Rhode Island Identity Theft Laws: Identity Fraud Penalties

Rhode Island calls the crime «identity fraud,» and its penalties scale by how many times a person has been convicted, not by dollar amount. This page covers Rhode Island's identity fraud statute, its escalating penalty structure, a 2026 bill working through the General Assembly following a major state data breach, and where Rhode Islanders report identity theft.

This article addresses Rhode Island state law on identity theft alongside the federal framework under 18 U.S.C. Section 1028 and the Fair Credit Reporting Act. For the parent overview of identity theft law generally, see our identity theft laws hub.

Rhode Island's Identity Fraud Statute

Rhode Island's identity theft law is titled identity fraud and sits in Chapter 11-49.1, «Impersonation and Identity Fraud.» R.I. Gen. Laws Section 11-49.1-3 prohibits seven categories of conduct, including producing or transferring false identification documents, possessing five or more identification documents belonging to another person with intent to use them unlawfully, and using another person's means of identification to commit fraud. A violation is a felony, with penalties set out in the companion section, Section 11-49.1-4. The statute carves out one exception: a person under 21 who misstates their age to enter an alcohol-licensed establishment is not covered.

Penalties Rise With Each Repeat Offense

Rhode Island's penalty structure is distinctive because it tiers strictly by how many times a person has been convicted, not by the dollar value stolen. A first offense carries up to 3 years imprisonment, a fine of up to $5,000, or both. A second offense carries 3 to 5 years imprisonment, a fine of up to $10,000, or both. A third or subsequent offense carries 5 to 10 years imprisonment and a fine of at least $15,000. Unlike states that scale penalties primarily by loss amount, Rhode Island's structure means a low-dollar repeat offense can carry a substantially longer sentence than a single high-dollar first offense.

No State-Law Minor Freeze in Rhode Island

Rhode Island's security freeze law, the Consumer Empowerment and Identity Theft Prevention Act of 2006, Chapter 6-48, is a general consumer freeze statute. Its definitions section defines «consumer» only as an individual resident of the state, with no separate «protected consumer» or minor-specific age-threshold definition anywhere in the chapter. Rhode Island does not appear to have its own minor or protected-consumer freeze statute distinct from the federal baseline; minors in Rhode Island rely on the federal minor-freeze right described below.

Restitution and Civil Remedies

Restitution for identity fraud victims in Rhode Island is discretionary rather than mandatory. Under R.I. Gen. Laws Section 12-19-32, a general crime-victim restitution statute applicable to identity fraud along with other crimes, «a judge may order restitution,» language that leaves the decision to the court's discretion rather than requiring it in every case.

Rhode Island's identity fraud chapter, Chapter 11-49.1, contains just five sections in total: a short title, definitions, the identity fraud offense itself, penalties, and search warrants and forfeitures. There is no civil-action or private-damages section anywhere within the chapter, meaning Rhode Island provides no identity-fraud-specific civil cause of action. A victim's general Deceptive Trade Practices Act claim may theoretically reach some identity fraud conduct, but that was not independently confirmed this session.

The 2026 Push to Strengthen Rhode Island's Breach-Notification Law

Rhode Island's 2015 Identity Theft Protection Act, the state's data-breach-notification chapter, has been the subject of active legislative attention following the RIBridges data breach. A 2025 bill, H 6346 and its companion S 1037A, would have raised the state's per-record breach penalties from $100/$200 to $1,000/$2,000 and added specific breach-remediation coverage for minors under 18, but it did not pass; it was held for further study in the House as of May 19, 2025. A renewed 2026 version, S 2638, passed the Rhode Island Senate, with a companion bill, H 7509, introduced and pending in the House as of this session's research. Neither had become law. No 2025-26 amendment was found to the core criminal identity fraud statute itself, Sections 11-49.1-3 and 11-49.1-4.

Reporting Identity Theft in Rhode Island

The Rhode Island Attorney General's Office maintains an identity theft resource page within its Consumer Protection unit. This session's research could not access the content of that page or its parent consumer protection page directly; every fetch attempt returned a blocked response. Rhode Island residents should still contact the Attorney General's Office directly for current reporting guidance, in addition to filing a free federal report described below.

Federal Rights That Apply Regardless of State Law

Every Rhode Island identity theft victim also has rights under federal law independent of the state's own statutes. A credit freeze and a fraud alert are both free under 15 U.S.C. Section 1681c-1, added by the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018, and this is the right Rhode Island families of minors should rely on given the state's lack of its own minor-freeze law. A free report at IdentityTheft.gov also unlocks the right under FCRA Section 605B, 15 U.S.C. Section 1681c-2, to have fraudulent information blocked from a credit report. For the full mechanics, see our guides on how to report identity theft and credit freeze vs. fraud alert.

Information last verified on 2026-08-13, drawing directly on the live text of R.I. Gen. Laws Sections 11-49.1-3, 11-49.1-4, 12-19-32, and 6-48-4, plus the Rhode Island General Assembly's own press release on the 2026 breach-law bill and the ACLU of Rhode Island's tracking of the 2025 predecessor bill. This article has not yet been reviewed by a licensed lawyer.

Related Resources

• Identity Theft Laws: Federal Rules and State Penalties
• How to Report Identity Theft
• Credit Freeze vs. Fraud Alert

---

Last updated: 2026-08-13.