Do three things today, in this order: place a security freeze at all three nationwide credit bureaus, call each life insurance carrier and ask for a transaction hold plus a verbal password on the policy, and request your consumer file from MIB Group. The first two are obvious once someone says them. The third is the one almost nobody knows about, and for life insurance it is the most important of the three.
Under federal law as amended in 2018, security freezes are free, a bureau must place a freeze within one business day of an online or telephone request, and must lift it within one hour of a properly authenticated request. An initial fraud alert now lasts one year rather than ninety days, and an extended fraud alert lasts seven years when supported by an identity theft report. Those are statutory entitlements under the Fair Credit Reporting Act, not customer service favors, and you should ask for them by name.
What a credit freeze does not do is protect an insurance policy. Credit bureaus have nothing to do with a change of ownership, a change of beneficiary, a policy loan, or a surrender request. Those go through the carrier, on the carrier’s forms, under the carrier’s verification standards — and those standards vary enormously from one company to the next. A policy is a five- or six-figure asset that can be quietly redirected by someone with a date of birth, a policy number, and a forged signature. Locking it down is a separate task that has to be done separately.
In This Article
The First Twenty-Four Hours
- Freeze all three credit files. Equifax, Experian, and TransUnion, individually. A freeze at one does nothing at the other two. Free by federal law, placed within one business day, and liftable within an hour when you need it.
- Report at the Federal Trade Commission’s identity theft site. The report it generates is the official FTC Identity Theft Report, and it is what unlocks the seven-year extended fraud alert, blocks fraudulent information from credit reports, and satisfies documentation requests from carriers and banks.
- File a police report in the jurisdiction where you live. Some institutions require one in addition to the FTC report.
- Call every life insurance carrier and ask specifically for their Special Investigations Unit or fraud line rather than general service. Request a transaction hold, a verbal password on the account, and written confirmation of both.
- Request your MIB consumer file and your prescription history reports, described in the next section.
- Notify Social Security and the Internal Revenue Service. The IRS Identity Theft Affidavit is Form 14039, and an Identity Protection PIN is available to any taxpayer who requests one, which prevents a fraudulent return being filed under your number.
- Notify your state insurance department. Their fraud division tracks patterns across carriers that no single company sees. See how to file with your state insurance department.
Keep a single log: date, institution, person spoken to, reference number, and what was promised. It will be requested repeatedly over the following months and reconstructing it later is miserable.
The Records Nobody Checks
Three specialty consumer reporting agencies matter for life insurance and almost nobody looks at them.
MIB Group. MIB maintains coded records of information reported by member life insurance companies during underwriting — conditions disclosed on applications, certain test results, and other underwriting-relevant facts. When you apply for individually underwritten life insurance, the carrier checks MIB. Because MIB is a consumer reporting agency under the Fair Credit Reporting Act, you are entitled to request your file disclosure, generally once every twelve months at no charge, and to dispute inaccurate entries.
Why this matters in an identity theft case: if someone applied for insurance in your name, the application data may sit in your MIB record. It can affect your own future underwriting, and it is evidence of the fraud. Requesting the file is free and takes minutes.
Prescription history databases. Firms such as Milliman IntelliScript and ExamOne compile prescription fill histories used in life and health underwriting. These are also consumer reporting agencies and you may request your report and dispute errors.
Specialty insurance reports. Consumer reporting agencies also maintain claims and application histories in other lines. The Consumer Financial Protection Bureau publishes a list of specialty consumer reporting companies with contact information — worth working through if the theft appears organized rather than opportunistic.
Check all of them. An identity thief who applied for insurance in your name leaves a trail in exactly these files, and correcting it now prevents a declination three years from now that you would have no way to explain.
What Carriers Actually Require to Change a Policy
Verification standards differ by transaction type and by company, and knowing the tiers tells you where the exposure is.
Low-friction transactions. Address changes, premium payment method updates, and duplicate statement requests are often processed with basic identifying information over the phone or through a web portal. This is the softest entry point, and it is how a thief redirects correspondence so that the real owner stops receiving lapse notices and annual statements.
Medium-friction transactions. Beneficiary changes and policy loans typically require a signed form, sometimes notarized, and increasingly a call-back to a phone number of record.
High-friction transactions. Ownership changes, absolute assignments, and full surrenders generally require a signed and notarized form, and many carriers require a Medallion Signature Guarantee — a stamp obtainable only from a participating bank or broker-dealer, which carries the guarantor’s own liability and is far harder to forge than a notary seal.
The gap to worry about is the address change. Ask each carrier a direct question: what is your procedure when a change of address is followed within a short period by a beneficiary change or a surrender request. Good carriers have a cooling-off rule and send confirmation to both the old and new addresses. Ask whether they do, and if the answer is unclear, ask for a note on the file requiring dual confirmation.
If a name change is legitimately in progress — marriage, divorce, or a legal name change — handle it deliberately and document it, because a name mismatch across records is exactly what fraud reviews flag. See changing a name on policy records.
| Protection | What It Covers | Cost | Duration | Where to Request |
|---|---|---|---|---|
| Security freeze | New credit accounts | Free by federal law | Until you lift it | Each of the three bureaus separately |
| Initial fraud alert | Creditor verification duty | Free | One year | Any one bureau; it notifies the others |
| Extended fraud alert | Same, stronger | Free | Seven years | Requires an identity theft report |
| MIB file disclosure | Life insurance underwriting records | Generally free annually | Point in time | MIB Group directly |
| Carrier transaction hold | Policy changes and surrenders | Free | Often expires; renew it | Each carrier’s fraud unit |
| IRS Identity Protection PIN | Fraudulent tax returns | Free | Annual, reissued each year | The Internal Revenue Service |
| Secondary addressee for lapse notices | Intercepted mail causing a lapse | Free | Until changed | Each carrier |
Putting a Hold on a Policy and Keeping It There
Most carriers can place some form of restriction on a policy. The terminology differs — transaction hold, fraud flag, security alert, verbal password requirement — but the effect is that no non-routine transaction processes without heightened verification.
Request it in writing as well as by phone, and ask for written confirmation of what was placed and when it expires. Many holds have expiration dates and quietly lapse. Calendar a reminder to renew.
Additional protections worth requesting:
- A verbal password that must be given before any change is discussed, chosen so that it is not derivable from public records.
- A trusted contact on file — a person the carrier may contact if it suspects something is wrong. The Senior Safe Act of 2018 provides immunity from liability for trained employees of covered financial institutions who report suspected exploitation of older adults in good faith, which is why institutions are more willing to make these calls than they once were.
- Duplicate notice recipient status for a trusted family member or attorney, so lapse notices and premium notices go to two addresses. Many state laws already allow a policyholder to designate a secondary addressee for lapse notices; ask about it specifically, because a lapse triggered by intercepted mail is one of the quieter ways a policy is destroyed.
- Paper statements rather than electronic only, if email was the compromised channel.
If a Fraudulent Transaction Already Happened
Move fast and in writing. Notify the carrier’s fraud unit the same day with a written statement that the transaction was unauthorized, the date you discovered it, and a demand that it be reversed and the policy restored. Attach the FTC identity theft report and the police report.
A forged signature on a change form is generally void, not merely voidable, in most jurisdictions, and carriers that processed a forged instrument have exposure of their own. That is why the written notice matters — it starts the record.
If a policy was surrendered fraudulently, ask specifically about reinstatement, where the funds were sent, and whether the carrier will restore the contract pending investigation. If a beneficiary was changed, ask for the form and the date it was received, and compare the signature to a known specimen. If a policy loan was taken, ask where the check or wire went.
Then escalate in parallel rather than sequentially: the state insurance department’s fraud bureau, the FTC report, the police report, and if mail was involved, the United States Postal Inspection Service. Do not wait for one to finish before starting the next.
Be alert to the second wave. People who have been victimized once are targeted again, often by someone offering to help recover the loss for an advance fee. No legitimate party asks for money up front. See the upfront fee demand, settlement scam red flags, and how to handle an unsolicited call about your policy.
Ranking the Options for the Policy Itself
- Lock it down and keep it. The overwhelmingly common right answer. An identity theft event is a security problem, not a reason to dispose of an asset. Freeze, flag, verify, and move on.
- Verify current status and ownership in writing. Request a policy status letter, a current beneficiary designation, a statement of assignments of record, and confirmation of the owner of record. Do this even if nothing appears wrong; it is the baseline you will need if something surfaces later.
- Restore anything altered. Beneficiary designations, ownership, and address of record, each confirmed in writing after correction.
- Reduce the face amount or elect reduced paid-up only if the premium is a genuine burden, and only after the fraud matter is resolved. Making irreversible elections while records are disputed is a bad sequence.
- Policy loan. Avoid during an active fraud investigation. It muddies the record and creates another transaction to reconcile.
- 1035 exchange. Do not attempt while the file is disputed. Carriers will not process it, and it destroys the paper trail.
- Surrender. No. Never as a response to identity theft.
- Life settlement. Not appropriate now, for the reasons below.
When Selling Is the Wrong Answer
You are in the middle of an identity theft investigation. A settlement requires establishing clean title to the policy, and a file with disputed transactions on it cannot pass a provider’s title review. The transaction will stall in due diligence and you will have spent months disclosing more personal and medical information in the process — the exact opposite of what someone recovering from identity theft should be doing.
Someone contacted you proposing it. An unsolicited approach to buy a policy, especially one arriving near a data breach or shortly after a spouse’s death, is a recognized pattern. Verify any company’s license directly with your state insurance department before sharing a policy number, a date of birth, or a medical record. See verifying a provider’s license and how to spot a real provider.
Anyone asked for a fee, a deposit, or payment for a valuation. Legitimate policy reviews and offers cost the consumer nothing. An advance fee request is the single most reliable indicator that you are being defrauded.
The pressure is urgency. Real transactions take months and survive a week of consideration. Urgency is a manipulation technique, and it is the common thread in cases documented by adult protective services. See warning signs of senior financial exploitation.
You are being asked to keep it from family. Secrecy is never a feature of a legitimate transaction. Anyone who suggests not telling your children or your attorney has told you everything you need to know.
Once the file is clean, the policy is confirmed intact, and the freezes and flags are in place, an ordinary evaluation of the contract is a perfectly reasonable thing to do on your own schedule. A free policy review will state what the contract is worth kept, reduced, made paid up, surrendered, or sold, using the policy cover page, the schedule of riders, and a recent annual statement — and a legitimate one will never ask you for money or for a decision on the phone. Privacy expectations after any transaction are covered in privacy after selling a policy.
Frequently Asked Questions
Does a credit freeze protect my life insurance policy?
No. Credit bureaus have no role in beneficiary changes, ownership transfers, policy loans, or surrenders, which all go through the carrier. Freezing credit is essential for other reasons, but protecting a policy requires calling each insurer separately and requesting a transaction hold, a verbal password, and written confirmation of both.
What is MIB and why should I request my file?
MIB Group maintains coded underwriting information reported by member life insurers and is checked when you apply for individually underwritten coverage. It is a consumer reporting agency, so you may request your file, generally free once a year, and dispute errors. If someone applied for insurance in your name, evidence of it may appear there.
Someone changed my mother’s beneficiary without her knowledge. What do we do?
Notify the carrier’s fraud unit in writing the same day, state that the change was unauthorized, and request the signed form and the date it was received. Attach an FTC identity theft report and a police report. Then notify the state insurance department’s fraud division. Forged instruments are generally void, but the record starts with your written notice.
How do I stop a thief from letting the policy lapse by redirecting the mail?
Ask the carrier to add a secondary addressee for lapse and premium notices, which many states already allow policyholders to designate. Request paper statements if email was compromised, and ask whether the carrier sends confirmation of address changes to both the old and new addresses. That single control closes the most common gap.
Is it safe to explore selling a policy while this is being investigated?
No. A settlement requires clean, undisputed title, and a file with contested transactions will stall in due diligence. It also means disclosing more personal and medical information at exactly the moment you should be reducing your exposure. Resolve the fraud matter and confirm the policy’s status in writing first.
My late husband’s Social Security number is being used. What is different about that?
Send a certified death certificate to each of the three credit bureaus and request a deceased notation with instructions not to issue credit. Notify Social Security and the Internal Revenue Service. Also notify each life insurance carrier, because a decedent’s identifying information is sometimes used to attempt claims or changes on unrelated policies.
Find out what your policy is worth — free, confidential, no obligation.
A 15-minute educational review covers your eligibility, every alternative, and a realistic view of what each path would net you.
Related Reading
- Senior Financial Exploitation Warning Signs
- Cold Call About My Policy
- Upfront Fee Demand Scam
- Life Settlement Scams Red Flags
- Verify Provider License State
- Complaint State Insurance Department
- How To Spot A Real Provider
- Name Change On Policy Records
- Privacy After Selling Policy
Pine Lake Life Solutions does not purchase life insurance policies and does not provide legal, tax, or investment advice. Information provided is for educational purposes only. Eligibility for any option, including life settlements, is not guaranteed and depends on individual circumstances, policy terms, underwriting, and market conditions. Consult independent legal, tax, or financial professionals before making decisions regarding a life insurance policy.