Falsely Accused of Identity Theft in Arizona?

Why You Can Be Falsely Accused of Identity Theft in Arizona

Few accusations feel as disorienting as being blamed for identity theft. You did not open the account, you did not make the charge, or you had every right to use the card — and yet a detective, a bank fraud department, or a Maricopa County grand jury is treating you like the person who did it. Arizona takes identity crimes seriously: taking the identity of another person or entity under A.R.S. 13-2008 is a class 4 felony on its own, and it escalates fast from there.

This article is written specifically for people who believe they have been wrongly accused — not a general overview of identity theft law. It covers mistaken identity, authorized-use disputes, the intent element that decides almost every case, how banks and prosecutors actually build these cases, and how digital forensics can show it was not you. If your accusation involves broader financial fraud allegations, see our Scottsdale white collar crimes lawyer page, and if you have already received a letter from a prosecutor’s office, read our guide on what a target letter in a fraud investigation means.

Identity theft charges get filed on far less certainty than people assume. A bank, a merchant, or an officer sees a suspicious transaction tied to your name, your address, your device, or your account — and the paperwork starts before anyone has confirmed who was actually behind the keyboard. Common ways innocent people end up accused include:

• Someone else — a family member, roommate, ex-partner, or a stranger who obtained your data in a breach — used your name, Social Security number, or account without your knowledge.
• A merchant or card issuer flags a transaction and reports the account holder of record, without ever confirming who actually made the purchase.
• A shared household computer, Wi-Fi network, or IP address ties a fraudulent transaction to your home even though someone else in the house used the device.
• A relative or employee had a card issued in your name — an authorized user or a joint account — and routine, permitted use gets treated as unauthorized after the fact.
• Records mix up two people with similar names, addresses, or dates of birth.
• You were the original victim of the identity theft, and the person who actually stole your information is now pointing back at you to shift the blame.

None of these situations, standing alone, prove the crime Arizona actually has to establish. The law does not punish being present near a fraudulent transaction — it punishes knowingly acting without consent and with the intent to defraud or cause loss.

What the State Must Prove Under A.R.S. 13-2008

Identity theft in Arizona is defined by A.R.S. 13-2008. The statute makes it a crime to knowingly take, purchase, manufacture, record, possess, or use any personal identifying information of another person or entity, without the consent of that person or entity, with the intent to obtain or use the other person’s or entity’s identity for any unlawful purpose, or to cause loss to the person or entity. A first-time violation is a class 4 felony.

Break that into the elements the state must prove, because each one is a place to fight:

• Knowingly — not accidentally, not carelessly, and not through someone else’s independent act you had no part in.
• Personal identifying information — a name, Social Security number, date of birth, account number, PIN, or similar identifier belonging to someone else.
• Without consent — the true owner of the identity did not authorize what you did with it.
• Intent to obtain or use the identity for an unlawful purpose, or to cause loss — the fraudulent-purpose element, and the one most often missing in a falsely-accused case.

If you did not know the information belonged to someone else, if you had actual consent, or if you never intended to defraud anyone or cause a loss, the state’s case has a hole in it — no matter how suspicious the transaction looks on a bank statement.

Aggravated Identity Theft and Trafficking: A.R.S. 13-2009 and 13-2010

Two related statutes raise the stakes further. A.R.S. 13-2009, aggravated identity theft, is charged as a class 3 felony when the state alleges you took or used the identifying information of three or more people or entities, caused a single victim an economic loss of $1,000 or more, or acted with the intent to obtain employment using someone else’s identity. A.R.S. 13-2010, trafficking in the identity of another, is a class 2 felony — the most serious of the three — and applies to someone who knowingly sells, transfers, or transmits another person’s or entity’s identifying information without consent, for an unlawful purpose or to cause loss.

These enhanced charges still require the same knowing, non-consensual, fraudulent-intent framework as the base offense — they simply raise the number of alleged victims, the dollar loss, or the nature of the conduct. A prosecutor who charges aggravated identity theft or trafficking based on a shared household account, a misattributed IP address, or a case of mistaken identity has not actually proven any more than the base charge requires — they have only raised what is at stake for you.

What If It Wasn’t Me? Mistaken Identity in Identity Theft Cases

“It wasn’t me” is one of the most common — and most provable — defenses to an identity theft accusation, because so much of the evidence in these cases points to an account, a device, or an address rather than to an actual person. A few patterns come up again and again.

Stolen information used by someone else

If your identity was genuinely stolen — through a data breach, a lost wallet, a phishing scam, or a scammer who targeted you directly — the person who actually committed the fraud may never be identified, and investigators sometimes default to treating the named account holder as the suspect. Being the original victim of identity theft does not make you the offender.

Shared devices, Wi-Fi, and IP addresses

An IP address identifies a router, not a person. A shared household network, a family computer, a workplace terminal, or unsecured Wi-Fi can put a fraudulent login or purchase at your address while the actual person responsible was a roommate, a guest, a family member, or someone who accessed the network without your knowledge.

Similar names, addresses, or records mixed up

Data-entry errors, similar names, shared addresses at an apartment complex, or clerical mistakes at a bank or credit bureau can attach someone else’s fraudulent activity to your file. These cases are often resolved once the underlying records are pulled and compared side by side.

I Had Permission to Use the Card or Account — Does That Matter?

Yes — consent is a core element the state must disprove, not something you have to prove after the fact. A.R.S. 13-2008 only applies when personal identifying information is used without the consent of the person or entity it belongs to. If you had actual permission, even informal or unwritten, that goes directly at the heart of the state’s case.

Family and household accounts

Parents who let a child use a card, spouses with a shared account, or adult children helping an aging parent with finances are common, lawful arrangements — not identity theft. Disputes often arise later, after a relationship breaks down or a family member changes their story about what was actually agreed to.

Authorized users and shared business accounts

Being added as an authorized user on a credit card, or having access to a shared business or corporate account, is a form of consent. Prosecutors sometimes overlook the difference between exceeding the scope of permission (a civil or workplace dispute) and never having any consent at all (a crime).

Permission that was withdrawn or disputed later

Consent given at the time of the transaction does not disappear because the relationship later soured, the account holder later regretted the arrangement, or a family dispute turned into a police report. What matters is whether you reasonably believed you had permission when you acted.

No Intent to Defraud: Why Intent Decides the Case

Every version of Arizona’s identity theft law requires intent — to obtain or use someone else’s identity for an unlawful purpose, or to cause them a loss. That is very different from simply using information incorrectly, making a billing mistake, misunderstanding whose account something was, or acting on a genuine (even if wrong) belief that you were authorized. Confusion is not fraud. A misunderstanding about whose card, whose login, or whose information was involved is not the same as knowingly and intentionally stealing someone’s identity. Prosecutors have to prove the fraudulent-purpose element beyond a reasonable doubt — and in a genuinely false accusation, that proof usually is not there.

How Are Card and Account Fraud Cases Actually Built?

Understanding how these cases come together helps explain where they fall apart. Banks, card networks, and merchants typically build a fraud referral — and prosecutors build a charging decision — from a combination of:

• Bank and card-issuer records obtained by subpoena: account applications, statements, chargeback and fraud-affidavit paperwork, and the account holder of record.
• Merchant records: point-of-sale logs, register receipts, and in-store or online order details tied to a transaction.
• Surveillance footage from the store, ATM, or gas station where a card was physically used.
• Signature and identification comparisons made at the point of sale or later by a document examiner.
• Device and IP data showing which device, browser, or network was used to open an account, log in, or complete an online purchase.
• Victim statements from the person whose identity was allegedly used, describing what they did and did not authorize.

Notice what that list frequently does not include: direct proof of who was physically present, who typed the password, or who benefited from the transaction. That is exactly the gap a defense investigation targets.

How Digital Forensics Can Clear You

Digital forensics is often the fastest way to show a case of mistaken identity, authorized use, or lack of intent. Depending on the facts, that can include:

• Device attribution — examining which specific phone, computer, or account credentials were actually used, rather than assuming the named account holder was the user.
• Login timestamps and geolocation — showing you were somewhere else, or that the access came from a device you never possessed, at the moment the fraud occurred.
• Metadata and access logs — establishing who created, edited, or submitted an application or transaction, and when.
• Forensic accounting — tracing where the money or goods actually went, and who benefited, which frequently points away from the accused.
• Handwriting and document examination — comparing a signature on an application, receipt, or check against known exemplars to confirm or exclude authorship.

This evidence has to be identified and requested early. Surveillance footage gets overwritten, IP logs age off servers, and bank retention windows close — all reasons to get a defense investigation moving as soon as you know you are under suspicion.

Where Your Identity Theft Case Is Heard

Identity theft, aggravated identity theft, and trafficking under 13-2008, 13-2009, and 13-2010 are all felonies, prosecuted by the Maricopa County Attorney’s Office and heard in Maricopa County Superior Court — regardless of whether you live in Scottsdale, Phoenix, or elsewhere in the county. Scottsdale City Court has no jurisdiction over these felony charges. If you were arrested locally, our guide to what happens after a Scottsdale arrest walks through the first steps.

Some identity theft and account fraud cases — particularly those involving interstate transactions, out-of-state banks, or card networks — can also draw federal attention from the U.S. Attorney’s Office under wire fraud, bank fraud, or federal aggravated identity theft statutes. If you have received a letter from a federal or county prosecutor identifying you as a subject of an investigation, read our guide on what a target letter in a fraud investigation means before you respond to anyone.

What to Do — and Not Do — Right Now

Do

• Write down everything you remember about the account, card, or information at issue — who had access, who had permission, and when.
• Gather anything that documents consent or your version of events: texts, emails, shared-account records, or a rental or business agreement.
• Pull your own bank, phone, and location records for the relevant dates before they age off or become harder to obtain.
• Contact a defense attorney before you speak with a bank investigator, a detective, or a prosecutor.
• Report the true theft to the credit bureaus and file an FTC identity theft report if someone genuinely stole your information.

Do Not

• Do not give a recorded statement or written explanation to a bank fraud department or detective without counsel present.
• Do not assume that having “nothing to hide” means you do not need a lawyer — the intent and consent elements are legal questions, not just factual ones.
• Do not contact the alleged victim directly to try to work it out; let your attorney handle any communication.
• Do not delete texts, emails, or account access logs that could show who actually had permission or access — that can look like consciousness of guilt even when you are innocent.

How Tamou Law Group Defends Identity Theft Accusations

These cases are won by testing the state’s proof of knowledge, consent, and intent — not by arguing the transaction never happened. In the first days we identify what records exist and move to preserve them: bank and merchant subpoena responses, surveillance footage, device and IP logs, and any documentation of consent or authorized use. We look hard at whether the state can actually prove you knew the information belonged to someone else, that you lacked consent, and that you intended to defraud anyone or cause a loss — because in a genuinely false accusation, one or more of those elements is usually missing.

Our team includes former prosecutors, law enforcement officers, and public defenders who know how the Maricopa County Attorney’s Office evaluates identity theft and fraud referrals from banks and merchants. We work out of offices at 9375 E Shea Blvd, Suite 100 in Scottsdale and 2390 E Camelback Rd, Suite 130 in Phoenix, and can meet with you at either location on short notice. Call 623-321-4699 any time, day or night, or learn more on our Scottsdale criminal defense lawyer page and our Scottsdale white collar crimes lawyer page.