When "I Do" Becomes a Security Vulnerability: How Ex-Partners Exploit Shared Credentials After Divorce

Marriage creates an intimate knowledge of another person's digital life that no stranger could replicate. Spouses share email accounts, set each other's PINs, know each other's Social Security numbers, answer security questions together ("What was the name of your first pet?" — they were there), and in many cases hold joint accounts where either party can verify identity. When that marriage ends, the legal separation does not automatically sever digital access. Financial institutions, cell carriers, email providers, and streaming platforms do not receive divorce decrees. They still recognize the ex-spouse's voice, their ability to answer verification questions, and their knowledge of account history — all of which are enough to pass a social engineering attempt against an untrained customer service representative.

The attack surface is broader than most victims realize. A cell carrier account is particularly dangerous: an ex-partner who can social-engineer a SIM swap — convincing a carrier representative to transfer the victim's phone number to a new SIM — gains control of every two-factor authentication code sent via text message. That single compromise cascades into banking apps, email accounts, cloud storage, social media, and anything else protected by SMS-based 2FA. Beyond SIM swapping, we have documented cases involving unauthorized password resets on shared email accounts that were never properly separated, fraudulent account modifications at banks using knowledge of account numbers and the last four of a Social Security number, and carrier-level account changes — including address updates and new device authorizations — made by someone claiming to be the account holder. The common thread is not a technical exploit. It is the abuse of legitimate verification systems by someone who already knows the answers. For cases involving ongoing stalking or harassment, our skip tracing team can also help identify and document contact attempts across platforms.

This pattern constitutes a form of post-separation coercive control that is increasingly recognized by law enforcement and domestic violence advocates, yet remains deeply misunderstood by the institutions that enable it. Victims frequently report the experience to their cell carrier or bank and are told that the person passed verification — as though that ends the conversation. It does not. Unauthorized account access is a federal crime under the Computer Fraud and Abuse Act regardless of whether the person knew the password. Impersonating an account holder to a customer service representative to gain access or make changes is wire fraud. Our team works with victims to document these incidents precisely so that law enforcement has something actionable to work with.

When a client comes to us with a suspected digital access case following a separation, our response follows three tracks. First, we conduct a comprehensive cyber hygiene audit: every shared account is identified, passwords and security questions are replaced with strong, unique credentials unknown to any prior household member, email accounts are separated or transferred, and account recovery options — backup phone numbers, trusted contacts, secondary emails — are audited and updated. We strongly advise clients to create entirely new email addresses on providers their ex-partner has never seen, then migrate critical accounts to those addresses before making any other changes. Second, we submit formal evidence-preservation requests to the relevant platforms — carriers, banks, email providers — to preserve access logs, IP addresses, timestamps, and device identifiers tied to the unauthorized activity. Third, we compile that evidence into a structured package and work directly with the client's attorney and local law enforcement to submit it in a format prosecutors can act on. In several of our cases, this documentation has supported restraining order applications, contributed to criminal referrals, and formed the evidentiary basis for civil claims. If you believe an ex-partner has accessed or is attempting to access your accounts without authorization, contact our team immediately — the log evidence that proves it has a limited preservation window, and time is a factor.