The obituary your staff carefully wrote and published — the one the family approved with tears in their eyes — is now a prospecting list. Data brokers scrape death notices in real time. Scammers buy that data and start dialing widows before the burial is over. Sometimes they impersonate your funeral home. Sometimes they show up at the family’s empty house during the service.
This is not a hypothetical. It is a documented, repeating pattern that has cost grieving families money, security, and peace of mind. And when it happens, the family’s first thought is often about the place that published the obituary.
If you’re acquiring a funeral home, you are inheriting whatever data exposure practices the previous owner built. This guide tells you what’s happening, what to change, and how to protect your families before a scam becomes a reputation problem.
The Scam Playbook: How Criminals Use Your Obituaries
Step 1: Automated Harvesting
Obituary websites — including funeral home websites — are among the most consistently scraped sources on the internet. Data brokers run automated scripts that pull names, ages, addresses, family relationships, and service times the moment a new obituary is indexed. Many of these brokers operate legally. They compile the data and sell it in bulk to marketers, insurers, and anyone else willing to pay.
Some of those buyers are criminals.
Step 2: The Insurance Scam Call
The widow receives a call within days — sometimes hours — of her husband’s death. The caller claims to be from an insurance company or a “final expense” administrator. They say her husband had an unclaimed policy. All they need is her Social Security number and bank routing number to process the benefit.
AARP has documented this pattern extensively and considers obituary-sourced fraud one of the most prevalent forms of elder financial exploitation in the country. The caller knows the deceased’s name, approximate age, and sometimes the funeral home’s name — all pulled directly from the published notice.
Step 3: Funeral Home Impersonation
Some scammers call families claiming to be from the funeral home. They say there’s an outstanding balance, a problem with the death certificate, or a change to the service arrangements. They request payment over the phone or updated personal information to “complete paperwork.”
The family has no reason to be suspicious. The caller knows details only the funeral home would know — because those details were in the obituary.
Step 4: Home Burglaries Timed to Services
This one is straightforward and brutal. The obituary publishes the date, time, and location of the funeral service. That tells a burglar exactly when the family home will be empty and for how long. Secure Aging has documented this tactic and it is far more common than most funeral professionals realize.
Neighboring homes are also targets — the published address tells thieves what block to work.
Step 5: Identity Theft of the Deceased
The deceased’s full name, date of birth, former address, and sometimes Social Security number (found in public records the obituary links to) are enough to open fraudulent credit accounts, file false tax returns, or claim government benefits. Experian notes that “ghosting” — using a deceased person’s identity — is a fast-growing form of fraud, and obituaries are the primary sourcing mechanism.
The family often doesn’t discover this for months. When they do, they remember where the information was published.
What Obituaries Should Stop Including
Most funeral homes inherited obituary templates from a previous era when the notices were printed in the local paper, read once, and discarded. That context no longer exists. A published online obituary is a permanent, indexed, searchable record.
Here’s what to remove from your standard template:
Exact Date of Birth
Use the year only, or omit entirely. The full date of birth — month, day, year — is one of the two core identifiers used in identity theft. Combined with the deceased’s name and former address (often both in the obituary), it’s enough to pass identity verification at most financial institutions.
Year of birth gives families the context they want (“he was 74 years old”) without handing criminals a key.
Home Address
Do not publish the residential address. The city and state are sufficient for context. The street address tells burglars where the family lives and tells identity thieves where to search for associated records.
Some obituary templates still include this as a default field. Check your platform settings and remove it.
Maiden Name
The mother’s maiden name is the second core identifier in identity theft verification. Publishing a woman’s maiden name — whether as the deceased or as a surviving family member — is a security risk. If the family wants to honor a lineage or acknowledge a family name, there are ways to do it without using the exact maiden name as a standalone data point.
Exact Service Times and Locations
Publish service details after the fact, or restrict access. A simple operational change: instead of publishing “Services will be held Tuesday at 2:00 PM at 4312 Oak Street,” post “Services have been held privately” or “A memorial was held on Tuesday.” For families who want to share information in advance, offer a private link or password-protected page.
This directly addresses the burglary risk. It also reduces the number of uninvited attendees at services.
The Consent Problem
Most families don’t know any of this. They’re in the worst week of their lives, trusting your staff to handle the details. When your arranger presents the obituary draft for approval, families are not thinking about data security — they’re thinking about whether the wording captures who their person was.
The consent gap is your responsibility to close. Families cannot make informed decisions about what to include if no one explains the risks. That’s your job now.
Online Obituaries Live Forever
Print obituaries expire. Online obituaries don’t. Your website’s obituary archive — and every third-party platform (Legacy.com, Dignity Memorial, etc.) that syndicates your notices — retains that data indefinitely. The harvesting doesn’t stop after the funeral. Data brokers re-scrape constantly.
For older obituaries already published with full personal details, you have options: edit the live pages to remove sensitive fields, or add noindex tags to prevent future indexing. Neither is perfect, but both reduce ongoing exposure.
The Arrangement Conference Intervention
The arrangement conference is your best opportunity to protect families. It’s also where you build the trust that generates referrals and reviews. A three-minute security conversation is not a burden — it’s a differentiator.
See also: the arrangement conference process for a full overview of what happens in this meeting and what new owners need to know.
The Three-Minute Security Segment
After you’ve covered the core arrangements and before you move to obituary content, add this to your script:
“Before we write the obituary together, I want to take a few minutes to share something we tell every family. Obituaries published online can be accessed by scammers who target people who’ve recently lost a loved one. We’ve made some changes to what we include — and don’t include — in our notices to protect you. I’ll walk you through those in a moment. I also want to give you a one-page handout that explains what to watch out for in the coming weeks.”
That’s it. You’ve set the context. Now lead the family through the protected template.
The One-Page Handout
Create a single-page document (print and PDF) that covers:
- Fraud alert: What scam calls look like and what to do (“We will never call you asking for payment or personal information after the arrangement conference.”)
- Identity protection steps: Contact the three credit bureaus to place a fraud alert on the deceased’s account. Contact the Social Security Administration.
- Home security reminder: Ask a neighbor or family member to stay at the house during services. Don’t publish service times publicly.
- FTC resources: The FTC’s identity theft resource center has step-by-step guidance for families dealing with fraud.
- Your direct contact: If they receive a call claiming to be from your funeral home asking for payment or information, they should call your direct number to verify before responding to anything.
This handout costs nothing to produce and creates significant goodwill. Families remember it. They tell other people about it.
Document Family Choices
When a family asks to include information you’ve flagged as a risk — exact DOB, home address, service times — document it. Have them initial the obituary draft indicating they were informed of the risks and chose to include the information. This protects you if the family later attributes a scam to the published obituary.
Technical Safeguards for Your Online Obituary Platform
Operational changes reduce exposure. Technical changes reduce harvesting. You need both.
Rate Limiting and CAPTCHA
Automated scrapers make hundreds of requests per minute. A well-configured rate limiter on your website will slow or block most harvesting bots without affecting normal visitors. CAPTCHA on obituary search and detail pages adds another layer.
If you’re on a platform like Tribute Technology, OGR, or a custom site, ask your vendor explicitly: “What anti-scraping protections do you have on obituary pages?” If they can’t answer specifically, push for it. Tribute Technology’s guidance on obituary spam reporting is a useful starting point for vendor conversations.
Time-Delayed Publication
Consider a publication delay of 24-48 hours on new obituaries. This gives the family time to notify close friends and relatives privately before the notice is publicly indexed. It also disrupts the immediate harvesting window when the data is most valuable to scammers targeting the acute grief period.
Not every family will want this. Offer it as an option.
Structured Data and Indexing Control
If your obituary pages use structured data markup (Schema.org Person type), review what fields are being published in that markup. Search engines and scrapers use structured data to extract clean, machine-readable information. Removing sensitive fields from structured data doesn’t affect how the page looks to visitors but does reduce automated extraction.
Add <meta name="robots" content="noindex"> to individual obituary pages where families have requested privacy. For high-traffic obituary archives, consider noindexing the archive index pages while keeping individual pages accessible via direct link.
Google Alerts Monitoring
Set up Google Alerts for your funeral home’s name combined with terms like “scam,” “fraud,” and “complaint.” This gives you early warning if your name is being used in impersonation schemes. It takes five minutes to set up and runs automatically.
Also set alerts for recent high-profile decedents whose families may be active targets.
Reporting Scams and Spam
When families report scam calls or fraud attempts that reference your funeral home’s name or the deceased’s obituary, document it and report it. The FTC’s reporting portal is the primary federal channel. State attorneys general offices often have elder fraud units that track patterns.
Reporting matters for two reasons: it creates a paper trail that protects you, and it contributes to the pattern data that leads to enforcement actions.
The Due Diligence Angle: What the Target’s Obituary Practices Tell You
If you’re evaluating a funeral home for acquisition, the obituary archive is one of the most underused due diligence sources available. Spend thirty minutes on it. Here’s what to look for.
Review 20-30 Published Obituaries
Pull a random sample across the past two years. Document what personal information is routinely included:
- Are exact dates of birth published?
- Are home addresses listed?
- Are service times included in advance?
- Are maiden names of surviving family members named?
If the answer to most of these is yes, you’re looking at a business with meaningful data exposure liability. That’s not a dealbreaker — it’s a fixable operational gap — but it affects your first-90-days priorities.
Data Exposure Assessment
For each piece of sensitive information you find, ask: how many obituaries in the archive include it? If the home has published 500 obituaries with full dates of birth and home addresses, that data is out there permanently. You can’t retract it from data brokers who’ve already scraped it.
What you can do is edit the live pages to remove sensitive fields going forward, and implement noindex tags on the most exposed records. This limits future harvesting even if past data is already in circulation.
For a fuller picture of what you’re inheriting digitally, see managing the digital footprint during ownership transitions and cybersecurity and data privacy for funeral homes.
Search for Scam Complaints
Google the funeral home’s name plus “scam,” “impersonation,” and “fraud.” Check the Better Business Bureau. Search Reddit and local Facebook groups.
If families have been targeted by scammers impersonating the funeral home, some of them will have posted about it. If there’s a pattern, you’ll find it. If you find it, it becomes a negotiating point and a due diligence flag.
Fixable Operational Gap — Not a Dealbreaker
Unlike some operational problems — deferred maintenance, licensing issues, regulatory violations — obituary data practices are almost entirely fixable with policy changes and staff training. No capital expenditure required. No regulatory approval needed.
The fact that a target funeral home has poor obituary practices is less important than whether the seller is aware of it and whether the staff can be retrained quickly. Most can.
What you’re really looking for is whether this problem has already caused harm. If families have complained, if scams have been linked publicly to this funeral home’s obituaries, if the BBB has complaints — that’s a different conversation than a home that simply never thought about the issue.
For a broader framework on reputation risk in acquisition, see reputation and review due diligence.
The Reputational Math
Here is the straightforward version of why this matters beyond protecting families.
A widow gets a scam call two days after burying her husband. The caller knows his name, his age, that he died at 71, that services were held at your funeral home. She loses $3,000 to a fake insurance scheme. She posts about it on Facebook, names your funeral home, and tags the local news.
You didn’t run the scam. But you published the information that made it possible. That distinction matters legally — but it does not matter to the community’s perception of your business.
One bad viral post can cost you dozens of at-need calls. In a business where a single at-need call is worth $8,000-$12,000, the math moves fast.
Obituary data security is also a competitive differentiator. Most funeral homes in your market are not doing this. If you introduce a security briefing at the arrangement conference, create a handout, and build a reputation as the home that protects families — that is a genuine, defensible market position.
Families talk. They remember the homes that treated them like they mattered beyond the transaction.
Quick Reference: Obituary Security Checklist
What to remove from the standard template:
- Exact date of birth (use year only)
- Residential street address
- Maiden names of surviving family members
- Advance service times and locations
Arrangement conference additions:
- Three-minute security briefing scripted for arrangers
- One-page family handout (printed + PDF)
- Documented family consent for any exceptions
Technical changes:
- Rate limiting on obituary pages
- CAPTCHA on search and detail pages
- Time-delayed publication option for families
- Noindex tags on privacy-requested records
- Remove sensitive fields from structured data markup
- Google Alerts for funeral home name + “scam”
Due diligence review:
- Sample 20-30 published obituaries from the target
- Document data exposure patterns
- Search for scam complaints linked to the home
- Assess archive remediation scope
Obituaries are a genuine business asset — they drive search traffic, build community trust, and represent decades of brand equity. See obituaries as a digital traffic asset for the full strategic picture.
But that asset has a liability side. The same information that makes an obituary meaningful to a family makes it useful to a criminal. The funeral homes that understand both sides — and build operations accordingly — are the ones families trust with their worst days.
That’s the business you’re trying to build.
Funeral Home Buyer provides educational content for professionals evaluating business acquisitions in the funeral services industry. This article is not legal, financial, or investment advice. Consult qualified professionals before making acquisition decisions.