1. What Must Prosecutors Prove under New York Identity Theft Law?
Identity theft requires more than possession of another person's personal information. Prosecutors must prove that the defendant knowingly assumed another person's identity with intent to defraud and that the conduct satisfied an additional statutory condition.
Identity Assumption and Intent to Defraud
Identity assumption may involve impersonation or using identifying information such as a Social Security number, credit card account, or electronic signature.
Account applications and communications may reveal whether the defendant deliberately presented themselves as someone else. Access to personal information alone does not establish fraudulent intent or the additional conduct required for a conviction.
When Authorized Access Becomes Identity Misuse
Third-degree identity theft under §190.78 may involve obtaining property or services, using another person's credit, causing financial loss, or committing a Class A misdemeanor or higher crime through fraudulent identity assumption.
Someone may have permission to access a relative's account without authorization to apply for credit in that person's name. The scope of permission can affect whether the alleged conduct meets the statute.
Unauthorized account activity may also raise cyber financial crime issues, particularly when several individuals could access the same account.
2. How Do Identity Theft Charges Differ by Degree?
New York classifies identity theft into three degrees based on statutory conduct, financial thresholds, qualifying criminal activity, and certain prior convictions. Financial loss is one basis for classification, but not the only one.
| Offense | Principal statutory criteria | Classification |
|---|---|---|
| Third degree, §190.78 | Qualifying identity misuse involving property, services, credit, financial loss, or a Class A misdemeanor or higher crime | Class A misdemeanor |
| Second degree, §190.79 | More than $500 in qualifying value or loss, specified felony conduct, or qualifying prior convictions | Class E felony |
| First degree, §190.80 | More than $2,000 in qualifying value or loss, specified Class D or higher felony conduct, or qualifying prior convictions | Class D felony |
Third degree, §190.78
- Principal statutory criteriaQualifying identity misuse involving property, services, credit, financial loss, or a Class A misdemeanor or higher crime
- ClassificationClass A misdemeanor
Second degree, §190.79
- Principal statutory criteriaMore than $500 in qualifying value or loss, specified felony conduct, or qualifying prior convictions
- ClassificationClass E felony
First degree, §190.80
- Principal statutory criteriaMore than $2,000 in qualifying value or loss, specified Class D or higher felony conduct, or qualifying prior convictions
- ClassificationClass D felony
Each degree contains alternative statutory grounds. Prosecutors must establish the requirements of the provision supporting the charge.
Penal Law §190.80-a separately establishes aggravated identity theft, a Class D felony. It applies to qualifying fraudulent identity assumption when the defendant knows the person is an armed forces member deployed outside the continental United States and the conduct results in more than $500 in specified value, credit use, or financial loss.
Financial Thresholds and Higher-Degree Charges
Sections 190.79 and 190.80 establish aggregate monetary thresholds exceeding $500 and $2,000, respectively. The amounts concern qualifying property, services, credit use, or financial losses resulting from the charged conduct.
Higher-degree charges may also rest on specified criminal activity or qualifying convictions within five years. The prior-conviction provisions require an underlying third-degree offense for a second-degree enhancement, or an underlying second-degree offense for a first-degree enhancement.
The charging instrument should identify the relevant amount, qualifying offense, or prior conviction. Sentencing consequences are addressed separately under identity theft penalties.
Credit Card Fraud and Related Charges
Using another person's credit card information may support identity theft charges when the statutory requirements are satisfied. The same conduct may also support larceny or other financial charges.
A purchase record does not necessarily identify who completed a transaction. Authentication logs, delivery addresses, and device records may distinguish the defendant from another person with account access. These details matter when the defendant disputes involvement.
3. How Long Can Prosecutors Bring Identity Theft Charges?
Criminal Procedure Law §30.10 generally provides two years for misdemeanor prosecutions and five years for felonies. The applicable period depends on the charged offense and any statutory exclusions or extensions.
Filing Deadlines by Offense
Third-degree identity theft, a Class A misdemeanor, generally carries a two-year limitation period. First- and second-degree identity theft are felonies generally subject to five years.
The period ordinarily runs from the commission of the charged offense, not the victim's discovery of the fraud. Separate alleged offenses may have different commission dates and filing deadlines.
Tolling Rules and Multiple Transactions
Under CPL §30.10(4)(a), certain periods may be excluded when a defendant remains continuously outside the state or their whereabouts remain continuously unknown and cannot be determined through reasonable diligence. That provision cannot extend the ordinary period by more than five additional years.
Other statutory exclusions may apply to previously commenced criminal actions that were subsequently dismissed. Multiple transactions may therefore require separate limitations calculations.
4. What Financial Liability Can Follow Identity Theft Charges?
Identity theft convictions may result in restitution as well as criminal fines. Restitution addresses qualifying losses arising from criminal conduct, while civil damages require a separate legal basis.
Criminal Restitution and Documented Losses
Under Penal Law §60.27, courts must consider restitution at sentencing and generally order qualifying restitution when a victim requests it, unless the interests of justice dictate otherwise. Courts must explain on the record when restitution is denied.
For specified identity theft offenses, recoverable losses may include costs from adverse actions, reasonable time spent remedying harm, and consequential financial losses.
Restitution generally cannot exceed $15,000 for felonies or $10,000 for nonfelony offenses. Higher amounts may be allowed with defendant consent, as a probation or conditional discharge condition, or under statutory property-return and medical-expense exceptions. A hearing is required if evidence is insufficient or the defendant requests one.
Civil Damages and Separate Claims
Identity theft victims may pursue civil claims under applicable legal theories. Recoverable damages depend on the cause of action, proven injury, causation, and available remedies.
Penal Law §60.27(6) preserves potential civil liability for damages exceeding restitution payments. However, the amount alleged in a criminal case does not automatically establish recoverable civil damages.
23 Apr, 2026
