Understanding California Identity Theft Laws

Identity theft has become one of the most common forms of financial and personal crime in the United States, and California has responded with some of the strongest protections and remedies for victims. In California, identity theft is not only a criminal offense, it also gives victims powerful civil rights to clear their names, dispute fraudulent debts, and restore their credit profiles.

This guide explains how California law defines identity theft, outlines the main criminal and civil statutes, summarizes penalties and victim rights, and offers practical steps for individuals and businesses dealing with suspected identity theft.

How California Law Defines Identity Theft

California has separate but closely related definitions of identity theft in its criminal and civil codes. Both focus on the unauthorized use of someone else’s personal identifying information.

Criminal Definition: Penal Code 530.5

Under Penal Code § 530.5, identity theft occurs when a person willfully obtains another person’s personal identifying information and uses it for any unlawful purpose, including obtaining or attempting to obtain credit, goods, services, real property, or medical information without consent. The statute covers conduct such as:

• Opening credit card or bank accounts using another person’s name and Social Security number without permission.
• Using stolen medical insurance information to obtain healthcare services.
• Accessing or using electronic data like account numbers or routing codes for fraudulent transactions.

Importantly, prosecutors do not have to prove that the victim actually lost money or was successfully defrauded; the unlawful use or attempted use of the personal information is sufficient for criminal liability.

Civil Definition: Civil Code 1798.92

California’s civil definition appears in Civil Code § 1798.92, part of the Identity Theft Act. There, identity theft is defined as the unauthorized use of another person’s personal identifying information to obtain credit, goods, services, money, or property. This civil framework is designed to address disputes between victims and creditors or debt collectors and to provide a mechanism for clearing fraudulent accounts.

What Counts as Personal Identifying Information?

Penal Code § 530.5 lists many examples of personal identifying information that can be misused in identity theft, including:

• Full legal name, address, and telephone number
• Date of birth and mother’s maiden name
• Social Security number and driver’s license number
• Taxpayer identification numbers
• Bank account numbers, credit and debit card numbers
• Electronic data such as account identifiers, routing codes, and other unique identifiers
• Birth or death certificate information

Any unauthorized acquisition and use of these data points, when tied to unlawful activity, can form the basis for identity theft charges.

Criminal Framework: Classes of Identity Theft Under Penal Code 530.5

California’s criminal identity theft statute recognizes multiple ways in which personal information may be misused. These are organized into several subsections of Penal Code § 530.5.

Each instance of unauthorized use can be charged as a separate violation. If a person repeatedly uses another individual’s data for multiple transactions, prosecutors may file multiple counts of identity theft, even if there is only one victim.

Penalties: Misdemeanor vs. Felony Identity Theft

In California, identity theft under Penal Code § 530.5 is a wobbler offense, meaning it can be prosecuted either as a misdemeanor or a felony, depending on factors such as the defendant’s criminal history and the extent of harm.

Misdemeanor Identity Theft

When charged as a misdemeanor, identity theft can result in:

• Up to one year in county jail
• Fines up to $1,000
• Summary (informal) probation
• Restitution to victims for financial losses

Felony Identity Theft

When charged as a felony, penalties increase significantly. A felony identity theft conviction may carry:

• Formal probation or incarceration
• Sentence of 16 months, 2 years, or 3 years in county jail or state prison
• Fines up to $10,000
• Restitution and collateral consequences such as impacts on immigration status or professional licensing

Because identity theft is a wobbler, early legal representation can affect how prosecutors choose to file charges and whether a case is ultimately resolved as a misdemeanor, felony, or negotiated alternative.

Civil Protections: California’s Identity Theft Act

Criminal prosecution alone rarely solves the practical problems victims face, such as dealing with debt collectors and damaged credit reports. To address this, California enacted the Identity Theft Act, codified at Civil Code §§ 1798.92–1798.97.

Right to Establish Victim Status in Court

Civil Code § 1798.93 allows a person who is being pursued for a fraudulent debt to bring an action against the “claimant” (typically a creditor or debt collector) to establish that the person is a victim of identity theft. Key features include:

• The victim may ask the court for a declaration that the debt or account was the result of identity theft.
• If successful, the court can order that the victim is not liable for the fraudulent obligations and may direct corrections to credit reports.

Prerequisite: Police Report and Written Notice

Before filing a lawsuit under the Identity Theft Act, victims generally must send the creditor or collector a copy of a police report documenting the identity theft and provide written notice of the dispute. If collection efforts continue after a specified period (commonly thirty days) despite this notice, the victim may then proceed with civil litigation.

Investigation Duties for Creditors and Collectors

The Act forces creditors and debt collectors to investigate claims of identity theft once properly notified. While the exact steps may vary by institution, typical duties include:

• Reviewing application and transaction records associated with the disputed account
• Comparing signatures, identification documents, and contact information to the victim’s legitimate data
• Evaluating whether the account was opened or used without the victim’s authorization

Failure to conduct a reasonable investigation or to correct clearly fraudulent accounts can expose creditors and collectors to liability under California law.

Victim Rights: Credit Reports and Financial Records

California combines state law with federal protections to provide victims with tools to repair credit and obtain evidence of fraud. While many procedural details are grounded in federal law, California statutes and policies reinforce these rights.

Blocking Fraudulent Information on Credit Reports

Victims who file a police report and submit it to the major credit reporting agencies can request that information relating to fraudulent accounts be blocked from their credit files. Once the credit bureau receives a valid police report showing identity theft:

• The bureau must promptly remove or block the fraudulent trade lines from the victim’s report.
• Credit grantors associated with the fraudulent accounts must be notified that the information was removed.

Access to Free Credit Reports

Under California law, victims who provide a copy of a police report to a credit bureau are entitled to multiple free credit reports in the year following the report. This enhanced monitoring helps victims verify that fraudulent information remains blocked and that new identity theft does not occur.

Access to Application and Transaction Records

Financial institutions and certain service providers must cooperate with identity theft investigations by providing records associated with fraudulent accounts to law enforcement or victims. This can include:

• Copies of credit applications allegedly submitted by the imposter
• Account statements and transaction histories
• Checks or electronic transfer records initiated by the imposter

Such records are often critical in proving that the victim did not authorize the account or transaction and in supporting police reports, civil lawsuits, or disputes with credit bureaus.

Practical Steps for Victims of Identity Theft in California

Individuals who suspect they are victims of identity theft in California should take prompt and organized action. The California Department of Justice emphasizes that all forms of identity theft are crimes and encourages victims to report and address them systematically.

1. Document and Report the Crime

• Collect evidence: Gather account statements, collection letters, credit reports, and any notices indicating fraudulent activity.
• File a police report: Contact local law enforcement to file a detailed report describing unauthorized accounts, transactions, or data breaches.
• Obtain a copy of the report: This document is essential for exercising rights under California’s Identity Theft Act and for disputing debts with creditors.

2. Notify Creditors, Collectors, and Credit Bureaus

• Send written disputes to creditors and debt collectors that list the fraudulent accounts and reference your police report number.
• Request that collection activities stop and that accounts be investigated under California law.
• Contact major credit bureaus to place fraud alerts or security freezes and request blocking of clearly fraudulent information, providing a copy of the police report where required.

3. Use Civil Remedies if Needed

• If creditors continue to pursue debts after receiving proper notice and a police report, consider using Civil Code § 1798.93 to bring an action in court to establish your status as a victim.
• Work with legal counsel experienced in consumer and identity theft law to navigate court procedures and obtain orders clearing fraudulent obligations.

4. Increase Ongoing Protection

• Regularly review credit reports from all major bureaus.
• Use strong, unique passwords and enable multi-factor authentication on financial and email accounts.
• Limit sharing of Social Security numbers and other sensitive identifiers and beware of phishing emails or calls requesting personal information.

Responsibilities and Risks for Businesses

Businesses operating in California—especially financial institutions, utilities, and service providers—face significant obligations when dealing with identity theft reports. Beyond federal requirements, California statutes and case law expect companies to respond reasonably and promptly to claims of identity theft.

• Cooperation with investigations: On request by law enforcement or victims, certain businesses must provide application and transaction records linked to suspected fraudulent accounts.
• Reasonable investigation duty: When notified of identity theft, creditors and collectors should review documentation, compare signatures, and assess whether the account appears fraudulent.
• Risk of civil liability: Continuing aggressive collection efforts against proven identity theft victims, or failing to correct obviously fraudulent accounts, can lead to lawsuits under California’s Identity Theft Act.

Proactive compliance policies and staff training can reduce legal risk and help protect customers against the long-term consequences of identity theft.

Frequently Asked Questions About California Identity Theft Laws

Is identity theft always a crime in California?

Yes. The California Department of Justice states that all forms of identity theft are crimes under Penal Code § 530.5 and related provisions. Even attempted use of someone else’s personal information for unlawful purposes can be prosecuted.

Do I need to prove financial loss for someone to be convicted?

No. Under Penal Code § 530.5, it is not necessary to show that the victim suffered financial loss or that fraud was successful; the unauthorized use of personal information for an unlawful purpose is sufficient.

Can I be sued for a debt created by an imposter?

Creditors and collectors sometimes attempt to enforce debts created through identity theft. California’s Identity Theft Act (Civil Code §§ 1798.92–1798.97) gives victims a way to go to court and establish that they are not responsible for those obligations.

What should I send to a creditor if I’m disputing a fraudulent account?

Typically, you should send a copy of your police report, a written explanation identifying the accounts that are fraudulent, and any supporting documents such as copies of your driver’s license or proof of address. Providing these materials helps trigger investigation duties under California’s Identity Theft Act.

Are businesses required to share records with victims?

Certain businesses, including banks and similar institutions, must provide copies of applications, checks, statements, and transaction records related to accounts opened or used by imposters when requested by law enforcement or identity theft victims. These records often serve as crucial evidence in both criminal and civil proceedings.

Similar Articles

Your First Credit Card: How to Avoid Costly Fine‑Print Traps

Smart Student Borrowing: A Financial Literacy Guide

Brendlin v. California and the Fourth Amendment Passenger Rule

Miranda v. Arizona and the Birth of Modern Police Warnings

Bankruptcy Terms Explained

Understanding Bankruptcy Noticing in Federal Courts

Author

medha deb

 

Medha Deb is an editor with a master's degree in Applied Linguistics from the University of Hyderabad. She believes that her qualification has helped her develop a deep understanding of language and its application in various contexts.

Read full bio of medha deb