Alabama Identity Theft Laws: Statute, Reporting, and Your Rights

Alabama's identity theft offense is codified at Ala. Code § 13A-8-192, part of the Consumer Identity Protection Act within Title 13A, Chapter 8, Article 10 of the state code. Alabama's own code website could not be read during this page's research, so this page is more cautious about the statute's exact elements and penalty than most of its companion state pages, while still giving Alabama residents confirmed reporting paths, the state's 2018 data breach law, and the federal rights that apply no matter which state you live in.

This page covers what is and is not confirmed about Alabama's identity theft statute, how to file a complaint with the Alabama Attorney General, the state's data breach notification law, and the federal recovery rights every identity theft victim has regardless of state. For the broader picture, see our identity theft laws hub and our guide to reporting identity theft.

Alabama's Identity Theft Statute: What Is Confirmed and What Is Not

Alabama's identity theft offense lives at Ala. Code § 13A-8-192, part of Article 10 of Chapter 8 in Title 13A, a section the state legislature's own site titles the Consumer Identity Protection Act. That structural placement, confirmed directly against the Alabama Legislature's navigation, is the fact about this statute that this page can verify with confidence.

The Alabama Legislature's code portal renders its statute text through a JavaScript application that did not return readable section text during this page's research, and a companion PDF mirror hosted by the Alabama judicial branch failed on repeated attempts. Various secondary sources describe § 13A-8-192 as a flat Class B felony with no dollar-amount or victim-count tiers, and cite a 7-year statute of limitations, but neither figure has been independently confirmed against the statute's own text, so this page does not present them as settled fact. If you need the confirmed current classification for a real legal decision, the Alabama Attorney General's office below, or a licensed Alabama attorney, can confirm it directly.

Reporting Identity Theft to the Alabama Attorney General

The Alabama Attorney General's Office runs a Consumer Interest Division that takes identity theft and other consumer complaints directly. You can file online with your name, address, county, and age, a narrative of what happened, whether you are represented by an attorney, and whether a court action is already pending, and attach supporting documents as a .jpg or .pdf up to 10MB. Additional material can also be emailed to ConsumerInterest@AlabamaAG.gov. You can also call the Consumer Hotline at 1-800-392-5658 or 334-242-7335.

The office is direct about what this process is and is not: filing a complaint "is not a legal action," and the Consumer Interest Division does not give legal advice. Treat it as a way to put your complaint on record and prompt an investigation, not a substitute for your own credit bureau disputes, a police report, or an attorney if your situation calls for one.

Alabama's Data Breach Notification Law

Separately from the criminal identity theft statute, Alabama has required data breach notification since 2018. The Alabama Data Breach Notification Act of 2018 (Acts 2018-396) requires businesses that experience a breach of sensitive personally identifying information to notify affected Alabama residents, and, once a breach affects enough residents, to notify the Attorney General as well. If your identity theft traces back to a specific company's data breach rather than an unknown source, that notice is often your first sign of trouble, and it is worth keeping as documentation when you file a complaint or an FTC Identity Theft Report.

Credit Freezes for Minors in Alabama

Whether Alabama has enacted its own protected-consumer or minor credit freeze statute, separate from the federal minimum, could not be confirmed or ruled out this session. What is certain is that Alabama parents and guardians are not without a right here regardless: federal law, 15 U.S.C. § 1681c-1(j), requires all three nationwide credit bureaus to let a parent or guardian freeze a child's credit file for free, even before the child has a credit file at all, no matter which state the family lives in. See our credit freeze vs. fraud alert page for how the freeze right works generally.

Restitution and Civil Remedies

This page could not independently confirm Alabama's restitution framework for identity theft victims, or whether Alabama recognizes a distinct civil cause of action for identity theft separate from general fraud and conversion claims, due to the same code-access limitation described above. Alabama does have general crime-victim restitution provisions elsewhere in its code, but this page has not independently verified their application to identity theft convictions specifically, so nothing more specific is stated here.

Federal Rights That Apply in Every State

Whatever Alabama's own statute ultimately turns out to say in full, every identity theft victim in the state also has federal rights that do not depend on state law at all. IdentityTheft.gov, run by the FTC, is a free national recovery site that builds a personal recovery plan once you describe what happened. Once you have an FTC Identity Theft Report, 15 U.S.C. § 1681c-2 (FCRA § 605B) requires a credit bureau to block fraudulent information from your report within 4 business days of receiving your documentation. Federal law has also made both credit freezes and fraud alerts free at all three bureaus since 2018, under 15 U.S.C. § 1681c-1. See our guides to reporting identity theft and credit freeze vs. fraud alert for the full mechanics of both.

No 2025-26 amendment to Ala. Code § 13A-8-192, or to any Alabama minor-freeze law, surfaced during this page's research, though Alabama's own bill-tracking tools could not be checked directly this session, so treat this as a partial check rather than an exhaustive one.

Information last verified on 2026-08-13, drawn from the Alabama Attorney General's Consumer Interest Division and data breach notification pages, and from federal law under 15 U.S.C. §§ 1681c-1 and 1681c-2. Alabama's own statute text could not be independently verified this session; confirm the statute's current elements and penalty with the Attorney General's office or a licensed Alabama attorney before relying on this page for a specific legal question. This article has not yet been reviewed by a licensed lawyer.

Related Resources

• Identity Theft Laws: Federal Rules and State Penalties
• How to Report Identity Theft
• Credit Freeze vs. Fraud Alert

---

Last updated: 2026-08-13.