Rhode Island Identity Theft Laws: Identity Fraud Penalties

Rhode Island calls the crime «identity fraud,» and its penalties scale by how many times a person has been convicted, not by dollar amount. This page covers Rhode Island's identity fraud statute, its escalating penalty structure, a 2026 bill working through the General Assembly following a major state data breach, and where Rhode Islanders report identity theft.

This article addresses Rhode Island state law on identity theft alongside the federal framework under 18 U.S.C. Section 1028 and the Fair Credit Reporting Act. For the parent overview of identity theft law generally, see our identity theft laws hub.

Rhode Island's Identity Fraud Statute

Rhode Island's identity theft law is titled identity fraud and sits in Chapter 11-49.1, «Impersonation and Identity Fraud.» R.I. Gen. Laws Section 11-49.1-3 prohibits seven categories of conduct, including producing or transferring false identification documents, possessing five or more identification documents belonging to another person with intent to use them unlawfully, and using another person's means of identification to commit fraud. A violation is a felony, with penalties set out in the companion section, Section 11-49.1-4. The statute carves out one exception: a person under 21 who misstates their age to enter an alcohol-licensed establishment is not covered.

Penalties Rise With Each Repeat Offense

Rhode Island's penalty structure is distinctive because it tiers strictly by how many times a person has been convicted, not by the dollar value stolen. A first offense carries up to 3 years imprisonment, a fine of up to $5,000, or both. A second offense carries 3 to 5 years imprisonment, a fine of up to $10,000, or both. A third or subsequent offense carries 5 to 10 years imprisonment and a fine of at least $15,000. Unlike states that scale penalties primarily by loss amount, Rhode Island's structure means a low-dollar repeat offense can carry a substantially longer sentence than a single high-dollar first offense.

No State-Law Minor Freeze in Rhode Island

Rhode Island's security freeze law, the Consumer Empowerment and Identity Theft Prevention Act of 2006, Chapter 6-48, is a general consumer freeze statute. Its definitions section defines «consumer» only as an individual resident of the state, with no separate «protected consumer» or minor-specific age-threshold definition anywhere in the chapter. Rhode Island does not appear to have its own minor or protected-consumer freeze statute distinct from the federal baseline; minors in Rhode Island rely on the federal minor-freeze right described below.

Restitution and Civil Remedies

Restitution for identity fraud victims in Rhode Island is discretionary rather than mandatory. Under R.I. Gen. Laws Section 12-19-32, a general crime-victim restitution statute applicable to identity fraud along with other crimes, «a judge may order restitution,» language that leaves the decision to the court's discretion rather than requiring it in every case.

Rhode Island's identity fraud chapter, Chapter 11-49.1, contains just five sections in total: a short title, definitions, the identity fraud offense itself, penalties, and search warrants and forfeitures. There is no civil-action or private-damages section anywhere within the chapter, meaning Rhode Island provides no identity-fraud-specific civil cause of action. A victim's general Deceptive Trade Practices Act claim may theoretically reach some identity fraud conduct, but that was not independently confirmed this session.

The 2026 Push to Strengthen Rhode Island's Breach-Notification Law

Rhode Island's 2015 Identity Theft Protection Act, the state's data-breach-notification chapter, has been the subject of active legislative attention following the RIBridges data breach. A 2025 bill, H 6346 and its companion S 1037A, would have raised the state's per-record breach penalties from $100/$200 to $1,000/$2,000 and added specific breach-remediation coverage for minors under 18, but it did not pass; it was held for further study in the House as of May 19, 2025. A renewed 2026 version, S 2638, passed the Rhode Island Senate, with a companion bill, H 7509, introduced and pending in the House as of this session's research. Neither had become law. No 2025-26 amendment was found to the core criminal identity fraud statute itself, Sections 11-49.1-3 and 11-49.1-4.

Reporting Identity Theft in Rhode Island

The Rhode Island Attorney General's Office maintains an identity theft resource page within its Consumer Protection unit. This session's research could not access the content of that page or its parent consumer protection page directly; every fetch attempt returned a blocked response. Rhode Island residents should still contact the Attorney General's Office directly for current reporting guidance, in addition to filing a free federal report described below. For information lost to a scam, our guide to Rhode Island scam and fraud laws lists the office's consumer complaint form and phone line.

Federal Rights That Apply Regardless of State Law

Every Rhode Island identity theft victim also has rights under federal law independent of the state's own statutes. A credit freeze and a fraud alert are both free under 15 U.S.C. Section 1681c-1, added by the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018, and this is the right Rhode Island families of minors should rely on given the state's lack of its own minor-freeze law. A free report at IdentityTheft.gov also unlocks the right under FCRA Section 605B, 15 U.S.C. Section 1681c-2, to have fraudulent information blocked from a credit report. For the full mechanics, see our guides on how to report identity theft and credit freeze vs. fraud alert.

Information last verified on 2026-08-13, drawing directly on the live text of R.I. Gen. Laws Sections 11-49.1-3, 11-49.1-4, 12-19-32, and 6-48-4, plus the Rhode Island General Assembly's own press release on the 2026 breach-law bill and the ACLU of Rhode Island's tracking of the 2025 predecessor bill. This article has not yet been reviewed by a licensed lawyer.

Related Resources

• Identity Theft Laws: Federal Rules and State Penalties
• How to Report Identity Theft
• Credit Freeze vs. Fraud Alert

---

Last updated: 2026-08-13.

Frequently Asked Questions

What is the penalty for identity fraud in Rhode Island?

Penalties rise with the number of prior convictions rather than dollar amount. A first offense carries up to 3 years and up to a $5,000 fine, a second offense carries 3 to 5 years and up to a $10,000 fine, and a third or subsequent offense carries 5 to 10 years and at least a $15,000 fine.

Can I sue someone who committed identity fraud against me in Rhode Island?

Rhode Island's identity fraud chapter, Chapter 11-49.1, contains no civil-action or private-damages section, so there is no identity-fraud-specific civil claim under that chapter. The state's general Deceptive Trade Practices Act may theoretically apply in some circumstances, but that was not confirmed this session.

Can I freeze my child's credit report under Rhode Island law?

Rhode Island has no state-law minor or protected-consumer freeze statute. Rhode Island families rely on the federal minor-freeze right, which lets a parent or guardian freeze a child's credit report for free regardless of state law.

Is restitution guaranteed for Rhode Island identity fraud victims?

No. Restitution in Rhode Island is discretionary. Under R.I. Gen. Laws Section 12-19-32, a judge may order restitution, but it is not mandatory the way it is in some other states.

What is Rhode Island's 2026 identity theft bill about?

Following the RIBridges data breach, S 2638 passed the Rhode Island Senate in 2026, with a companion bill, H 7509, pending in the House, aiming to strengthen the state's 2015 Identity Theft Protection Act (the breach-notification law). Neither bill had become law as of this session's research.