North Dakota
North Dakota Identity Theft Laws: N.D.C.C. 12.1-23-11 Penalties Explained
Independently fact-checked against primary sources (last audited August 14, 2026). · 3 primary sources cited on this page. How we verify our legal content

North Dakota's identity theft statute, N.D.C.C. § 12.1-23-11, splits the offense into two tracks: conduct aimed at obtaining money, credit, or other value using someone else's information, and conduct that misuses someone else's information without any value ever changing hands, such as interfering with their employment or a contract. The two tracks carry different penalty structures, and North Dakota gives prosecutors 6 years from a victim's discovery of the offense to bring charges.
This article addresses North Dakota's identity theft statute and the North Dakota Attorney General's consumer resources, together with the federal layer of protections that applies nationwide. It does not cover every state's law; see the identity theft laws hub for other states.
North Dakota's Identity Theft Statute: N.D.C.C. § 12.1-23-11
North Dakota's identity theft law protects 19 categories of personal identifying information, including a person's name, address, phone number, driver's license number, Social Security number, employer ID, mother's maiden name, financial account numbers, birth, death, and marriage certificate information, health-insurance ID, photo ID card information, digital signature, photograph or image, email address, username and password, payment-card information, biometric data, and any other number, document, or piece of information usable to access financial records.
The statute then splits prohibited conduct into two paragraphs. The first covers obtaining, attempting to obtain, transferring, recording, or using someone else's personal identifying information, without their authorization or consent, to obtain credit, money, goods, services, or anything else of value. The second covers using or attempting to use that information, without authorization, to interfere with or initiate a contract or service for someone else, obtain or continue employment, gain access to another person's personal identifying information, or commit another offense under North Dakota law, and it applies regardless of whether the offense actually caused any economic loss.
Penalties
The two tracks carry different penalty structures. For the value-obtaining conduct, a violation is a Class B felony if the value obtained exceeds $1,000, and otherwise a Class C felony. A second or subsequent offense under this paragraph is a Class A felony, which under N.D.C.C. § 12.1-32-01 carries a maximum penalty of 20 years' imprisonment, a $20,000 fine, or both. For the non-value-based conduct, such as interfering with someone's employment or a contract using their stolen information, a first offense is a Class A misdemeanor, and a second or subsequent offense is a Class C felony.

North Dakota counts prior convictions broadly toward the second-or-subsequent-offense enhancement: a prior conviction under this same statute, an equivalent law of another state, or an equivalent federal law all count. Prosecution must begin within 6 years of the date the victim discovers the facts constituting the violation, a longer window than many crimes carry, reflecting how long identity theft can go undetected.
Notably, the full text of N.D.C.C. § 12.1-23-11, read directly from the state's official code, contains no restitution provision specific to identity theft. That is different from several neighboring states' identity theft statutes, which build restitution directly into the offense. North Dakota's general felony-sentencing framework may still authorize a court to order restitution as a matter of ordinary criminal procedure, but this article did not independently confirm that general provision's application to identity theft convictions specifically, so do not assume restitution is automatic without asking the prosecutor or a North Dakota attorney handling your case.
North Dakota Attorney General Resources
The North Dakota Attorney General's Consumer Protection division maintains a dedicated identity theft reporting resource, reachable at (701) 328-3404, or 1-800-472-2600 toll-free within the state. The office's guidance explains free 1-year fraud alerts, describes a credit freeze as blocking lenders and credit card companies from accessing your personal identifying and credit information so a thief cannot open new accounts, and points to free weekly credit reports from the three major bureaus. The office also links directly to IdentityTheft.gov for the federal reporting process.
The Attorney General's consumer page describes fraud alerts and credit freezes in general consumer terms rather than citing the North Dakota statutes that create those rights. Those statutes are set out in the next section.
North Dakota's Own Fraud Alert, Freeze, and Victim Remedies
North Dakota's protections are not limited to the criminal statute. Two chapters of the Century Code give consumers and identity theft victims rights they can exercise directly against credit reporting agencies and in court.
N.D.C.C. ch. 51-31 covers fraud alerts and victim remedies. Under § 51-31-02, a consumer who asserts a good faith suspicion that they have been or are about to become a victim of fraud or identity theft can require a consumer reporting agency that holds a file on them to place a fraud alert, and the agency must keep that alert for at least 90 days. Section 51-31-03 provides an extended alert that lasts 7 years and, for 5 years, also requires the agency to exclude the consumer from prescreened credit and insurance solicitation lists.
Section 51-31-04 is the provision most victims never hear about. It lets an individual who has learned or reasonably suspects that their personal identifying information was unlawfully used initiate a law enforcement investigation by contacting the agency with jurisdiction over their own residence, or any other jurisdiction where part of the offense occurred. That agency must take a report of the matter, give the individual a copy of the report, and begin an investigation of the facts. The same section lets a victim petition the district court in the county where they live, or where the identity theft is alleged to have occurred, for an expedited judicial determination of factual innocence. That route is available when the perpetrator was arrested, cited, or convicted of a crime under the victim's identity, when a criminal complaint was filed against the perpetrator in the victim's name, or when the victim's identity has been mistakenly associated with a record of criminal conviction. If the court finds the victim factually innocent, it issues an order certifying that determination, and it may order the victim's name and associated identifying information in publicly accessible court records deleted, sealed, or labeled to show the data is impersonated.
N.D.C.C. ch. 51-33 governs security freezes. Section 51-33-02 gives a consumer the right to place a freeze on their credit file by mail, by telephone with proper identification, or through a secure electronic connection where the agency makes one available, and § 51-33-03 requires the agency to place the freeze no later than 3 business days after a request with proper identification. Later sections cover temporarily lifting or permanently removing a freeze (§ 51-33-04), the notice of rights an agency must provide (§ 51-33-12), and private enforcement (§ 51-33-13): a consumer whose credit file is erroneously released can sue for injunctive relief, the greater of actual damages or $2,000 in civil penalties for each violation, and reasonable expenses, court costs, investigative costs, and attorney's fees. The attorney general may enforce both chapters, and a violation of ch. 51-31 also counts as a violation of North Dakota's consumer fraud law, ch. 51-15.
Neither chapter contains a minor or protected-consumer freeze section. For a child's credit file, the federal protected-consumer freeze described below is the operative right.
Alerts Instead of Checking Reports by Hand
The steps the North Dakota Attorney General describes cost nothing: a credit freeze at Equifax, Experian, and TransUnion, and free weekly credit reports you can review yourself. If you would rather get alerts than check by hand, Aura offers three-bureau credit monitoring and alerts for unusual spending on the bank and card accounts you link. It also includes identity theft insurance and help from a fraud remediation team.
Compare Aura PlansAffiliate disclosure: if you sign up through this link we may earn a commission, at no extra cost to you. Learn more
Federal Protections That Also Apply in North Dakota
On top of the North Dakota chapters above, federal law adds protections that apply in every state. Under 15 U.S.C. § 1681c-1, every consumer is entitled to a free security freeze and free fraud alerts from each of the three nationwide credit reporting agencies, a 1-year initial alert and, with a copy of an FTC Identity Theft Report, a 7-year extended alert requiring a potential creditor to actually contact you before extending credit, plus a federal Protected Consumer Freeze provision letting a parent, guardian, or person with valid power of attorney freeze a minor's credit file. Under 15 U.S.C. § 1681c-2, a victim with an FTC Identity Theft Report can get fraudulent information blocked from their credit report within 4 business days of the credit reporting agency receiving the required documentation.
Where the two layers set different terms, the more protective one is what you get in practice. The federal initial fraud alert runs a full year against North Dakota's 90-day statutory floor, and the federal freeze is free nationwide.

What To Do If You're a Victim of Identity Theft in North Dakota
Start at IdentityTheft.gov to create an FTC Identity Theft Report and a personalized recovery plan. Contact the North Dakota Attorney General's Consumer Protection division at (701) 328-3404 or 1-800-472-2600 to report the incident and get state-level guidance. Place a security freeze and, if needed, a fraud alert with each of the three credit bureaus, using both your federal rights and the North Dakota freeze and alert statutes described above.
File a report with local law enforcement as well. Under N.D.C.C. § 51-31-04 you can do that through the agency with jurisdiction over your own residence, not only the place where the thief acted, and that agency must take the report, give you a copy, and open an investigation. Keep that copy: a police report or case number is what many businesses and credit bureaus ask for before they will act. If someone was arrested, cited, charged, or convicted under your name, or your identity has been mistakenly attached to a conviction record, you can petition the district court where you live for an expedited determination of factual innocence and, if it is granted, an order sealing or labeling the impersonated records.

Information last verified on 2026-09-02, drawn from the official North Dakota Legislative Council's full chapter text of N.D.C.C. § 12.1-23-11, § 12.1-32-01, chapter 51-31, and chapter 51-33, the North Dakota Attorney General's consumer identity theft resource, and federal law under 15 U.S.C. §§ 1681c-1 and 1681c-2. This article has not yet been reviewed by a licensed lawyer. Whether North Dakota's general felony-restitution statute applies to base identity theft convictions was not independently confirmed at publication.
Related Resources
- Identity Theft Laws: Federal Rules and State Penalties
- How to Report Identity Theft
- Credit Freeze vs. Fraud Alert
- Child Identity Theft
- Tax Identity Theft: When to File IRS Form 14039
Last updated: 2026-09-02.
Frequently Asked Questions
What is the penalty for identity theft in North Dakota?
It depends on which conduct is involved. Obtaining money, credit, or value using someone's information is a Class B felony if the value exceeds $1,000, or a Class C felony otherwise, with a Class A felony for a second or subsequent offense. A Class A felony carries a maximum of 20 years' imprisonment and a $20,000 fine under N.D.C.C. § 12.1-32-01. Non-value-based misuse, such as employment or contract interference, is a Class A misdemeanor for a first offense and a Class C felony for a repeat offense.
Does North Dakota's identity theft law include restitution?
The full statutory text of N.D.C.C. § 12.1-23-11 does not include a restitution provision of its own, unlike some neighboring states. North Dakota's general felony-sentencing law may still authorize restitution as a matter of ordinary criminal procedure, but that was not independently confirmed for identity theft specifically.
How long do North Dakota prosecutors have to charge identity theft?
Prosecution must begin within 6 years of the date the victim discovers the facts constituting the violation.
Does North Dakota have a credit freeze law of its own?
Yes. N.D.C.C. ch. 51-33 gives a North Dakota consumer the right to place a security freeze on their credit file by mail, by phone, or through a secure electronic connection, and the agency must place it no later than 3 business days after a proper request. Federal law, 15 U.S.C. § 1681c-1, separately entitles every consumer to a free freeze and free fraud alerts from all three nationwide agencies. Chapter 51-33 has no minor or protected-consumer freeze section, so a child's file is covered by the federal protected-consumer freeze.
Can a North Dakota identity theft victim clear their name in court?
Yes. Under N.D.C.C. § 51-31-04, a victim can petition the district court where they live, or where the identity theft occurred, for an expedited judicial determination of factual innocence if the thief was arrested, cited, or convicted under the victim's identity, if a criminal complaint was filed in the victim's name, or if the victim's identity was mistakenly associated with a conviction record. If the court finds the victim factually innocent it issues an order certifying that, and it may order the impersonated information in public court records deleted, sealed, or labeled.
How do I report identity theft in North Dakota?
Start at IdentityTheft.gov to file a federal report and get a personalized recovery plan. You can also contact the North Dakota Attorney General's Consumer Protection division at (701) 328-3404 or 1-800-472-2600. Under N.D.C.C. § 51-31-04 you may file a police report with the agency that has jurisdiction over your residence, and it must take the report, give you a copy, and investigate.
Updates
Added North Dakota’s own fraud alert, security freeze, and victim remedies under N.D.C.C. chapters 51-31 and 51-33, including the right to file a police report where you live and to petition for a judicial determination of factual innocence, and corrected the description of the Class A felony penalty.
Independently fact-checked against the cited primary sources
The Law Behind This Article
This article rests on the statutory provisions below, held in our own legal record and retrieved from the official source. Tap a section to read the operative text.
North Dakota Century Code
§ 12.1-23-11Unauthorized use of personal identifying information - PenaltyIn forcecited in 2 of our articles
As used in this section, "personal identifying information" means any of the following information: An individual's name; An individual's address; An individual's telephone number; The operator's license information assigned to an individual by the department of transportation under section 39-06-14; An individual's social security number; An individual's employer or place of employment; An identification number assigned to the individual by the individual's employer; The maiden name of the individual's mother; An individual's financial institution account number, credit card number, or debit card number; An individual's birth, death, or marriage certificate; An individual's health insurance policy number or subscriber identification number or any unique identifier used by a health insurer to identify the individual; The nondriver color photo identification card information assigned to the individual by the department of transportation under section 39-06-03.1; An individual's digitized or other electronic signature; An individual's photograph or computerized image; An individual's electronic mail address; An individual's username and password of any digital…
Official text (excerpt) · last checked 2026-09-02 · Read the full text in our law library · Verify at ndlegis.gov
Cited in 2 court opinions in our collectionLatest citing opinion in our collection: 2025
Opinions citing this section in our collection:
- State v. Curtis (North Dakota Supreme Court 2023, 997 N.W.2d 823)“…account number, credit card number, or debit card number.” N.D.C.C. § 12.1-23-11(1)(i). [¶10] “If a statute or regulati…”
- State v. Janachovsky (North Dakota Supreme Court 2025, 2025 ND 30)“…ed use of personal identifying information, in violation of N.D.C.C. § 12.1-23-11(3). Janachovsky, along with other indiv…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: North Dakota Biometric Privacy Laws: Collection, Consent & Penalties (2026)
§ 51-31-04Police reports - Judicial determination of factual innocenceIn force
An individual who has learned or reasonably suspects that the individual's personal identifying information has been unlawfully used by another, as described in section 12.1-23-11, may initiate a law enforcement investigation by contacting the local law enforcement agency that has jurisdiction over the individual's residence or any other jurisdiction in which any part of the offense occurred. The law enforcement agency shall take a report of the matter, provide the individual with a copy of that report, and begin an investigation of the facts. If the suspected crime was committed in a different jurisdiction, the local law enforcement agency may refer the matter to the law enforcement agency where the suspected crime was committed for further investigation of the facts.
Official text (excerpt) · last checked 2026-07-30 · Read the full text in our law library · Verify at ndlegis.gov
§ 51-31-02Initial fraud alertsIn force
Upon the direct request of a consumer or an individual acting on behalf of or as a personal representative of a consumer, who asserts in good faith a suspicion that the consumer has been or is about to become a victim of fraud or related crime, including identity theft, a consumer reporting agency that maintains a file on the consumer and has received appropriate proof of the identity of the requester shall include a fraud alert in the file of that consumer. The consumer reporting agency shall continue that alert along with any credit score generated in using that file, for a period of not less than ninety days beginning on the date of the request, unless the consumer or the consumer's representative requests that the fraud alert be removed before the end of the period and the agency has received appropriate proof of the identity of the requester for that purpose.
Official text (excerpt) · last checked 2026-07-30 · Read the full text in our law library · Verify at ndlegis.gov
§ 51-31-03Extended fraud alertsIn force
Upon the direct request of a consumer or an individual acting on behalf of or as a personal representative of a consumer, who asserts in good faith a suspicion that the consumer has been or is about to become a victim of fraud or related crime, including identity theft, a consumer reporting agency that maintains a file on the consumer and has received appropriate proof of the identity of the requester shall: Include a fraud alert in the file of that consumer and continue that alert along with any credit score generated in using that file, during the seven-year period beginning on the date of the request, unless the consumer or the consumer's representative requests that the fraud alert be removed before the end of that period and the agency has received appropriate proof of the identity of the requester for that purpose; and During the five-year period beginning on the date of the request, exclude the consumer from any list of consumers prepared by the consumer reporting agency and provided to any third party to offer credit or insurance to the consumer as part of a transaction that was not initiated by the consumer, unless the consumer or the consumer's representative requests…
Official text (excerpt) · last checked 2026-07-30 · Read the full text in our law library · Verify at ndlegis.gov
§ 51-33-03Response of consumer reporting agencyIn force
A consumer reporting agency shall place a security freeze on a consumer's consumer credit file no later than three business days after receiving from the consumer a request under section 51-33-02 which includes proper identification. If a victim of identity theft requests a security freeze, a consumer reporting agency shall place a security freeze on the consumer's credit report no later than forty-eight hours after receiving: A notice under section 51-33-02; and A copy of a valid police report, investigative report, or complaint to law enforcement evidencing the identity theft victim has alleged being a victim of identity theft. The copy may be transmitted to the consumer reporting agency by mail, facsimile, or secure electronic mail connection, if the connection is made available by the consumer reporting agency.
Official text (excerpt) · last checked 2026-07-30 · Read the full text in our law library · Verify at ndlegis.gov
§ 12.1-32-01Classification of offenses - PenaltiesIn forcecited in 12 of our articles
Offenses are divided into seven classes, which are denominated and subject to maximum penalties, as follows: Class AA felony, for which a maximum penalty of life imprisonment without parole may be imposed. The court must designate whether the life imprisonment sentence imposed is with or without an opportunity for parole. Notwithstanding the provisions of section 12-59-05, a person found guilty of a class AA felony and who receives a sentence of life imprisonment with parole, shall not be eligible to have that person's sentence considered by the parole board for thirty years, less sentence reduction earned for good conduct, after that person's admission to the penitentiary. Class A felony, for which a maximum penalty of twenty years' imprisonment, a fine of twenty thousand dollars, or both, may be imposed. Class B felony, for which a maximum penalty of ten years' imprisonment, a fine of twenty thousand dollars, or both, may be imposed. Class C felony, for which a maximum penalty of five years' imprisonment, a fine of ten thousand dollars, or both, may be imposed.
Official text (excerpt) · last checked 2026-09-24 · Read the full text in our law library · Verify at ndlegis.gov
Cited in 67 court opinions in our collectionLatest citing opinion in our collection: 2026
Opinions citing this section in our collection:
- State v. Brown (North Dakota Supreme Court 2009, 2009 N.D. 150)“…ws ch. 116, § 23. The current relevant statutory provision, N.D.C.C. § 12.1-32-01, lists the various categories of crimin…”
- State v. Magnuson (North Dakota Supreme Court 1997, 571 N.W.2d 642)“…lony charge of murder. The penalty provision for the crime, N.D.C.C. § 12.1-32-01(1), said a person found guilty of a cla…”
- State v. Vickerman (North Dakota Supreme Court 2022, 981 N.W.2d 881)“…ceeding his life expectancy with parole implicitly violates N.D.C.C. § 12.1-32-01(1). Our review “of a criminal sentence…”
Identified automatically from the court opinions citing this section — not a ranking of which case controls.
Also relied on in: North Dakota GPS Tracking Laws: Is It Legal to Put a Tracker on a Car? (2026), North Dakota AI Meeting Recording Laws (2026), North Dakota Audio Recording Laws: One-Party Consent Rules and Penalties (2026)
Search our full record of US law — 2.1 million sections, every state + federal →
Sources and References
- N.D.C.C. § 12.1-23-11, Unauthorized use of personal identifying information - Penalty (full chapter PDF)(ndlegis.gov).gov
- North Dakota Attorney General, Consumer Resources: Identity Theft(attorneygeneral.nd.gov).gov
- IdentityTheft.gov (Federal Trade Commission)(identitytheft.gov).gov
- 15 U.S.C. § 1681c-1, Identity theft prevention; fraud alerts and active duty alerts (security freeze)(law.cornell.edu)
- 15 U.S.C. § 1681c-2, Block of information resulting from identity theft (FCRA § 605B)(law.cornell.edu)
- N.D.C.C. ch. 51-31, Identity Fraud: fraud alerts, police reports, judicial determination of factual innocence (full chapter PDF)(ndlegis.gov)
- N.D.C.C. ch. 51-33, Security Freeze on credit reports: right to freeze, agency response, fees, notice of rights, private enforcement (full chapter PDF)(ndlegis.gov)
- N.D.C.C. § 12.1-32-01, Classification of offenses and penalties (full chapter PDF)(ndlegis.gov)