Credit Card Theft Charges: Federal Statutes, Prison Time, and Fines

Credit card theft charges, penalties, and prison time depend on how much was stolen, how many cards or accounts were involved, and whether state or federal prosecutors bring the case. Smaller single-card thefts are usually misdemeanors with jail time under a year. Larger losses, multiple stolen cards, or schemes that cross state lines become felonies, and federal convictions can reach 20 years in prison and a $250,000 fine. When the theft involves using another person’s identifying information, a mandatory additional two years gets added on top.

Misdemeanor or Felony: What Determines the Charge

The dollar amount is the first thing prosecutors look at. Misdemeanor charges typically apply when unauthorized transactions stay below a set threshold, which varies by jurisdiction but commonly falls between $500 and $1,000. These cases usually involve a single stolen card and a single purchase. The federal statute aimed at fraudulent credit card use, 15 U.S.C. § 1644, sets its trigger at $1,000 in fraudulent charges aggregated over a one-year period.¹

Felony charges apply once losses exceed the threshold or the circumstances point to organized fraud. A few things push a case into felony territory regardless of dollar amount:

Possessing 15 or more counterfeit or unauthorized access devices is a standalone federal felony carrying up to 10 years in prison.²
Possessing card-cloning devices or skimmers demonstrates premeditation and typically elevates the case to a felony.
Breaking into a vehicle or home to get the cards adds burglary or criminal trespass, both felonies in most jurisdictions.

States generally treat taking the card and using the card as separate offenses, so a single incident can produce multiple charges. Federal prosecutors step in when the activity crosses state lines, targets a federally insured institution, or involves online transactions routed through interstate networks.

Federal Prison Sentences by Statute

Three federal statutes do most of the work in credit card theft cases, and the maximum penalty depends on which one prosecutors use.

18 U.S.C. § 1029 — Access Device Fraud

This is the most common federal charge. “Access device” covers plastic cards, account numbers, PINs, and other codes used to access funds.³ The penalty tiers are:

Up to 10 years for a first offense under most subsections, including using a stolen access device or possessing 15 or more counterfeit or unauthorized devices.
Up to 15 years for a first offense involving producing or trafficking in access device-making equipment.
Up to 20 years for a repeat offense if the defendant has a prior conviction under the same statute.

Any property used in the crime can also be forfeited to the government.²

15 U.S.C. § 1644 — Fraudulent Use of Credit Cards

This statute applies to anyone who uses a stolen, counterfeit, or forged credit card to obtain $1,000 or more in goods, services, or cash within a one-year period. It also reaches anyone who knowingly transports a stolen card across state lines, regardless of whether it was used. The maximum is 10 years in prison and a $10,000 fine.¹

18 U.S.C. § 1028 — Identity Fraud

When the theft involves using someone else’s name, Social Security number, or date of birth, prosecutors may add identity fraud. The tiers are steeper:

Up to 5 years for general identity fraud.
Up to 15 years for aggravating factors such as producing false IDs or obtaining $1,000 or more in value.
Up to 20 years after a prior conviction under this statute, or in connection with drug trafficking or violence.
Up to 30 years in connection with terrorism.

Fines reach $250,000 for individuals, along with forfeiture of property used in the offense.⁴ When a federal statute refers to “a fine under this title” without a dollar figure, the general sentencing statute fills in $250,000 for any felony and $100,000 for a Class A misdemeanor.⁵

The Mandatory Two Years for Aggravated Identity Theft

The single biggest penalty enhancement in federal credit card cases is aggravated identity theft under 18 U.S.C. § 1028A. It applies whenever someone uses another person’s identifying information during the commission of a qualifying felony, and access device fraud under § 1029 is one of those qualifying felonies.

Aggravated identity theft carries a mandatory two-year prison sentence that must be served on top of the sentence for the underlying fraud. The judge cannot reduce or eliminate those two years. The sentence cannot run at the same time as the fraud sentence; it has to run consecutively. Probation in place of prison is not available for this charge.⁶

In practice, a defendant sentenced to five years for access device fraud plus aggravated identity theft serves at least seven. If the crime is connected to terrorism, the mandatory add-on increases to five years.⁶

How the Dollar Amount Drives the Sentence

Federal judges use the U.S. Sentencing Guidelines to calculate a recommended sentence. In fraud and theft cases, total dollar loss is one of the biggest inputs. Under Section 2B1.1, the loss table adds offense levels on top of the base:

$6,500 or less: no increase
More than $6,500: add 2 levels
More than $15,000: add 4 levels
More than $40,000: add 6 levels
More than $95,000: add 8 levels
More than $150,000: add 10 levels
More than $250,000: add 12 levels
More than $550,000: add 14 levels
More than $1,500,000: add 16 levels

The table continues upward for losses in the hundreds of millions. “Loss” is the greater of actual loss or intended loss, so an unsuccessful scheme that aimed at $100,000 can be sentenced as if $100,000 was actually stolen. Each two-level increase translates to a noticeably longer recommended range, especially for defendants with prior criminal history.⁷

What Makes a Sentence Longer

Beyond the dollar figure, several circumstances push penalties higher.

Vulnerable Victims

Targeting elderly people, individuals with disabilities, or victims of a natural disaster leads to sentencing enhancements. The guidelines include a specific two-level increase for fraud committed in connection with a declared major disaster or emergency.⁸

Prior Convictions

Criminal history affects sentencing twice over. The guidelines place repeat offenders in higher criminal history categories, lifting the recommended range for any given offense level. On top of that, several statutes carry enhanced maximums for defendants with prior convictions under the same law. A first offense under § 1029 caps at 10 or 15 years depending on the conduct; a repeat offense under the same statute reaches 20.²

Multiple Victims and Stacked Counts

Each person whose card information was stolen can be charged as a separate count. Prosecutors sometimes stack counts so prison terms run consecutively rather than concurrently, meaning each sentence is served one after the other. A scheme touching dozens of victims can produce a combined sentence far exceeding the maximum for a single count.

Sophisticated Methods

Skimming devices, malware, phishing schemes, or organized crime networks are treated as aggravating. These methods often trigger additional federal charges like wire fraud or computer fraud, each with its own independent penalty range.

Restitution and Fines

Federal law requires courts to order restitution in most credit card fraud cases. Under the Mandatory Victims Restitution Act, a judge must order the defendant to repay the financial losses suffered by identifiable victims, including banks, merchants, and individual cardholders. The court has very little discretion to waive it.⁹

Restitution equals the victim’s actual loss, usually the value of the fraudulent charges plus related costs like replacing compromised accounts. If stolen property can be returned, the court orders that first; otherwise the defendant pays the full monetary equivalent.⁹ Restitution is also a mandatory condition of supervised release, so a defendant who hasn’t finished paying by the end of prison keeps owing the money under court supervision.¹⁰ Fines sit separately on top, up to $250,000 for a felony.⁵

Life After the Sentence

Federal defendants who serve prison time for credit card theft are almost always placed on supervised release afterward. The maximum term is five years for a Class A or B felony, three for a Class C or D felony, and one year for a Class E felony or misdemeanor. During that time, the defendant must avoid new crimes, comply with restitution orders, and follow any additional conditions the court imposes. A violation can send the person back to prison.¹⁰

A conviction, especially a felony, also brings consequences that outlast the sentence itself.

Employment and Licensing

Federal law bars anyone convicted of a crime involving dishonesty or breach of trust from serving as an officer, director, or employee of a federally insured bank, or from participating in banking operations.¹¹ Similar restrictions reach commodities trading, securities, and insurance. State licensing boards for professions like accounting, law, and healthcare routinely deny or revoke licenses based on fraud convictions.

Immigration

For non-citizens, a credit card theft conviction can trigger deportation. A theft offense is classified as an “aggravated felony” under immigration law if the court imposed a prison sentence of a year or more, even if suspended. Fraud or deceit offenses involving more than $10,000 in losses also qualify regardless of sentence length. An aggravated felony is a permanent bar to establishing the good moral character needed for naturalization.¹² Credit card fraud generally also counts as a crime involving moral turpitude, which creates additional grounds for removal.

Credit and Finances

A conviction can make it difficult to obtain credit, open bank accounts, or qualify for federal benefits. The restitution obligation follows the defendant after release and can be enforced through wage garnishment and asset seizure until it’s paid in full.

A Note on Corporate Card Misuse

When someone authorized to use a company credit card exceeds that permission, for example by charging personal purchases to a corporate account, the charge may be embezzlement rather than theft. The distinction matters because embezzlement involves someone who already had lawful access to the funds. The penalties are comparable, though: federal sentencing guidelines treat embezzlement and theft under the same offense category, so the recommended prison range depends on the same loss table above. Some states charge corporate card misuse as theft by deception or unauthorized use of a financial instrument, depending on how the statute is written.

1
Office of the Law Revision Counsel. 15 U.S.C. 1644 – Fraudulent Use of Credit Cards; Penalties
2
Office of the Law Revision Counsel. 18 USC 1029 – Fraud and Related Activity in Connection With Access Devices
3
Office of the Law Revision Counsel. 18 U.S. Code 1029 – Fraud and Related Activity in Connection With Access Devices
4
Office of the Law Revision Counsel. 18 U.S. Code 1028 – Fraud and Related Activity in Connection With Identification Documents, Authentication Features, and Information
5
Office of the Law Revision Counsel. 18 U.S. Code 3571 – Sentence of Fine
6
Office of the Law Revision Counsel. 18 U.S. Code 1028A – Aggravated Identity Theft
7
United States Sentencing Commission. USSG 2B1.1 – Larceny, Embezzlement, and Other Forms of Theft
8
United States Sentencing Commission. Amendment 719
9
Office of the Law Revision Counsel. 18 U.S. Code 3663A – Mandatory Restitution to Victims of Certain Offenses
10
Office of the Law Revision Counsel. 18 U.S. Code 3583 – Inclusion of a Term of Supervised Release After Imprisonment
11
U.S. Department of Justice. Federal Statutes Imposing Collateral Consequences Upon Conviction
12
USCIS. Volume 12, Part F, Chapter 4 – Permanent Bars to Good Moral Character