Meta description: Learn what fraudulent use or possession of identifying information means, how identity theft laws work, what penalties may apply, and what to do after an accusation.
Fraudulent use or possession of identifying information can involve using another person’s details to obtain money, services, credit, or other benefits—or keeping those details with the intent to commit fraud. The exact offense and penalties depend on the state, the information involved, and the alleged purpose. Federal identity-theft laws may apply as well. Knowing how these laws generally work can help people understand an investigation, protect their information, and take informed next steps.
What Does Fraudulent Use or Possession of Identifying Information Mean?
The phrase generally describes using or holding information that identifies another person, without proper authorization, for a fraudulent purpose. In many jurisdictions, prosecutors must show that the accused acted knowingly and intended to deceive or obtain a benefit. The legal definition, required proof, and available defenses vary by statute.
“Identifying information” can cover much more than a Social Security number. Depending on the law, it may include a person’s name, date of birth, address, driver’s license number, financial account details, insurance information, login credentials, biometric data, or other details that identify or help authenticate that person.
Fraudulent conduct may include opening an account in someone else’s name, using another person’s credit card, submitting a false application, or presenting someone else’s identification to obtain goods or services. Possessing another person’s information may also be criminal when the law requires—and evidence supports—an intent to use it fraudulently.
How State Identity-Theft Laws Work
Most identity-theft offenses are defined by state law. A statute may use terms such as “personal identifying information,” “identity theft,” or “criminal use of personal identification information.” Some statutes cover both unauthorized use and possession with intent to commit fraud; others define separate offenses or require additional proof.
The wording matters. A prosecutor may need to establish that the information belonged to another person, that the person did not authorize its use, and that the accused acted with a specified fraudulent intent. Some laws also require proof of a particular transaction, financial loss, or attempted gain. Other statutes distinguish between using information and possessing it for a future fraudulent act.
For example, Florida’s statute addressing criminal use of personal identification information includes provisions concerning fraudulent use and possession with intent to fraudulently use another person’s information. The statute also contains different offense levels and additional provisions that can affect the charge. Florida’s rules are not a nationwide standard: the elements and consequences in another state may be different.
Because state laws change, the current statute and charging documents should be reviewed in the state where the conduct allegedly occurred. A charge’s title alone does not explain every element the government must prove.
Federal Identity-Theft Charges
Some conduct may violate both state and federal law. Federal prosecutors may become involved when alleged activity crosses state or national borders, uses interstate communications or financial systems, targets federal programs, or forms part of a broader fraud scheme. Federal laws address identity-related conduct in several ways, and the correct charge depends on the facts.
One relevant law, 18 U.S.C. § 1028, covers specified forms of fraud involving identification documents and identity information. Another, 18 U.S.C. § 1028A, creates the offense commonly called aggravated identity theft. In general, that law applies when a person knowingly transfers, possesses, or uses another person’s means of identification without lawful authority during and in relation to certain specified federal felonies.
Aggravated identity theft has important requirements; it is not simply another name for every identity-theft allegation. When § 1028A applies, the law generally requires a separate prison term of two years, served consecutively to the sentence for the underlying qualifying offense. Different rules apply to certain terrorism-related offenses. The exact consequences depend on the charges, statutory exceptions, and case circumstances.
Federal identity-related charges may also be brought alongside offenses such as wire fraud, bank fraud, access-device fraud, or mail fraud. Each offense has its own elements and possible penalties. State and federal authorities may coordinate, but the existence of a state case does not automatically resolve potential federal exposure.
What Prosecutors May Need to Prove
The required elements depend on the specific statute. In a typical identity-information case, evidence may be used to address several questions:
- Was the information identifying information under the law? The prosecution may point to account records, identification documents, personal details, or electronic credentials.
- Did the information relate to another person? Records and testimony may be used to identify the person connected to the information.
- Was the use or possession unauthorized? Consent, account permissions, business practices, and other circumstances can be relevant.
- Did the accused act knowingly? The government generally must prove the mental state required by the statute, not merely that information was found in someone’s possession.
- Was there fraudulent intent? Messages, applications, transactions, concealment, or steps toward a financial benefit may be cited as evidence, depending on the charge.
In some cases, the law also requires proof of a completed transaction, attempted fraud, a particular loss, or a connection to a specified underlying crime. A person’s access to data, an inaccurate record, or a suspicious transaction does not automatically prove every element. The significance of evidence depends on its context and whether it can be reliably connected to the accused.
Possible Penalties and Other Consequences
Penalties vary widely. A state may classify an offense as a misdemeanor or felony, with the level influenced by factors such as the amount of loss, number of affected people, use of particular information, prior convictions, or involvement in an organized scheme. Federal penalties likewise depend on the offense, statutory maximums, sentencing rules, and case-specific facts.
A sentence can involve more than incarceration. Depending on the law and the outcome, consequences may include probation, fines, restitution, forfeiture, court costs, and restrictions associated with a criminal record. A conviction may also affect employment, professional licensing, housing applications, immigration status, or access to certain financial services. These effects are not identical for everyone and may depend on the person’s circumstances and the jurisdiction.
Restitution is generally intended to address legally recognized losses, but calculating loss can be complicated. A claim may involve unauthorized purchases, fees, time spent resolving accounts, or other costs. The recoverable amount depends on the applicable law, the evidence, and the court’s findings.
Common Issues in Identity-Information Cases
Possession Versus Intent
Possession of another person’s information does not have one universal legal meaning. Some laws criminalize possession only when it is accompanied by a specified intent, while other statutes may address possession under different conditions. The prosecution’s evidence may include how the information was obtained, how it was stored, related communications, and whether steps were taken to use it. The statutory language controls.
Authorization and Shared Access
Disputes can arise over whether a person had permission to access or use an account or document. Past access does not necessarily establish permission for every later transaction. Conversely, records may not show the full scope of an agreement. Messages, account terms, workplace policies, and testimony can help establish what was authorized.
Identity and Attribution
Digital evidence may connect an online account, device, transaction, or network address to an investigation. Such records can be important, but their meaning depends on how they were collected and what they show. Shared devices, compromised accounts, inaccurate records, and third-party access may raise questions about who actually performed an act.
Intent and Mistake
Fraud-related offenses often require proof of a particular mental state. A mistaken entry, an administrative error, or use believed to be authorized may be relevant, but a claimed misunderstanding does not automatically resolve a case. Investigators and courts consider the full evidence under the legal standard for the charged offense.
What to Do if Someone Is Accused
A person facing an investigation or charge should take the situation seriously and avoid trying to resolve it through informal explanations before understanding the legal risks. Practical steps include:
- Contact a criminal defense attorney. An attorney can review the charge, identify the applicable statute, explain potential consequences, and advise on communications with investigators.
- Preserve relevant records. Keep messages, account notices, receipts, device information, and other potentially relevant materials. Do not alter, delete, or conceal evidence.
- Avoid discussing details publicly. Social media posts and messages may be collected or used in an investigation. Legal advice should come from counsel.
- Follow court requirements. If charged, comply with hearing dates, release conditions, and other court orders. An attorney can explain what each requirement means.
- Do not contact an alleged victim about the case without legal advice. Contact can be misunderstood or may violate a court order or release condition.
These steps are general information, not a substitute for legal advice. Deadlines, procedures, and rights differ by jurisdiction and case stage.
What to Do if Identifying Information Was Misused
Someone who suspects identity theft can act quickly to limit further harm. Start by contacting the affected bank, credit-card issuer, lender, or service provider using a verified contact method. Ask about securing the account, disputing unauthorized activity, and obtaining written records of the report.
In the United States, the Federal Trade Commission’s IdentityTheft.gov provides recovery guidance and a reporting process. A report may help organize next steps, though it does not replace a police report or any documentation a financial institution or agency specifically requires.
Consumers can also review credit reports and consider placing a fraud alert or security freeze with the nationwide credit bureaus. A fraud alert asks creditors to take additional steps to verify identity; a security freeze restricts access to a credit file unless lifted or removed. The FTC and the Consumer Financial Protection Bureau provide current information about these protections and how to request them.
Keep copies of reports, correspondence, disputed transactions, and account changes. If a Social Security number or tax information was involved, consult the Social Security Administration or Internal Revenue Service guidance as appropriate. Prompt reporting can help create a record and reduce continued misuse, but recovery steps depend on the type of information and account affected.
How to Verify the Law and Get Reliable Help
For a specific case, reliable sources include the current state statute, official court documents, the U.S. Code for federal allegations, and guidance from government agencies. The U.S. Code provisions at uscode.house.gov include federal statutes such as 18 U.S.C. §§ 1028 and 1028A. The FTC’s ftc.gov offers consumer information on identity theft and recovery.
Online summaries can be useful starting points, but they may omit exceptions, recent amendments, or procedural rules. The precise charge, jurisdiction, alleged conduct, and evidence determine how a law applies. A qualified attorney licensed in the relevant jurisdiction can explain those details and assess available options.