What Is Application Fraud? Federal Charges and Sentences

Application fraud is the deliberate use of false or misleading information on an application to obtain something you wouldn’t otherwise qualify for, whether that’s a mortgage, a credit card, an insurance policy, a job, or a government benefit. On the federal side, a conviction can mean up to 30 years in prison, fines up to $1 million, and a court order to repay every dollar the victim lost. The reach is broad because the same conduct can trigger several different statutes at once.

What Counts as Application Fraud

Two elements separate fraud from an honest mistake. The applicant has to know the information is false, or act with reckless disregard for whether it’s true. A typo on your income figure or a good-faith misunderstanding about an employer’s legal name doesn’t qualify. And the false information has to be “material,” meaning the kind of detail that would actually influence the approval decision. Lying about your middle initial isn’t material. Lying about your annual income on a loan application is.

Fraud investigators sort the conduct into two broad buckets. First-party fraud is when the real applicant lies about their own information: inflating earnings, hiding debts, overstating assets. Third-party fraud is when someone uses another person’s identity without permission, either by stealing real credentials through data breaches and phishing or by combining real and fabricated data to build a “synthetic” identity that doesn’t belong to anyone. Both are illegal. They produce very different victims.

Where It Shows Up

The underlying behavior is the same across industries. The specifics shift with what’s being applied for.

Loan applications. Inflating income, fabricating employment, or hiding existing debts to qualify for a mortgage, auto loan, or personal loan. Making a false statement on a loan application to a federally insured bank is a standalone federal crime under 18 U.S.C. § 1014, carrying up to 30 years in prison and a $1 million fine.¹
Credit card applications. Using stolen personal information or a synthetic identity to open accounts with no intention of repaying. These schemes often involve access device fraud under 18 U.S.C. § 1029, which carries up to 10 or 15 years for a first offense depending on the specific conduct.²
Insurance applications. Misrepresenting health conditions, prior claims history, or risk factors to get lower premiums or coverage that would otherwise be denied.
Employment applications. Falsifying degrees, professional licenses, job titles, or criminal history. Criminal prosecution is less common here, but discovery usually means termination and, in regulated fields, a referral to a licensing board.
Government benefit applications. False information submitted to collect unemployment, disaster relief, or social assistance. Federal prosecution of benefit fraud surged after the COVID-19 pandemic, and these cases frequently involve wire fraud charges.

How It’s Done

Most application fraud still runs on familiar tools: fake pay stubs, doctored bank statements, fabricated employer references, a false Social Security number or address. In third-party schemes, fraudsters either steal real credentials or recruit “identity mules” who lend their information for a cut.

Generative AI has sped the work up. Fraudsters now use AI tools to produce entire packages of fake documents, including IDs, utility bills, and pay stubs, in minutes. Because the files are generated from scratch rather than altered from originals, they contain internally consistent information that can slip past detection systems built to spot Photoshop artifacts. Losses from synthetic identity fraud crossed $35 billion in 2023 and continue to climb.³ Real-time face-swapping and voice cloning are also being used to defeat video and phone-based identity checks.

Federal Charges and Prison Time

Application fraud isn’t a single charge. Prosecutors pick from a menu of statutes based on how the scheme worked and who was targeted, and several of these charges can stack in a single indictment.

Bank Fraud

Under 18 U.S.C. § 1344, anyone who executes a scheme to defraud a financial institution or obtain its money through false representations faces up to 30 years in federal prison and a fine of up to $1 million.⁴ It’s the charge prosecutors most often reach for when someone submits a fraudulent loan or credit application to a bank. The institution doesn’t have to actually lose money; the scheme itself is the crime.

Wire and Mail Fraud

If any part of the scheme involved electronic communication, such as email, an online portal, or a phone call, it triggers wire fraud under 18 U.S.C. § 1343. If the mail or a commercial carrier was used, mail fraud under 18 U.S.C. § 1341 applies instead. Both carry up to 20 years in prison for standard cases.⁵ When the fraud involves a financial institution or a federally declared disaster or emergency, the maximum rises to 30 years and the fine ceiling to $1 million.⁶ Because almost every modern application touches the internet, wire fraud has become the most versatile tool in a federal prosecutor’s kit.

Identity Fraud and Aggravated Identity Theft

Using someone else’s identity documents or creating fraudulent identification to support an application is separately punishable under 18 U.S.C. § 1028, with penalties ranging from 5 to 15 years for most offenses and up to 30 years if the fraud facilitated drug trafficking or terrorism.⁷

The real hammer is aggravated identity theft under 18 U.S.C. § 1028A. If a fraudster uses another real person’s identity during any of the underlying fraud offenses, the court must add a mandatory two-year prison sentence on top of whatever the underlying crime carries. That two years runs consecutively, not concurrently, and the judge has no discretion to reduce it or substitute probation.⁸

False Statements on Loan Applications

Section 1014 of Title 18 specifically targets anyone who knowingly makes a false statement or overvalues property to influence a decision by a federally insured financial institution, including banks, credit unions, the FHA, and the SBA. The maximum is 30 years and $1 million.¹ Unlike wire or mail fraud, this statute doesn’t require proof that the lender relied on the lie or lost money. The false statement itself, if material, completes the crime.

What Sentences Look Like in Practice

Statutory maximums describe the ceiling, not the typical outcome. The U.S. Sentencing Commission’s fiscal year 2024 data on credit card and financial instrument fraud offers a useful snapshot: the average sentence was 26 months, and 92.7% of convicted defendants went to prison. The median financial loss was roughly $155,000, with about a quarter of cases involving losses above $550,000.⁹ Those figures track one category of fraud, but they illustrate the broader pattern. Even smaller application fraud cases tend to end in prison time.

Restitution and Other Financial Fallout

Prison isn’t the end of it. Under the Mandatory Victims Restitution Act (18 U.S.C. § 3663A), federal courts are required to order restitution in fraud cases where an identifiable victim suffered a financial loss. The order has to cover the full extent of the loss, regardless of whether the defendant can afford to pay.¹⁰ A defendant who defrauded a bank out of $200,000 will owe the full $200,000 back on top of any fine or prison sentence. The government can garnish wages and seize assets to collect, and restitution orders aren’t dischargeable in bankruptcy.

A fraud conviction also tends to outlast the sentence. Credit scores crater, which complicates housing, future loans, and some job applications for years. Many professional licenses require disclosing criminal convictions, and a fraud-related felony can end careers in finance, law, healthcare, and government contracting. Civil lawsuits from defrauded parties can pile judgments on top of the criminal restitution order.

How Long Prosecutors Have to Charge You

The standard federal statute of limitations for most crimes is five years. Congress extended that window for application fraud involving financial institutions. Under 18 U.S.C. § 3293, prosecutors have 10 years to bring charges for bank fraud (§ 1344), false statements on loan applications (§ 1014), and wire or mail fraud when the scheme affected a financial institution.¹¹ A fraudulent mortgage application from a decade ago can still lead to an indictment today.

If Someone Used Your Identity on an Application

If you discover that a fraudulent application was submitted using your personal information, move quickly. Each step builds on the one before it.

File an FTC identity theft report. Go to IdentityTheft.gov and work through the guided process. The site generates a personalized recovery plan and an official FTC Identity Theft Report, which you’ll need for the steps that follow.¹²
Place a fraud alert or credit freeze. Contact any one of the three major credit bureaus (Equifax, Experian, or TransUnion) for a free initial fraud alert; that bureau has to notify the other two. For stronger protection, place a credit freeze with all three, which blocks new accounts from being opened in your name. Both are free.¹³
Notify the affected institutions. Contact the fraud department at any bank, lender, or company where a fraudulent account was opened. Share your FTC report and ask them to close the account and flag it as fraudulent.
Report SSN misuse. If your Social Security number was compromised, report it through the SSA’s Office of Inspector General at oig.ssa.gov or by calling 1-800-269-0271.¹⁴
File a police report. Local police may not investigate application fraud directly, but a police report creates an official record that creditors and credit bureaus accept as supporting documentation.

An extended fraud alert, which lasts seven years instead of one, is available at no cost once you’ve completed an FTC identity theft report or filed a police report.¹³

1
Office of the Law Revision Counsel. 18 USC 1014 – Loan and Credit Applications
2
Office of the Law Revision Counsel. 18 USC 1029 – Fraud and Related Activity in Connection With Access Devices
3
Federal Reserve Bank of Boston. Gen AI Is Ramping Up the Threat of Synthetic Identity Fraud
4
Office of the Law Revision Counsel. 18 USC 1344 – Bank Fraud
5
Office of the Law Revision Counsel. 18 USC 1343 – Fraud by Wire, Radio, or Television
6
Office of the Law Revision Counsel. 18 USC 1341 – Frauds and Swindles
7
Office of the Law Revision Counsel. 18 USC 1028 – Fraud and Related Activity in Connection With Identification Documents
8
Office of the Law Revision Counsel. 18 USC 1028A – Aggravated Identity Theft
9
United States Sentencing Commission. Credit Card and Other Financial Instrument Fraud
10
Office of the Law Revision Counsel. 18 USC 3663A – Mandatory Restitution to Victims of Certain Offenses
11
Office of the Law Revision Counsel. 18 USC 3293 – Financial Institution Offenses
12
Federal Trade Commission. Report Identity Theft
13
Federal Trade Commission. Credit Freezes and Fraud Alerts
14
Social Security Administration. Fraud Prevention and Reporting