Northwind Law
Identity Theft attorney

Identity Theft Attorneys

Experienced legal representation for identity theft matters across all 50 states.

Request a ConsultationCall: 1-844-6-NWIND-1 (1-844-669-4631)
~1.1 million
Identity Theft Reports Filed (2023)
Source: Federal Trade Commission, Consumer Sentinel
$23 billion
Total Identity Theft Losses (2023)
Source: Javelin Strategy & Research
2 years consecutive (federal)
Aggravated Identity Theft Mandatory Sentence
Source: 18 U.S.C. § 1028A
~$5.5 billion in prevented fraud
Tax-Related Identity Theft Cases (FY 2023)
Source: Internal Revenue Service

About Identity Theft

Identity theft is the unauthorized acquisition, possession, or use of another persons personal identifying information, such as Social Security numbers, credit card numbers, bank account details, or other personal data, for the purpose of committing fraud or other criminal activity. Identity theft is prosecuted under both federal and state law, with federal prosecution common when the offense involves interstate commerce, affects financial institutions, or involves large-scale operations. The primary federal statutes are the Identity Theft and Assumption Deterrence Act (18 U.S.C. § 1028) and the Aggravated Identity Theft statute (18 U.S.C. § 1028A), which imposes a mandatory consecutive two-year prison sentence when identity theft is committed in connection with certain enumerated felonies.

Identity theft has evolved significantly with the growth of digital technology. Modern identity theft encompasses a wide range of activities including data breaches, phishing attacks, skimming devices, social engineering, dark web purchases of personal data, synthetic identity creation, and account takeover schemes. The methods of obtaining personal information have become increasingly sophisticated, but the fundamental offense remains the same: using someone elses identity without authorization for fraudulent purposes. Identity theft can be committed by strangers using technology, but it is also frequently committed by family members, employees, and others with legitimate access to the victims information.

Defense of identity theft charges requires understanding both the technical aspects of how personal information is obtained and used and the legal elements that the prosecution must prove. The prosecution must demonstrate that the defendant knowingly used, transferred, or possessed another persons identifying information without lawful authority and with the intent to commit or aid any unlawful activity. Key defense strategies include challenging whether the defendant actually used the identifying information, whether they knew the information belonged to another real person, whether they had authorization, and whether they possessed the required criminal intent. Digital forensic evidence, including computer logs, IP addresses, and device analysis, often plays a central role in both prosecution and defense.

Why You Need an Identity Theft Attorney

Identity theft has become one of the fastest-growing crimes in the United States, affecting millions of consumers annually and causing billions of dollars in losses. The Federal Trade Commission received over 1 million identity theft reports in 2023, and the true number of victims is likely much higher as many cases go unreported. The crime causes severe harm to victims, who may spend months or years repairing damaged credit, closing fraudulent accounts, and restoring their financial reputation. The emotional toll on victims is also significant, including feelings of violation, anxiety, and loss of control.

For those accused of identity theft, the criminal penalties are equally severe. Federal identity theft charges carry prison sentences of up to 15 years for basic identity theft and up to 30 years for certain aggravated offenses. The aggravated identity theft statute mandates a consecutive two-year sentence on top of the sentence for the underlying offense, with no possibility of probation for that portion. State identity theft penalties vary but have been increasing across all jurisdictions. Beyond incarceration, a conviction results in a felony record, substantial restitution obligations, and difficulty obtaining employment in any position involving access to personal information or financial data. Effective legal defense is essential to challenge the governments evidence and protect the rights of the accused.

Common Identity Theft Cases

Credit Card Fraud and Account Takeover

Using stolen credit card numbers or taking over existing accounts to make unauthorized purchases or withdrawals. This includes both in-person use of stolen cards and online transactions using stolen card data obtained through data breaches, phishing, or skimming.

Tax Identity Theft

Filing fraudulent tax returns using stolen Social Security numbers to claim refunds. Tax identity theft has become a major concern for the IRS, and it is aggressively prosecuted at both the state and federal level. Victims may not discover the theft until their legitimate tax return is rejected.

Synthetic Identity Fraud

Creating a fictitious identity by combining real and fabricated personal information, such as using a real Social Security number with a fake name and date of birth. Synthetic identities are used to open credit accounts, obtain loans, and commit other financial fraud.

Medical Identity Theft

Using another persons identity or insurance information to obtain medical services, prescriptions, or fraudulent insurance reimbursements. Medical identity theft can compromise the victims medical records and affect their ability to obtain healthcare and insurance.

Phishing and Social Engineering

Using deceptive emails, websites, phone calls, or text messages to trick individuals into revealing personal information such as passwords, Social Security numbers, or financial account details. These schemes range from mass phishing campaigns to targeted spear-phishing attacks.

Data Breach and Large-Scale Theft

Unauthorized access to computer systems or databases to steal large volumes of personal information. These cases are typically prosecuted under federal law, including the Computer Fraud and Abuse Act, and can involve hundreds of thousands or millions of compromised records.

Familial Identity Theft

Use of a family members personal information without authorization, often involving parents using childrens Social Security numbers or spouses using their partners information. These cases involve unique dynamics and may be complicated by questions of implicit authorization.

Typical Identity Theft Case Timeline

1

Investigation

3-18 months

Identity theft investigations involve cooperation between federal agencies (Secret Service, FBI, Postal Inspection Service), financial institutions, and technology companies. Investigators trace financial transactions, analyze electronic evidence, serve subpoenas for records, and may use undercover operations. Investigations of large-scale operations can take years.

2

Arrest and Initial Appearance

1-7 days

Following arrest, the defendant appears before a magistrate judge. Bail conditions for identity theft cases often include restrictions on computer and internet use, surrender of electronic devices, and financial reporting requirements. In federal cases, the aggravated identity theft mandatory minimum makes pretrial detention arguments more aggressive.

3

Discovery and Digital Forensics

3-9 months

The defense reviews extensive electronic evidence including computer hard drives, phone records, IP logs, financial records, and surveillance footage. Defense digital forensic experts analyze the evidence to challenge attribution, identify alternative explanations, and assess the reliability of the governments technical evidence.

4

Pretrial Motions

1-3 months

Defense motions may challenge the legality of electronic searches, the reliability of IP address evidence, the authentication of digital evidence, and the governments loss and victim calculations. Motions to suppress evidence obtained through illegal searches are particularly important in technology-based cases.

5

Plea Negotiation or Trial

6-18 months from arrest

Plea negotiations focus on reducing the number of counts, avoiding aggravated identity theft charges (with their mandatory consecutive sentences), and minimizing loss calculations. If the case proceeds to trial, digital forensic evidence and expert testimony play a central role.

6

Sentencing

60-90 days post-conviction

Sentencing considers the number of victims, the total loss, the sophistication of the scheme, and the defendants role. Aggravated identity theft carries a mandatory consecutive two-year sentence. Restitution to victims is typically ordered and can be substantial.

Know Your Rights

  • You have the right to remain silent. Do not explain your use of electronic devices, financial accounts, or personal information to law enforcement without an attorney present.
  • You have the right to an attorney before and during any questioning. Invoke this right immediately upon arrest or contact by investigators.
  • You have the right against unreasonable searches of your electronic devices. Police generally need a warrant to search your phone, computer, or other devices under Riley v. California (2014).
  • You have the right to review all evidence the government intends to use against you, including digital forensic analysis reports and financial records.
  • You have the right to challenge the governments attribution of online activity to you. IP addresses and digital footprints are not always conclusive proof of identity.
  • You have the right to present expert testimony challenging the governments technical evidence and digital forensic conclusions.
  • Do not delete files, destroy devices, or alter any electronic evidence. Destruction of evidence is a separate criminal offense that can significantly increase your sentencing exposure.

What to Look for in an Identity Theft Attorney

Identity theft defense requires an attorney experienced in both financial crimes and digital forensics. Look for an attorney who understands how electronic evidence is collected, preserved, and analyzed, as digital forensics is central to most identity theft cases. The attorney should have experience with federal identity theft statutes, including the aggravated identity theft mandatory minimum, and understand how to challenge the governments attribution of online activity to a specific individual. Ask about their experience with cases involving IP address evidence, computer forensic analysis, and data breach investigations. Because identity theft charges frequently accompany other offenses such as wire fraud, bank fraud, and access device fraud, the attorney should have broad experience with federal financial crimes. They should also understand the implications of restitution calculations, which can be substantial in identity theft cases involving multiple victims.

Questions to Ask Your Identity Theft Attorney

  1. 1What experience do you have defending identity theft cases, particularly federal aggravated identity theft charges?
  2. 2Do you work with digital forensic experts who can analyze the electronic evidence in my case?
  3. 3How will you challenge the governments attribution of the alleged activity to me?
  4. 4What is my sentencing exposure, including mandatory minimum sentences, and how can it be reduced?
  5. 5Are there plea negotiation strategies that can avoid the aggravated identity theft mandatory consecutive sentence?
  6. 6How do you handle cases with multiple alleged victims and complex loss calculations?
  7. 7What are the implications for my employment, professional licenses, and financial future?

Understanding Identity Theft Legal Costs

Identity theft defense costs depend on the scope and complexity of the charges. State misdemeanor identity theft charges may be handled for $3,000 to $10,000. Federal identity theft cases, which typically involve more complex evidence and more serious penalties, range from $15,000 to $75,000 for cases resolved through negotiation. Cases involving extensive digital forensics, multiple victims, or trial can exceed $100,000. Digital forensic expert fees can add significantly to the cost, ranging from $5,000 to $25,000 or more depending on the volume of electronic evidence to analyze. Additional costs may include forensic accounting experts, private investigators, and electronic discovery review tools. Given the severity of federal identity theft penalties, including the mandatory consecutive two-year sentence for aggravated identity theft, investment in experienced defense counsel is essential.

Video Resources

These videos are provided for informational purposes only. The attorneys and organizations featured are not affiliated with or endorsed by Northwind Law.

Identity Theft Laws and Penalties Explained

LegalEagle

How Identity Theft Cases Are Investigated

Law Venture

Federal Identity Theft Charges: What You Need to Know

Aimee the Attorney

Frequently Asked Questions About Identity Theft

Basic identity theft under 18 U.S.C. § 1028 involves the knowing transfer, possession, or use of another persons identifying information without lawful authority, with penalties of up to 15 years imprisonment. Aggravated identity theft under 18 U.S.C. § 1028A adds a mandatory consecutive two-year prison sentence when identity theft is committed during and in relation to certain enumerated felonies, including mail fraud, wire fraud, bank fraud, immigration offenses, and others. The aggravated identity theft sentence cannot run concurrently with the sentence for the underlying offense, and probation is not available for this portion. The Supreme Court in Flores-Figueroa held that the government must prove the defendant knew the means of identification belonged to a real person.

Citations & Sources

  1. [1]
    The FTC received approximately 1.1 million identity theft reports in 2023, with credit card fraud, government documents/benefits fraud, and loan fraud as the most common types. — Federal Trade Commission, Consumer Sentinel Network
  2. [2]
    The U.S. Secret Service, which has primary jurisdiction over identity crimes, investigated cases involving over $3 billion in fraud losses in fiscal year 2023. — United States Secret Service
  3. [3]
    In Flores-Figueroa v. United States (2009), the Supreme Court held that the government must prove the defendant knew the means of identification belonged to another real person to sustain an aggravated identity theft conviction. — Flores-Figueroa v. United States, 556 U.S. 646 (2009)
  4. [4]
    The IRS Identity Protection program identified and prevented approximately $5.5 billion in fraudulent refunds in fiscal year 2023 through enhanced identity verification procedures. — Internal Revenue Service, Data Book
  5. [5]
    In Riley v. California (2014), the Supreme Court held that police generally need a warrant to search the digital contents of a cell phone seized during an arrest, recognizing the vast amount of personal information stored on modern devices. — Riley v. California, 573 U.S. 373 (2014)

Ready to Discuss Your Identity Theft Case?

Speak with an experienced identity theft attorney. Free consultations available.

Request a Consultation1-844-6-NWIND-1 (1-844-669-4631)