What Happens to Unclaimed Digital Assets in an Estate

Most guidance about digital estates assumes that someone will act: an executor, a spouse, a child who knows where things are. The harder case is the one nobody writes about, where the death is followed by months of inaction. Perhaps the family is overseas, or the relationship was distant, or the estate looks too small to justify a lawyer. What people expect is that the assets will simply wait. What actually happens is that the accounts move first and the law moves much later, on a completely different calendar. The inventory work that prevents this is set out in the international digital legacy checklist.

Conclusion: accounts fail long before the law does

An unadministered estate is not a paused one. Providers act on their own terms within months: dormant accounts are frozen or deactivated, subscriptions keep billing whatever card is attached, and deletion clauses in terms of service are triggered by inactivity rather than by death. The legal machinery then follows at a much slower pace, and under escheat law the eventual destination of custodial money is a state unclaimed property office rather than the family. The mismatch between these two clocks is what turns a manageable estate into a permanent loss. The mechanics of accessing an estate without probate are covered in accessing accounts without probate.

Escheat covers custodial money, not everything

Escheat is often described as the state taking everything, which is wrong in both directions. It applies to property held by a custodian: bank balances, brokerage accounts, insurance payouts, uncashed cheques and similar obligations that a regulated institution owes to a customer. When the owner cannot be found after a dormancy period, the institution remits the value to the state, which holds it and returns it to a proven owner or heir, usually without a time limit. What escheat does not touch is assets with no custodian: a self-custody wallet, a password manager vault, a cloud backup, a domain name. There is no institution holding them for you, so there is nothing to remit. They simply become unreachable.

The four categories and how each one fails

• Bank, brokerage and retirement accounts — Most protected route. Dormancy rules apply, then state unclaimed property. Recoverable for years, but statements stop, and beneficiaries named decades ago may be wrong or dead
• Exchange and platform balances — Held under a contractual licence. Terms permit freezing or termination on inactivity, so the account can be restricted long before any escheat question arises. Small balances are frequently written off by families who assume they cannot be claimed
• Self-custody crypto and vault credentials — No custodian, no escheat, no recovery. Without the seed or the vault, the asset is permanently gone. This is the category where inaction is fatal rather than merely costly
• Domains, subscriptions and creator accounts — Time-limited by design. A lapsed domain is released and resold within weeks, subscriptions drain the account until the card fails, and monetised accounts lose eligibility after a period of inactivity

Who can step in when the family does not

A common belief is that if no relative acts, the estate is simply closed. In practice it is the opposite: creditors, tax authorities and anyone with a documented interest can petition a court to open the estate or appoint an administrator. That appointment carries authority to collect assets, pay debts and distribute what remains, which can mean liquidating holdings the family hoped to keep and charging the estate for the administration. Under digital asset statutes in most US states, the person appointed as fiduciary can also request access to the deceased person content, subject to the platform priority rules. TimeWill holds the account inventory and the instructions encrypted, so the person appointed does not begin from zero.

A five-step sequence that beats the clock

• Step 1: secure the master email and phone — Almost every recovery route runs through these two accounts. Keep the phone line active and do not cancel it. The sequencing trap is explained in phone number and two-factor codes after death
• Step 2: build the inventory from statements and receipts — Bank and card statements, app store purchase history, subscription receipts and the email inbox reveal far more than asking relatives. Cross-check against an unclaimed property search
• Step 3: stop the bleeding — Cancel recurring charges and any auto-renewal tied to a card that still works, and keep domains paid through the administration period rather than letting them lapse
• Step 4: establish authority early — For small estates, a small estate affidavit may be enough. Otherwise open probate, because without documented authority most platforms will not act, however obvious the family relationship
• Step 5: put one name on the plan for next time — Record where the inventory, credentials and instructions live, and name the person who may open them. This is the step that removes the whole category of risk for the next generation

Why this gap is invisible until it is expensive

Nobody experiences an unadministered estate as a single event. It arrives as a series of small discoveries: the photo library was deleted, the domain now hosts someone else site, the exchange balance was written off as a rounding error, the crypto wallet was never opened. Each item is minor on its own, which is exactly why the problem persists. Providers have no incentive to chase heirs, and terms of service exist to close the file rather than reopen it. The only durable fix is informational, and it has to be made while the owner is still there to make it. The mechanics of getting data out of platforms before they close are covered in exporting your data before an account closes.

Disclaimer

This article is general information, not legal, tax or financial advice. Escheat and dormancy periods, probate thresholds and platform inactivity policies differ by state, province and provider, and change over time. Confirm the current rules for your own jurisdiction and confirm platform policy on the provider own support pages before relying on anything described here.