Ohio Identity Theft Laws: ORC Rules, Charges, and Penalties

Meta description: Learn how Ohio’s identity theft law, ORC 2913.49, defines identity fraud, determines criminal penalties, and supports victim recovery.

Identity theft in Ohio can involve using another person’s information to open an account, obtain money or services, or impersonate them. The central state statute is Ohio Revised Code 2913.49, which calls the offense identity fraud. The charge and potential penalty depend on the conduct, the value involved, and circumstances such as the number or vulnerability of victims. Separate Ohio and federal laws may also apply, while victims have options for reporting fraud and limiting further damage.

What Ohio’s Identity Theft Law Covers

Ohio generally prosecutes identity theft as identity fraud under ORC 2913.49. The statute addresses using, obtaining, possessing, or creating another person’s personal identifying information without consent and with a fraudulent purpose. The facts of a case matter: possessing information alone does not automatically establish every element of identity fraud; prosecutors must prove the conduct and intent required by the applicable part of the law.

Personal identifying information can include details that identify a particular person, such as a name, address, date of birth, Social Security number, driver’s license information, or financial-account information. The statute’s definition is controlling, and it covers more than a single list of common identifiers. Information about a business or entity may also be relevant under specific provisions.

Identity fraud can involve several kinds of activity, including:

• Using someone else’s information to apply for credit, utilities, housing, or services.
• Taking over or accessing a financial account without permission.
• Impersonating another person to obtain money, property, or another benefit.
• Using another person’s identifying information in connection with a criminal or legal proceeding.
• Possessing or creating identifying information as part of a scheme to commit fraud.

Consent and intent are important. A person who has permission to use another person’s information may be in a different legal position from someone who uses it deceptively. Conversely, a fraud attempt may create legal exposure even if the intended transaction fails or the victim does not ultimately lose money. The precise charge depends on the statutory subsection and evidence.

How Ohio Determines Identity Fraud Penalties

Ohio classifies identity fraud according to statutory factors, including the value of property or services involved and circumstances involving the victim or victims. The charge can range from a misdemeanor to a felony. The amount at issue is not always the only factor: prosecutors may consider multiple transactions, the number of affected people, the victim’s age or disability status, and related conduct.

The general value-based framework in ORC 2913.49 distinguishes lower-value conduct from cases involving larger amounts. Ohio’s theft statutes use similar value thresholds, but identity fraud has its own provisions and enhancements. Therefore, a theft-penalty chart should not be substituted for the identity-fraud statute. The current statute and charging documents should be checked for the exact degree alleged.

A misdemeanor conviction can result in jail, a fine, probation, and restitution, subject to Ohio sentencing rules. Felony penalties can include prison, fines, probation or other supervision, and restitution. The possible prison term and fine depend on the felony degree, sentencing factors, prior record, and the version of the law applicable to the case. A conviction may also create lasting effects on employment, housing, professional licensing, and credit-related matters.

Restitution is separate from a criminal fine. A court may order an offender to repay eligible losses caused by the offense. Depending on the circumstances, documented losses may include money taken, costs directly associated with resolving the fraud, or other losses permitted under Ohio law. Restitution is not automatic compensation from the state, and victims should preserve records supporting claimed expenses.

Related Ohio Charges That May Apply

Identity fraud is not necessarily the only offense involved. Depending on the alleged actions, Ohio prosecutors may consider other sections of the Revised Code:

• ORC 2913.02, theft, for knowingly obtaining or exerting control over property without consent or through deception.
• ORC 2913.31, forgery, for specified conduct involving forged documents or instruments.
• ORC 2913.04, unauthorized use of property or computer services, where the facts involve unauthorized access or use.
• ORC 2913.51, receiving stolen property, when a person receives or retains property known or reasonably believed to be stolen.

These offenses have their own elements and penalties. A single incident—such as using stolen account credentials to make purchases—could prompt investigation under more than one statute. Whether separate convictions are permitted depends on the facts and Ohio’s rules governing allied offenses and sentencing.

Ohio Identity Theft Laws and Consumer Protections

Ohio law also gives consumers tools to respond to identity theft and data exposure. Under ORC 1349.52, consumers can request a security freeze from a consumer reporting agency. A freeze restricts the agency from releasing a consumer report for certain purposes without authorization, subject to legal exceptions. It can make it harder for a fraudster to open new accounts using stolen information, but it does not prevent every form of misuse.

Ohio’s data-breach notification law, ORC 1349.19, requires covered entities to provide notice after certain breaches involving personal information, subject to statutory conditions and exceptions. Notice requirements depend on the type of information, the circumstances of the breach, and the entity involved. A breach notification does not itself prove that identity fraud occurred, but it can help consumers take protective steps promptly.

Federal laws may apply alongside Ohio law. The federal Identity Theft and Assumption Deterrence Act makes identity theft a federal crime in specified circumstances. The Fair Credit Reporting Act provides rights related to consumer reports, fraud alerts, and disputes. The Federal Trade Commission’s IdentityTheft.gov offers a recovery plan and tools for documenting identity theft.

What to Do If Someone Uses an Ohio Resident’s Identity

Fast, organized action can help limit additional losses. The right sequence varies, but the following steps are practical starting points:

1. Contact the affected bank or company. Report unauthorized transactions or accounts using the institution’s fraud department. Ask about closing or securing accounts, stopping payments, and disputing charges.
2. Place a credit freeze or fraud alert. Contact each nationwide consumer reporting agency to request a freeze. A fraud alert is another option; an initial alert generally prompts creditors to take steps to verify identity before opening new credit.
3. Report the incident. File a report with the local police department when appropriate, and submit a report through the FTC’s IdentityTheft.gov. Provide accurate details and keep copies.
4. Protect government and online accounts. Change compromised passwords, enable multifactor authentication, and contact the relevant agency if a Social Security, tax, driver’s license, or benefits account may be affected.
5. Review credit reports and account activity. Look for unfamiliar accounts, inquiries, addresses, or transactions. Dispute inaccurate information with the reporting agency and the business that supplied it.
6. Keep a recovery file. Save notices, police or FTC report numbers, correspondence, statements, receipts, and a dated log of calls.

Consumers can obtain free credit reports through AnnualCreditReport.com, the federally authorized source. A credit report review can reveal accounts or inquiries that are unfamiliar, though it will not necessarily show every misuse of personal information. Victims should continue monitoring accounts after taking initial steps.

Criminal Case Process and Victim Participation

An identity fraud investigation may begin with a bank, business, law enforcement agency, or victim report. Investigators may examine account applications, transaction records, communications, device information, and evidence linking a suspect to the use of personal data. The prosecutor then determines whether the available evidence supports a charge. An allegation is not a conviction; the state must prove the required elements in court.

Victims can provide records and explain financial or practical losses to investigators and prosecutors. They may also ask about victim services, case updates, and restitution procedures. Keeping documentation organized can make it easier to show what happened and when. Victims should avoid confronting a suspected offender or sharing additional sensitive information with someone claiming to offer recovery assistance without verifying that person’s identity.

Common Questions About Ohio Identity Fraud

Is identity theft always a felony in Ohio?

No. ORC 2913.49 allows different offense levels depending on the facts and statutory factors. Some cases may be charged as misdemeanors, while more serious cases can be felonies. The value involved and legally relevant victim or conduct factors can affect the degree.

Can someone be charged if no money was taken?

Potentially. The outcome depends on the conduct and intent covered by the statute, not solely on whether a completed transaction caused a financial loss. An attempted scheme or use of information for another fraudulent purpose may still warrant investigation. The precise subsection and evidence matter.

Does a credit freeze stop all identity theft?

No. A freeze can restrict access to a consumer report for certain new-credit decisions, but it does not stop account takeover, tax fraud, benefits fraud, or misuse of information in every setting. It works best as one part of a broader response that includes account security and monitoring.

Where can the current Ohio law be checked?

The official Ohio Revised Code is available through the Ohio Laws and Administrative Rules website. Because statutes can change and penalties depend on the precise facts and charge, the current text should be reviewed for any particular case. This article is general information, not legal advice.