Yes, credit card fraud is a federal crime whenever it crosses state lines or moves through interstate channels like the internet, phone networks, or the mail. That threshold is remarkably easy to meet, which is why so many credit card fraud cases end up in federal court rather than state court. Federal convictions carry prison terms ranging from 10 to 30 years depending on the statutes charged, and prosecutors routinely stack several federal laws into a single indictment to push the exposure higher.
What Pushes a Credit Card Fraud Case Into Federal Court
The core trigger is “interstate or foreign commerce.” If the fraudulent activity touched any channel of communication or business that crosses state borders, federal prosecutors can step in. Using a stolen card number online almost always involves servers, payment processors, or merchants in other states. Swiping a cloned card at a gas station that routes transactions through an out-of-state processor counts too.
Several specific acts invite federal attention on their own, even without any obvious interstate element:
- Producing, selling, or using counterfeit credit cards with intent to defraud.
- Possessing 15 or more stolen or counterfeit cards, which is a federal offense in itself, even without a single fraudulent purchase.1Office of the Law Revision Counsel. 18 USC 1029 – Fraud and Related Activity in Connection with Access Devices
- Racking up $1,000 or more in fraudulent charges over any 12-month period using unauthorized access devices.1Office of the Law Revision Counsel. 18 USC 1029 – Fraud and Related Activity in Connection with Access Devices
- Owning a card skimmer, embosser, or other card-making equipment with intent to defraud.
- Targeting a bank or credit union directly, which triggers bank fraud charges under a separate statute with harsher penalties.
The U.S. Secret Service holds primary investigative authority over access device fraud, including credit and debit card fraud.2United States Secret Service. Financial Investigations The FBI also works these cases, particularly when they connect to organized crime or broader white-collar schemes.3Federal Bureau of Investigation. White-Collar Crime
The Federal Statutes Prosecutors Stack
Federal credit card fraud cases rarely involve just one charge. Understanding which laws apply explains why federal exposure runs so much higher than a state fraud case.
Access Device Fraud, 18 U.S.C. 1029
This statute is aimed squarely at credit card fraud. It criminalizes producing, using, or trafficking in counterfeit or unauthorized “access devices,” and that term reaches well beyond physical plastic. The statutory definition covers any card, account number, PIN, electronic serial number, or other means of account access that can be used to obtain something of value or initiate a fund transfer.1Office of the Law Revision Counsel. 18 USC 1029 – Fraud and Related Activity in Connection with Access Devices A stolen debit card number, a compromised online banking login, or a cloned gift card all qualify.
The statute also reaches conspiracies. If two or more people agree to commit access device fraud and any one of them takes a step toward carrying it out, each conspirator faces up to half the maximum prison sentence and the full fine amount for the underlying offense.1Office of the Law Revision Counsel. 18 USC 1029 – Fraud and Related Activity in Connection with Access Devices
Wire Fraud, 18 U.S.C. 1343
Any credit card fraud scheme that uses electronic communications qualifies as wire fraud. Since virtually every modern card transaction travels through electronic networks, prosecutors can add wire fraud to nearly any case. Wire fraud carries up to 20 years in prison, and if the scheme targets a financial institution, the maximum jumps to 30 years and a $1,000,000 fine.4Office of the Law Revision Counsel. 18 USC 1343 – Fraud by Wire, Radio, or Television This is where sentences get truly severe, because each individual wire transmission can be charged as a separate count.
Mail Fraud, 18 U.S.C. 1341
When any part of the scheme involves the U.S. mail or a private carrier, mail fraud charges apply. The penalties mirror wire fraud: up to 20 years, or 30 years and a $1,000,000 fine when a financial institution is involved.5Office of the Law Revision Counsel. 18 U.S. Code 1341 – Frauds and Swindles Ordering stolen merchandise shipped to a drop address, mailing fraudulent credit card applications, or receiving counterfeit cards by mail all qualify.
Bank Fraud, 18 U.S.C. 1344
If the scheme targets a financial institution directly, bank fraud charges apply. This statute carries the harshest penalties of the group: up to 30 years and a fine of up to $1,000,000.6Office of the Law Revision Counsel. 18 U.S. Code 1344 – Bank Fraud Using stolen card data to drain someone’s bank account can lead to bank fraud charges on top of access device fraud and wire fraud for the same conduct.
Credit Card Fraud, 15 U.S.C. 1644
A separate federal statute targets credit card fraud in transactions affecting interstate or foreign commerce. It covers using a counterfeit, stolen, or fraudulently obtained credit card to obtain $1,000 or more in value within a year, along with receiving goods obtained through such fraud. Convictions carry up to 10 years and a fine of up to $10,000.7Office of the Law Revision Counsel. 15 U.S. Code 1644
Prison Time and Fines
The sentence depends on which statutes get charged and whether enhancements apply. The ranges break down this way:
- Access device fraud, most offenses: up to 10 years for a first offense involving producing, using, or trafficking in counterfeit or unauthorized access devices, or possessing 15 or more.1Office of the Law Revision Counsel. 18 USC 1029 – Fraud and Related Activity in Connection with Access Devices
- Access device fraud involving equipment or scanning: up to 15 years for possessing device-making equipment, using a scanning receiver, or running unauthorized transactions through the credit card system.1Office of the Law Revision Counsel. 18 USC 1029 – Fraud and Related Activity in Connection with Access Devices
- Wire or mail fraud: up to 20 years, or up to 30 years if the scheme affects a financial institution.4Office of the Law Revision Counsel. 18 USC 1343 – Fraud by Wire, Radio, or Television
- Bank fraud: up to 30 years.6Office of the Law Revision Counsel. 18 U.S. Code 1344 – Bank Fraud
- Repeat access device offenders: up to 20 years for a second or subsequent offense under 18 U.S.C. 1029.1Office of the Law Revision Counsel. 18 USC 1029 – Fraud and Related Activity in Connection with Access Devices
Fines follow a separate federal schedule. For any felony, the maximum is $250,000, or twice the gross gain to the defendant or twice the gross loss to victims, whichever is greater.8Office of the Law Revision Counsel. 18 USC 3571 – Sentence of Fine In large schemes where millions of dollars moved through stolen accounts, the gain-or-loss formula dwarfs the $250,000 baseline.
Courts also order forfeiture of any personal property used to commit the offense under 18 U.S.C. 1029, including computers, phones, card printers, and vehicles.1Office of the Law Revision Counsel. 18 USC 1029 – Fraud and Related Activity in Connection with Access Devices Restitution to victims is a standard part of federal sentencing, calculated on actual losses rather than the fine amount.
The Mandatory Two-Year Identity Theft Add-On
This is the charge that catches many defendants off guard. If you used someone else’s personal identifying information during a federal credit card fraud offense, prosecutors can add an aggravated identity theft count under 18 U.S.C. 1028A. The penalty is a mandatory two years in prison, and the sentence must run consecutively, meaning it is added onto whatever sentence you receive for the underlying fraud.9Office of the Law Revision Counsel. 18 USC 1028A – Aggravated Identity Theft
The judge has no discretion to shorten the underlying fraud sentence to compensate, and probation is not available for this count.9Office of the Law Revision Counsel. 18 USC 1028A – Aggravated Identity Theft Because credit card fraud almost always involves someone else’s card number or account information, this enhancement applies in a large share of federal cases. A defendant who might negotiate a three-year sentence on the fraud charges alone ends up serving five years minimum once the identity theft count attaches.
When Credit Card Fraud Stays a State Case
Most credit card fraud is still prosecuted at the state level. When someone steals a wallet and uses the cards at nearby stores, or an employee skims a customer’s card at a restaurant and runs up local charges, the conduct stays within one state’s borders and doesn’t involve federal triggers. Local police investigate, and the county or district attorney brings charges under that state’s fraud or theft statutes.
State penalties vary widely but follow a general pattern. Low-dollar fraud is treated as a misdemeanor, with fines and up to a year in jail. Once the dollar amount crosses the felony threshold, penalties jump to possible prison sentences of several years. The line between misdemeanor and felony fraud falls anywhere from roughly $100 to $3,000 depending on the state.
A case that begins as a state investigation can also be picked up by federal authorities if evidence later reveals interstate activity. A local detective looking into a stolen credit card might discover the suspect is part of a ring operating across several states. At that point the Secret Service or FBI may take over, and what looked like a minor state charge becomes a federal prosecution with much higher stakes.
How Long Prosecutors Have to File Charges
Federal prosecutors generally have five years from the date of the offense to bring charges for credit card fraud.10Office of the Law Revision Counsel. 18 U.S. Code 3282 – Offenses Not Capital That clock starts when the fraudulent act occurs, not when the victim or the bank discovers it. For ongoing schemes, each individual fraudulent transaction can restart the clock, so a pattern of monthly charges using stolen card data can keep the limitations period open for years after the first charge.
Five years sounds short, but federal investigations often take two or three years to build, and prosecutors rarely rush. If you used a stolen card four years ago and haven’t heard anything, that silence does not mean you’re in the clear.