Identity theft is using someone else's personal details — name, date of birth, licence, Medicare or tax number, bank logins — without permission, to get money, open accounts, or commit further fraud in their name. It's one of the fastest-growing crimes, fuelled by online scams and data breaches. A key point: in several states, just holding someone's identity data with the intent to misuse it is already an offence — before you've used it for anything.
The whole idea in one picture
Your details become someone else's key
Identity theft is rarely the end goal — it's the way in. Your details get worn like a disguise to unlock accounts and commit the next fraud.
What counts as identity theft
It's using another person's details without their consent, to gain something or set up a further crime. Common examples:
Common examples
Opening bank or credit accounts with stolen IDs
Using someone's Medicare, tax file or licence number
Phishing for usernames and passwords
Creating fake identity documents or profiles
Using a false identity to dodge arrest or fines
What they must prove
The details were used without authority
The conduct was dishonest
You intended to gain a benefit or cause a loss
Possession can be enough: in several states, simply holding someone's identity data with intent to misuse it is an offence on its own — you don't have to have used it or gained anything yet.
How a charge usually starts
Because it's so often digital, the trail tends to point back through accounts and devices:
How it's discovered
Banking alerts or flagged transactions
Complaints from identity-theft victims
Data-breach investigations
Cybercrime operations and database cross-matching
The evidence
Electronic logs and IP addresses
Emails and messages
Forged documents or fake IDs
Admissions or surveillance footage
Often federal too: when the data is used online, across state borders, or involves government documents, it's also a Commonwealth offence — carrying up to 10 years on top of any state charge.
What happens at court
Where it's heard depends on how serious and how far it went:
Summary or first-time matters stay in the local or magistrates' court.
Aggravated or high-value identity fraud goes to a higher court.
The steps run from first appearance and plea, through the prosecution's evidence, to a hearing or trial.
Sentencing turns on the impact, your intent, and whether the identity was used to commit further offences.
Choose your state
Penalties where you are
New South Wales
NSW
Most serious cases — top of the scale
Up to 10 years in jail
Covers misusing identity information, and possessing identity data with intent to commit a crime.
Read this as a ceiling, not a forecast. The sentence tracks the impact and whether the identity was used to commit further crimes. A single, contained matter sits well below an organised, multi-victim operation.
Possession counts
Which court
Common defences
Identity theft turns on who did it and whether they knew, so defences often go straight there:
It wasn't you
Mistaken identity — you weren't the person involved.
You didn't know
You didn't realise the information was stolen or false.
You had permission
The person authorised you to use their details.
No gain or loss
The identity wasn't used to benefit you or harm anyone.
Charged with identity theft? Talk to a lawyer.
Identity and knowledge are often genuinely in dispute in digital cases — and that's exactly where a lawyer can help. We can point you to ones in your state.
This page explains how these charges generally work — it can't tell you what will happen in your case. Penalties shown are the legal maximums, aimed at the most serious cases. If you're under investigation or charged, talk to a criminal lawyer before answering questions.
Criminal lawyers
Hiring a Criminal Lawyer is Essential if You’ve Been Charged
While we don’t provide legal advice—as every case is unique and only a qualified lawyer is permitted to do so—we’ll do our best to guide you with relevant general information. If we’re unable to assist, we can refer your query to a criminal lawyer.
