What Is Identity Theft in California?
Identity theft under California Penal Code 530.5 is the willful obtaining and using of another person's personal identifying information for any unlawful purpose. This includes using someone else's name, Social Security number, credit card information, driver's license number, or other identifying data to obtain credit, goods, services, or financial gain. With the rise of digital commerce and online banking, identity theft has become one of the most commonly prosecuted white-collar crimes in California.
If you are facing identity theft charges in San Jose, San Francisco, Oakland, Gilroy, Morgan Hill, or anywhere in Santa Clara County, the attorneys at RV Litigation Group PC have the experience to defend against these complex allegations. Identity theft cases often involve sophisticated digital evidence, and the right defense strategy can mean the difference between a felony conviction and a dismissal.
What the Law Says
Penal Code 530.5(a) — Identity Theft
"Every person who willfully obtains personal identifying information, as defined in subdivision (b) of Section 530.55, of another person, and uses that information for any unlawful purpose, including to obtain, or attempt to obtain, credit, goods, services, real property, or medical information without the consent of that person, is guilty of a public offense." — California Penal Code Section 530.5(a)
The statute covers a broad range of conduct. "Personal identifying information" includes name, address, telephone number, Social Security number, driver's license number, employee identification number, mother's maiden name, bank account number, credit card number, PIN, passport number, date of birth, and unique biometric data. The information must be used for an "unlawful purpose" — which includes obtaining credit, goods, services, or financial gain without the person's consent.
Penal Code 530.5(c) — Acquiring or Retaining Identifying Information
"Every person who, with the intent to defraud, acquires or retains possession of the personal identifying information, as defined in subdivision (b) of Section 530.55, of another person, is guilty of a public offense." — California Penal Code Section 530.5(c)(1)
This subsection criminalizes simply possessing another person's personal identifying information with the intent to defraud — even if you have not yet used it. Merely having a list of stolen credit card numbers, Social Security numbers, or login credentials in your possession with fraudulent intent can result in criminal charges. Each person whose information you possess can be charged as a separate count, leading to multiple charges from a single investigation.
Real-World Examples
These scenarios illustrate how identity theft charges commonly arise in the Bay Area:
A man in San Jose obtains a coworker's credit card number and uses it to make online purchases totaling $3,000. When the coworker notices unauthorized charges and reports them, the investigation traces the purchases back to the defendant's address. This is identity theft (PC 530.5(a)) — using another person's identifying information for an unlawful purpose.
A woman in Oakland steals mail from residential mailboxes, collecting bank statements and pre-approved credit card offers. She uses the personal information to open new credit accounts in the victims' names. This constitutes identity theft involving multiple victims, with each victim potentially leading to separate charges. Federal charges may also apply for mail theft.
A man and his girlfriend in Gilroy share financial accounts. After they break up, the girlfriend claims he used her credit card without permission to make purchases during the relationship. The man argues he had ongoing authorization to use the card. This illustrates how authorized use can be disputed and lead to wrongful identity theft charges in the context of relationship breakdowns.
An IT employee at a San Francisco tech company is accused of downloading customer personal data and selling it on the dark web. While the data breach is traced to his workstation, he claims another employee with shared system access is responsible. This demonstrates how mistaken identity can occur in digital crime investigations where multiple people have access to the same systems.
Penalties
Identity theft is a wobbler offense in California. The penalties depend on the circumstances, the amount of loss, and the defendant's criminal history.
| Charge | Classification | Jail / Prison | Fine |
|---|---|---|---|
| Identity Theft (PC 530.5(a) - Misdemeanor) | Misdemeanor | Up to 1 year county jail | Up to $1,000 |
| Identity Theft (PC 530.5(a) - Felony) | Felony | 16 months, 2, or 3 years | Up to $10,000 |
| Possession with Intent (PC 530.5(c)) | Wobbler | Up to 3 years (felony) | Up to $10,000 |
| Mail Theft (PC 530.5(e)) | Wobbler | Up to 3 years (felony) | Up to $10,000 |
| Federal Identity Theft (18 USC 1028) | Federal Felony | Up to 15 years federal prison | Varies |
Additional consequences: Identity theft convictions result in mandatory restitution to the victims for all financial losses. A conviction permanently appears on your criminal record and can severely impact employment — particularly in finance, technology, government, and any position involving access to personal information. Non-citizens face potential deportation as identity theft may be classified as a crime involving moral turpitude. Professional licenses may be revoked or denied.
Legal Defenses
Identity theft cases often involve complex digital evidence that can be challenged. Here are the defenses our attorneys commonly use:
1. Authorization or Consent
If you had permission to use the alleged victim's personal information, you are not guilty of identity theft. This defense commonly arises between family members, romantic partners, roommates, or business associates who share accounts or have standing authorization to use each other's information. We present evidence of consent — shared account history, text messages, verbal agreements — to demonstrate you were authorized.
2. Lack of Unlawful Intent
PC 530.5 requires that you used the information for an "unlawful purpose." If you used someone's information for a lawful reason — or if you lacked the intent to commit fraud — the prosecution cannot establish this element. For example, using a family member's information to make a legitimate purchase they authorized, or mistakenly using an old shared account, does not constitute identity theft.
3. Mistaken Identity
In the digital age, IP addresses, email accounts, and online identities can be spoofed, hacked, or shared. The fact that a crime was committed from a particular device or account does not necessarily prove who was using it. We hire digital forensics experts to analyze the electronic evidence, challenge the prosecution's attribution of the crime to you, and identify alternative suspects.
4. Insufficient Evidence
Identity theft cases rely heavily on digital evidence — IP logs, transaction records, surveillance footage, and digital forensics. This evidence can be incomplete, circumstantial, or subject to innocent interpretation. We meticulously examine every piece of evidence and challenge its reliability, chain of custody, and connection to you. If the evidence does not prove guilt beyond a reasonable doubt, we fight for dismissal.
5. Coercion or Duress
In some cases, individuals are forced to participate in identity theft schemes by others who threaten them with harm. If you committed the offense only because you were under duress — a reasonable belief that you would suffer immediate bodily harm if you did not comply — this may provide a complete defense to the charge.
Frequently Asked Questions
Identity theft under Penal Code 530.5 is the willful obtaining and using of another person's personal identifying information for any unlawful purpose, including to obtain credit, goods, services, real property, or medical information without consent. Personal identifying information includes names, Social Security numbers, driver's license numbers, bank account numbers, and other identifying data.
Identity theft is a wobbler. As a misdemeanor, it carries up to 1 year in county jail. As a felony, it carries 16 months, 2, or 3 years in state prison. Multiple victims or large losses can result in enhanced penalties. Federal charges may also be filed in serious cases.
PC 530.5 is a wobbler, meaning the prosecutor can charge it as either a misdemeanor or felony depending on the circumstances, amount of loss, number of victims, and criminal history.
Using a completely fabricated name that does not belong to a real person is generally not identity theft under PC 530.5, which requires using another actual person's identifying information. However, using a fake name could result in other charges such as fraud, false identification (PC 148.9), or forgery.
Contact a criminal defense attorney immediately. Do not speak to police without an attorney. Identity theft accusations can arise from shared accounts, authorized use later disputed, or technical errors. An attorney can investigate the circumstances, gather evidence of authorization, and build your defense.
