Title 18 U.S.C. § 1028: Federal Identity Theft Laws, Penalties, & Defense Strategies

Identity theft is one of the most aggressively prosecuted federal offenses in the United States.

Under Title 18 U.S.C. § 1028 and Title 18 U.S.C. § 1028A, federal prosecutors aggressively target individuals accused of unlawfully obtaining, transferring, possessing, or using another person's personal identifying information (PII) in connection with fraudulent schemes or felony offenses.

Federal identity theft cases frequently involve multi-agency investigations led by the Federal Bureau of Investigation (FBI), the United States Secret Service, the Department of Homeland Security (DHS), or IRS Criminal Investigation. A conviction under these statutes can carry multi-year prison sentences, mandatory consecutive prison terms, substantial court-ordered restitution, and asset forfeiture.

What Is Federal Identity Theft Under 18 U.S.C. § 1028?

Title 18 U.S.C. § 1028 criminalizes fraud and related activity in connection with identification documents, authentication features, and personal identifying information. Unlike state-level identity theft, federal prosecution requires a nexus to interstate or foreign commerce, federal documentation, or federal agencies.

Under 18 U.S.C. § 1028, it is a federal crime to knowingly:

Produce or manufacture false identification documents or authentication features.
Transfer or possess fraudulent identification documents with intent to defraud.
Possess document-making equipment with the intent to produce counterfeit credentials.
Transfer, possess, or use another person's identifying information without lawful authority.
Traffick in stolen authentication features or government-issued credentials.

To obtain a conviction, federal prosecutors must establish beyond a reasonable doubt that the defendant acted knowingly, without lawful authority, and with the specific intent to commit fraud or facilitate another illegal act.

What Is Legally Defined as "Identifying Information"?

Federal law broadly defines personal identifying information to encompass both traditional physical identifiers and modern digital credentials.

Covered identifying information includes:

Government Identification Numbers: Social Security numbers, driver's license numbers, state identification credentials, and passport numbers.
Financial Account Credentials: Credit card numbers, debit card details, routing numbers, bank account numbers, and personal identification numbers (PINs).
Biometric and Digital Identifiers: Digital signatures, authentication features, biometric data, unique electronic serial numbers, and access credentials.
Vital Records: Birth certificates, naturalization certificates, and official government seals.

Federal cases frequently stem from sophisticated cyber activities, including email phishing schemes, corporate data breaches, unauthorized dark web transactions, or large-scale counterfeit document production operations.

When Does Identity Theft Become a Federal Crime?

While simple identity theft is often handled by state prosecutors, law enforcement elevates investigations to the federal level when specific statutory triggers occur:

Interstate Commerce Nexus: The conduct involves online transactions, wire transfers, or communications across state lines or international borders.
Substantial Loss Amounts: The fraudulent scheme results in major financial losses exceeding statutory federal thresholds.
Multi-Jurisdictional Schemes: The operation involves criminal rings, co-conspirators, or victims across multiple states.
Interference with Federal Agencies: The offense targets federal benefit programs (e.g., Social Security, Medicare, COVID-19 relief funds) or uses forged federal documents.
Connection to Other Federal Felonies: The identity theft is executed to facilitate wire fraud, bank fraud, mail fraud, immigration violations, or drug trafficking.

What Is Aggravated Identity Theft Under 18 U.S.C. § 1028A?

Aggravated identity theft, enacted under the Identity Theft Penalty Enhancement Act of 2004, is one of the most potent sentencing weapons available to federal prosecutors.

Under 18 U.S.C. § 1028A, a defendant commits aggravated identity theft if they knowingly transfer, possess, or use another person's identifying information during and in relation to specific enumerated federal felony offenses.

The Mandatory Consecutive Sentence Requirement

Section 1028A carries a mandatory 2-year prison sentence (or 5 years if the offense relates to domestic or international terrorism). By statutory mandate:

The sentence must run consecutively to any prison term imposed for the underlying predicate felony.
Federal district judges have no judicial discretion to reduce, suspend, or run the § 1028A sentence concurrently with other counts.

Predicate Felonies Triggering Section 1028A

Aggravated identity theft charges are routinely stacked on top of underlying federal felonies, including:

Mail Fraud (18 U.S.C. § 1341)
Wire Fraud (18 U.S.C. § 1343)
Bank Fraud (18 U.S.C. § 1344)
Social Security Fraud (42 U.S.C. § 408)
Passports and Visa Fraud (18 U.S.C. §§ 1542–1546)
Theft of Public Money or Property (18 U.S.C. § 641)

Because a mandatory consecutive 2-year sentence attaches automatically upon conviction, prosecutors frequently use § 1028A charges as significant leverage during plea negotiations.

What Federal Charges Are Frequently Stacked with Identity Theft?

Federal prosecutors rarely charge identity theft in isolation. To maximize potential sentencing exposure under the U.S. Sentencing Guidelines, indictments commonly combine § 1028 and § 1028A with related white-collar offenses:

18 U.S.C. § 1341 (Mail Fraud): Using the U.S. Postal Service or commercial carriers to execute a fraudulent scheme.
18 U.S.C. § 1343 (Wire Fraud): Utilizing interstate electronic communications, wire transfers, or internet transmissions to defraud.
18 U.S.C. § 1344 (Bank Fraud): Defrauding or obtaining funds from a federally insured financial institution.
18 U.S.C. § 1029 (Access Device Fraud): Producing, using, or trafficking in unauthorized credit cards, telecommunication access codes, or account numbers.
18 U.S.C. § 1030 (Computer Fraud and Abuse Act): Accessing protected computer systems without authorization to obtain financial or personal data.
18 U.S.C. § 1956 (Money Laundering): Structuring financial transactions to conceal the origin or ownership of illegal proceeds.

What Federal Agencies Investigate Identity Theft?

Federal identity theft investigations are resource-intensive operations conducted by specialized law enforcement divisions:

Federal Bureau of Investigation (FBI): Leads complex cybercrime investigations, corporate data breaches, organized crime syndicates, and multi-state identity theft rings.
United States Secret Service: Investigates financial institution fraud, access device schemes, and large-scale counterfeit credential operations.
IRS Criminal Investigation (IRS-CI): Focuses on tax refund fraud schemes, stolen identity refund fraud (SIRF), and fraudulent tax filings.
Department of Homeland Security (DHS): Handles identity fraud linked to immigration documentation, visa violations, and border security.

Investigative tactics routinely involve grand jury subpoenas for bank and ISP records, electronic wiretaps, search warrants for digital devices, and forensic data reconstruction.

What Are the Federal Penalties for Identity Theft Convictions?

Federal courts set sentences based on statutory maximums and the United States Sentencing Guidelines, which calculate advisory ranges based on loss amounts and the defendant's role in the offense.

Statutory Provision	Offense Context / Circumstance	Maximum Federal Penalty
18 U.S.C. § 1028	Basic production, possession, or transfer of false IDs	Up to 15 years in federal prison
18 U.S.C. § 1028	Offense facilitating drug trafficking or violent crime	Up to 20 years in federal prison
18 U.S.C. § 1028	Offense facilitating domestic or international terrorism	Up to 30 years in federal prison
18 U.S.C. § 1028A	Standard Aggravated Identity Theft (tied to predicate felony)	Mandatory 2 years (Consecutive)
18 U.S.C. § 1028A	Terrorism-related Aggravated Identity Theft	Mandatory 5 years (Consecutive)

Note: The federal criminal justice system has no parole. Inmates convicted of federal offenses must serve at least 85 percent of their total sentence under federal good-conduct rules.

What Defense Strategies Apply to Federal Identity Theft Charges?

Defending against federal identity theft charges requires dissecting complex digital evidence, establishing intent parameters, and challenging government attribution.

Lack of Knowledge or Intent

The government must prove beyond a reasonable doubt that you knowingly used another person's identity with fraudulent intent. Misunderstanding, lack of commercial awareness, or negligent handling of business records negates specific intent.

Supreme Court Knowledge Standard (Flores-Figueroa v. United States)

Under the benchmark U.S. Supreme Court decision in Flores-Figueroa v. United States, federal prosecutors must prove that the defendant knew the identifying information belonged to an actual, living person—rather than a fabricated or synthetic identity. If the prosecution cannot prove this specific knowledge, aggravated identity theft charges under § 1028A must be dismissed.

Digital Misattribution and Technical Challenges

IP addresses, server logs, and shared internet access points do not conclusively establish the physical identity of the person sitting at a keyboard. Defense teams work with forensic IT experts to challenge chain-of-custody protocols, digital attribution, and compromised network evidence.

Constitutional Violations and Motion Practice

If federal agents obtained digital evidence, emails, or hardware without a valid search warrant, or executed warrants outside their authorized scope, defense counsel can file motions to suppress evidence under the Fourth Amendment.

Frequently Asked Questions (FAQs)

Can you serve house arrest instead of prison for federal identity theft?

House arrest (home confinement) may be available as a condition of probation or supervised release for low-level, non-violent first-time offenders under 18 U.S.C. §§ 3551–3553. However, if you are convicted under 18 U.S.C. § 1028A (Aggravated Identity Theft), the statutory 2-year sentence is mandatory and must be served in a federal correctional facility.

What is the main difference between identity theft and aggravated identity theft?

Standard identity theft (18 U.S.C. § 1028) involves the unauthorized creation, possession, or use of personal identification documents or data, carrying discretionary sentences up to 15 years. Aggravated identity theft (18 U.S.C. § 1028A) occurs when identity theft is committed specifically during and in relation to another federal felony (like wire or bank fraud), requiring a mandatory consecutive 2-year prison sentence.

How do federal loss calculations affect sentencing in identity theft cases?

Under Section 2B1.1 of the U.S. Sentencing Guidelines, the advisory prison range increases significantly based on the intended or actual financial loss caused by the fraud scheme. Higher dollar values, a high number of victims, or sophisticated scheme enhancements directly increase the recommended sentence.

Can identity theft charges be dropped if I repay the victims?

While paying full restitution or compensating victims does not automatically force federal prosecutors to drop criminal charges, early restitution can be critical mitigation. Demonstrating early financial recovery and acceptance of responsibility can help you negotiate favorable plea agreements or seek downward judicial variances at sentencing.

Is using a synthetic or fake identity considered aggravated identity theft?

No. The U.S. Supreme Court has ruled that to secure a conviction for aggravated identity theft under 18 U.S.C. § 1028A, prosecutors must prove the defendant knew the identifying information belonged to a real person. Using entirely fabricated numbers or synthetic identities that do not belong to an actual individual does not satisfy § 1028A statutory requirements.

What should I do if contacted by FBI or Secret Service agents regarding identity fraud?

If federal agents attempt to interview you or serve a search warrant, politely exercise your right to remain silent under the Fifth Amendment. Do not answer questions, provide voluntary statements, or sign documents without your defense lawyer present. Contact a federal criminal defense attorney immediately.

Speak with a Criminal Defense Lawyer

If you, a family member, or your business is under investigation by federal authorities or facing an indictment under 18 U.S.C. § 1028 or § 1028A, immediate legal intervention is critical.

Federal agencies often spend months building cases, conducting covert digital surveillance, and issuing grand jury subpoenas before unsealing formal charges. Early legal representation allows your legal team to manage interactions with federal prosecutors, conduct independent technical audits, and protect your constitutional rights.

Our legal team defends clients against complex federal identity theft indictments, white-collar fraud allegations, and parallel asset forfeiture proceedings.

Contact Eisner Gorin LLP in Los Angeles, California, at (818) 781-1570 or submit a request through our secure contact form to schedule a confidential consultation regarding your federal case.

Federal Identity Theft