Weeks after you die, your phone number can legally belong to someone else. Not your voicemail greeting. Not the years of texts. The number itself — the ten digits your bank, your payment processor, your registrar, and your mother all use to reach you — goes back into a carrier's inventory pool and gets assigned to a stranger. And that stranger's brand-new phone will quietly start receiving the password-reset codes meant for you.

This isn't a glitch or an edge case. It's how the phone system is designed to work. There are only so many ten-digit numbers, so the system recycles them, relentlessly and on a schedule. In the United States, the FCC requires disconnected numbers to sit idle for a minimum aging period — as little as 45 days — before carriers may reassign them. Your family will still be writing thank-you notes for casseroles when your number re-enters circulation.

For most people, that's an unsettling footnote. For a solo founder, it's a structural failure. Because your phone number isn't a way to make calls anymore. It's the master key to the business.

You never owned your number

Here's the fact almost nobody internalizes: you don't own your phone number. You lease it. The number is assigned to your carrier account, and when that account closes — for nonpayment, by request, or because someone faxed in a death certificate — the lease ends. The carrier ages the number briefly, then hands it to the next customer who signs up in your area code.

Everything downstream assumes otherwise. Over the past fifteen years, the tech industry quietly rebuilt identity on top of the phone number. It's the recovery channel for your email. It's the second factor on your bank, your Stripe account, your domain registrar, your cloud console. Messaging apps like WhatsApp and Signal don't just use it for recovery — the number is the account. Whoever controls those ten digits can, with patience, become you at a dozen institutions that will never ask for a death certificate.

This isn't hypothetical. In 2021, researchers at Princeton University studied recycled phone numbers available for signup at two major U.S. carriers and found that roughly two-thirds of the numbers they sampled were still linked to accounts at popular websites. A new subscriber could plausibly receive password-reset texts intended for the previous owner — no hacking required, just a normal phone plan and curiosity. The researchers were studying living people who'd changed numbers. The dead, who can't notice anything amiss, are the perfect victims.

Why grieving families cancel the line first

Now watch what actually happens after a death. Within a week or two, someone — a spouse, an adult child — sits down with a stack of bills and starts turning things off. The phone bill is visible, recurring, and emotionally loaded; every month it arrives feels like a small cruelty. So the line gets cancelled early, often in the very first round of calls. It feels responsible. It feels like progress.

Psychologists have a name for the blind spot at work here: functional fixedness, described by Gestalt psychologist Karl Duncker in the 1940s. It's our tendency to see an object only in terms of its customary function — a box is for holding things, so we fail to see it as a shelf. A phone number is for calling people. That's the fixed function. Nobody at the kitchen table sees it for what it has actually become: a credential. A skeleton key. The one channel through which every locked account in the estate could still be recovered.

So the family destroys the keychain to stop a monthly bill — and starts a 45-to-90-day countdown that ends with a stranger holding the keys. Months later, the executor finally gets legal authority, sits down to recover the founder's email, clicks "send code to phone," and the code goes to someone in another city who just got a great deal on an unlimited plan.

The number is the last utility you cancel, not the first

The fix is almost embarrassingly cheap, but it has to be decided in advance, because the person making the decision will be grieving and reasonable and wrong.

Every major U.S. carrier has a process — usually called transfer of service or assumption of liability — that lets a family member take over a deceased customer's line with a death certificate, keeping the number alive under a new name. Alternatively, once the family controls the account, the number can be ported to a low-cost carrier and parked for a few dollars a month. Either way, the recovery channel survives for the year or two it takes to wind down or sell the business. Compared to what's locked behind that number — bank access, the payment processor, the domains, the email that anchors everything — it may be the highest-leverage subscription in the entire estate.

There's a mirror-image risk, too. In the window after a death becomes public — an obituary is searchable, and obituary-driven fraud is a documented industry — an unmonitored number is a target for port-out scams, where a fraudster transfers the number to their own carrier. Every major carrier now offers a free port-out lock or number lock. If your line is going to sit unwatched, it should sit locked.

And where you can, take the number out of the critical path entirely. App-based authenticators and hardware security keys don't die with your SIM card. SMS should be the second factor of last resort, not the default — a good rule while you're alive, and a vital one after.

Your next moves

  • Count the doors this key opens. Go through your password manager tonight and list every account that uses your phone number for SMS codes or account recovery — bank, email, Stripe, registrar, cloud provider. If you can't make the list in 20 minutes, that's the finding.
  • Demote SMS wherever you're allowed to. Switch high-value accounts to an authenticator app or a hardware key, and remove your phone number as a recovery option where the platform permits it.
  • Turn on your carrier's number lock today. It takes five minutes in the account settings or one phone call, costs nothing, and blocks fraudulent port-outs while the line is unmonitored.
  • Write the one-line instruction that saves everything: "Do not cancel my phone line. Transfer it into your name or port it to a cheap plan and keep it alive until every account is recovered. It receives the codes that unlock everything else." Put it where your family will look first.
  • Tell your person where the account lives. Which carrier, which email it's under, and where the account PIN is stored — because the transfer process is easy with those and miserable without them.

The ten digits deserve a page in the binder

The deeper lesson isn't really about phones. It's that the most dangerous assets in a solo founder's estate are the ones nobody perceives as assets — the things functional fixedness files under "utilities" when they're actually infrastructure. A death binder that lists the bank accounts but not the phone number that unlocks them is a map with the roads erased. Heirloom exists to catch exactly this kind of invisible dependency: its vault records not just what you own but what unlocks what — which accounts key off your number, your email, your devices — and its handoff flow puts instructions like "transfer the phone line before you cancel anything" in front of your people at the moment they need them, in the order they need them. If you've never mapped your own master keys, start at heirloom.lumenlabs.works — it's a quieter way to make sure the next person holding your number is someone you chose.