The vulnerability was upstream: the event that triggered the system was false. Darwin staged the disappearance carefully enough that the downstream processes—the search, the inquest, the death certificate—all functioned normally based on false inputs. This is a different kind of fraud from one that involves falsifying documents or corrupting officials. It involved creating a believable event and then allowing legitimate institutions to respond to it.
Once the death certificate existed, downstream systems followed logically. Pension administrators paid pension benefits to the surviving spouse of a deceased employee—which is exactly what pension administrators are supposed to do. Government benefit agencies processed claims from a widow—which is exactly what those agencies are supposed to do. Each link in the chain was doing what it was designed to do.
The false passport is a separate vulnerability, and one that has since been addressed more systematically. The ability to obtain a passport in the name of a deceased infant—a baby who had a birth certificate but no associated death record in the system the passport office could check against—was a known weakness in British document control. The Darwin case added specificity to a known general concern. Subsequent reforms to how birth and death records are cross-referenced in identity document applications were, in part, motivated by awareness of this type of fraud. Darwin’s use of the dead infant’s name—John Jones, born Sunderland, 1950, died in infancy—did not involve any particularly sophisticated investigation into historical records. It required finding a name in a birth register and checking that the death was not linked to it in the accessible system.