1. Criminal Liability under New York Penal Law
New York Penal Law Section 190.78 defines identity theft as the unauthorized use of personal identifying information of another person to obtain credit, goods, services, or to commit or attempt to commit a felony. The statute creates multiple degrees of the offense, each carrying escalating penalties. First-degree identity theft, the most serious charge, applies when the underlying offense involves obtaining goods or services worth more than one thousand dollars, or when the defendant has been previously convicted of identity theft within the preceding ten years. Second-degree and third-degree identity theft involve lower monetary thresholds or fewer aggravating factors. Prosecutors must prove that the defendant acted with intent to defraud, meaning they knew the information belonged to another and deliberately used it without authorization. The mental state requirement distinguishes identity theft from mere negligence or mistake.
Burden of Proof and Evidentiary Standards
In criminal proceedings, the burden rests entirely on the prosecution to prove guilt beyond a reasonable doubt. This standard is the highest in the American legal system and reflects the principle that conviction should occur only when the evidence is so persuasive that a reasonable person would not hesitate to rely on it in making important decisions. Prosecutors must establish each element of identity theft, including the defendant's knowledge of the victim's identity, the unauthorized nature of the use, and the intent to defraud. Evidence typically includes financial records, communications, account access logs, and victim testimony regarding unauthorized transactions. The prosecution's case hinges on demonstrating a direct link between the defendant's actions and the fraudulent use of personal information.
Sentencing and Incarceration Exposure
Conviction for identity theft can result in substantial prison sentences. Third-degree identity theft carries a maximum sentence of up to one year in jail. Second-degree identity theft is a felony punishable by up to three years in prison. First-degree identity theft carries a maximum sentence of up to fifteen years in prison. Judges have discretion in sentencing and consider factors such as the defendant's prior criminal history, the sophistication of the scheme, the number of victims, and the amount of loss caused. Sentences may also include probation, restitution orders, and fines in addition to or instead of incarceration.
2. Restitution and Financial Obligations
New York law requires courts to order restitution when a defendant is convicted of identity theft. Restitution represents compensation paid by the defendant to the victim for losses directly caused by the crime. This obligation is separate from any criminal sentence and reflects the principle that offenders should make victims whole to the extent possible. Identity theft cases often involve complex calculations of losses, including fraudulent charges, credit monitoring costs, and expenses incurred in restoring credit. Courts may order restitution even when the defendant lacks current ability to pay, creating a long-term financial obligation that can extend years beyond the criminal sentence.
Civil Liability for Victims
Beyond criminal prosecution, victims of identity theft may pursue civil remedies. The Fair Credit Reporting Act and New York state law provide bases for civil suits seeking damages from both the perpetrator and, in some circumstances, from financial institutions or credit bureaus that failed to exercise reasonable care. Victims may recover actual damages, statutory damages, and attorney's fees. Civil proceedings use the lower preponderance of the evidence standard, meaning the plaintiff need only show it is more likely than not that the defendant committed the offense. This lower threshold makes civil recovery more achievable than criminal conviction, though the defendant's ability to satisfy a judgment remains a practical limitation.
3. Civil Causes of Action and Damages
Victims injured by identity theft can bring civil suits against perpetrators under various theories. Common causes of action include fraud, conversion (unauthorized taking of personal information for economic benefit), and violation of the New York General Business Law Section 349, which prohibits deceptive practices. Identity theft lawsuits seek compensatory damages for out-of-pocket losses, emotional distress, and costs associated with credit restoration. Statutory damages under federal law may provide recovery even when actual damages are difficult to quantify. Civil suits proceed independently from criminal cases, meaning a defendant may face both criminal prosecution and civil liability for the same conduct.
New York State Court Procedures in Identity Theft Cases
Civil identity theft cases in New York are typically filed in Supreme Court or lower courts depending on the amount in controversy. Queens cases fall within the jurisdiction of the Queens County Supreme Court, which handles complex commercial and fraud disputes. Early case management and motion practice often focus on establishing the defendant's identity and connection to fraudulent accounts. Discovery disputes frequently arise regarding access to financial records, bank statements, and communications that establish unauthorized use. Documentation timing proves critical; delayed reporting of identity theft can complicate proof of when unauthorized transactions occurred, affecting damages calculations and potentially influencing how courts assess the credibility of loss documentation presented at trial or summary judgment proceedings.
4. Statutory Framework and Procedural Defenses
Defendants charged with identity theft may raise various defenses depending on the facts. Authorization is a complete defense; if the defendant had permission from the victim to use personal information, the unauthorized element is negated. Mistake of fact regarding the victim's identity can defeat the intent element, though this defense succeeds only when the defendant genuinely believed they were using their own information or information they had authority to use. Statute of limitations considerations apply; identity theft prosecutions generally must commence within five years of the offense. In civil cases, the statute of limitations for fraud is typically three years from discovery of the offense.
Collateral Consequences and Collateral Impacts
Conviction for identity theft carries consequences beyond criminal penalties. Employment prospects may suffer, particularly in positions requiring security clearances or involving financial responsibility. Professional licenses may be suspended or revoked. Immigration consequences apply to non-citizens. Reputational harm extends beyond the courtroom, affecting family relationships and community standing. These collateral impacts, while not part of the formal sentence, significantly shape the practical consequences of conviction and inform strategic considerations in both criminal and civil contexts.
5. Strategic Considerations and Documentation
From a practitioner's perspective, cases involving identity theft often turn on the quality and timing of documentation. For those facing potential liability, early attention to record preservation, communication patterns, and the factual basis for any claimed authorization becomes critical before dispositive motions or trial. Victims should contemporaneously document all fraudulent transactions, preserve account statements, and maintain records of expenses incurred in addressing identity theft. Formal notice to financial institutions and credit bureaus should be made in writing and retained. Understanding which losses qualify for restitution under New York law and which fall outside the scope of criminal restitution helps shape expectations regarding recovery. These forward-looking steps—establishing a clear record of loss, documenting the timeline of discovery, and preserving evidence of the defendant's knowledge and intent—directly affect both criminal exposure and civil recovery potential.
17 Apr, 2026
