Someone used your name, your Social Security number, your credit card. Now you’re the one facing criminal charges. California’s identity theft statute is broader than most people realize, and the consequences of a conviction can follow you for years.
A charge under Penal Code section 530.5 does not always look like what people imagine when they hear “identity theft.” Many of the cases our team handles involve situations far removed from the stereotypical hacker scenario. A shared bank account with a family member, access to a coworker’s login credentials, or using an ex-partner’s credit card after a breakup can all lead to felony identity theft charges in California. At The Nieves Law Firm Criminal Defense Attorneys, our Bay Area fraud defense team handles these cases every day.
What matters now is understanding exactly what the prosecution needs to prove, where their case may have weaknesses, and what options exist to protect your career, your freedom, and your reputation. That is what this page is designed to help you do.
How California Law Defines Identity Theft
Penal Code section 530.5 is the primary identity theft statute in California, and it covers significantly more ground than most people expect.1 The statute is broken into multiple subdivisions, each targeting a different type of conduct.
Subdivision (a) addresses the most commonly charged form: willfully obtaining another person’s personal identifying information and using it for any unlawful purpose, including obtaining credit, goods, services, real property, or medical information without that person’s consent.2
Subdivision (c)(1) makes it a separate offense to simply acquire or retain possession of someone else’s personal identifying information with the intent to defraud.3 This means the prosecution does not need to prove you actually used the information. Having it in your possession with the wrong intent is enough.
Subdivision (c)(2) elevates the offense when a person acquires or retains the identifying information of ten or more individuals with intent to defraud.4
Subdivision (d) targets the sale, transfer, or conveyance of another person’s identifying information when the defendant knows it belongs to someone else and acts with intent to defraud.5
Subdivision (e) covers mail theft committed for the purpose of identity theft, incorporating the federal mail theft statute into California’s framework.6
The breadth of “personal identifying information” under Penal Code section 530.55 is worth understanding.7 It includes not just Social Security numbers and credit card numbers, but also names, addresses, phone numbers, dates of birth, driver’s license numbers, bank account numbers, passwords, passport numbers, biometric data, tax identification numbers, and even school or employer ID numbers.8
What the Prosecution Must Prove
To secure a conviction under PC 530.5(a), the prosecution must establish each of the following elements beyond a reasonable doubt:
Willful Obtaining of Personal Identifying Information
The prosecution needs to show that you deliberately obtained another person’s personal identifying information. “Willfully” means you acted on purpose, not accidentally. If you came into possession of someone’s information through legitimate channels (shared household, workplace duties, authorized access), the prosecution must still prove the obtaining itself was willful and tied to an unlawful purpose.
Use for an Unlawful Purpose
Mere possession is not enough under subdivision (a). The prosecution must demonstrate that you actually used the information for an unlawful purpose. This is a critical distinction. Using a family member’s credit card with implied permission looks very different from opening new accounts in a stranger’s name.
Without the Consent of the Information Owner
The prosecution must prove the person whose information was used did not consent. In cases involving family members, business partners, or people who previously shared financial accounts, this element can become genuinely contested. Prior patterns of shared access can undermine the prosecution’s ability to prove lack of consent.
For charges under subdivision (c), the elements shift. The prosecution must prove you acquired or retained possession of another person’s identifying information with the specific intent to defraud. No actual use is required, but the intent element is higher.
For subdivision (d), the prosecution must prove actual knowledge that the information belonged to another person, combined with intent to defraud through the sale or transfer of that information.
Penalties for Identity Theft in California
Identity theft under PC 530.5 is classified as a wobbler offense, meaning the prosecution can file it as either a misdemeanor or a felony depending on the circumstances.9
| Subdivision | Conduct | Misdemeanor Penalty | Felony Penalty |
|---|---|---|---|
| 530.5(a) | Using another’s identifying information for unlawful purpose | Up to 1 year in county jail, fine up to $1,000 | 16 months, 2, or 3 years in county jail, fine up to $10,000 |
| 530.5(c)(1) | Acquiring/retaining identifying info with intent to defraud | Up to 1 year in county jail, fine up to $1,000 | 16 months, 2, or 3 years in county jail, fine up to $10,000 |
| 530.5(c)(2) | Acquiring/retaining info of 10+ persons with intent to defraud | Up to 1 year in county jail, fine up to $1,000 | 16 months, 2, or 3 years in county jail, fine up to $10,000 |
| 530.5(c)(3) | Acquiring/retaining with prior PC 530.5 conviction | N/A (felony only) | 16 months, 2, or 3 years in county jail |
| 530.5(d) | Selling/transferring identifying information | Up to 1 year in county jail, fine up to $1,000 | 16 months, 2, or 3 years in county jail, fine up to $10,000 |
| 530.5(e) | Mail theft for identity theft purposes | Up to 1 year in county jail, fine up to $1,000 | 16 months, 2, or 3 years in county jail, fine up to $10,000 |
Under California’s realignment law, felony sentences for identity theft are served in county jail rather than state prison.10 The court will also order mandatory restitution to victims for any financial losses.11
One detail that catches people off guard: each victim can constitute a separate count. A single scheme involving five victims can result in five separate identity theft charges, each carrying its own potential sentence.
Sentence Enhancements
Several enhancements can significantly increase the penalties:
Aggravated White Collar Crime Enhancement (PC 186.11): When identity theft is part of a pattern of fraud involving losses exceeding $100,000, or two or more related felonies with aggregate losses over $500,000, the court can add one to five additional years.12
Elder Victim Enhancement (PC 368): If the victim is 65 years or older and the financial loss exceeds certain thresholds, an additional one to four years can be imposed.13
Excessive Taking Enhancement (PC 12022.6): When losses exceed $65,000, graduated enhancements of one to four additional years apply based on the total amount.14
Strike Status
Identity theft under PC 530.5 is not classified as a serious felony under PC 1192.7(c) or a violent felony under PC 667.5(c).15 16 It does not qualify as a strike under California’s Three Strikes law. However, if identity theft is charged alongside violent offenses like robbery, those companion charges may carry strike status independently.
The “Intent to Defraud” Requirement and Why It Matters
One of the most misunderstood aspects of PC 530.5 is the role that intent plays across its different subdivisions, and how that intent requirement creates meaningful defense opportunities.
Under subdivision (a), the statute requires that the defendant used the information for an “unlawful purpose.” This is a broad standard, but it still requires the prosecution to identify a specific unlawful purpose and connect the defendant’s conduct to it.
Under subdivisions (c) and (d), the standard is higher: the prosecution must prove “intent to defraud.” This is a specific intent element, meaning the prosecution cannot simply show that you had someone’s information or that something bad happened. They must prove that you specifically intended to deceive someone for financial or personal gain.
The practical significance of this distinction shows up constantly in real cases. Consider a parent who accesses their adult child’s financial accounts to check on suspicious activity. Or an office manager who retains employee records containing Social Security numbers as part of routine business operations. Or a spouse who uses a partner’s credit card during a period of marital breakdown. In each scenario, the person possesses another individual’s identifying information. But possession alone does not establish intent to defraud.
From a defense perspective, this is often where the prosecution’s case is most vulnerable. Proving what someone intended, as opposed to what they did, requires the prosecution to build an inference from circumstantial evidence. The stronger the legitimate explanation for the defendant’s conduct, the harder it becomes for the prosecution to meet that burden.
Our team regularly sees cases where the “intent to defraud” element is the weakest link in the prosecution’s chain. Identifying and attacking that weakness early in the case can change the trajectory entirely.
Defense Strategies for PC 530.5 Charges
Consent and Authorization
Many identity theft prosecutions involve people who had some prior authorization to use the information in question. A business partner with shared account access, a family member who routinely handled finances, or an employee with authorized database access may all face charges when a relationship sours or a misunderstanding escalates.
If you had actual or apparent consent to use the identifying information, the prosecution cannot satisfy the “without consent” element under subdivision (a). Even expired or ambiguous consent can create reasonable doubt.
No Unlawful Purpose
Under subdivision (a), the prosecution must prove the information was used for an unlawful purpose. If the use was for a lawful purpose, or if the prosecution cannot identify a specific unlawful purpose, this element fails. For example, using a family member’s insurance information to schedule a medical appointment may involve another person’s identifying information, but it may not constitute an “unlawful purpose” depending on the circumstances.
Mistaken Identity and Digital Evidence Challenges
Identity theft cases rely heavily on digital evidence: IP addresses, login records, email metadata, and electronic transaction histories. The problem is that digital evidence does not always point to the right person. Someone else may have used your device, your network, or your account credentials. Shared computers, compromised passwords, and spoofed IP addresses are common realities in the digital world.
A thorough forensic analysis of the digital evidence can reveal that the electronic trail does not actually lead to you. Our team works with digital forensic experts to challenge the prosecution’s assumptions about who was behind the keyboard.
Illegal Search and Seizure
Identity theft investigations frequently involve searches of computers, smartphones, email accounts, cloud storage, and financial records. Law enforcement needs a valid warrant supported by probable cause for most of these searches, and the warrant must be specific about what can be searched and seized.17
If officers obtained evidence through an overbroad warrant, without a warrant entirely, or through a warrant that lacked probable cause, that evidence may be suppressed. In identity theft cases, where the prosecution’s case often depends almost entirely on digital and documentary evidence, successful suppression can effectively end the prosecution.
Insufficient Evidence of Actual Use
This defense applies specifically to subdivision (a) charges. If the prosecution can prove you possessed someone’s identifying information but cannot prove you actually used it for an unlawful purpose, a conviction under subdivision (a) fails. The prosecution may attempt to re-file under subdivision (c) instead, but the shift in charges itself creates leverage for negotiation.
Wobbler Reduction and Diversion
Even when the evidence presents challenges, the wobbler classification of most PC 530.5 subdivisions creates an important opportunity. Defense counsel can argue for misdemeanor treatment under Penal Code section 17(b), presenting mitigating factors like lack of prior record, minimal financial loss, restitution already paid, and the defendant’s ties to employment and community.18
For first-time offenders, pretrial diversion programs may also be available depending on the county. Successful completion of diversion results in the charges being dismissed entirely.
Collateral Consequences of an Identity Theft Conviction
Employment Impact
A conviction for identity theft, even as a misdemeanor, can be devastating for working professionals. Employers conducting background checks will see a fraud-related conviction, which carries particular stigma in positions involving financial responsibility, data access, or positions of trust. Professionals in banking, healthcare, technology, government, and education may face termination or disqualification from their fields.
Professional Licensing
Many California licensing boards consider identity theft a crime involving moral turpitude. Professionals holding licenses through the State Bar, Board of Registered Nursing, Bureau of Real Estate, or other regulatory bodies may face disciplinary proceedings, license suspension, or revocation following a conviction.
Immigration Consequences
Identity theft is frequently classified as a crime involving moral turpitude (CIMT) for immigration purposes, and depending on the sentence imposed, it may qualify as an aggravated felony under federal immigration law.19 Either classification can trigger deportation, denial of naturalization, or inadmissibility for non-citizen defendants. For clients facing immigration consequences from a prior identity theft conviction, our team handles motions to vacate under Penal Code section 1473.7.20
Firearms Rights
A felony identity theft conviction results in the loss of the right to own or possess firearms under both California and federal law.21 22
Restitution Obligations
Courts in identity theft cases almost always order full restitution to victims.23 This can include not just the direct financial losses, but also costs the victim incurred in restoring their credit, monitoring services, and time spent addressing the fraud. Restitution orders can be substantial and are enforceable like civil judgments.
How Bay Area Identity Theft Cases Are Typically Prosecuted
Identity theft cases in the Bay Area often follow patterns that differ from other types of criminal prosecutions. Understanding how these cases are built helps explain where defense opportunities exist.
Most identity theft investigations begin with a victim report to local police. From there, the case may be assigned to a dedicated fraud unit. In Alameda County, cases originating in Oakland are typically filed at the Rene C. Davidson Courthouse, while cases from southern Alameda County are handled at the Fremont Hall of Justice.
What makes Bay Area identity theft cases distinctive is the frequency of tech-related evidence. Given the region’s concentration of technology companies, cases often involve sophisticated digital evidence that requires expert analysis to properly interpret. IP address logs, cloud storage records, and encrypted communications all require careful forensic examination, and the prosecution’s interpretation of that evidence is not always accurate.
Multi-jurisdictional complications are also common. Identity theft frequently crosses county lines, and Bay Area prosecutors may coordinate with other county DA offices or federal authorities at the U.S. Attorney’s Office for the Northern District of California. When federal charges are a possibility, the stakes increase significantly, and early intervention by experienced defense counsel becomes even more critical.
Alameda County courts place significant emphasis on victim restitution in identity theft cases. Demonstrating a willingness and ability to make victims whole can meaningfully influence how the prosecution and the court approach sentencing and plea negotiations.
Related Fraud Offenses
Identity theft charges are frequently filed alongside other fraud-related offenses. Understanding these related charges helps you see the full picture of your legal exposure:
- Credit card fraud (PC 484e-j) is commonly charged when stolen identifying information is used to make unauthorized purchases or open new credit accounts.
- Forgery (PC 470) often accompanies identity theft when documents are altered or fabricated using another person’s information.
- Check fraud (PC 476) may be charged when identity theft involves forging or passing checks in someone else’s name.
Quick Reference
| Detail | Information |
|---|---|
| Statute | Penal Code, § 530.5 |
| Classification | Wobbler (most subdivisions) |
| Misdemeanor Penalty | Up to 1 year county jail, $1,000 fine |
| Felony Penalty | 16 months, 2, or 3 years county jail, $10,000 fine |
| Strike Offense | No |
| Probation Eligible | Yes |
| Restitution | Mandatory |
| Statute of Limitations | 1 year (misdemeanor), 3 years (felony) |
Protect Your Career and Your Future
Identity theft charges carry consequences that reach far beyond the courtroom. Your career, your professional licenses, your immigration status, and your reputation are all at stake. The earlier our team gets involved, the more options we have to challenge the prosecution’s evidence, negotiate reduced charges, or pursue dismissal.
The Nieves Law Firm Criminal Defense Attorneys brings the resources of one of the largest criminal defense teams in the Bay Area to every identity theft case we handle. Our attorneys understand the digital evidence, the forensic analysis, and the courtroom strategies that make the difference in fraud cases.
If you are facing identity theft charges in Oakland or anywhere in the Bay Area, schedule a consultation today and take the first step toward protecting your rights, your freedom, and your future.
References
- 1. Penal Code, § 530.5 [“Every person who willfully obtains personal identifying information… of another person, and uses that information for any unlawful purpose, including to obtain, or attempt to obtain, credit, goods, services, real property, or medical information without the consent of that person, is guilty of a public offense.”]↑
- 2. Penal Code, § 530.5 [“Every person who willfully obtains personal identifying information… of another person, and uses that information for any unlawful purpose, including to obtain, or attempt to obtain, credit, goods, services, real property, or medical information without the consent of that person, is guilty of a public offense.”]↑
- 3. Penal Code, § 530.5 [“Every person who willfully obtains personal identifying information… of another person, and uses that information for any unlawful purpose, including to obtain, or attempt to obtain, credit, goods, services, real property, or medical information without the consent of that person, is guilty of a public offense.”]↑
- 4. Penal Code, § 530.5 [“Every person who willfully obtains personal identifying information… of another person, and uses that information for any unlawful purpose, including to obtain, or attempt to obtain, credit, goods, services, real property, or medical information without the consent of that person, is guilty of a public offense.”]↑
- 5. Penal Code, § 530.5 [“Every person who willfully obtains personal identifying information… of another person, and uses that information for any unlawful purpose, including to obtain, or attempt to obtain, credit, goods, services, real property, or medical information without the consent of that person, is guilty of a public offense.”]↑
- 6. Penal Code, § 530.5 [“Every person who willfully obtains personal identifying information… of another person, and uses that information for any unlawful purpose, including to obtain, or attempt to obtain, credit, goods, services, real property, or medical information without the consent of that person, is guilty of a public offense.”]↑
- 7. Penal Code, § 530.55 [defining “personal identifying information” to include name, address, telephone number, Social Security number, date of birth, driver’s license number, bank account numbers, credit card numbers, passwords, and other identifying data].↑
- 8. Penal Code, § 530.55 [defining “personal identifying information” to include name, address, telephone number, Social Security number, date of birth, driver’s license number, bank account numbers, credit card numbers, passwords, and other identifying data].↑
- 9. See Penal Code, § 17, subd. (b).↑
- 10. Penal Code, § 1170, subd. (h).↑
- 11. Penal Code, § 1202.4.↑
- 12. Penal Code, § 186.11.↑
- 13. Penal Code, § 368.↑
- 14. Penal Code, § 12022.6.↑
- 15. Penal Code, § 1192.7, subd. (c).↑
- 16. Penal Code, § 667.5, subd. (c).↑
- 17. U.S. Const. amend. IV; Cal. Const. art. I, § 13.↑
- 18. See Penal Code, § 17, subd. (b).↑
- 19. 8 U.S.C. § 1101(a)(43) [defining “aggravated felony” for immigration purposes].↑
- 20. Penal Code, § 1473.7.↑
- 21. Penal Code, § 29800.↑
- 22. 18 U.S.C. § 922(g)(1).↑
- 23. Penal Code, § 1202.4.↑
Top-Rated Bay Area Criminal Lawyer
Bay Area Criminal Lawyer Near Me
Multiple Offices.
Ready to Fight for You.
Our Locations
- Oakland (HQ) — 160 Franklin St., Ste. 210, Oakland, CA 94607
- Fremont — 41111 Mission Blvd., Ste. 114, Fremont, CA 94539
- San Jose — 6840 Via del Oro, Suite 2651, San Jose, CA 95119
- Stockton — 11 S San Joaquin St., Ste. 609, Stockton, CA 95202
- Fairfield — 490 Chadbourne Rd., Suite A191, Fairfield, CA 94534
- Sacramento — 1100 11th St., 3rd Fl., Rm 311, Sacramento, CA 95814
The Nieves Law Firm
Worth Fighting For
- 100% Confidential
- Se Habla Español
- Payment Plans Available