NEWNow you can listen to Fox News articles!
It starts with something that feels good. An email arrives in your inbox saying you may be entitled to an inheritance. There is no warning. There is no backstory. Just a formal message and a ticking clock.
That’s exactly what happened to Tim C., who wrote to us:
I received an email this afternoon that I have never received before. I’m just wondering if you’ve seen anything like this before. I think it’s a scam, but it looks real.
Tim trusted his instincts. This is a scam. And it’s one of the most convincing ones doing the rounds right now.
Sign up for my FREE CyberGuy report
- Get my best tech tips, emergency security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by the millions who watch CyberGuy on TV every day.
- Plus, you’ll get instant access to my Free Scam Survival Guide when you join.
INSIDE THE DAY OF THIEVES AND HOW THEY IDENTIFY YOU
This legacy email looks legitimate, but the vague details, fake registration and 48-hour deadline are big red flags. (Kurt “CyberGuy” Knutsson)
What does a ‘Heirship Research Registry’ email look like?
This email looks legitimate at first glance. Every part of it is designed to build trust quickly and push you to click before you ask.
The message is “You are a Potential Primary Beneficiary” who is bound by an unclaimed inheritance. It warns that the funds may be reallocated to the government if no action is taken within 48 hours.
There is also a “Check My Unclaimed Inheritance” button. That button is a trap.
What makes this scam more believable than most
This version is more sophisticated than the typical scam email. That’s what makes it dangerous.
It uses your real name
“Tim C” makes it sound targeted and legitimate. Fraudsters often extract names from leaked data or public records.
It imitates legal and financial language
Phrases like “probate holding period” and “distribution of estate” are legal but intentionally vague.
Includes reference ID
The ID makes it sound traceable and real, but it cannot be verified.
It looks organized and professional
The layout, table format and tone of compliance are similar to actual financial notices.
It removes obvious scam signs
No spelling mistakes or unusual formatting. That lowers your guard.
THIEVES ARE NOW IMMAKING CO-WORKERS, STEALING EMAIL INSERTS IN BOOSTING HISTORY ATTACKS
Scammers rely on quick responses, so taking a moment to question unexpected messages can help you avoid costly mistakes. (Kurt “CyberGuy” Knutsson)
Red flags are lurking in plain sight
This message appears to be legitimate. But several details give it away.
The ‘2026 National Heir Research Registry’ does not exist
There is no official registration for that name at the federal or state level.
The 48 hour deadline is a pressure tactic
Real estate and probate processes do not apply to emergency email deadlines.
No law firm, executor or court is named
Official estate notices always include verifiable contacts.
The definition is intentionally vague
You are told that there is an inheritance, but not who it belongs to or how you are connected.
The ‘Check My Unclaimed Inheritance’ button is a trap
This may be a phishing link designed to collect personal data.
The fine print is trying to sound legitimate
References to the “Unclaimed Property Act” are general and not tied to the actual case.
Why is this email so effective?
This scam hits three emotional triggers at once.
- Curiosity. Who left me money?
- The urgency. I only have 48 hours
- An opportunity. I might lose something important
That combination forces you to act quickly rather than slowing down to make sure.
What is this scam trying to do
This is not to give you money. It’s about getting your information. When you click a link, several things can happen:
- You land on a fake form that asks for personal information
- You are asked to confirm your identity with sensitive data
- You may be asked for banking information
- In some cases, malware can put in the background
Once fraudsters have your data, they can use it for identity theft, financial fraud or future scams.
CREATORS ABUSE ICLUD CALENDAR TO SEND SCAM EMAILS
Clicking on a single link in a scam email can expose your personal data and open the door to identity theft or financial fraud. (Kurt “CyberGuy” Knutsson)
How real estate notices work
A quick reality check makes this easy to see. Legal estate notices follow a very different process:
- They come from a named lawyer, executor or law firm with verified contact details that you can independently verify.
- They include clear information about the estate and your relationship with it
- They don’t press you for short periods of time
- They don’t ask you to click on random links to claim funds
If someone really left you money, the legal system doesn’t rely on mysterious emails.
How to stay safe from estate scam emails
If you receive an email like this, take a step back and follow these steps. Fraudsters rely on speed. Your best defense is going down.
1) Do not click anything and use strong antivirus software
Avoid links, buttons or attachments in unsolicited messages and make sure you are protected with strong anti-virus software that can block malicious sites and downloads. Find my picks for the best antivirus 2026 winners for your Windows, Mac, Android and iOS devices at CyberGuy.com.
2) Don’t answer
Engagement can make sure your email is active and lead to other scams.
3) Delete the email or mark the email as spam
This helps your email provider block duplicate messages.
4) Hover over links before clicking
On a computer, hover your cursor over the links to preview the actual URL.
5) Check the sender’s email address carefully
Fraudsters often use addresses that look legitimate but include minor misspellings or unusual domains.
6) Verify with official channels only
Search your state’s junkyard website directly. Never use links from email.
7) Search for the name of the organization yourself
Typing a name into Google can quickly reveal if others have flagged it as a scam.
8) Use a data removal service
Limiting how much of your personal information is available online makes it harder for scammers to target you with personal messages like this. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out there on the web by visiting CyberGuy.com.
9) Report a scam email
Forward it to reportphishing@apwg.org or report it to your email provider.
10) Protect your personal information
Never share your Social Security number, date of birth or bank account information in unsolicited messages.
Kurt’s priority is taking
That unexpected legacy mail can feel exciting for a while. Then the truth must take over. If you don’t recognize the name, if there’s no clear paper trail and if there’s a countdown clock, it’s probably a scam. Tim paused before clicking. That rest is what protects you. Real money comes to you through legitimate channels, not through a random email with a deadline.
If an email promises you money but only gives you 48 hours to act, would you click first or confirm first? Let us know by writing to us at CyberGuy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS PROGRAM
Sign up for my FREE CyberGuy report
- Get my best tech tips, emergency security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by the millions who watch CyberGuy on TV every day.
- Plus, you’ll get instant access to my Free Scam Survival Guide when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
