Under 18 U.S.C. § 1028A, a conviction for Aggravated Identity Theft in the USA triggers a mandatory, consecutive two-year federal prison sentence. This means the federal judge is legally required to add an unavoidable 24 months strictly on top of whatever prison time you receive for the primary cybercrime, with virtually no option for probation.
The US Department of Justice considers identity theft to be an absolute epidemic, especially when it is used to facilitate massive cybercrimes or financial fraud. To deter criminals, Congress created one of the harshest sentencing enhancements in the entire federal code: Aggravated Identity Theft (18 U.S.C. § 1028A). If you are accused of using another person’s name, Social Security number, or login credentials while committing a separate federal felony, this terrifying statute will almost certainly be added to your indictment. 📍 It fundamentally changes the entire landscape of your legal defense.
Unlike standard criminal charges where a federal judge can show leniency based on your good character, Aggravated Identity Theft strips the judge of their power. Whether your case is heard in a Federal District Court in Florida, Ohio, or Illinois, the penalties remain brutally rigid. In this guide, we will break down exactly how this specific statute is applied, the devastating reality of consecutive sentencing, and how top defense attorneys fight back as of March 2026.
Step-by-Step Process in the USA
Understanding how prosecutors deploy this charge is critical for evaluating your legal liability. The government does not use this statute as a standalone charge; it is always attached as a powerful legal anchor to a broader white-collar or cybercrime indictment to force a defendant into a plea agreement.
Step 1: The Underlying Felony Requirement
Aggravated Identity Theft cannot exist on its own. 🔍 Under US federal law, it must be committed “during and in relation to” a specific list of underlying felonies. Most commonly, federal prosecutors attach this charge to Wire Fraud, Bank Fraud, or violations of the Computer Fraud and Abuse Act (CFAA). For example, if you hack a database (CFAA) and use a stolen identity to drain a bank account (Bank Fraud), the government will stack the 1028A charge on top of both.
Step 2: Proving the Identity Belonged to a Real Person
To secure a conviction, the prosecution must prove a very specific element: that you knew the means of identification actually belonged to a real, living (or deceased) person. If your defense attorney can prove that you simply generated a random string of numbers that coincidentally matched a real person’s Social Security number, you lack the specific criminal intent required for this aggravated charge, potentially saving you from the mandatory minimum.
Step 3: The Imposition of the Consecutive Sentence
If you are convicted of Aggravated Identity Theft, the law mandates a strict 2-year prison sentence. 🔒 However, the most dangerous word in the statute is “consecutive.” In the US justice system, sentences often run concurrently (at the same time). But a 1028A conviction must be served sequentially. If a judge gives you 3 years in prison for the underlying wire fraud, they must add the 2 years for identity theft, resulting in a mandatory 5-year total sentence.
Step 4: Negotiating the Plea Settlement
Because the consecutive sentence is so devastating, the primary goal of your defense strategy is usually to get the 1028A charge dismissed. Defense attorneys frequently negotiate plea agreements where the defendant agrees to plead guilty to the primary wire fraud charge and pay full restitution, strictly on the condition that the federal prosecutor completely drops the Aggravated Identity Theft charge, thereby avoiding the mandatory 24 months.
How Much Does it Cost in the USA?
Facing federal identity theft charges introduces catastrophic financial risks alongside the threat of federal prison. When the government steps in on behalf of victims—ranging from private citizens to the DMV or IRS—you will bear the full financial liability:
- Statutory Fines: A conviction for the underlying cybercrimes paired with 1028A can result in federal fines of up to $250,000 per count.
- Mandatory Restitution: You will be legally required to pay back every cent stolen from the victims, which often leads to the permanent garnishment of your legitimate future income.
- Attorney Retainer Fees: Retaining an elite federal white-collar defense attorney to fight complex fraud and identity theft charges typically costs between $50,000 and $100,000+ upfront.
- Civil Liability: Victims whose identities were stolen frequently act as plaintiffs in separate civil lawsuits against you to recover their credit repair costs.
| Federal Charge in the USA | Typical Prison Sentence | How the Sentence is Served |
|---|---|---|
| Wire Fraud (18 U.S.C. § 1343) | 0 to 20 Years (Based on Guidelines) | Primary Sentence |
| Aggravated ID Theft (§ 1028A) | Exactly 2 Years Mandatory | Consecutively (Added on top) |
| Terrorism-Related ID Theft | Exactly 5 Years Mandatory | Consecutively (Added on top) |
How Long Does the Process Take?
Investigations into identity theft rings often take substantial time. ⏱ Federal agencies like the Secret Service or Postal Inspectors may quietly trace fraudulent IRS tax returns or hijacked bank accounts for 1 to 3 years before unsealing a grand jury indictment.
Once you are arrested and make your initial court appearance, the pretrial litigation phase generally lasts 12 to 18 months. During this time, your attorney will scrutinize the government’s discovery and fiercely negotiate to drop the 1028A enhancement. If the case proceeds to a full federal trial, the process can easily take 2 to 3 years to conclude.
Frequently Asked Questions (FAQ)
Can the federal judge give me probation for Aggravated Identity Theft?
No. By federal law, a judge is strictly forbidden from placing a defendant on probation for a conviction under 18 U.S.C. § 1028A. The two-year federal prison sentence is absolute and mandatory if you are convicted of this specific count.
What if the identity belonged to a dead person?
Under the Aggravated Identity Theft statute, it generally does not matter if the victim is alive or deceased. Using the Social Security number or personal data of a dead person to commit fraud still triggers the mandatory two-year consecutive sentence.
Does a fake corporate name count as identity theft?
No. The federal statute specifically refers to the means of identification of “another person.” US courts have ruled that this strictly applies to actual human beings, not corporations, businesses, or entirely fictitious, made-up names.
Can my attorney get the 2-year sentence reduced?
The only legal way a federal judge can reduce a mandatory minimum sentence is if the prosecutor files a 5K1.1 motion for “substantial assistance.” This means you must fully cooperate with the US government and testify against other criminals to earn a sentence reduction.
What is the statute of limitations for this crime?
In the USA, the standard statute of limitations for federal fraud and aggravated identity theft is generally 5 years from the date the crime occurred. However, if the crime affected a federal financial institution, the timeframe extends to 10 years.
Leave a Reply