What Is Identity Theft?

What an Identity Theft Charge Generally Alleges

Identity theft, as a category of criminal charge, generally alleges that someone used, obtained, or possessed another person’s identifying information without authorization — and did so with a culpable state of mind, typically an intent to deceive or to gain something of value. The charge is built around two core ideas: that the information belonged to someone else, and that the use or possession was not legitimate.

What counts as “identifying information” for purposes of a charge is defined by the law of the jurisdiction where the charge is brought. The term is broad by design and tends to encompass a range of data that can be used to represent or impersonate a person, but the precise scope — which categories qualify and under what circumstances — is a statutory question that varies from one jurisdiction to another.

What the charge does not always require, depending on how the applicable law is written, is that the information was used in any completed harmful act. Possession or transfer under defined circumstances can be enough to support a charge in some frameworks, without any completed fraud or deception having taken place.

Why Intent Is Central to the Charge

Identity theft charges are not based solely on the fact that someone had access to another person’s information. The mental state accompanying that access — what the person knew, intended, or understood — is typically one of the elements the prosecution must establish. In that respect, identity theft follows the broader structure of criminal law: the act alone is generally not enough; the required state of mind must also be present.

This is why the line between an alleged offense and an authorized use or an innocent mistake often turns on intent. Someone who handled another person’s information as part of a legitimate function, with proper authorization, occupies a different legal position than someone who obtained the same information knowing it was not theirs to use. Likewise, a genuine mistake about whether use was authorized presents a different factual picture than a knowing misuse — though how those distinctions play out in a specific case depends on the evidence and on how the applicable law defines the required mental state.

Because intent is an element of the charge, it is also a component the prosecution must address independently. The guide on what elements of a crime are covers how each piece of a charge must be established and why no single element can be assumed away. For identity theft charges specifically, the mental state element tends to be one of the analytically significant ones, because the same access to information can look very different depending on what the person knew and intended.

State and Federal Frameworks

Identity theft can be charged under state law, federal law, or sometimes both, depending on the facts and the jurisdiction. The existence of parallel frameworks means that the same underlying conduct can potentially give rise to charges in different systems, and the definitions, elements, and consequences can differ significantly between them.

At the federal level, identity theft offenses are defined by statute and cover a range of conduct — from basic unauthorized use of identifying information to conduct involving particular circumstances or categories of targets. The federal framework typically applies when the conduct has a federal dimension, such as when it involves federally regulated institutions or conduct that crosses state lines.

State frameworks vary considerably. Most states have enacted identity theft statutes, and they differ in how they define the offense, what information they protect, how they grade the severity of the charge, and what circumstances they treat as aggravating. A charge in one state may be structured differently from what appears to be a similar charge in another.

Because the definitions and grading rules are statutory and vary by jurisdiction, generalizations about what “identity theft” means in any particular case need to be checked against the actual law that governs the charge — not against a generic description of the offense category.

How the Charge Is Graded and What Affects Severity

Identity theft charges are often graduated — meaning the law distinguishes between more and less serious versions of the offense and assigns different consequences accordingly. How a particular charge is graded, and what factors determine where it falls on that scale, varies by jurisdiction and is defined by the applicable statute.

Factors that laws commonly use to distinguish among levels of severity include:

• The number of individuals or accounts involved. Some frameworks treat conduct affecting multiple people, or involving a larger volume of information, as a more serious category of offense.
• Whether any actual harm resulted. The presence of a completed fraud, financial loss, or other concrete harm can affect how a charge is classified in some systems — though charges can also be brought without any completed harm having occurred.
• Characteristics of the person whose information was involved. Some statutes treat the involvement of particularly vulnerable individuals as a circumstance that raises the level of the offense.
• The context in which the conduct occurred. Conduct connected to organized activity, or conduct that involves particular methods of obtaining information, may be treated differently under some frameworks.

The grading rules are statute-specific. What the applicable law actually says about how a charge is classified — and what factors move it from one level to another — determines the picture in any particular case. General descriptions of identity theft severity are a starting point for orientation, not a substitute for the law that actually governs.

Considerations Families Tend to Weigh

Identity theft charges can be disorienting partly because the conduct they describe often looks very different depending on context. The same act — accessing account information, using a name and number to complete a transaction — can be entirely legitimate in one setting and form the basis of a serious charge in another. Families often find that understanding the context the prosecution is relying on is the first step toward making sense of the case.

Several areas come up repeatedly when families are trying to get oriented:

• What evidence the prosecution has and what it shows. Identity theft cases often involve electronic records, account logs, and digital evidence. Understanding what the prosecution claims that evidence shows — and whether it actually establishes each element of the charge — tends to be a central question.
• Whether the alleged use was actually authorized. Authorization can be an important factual question. Who had access to the information, under what circumstances, and whether any permission existed can all bear on how the charge is analyzed.
• What the mental state evidence actually supports. Because intent is central to the charge, what the evidence says about what the person knew or intended — and whether that evidence is direct or circumstantial — tends to be a significant point of focus.
• Whether state charges, federal charges, or both are in play. The choice of forum and the specific statute charged affects what the prosecution must establish and what the potential consequences are. These are not interchangeable, and the differences matter.

None of these questions resolve themselves, and the answers turn on the specific facts, the specific charge, and the specific law. The value of getting a clear picture of each is that it turns a frightening and abstract situation into a set of concrete questions that can be examined one by one.

Questions to Explore About an Identity Theft Charge

Questions that tend to bring the actual shape of a charge into focus:

1. What specific statute governs this charge — state or federal — and how does that law define the elements, including what qualifies as identifying information and what mental state is required?
2. What evidence does the prosecution have that bears on the mental state element, and is that evidence direct or is it an inference drawn from surrounding circumstances?
3. Is there any factual basis for a claim that the use or possession of the information was authorized, or that there was a genuine misunderstanding about whether authorization existed?
4. How is this charge graded under the applicable law, and what facts or circumstances does the prosecution appear to be relying on to support that level of the offense?
5. If both state and federal charges are in play, what does each framework charge, how do their elements differ, and what does each require the prosecution to establish independently?