MAIL-BASED ADVANCE-FEE SCAM

Did a lawyer really just offer you half of a stranger's life insurance policy?

A letter on law-firm letterhead says a deceased client who shares your last name left millions in unclaimed life insurance. The FTC re-flagged this exact letter on July 9, 2026.

SafeBrowz Threat Research Security ResearchJuly 10, 20269 min read

TL;DR

It is a scam, start to finish. The FTC re-issued a consumer alert about the "lawyer letter" on July 9, 2026. There is no lawyer, no deceased policyholder, and no multi-million-dollar payout. The letter exists to harvest your Social Security number and bank details and to collect advance "processing" or "legal" fees for money that does not exist. Real unclaimed money never arrives as a secret offer from a stranger: you can search for it yourself, free, at unclaimed.org and missingmoney.com. Do not reply. Shred the letter and report it at ReportFraud.ftc.gov.

What the letter actually says

The scam arrives the old-fashioned way: a physical letter in your mailbox, printed on what looks like law-firm letterhead, often from a "lawyer" claiming to practice in Canada. The writer says a client has died holding an unclaimed life insurance policy worth millions, and that the firm has searched for heirs and found none. Then comes the hook: the deceased happens to share your last name, and in earlier waves your nationality too. Because of that coincidence, the "lawyer" proposes adding you to the policy as the heir and splitting the proceeds three ways: a share for you, a share for the firm, and a share for a charity so the whole thing feels respectable.

Two conditions always follow. You must keep the arrangement secret, and you must reply by email immediately. The secrecy stops you from asking anyone whether this makes sense. The urgency stops you from sitting with the obvious question: why would a stranger's estate need you?

What is really going on

The FTC is blunt: this is not a letter from a lawyer, it is a letter from a scammer, and the policy does not exist at all. In its July 9, 2026 alert, the agency notes it has written about this scam before, "but like a bad sequel, it's back." The moment you email the address in the letter, the operation flips from paper to online. The FTC warns the scammers will try to get your personal and financial information, such as your Social Security number and bank account numbers, your money, or all of the above.

The money side follows the classic advance-fee arc: before the "payout" can be released you are asked to typically cover one invented cost after another, a "legal filing charge", then a "processing fee", then a "transfer tax", each framed as the very last obstacle. Every payment goes to the scammer, because there is nothing to pay out. The identity side can be worse: an SSN plus bank details handed over for "verification" is a ready-made identity theft kit. It is the same keep-paying-to-unlock-your-money logic that powers pig-butchering investment scams, compressed into a single letter.

Who the letters target, and why the scam is back

When the FTC first flagged this letter in August 2023, it said the reports were coming from people in Korean, Vietnamese, and Latino communities in the US, with the letters signed by a supposed lawyer in Canada. That targeting is not random: a shared surname is a much stronger hook inside communities where a family name carries weight.

The agency flagged the same underlying con again in July 2024, dressed that time as a long-lost relative's inheritance, and now a third time in July 2026. Three alerts in three years means the letter keeps making money. Name-matched mailing lists are cheap, paper feels more official than email, and a physical letter sails past every spam filter ever built. The same trust-the-offline-channel trick shows up in the courier cash-pickup scams the FBI warned about, where fraud deliberately moves to a channel that feels physical and therefore real.

How to spot the fake lawyer letter: 7 checks

It arrived out of the blue. A windfall you never knew about, from a person you never met, is the oldest opening in fraud. Real estates and insurers contact documented beneficiaries, not lucky strangers.
The only connection is your last name. Life insurance pays the beneficiaries named on the policy, or the estate through a court-supervised process. Sharing a surname gives you no claim, and a proposal to "add your name" to a dead stranger's policy is a proposal to commit fraud, which tells you the person proposing it is not a lawyer.
It demands secrecy. "Tell no one" is an isolation tactic, not a legal formality. Secrecy exists so nobody can talk you out of it.
It demands an immediate reply. Estates take months or years to settle. A deadline measured in days is manufactured pressure.
The reply address is a personal inbox. The letterhead says "law firm," but the contact is a free personal webmail address, a gmail.com or yandex.com style account, rather than an address at a firm's own domain. Our guide on how to verify an email is real covers why the reply-to address gives away more than the letterhead.
Money is requested up front. No legitimate insurer, court, or law firm asks you to wire fees to a stranger before releasing a benefit. Any "processing fee," "legal charge," or "transfer tax" payable in advance to receive money is the scam itself.
The lawyer cannot be verified. Every US state bar and Canadian provincial law society runs a public directory of licensed lawyers. Search the name exactly as printed. No listing, or contact details that do not match the letter, ends the conversation.

How real unclaimed money actually works

The scam only works if you do not know how the legitimate system operates. Life insurers do not sit on unclaimed millions hoping a stranger writes in: in many US states, laws modeled on the Unclaimed Life Insurance Benefits Act require insurers to compare their policies against the Social Security Administration's Death Master File and make a good-faith effort to find and pay the named beneficiaries. When beneficiaries genuinely cannot be found, the money does not go to a lawyer in Canada. It is turned over to the state's unclaimed property program, where it waits under your name.

Checking whether any of it is yours is free and takes minutes:

unclaimed.org is the official site of the National Association of Unclaimed Property Administrators (NAUPA), the association of state unclaimed property programs. It links you to every state's official database, and searching and claiming through your state program is free.
missingmoney.com is the NAUPA-sponsored multi-state search, letting you check most states in one query, also free.
The NAIC Life Insurance Policy Locator at naic.org is a free tool from the National Association of Insurance Commissioners for finding a deceased family member's lost policy. Participating insurers check their records and contact you directly if you are a beneficiary. The NAIC says the tool has connected consumers with more than $10 billion in unclaimed benefits since its 2016 launch.

Notice what is missing from the real process: secrecy, urgency, and fees. Official programs never ask you to keep a claim quiet and never charge you to search or claim what is yours. Watch out for third-party "finder" services that charge for what the state does free, and for lookalike sites imitating the official ones; our checklist on how to tell if a website is a scam covers that case.

Already replied? Do this now

If you have only exchanged emails, go silent, and do not announce that you have figured out the scam. If you sent money, contact your bank or payment provider immediately about recalling the transfer, then follow the full recovery sequence in our guide on what to do after being scammed. If you shared your Social Security number, place a fraud alert or credit freeze with the credit bureaus. Then report the letter three places: the FTC at ReportFraud.ftc.gov, the FBI's Internet Crime Complaint Center at ic3.gov if any of it happened online, and, because this scam uses the mail, the US Postal Inspection Service at uspis.gov/report or 1-877-876-2455. Mail fraud is a federal crime, and postal inspectors work these cases.

🛡 LIVE CHECK

Check a link from a "lawyer" or "unclaimed money" email

Replied to a letter and got sent a link to a law-firm site, a claim portal, or a payment page? Paste it here before you open it. Our 3-layer engine (Local + APIs + AI) checks it in about 3 seconds. Free, no signup.

Full scan with deep AI analysis → · No URL is logged to your identity.

Check the follow-up link before the letter hooks you

Here is the honest scope: this scam starts on paper, and no browser tool can read a letter sitting in your mailbox. The first and best defense is human. Do not reply, and warn anyone in your family who might take a law-firm letterhead at face value.

But the letter is only the lure. The scam cannot collect a single dollar or a single digit of your SSN until it moves online, and it always moves online: the email address you are told to write to, the "case file" link the scammer sends back, the fake law-firm website built to make the story check out, and eventually the payment page for the "processing fee." That online half is where a URL check belongs, on every link the "lawyer" sends you, before it loads.

How SafeBrowz handles the online half of a mail scam

SafeBrowz runs a 3-layer detection architecture: Local + APIs + AI.

Layer 1 - Local detection: 60+ URL patterns and 550+ brand signatures run in the extension before a page renders, catching the throwaway shapes these operations favor: keyword-stuffed "legal" and "claims" domains, free-hosting subdomains, and scam-heavy TLDs, client-side, with no round trip.
Layer 2 - API checks: the link is matched against Google Safe Browsing, PhishTank, URLhaus, ScamAdviser, and 30+ scam TLD signals, so a fake "law firm" or claim-portal domain reported anywhere in the network is flagged the moment it is known.
Layer 3 - AI deep scan (Premium): content-aware analysis reads the page itself and recognizes the pitch: an unclaimed-fortune story, a "verification" form asking for an SSN and bank details, or an upfront-fee payment page, even on a domain nobody has reported yet, in 100+ languages.

SafeBrowz protects the moment this scam moves online: the reply email's links, the fake law-firm website, the payment page. It cannot see the paper letter itself and does not read your email inbox, so pair it with the rule that ends this scam outright: never reply. Detection signatures come from threat-intelligence research and brand-database analysis, not from user browsing data. Per-user URL history is never stored.

Check every link before it loads

Add the free SafeBrowz extension, or the Android app, and every link you open gets checked automatically against all three layers before the page renders. Free forever.

Add to Chrome Add to Firefox Add to Edge Get it on Google Play

Frequently asked questions

Is the letter from a lawyer about unclaimed life insurance money real?

No. The FTC re-issued a consumer alert about this letter on July 9, 2026, and its message is unambiguous: there is no lawyer and no life insurance policy. The letter is sent by scammers who, if you reply, will try to get your personal and financial information, such as your Social Security and bank account numbers, your money, or both. Do not respond, shred the letter, and report it at ReportFraud.ftc.gov.

Can I claim life insurance money from a stranger who shares my last name?

No. Life insurance benefits go to the beneficiaries named on the policy, or to the estate through a court-supervised probate process. Sharing a surname with a deceased person gives you no legal claim, and a real lawyer cannot "add your name" to someone else's policy. In many states insurers are required to search for the actual beneficiaries, and money that truly goes unclaimed is turned over to the state's unclaimed property program, not held by a private law firm.

How do I check whether I really have unclaimed money or a lost policy?

Search for free through official channels. unclaimed.org, run by the National Association of Unclaimed Property Administrators, links to every US state's official unclaimed property database, and missingmoney.com is its free multi-state search. For a deceased family member's lost life insurance policy, use the NAIC Life Insurance Policy Locator at naic.org, a free tool where participating insurers check their records and contact you if you are a beneficiary. Official programs never charge to search and never demand secrecy.

Why does the letter say to keep the offer secret and reply immediately?

Both demands are control tactics. Secrecy isolates you from the people most likely to recognize the scam, like your own lawyer, your bank, or your family. Urgency stops you from checking the lawyer against a state bar or law society directory, where the name will not hold up. A genuine estate or insurance matter involves neither: real probate takes months, and no legitimate professional cares whether you seek independent advice.

I already replied to the lawyer letter. What should I do?

Stop all contact and do not send anything further. If you sent money, contact your bank or payment provider immediately about recalling the transfer. If you shared your Social Security number, place a fraud alert or credit freeze with the credit bureaus. Then report it to the FTC at ReportFraud.ftc.gov, to the FBI at ic3.gov if any part happened online, and to the US Postal Inspection Service at uspis.gov/report or 1-877-876-2455, since the scam uses the US mail.