Kentucky Identity Theft Laws and Victim Remedies
Understand how Kentucky defines identity theft, what penalties apply, and the concrete steps victims can take to recover and protect themselves.
Identity theft in Kentucky is treated as a serious crime with felony-level penalties, potential forfeiture of ill-gotten gains, and both criminal and civil remedies available to victims. This guide explains how Kentucky law defines identity theft, what prosecutors must prove, the penalties offenders face, and the practical and legal options victims have to protect themselves and seek compensation.
What Counts as Identity Theft Under Kentucky Law?
Kentucky’s main identity theft statute is KRS 514.160, Theft of Identity. Under this law, a person commits theft of identity when they knowingly use or possess someone else’s identifying information with the intent to pretend to be that person for specific unlawful purposes.
Key elements of theft of identity
- Knowingly using or possessing another person’s identifying information.
- The information can belong to a current or former victim, a family member, or an ancestor of that victim.
- The information must be used or held with the intent to represent oneself as the other person.
- That impersonation must be for one of several listed purposes, such as obtaining property or avoiding detection.
Importantly, the statute does not require the victim to suffer a financial loss before a crime occurs; the focus is on the offender’s intent and conduct.
Examples of “identifying information”
Kentucky law uses a broad definition of identifying information, including both traditional and modern identifiers.
- Full name and home address
- Telephone number or email address
- Social Security number
- Driver’s license number
- Date of birth
- Personal identification numbers (PINs) or security codes
- Financial account numbers
- Biometric identifiers (for example, unique fingerprint or facial recognition data)
Because the definition is so broad, many types of modern fraud—such as opening credit accounts online or using stolen login credentials—can fall under the theft of identity statute when tied to impersonation and wrongful gain.
Unlawful purposes covered by the statute
The law lists specific motives that transform misuse of personal data into theft of identity:
- Depriving the person of property (for example, draining a bank account)
- Obtaining benefits or property that the offender is not entitled to
- Making financial or credit transactions using the other person’s identity
- Avoiding detection or concealing one’s true identity
- Obtaining a commercial or political benefit
If the prosecution can show the offender acted with one of these purposes, the conduct may be charged as theft of identity.
Narrow exception for minor age misrepresentation
Kentucky’s identity theft statute includes an explicit exception: it does not apply when someone uses another identity solely to misrepresent their age to obtain alcohol, tobacco, or another privilege denied to minors. That conduct may still be illegal under other laws, but it is carved out from the theft of identity statute itself.
Related Identity Theft and Fraud Offenses in Kentucky
Theft of identity is part of a broader legal framework that targets misuse of personal and financial information. Other Kentucky statutes address related conduct:
- Disclosure of information from a financial information repository (KRS 434.872) – unauthorized access or disclosure of data held by banks or other financial institutions (Class D felony).
- Trafficking in financial information (KRS 434.874) – buying, selling, or transferring financial information with fraudulent intent (Class C felony).
- Trafficking in stolen identities (KRS 517.170) – dealing in multiple stolen identities, treated more severely than a single instance of theft of identity (Class C felony).
These statutes allow prosecutors to address both the individual who misuses a stolen identity and those who trade in large batches of personal data.
Trafficking in stolen identities
In large-scale schemes, individuals may possess numerous identities for use in future fraud. Kentucky classifies trafficking in stolen identities as a Class C felony, reflecting the elevated risk and harm posed by such conduct. While KRS 517.170 contains the specific definition, the key idea is that dealing in multiple stolen identities is treated as a more serious offense than a single theft of identity.
Criminal Penalties for Identity Theft in Kentucky
All identity theft–related offenses in Kentucky are treated as felonies. Sentencing depends on the classification of the offense and the defendant’s criminal history.
Felony classifications and sentencing ranges
| Offense | Felony Class | Typical Prison Range | Potential Fine |
|---|---|---|---|
| Theft of identity (KRS 514.160) | Class D felony | 1–5 years imprisonment | Generally $1,000–$10,000 for felonies |
| Trafficking in stolen identities (KRS 517.170) | Class C felony | 5–10 years imprisonment | Generally $1,000–$10,000 for felonies |
| Disclosure of information from financial repository (KRS 434.872) | Class D felony | 1–5 years imprisonment | Generally $1,000–$10,000 for felonies |
| Trafficking in financial information (KRS 434.874) | Class C felony | 5–10 years imprisonment | Generally $1,000–$10,000 for felonies |
The exact sentence will depend on factors such as the defendant’s prior record, any applicable sentencing enhancements, and the circumstances of the offense.
Forfeiture of unlawful gains
KRS 514.160 contains a forfeiture provision: a person convicted of theft of identity must forfeit any claim to the identifying information, property, or other benefits obtained as a result of the crime. This allows courts to strip offenders of profits derived from the fraudulent use of someone else’s identity.
Restitution to victims and financial institutions
Kentucky courts can order offenders to pay restitution to victims and affected financial institutions. Restitution may include:
- Costs to correct or repair a damaged credit record
- Lost wages associated with resolving the identity theft
- Attorney’s fees incurred to fix the consequences of the crime
- Direct losses sustained by banks or other financial institutions
Restitution is intended to make victims financially whole, to the extent possible, separate from any criminal fines imposed by the court.
Who can prosecute identity theft cases?
Identity theft cases may be prosecuted by local county or Commonwealth’s attorneys. In addition, the Kentucky Attorney General has concurrent authority to bring certain identity theft prosecutions, which can be important for complex or multi-county schemes. This overlapping jurisdiction can help ensure serious cases are pursued even when they cross local boundaries.
Civil Lawsuits and Victim Remedies
In addition to criminal prosecution, victims of identity theft in Kentucky may have the right to bring a civil lawsuit against the offender. Civil actions allow victims to seek compensation beyond what might be covered through criminal restitution.
Possible civil claims and damages
Depending on the facts, a victim may bring claims such as theft, fraud, or statutory violations. Potential civil remedies include:
- Compensatory damages for financial losses, time spent correcting records, and related out-of-pocket costs
- Punitive damages to punish particularly egregious or intentional misconduct
- Attorney’s fees and litigation costs if allowed under applicable law or statute
If a business engages in identity theft and has done so more than once, it may also violate the Kentucky Consumer Protection Act, which can give rise to additional remedies and enforcement actions.
Interaction with the Kentucky Consumer Protection Act
Under KRS 514.160, a business that commits theft of identity on more than one occasion also violates the Consumer Protection Act. This link can allow the Kentucky Attorney General or private plaintiffs to pursue broader consumer protection remedies and may increase the financial exposure for a business that mishandles or misuses customer information.
Recognizing Identity Theft in Kentucky
Because early detection can limit damage, Kentucky authorities encourage residents to watch for warning signs of identity theft. Common red flags include:
- Bills or account statements for accounts you never opened
- Debt collection calls or letters about debts that do not belong to you
- Bank or credit card statements that stop arriving unexpectedly
- Unfamiliar transactions or withdrawals from your accounts
- Notices from the IRS or Kentucky Department of Revenue about returns you did not file
- Letters about unemployment or other benefits you never applied for
If you see any of these indicators, prompt action is critical to limiting the impact and preserving evidence.
What to Do if Your Identity Is Stolen in Kentucky
The Kentucky Attorney General and other consumer-protection resources recommend a series of steps for victims of identity theft. The sequence may vary depending on the situation, but the following actions are commonly advised.
1. Contact financial institutions
- Call your bank, credit card companies, and any other affected businesses immediately.
- Ask them to freeze or close compromised accounts and dispute unauthorized transactions.
- Request new account numbers, cards, and PINs as needed.
2. Place a fraud alert or credit freeze
You can place a fraud alert or a security freeze on your credit reports with the major credit reporting agencies.
- A fraud alert tells lenders to take extra steps to verify your identity before opening new credit.
- A credit freeze restricts new creditors from accessing your report, making it harder for someone to open new accounts in your name.
Under federal law, these tools are generally available free of charge, and the Kentucky Attorney General recommends using them promptly after suspected identity theft.
3. Review your credit reports
Once alerts or freezes are in place, request your credit reports and review them carefully for signs of fraud:
- Accounts you did not open
- Inquiries from lenders you did not contact
- Addresses or employers you do not recognize
- Debts in collection that do not belong to you
Dispute any inaccurate information with the credit bureaus and the creditors reporting it.
4. Report the crime to law enforcement
Victims should report identity theft to local law enforcement and obtain a police report whenever possible.
- Visit or call your local police department to file a report.
- Bring copies of suspicious bills, credit reports, or notices to document the fraud.
- Ask that all known fraudulent accounts be listed in the report.
A police report can help when dealing with creditors and may be needed if you pursue a civil lawsuit.
5. Notify the Kentucky Attorney General
The Kentucky Attorney General’s Office maintains consumer resources and a complaint portal for identity theft victims.
- Victims can submit an online scam or identity theft complaint.
- The office may provide guidance, resources, and, in some cases, assist with broader enforcement efforts.
6. Protect your tax and government records
Tax identity theft and benefit fraud are common forms of identity misuse.
- File your tax returns as early as possible to reduce the risk of fraudulent filings in your name.
- Respond promptly to any letters from the IRS or Kentucky Department of Revenue about returns or accounts you do not recognize.
- Follow the instructions in official notices to confirm your identity and report suspected fraud.
7. Keep organized records
Both the Kentucky Attorney General and other consumer resources stress the importance of maintaining a detailed record of your efforts to resolve identity theft.
- Keep a log of all phone calls, including dates, names, and reference numbers.
- Save copies of letters, emails, and forms sent to or received from banks, creditors, and agencies.
- Store police reports, complaint confirmations, and credit bureau responses in one place.
These records support your credibility, help track progress, and may be crucial evidence in any later legal action.
Preventive Tips for Kentucky Residents
While no strategy can eliminate the risk of identity theft, good habits can significantly reduce your exposure.
- Shred documents containing personal or financial information before discarding them.
- Use strong, unique passwords and enable multifactor authentication on financial and email accounts.
- Monitor bank and credit card statements regularly for unexpected charges.
- Be cautious about sharing personal data on social media or with unknown callers or websites.
- Consider periodic credit monitoring so that unusual activity is flagged quickly.
These steps, combined with awareness of Kentucky’s legal protections, can help individuals respond promptly if a problem arises.
Frequently Asked Questions About Kentucky Identity Theft Law
Is identity theft in Kentucky always a felony?
Yes. Theft of identity under KRS 514.160 is classified as a Class D felony, and related offenses such as trafficking in stolen identities are felonies as well. The severity of the felony (Class C or D) depends on the specific statute and conduct involved.
Do I have to lose money for a crime to be charged?
No. The statute focuses on knowing use or possession of identifying information with the intent to impersonate someone for certain unlawful purposes. Actual financial loss may influence sentencing and restitution but is not always required for a charge.
Can a business be liable for identity theft in Kentucky?
Yes. A business can be prosecuted under the theft of identity statute. If the business has engaged in such conduct more than once, it may also be deemed to have violated the Kentucky Consumer Protection Act, exposing it to additional enforcement and civil liability.
What if someone uses my identity only to buy alcohol or tobacco?
KRS 514.160 specifically excludes cases where a person uses another identity solely to misrepresent their age to obtain alcohol, tobacco, or similar privileges denied to minors. Such behavior may still be illegal under other laws, but it is not prosecuted as theft of identity under this statute.
Where can I get help if I am a victim?
Victims should contact local law enforcement, their financial institutions, the major credit bureaus, and the Kentucky Attorney General’s Office for assistance and guidance. Depending on the scope of the harm, it may also be wise to consult a private attorney about potential civil claims.
References
- Kentucky Identity Theft Laws — FindLaw. 2024-01-01. https://www.findlaw.com/state/kentucky-law/kentucky-identity-theft-laws.html
- Kentucky Revised Statutes § 514.160 – Theft of identity — Kentucky Legislature. 2022-07-15. https://apps.legislature.ky.gov/law/statutes/statute.aspx?id=19818
- Kentucky Revised Statutes § 514.160 (2025) – Theft of identity — Justia. 2025-01-01. https://law.justia.com/codes/kentucky/chapter-514/section-514-160/
- Kentucky Identity Theft Lawyer — Dan Carman, Lexington Defense. 2023-06-01. https://www.lexingtondefense.com/identity-theft/
- Identity Theft — Kentucky Attorney General. 2023-08-10. https://ag.ky.gov/Resources/Consumer-Resources/Consumers/Pages/Identity-Theft.aspx
- How To Recognize Signs of Identity Theft in Kentucky — McBrayer Law. 2023-05-15. https://www.mlcfirm.com/blog/how-to-recognize-signs-of-identity-theft-in-kentucky/
- Identity Theft — Kentucky Justice Online. 2022-11-01. https://www.kyjustice.org/topics/money-debt/identity-theft
Similar Articles
Read full bio of Sneha Tete
