Three mechanics decide the outcome, and each of them surprises people.
You do not have to be named by name. The regulation at section 1.401(a)(9)-4(a)(3) says a beneficiary "need not be specified by name in the plan or by the employee to the plan," provided the person is "identifiable pursuant to the designation." A form reading "my children in equal shares" designates them. What does not work is the reverse: the same regulation states that "the fact that an employee's interest under the plan passes to a certain person under a will or otherwise under applicable State law does not make that person a beneficiary designated under the plan absent a designation under the plan." A will cannot repair a blank beneficiary form. It can only direct the account after the plan has already sent it to the estate, and an estate is a non-individual.
Where a blank form actually sends the money depends on the account. An IRA custodial agreement commonly defaults to the estate, which is the bad outcome. A married participant's 401(k) usually does not: Internal Revenue Code section 401(a)(11)(B)(iii) lets a profit-sharing plan escape the survivor-annuity rules only if the account is "payable in full, on the death of the participant, to the participant's surviving spouse" unless the spouse has consented otherwise, so the spouse takes by operation of law and the spouse is an individual. Read the document rather than assuming either result.
The date of death fixes the picture; September 30 lets you edit it. Under section 1.401(a)(9)-4(c)(1), a person is taken into account if, as of the date of death, they were a beneficiary designated under the plan and none of three events has happened by September 30 of the calendar year following the year of death. Those events are: the beneficiary predeceased the owner; the beneficiary is treated as having predeceased under a state simultaneous-death provision or a qualified disclaimer under section 2518 covering the entire interest; or the beneficiary "receives the entire benefit to which the beneficiary is entitled." That third event is the practical repair for a charity named beside family: pay the charity its full share before the deadline and it drops out of the analysis. Nobody can be added in that window, only removed.
September 30 is an outer boundary, not the operative deadline for every route. A disclaimer has to be a qualified disclaimer under section 2518, and that section imposes its own nine-month limit running from the date of death. The regulation's own example makes the point: a disclaimer executed ten months after death is not qualified even though September 30 of the following year has not yet arrived, and the beneficiary remains designated. Treat nine months as the real deadline whenever a disclaimer is part of the plan.
Two structures survive a non-individual. A trust is not an individual, but the see-through trust rules at section 1.401(a)(9)-4(f) can look through to the trust's own beneficiaries and treat them as the owner's beneficiaries instead. Separately, section 1.401(a)(9)-8(a) allows the rules to be applied separately to genuinely separate interests, which is how a properly split account can keep a charity's share from reaching the children's. Both are drafting exercises done in advance, not repairs available afterward. The cheap version of the same protection is simply not to mix a charity and a person on one account: give the charity its own account.