Is Identity Theft a Felony in Georgia? Charges, Penalties, and What You Need to Know
Yes. In Georgia, identity theft is always a felony. The state prosecutes it as identity fraud under O.C.G.A. § 16-9-121, and unlike many states, Georgia doesn’t give prosecutors a misdemeanor option no matter how small the dollar amount involved. A first conviction carries 1 to 10 years in prison and a fine of up to $100,000. A second or later conviction jumps to 3 to 15 years and up to $250,000. If the case involves using someone’s stolen information to get a job, prosecutors can charge aggravated identity fraud instead, which carries its own 1-to-15-year range and up to $250,000 in fines.
Georgia isn’t just tough on paper — it’s also one of the states where this actually happens the most. FTC Consumer Sentinel Network data shows Georgia logged 55,955 identity theft reports in 2024, and reports were already running 13% ahead of that pace through the first three quarters of 2025. That puts the state at roughly 585 reports per 100,000 residents, the second-highest rate in the country. Whether you’re trying to understand a charge you’re facing or figuring out what happened to your own identity, the law here moves fast and the exposure is real.
Georgia Identity Fraud — Key Facts
| Governing Statute | O.C.G.A. § 16-9-121 (identity fraud); § 16-9-121.1 (aggravated identity fraud) |
| Classification | Felony only — no misdemeanor grade exists |
| First Offense Penalty | 1–10 years in prison, fine up to $100,000 |
| Second or Subsequent Offense | 3–15 years in prison, fine up to $250,000 |
| Aggravated Identity Fraud (Employment Use) | 1–15 years in prison, fine up to $250,000 — does not merge with other charges |
| Statute of Limitations | 4 years, tolled until the crime is discovered (O.C.G.A. §§ 17-3-1, 17-3-2) |
| Venue Requirement | County where victim or their identifying information was located (O.C.G.A. § 16-9-125) |
| Georgia’s National Ranking | #2 in identity theft reports per capita (FTC Consumer Sentinel, 2025) |
| Record Restriction | Felony requires a pardon before record restriction/sealing can be petitioned |
| Last Updated | September 2026 |
What Georgia Law Says About Identity Fraud
Georgia doesn’t technically have an “identity theft” statute. It has an identity fraud statute — O.C.G.A. § 16-9-121, sitting in Title 16, Chapter 9, Article 8 of the criminal code. The label matters less than what it covers, which is broad. Under the law, a person commits identity fraud when he or she willfully and fraudulently:
- Uses or possesses, with intent to fraudulently use, someone’s identifying information without their authorization or consent
- Uses the identifying information of a minor under 18 whom they have custodial authority over
- Uses or possesses, with intent to fraudulently use, the identifying information of a deceased person
- Creates, uses, or possesses counterfeit or fictitious identifying information tied to a fictitious person, with intent to use it to commit or facilitate a crime or fraud against someone else
“Identifying information” covers what you’d expect — names, Social Security numbers, dates of birth, driver’s license numbers — and it doesn’t require that the crime actually work. Simply possessing someone’s information with the intent to use it fraudulently is enough to violate the statute, even before a purchase is made or an account is opened.
One narrow carve-out: the statute doesn’t reach someone under 21 who uses a fake or borrowed ID to get into a bar or buy alcohol. That’s handled under different underage-possession laws, not identity fraud.
If you’re weighing how Georgia’s approach compares to a state that treats this as a “wobbler” offense, our California identity theft article breaks down how prosecutors there choose between misdemeanor and felony charges — a decision that doesn’t exist in Georgia.
Is Identity Fraud Always a Felony in Georgia?
Yes, and this is where Georgia stands apart from most states. There’s no misdemeanor grade of identity fraud under O.C.G.A. § 16-9-121. A $50 fraudulent charge on someone’s stolen card and a $50,000 scheme both start from the same felony charging statute. What changes isn’t whether it’s a felony — it’s how many counts get filed and how long a sentence a prosecutor will actually push for.
Prosecutors do have discretion over that second part. Each fraudulent use of someone’s information is a separate violation, so a defendant who used one person’s Social Security number five different times can face five counts. Charging decisions typically track:
- The dollar amount involved and number of victims
- Whether the defendant has prior fraud or theft convictions
- Whether the case connects to an organized fraud ring or repeated conduct
- Whether the victim is a minor or an elderly person
- Whether the identifying information was used to get employment, which can trigger the separate aggravated identity fraud charge
Georgia Identity Fraud Penalties: What You Face
First Offense Penalties
A first conviction under O.C.G.A. § 16-9-121 carries 1 to 10 years in prison, a fine of up to $100,000, or both. Because there’s no misdemeanor version, even a defendant with no criminal history and a relatively small loss amount faces felony sentencing exposure from the moment charges are filed.
Second or Subsequent Offense Penalties
A second or later identity fraud conviction increases the range substantially — 3 to 15 years in prison and a fine of up to $250,000. Judges have discretion within that range, but the statute removes the possibility of probation-only outcomes that first offenders sometimes negotiate.
Aggravated Identity Fraud (Employment Purposes)
Georgia carves out a separate, harsher charge for a specific fact pattern: using someone else’s real, fictitious, or deceased-person identifying information to get a job. Under O.C.G.A. § 16-9-121.1, aggravated identity fraud carries 1 to 15 years in prison and a fine of up to $250,000. This is the charge prosecutors reach for when someone uses a stolen Social Security number on a job application or an I-9 form, and it does not merge with other offenses — meaning a defendant can be sentenced on this count separately from any related identity fraud or forgery counts.
Collateral Consequences Beyond Prison Time
A felony identity fraud conviction in Georgia carries consequences that outlast the sentence itself. It’s a crime of moral turpitude, which can trigger deportation or inadmissibility proceedings for non-citizens. Felony convictions strip Georgia gun rights, and restoring them requires a separate petition to the Board of Pardons and Paroles. Professional license holders — nurses, real estate agents, financial professionals — often face suspension or revocation proceedings tied to the underlying fraud finding. Courts routinely order restitution to victims on top of any fine.
Legal Elements Prosecutors Must Prove
To convict under § 16-9-121(a)(1) — the most commonly charged version — prosecutors must show the defendant willfully and fraudulently used or possessed someone’s identifying information with intent to defraud, and did so without that person’s authorization or consent. The “willfully” element matters: this isn’t a crime you can commit by accident. Georgia courts have held that even possessing another person’s information with fraudulent intent satisfies the statute — actual financial loss or completed impersonation isn’t required.
Key Defenses to Georgia Identity Fraud Charges
Lack of Fraudulent Intent — The state has to prove you intended to defraud someone. Coming into possession of information without that intent, even if it later turns out to belong to someone else, isn’t enough on its own.
Authorization — If the person gave you permission, express or implied, to use their information, § 16-9-121 doesn’t apply. This defense shows up often in family and shared-account situations.
Lack of Willfulness — Accidentally using or retaining someone’s data — through a data entry mistake or a shared device, for example — doesn’t meet the statute’s “willfully” requirement.
Venue Failure — Georgia requires the state to prove where the crime occurred, typically the county where the victim or their information was located. If prosecutors can’t establish that, the case can fail on venue alone regardless of the underlying facts.
Mistaken Identity or False Accusation — Identity fraud allegations sometimes originate from an ex-partner, a family dispute, or someone else covering their own debts.
Insufficient Evidence — Challenging whether the state can prove every element — willfulness, fraudulent intent, lack of authorization — beyond a reasonable doubt.
Recent Georgia Identity Fraud Case Law
Georgia’s appellate courts have shaped how § 16-9-121 actually gets applied. In Hernandez v. State, 281 Ga. 559 (2007), the Georgia Supreme Court upheld the statute against a vagueness challenge, holding that using someone’s Social Security number to obtain a job — and, through that job, access to the victim’s IRS records — was clearly covered conduct the defendant was on notice was illegal. That case is part of why using stolen information for employment purposes is now treated seriously enough to carry its own aggravated charge.
Venue has also tripped up prosecutions. In Middlebrooks v. State, 277 Ga. App. 551 (2006), an identity fraud conviction was reversed because the state failed to establish the victim’s residence or where the credit card was actually stolen — a required showing under Georgia’s identity fraud venue statute, O.C.G.A. § 16-9-125. And in State v. Green, 350 Ga. App. 238 (2019), the Georgia Court of Appeals confirmed that a four-year statute of limitations governs identity fraud prosecutions, which matters for how long the state has to bring charges after a scheme is discovered.
Statute of Limitations for Identity Fraud Prosecution
Georgia gives prosecutors four years to bring identity fraud charges, matching the general felony statute of limitations under O.C.G.A. § 17-3-1. Critically, that clock doesn’t necessarily start on the date of the theft. Under O.C.G.A. § 17-3-2, the limitations period doesn’t run while the crime is unknown — so if a victim doesn’t discover the fraud for months or years, prosecutors can still bring charges within four years of when the crime was, or reasonably should have been, discovered. Victims over 65 get additional tolling protection under O.C.G.A. § 17-3-2.2.
What Identity Theft Victims Should Do Immediately
If you discover you’re a victim of identity fraud in Georgia, moving quickly protects both your credit and the eventual criminal case:
File a police report. Local law enforcement documentation establishes a timeline and supports disputes with creditors and credit bureaus.
Report to the FTC. File at IdentityTheft.gov for an official record and a personalized recovery plan.
Set up fraud alerts. Contact Experian, TransUnion, and Equifax to place fraud alerts or a credit freeze.
Pull your credit reports. Get free reports at annualcreditreport.com and check for accounts you didn’t open.
Notify your creditors and bank directly. Fraudulent accounts and charges need to be disputed with each institution individually.
Keep records of everything. Save the police report number, FTC complaint number, and every piece of correspondence — Georgia prosecutors will want this documentation if the case moves forward.
For a deeper walkthrough of what happens after you report identity theft and what federal law protects you from, see what happens if you’re a victim of identity theft.
What Defendants Facing Identity Fraud Charges Should Know
Because Georgia has no misdemeanor version of this crime, anyone charged is facing felony exposure from day one — which makes early legal representation more important here than in states where low-dollar cases might resolve as misdemeanors. A defense attorney can often negotiate with prosecutors before charges are formally filed, which matters because post-indictment options narrow considerably.
Pretrial resolution matters. Georgia allows first offender treatment under O.C.G.A. § 42-8-60 for many defendants without prior felony convictions, which can result in no conviction on record if probation terms are completed successfully.
Multiple counts are common. Because each fraudulent use is a separate violation, defendants often face several counts stemming from one scheme, which affects both sentencing exposure and plea negotiations.
Record restriction is harder here than in some states. Georgia doesn’t have a straightforward expungement process for felonies. Clearing a felony identity fraud conviction requires obtaining a pardon from the Georgia Board of Pardons and Paroles first, then petitioning the court for record restriction and sealing under O.C.G.A. § 35-3-37(j)(7) — a two-step process, not a single filing.
Related Offenses Frequently Charged Together
Identity fraud charges in Georgia rarely stand alone. Prosecutors commonly add related counts based on how the stolen information was used:
Forgery (O.C.G.A. § 16-9-1) — Creating or altering a document with fraudulent intent; first-degree forgery carries 1 to 15 years.
False Statements and Writings (O.C.G.A. § 16-10-20) — Knowingly making false statements on official forms or applications, often charged alongside identity fraud when a job application or government form is involved.
Financial Transaction Card Fraud — Using another person’s credit or debit card information, punishable by up to 3 years and a $5,000 fine.
Theft by Deception (O.C.G.A. § 16-8-3) — Applied when the identity fraud results in obtaining money or property.
For more on how Georgia’s identity fraud sentences compare to other states’ jail time ranges, see our breakdown of identity theft jail time by state and federal law.
Georgia vs. Federal Identity Theft Prosecution
Georgia handles the overwhelming majority of identity fraud cases within the state, but federal prosecution under 18 U.S.C. § 1028 — the Identity Theft and Assumption Deterrence Act — becomes available when a scheme crosses state lines, targets federal agencies, or involves federal benefit programs. Federal exposure is significantly steeper for aggravated identity theft: up to 30 years when tied to terrorism, and mandatory consecutive sentencing add-ons in many other cases.
See our full breakdown of federal identity theft penalties for how prison time, fines, and restitution work at the federal level. In practice, Georgia’s own U.S. Attorney’s offices and the Georgia Attorney General coordinate on larger fraud rings, meaning a single scheme can generate both state identity fraud counts and federal charges.
Protecting Yourself: Prevention Strategies
Georgia’s high per-capita identity theft rate — driven in part by Hartsfield-Jackson’s massive passenger volume and the state’s dense logistics and financial sectors — makes prevention worth taking seriously. Enroll in credit monitoring, freeze your credit when you’re not actively applying for anything, shred documents with sensitive information, use unique passwords with two-factor authentication, and check bank and card statements regularly rather than waiting for a monthly review.
If your Social Security number specifically has been compromised, our guide on how Social Security identity theft happens covers the warning signs most people miss.
Frequently Asked Questions
Is identity theft always a felony in Georgia?
Yes. Unlike states where prosecutors choose between misdemeanor and felony charges, Georgia’s identity fraud statute, O.C.G.A. § 16-9-121, has no misdemeanor grade. Every violation is charged as a felony regardless of the dollar amount involved.
What are the maximum penalties for identity fraud in Georgia?
A first conviction carries 1 to 10 years in prison and up to a $100,000 fine. A second or later conviction carries 3 to 15 years and up to $250,000. Aggravated identity fraud, which applies to employment-related identity theft, carries 1 to 15 years and up to $250,000.
Can I be convicted of identity fraud in Georgia if no one lost money?
Yes. The statute criminalizes possessing someone’s identifying information with intent to fraudulently use it — the fraud doesn’t have to succeed, and no one has to suffer an actual financial loss, for a conviction to stand.
What’s the difference between identity fraud and aggravated identity fraud in Georgia?
Standard identity fraud under § 16-9-121 covers the broad unauthorized use of someone’s identifying information. Aggravated identity fraud under § 16-9-121.1 applies specifically to using counterfeit or another person’s identifying information to obtain employment, and it doesn’t merge with other charges, meaning it’s sentenced independently.
How long do prosecutors have to file identity fraud charges in Georgia?
Four years from the date of the offense, per O.C.G.A. § 17-3-1 and confirmed for identity fraud specifically in State v. Green (2019). That clock can pause while the crime remains undiscovered, so prosecutors may still have time to charge cases uncovered well after the fact.
What should I do if I’m falsely accused of identity fraud in Georgia?
Contact a criminal defense attorney immediately. False accusations often come from ex-partners, family disputes, or someone trying to explain away their own debt. An attorney can gather records, communications, and other evidence showing lack of willfulness or fraudulent intent before charges are formally filed.
Can a Georgia identity fraud conviction be sealed or expunged?
Georgia doesn’t use the term “expungement” for felonies, and the process is harder than in many states. A felony conviction must first be pardoned by the Georgia Board of Pardons and Paroles, and only then can it be petitioned for record restriction and sealing under O.C.G.A. § 35-3-37(j)(7).
Is identity theft a federal crime too?
Yes. Identity theft has been a federal crime since 1998 under the Identity Theft and Assumption Deterrence Act, 18 U.S.C. § 1028. A single Georgia case can result in both state identity fraud charges and federal prosecution when the conduct crosses state lines or involves federal systems.
Legal Disclaimer: This information is for educational purposes only and does not constitute legal advice. Georgia identity fraud law, penalties, and charging decisions can vary based on the specific facts of a case and recent legal developments. Consult the official O.C.G.A. § 16-9-121 and § 16-9-121.1, review statute details independently, and contact a Georgia criminal defense attorney for questions about a specific charge or situation.
Related Articles: