Iowa Identity Theft Laws

Iowa Code § 715A.8 makes identity theft a crime tiered by the dollar value fraudulently obtained, and Iowa backs that statute with two protections most states do not have in this combination: its own Identity Theft Passport Program and a standalone civil damages statute that lets a victim sue for the greater of $5,000 or three times actual damages.

This page covers Iowa's identity theft statute and penalty tiers, the Identity Theft Passport Program, Iowa's own minor and protected-consumer credit freeze law, the civil cause of action under Iowa Code § 714.16B, and the Iowa Attorney General's reporting resources. For the federal rights that apply everywhere, including the 51-state penalty comparison, see our identity theft laws hub.

Iowa's Identity Theft Statute and Penalty Tiers

Iowa Code § 715A.8 defines identity theft as fraudulently using, or attempting to use, another person's identification information, without that person's authorization, with the intent to obtain credit, property, services, or another benefit. «Identification information» is defined broadly: name, address, date of birth, phone number, driver's license or nonoperator ID number, Social Security number, student or military ID, employer ID number, signature, e-mail signature, biometric identifier, financial account numbers, and more.

The offense is tiered by the dollar value of what the offender fraudulently obtained. If the value exceeds $10,000, it is a Class C felony. If the value is more than $1,500 but not more than $10,000, it is a Class D felony. If the value does not exceed $1,500, it is an aggravated misdemeanor. A violation of § 715A.8 is also an unlawful practice under Iowa's consumer fraud statute, Iowa Code § 714.16, which gives the Iowa Attorney General a separate enforcement tool against identity thieves who operate as part of a broader fraud scheme.

Iowa's Identity Theft Passport Program

Iowa Code § 715A.9A creates a program most states do not have: the Identity Theft Passport Program, administered by the Iowa Attorney General. After a victim (an Iowa resident, or anyone victimized in Iowa) files a police report with any Iowa law enforcement agency documenting the identity theft, the victim can apply through that agency to the Attorney General, who verifies the claim and may issue a passport, either a card or a certificate.

The passport serves two practical purposes. A victim can show it to police to help prevent wrongful arrest or detention for an offense actually committed by the identity thief using the victim's name. A victim can also show it to creditors to help them investigate whether fraudulent charges were opened in the victim's name. The Iowa Attorney General's identity theft page lists a designated staff contact for passport application questions.

Iowa's Minor and Protected-Consumer Credit Freeze Law

Iowa has its own security freeze statute in Iowa Code chapter 714G, the Consumer Credit Security chapter, and it predates the 2018 federal baseline (15 U.S.C. § 1681c-1(j)). Iowa Code § 714G.1(8) defines a «protected consumer» as an individual who is either under sixteen years of age when the freeze request is made, or an incapacitated person, or a protected person for whom a guardian or conservator has been appointed, with no upper age limit for that second category.

Under § 714G.8A, a consumer reporting agency must place the freeze within 30 days of a properly documented request from the protected consumer's authorized representative, must not release the protected consumer's report or records while the freeze is active, must remove the freeze within 30 days of a valid removal request, and may not charge a fee for placement, removal, or reinstatement. Because Iowa enforces this as its own statute, a violation exposes the reporting agency to Attorney General and consumer-fraud enforcement under chapter 714, on top of whatever the federal baseline separately requires.

Iowa's Civil Cause of Action for Identity Theft

Iowa Code § 714.16B gives identity theft victims a standalone civil remedy that many states' identity theft statutes do not provide directly. A person who suffers pecuniary loss from a violation of § 715A.8, or a financial institution suing on behalf of an indemnified account holder, may sue for the greater of $5,000 or three times actual damages, plus reasonable costs of recovery, including credit-repair and litigation costs tied to fraudulent debts, punitive damages, attorney fees, and court costs.

Separately, § 715A.8(6) lets a victim injured by a violation file a claim for damages tied to forfeiture and recovery proceedings brought under the criminal statute itself, a second avenue distinct from the standalone civil action in § 714.16B.

Reporting Identity Theft in Iowa

The Iowa Attorney General's Consumer Protection Division takes identity theft complaints by phone (515-281-5926, or 888-777-4590 outside the Des Moines metro), by email (consumer@ag.iowa.gov), or by mail (Hoover State Office Building, 1305 E. Walnut Street, Des Moines, IA 50319-0106). The office's identity theft page links to IdentityTheft.gov for federal recovery steps and to AnnualCreditReport.com, and recommends placing a security freeze or fraud alert as an early step, in addition to describing the Identity Theft Passport Program above.

The Federal Layer

Iowa's own protections sit on top of the federal baseline that applies to every state. Since 2018, federal law has required free credit freezes and free freeze removals nationwide, for adults and for minors through a parent or guardian. A fraud alert placed with one credit bureau is shared with the other two, lasts one year by default, and extends to seven years once you have filed an FTC Identity Theft Report. Under FCRA § 605B (15 U.S.C. § 1681c-2), a victim with an identity theft report can also get specific fraudulent information blocked from a credit report. IdentityTheft.gov, the FTC's free recovery site, builds a personalized recovery plan and, for account holders, pre-fills the letters and forms most victims need. See our guide to reporting identity theft and our comparison of credit freezes versus fraud alerts for more.

If You Are a Victim of Identity Theft in Iowa

File a police report first, since Iowa's Identity Theft Passport Program requires one before the Attorney General can verify and issue a passport. Report the theft to the Iowa Attorney General's Consumer Protection Division and to the FTC through IdentityTheft.gov. Place a freeze with all three major credit bureaus, and use Iowa's protected-consumer freeze process directly if the victim is a minor or an incapacitated person under guardianship. If the fraudulent loss is significant, ask a lawyer whether a claim under § 714.16B or the damages route under § 715A.8(6) fits your situation.

Information last verified on 2026-08-13, drawn directly from Iowa Code §§ 715A.8, 715A.9A, 714G.1, 714G.8A, and 714.16B, and the Iowa Attorney General's identity theft page. This article has not yet been reviewed by a licensed lawyer.

Related Resources

• Identity Theft Laws: Federal Rules and State Penalties
• How to Report Identity Theft
• Credit Freeze vs. Fraud Alert
• Child Identity Theft: Warning Signs, Credit Checks, and the Minor Freeze Right

---

Last updated: 2026-08-13.