Warning over chilling new ‘grief harvesting’ scam as experts urge Facebook users to make important settings change today

BRITS have been warned about a worrying new trend of “grief harvesting” scams as Facebook users are urged to make an important setting change today.

Cybersecurity experts at NordVPN say heartless fraudsters are targeting the recently bereaved to steal personal data.

2

Scammers are harvesting information from social media accounts and then sending convincing phishing emails pretending to be a funeral home or fake charities.

The experts at NordVPN say people should plan ahead as to what will happen to your data after you die.

While the General Data Protection Regulation (GDPR) offers strong protections for personal data while individuals are alive, but its application after death is less clear.

Fraudsters exploit this legal grey area to target grieving families in the UK.

They scour social media obituaries and public profiles for information about the deceased, then personalise scams to exploit emotions.

NordVPN has researched the most common types of bereavement scams Brits need to be aware of:

Identity Theft

Using gleaned personal details, scammers can steal the identities of the deceased or grieving loved ones, racking up debts or accessing financial accounts.

There are two main ways that criminals will do this.

When someone dies, families may choose to keep their social media accounts live for memories.

However, if they are public profiles it can present an opportunity to harvest personal data.

Social media platforms – such as Facebook – offer memorialisation options that allow families to keep an account alive but have “remembering” before their name.

This form of data ownership after a person passes away remains a complex issue.

Companies can potentially retain your information and use it for advertising, even after you’re gone.

Obituaries, tributes, and even seemingly harmless posts can reveal names, birthdates, locations, and even details about the deceased’s work or hobbies.

Scammers may also acquire information through data breaches of companies or institutions the deceased or their loved ones have interacted with.

This could include addresses, phone numbers, or even financial details.

Using stolen details like name, date of birth, address and financial information, hackers may attempt to open new loans or credit cards in the deceased’s name.

Bogus Charities

One of the most common types of scams we see is when grieving families are approached by bogus charities offering support.

You may receive communications from a bogus charity that has a name similar to a charity that already exists. 

Phishing emails or social media messages may also impersonate charities set up in the deceased’s name, soliciting donations.

If your loved one was involved in charity, transfer over the details to your name if you want to carry it on and verify that any emails or calls you receive from a charity are genuine.

Emotional Manipulation

Scammers are not above preying on grief, and some of the more unusual bereavement scams involve emotional manipulation.

You may be approached on social media or by email by someone posing as a psychic offering messages from beyond.

What is even more distressing is a type of scam where the criminal will attempt to impersonate the deceased themselves, requesting money or personal information from people that may not realise they have passed.

Commenting on these alarming types of bereavement scams, Marijus Briedis, a cybersecurity expert at NordVPN advises people about how to stay alert to the tactics used by criminals:

Marijus said: “There is no depth that scam artists won’t sink to in order to take advantage of people for their own financial gain.

“Sophisticated fraud networks operate around the world and they are waiting to get hold of your data, even after you die.

“After someone’s death, their loved ones are tasked with handling paperwork like bills, pensions, and legal documents.

“However, closing social media accounts can be an additional burden.”

A NordPass study found that only a third – 36 per cent –  of online platforms provide clear instructions for handling deceased users’ accounts.

The study also found that to verify your authority and the deceased’s passing, an overwhelming amount of documentation is typically required, potentially exceeding 20 different documents across all accounts.

Marijus added: “Bereavement scammers are well aware of the legwork you will have to go through and will look to impersonate any of these companies claiming to want to help make your life easier.

“Death notices are often published online now, rather than exclusively in a newspaper, and this means that information about someone passing away is available to the public, including cybercriminals. Seeing one of these go live presents an opportunity for malicious users to pounce.

“If you can’t face deleting the online memories you have with a loved one, consider accessing their account to remove unnecessary personal details such as phone numbers and email addresses which could be exploited.

“While it may not be a pleasant subject to speak to our families about, it may also be worth having a think about what you would want to happen to your personal data after you pass.”

Marijus Briedis’ top five tips on how to prevent falling victim to bereavement scams:

1. Protect your personal information: Minimise the amount of personal information you share publicly online, especially on social media. Be mindful of what details you include in online obituaries.
2. Communicate with loved ones: Discuss your digital legacy with family members and consider appointing someone to manage your online accounts after you’re gone. Educate loved ones about bereavement scams and how to identify them.
3. Be cautious with unsolicited contact: Don’t respond to unexpected emails, calls, or social media messages, especially those pressuring immediate action or donation. Verify communication by reaching out directly to the supposed organisation using official contact details.
4. Be wary of emotional appeals: Scammers exploit grief. Don’t let emotions cloud your judgement. If a message or call is pressuring you to donate or act immediately, it’s likely a scam. Legitimate charities understand the need for time to process a loss.
5. Report suspicious activity: If you suspect a scam, report it to the relevant authorities. This empowers others to be aware and helps shut down fraudulent operations.

2