Wisconsin Identity Theft Laws: Penalties and Treble Damages

Wisconsin's identity theft statute, section 943.201, is a flat Class H felony with no dollar threshold or repeat-offense enhancement, but Wisconsin makes up for that simplicity on the civil side: a separate statute lets a victim recover treble damages, up to three times their actual loss, with no extra proof of egregiousness required. This page covers the criminal statute, that treble-damages civil remedy, Wisconsin's mandatory police-report duty, and the fact that identity theft complaints in Wisconsin actually go to a different agency than most people expect.

This article addresses Wisconsin state law, primarily Statute section 943.201 and related sections of chapters 100, 134, and 895, plus the federal layer that applies in every state.

Wisconsin Statute 943.201: The Core Offense

Under section 943.201, a person commits an offense by intentionally using, attempting to use, or possessing with intent to use another individual's personal identifying information or identification document, including a deceased individual's, without the authorization or consent of the individual, and by representing themselves as that individual or as acting with their consent. The statute requires this be done for one of three purposes: obtaining credit, money, goods, services, employment, or anything else of value; avoiding civil or criminal process or a penalty; or harming the individual's reputation, property, person, or estate.

"Personal identifying information" is defined through a 15-item list covering name, address, phone number, driver's license number, Social Security number, employer or employee identification numbers, mother's maiden name, depository account numbers, taxpayer identification numbers, DNA profile, telecommunication identifiers, unique biometric data, and catch-all categories. A companion statute, section 943.203, applies the same structure to protect entities rather than individuals.

Two points about consent are easy to get backwards. The absence of consent is an element of the crime, not a defense: subsection (2) reaches conduct undertaken "without the authorization or consent of the individual," so the prosecution has to establish that as part of its case. The statute's only affirmative defense, in subsection (3), is a different thing entirely: that the defendant "was authorized by law to engage in the conduct that is the subject of the prosecution." A defendant who raises that legal-authorization defense carries the burden of proving it by a preponderance of the evidence.

A Flat Felony, No Escalation

Wisconsin's identity theft statute carries a single, flat penalty: a Class H felony, with no separate tier for larger losses, more victims, or repeat offenses. This is a simpler structure than states that scale penalties to dollar amount or item count, and the companion entity-protection statute, section 943.203, carries the identical flat Class H felony classification.

The Mandatory Police-Report Duty

Wisconsin builds a specific obligation on law enforcement directly into the identity theft statute. Under section 943.201(4), if a resident reports that their personal identifying information or documents reasonably appear to be in another person's possession, or have been used or attempted to be used in violation of the statute, the law enforcement agency receiving that report must prepare a report on the alleged violation. That duty applies in every such case. Separately and in addition, if the agency concludes that it appears not to have jurisdiction to investigate, it must tell the individual which law enforcement agency may have jurisdiction. A copy of the report must be furnished to the individual on request, subject to a reasonable copying fee. The identical duty applies for entity victims under the companion section 943.203(4).

Treble Damages: Wisconsin's Civil Remedy

Wisconsin's civil liability statute, section 895.446, explicitly names both section 943.201 and section 943.203 as predicate crimes that trigger civil liability for conduct occurring after April 28, 1998. A successful claim can recover actual damages, measured as the retail or replacement value of the property involved, whichever is greater. What sets Wisconsin apart is the exemplary damages provision: a court can award up to three times the actual-damages amount, with no additional proof of egregious conduct required beyond the underlying violation itself. The statute also allows recovery of all costs of investigation and litigation that were reasonably incurred, "including the value of the time spent by any employee or agent of the victim," not just out-of-pocket legal costs, plus attorney's fees as part of those recoverable costs. Note the limit in that phrasing: the text names time spent by an employee or agent of the victim, and does not name an individual victim's own time, so a self-represented victim should not assume their personal hours are recoverable. There is no statutory minimum-damages floor; the victim must still prove damages by a preponderance of the evidence.

Reporting Identity Theft: DATCP, Not DOJ

A detail that surprises many Wisconsin residents: the state's identity-theft complaint intake runs through the Department of Agriculture, Trade and Consumer Protection, not the Department of Justice. The DOJ's own consumer complaint guidance directs identity-theft complaints to DATCP, clarifying that DOJ's consumer hotline is for questions about existing DOJ cases only, not new complaint intake, and that DOJ does not provide legal advice to private individuals. DATCP's identity theft page lays out four steps for victims: close fraudulent accounts through each issuer's fraud department, file a police report (law enforcement may take it in person, by phone, or online, depending on the agency), place fraud alerts or freezes with all three credit bureaus at no cost, and file a DATCP complaint, especially warranted for financial loss from fraudulently opened or used accounts or for tax-related identity theft. Residents can reach DATCP through its online portal, a hotline at 1-800-422-7128, email, fax, or mail, and the agency offers a downloadable Identity Theft Complaint Packet.

Breach Notification

Wisconsin's breach notification statute, section 134.98, requires entities to notify affected residents within a reasonable time, not to exceed 45 days, of learning of an unauthorized acquisition of personal information, and to identify what was acquired on written request. The statute itself addresses what a notification failure does and does not create. Subsection (4) reads, in full: "Failure to comply with this section is not negligence or a breach of any duty, but may be evidence of negligence or a breach of a legal duty." Both halves matter. A Wisconsin resident cannot sue a business under section 134.98 standing alone for a late or missing notice, because the failure is not itself a breach of duty. But the same sentence makes that failure admissible as evidence of negligence or breach in an ordinary claim built on some other duty, which is materially useful to a victim litigating a data breach on common-law theories.

Wisconsin's Minor and Protected Consumer Freeze Law

Wisconsin has maintained its own protected consumer security freeze statute, section 100.545, confirmed already in force by at least the 2013-14 consolidated statutes, meaning it predates the 2018 federal minor-freeze right by at least five years. A "protected consumer" is anyone under 16 at the time of the request, or an individual for whom a guardian or conservator has been appointed. A parent or guardian can freeze, or request the creation of, a minor's credit file even if no file previously existed. Credit reporting agencies have 30 days to process a request. A general fee cap of $10 per placement or removal applies, but the freeze is fee-free when a police report or identity-fraud affidavit is provided, or when placing or removing a freeze for a minor under 16 for whom the agency already maintains a file.

The Federal Layer

Every Wisconsin identity theft victim can also draw on federal protections that apply regardless of state. The Fair Credit Reporting Act's section 605b lets a victim submit a police report or FTC Identity Theft Report to block fraudulent information from appearing on their credit file. IdentityTheft.gov, run by the Federal Trade Commission, remains the fastest way to generate the initial recovery plan most other steps build on.

Information last verified on 2026-08-13. This article has not yet been reviewed by a licensed lawyer.

Related Resources

• Identity Theft Laws: Federal Rules and State Penalties
• How to Report Identity Theft
• Credit Freeze vs. Fraud Alert

---

Last updated: 2026-08-13.