Pennsylvania Identity Theft Laws Explained

A clear guide to Pennsylvania identity theft charges, penalties, and reporting steps.

By Medha deb
Created on

Identity theft is more than a financial nuisance. In Pennsylvania, it is a criminal offense that can lead to misdemeanor or felony charges depending on how the identifying information was used, the value involved, and the victim’s age. The law also gives victims several reporting options and recovery tools.

What Pennsylvania Means by Identity Theft

Under Pennsylvania law, identity theft occurs when a person possesses or uses another person’s identifying information without consent to further an unlawful purpose. The statute is broad enough to cover conduct such as using someone else’s bank details, Social Security number, credit card information, or similar personal data to commit fraud or obtain something of value.

The key point is not just possession. The information must be used, or intended to be used, for an unlawful purpose. That distinction matters because a person may have access to someone else’s personal data without necessarily committing identity theft unless the data is tied to illegal conduct.

Types of Information That May Be Protected

Identity theft cases often involve records or numbers that can be used to impersonate another person or access money, accounts, services, or benefits. Protected information commonly includes:

  • Social Security numbers
  • Bank account and routing numbers
  • Credit card numbers
  • Date of birth and similar personal identifiers
  • Insurance account information
  • Cell phone service records or account access data

Because the law focuses on “identifying information,” the exact facts of each case matter. A prosecutor will usually look at how the information was obtained, how it was used, and what loss or benefit resulted from the conduct.

How the Offense Is Graded

Penalties in Pennsylvania depend largely on the value of the property or services obtained through the misuse of identifying information. The same conduct may also be treated more seriously if it involves conspiracy, repeated offenses, or a vulnerable victim.

Situation Offense Level General Maximum Penalty
Value under $2,000 First-degree misdemeanor Up to 5 years in prison and a fine up to $10,000
Value of $2,000 or more Third-degree felony Up to 7 years in prison and a fine up to $15,000
Committed in furtherance of conspiracy Third-degree felony Up to 7 years in prison and a fine up to $15,000
Third or subsequent offense Second-degree felony Up to 10 years in prison

These grading rules show that even a relatively small amount of loss can trigger serious criminal exposure. Repeated conduct or coordinated activity can raise the stakes quickly.

When the Penalty Increases

Pennsylvania law increases the grading of identity theft in certain situations. If the victim is 60 years of age or older, a care-dependent person, or a minor under 18, the offense is graded one level higher than it would otherwise be. That means a charge that might normally be a misdemeanor can become a felony, depending on the facts.

The law also treats each separate use of the stolen information as its own offense. If a person uses the same account or identity data multiple times in different transactions, prosecutors may charge multiple counts. In some cases, the total value of the conduct may also be aggregated when it comes from one scheme or course of conduct.

Restitution and Financial Consequences

In addition to incarceration and fines, a court may order restitution. Restitution is designed to reimburse victims for losses connected to the offense. That can include direct financial losses and other reasonable expenses incurred because of the identity theft.

For victims, restitution may help cover out-of-pocket losses, but it does not always restore the time, stress, and disruption caused by fraudulent accounts or damaged credit. For defendants, restitution can become a major part of the sentence even in cases that do not lead to long prison terms.

Federal Charges May Also Be Possible

Identity theft is not just a state issue. Depending on the conduct, a person may also face federal charges. Federal law can apply when the scheme crosses state lines, involves federal agencies, or triggers a federal identity theft statute. Federal penalties can be severe and may include lengthy prison terms.

Because state and federal systems can both be involved, a defendant may need a defense strategy that addresses exposure in more than one court. The existence of a state charge does not prevent federal investigators from reviewing the same conduct if the facts support it.

Common Evidence in Identity Theft Cases

Identity theft cases often turn on digital records and financial documents. Investigators may review:

  • Bank and credit card statements
  • Login records and device histories
  • Shipping or billing addresses tied to accounts
  • Text messages, emails, or chat records
  • Surveillance footage from stores or ATMs
  • Application forms and account-opening documents

Because the evidence is often technical, a defense may focus on identity, access, intent, or whether the accused actually used the information for an unlawful purpose. In some cases, the issue is whether the accused was merely in possession of the data rather than the person who used it.

Possible Defense Themes

Every case depends on its facts, but several defense themes often appear in identity theft litigation. A lawyer may examine whether consent existed, whether the information was actually used, whether the accused had the required intent, or whether someone else was responsible for the transaction.

  • There was permission or a misunderstanding about permission
  • The accused did not use the information for an unlawful purpose
  • Another person carried out the fraudulent act
  • The value of the transaction was overstated
  • The evidence was obtained improperly or is incomplete

Even when the evidence looks strong, the grading of the offense, the number of counts, and the amount of loss can still be challenged. Those issues may affect plea negotiations, sentencing, or the final charge.

What Victims Should Do First

If you think your identity has been used without permission, speed matters. Quick action can limit additional harm and create a clearer paper trail for investigators, creditors, and tax authorities.

  1. Report the theft to local police.
  2. File a complaint with the Federal Trade Commission.
  3. Contact the Pennsylvania Attorney General’s consumer protection office.
  4. Notify the fraud departments of the major credit bureaus.
  5. Close or freeze compromised accounts.
  6. Save letters, account statements, and screenshots that show the fraud.

Victims of tax-related identity theft may also need to contact the Internal Revenue Service and the Pennsylvania Department of Revenue. That is especially important if a false return or rebate claim was filed using stolen personal information.

Warning Signs That Identity Theft May Be Happening

Some victims discover fraud only after a lender, employer, or government agency notices something unusual. Common warning signs include:

  • Unexpected bills or collection notices
  • Accounts you did not open
  • Credit score changes that do not match your activity
  • Mail missing from your home or mailbox
  • Unfamiliar tax refund notices or rejected tax filings
  • W-2 forms from an employer you do not recognize

These signs do not always prove identity theft on their own, but they are strong reasons to check credit reports, account activity, and tax records promptly.

How to Protect Personal Information Going Forward

Preventing identity theft is not always possible, but careful habits can reduce risk. A few practical steps include limiting what you share, safeguarding paper records, and being cautious with emails, phone calls, and websites asking for personal details.

  • Shred documents that contain account numbers or identification data
  • Use strong passwords and multi-factor authentication
  • Review financial statements regularly
  • Freeze credit if you do not need new accounts opened quickly
  • Be skeptical of urgent requests for personal information

These habits will not eliminate risk, but they can make it harder for someone to misuse your information without detection.

Why the Pennsylvania Statute Matters

Pennsylvania’s identity theft law matters because it provides a clear framework for law enforcement, prosecutors, victims, and courts. It defines the offense, explains when separate acts count separately, and sets out the main factors that influence grading. That structure gives prosecutors tools to charge serious cases while also giving defense counsel specific points to test.

For the public, the law also sends a simple message: using another person’s identifying information to commit an unlawful act can lead to major criminal consequences, even if the financial loss seems modest at first.

Frequently Asked Questions

Is it identity theft if someone only has my information?

Not necessarily. Pennsylvania law focuses on possessing or using identifying information without consent to further an unlawful purpose. Mere possession alone is not always enough without that unlawful use or intent.

Can one identity theft scheme lead to multiple charges?

Yes. Each separate use of identifying information can be charged as a separate offense. In addition, the value involved in a single scheme may be aggregated for grading purposes.

What happens if the victim is elderly?

If the victim is 60 or older, the offense is graded one level higher. The same enhancement can apply when the victim is a care-dependent person or a minor under 18.

Can a person be charged in federal court too?

Yes. Depending on the facts, identity theft may also trigger federal charges. That possibility depends on the scope of the conduct and the laws involved.

What should I do immediately after discovering identity theft?

Report the crime, preserve evidence, contact credit bureaus, and notify the relevant government agencies or financial institutions as soon as possible. Acting quickly can reduce further damage.

References

  1. 18 Pa.C.S. § 4120, Identity theft — Pennsylvania General Assembly. 2026-07-10. https://www.legis.state.pa.us/WU01/LI/LI/CT/HTM/18/00.041.020.000..HTM
  2. Report Identity Theft — Commonwealth of Pennsylvania. 2026-07-10. https://www.pa.gov/services/revenue/report-identity-theft
  3. Identity Theft — Pennsylvania Office of Attorney General. 2026-07-10. https://www.attorneygeneral.gov/for-the-public/identity-theft/
  4. Identity Theft — Federal Trade Commission. 2026-07-10. https://www.identitytheft.gov/
Medha Deb is an editor with a master's degree in Applied Linguistics from the University of Hyderabad. She believes that her qualification has helped her develop a deep understanding of language and its application in various contexts.

Read full bio of medha deb