North Carolina Identity Theft Laws: Penalties, Restitution, and Victim Resources

North Carolina makes identity theft a felony under N.C. Gen. Stat. § 14-113.20, with penalties that escalate when a victim suffers an arrest, detention, or conviction because of the offense, or when the offender possesses the identifying information of three or more people. The state Department of Justice also frames filing a police report as the trigger for stronger legal protections, including an extended fraud alert and a free security freeze.

This article addresses North Carolina's identity theft statute and the North Carolina Department of Justice's victim guidance, together with the federal layer of protections that applies nationwide. It does not cover every state's law; see the identity theft laws hub for other states.

North Carolina's Identity Theft Statute

North Carolina's identity theft law is built from two sections working together. N.C. Gen. Stat. § 14-113.20 defines the offense: a person who knowingly obtains, possesses, or uses identifying information of another person, whether living or dead, with the intent to fraudulently represent that they are that other person, for the purpose of making financial or credit transactions in that person's name, obtaining anything of value, benefit, or advantage, or avoiding legal consequences, is guilty of a felony. The statute lists 14 categories of protected identifying information, including Social Security and taxpayer ID numbers, passwords, and a parent's legal surname prior to marriage, and it carves out lawful-transaction exceptions, such as a good-faith exercise of a security interest or compliance with a valid court order.

N.C. Gen. Stat. § 14-113.22 sets the punishment. A violation of § 14-113.20(a) is a Class G felony, except it is elevated to a Class F felony if the victim suffers arrest, detention, or conviction as a proximate result of the offense, or if the offender possesses the identifying information of three or more separate people. A separate offense, § 14-113.20A, trafficking in stolen identities, covers selling, transferring, or purchasing another person's identifying information with intent to commit identity theft or to assist someone else in committing it; it is classified separately as a Class E felony, a step above the base offense.

Restitution and Civil Remedies

North Carolina's punishment statute directly authorizes courts to order a convicted person to pay restitution for the financial loss the offense caused. That restitution can include the victim's actual losses, lost wages, attorney's fees, and other costs incurred correcting their credit history or credit rating, a broader restitution scope than a bare repayment of stolen funds.

North Carolina also provides a separate civil-damages avenue: § 14-113.22 cross-references G.S. § 1-539.2C for additional liability and damages. Under § 1-539.2C, a victim may recover the greater of $500 to $5,000 in statutory damages or treble actual damages, along with reasonable attorney's fees awarded to the prevailing party. The action must be filed within 3 years of discovering the wrongdoer's identity, may be brought in the plaintiff's home county or any county where part of the violation occurred, and survives to a deceased victim's estate.

North Carolina Department of Justice Resources

The North Carolina Department of Justice publishes identity theft guidance that lets victims file a consumer complaint directly through the DOJ website, or call (877) 5-NO-SCAM toll-free within the state, or (919) 716-6000 from outside North Carolina. The DOJ directs victims to IdentityTheft.gov to build a personalized recovery plan with pre-filled letters and forms for credit bureaus, businesses, and debt collectors.

Notably, the DOJ's own guidance frames filing a police report as the trigger for stronger legal protections: doing so, in the DOJ's words, "triggers helpful protections under both federal and state law, such as an extended fraud alert and a free security freeze." North Carolina law addresses this directly, but permissively. Under N.C. Gen. Stat. § 14-113.21A, a person who has learned or reasonably suspects that they are an identity theft victim may contact the local law enforcement agency with jurisdiction over their actual residence, and that agency may take the complaint, issue an incident report, provide the complainant with a copy of the report, and refer the report to the agency in the jurisdiction where the crime occurred. The statute says "may" rather than "shall," and subsection (b) states that nothing in it interferes with a local agency's discretion to allocate resources for investigations, so it does not give a victim an enforceable right to demand a report. The same DOJ guidance also cautions that most law enforcement agencies will not issue a police report until your private information has actually been used by an identity thief, so a report may not be available yet if you have only discovered exposed information without a confirmed fraudulent use.

The DOJ's guidance also describes a Protected Consumer security freeze, available to parents and guardians to help protect a child or an incapacitated adult against identity theft. That freeze is codified at N.C. Gen. Stat. § 75-63.1, part of Chapter 75's Identity Theft Protection Act, with "protected consumer" defined at § 75-61(11a) as an individual under 16 years old at the time of the freeze request, or an individual who is incapacitated or under a guardian's care.

Federal Protections That Also Apply in North Carolina

Beyond North Carolina's own law, federal protections apply regardless. Under 15 U.S.C. § 1681c-1, every consumer, including North Carolina residents, is entitled to a free security freeze from each of the three nationwide credit reporting agencies, a 1-year initial fraud alert, and, with a copy of an FTC Identity Theft Report, a 7-year extended fraud alert requiring a potential creditor to actually contact you before extending credit. Under 15 U.S.C. § 1681c-2, a victim with an FTC Identity Theft Report can get fraudulent information blocked from their credit report within 4 business days of the credit reporting agency receiving the required documentation.

What To Do If You're a Victim of Identity Theft in North Carolina

File a report with your local police department; the North Carolina DOJ's own guidance frames this step as the trigger for an extended fraud alert and a free security freeze. File a report at IdentityTheft.gov to create an FTC Identity Theft Report and a personalized recovery plan, and file a consumer complaint with the North Carolina Department of Justice by phone or through its website. If your child or an incapacitated family member needs a credit freeze, ask the DOJ directly about the Protected Consumer freeze process.

Information last verified on 2026-09-02 against the North Carolina General Assembly's official statute text of N.C. Gen. Stat. §§ 14-113.20, 14-113.20A, 14-113.21A, and 14-113.22, the North Carolina Department of Justice's identity theft guidance, and federal law under 15 U.S.C. §§ 1681c-1 and 1681c-2. This article has not yet been reviewed by a licensed lawyer. No North Carolina statute compels a police department to take an identity theft report; § 14-113.21A permits one, and NC DOJ guidance indicates most departments will not issue a report until information has actually been used fraudulently.

Related Resources

• Identity Theft Laws: Federal Rules and State Penalties
• How to Report Identity Theft
• Credit Freeze vs. Fraud Alert
• Child Identity Theft
• Tax Identity Theft: When to File IRS Form 14039

---

Last updated: 2026-09-02.