Inheritance scam email looks real but steals your data

It starts with something that feels exciting. An email lands in your inbox claiming you may be entitled to an inheritance. No warning. No backstory. Just a formal message and a ticking clock.

That is exactly what happened to Tim C., who wrote us:

Tim trusted his instincts. This is a scam. And it is one of the more convincing ones making the rounds right now.

Sign up for my FREE CyberGuy Report

 INSIDE A SCAMMER’S DAY AND HOW THEY TARGET YOU

This email looks official at first glance. Every part of it is designed to build trust fast and push you to click before you question it.

The message claims you are a "Primary Potential Beneficiary" tied to an unclaimed estate. It warns that the funds could be reassigned to the state if you do not act within 48 hours.

There is also a button that says "Check My Unclaimed Inheritance." That button is the trap.

This version is more polished than the typical scam email. That is what makes it dangerous.

"Tim C" makes it feel targeted and legitimate. Scammers often pull names from leaked data or public records.

Phrases like "probate holding period" and "estate allocation" sound official but are intentionally vague.

The ID makes it feel trackable and real, but it cannot be verified.

The layout, table format and compliance tone resemble real financial notices.

There are no spelling errors or strange formatting. That lowers your guard.

SCAMMERS NOW IMPERSONATE COWORKERS, STEAL EMAIL THREADS IN CONVINCING PHISHING ATTACKS

This message appears legitimate. But several details give it away.

There is no official registry by that name at the federal or state level.

Real estate and probate processes do not operate on urgent email deadlines.

Legitimate inheritance notices always include verifiable legal contacts.

You are told there is an estate, but not who it belongs to or how you are connected.

This is likely a phishing link designed to collect personal data.

References to the "Unclaimed Property Act" are generic and not tied to a real case.

This scam hits three emotional triggers at once.

That combination pushes you to act quickly rather than slowing down to verify.

This isn’t about giving you money. It is about getting your information. If you click the link, a few things can happen:

Once scammers have your data, they can use it for identity theft, financial fraud or future scams.

SCAMMERS ARE ABUSING ICLOUD CALENDAR TO SEND PHISHING EMAILS

A quick reality check makes this easier to spot. Legitimate inheritance notices follow a very different process:

If someone truly left you money, the legal system does not rely on mystery emails.

If you receive an email like this, take a step back and follow these steps. Scammers rely on speed. Your best defense is slowing down.

Avoid links, buttons or attachments in unexpected messages and make sure you are protected with strong antivirus software that can block malicious sites and downloads. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.

Engaging can confirm your email is active and lead to more scams.

This helps your email provider block similar messages.

On a computer, place your cursor over links to preview the real URL.

Scammers often use addresses that look official but include small misspellings or unfamiliar domains.

Search your state's unclaimed property website directly. Never use links from the email.

Typing the name into Google can quickly reveal if others have flagged it as a scam.

Limiting how much of your personal information is available online makes it harder for scammers to target you with personalized messages like this. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

Forward it to reportphishing@apwg.org or report it through your email provider.

Never share your Social Security number, date of birth or banking details through unsolicited messages.

That unexpected inheritance email can feel exciting for a moment. Then reality should take over. If you do not recognize the name, if there is no clear paper trail and if there is a countdown clock, it is almost certainly a scam. Tim paused before clicking. That pause is what protects you. Real money finds you through legal channels, not through a random email with a deadline.

If an email promised you money but gave you only 48 hours to act, would you click first or verify first?  Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Report

Copyright 2026 CyberGuy.com. All rights reserved.