link do službene osmrtnice, umrlice ili programa sahrane.
2. Da biste trajno uklonili Facebook račun preminule osobe: Pronađite obrazac Facebook centra za pomoć pod nazivom "Poseban zahtjev za račun zdravstveno nesposobne ili preminule osobe" (facebook.com/help/contact/228813257197480). Morate otpremiti:
3. Dokaz da ste član uže porodice ili pravni izvršilac (izvod iz matične knjige rođenih, venčani list, punomoćje ili poslednja volja).
4. Službena umrlica umrle osobe (ili nekrolog/spomen-kartica u kombinaciji sa dokazom o ovlaštenju).
5. ** Odmah zaustavljanje uspomena i podsjetnika na rođendan koje su generisala umjetna inteligencija:** Obilježavanje računa automatski zaustavlja Facebook da šalje obavještenja "Poželite [Ime] sretan rođendan" na njihovu listu prijatelja.

2. Instagram (Meta)¶

Instagram podržava memorijalizaciju naloga i verifikovano uklanjanje za članove uže porodice, iako trenutno ne dozvoljava nasleđenom kontaktu da upravlja ili dodaje nove objave u memorijalizovanu Instagram mrežu.

Kako funkcionira Instagram memorijalizacija¶

• Riječ Sjećanje nalazi se pored imena preminule osobe na njenom Instagram profilu.
• Svi pristupi za prijavu su trajno onemogućeni, štiteći nalog od hakera i imitatora.
• Postojeći postovi, koluti i fotografije profila ostaju vidljivi publici s kojom su podijeljeni, a postavka privatnosti računa (javna ili privatna) je trajno zaključana.
• Memorijalizirani Instagram nalozi se ne pojavljuju na kartici Istraži ili prijedlozima naloga.

Podnošenje korak po korak za Instagram¶

1. Za memorijalizaciju Instagram naloga: Pošaljite zvanični obrazac na "Zahtjev za memorijalizaciju Instagram računa" (help.instagram.com/contact/452224988254813). Navedite puno ime osobe, Instagram oznaku (@username), datum smrti i link do osmrtnice, novinskog članka ili fotografije smrtovnice.
2. Da biste uklonili Instagram račun preminule osobe: Pošaljite službeni obrazac na "Zahtjev za uklanjanje računa preminule osobe na Instagramu" (help.instagram.com/contact/1474899482730688). Morate obezbijediti:
3. Izvod iz matične knjige rođenih umrle osobe ili zvanična umrlica.
4. Dokaz prema lokalnom zakonu da ste član uže porodice (roditelj, supružnik, brat, sestra, dijete) ili ovlašteni predstavnik njihove imovine.

3. X (bivši Twitter)¶

X ne nudi funkciju obilježavanja sjećanja i nikada neće odobriti pristup za prijavu na račun bez obzira na vaš odnos s pokojnikom. Umjesto toga, X dozvoljava provjerenim članovima uže porodice ili izvršiocima imovine da zatraže trajno deaktiviranje i uklanjanje profila preminulog korisnika.

Podnošenje korak po korak za X¶

1. Prije nego što zatražite deaktivaciju, ručno sačuvajte sve javne objave, fotografije ili video niti s profila koje vaša porodica želi zadržati, jer ih deaktivacija trajno briše.
2. Idite na obrazac za privatnost X centra za pomoć (help.x.com/forms/privacy) i odaberite "Želim zatražiti deaktivaciju računa preminulog ili nesposobnog korisnika."
3. Obezbedite @username preminule osobe i vaše kontakt podatke.
4. Nakon što pošaljete početni obrazac, X-ov tim za povjerenje i sigurnost će vam e-poštom poslati upute za učitavanje tri obavezna dokumenta:
5. Kopija službene umrlice umrle osobe.
6. Kopija vaše osobne karte sa fotografijom koju izdaje državni organ (kao što je vozačka dozvola ili pasoš).
7. Potpisana izjava koja uključuje vaše ime i prezime, adresu e-pošte, trenutne kontakt podatke, vaš odnos s preminulim korisnikom i traženu radnju ("Deaktivirajte ovaj račun").

4. LinkedIn¶

Budući da se LinkedIn profili pojavljuju visoko u rezultatima pretraživača i primaju automatske zahtjeve za povezivanje, poruke za zapošljavanje i obavještenja "Čestitam [ime] na godišnjici rada", ostavljanje profila preminulog profesionalca može izazvati bolnu konfuziju za kolege i porodicu. LinkedIn nudi i Memorijalizaciju i Zatvaranje naloga.

Podnošenje korak po korak za LinkedIn¶

1. Prije otvaranja obrasca prikupite sljedećih pet informacija:
2. Puno ime člana i tačan URL njihovog LinkedIn profila (linkedin.com/in/...).
3. Vaš odnos prema preminulom članu.
4. E-mail adresa člana (ako je poznata), datum smrti i naziv posljednje kompanije u kojoj su radili.
5. Link do službene osmrtnice ili PDF skeniranog izvoda iz matične knjige umrlih.
6. Pravna dokumentacija koja pokazuje da ste ovlašteni djelovati u ime preminulog (ako želite trajno zatvoriti račun umjesto da ga obilježite).
7. Ako imate zakonska ovlaštenja da djelujete u ime imovine: Pošaljite LinkedIn obrazac za pomoć "Spomenite ili zatvorite račun preminulog člana" (linkedin.com/help/linkedin/ask/ts-rdmlp). Možete odabrati ili Memorializirati (što stavlja značku "U sjećanje" ispod njihovog naslova, zaključava pristup za prijavu i zaustavlja sve upite za radnu godišnjicu/rođendan) ili Zatvori račun (što trajno sakriva i briše profil).
8. Ako ste kolega, prijatelj ili kolega iz razreda bez imovinskih dokumenata: Pošaljite LinkedIn obrazac za pomoć "Prijavite preminulog člana LinkedIn-a" (linkedin.com/help/linkedin/ask/ts-rmdmlp) sa vezom na javnu nekrologu. LinkedIn će sakriti profil od javnog pretraživanja i zaustaviti obavještenja dok će zaštititi račun dok se članovi porodice ne jave.

5. TikTok, YouTube (Google), Apple i Snapchat¶

Pravna pravila za prijavu na račune preminule osobe¶

Kada voljena osoba umre i ostavi bilježnicu sa lozinkama na svom stolu, instinkt većine preživjelih supružnika, roditelja ili djece je da se prijave direktno na svoju e-poštu i račune na društvenim mrežama. Iako je razumljivo, to sa sobom nosi tri praktična i pravna rizika koje biste trebali pažljivo odmjeriti.

1. Automatsko blokiranje prijevara i zamrzavanje računa¶

Moderne platforme društvenih medija i provajderi e-pošte koriste algoritme za sigurnost ponašanja. Ako se prijavite na nalog preminule osobe iz druge kuće, novog računara ili nove Wi-Fi mreže i odmah počnete da preuzimate arhive, mijenjate adrese e-pošte ili prekidate vezu platnih kartica, automatizirani odbrambeni sistem platforme označava sesiju kao neprijateljsko preuzimanje računa. Platforma će odmah zaključati račun i zahtijevati live biometrijski video selfi ili provjeru sigurnosnog ključa koja se više ne može završiti.

2. Uništenje imovine ili pravnog dokaza¶

Ako je osoba umrla od posljedica sudara motornog vozila, nesreće na radnom mjestu, medicinske nesavjesnosti ili sumnje na zločin, ili ako postoji bilo kakav potencijalni spor oko njihove volje ili imovine, prijavljivanje na njihove račune mijenja digitalne metapodatke (vremenske oznake "posljednje prijave" i potvrde o čitanju). Advokati odbrane ili ostavinski sudovi mogu osporiti autentičnost poruka ili finansijskih zapisa ako se neko prijavio nakon smrti.

3. Zakonski zakoni o fiducijarnom pristupu (RUFADAA i globalni ekvivalenti)¶

• U Sjedinjenim Državama: Gotovo svih 50 država usvojilo je Revidirani zakon o jedinstvenom fiducijarnom pristupu digitalnoj imovini (RUFADAA). Prema RUFADAA, troslojna pravna hijerarhija određuje ko može pristupiti digitalnim računima preminule osobe:
• Tier 1 (Online Alati): Instrukcije koje je korisnik postavio direktno unutar službenog naslijeđenog alata platforme (kao što je Facebookov Legacy Contact, Googleov Inactive Account Manager ili Appleov Digital Legacy Contact) pravno nadjačavaju konfliktne upute u papirnoj oporuci.
• Tier 2 (oporuka, povjerenje ili punomoćje): Ako korisnik nije koristio online alat, izričito ovlaštenje napisano u njegovoj Last Will and Testament ili Living Trust određuje da li izvršitelj može pristupiti sadržaju njihove elektronske komunikacije.
• Tier 3 (Terms of Service): If neither an online tool nor a will mentions digital assets, the platform's Terms of Service govern, which usually grant the executor a "catalog" of communications (who emailed whom and when) or account closure, but not the private content of messages without a court order.
• In the United Kingdom, Canada, European Union, and Australia: Data protection laws (such as the UK/EU General Data Protection Regulation, which generally ceases to apply to deceased individuals in the UK and most EU member states except where national laws specify posthumous rights, such as France's Loi pour une République numérique or Italy's Privacy Code) interact with national probate and computer misuse statutes. Estate executors who holds formal Grant of Probate or Letters of Administration should always use the platform's official fiduciary request channels rather than covertly guessing passwords.

Copy-and-paste scripts to protect your family from bereavement scams¶

Koristite ove šablone spremne za dijeljenje na dan smrti kako ožalošćeni rođaci ne bi morali ispočetka sastavljati sigurnosna upozorenja.

Script 1: Public bereavement scam warning (to include at the bottom of your funeral announcement post)¶

Important security note for friends and family: Scammers routinely create fake profiles and post fraudulent livestream links on funeral announcements. Please know that our family will never ask you to enter a credit card number, pay a fee, or register on an external website to view [Name]'s memorial service. If anyone sends you a friend request pretending to be [Name] or posts a comment with a livestream or donation link that does not come directly from [Name of Verified Family Member / Official Funeral Home Website], please do not click it. Report and block the profile immediately.

Script 2: Instructions for your designated "digital usher" (family friend moderating comments)¶

"Thank you for helping our family guard [Name]'s tribute posts this week. Could you please check the comments on our announcement posts every couple of hours, especially on the morning of the service? If you see any comment from an unknown account saying 'Watch the funeral live here' or pasting a link to a site or Telegram/Facebook group, please take a screenshot, click Hide comment or Delete comment immediately, and report the commenter for scam/impersonation."

Script 3: Formal letter to request closure of smaller online accounts without bereavement webforms¶

Subject: Formal Notification of Death and Account Closure Request: [Full Legal Name of Deceased]

To the Privacy, Trust & Safety, and Bereavement Team,

I am writing as the [surviving spouse / parent / adult child / court-appointed executor of the estate] of [Full Legal Name of Deceased], who passed away on [Date of Death].

Please accept this formal request to permanently close their user account associated with the username/handle [Username/URL] and the email address [Deceased's Email Address], and to cancel any recurring subscriptions associated with this profile.

Attached to this message are: 1. A copy of the official Certificate of Death (with sensitive national identification numbers redacted). 2. Documentation verifying my legal relationship and authority to act on behalf of the deceased ([Marriage Certificate / Birth Certificate / Letters Testamentary]).

S poštovanjem, [Your Full Name] [Your Relationship to the Deceased] [Your Phone Number and Mailing Address]

Complete post-mortem digital security checklist¶

Work through this checklist over the first 14 to 30 days after a loved one's passing:

• Secure physical devices: Place the deceased person's smartphone, tablet, laptop, and any hardware security keys in a locked drawer or safe inside the executor's home.
• Check for a digital legacy binder or password manager emergency kit: Look in their home safe or filing cabinet for a printed 1Password Emergency Kit, Bitwarden recovery sheet, Apple Legacy Contact Access Key, or written list of recurring bills.
• Keep the primary email inbox and mobile SIM card active during probate: Do not close their Gmail, Outlook, or iCloud email or cancel their cell phone number until all bank accounts, tax filings, utility accounts, and social media closures are finalized (typically 6 to 12 months). You can downgrade the mobile plan to the lowest voice/text tier to save money while keeping the phone number under family control.
• Audit bank and credit card statements for recurring digital subscriptions: Check the last 3 months of bank and credit card statements (plus Apple App Store, Google Play Store, and PayPal recurring billing) to identify and cancel streaming services, cloud storage, Patreon memberships, and software subscriptions.
• Notify the major credit bureaus to place a "Deceased Alert" and credit freeze: In the United States, send a certified copy of the death certificate to Equifax, Experian, and TransUnion requesting an immediate "Deceased, Do Not Issue Credit" flag on their credit file. In the United Kingdom, use the Death Notification Service (deathnotificationservice.co.uk) and notify Experian, Equifax, and TransUnion UK. In Canada, notify Equifax Canada and TransUnion Canada.
• Memorialize or close major social media accounts: Submit verified forms for Facebook, Instagram, LinkedIn, X, TikTok, Pinterest, and Snapchat after saving public family photos.
• Pre-plan your own accounts today: Open your settings on Facebook/Instagram (Accounts Center > Personal Details > Account Ownership and Control > Memorialization), Apple (Settings > [Your Name] > Sign-In & Security > Legacy Contact), and Google (myaccount.google.com/inactive) to designate a trusted Legacy Contact.

Često postavljana pitanja¶

Izvori provjereni¶

• Federal Trade Commission (FTC, United States): Consumer Advice on Scammers Targeting Grieving Families, Fake Funeral Livestreams, and Closing Accounts After a Death.
• Meta Platforms (Facebook and Instagram Help Centers): Memorialized Accounts, Legacy Contact Permissions, and Requesting Account Removal for a Deceased Person.
• Google Account Help (International): Inactive Account Manager and Submitting a Request Regarding a Deceased User's Account.
• Apple Support (International): How to Add a Legacy Contact for Your Apple ID and Request Access to a Deceased Family Member's Apple Account.
• LinkedIn Help and X Help Center: Memorializing or Closing the Account of a Deceased LinkedIn Member and Deactivating a Deceased User's X Account.
• Uniform Law Commission (United States): Revised Uniform Fiduciary Access to Digital Assets Act (RUFADAA) Summary and Fiduciary Hierarchy.
• National Cyber Security Centre and Action Fraud (NCSC, United Kingdom): Bereavement Impersonation Fraud and Protecting Digital Identities After Death.

Povezani vodiči¶

• Social media account takeover and hacking
• Social media phishing and impersonation scams
• Uznemiravanje na mreži, doxxing i cyber maltretiranje
• Reporting illegal and harmful content
• Porodični plan za hitne slučajeve
• Brojevi za hitne slučajeve