California Penal Code section 530.5 is the primary state-law identity theft statute. It criminalizes willfully obtaining personal identifying information of another person and using it for any unlawful purpose. Identity theft cases are increasingly common, often originate from credit reports or law enforcement task forces, and frequently overlap with federal prosecution under 18 U.S.C. section 1028. This page covers the elements, the variants, and the defense angles.

The elements of PC 530.5(a)

To convict on the core identity theft charge, the prosecution must prove: (1) the defendant willfully obtained personal identifying information of another person; (2) the defendant used that information; (3) the use was for an unlawful purpose; AND (4) the use was without the consent of the person whose information it was. “Personal identifying information” is defined broadly under PC 530.55(b) and includes name, address, Social Security number, driver license number, financial account information, biometric data, and similar items.

Variants under PC 530.5(b)-(e)

Section 530.5 has multiple subsections covering different conduct: PC 530.5(b) criminalizes obtaining personal identifying information with intent to defraud; PC 530.5(c) criminalizes selling, transferring, or conveying personal identifying information with intent to defraud; PC 530.5(d) covers mail theft of personal identifying information; PC 530.5(e) covers acquiring, transferring, or retaining personal identifying information of 10 or more persons.

Each subsection carries its own elements and its own punishment range, with the aggregate-volume variant in PC 530.5(e) carrying the heaviest exposure as a straight felony.

Wobbler in most cases

PC 530.5(a) and (b) are wobblers. Misdemeanor exposure is up to one year in county jail. Felony exposure is 16 months, 2 years, or 3 years under PC 1170(h). The aggregate-volume variant under PC 530.5(e) is a straight felony with similar prison exposure.

The federal overlay

Federal identity theft (18 U.S.C. § 1028) and aggravated identity theft (18 U.S.C. § 1028A) carry significantly higher exposure. Section 1028A includes a mandatory two-year consecutive sentence on top of any underlying felony. Many state identity theft cases can be referred to federal prosecutors, particularly when there is a federal nexus (use of federal documents, interstate transmission, federal informant involvement).

Common identity theft defenses

Lack of knowledge or willfulness. The “willfully obtained” element requires more than accidental possession of someone else’s information. Receiving information in a legitimate transaction and later being accused of misuse can support a defense.

Consent. Family members, business partners, and joint account holders sometimes share personal identifying information with consent. Disputes about the scope of authorization are common.

No unlawful purpose. Possession of personal identifying information without an unlawful use is generally not a crime. Notations in a phone, business records, or personal databases without subsequent unlawful use can fall outside the statute.

Identification challenges. Identity theft cases often involve circumstantial evidence linking the defendant to online activity. IP addresses, device fingerprints, and account-creation records have known limitations.

Fourth Amendment suppression. Search warrants for devices and accounts must satisfy particularized probable cause. Overbroad warrants and improper seizure procedures support PC 1538.5 suppression motions.

What to do right now

Identity theft investigations often involve banks, credit card companies, and federal task forces. Do not give a statement to investigators. Do not consent to searches of devices, accounts, or storage. Preserve any documentation showing how you obtained the information in question, the relationship to the other person, and any consent or authorization. Federal exposure is real in many cases.

The Law Office of Zak Fisher is a Los Angeles criminal defense practice. This page is general legal information, not legal advice for any specific matter. Past results do not guarantee a similar outcome in your case. No attorney-client relationship is formed without a signed engagement letter. Attorney Advertising. Zak Fisher, Esq., California Bar No. 332712.

Penal Code § 530.5: Identity Theft Defense in California