Identity Theft in Arizona: A.R.S. 13-2008 Explained

What counts as identity theft under A.R.S. 13-2008?

Most people picture identity theft as a hacker draining a stranger’s bank account. Arizona law reaches much further than that. Under A.R.S. 13-2008, you can be charged for simply possessing or using another person’s name, Social Security number, date of birth, or account information without their consent, if the state believes you did it for an unlawful purpose. No completed fraud is required, and in many cases no actual dollar loss is required either. That broad reach is why ordinary situations, a borrowed card, a roommate’s mail, a name used on an application, can turn into a felony investigation. This guide explains what the statute actually says, how the charge is graded, and where a defense is built.

The statute is written broadly on purpose. Under A.R.S. 13-2008, a person commits taking the identity of another person or entity by knowingly taking, purchasing, manufacturing, recording, possessing, or using the personal identifying information or entity identifying information of another person or entity, without their consent, and with one of the required unlawful intents. Those intents are using the information for any unlawful purpose, causing the other person or entity to suffer a loss, or using the information to obtain or continue employment.

A few things about that definition surprise people. First, the covered information is expansive: it includes names, Social Security numbers, dates of birth, driver license numbers, account numbers, passwords, biometric data, and more. Second, the law protects businesses and other entities, not just individual people, so using a company’s identifying information can qualify. Third, the list of prohibited acts includes possessing and recording the information, which means you do not have to spend a dime or open a single account to be charged. The alleged intent, not a completed transaction, is often what carries the case.

Because the statute sweeps so widely, it frequently appears alongside other charges. It is one of the core offenses in Arizona’s fraud and theft landscape, and it sits next to the broader property and financial crimes described on our Arizona property crimes overview.

What are the penalties for identity theft in Arizona?

Basic identity theft under A.R.S. 13-2008 is a class 4 felony. Arizona grades a more serious version separately. Under A.R.S. 13-2009, aggravated taking the identity of another is a class 3 felony when the conduct involves the identifying information of three or more persons or entities, when it causes an economic loss of one thousand dollars or more, or when the identity is taken with the intent to obtain employment. Because these are felonies, a conviction carries a prison range, the possibility of probation for a first offense, and substantial fines.

The sentencing ranges below come from Arizona’s felony sentencing statute for first-time, non-dangerous offenders, A.R.S. 13-702. Prior felony convictions, multiple counts, or aggravating factors can push exposure well above these numbers, so treat this as a starting point, not a promise about any specific case.

How does identity theft overlap with forgery and fraud?

Identity theft rarely travels alone. Prosecutors often stack it with related financial crimes arising from the same conduct, which raises the stakes because the counts can be sentenced together. Understanding the overlap helps you see why one incident can generate a long charging document.

• Forgery. If the state alleges you signed another person’s name or created a false written instrument, that is a separate class 4 felony under Arizona’s forgery statute. We cover it in detail on our forgery in Arizona guide, and it frequently rides along with an identity theft count.
• Fraudulent schemes and artifices. When the alleged conduct involves a scheme to obtain money or property through false pretenses, Arizona treats that as a serious class 2 felony, one of the harshest financial charges on the books. It commonly appears in larger cases and is a core part of what a Phoenix white collar crime defense addresses.
• Trafficking in the identity of another. Arizona separately criminalizes selling or transferring another person’s identifying information, which can be charged when the allegation is that information moved from one person to another rather than being used directly.

Because these charges share facts, a defense that weakens the identity theft count, on intent or consent, often undercuts the companion charges too. That is why the strategy has to look at the whole indictment, not one count in isolation.

Why are intent and consent the real battleground?

Every identity theft charge under A.R.S. 13-2008 has two moving parts that the state must prove: that you acted without the other person’s consent, and that you did so with an unlawful intent. Those two elements are where most cases are won or lost, because the underlying facts, that you had or used someone’s information, are frequently not in dispute at all.

Consent is often murkier than it looks. People share account logins, add family members to cards, let a partner file a joint application, or hand a friend their information for a specific errand. When a relationship sours or a transaction goes wrong, what started as permission can be recast as theft. The question of whether consent existed, how far it extended, and whether it was later revoked can decide the case.

Intent is just as contestable. The statute requires an unlawful purpose or an intent to cause loss. Merely possessing information, or using it in a way you believed was authorized, is not the same as intending to defraud. The state usually has to prove intent through circumstantial evidence, and circumstantial evidence can point more than one direction. Establishing an innocent explanation for why you had or used the information is frequently the heart of the defense.

What are the defenses to an Arizona identity theft charge?

There is no single template, because the right defense depends on the facts, but Arizona identity theft cases tend to turn on a handful of recurring themes. An experienced defense attorney tests each of them against the evidence.

• Consent or authorization. If the person whose information was used gave permission, expressly or through a course of dealing, an essential element is missing. Texts, emails, prior joint accounts, and the history between the parties can all support this.
• No unlawful intent. The state must prove you acted for an unlawful purpose or to cause loss. If you believed you were authorized, or the use was for a lawful reason, the intent element fails.
• Mistaken identity or no knowing possession. Shared devices, joint accounts, and household mail mean information can be present without you knowingly taking or using it. The state has to tie the conduct to you specifically.
• The information was your own or already public. Using your own identifying information, or information that was lawfully public, does not fit the statute’s requirement that the data belong to another and be used without consent.
• Challenging how victims and losses are counted. Because three victims or a one thousand dollar loss elevates the charge to a class 3 felony, disputing the count can move a case back down to the class 4 range, or below.
• Constitutional and evidentiary challenges. How the information was obtained, whether a search was lawful, and whether the state can authenticate its digital evidence are all fair game.

These defenses are part of the broader toolkit our team brings to every fraud and theft matter, described on our criminal defense page.

How much restitution can identity theft cost?

Restitution is one of the most underestimated parts of an identity theft case. Separate from any fine that goes to the state, Arizona law requires a convicted defendant to reimburse victims for their economic losses. In an identity theft case, those losses can extend beyond a single fraudulent charge to include the costs a victim incurred cleaning up the damage.

That can mean unauthorized transactions, but also the time and money a victim spent restoring their credit, closing and reopening accounts, and correcting records. When a case involves multiple alleged victims, the restitution figure can climb quickly and can outlast the criminal sentence itself, because restitution orders are enforceable long after a case closes. Contesting the amount and the causal link between the conduct and each claimed loss is an important part of the defense, not an afterthought once guilt is decided.

What are realistic outcomes in Maricopa County?

Maricopa County prosecutors take financial crimes seriously, and identity theft is charged often here because it touches so many everyday situations. That said, the outcome of a given case varies widely based on the facts, the strength of the intent and consent evidence, the number of alleged victims, the loss amount, and the person’s prior record.

A first-time defendant facing a single-victim class 4 count with a genuine consent or intent dispute is in a very different position than someone charged with an aggravated class 3 count involving multiple victims and a documented loss. Depending on the case, outcomes can range from a hard-fought dismissal or reduction, to diversion or probation for eligible first offenders, to a negotiated plea that avoids the worst prison exposure, to trial. No lawyer can promise a specific result, and anyone who does should be viewed with caution. What a defense can do is attack the weak points, intent, consent, the victim and loss count, and the reliability of the evidence, to put you in the strongest possible position. To talk through your situation, reach our team through the contact page.