Inheritance Scam: The Email That Isn't Actually Good News
Free: How to Keep Yourself Safe From Scammers
9 chapters. Reporting checklist. 30-second protection checklist. Read on the site.
Inheritance Scam: The Email That Isn't Actually Good News
You open your inbox on a random Wednesday and there's a message from "Whitfield & Moss, Barristers at Law." A client with your same last name died overseas with no listed heirs. The estate is worth several million dollars. As the only person they could find with a matching surname, you're in line to receive it — you just need to "verify your identity" and cover a small legal fee to release the funds.
There is no estate. There is no barrister. There is a person, probably running several of these at once, who picked your name off a public records list because it sounded plausible next to a made-up dead stranger's.
This is the inheritance scam, and it's the "Nigerian prince" email's better-dressed grandchild. Same con, new letterhead.
How This Scam Actually Works
The setup is almost always the same, whether it arrives by email, LinkedIn message, or an actual paper letter with a law firm's logo on it.
Step one: the hook. You get contacted by someone claiming to be an attorney, estate administrator, or bank compliance officer. They say a person who shares your last name died without a will and without traceable next of kin. Because you happen to share that surname, you might be entitled to the estate. The FTC's consumer alert on this exact scam describes this precise setup: a letter claiming to represent a law firm searching for the heir to a fortune, and if you respond, they go after your personal information, your money, or both.
Step two: the flattery and the urgency. You're told you're one of very few possible matches, the estate has to be settled quickly for legal reasons, and time is limited. This isn't a coincidence — it's designed to keep you from slowing down enough to Google anything.
Step three: the "verification." They ask for identifying information — full name, date of birth, sometimes your Social Security number or a copy of your driver's license — to "confirm your claim." Real inheritance and probate processes absolutely do not work this way. A real attorney handling an actual estate does not need your SSN emailed to them by a stranger you've never met.
Step four: the fees. Here's the actual scam, the part that makes it "advance-fee fraud": before the millions can be released, you're told there are taxes, legal filing costs, a "clearance certificate," or wire transfer charges that need to be paid upfront — usually a few hundred to a few thousand dollars. Pay it, and there's another fee. And another. The inheritance never arrives, because it never existed. The only thing that reliably transfers in this scam is your money, moving one direction.
Not sure if your message is real? Paste it into Cautellus and get a risk score before you reply.
Scan it free →Or: Get the Chrome extension to scan pages without leaving your browser.
Why It's Harder to Spot Than the Classic Recovery Scam
A recovery scam targets someone who already knows they got scammed once — the pitch is "we can get your stolen money back." The inheritance scam is sneakier because it doesn't require you to have lost anything first. It shows up cold, dressed as good news, and preys on a very normal human impulse: nobody assumes free money is a trap, especially when the story includes a dead relative you never met, a detail specific enough to feel plausible.
It's also gotten a face-lift. The version circulating now skips the broken English and all-caps urgency of the old 419 scams. Instead, it arrives as a clean PDF on law firm letterhead, sometimes delivered through legitimate document platforms like DocuSign so the notification email looks like it's coming from a real service. We've covered how scammers exploit the real DocuSign platform to make phishing look more credible — and our DocuSign impersonation guide breaks down exactly what a legitimate DocuSign email looks like versus a forged one. The inheritance scam borrows that same trick to dress up an old lie in new packaging.
The Red Flags Hiding in Plain Sight
- You've never heard of this relative. Real estates go through probate court and named executors, not a law firm cold-emailing strangers who happen to share a surname.
- They found you through your last name alone. Legitimate heir searches use genealogists and public probate records, and they don't announce results by unsolicited email.
- They ask for money before you receive anything. Real inheritances get taxed and processed after distribution, not before. Nobody legitimate needs an advance payment to hand you your own money.
- Payment requests skew toward wire transfer, cryptocurrency, or gift cards. These are the same untraceable payment rails every advance-fee and romance scam relies on, because they can't be reversed.
- The email pushes confidentiality. You'll often be told to keep the "opportunity" quiet, supposedly for legal reasons. In reality, it just delays you from mentioning it to someone who'd immediately recognize the con.
- The attorney's contact information is a free email address or a website registered a few months ago. Real law firms have verifiable domains, bar registration numbers, and a searchable professional history.
- There's always another fee. Every time you pay, a new obstacle appears. That escalating pattern is the clearest tell in the entire genre of advance-fee fraud.
If This Already Happened to You
First: you are not the first smart person this has happened to, and you won't be the last. These scams are built specifically to sound plausible, and plausible is not the same thing as your fault.
Stop all contact and stop sending money immediately, even if you're mid-conversation and they're promising the "final" fee. Gather every email, text, and document exchanged — screenshots, headers, wire transfer receipts, everything. If you sent money by wire transfer, contact your bank immediately; the earlier you report it, the better your odds of a recall. If you paid with gift cards, contact the retailer's fraud department right away. If you shared your Social Security number, freeze your credit with all three bureaus (Equifax, Experian, TransUnion) and consider filing an identity theft report at IdentityTheft.gov.
Report the scam to the FTC at ReportFraud.ftc.gov and file a complaint with the FBI's Internet Crime Complaint Center at ic3.gov. These reports don't guarantee your money back, but they feed the aggregate data that helps investigators identify patterns and, eventually, shut networks down.
How to Not Become the Next Victim
Treat any unsolicited message about an inheritance, unclaimed estate, or unexpected windfall as false until proven otherwise — not the other way around. Verify independently: search the supposed law firm's name plus the word "scam," check whether the firm actually exists and is licensed in the jurisdiction it claims, and never use contact information provided in the message itself to "confirm" anything.
Never pay a fee to receive money you haven't verified exists. That single rule kills almost every advance-fee scam on its own, regardless of how it's dressed up.
If a message like this lands in your inbox and something about it feels engineered — the urgency, the secrecy, the surname coincidence — run it through Cautellus's scanner before you respond to anything. It checks the message against real threat patterns instead of asking you to trust your gut against someone whose entire job is making lies feel trustworthy.
This scam also disproportionately targets older adults, in part because probate and inheritance are things people become more genuinely curious about as they age, and family surname coincidences feel more plausible the longer a family tree gets. If you have an older parent or relative, it's worth a heads-up conversation before the email lands in their inbox instead of after — our elder fraud protection guide is a good place to start that conversation.
Got something like this in your inbox? Drop it into the scanner — it takes 5 seconds and could save you thousands.
Check it now →Already been scammed? See where and how to report it.
FAQ
Is there any real version of an inheritance notification email? Essentially no. Legitimate probate and estate matters are handled through courts and licensed executors, not cold emails from strangers. If you're genuinely due an inheritance, you'll typically already know about the relationship, or you'll be contacted by a verifiable attorney of record tied to an actual, searchable probate case.
What if the "law firm" has a real-looking website? Scammers build convincing websites in an afternoon. Check how long the domain has existed, look up the attorneys by name in your state's bar association directory, and call the bar association directly using a number you find independently — not one listed on the site.
Why do they ask for so little money at first? Small initial fees feel low-risk enough to pay without much thought. That's the design. Once you've paid once, you've also demonstrated you're willing to pay, which is exactly the information the scammer needed.
Can they actually do anything with my Social Security number if I already gave it to them? Yes — it can be used for identity theft, opening credit lines, or filing fraudulent tax returns in your name. Freeze your credit with all three bureaus and monitor for unfamiliar accounts.
Is this the same thing as the classic "Nigerian prince" email? Same core mechanic — advance-fee fraud — with a more convincing wrapper. The promise of a large windfall in exchange for smaller upfront payments hasn't changed in decades. Only the letterhead has.
There's no such thing as a fortune that requires you to pay to receive it. The moment a windfall asks you to go first, it isn't one.
Think you've been targeted? Paste any text, link, email, or screenshot into Cautellus for instant AI analysis.
Scan something free →Want unlimited scans + the Chrome extension? See pricing.
Courtney
Founder, Cautellus · 20+ years in financial services
Two decades in financial compliance, digital security, and fraud prevention. Built Cautellus because the scam detection tools that exist were made for IT departments, not for real people getting weird texts.
Learn moreKeep reading
Business Email Compromise: The $3 Billion Wire Fraud Scam
LinkedIn Job Scams: How Fake Recruiters Steal Your Credentials Through Phishing PDFs (2026)
New Grad Job Scams 2026: Fake Offers, Task Scams, and How to Protect Yourself
Support Our Mission
Cautellus is built to protect people from online fraud. Your contribution helps us keep building security tools and resources.