Key Takeaways

  • Two Distinct Crimes: Federal prosecutors frequently charge both 18 U.S.C. § 1028(a)(7) (identity theft) and 18 U.S.C. § 1028A (aggravated identity theft) in tandem, but these statutes carry vastly different penalties and evidentiary burdens.
  • Mandatory Consecutive Sentence: A conviction under § 1028A triggers a mandatory two-year prison term that must run consecutively to any other sentence, including the underlying predicate felony offense.
  • Scienter is Critical: The government must prove the defendant knowingly possessed or used another person’s means of identification, not merely that the defendant acted negligently or recklessly.
  • Sentencing Exposure is Severe: Combined charges can yield 20+ years in federal prison, especially when aggravated identity theft is stacked on top of wire fraud, bank fraud, or access device fraud.

Federal identity theft prosecutions have surged over the past decade, driven by federal law enforcement priorities targeting cybercrime, organized fraud rings, and large-scale data breaches. A single indictment can allege dozens of counts under multiple statutes, each carrying significant prison time. For individuals facing these charges, the stakes are existential. The prosecution’s case often hinges on digital evidence, financial records, and witness testimony that can be challenged through rigorous pretrial motion practice.

The legal framework governing identity theft is complex and layered. Two primary statutes—18 U.S.C. § 1028 and 18 U.S.C. § 1028A—operate in tandem but serve distinct purposes. Section 1028(a)(7) criminalizes the knowing transfer, possession, or use of another person’s means of identification without lawful authority. Section 1028A, by contrast, is a penalty enhancement statute that imposes a mandatory two-year consecutive sentence when the defendant knowingly uses another person’s means of identification during the commission of a specified felony offense. Understanding the interplay between these statutes is essential for any defendant evaluating plea offers or trial strategy.

The Statutory Framework: Distinguishing § 1028(a)(7) from § 1028A

The government often charges both statutes in a single indictment, but each requires proof of different elements. Under 18 U.S.C. § 1028(a)(7), the prosecution must establish four elements beyond a reasonable doubt: (1) the defendant knowingly transferred, possessed, or used; (2) a means of identification of another person; (3) without lawful authority; and (4) with intent to commit, aid, or abet any unlawful activity that constitutes a violation of federal law or a felony under state or local law. The statute defines “means of identification” broadly, encompassing names, Social Security numbers, driver’s license numbers, passport numbers, and biometric data.

Section 1028A, however, does not require intent to commit a separate unlawful act. Instead, the statute operates as a sentence enhancement triggered by the defendant’s knowing use of another person’s identification during the commission of a predicate felony offense. The predicate offenses are enumerated in the statute and include, among others, wire fraud (18 U.S.C. § 1343), bank fraud (18 U.S.C. § 1344), mail fraud (18 U.S.C. § 1341), and access device fraud (18 U.S.C. § 1029). The government must prove the defendant knew the identification belonged to another person—a distinct and often difficult evidentiary hurdle.

The practical consequence of this statutory structure is that defendants frequently face a “stacked” indictment. For example, a defendant accused of using stolen credit card numbers to purchase goods online might face one count of wire fraud under § 1343, one count of identity theft under § 1028(a)(7), and one count of aggravated identity theft under § 1028A. If convicted on all counts, the mandatory two-year sentence for § 1028A runs consecutively to the wire fraud sentence, potentially adding years to the total term of imprisonment.

Critical Distinction: The Supreme Court in Flores-Figueroa v. United States (2009) held that § 1028A requires the government to prove the defendant knew the means of identification belonged to a real person. Mere knowledge that the identification was fake or fabricated is insufficient.

Sentencing Exposure and the United States Sentencing Guidelines

The penalties for identity theft offenses are severe and non-discretionary in critical respects. A conviction under 18 U.S.C. § 1028(a)(7) carries a maximum sentence of 15 years in federal prison, a fine, and restitution to victims. If the offense involves the theft of more than ten means of identification, the statutory maximum increases to 20 years. Section 1028A, however, mandates a flat two-year sentence that cannot be reduced by the court, regardless of mitigating circumstances. This mandatory minimum is strictly consecutive, meaning it must be served after any other sentence imposed in the case.

The United States Sentencing Guidelines (USSG) further compound the exposure. Under USSG § 2B1.6, the guideline sentence for aggravated identity theft is the two-year mandatory minimum, but the underlying offense—such as fraud—is scored separately. Identity theft itself triggers specific enhancements under USSG § 2B1.1(b)(11) if the offense involved the unauthorized transfer or use of means of identification. These enhancements can add 2 to 6 levels, dramatically increasing the advisory guideline range. For example, a defendant with a base offense level of 7 for fraud could see the level rise to 13 or higher with identity theft enhancements, resulting in a guideline range of 30 to 37 months—before the mandatory consecutive two years is added.

Restitution is another significant consequence. The Mandatory Victims Restitution Act (18 U.S.C. § 3663A) requires the court to order full restitution to victims of identity theft, including financial institutions and individual victims. Restitution amounts can reach hundreds of thousands of dollars, and the obligation survives any bankruptcy discharge. Defendants should also be aware that the government may seek forfeiture of property traceable to the offense under 18 U.S.C. § 982, including bank accounts, vehicles, and real estate.

  • Statutory Maximums: 15 years for basic § 1028(a)(7); 20 years if 10+ means of identification are involved; 2 years mandatory consecutive for § 1028A.
  • Guideline Enhancements: USSG § 2B1.1(b)(11) adds 2-6 levels for identity theft; sophisticated means enhancements under § 2B1.1(b)(10) may add 2 levels.
  • Collateral Consequences: Supervised release, mandatory restitution, forfeiture, and potential civil suits from victims.

Challenging the Government’s Case: Pretrial Motions and Trial Strategies

The most effective defense often begins before trial with a motion to suppress evidence or dismiss the indictment. Federal Rule of Criminal Procedure 12(b)(3) permits defendants to challenge the sufficiency of the indictment, including allegations that fail to state an offense. If the indictment fails to specify the predicate felony offense for § 1028A, dismissal may be warranted. Courts have consistently held that the indictment must provide sufficient notice of the predicate offense to allow the defendant to prepare a defense.

Suppression motions under Rule 12(b)(3)(C) are equally critical. Many identity theft cases originate from searches of electronic devices, cell phones, or cloud accounts. If law enforcement obtained evidence through a warrant that lacks probable cause, or executed a search in violation of the Fourth Amendment, the exclusionary rule may bar the government from using that evidence at trial. The Supreme Court’s decision in Riley v. California (2014) established that officers generally must obtain a warrant before searching a cell phone, and any evidence seized in violation of that rule may be suppressed.

At trial, the defense can attack the government’s case on multiple fronts. First, the knowledge element under § 1028A is a high bar. The government must prove the defendant knew the identification belonged to a real, existing person. If the defendant believed the identification was fabricated or belonged to a fictional entity, the conviction cannot stand. Second, the government must prove the defendant acted “without lawful authority.” If the defendant had permission from the person whose identification was used—even if that permission was obtained through deception—the element may fail. Third, the defense can challenge the identification evidence itself, arguing that the government cannot prove the defendant was the person who used the identification, particularly in cases involving remote access or anonymous online activity.

Jury instructions are another battleground. Defense counsel should request instructions that precisely define “knowingly” and “means of identification,” and that require the jury to find each element separately. In United States v. Miller (2019), the Ninth Circuit held that the government must prove the defendant knew the identification was not their own and that it belonged to another person. A failure to provide such an instruction constitutes reversible error.

Frequently Asked Questions

Q: Can a defendant avoid the mandatory two-year sentence under § 1028A by pleading guilty to the underlying offense but not to the aggravated identity theft count?

A: Yes, but only if the government agrees to dismiss the § 1028A count as part of a plea agreement. The prosecution has substantial discretion in charging decisions, and plea negotiations may result in the dismissal of the aggravated identity theft count in exchange for a guilty plea to the predicate offense. However, the government rarely dismisses § 1028A without significant concessions from the defendant, such as cooperation or acceptance of a higher sentence on the predicate offense. Defendants should understand that the mandatory two-year sentence cannot be waived or reduced by the court if the conviction stands.

Q: Does the government need to prove the defendant knew the victim was a real person under § 1028A?

A: Yes. The Supreme Court’s decision in Flores-Figueroa v. United States (2009) explicitly held that § 1028A requires the government to prove the defendant knew the means of identification belonged to a real person. This is a critical distinction from § 1028(a)(7), which requires intent to commit unlawful activity but does not necessarily require knowledge that the identification belonged to an actual individual. Defense counsel should aggressively challenge any evidence that suggests the defendant believed the identification was fabricated or fictitious.

Facing federal identity theft charges is an extraordinarily serious matter with life-altering consequences. The combination of mandatory minimums, consecutive sentences, and guideline enhancements can produce a sentence of 10, 15, or even 20 years in federal prison. No defendant should navigate this process without experienced legal counsel. An attorney can evaluate the strength of the government’s evidence, file dispositive motions, negotiate with prosecutors, and prepare a robust defense for trial. Time is of the essence—pretrial motions must be filed within deadlines set by the court, and early investigation is critical to preserving evidence and witness testimony.

If you or a loved one are under investigation or have been indicted for federal identity theft, contact our firm immediately for a confidential consultation. The federal criminal justice system moves quickly, and the decisions made in the first weeks after an indictment can determine the outcome of the case. Our attorneys have extensive experience defending clients against § 1028 and § 1028A charges, and will fight to protect your rights, your freedom, and your future.