How Banks, the IRS, and Credit Bureaus Actually Find Out You Died
How the Social Security Death Master File works, why banks, the IRS, and credit bureaus all find out at different speeds, and why the gap between death and notification is the most exploited window in American identity fraud.
The Quietest Bureaucratic Race In America
There is a window after you die, somewhere between a few days and a few years long, when most of the institutions that hold your money, your debts, and your identity haven't been told yet. They go on assuming you're alive. Your direct deposits continue. Your auto-pays continue. Your credit cards remain in good standing. Your tax returns are still expected.
This window is the strangest period in any person's financial life, and almost nobody plans for it, because almost nobody knows it exists.
This post is a tour of how the institutions that mattered to you while you were alive actually find out you're gone. Some of it is faster than you'd guess. Most of it is much, much slower.
The Death Master File
The nominal answer to "how does America know you're dead" is a database called the Death Master File, or DMF, maintained by the Social Security Administration.
Every time the SSA receives a verified report of death — usually from a funeral director, sometimes from a state vital records office, occasionally from a family member — the deceased's Social Security number and date of death are added to the DMF. The DMF is then redistributed (with various tiers of access) to government agencies, banks, credit bureaus, insurance companies, and a long tail of other consumers.
This is the closest thing the US has to a national "this person is dead" registry. And it has three problems that show up over and over again in fraud cases.
It's slow. Funeral directors are supposed to file electronically within a few days, and most do. But the SSA's processing isn't instant, the state-level data sources are uneven, and the redistribution to downstream consumers is on a delay that can stretch from days to months.
It's incomplete. Around 2011, after a privacy backlash and a series of identity-theft scandals involving the DMF, public access to the file was sharply restricted. The full DMF still exists, but the public version (the "limited" DMF) lags the full version by three years for most names. Many smaller institutions only get the limited version.
It's wrong about a non-trivial number of people. Roughly 14,000 living Americans are erroneously added to the DMF each year. They find out when their checks bounce, their cards stop working, and their tax refunds get held.
The DMF is the backbone of how institutions find out you've died. It's also a system that grew up incrementally over decades, and it shows.
How the Banks Find Out
Banks have three primary channels.
First is the DMF, fed to them through services like LexisNexis Risk, FIS, or the credit bureaus. This is the slow channel — typically weeks to months from death to bank action.
Second is the family. A spouse or executor calls the bank, presents a death certificate, and the bank flags the account. This is the fast channel when it happens. Many estates don't manage to do it for weeks because nobody knows the bank existed.
Third is operational anomaly detection. Suddenly stopped direct deposits, dormancy patterns, returned mail — none of these are conclusive, but they trigger reviews that sometimes uncover the death indirectly.
The gap between channels matters. A determined fraudster who knows someone has died can drain accounts via Zelle, online transfer, or check-writing in the days or weeks before the DMF catches up. This is exactly the pattern that played out in the Greg Biffle case last year — fast access by someone with insider knowledge, slow response by every institution that should have caught it.
How the IRS Finds Out
The IRS is famously, structurally bad at knowing whether you're alive.
The nominal flow is: SSA tells DMF, DMF tells IRS, IRS updates its records and stops expecting returns from you. The actual flow has weeks of latency, and the IRS's records have a tendency to disagree with the DMF in inconvenient ways.
What this means in practice: a deceased person can file a tax return for the year of their death (their estate or executor files for them), and the IRS will often process it. But that same person's next year, attempted refunds in their name will start getting flagged, then frozen, then bounced. "Identity verification" letters arrive at the deceased's last address. Surviving spouses get caught in this regularly.
Going the other direction — when the IRS wrongly believes someone has died — recovery requires multiple in-person Taxpayer Assistance Center visits, a stack of identity documents, and weeks of waiting.
How the Credit Bureaus Find Out
The three major bureaus — Experian, Equifax, TransUnion — each receive death information from a mix of sources. The DMF, the SSA directly, creditor reports (the bank tells the bureau when an account is closed for deceased), and the Social Security Number Verification Service.
When a bureau marks a record deceased, it sets a flag on the file that, in theory, prevents new credit from being opened in that person's name. In practice, the flag's effectiveness depends on whether downstream lenders actually check it.
Some do. Some don't. Some do but only on hard pulls. This is part of why "deceased identity theft" — fraudsters opening accounts in the names of the recently deceased — remains a steady, profitable category for organized fraud rings. The deceased person isn't watching their credit. Their family doesn't know to. And the bureau flag isn't always honored.
The FTC has tracked this for years. The patterns are consistent. The window of greatest vulnerability is the first 90 days after death, when the death is in the system unevenly and nobody is actively monitoring.
Why The Gap Exists
If you step back and look at the whole system, the pattern is clear. The institutions that need to receive death information are competing with each other in how fast they process it, but the upstream signal is fundamentally limited by the speed at which a death certificate moves from a funeral home to a state vital records office to the SSA to the DMF.
That's a bureaucratic pipeline. It has manual steps. It has weekends. It has different processing speeds in different states. There is no real-time "someone died" signal in the American financial system, and there isn't going to be one anytime soon.
Meanwhile, your bank, your credit card, your auto-pay subscriptions, and your tax obligations all assume you're alive until they explicitly hear otherwise.
The gap is the vulnerability. The vulnerability is what fraudsters exploit. And the only practical defense available to most families is to close the gap from their own side: notify the institutions directly, in writing, with death certificates, as fast as humanly possible.
A digital estate plan that names every institution your family needs to contact — with account numbers, contact info, and instructions — can collapse the dangerous window from months down to days. Not because the bureaucracy moved any faster, but because your family didn't have to discover it from scratch under grief.
That's the actual reason planning matters. Not the bureaucracy. The race against it.
Killswitch closes the death-window from your side. A pre-loaded list of every institution your family needs to contact, encrypted at rest, delivered automatically when you stop checking in. The bureaucracy doesn't get faster — but your family does. Get started today