New Jersey Identity Theft Laws: Mandatory Police Reports and Civil Remedies

New Jersey's identity theft law stands out for what happens after the crime, not just the crime itself. State law requires the police department where you live to take your report even when the actual investigation belongs to a different department, and a separate statute gives victims a civil action carrying treble damages against whoever stole their identity, apart from any criminal case. This page covers New Jersey's theft-of-identity statute, N.J.S.A. 2C:21-17, how the state grades the offense by victim count and dollar value, the repeat-offender escalation built into the lowest tier, the prison and fine ranges each degree carries, the police-report right and its two statutory limits, and the civil remedy.

This page addresses New Jersey law specifically. For the federal reporting process, the FTC's free recovery tool, and the credit-freeze and fraud-alert rights available in every state, see our identity theft laws hub and our guide to how to report identity theft.

New Jersey's Mandatory Police Report Right

New Jersey's most distinctive identity theft protection is not about the crime itself, it is about what happens when you try to report it. Under N.J.S.A. 2C:21-17.6(a), a person who reasonably believes or reasonably suspects they have been the victim of identity theft may contact the local law enforcement agency in the jurisdiction where they reside, and that agency shall take a police report of the matter and provide a copy of it. The statute applies notwithstanding the fact that jurisdiction may lie elsewhere for investigation and prosecution, and the local agency may refer the complaint on to the agency in that other jurisdiction.

New Jersey's own official guidance states it in plainer terms: «Police departments in New Jersey are required to take a report when you reasonably believe or suspect you are a victim of identity theft notwithstanding the fact that jurisdiction for prosecution or investigation may lie elsewhere.»

Two limits in the statute are worth knowing before you rely on this. First, the duty runs to the agency in the jurisdiction where you live, so the practical move is to start with your own local department rather than the department where the fraud happened. Second, subsection b. provides that nothing in the section interferes with a local agency's discretion to allocate resources for investigations of crimes, and that a complaint filed under the section is not required to be counted as an open case for purposes such as compiling open case statistics. The statute guarantees you a report, not an investigation.

That report is still the single most useful document a victim has, since creditors, credit bureaus, and the FTC's own recovery process all rely on it.

The Theft of Identity Statute: N.J.S.A. 2C:21-17

New Jersey addresses identity theft under N.J.S.A. 2C:21-17, titled impersonation; theft of identity. The statute and the official New Jersey Courts model jury charge describe five separate ways to commit the offense. A person is guilty if they impersonate another or assume a false identity to obtain a benefit or to injure or defraud someone; pretend to be a representative of a person or organization for the same purpose; impersonate another or make a false statement about identity in an application for services, to obtain those services; obtain someone's personal identifying information and use it, or help someone else use it, without authorization, to fraudulently get a benefit or services, avoid the payment of a debt or other legal obligation, or avoid prosecution for a crime; or impersonate another or make a false statement about identity in an application for services to avoid paying for services already received.

The fourth category, using someone else's personal identifying information without authorization, is the one most people mean when they say identity theft: opening an account, filing for benefits, or making a purchase using someone else's Social Security number or other identifying details.

How New Jersey Grades Identity Theft

New Jersey sets the degree of the offense using two alternative triggers, the number of victims and the dollar value of the benefit obtained. Under N.J.S.A. 2C:21-17(c), the offense is a crime of the second degree if it involved five or more victims, or a benefit of $75,000 or more. It is a crime of the third degree if it involved two to four victims, or a benefit of at least $500 but less than $75,000.

The default tier, a single victim and a benefit under $500, is a crime of the fourth degree, except that a second or subsequent conviction for such an offense constitutes a crime of the third degree. That repeat-offender escalation is easy to miss and it matters: a person with a prior identity theft conviction faces third-degree exposure on a sub-$500, single-victim case that would otherwise be fourth degree.

According to the official model jury charge, if the benefits from multiple acts were obtained in one scheme or course of conduct, the amounts can be added together into a single total, which can push a series of smaller thefts into a higher-degree charge.

Sentencing and Fines by Degree

New Jersey's identity theft statute does not carry its own penalty numbers. It assigns a degree, and the state's general sentencing statutes supply the exposure that goes with that degree.

Under N.J.S.A. 2C:43-6(a), an ordinary term of imprisonment is between five and 10 years for a crime of the second degree, between three and five years for a crime of the third degree, and a term not to exceed 18 months for a crime of the fourth degree.

Fine caps come from N.J.S.A. 2C:43-3: up to $150,000 for a second-degree crime, up to $15,000 for a third-degree crime, and up to $10,000 for a fourth-degree crime. Two provisions in that section can push a fine past those caps. A court may instead impose any higher amount equal to double the offender's pecuniary gain or the victim's loss, and for a second or subsequent conviction of an offense defined in chapter 21 of the criminal code, which is where the identity theft statute sits, a court may impose up to twice the ordinary cap.

These are the ordinary ranges, not a prediction. Actual sentences turn on aggravating and mitigating factors, plea negotiations, and restitution. N.J.S.A. 2C:21-17(e) also directs the sentencing court to issue whatever orders are necessary to correct a public record or government document that contains false information as a result of the theft, and permits restitution to the victim. For exposure in a specific case, talk to a New Jersey licensed attorney.

New Jersey's Civil Action for Identity Theft

Separate from any criminal case, New Jersey law provides a civil remedy specific to identity theft. Under N.J.S.A. 2C:21-17.4, enacted by P.L.2003, c.184, any person who suffers an ascertainable loss of money or property as a result of the use of their personal identifying information in violation of the identity theft statute or its related sections may bring an action in any court of competent jurisdiction.

The damages formula is written into the statute. In addition to any other appropriate legal or equitable relief, the court shall award damages in an amount three times the value of all costs incurred by the victim as a result of the defendant's criminal activity. The statute gives examples of those costs: what the victim spent clearing a credit history or credit rating, and what the victim spent in connection with any civil or administrative proceeding to satisfy a debt, lien, or other obligation created by the defendant's conduct. On top of the trebled costs, the victim may also recover attorneys' fees, court costs, and any out-of-pocket losses.

Two features make the remedy more usable than it looks. The standard of proof is a preponderance of the evidence rather than the criminal standard, and a prosecution that is never brought, or that ends without a conviction, does not preclude the civil action. A final judgment for the State in a criminal case works the other way: it estops the defendant from denying the same conduct in the civil suit.

Financial institutions, insurers, bonding associations, and businesses that suffer direct financial loss can recover as well, but the statute requires that damages to natural persons be fully satisfied before any payment goes to them.

There is also a criminal-side counterpart. Where a defendant is convicted, on the application of the Attorney General or the prosecutor the court shall sentence the defendant to pay restitution equal to the costs the victim incurred, whether or not a civil action has been filed. Note the difference: the restitution figure is the victim's actual costs, while the civil action trebles them.

Credit Freezes and Minor Protections

New Jersey has its own security freeze law. The Identity Theft Prevention Act, N.J.S.A. 56:11-44 and following, gives a New Jersey consumer the right to elect a security freeze on their consumer report and sets out the mechanics: the request goes to the consumer reporting agency in writing by certified or overnight mail, or through a secure electronic connection if the agency offers one; the agency must place the freeze within five business days; and it must confirm the freeze in writing and issue a PIN or password the consumer later uses to lift the freeze temporarily for a specific party or period. Related sections at N.J.S.A. 56:11-47 through 56:11-49 govern what a consumer reporting agency must do once a freeze is in place.

One qualification, stated plainly: the New Jersey freeze provisions reviewed for this page do not contain a state-law freeze right written specifically for minors or protected consumers. That gap is filled by federal law, not by state law.

Federal law also supplies the stronger baseline in day-to-day practice. Since 2018, consumer reporting agencies nationwide have had to offer free credit freezes and free freeze removals, and a parent or guardian can place a free freeze on a minor's credit file with each of the three major credit bureaus. A New Jersey resident placing a freeze today is generally exercising that federal right, with the state statute sitting underneath it.

Reporting Identity Theft in New Jersey

Start with the police department in the jurisdiction where you live, which must take your report under N.J.S.A. 2C:21-17.6. New Jersey's official disaster and fraud help page, nj.gov/disasterhelp/fraud, states that right in plain terms. Beyond local police, report identity theft to the FTC at IdentityTheft.gov to generate a free federal recovery plan, and review any data breach notice you received if the theft traces back to a company breach. If it traces instead to a business that scammed you, New Jersey's Division of Consumer Affairs takes that complaint, as our guide to New Jersey scam and fraud laws explains.

The Federal Layer

New Jersey's protections sit on top of the federal baseline available in every state. Since 2018, federal law has required consumer reporting agencies to offer free credit freezes and free freeze removals nationwide. A fraud alert placed with one bureau is shared with the other two, lasts one year by default, and can be extended to seven years once you have filed an FTC Identity Theft Report. Under FCRA section 605B (15 U.S.C. § 1681c-2), a victim with an identity theft report can have specific fraudulent information blocked from a credit report. IdentityTheft.gov, the FTC's free recovery site, builds a personalized recovery plan and pre-fills the letters and forms most victims need. See our guide to reporting identity theft and our comparison of credit freezes versus fraud alerts for the full mechanics.

If You Are a Victim of Identity Theft in New Jersey

Report the theft to the police department in the jurisdiction where you live. Under N.J.S.A. 2C:21-17.6 it must take your report and give you a copy even if the investigation belongs elsewhere, though that section does not require it to open an investigation. File a report with the FTC at IdentityTheft.gov to get a free federal recovery plan. Place a freeze with all three major credit bureaus, free under federal law since 2018 and backed by New Jersey's own Identity Theft Prevention Act. Keep receipts and records of everything the theft costs you, because N.J.S.A. 2C:21-17.4 measures your civil damages at three times those costs, plus attorneys' fees and court costs.

Information last verified on 2026-09-02 against the text of N.J.S.A. 2C:21-17, 2C:21-17.4, 2C:21-17.6, 2C:43-3, 2C:43-6, and 56:11-44 and following, New Jersey's official state disaster and fraud help page, and the New Jersey Courts model jury charge for N.J.S.A. 2C:21-17a. The New Jersey Legislature's public statute browser did not respond to automated requests during this review, so the statutory text was read from our own statute repository, which stores each section against its Legislature source URL. This article has not yet been reviewed by a licensed lawyer.

Related Resources

• Identity Theft Laws: Federal Rules and State Penalties
• How to Report Identity Theft
• Credit Freeze vs. Fraud Alert

---

Last updated: 2026-09-02.

Frequently Asked Questions

Does New Jersey require police to take an identity theft report?

Yes, with two limits. Under N.J.S.A. 2C:21-17.6(a), the local law enforcement agency in the jurisdiction where you reside must take your report and give you a copy, even though jurisdiction for investigation and prosecution may lie elsewhere. Subsection b. adds that nothing in the section interferes with the agency's discretion to allocate resources for investigations, and that the complaint is not required to be counted as an open case. You are guaranteed a report, not an investigation.

What is New Jersey's identity theft statute?

N.J.S.A. 2C:21-17, titled impersonation; theft of identity, defines the offense five different ways, most commonly using someone else's personal identifying information without authorization to obtain a benefit, avoid a debt, or avoid prosecution.

How does New Jersey grade identity theft charges?

By the number of victims and the dollar value of the benefit, whichever applies: second degree at 5 or more victims or $75,000 or more; third degree at 2 to 4 victims or $500 to $75,000; fourth degree, the default tier, at one victim and under $500. A second or subsequent conviction at that fourth-degree tier is graded as a crime of the third degree. Amounts from one scheme can be combined.

What prison term or fine does identity theft carry in New Jersey?

The statute assigns a degree and New Jersey's general sentencing statutes supply the numbers. Under N.J.S.A. 2C:43-6, ordinary prison terms run up to 18 months for a fourth-degree crime, three to five years for a third-degree crime, and five to 10 years for a second-degree crime. Fine caps under N.J.S.A. 2C:43-3 are $10,000, $15,000, and $150,000 respectively, and a court may impose a higher amount equal to double the gain or loss.

Can I sue the person who stole my identity in New Jersey?

Yes. Under N.J.S.A. 2C:21-17.4, a victim who suffered an ascertainable loss may sue, and the court shall award damages in an amount three times the value of all costs the victim incurred, plus attorneys' fees, court costs, and out-of-pocket losses. The standard of proof is a preponderance of the evidence and a criminal conviction is not required.

Does New Jersey have its own minor credit freeze law?

New Jersey has a state security freeze law, the Identity Theft Prevention Act at N.J.S.A. 56:11-44 and following, but the freeze provisions reviewed for this page do not include a New Jersey right written specifically for minors or protected consumers. That right comes from federal law, which has required a free minor and protected-consumer credit freeze nationwide, including in New Jersey, since 2018.

Where do I report identity theft in New Jersey?

Start with the police department in the jurisdiction where you live, which must take your report under N.J.S.A. 2C:21-17.6, and file a free report with the FTC at IdentityTheft.gov to get a federal recovery plan.