• April 9, 2021

Tombstone Fraud

Tombstone Fraud

Tombstone Fraud 1080 654 Data Zoo

Author Sara Singh Tak, Data Zoo Marketing Specialist

Identity theft is one of the most prevalent crimes being relatively cheap and easy to obtain. Criminals use one of two approaches to obtaining a fake identity: create a new fictitious record or stealing personal information from another person (living or deceased). In this blog, we will be discussing the latter of the two, and specifically, the use of a stolen deceased identity.

Death of a loved one is a tragic time and with it comes the added worry of identity theft. In recent times, identity theft of the deceased, also known as “tombstone theft” or “ghosting”, has been a rising concern. Ghosting occurs when a deceased individual’s personally identifiable information is stolen to commit fraudulent acts such as account takeover, taxpayer ID theft and tax refund fraud, medical ID theft, driver’s license ID theft, or to apply for new credit cards and loans, and even to secure employment, utility services or telecommunications services

A National Identity Crime and Misuse Measurement Framework Pilot run by the Australian Attorney-General Department estimates the economic impact of identity crime in Australia is likely to exceed $1.6 billion dollars per year. It can take up to six months before government organisations and institutions are updated on the death of an individual, providing thieves ample opportunity to exploit this time lag to acquire and use the deceased’s identity. To prevent the reputational and financial costs that arise from tombstone theft, institutions and organisations can apply measures to prevent the use of stolen deceased’s identity from occurring.

Data Zoo can now help protect companies from identity theft cases based on deceased individual data. We are an approved Data Service Broker for the Australian Death Check – a new data cleansing service that is the only official source of national death data for Australia. The Australia Death Check service, administered by the Queensland Registry of Births, Deaths and Marriages, has access to more than 3 million Australian death records, which are updated daily. It often takes up to six months for organisations to be notified of a death, and fraudsters use this gap to apply online for credit cards, apply for loans and apply for mobile phones or other services. The fraudsters may obtain a deceased person’s required details from various sources, including a funeral announcement published in a newspaper.

But first; it is important to understand how the identity of a deceased person can be obtained…

Acquisition of fraudulent identity:

As the regulations for identity theft become tighter, fraudsters find new ways of committing crimes, always looking for an opportunity that opens up to them. The relative ease and low cost of stealing the identities makes this one of the most prevalent types of fraud.  Criminals can obtain Personal Identifying Information (PII) from a wide range of source documents such as bank statements or utility bills that are discarded into the rubbish, from malicious hacking of databases containing PII (data breaches), simply be made up (i.e. identity fabrication), or where criminals take over the identities of people who are deceased (known as ‘Tombstone Fraud’).

Even publishing a funeral announcement in a newspaper or open forum needs to be approached with caution as this is a public platform where thieves can gather information. The details mentioned on a deceased’s tomb can be used against them, making it an absolute necessity for organisations to conduct a deceased check to avoid criminal actions being conducted in the name of the dead. Document Verification Service (DVS) have announced their real time updated deceased data for all states and territories of Australia.

Registries of births, deaths and marriages (RBDM)

When a birth, death, or marriage occurs in Australia, the event and the parties involved are registered with the relevant RBDM of all the states and territories. The details are recorded on the appropriate certificate. These certificates are relied upon as documentary evidence of both the commencement of identity (i.e. birth certificates) and of changes to identity details over time (i.e. marriage and change of name certificates) as well as the end of an identity (death of the person). But most government agencies and private sector organisations do not have arrangements in place to notify the relevant RBDM when they detect a certificate that is suspected to be fraudulent. Therefore, it is likely that RBDMs are not notified of the majority of incidents involving fraudulent versions of their certificates.

Prevention

Fraud Indicator as part of the Customer Onboarding Process:

Organised crime rings are known to use deceased records to fraudulently open credit card accounts, apply for loans, apply for mobile phones, and collect tax returns. Financial institutions, telecommunication companies, and government agencies can use deceased checks at account opening stage to verify and ensure they are not dealing with a potential fraudster who might be committing tombstone fraud

Improve Communications for Charities and All Marketing Services:

Organisations involved in marketing activities can prevent the distress caused to families of the deceased when communications are addressed to the late relative, by checking their databases against the national deaths register. Any organisation that is looking to send information to its customers and members can utilise this service including financial institutions, superannuation funds, and charitable organisations.

Account Monitoring:

Banking, superannuation, and financial services industries can utilise the death checks service as part of ongoing account monitoring to ensure customer and member details are up-to-date. Use cases include superannuation funds or financial institutions verifying an individual is deceased if a person calls to close the deceased’s account. Institutions that charge “fees for no service” can use this service to ensure no fees are charged to the deceased; a high-profile use case of this “fees for no service” to customers, including the deceased, emerged as one of the biggest scandals from the Australian Royal Commission into misconduct in the banking, superannuation, and financial services industry.

Many of the methodologies used by criminals to commit identity crimes are widely available from open sources. Some of these methodologies seek to exploit vulnerabilities in Australia’s identity infrastructure that have been known for more than 15 years. In most cases, tombstone fraud could be prevented through checks against death records whenever an application for an identity credential is lodged. DVS has launched real-time systems across Australia to make these checks more widely available that is updated daily being the most concise and accurate information to confirm the authenticity of someone’s death. Data Zoo is a key player in the Australian market providing death checks for preventing tombstone fraud – an approved Data Service Broker for the Australian Death Check.

tombstone fraud protection steps,
deceased identity theft prevention

Why you should conduct an Australian Death Check with Data Zoo


Data Zoo is the best solution for any organisations with AML/KYC obligations. With access to more than 5 billion individuals globally, we are the leading Asia Pacific provider – covering over 95% of the population. Instantly verify your customers through reliable and independent data sources & meet all compliance requirements. If you would like to learn more, please contact us here.

    Contact Us

    Simply fill out the form below, and a team member will get back to you shortly.

      Book a Meeting

      Conferences are an opportunity to learn from experts, contribute to a global conversation, and grow your personal network. Meet us at our next conference.

        Join our Newsletter

        We'll keep you up to date with Data Zoo news. No spams here.

        Privacy Preferences

        When you visit our website, it may store information through your browser from specific services, usually in the form of cookies. Here you can change your Privacy preferences. It is worth noting that blocking some types of cookies may impact your experience on our website and the services we are able to offer.

        Click to enable/disable Google Analytics tracking code.
        Click to enable/disable Google Fonts.
        Click to enable/disable Google Maps.
        Click to enable/disable video embeds.

        Our website uses cookies, mainly from 3rd party services. Define your Privacy Preferences and/or agree to our use of cookies.