West Virginia Identity Theft Laws: Penalties and Victim Rights

West Virginia's identity theft statute, Code section 61-3-54, is a flat felony with no dollar threshold, no victim-count tiers, and no repeat-offense enhancement. Whether the offense involves $50 or $50,000, the criminal exposure is the same. This page covers that penalty structure, an important gap in West Virginia's consumer protections (the state has no minor or protected-consumer credit-freeze law of its own), the extended fraud alert benefit tied to filing a police report, and where the federal recovery process fills in.

This article addresses West Virginia state law, primarily Code section 61-3-54 and Chapter 46A's consumer protection provisions, plus the federal layer that applies in every state.

W. Va. Code 61-3-54: The Core Offense

Under Code section 61-3-54, any person who knowingly takes the name, birth date, Social Security number, or other identifying information of another person, without that person's consent, with the intent to fraudulently represent that they are the other person for the purpose of making financial or credit transactions in that person's name, or for the purpose of gaining employment, is guilty of a felony. The statute carves out one exception: it does not apply to obtaining another person's driver's license or other identification solely to misrepresent one's own age.

A Flat Felony With No Dollar Threshold

Unlike most states, West Virginia's identity theft statute is a single unlettered paragraph with no subsections, no dollar-loss threshold, no victim-count threshold, and no repeat-offense enhancement built in. A conviction carries confinement in the penitentiary for not more than 5 years, a fine of not more than $1,000, or both, regardless of how much money was involved or how many people were affected by a single scheme. This is a simpler, flatter structure than states that scale penalties by loss amount or item count.

Restitution

Section 61-3-54 itself contains no restitution mandate. West Virginia's general restitution statute, Code section 61-11A-4, part of the state's Victim Protection Act of 1984, requires a court sentencing a defendant convicted of a felony or misdemeanor causing physical, psychological, or economic injury or loss to order restitution, covering property loss or value, injury-related costs, and lost income, subject to a documented-reasons exception. Because section 61-3-54 is a felony that typically causes economic injury or loss, a conviction should trigger this general restitution mechanism, though no identity-theft-specific companion restitution provision exists separately from this general statute.

No standalone civil cause of action tied directly to section 61-3-54, allowing a victim to sue the identity thief in civil court, was located during this article's research. Two adjacent civil remedies exist but target different defendants: one allows a private action against a credit reporting or freeze agency for negligent or willful mishandling of a freeze, and West Virginia's general Consumer Credit and Protection Act provision lets anyone who suffers an ascertainable loss from an unfair or deceptive practice sue for actual damages or a statutory minimum, whichever is greater.

No Minor or Protected Consumer Freeze Law

A notable gap in West Virginia's consumer protections: the state does not appear to have its own protected-consumer or minor credit-freeze statute. West Virginia's complete security freeze law, Chapter 46A, Article 6L, defines "consumer" simply as "an individual," with no protected-consumer category, no representative-authorization mechanism, and no provision letting a parent or guardian create or freeze a credit file for a child with no existing credit history. This means West Virginia minors rely entirely on the federal minor-freeze right under 15 U.S.C. section 1681c-1(j), added in 2018, rather than any additional state-law protection. Article 6L does provide a general adult freeze with standard mechanics, including a fee waiver of up to $5 for identity theft victims who provide a police report or FTC report.

Reporting Identity Theft and the Extended Fraud Alert

The West Virginia Attorney General's Consumer Protection Division maintains a live identity theft resource page covering reporting and prevention. A key practical point the office highlights: filing a police-department identity theft report entitles a victim to a free extended fraud alert, which under federal law lasts 7 years instead of the standard 1-year initial alert, and it unlocks a free credit freeze for documented identity theft victims. The office also explains federal liability limits on unauthorized card charges and directs consumers to contact all three nationwide credit bureaus for fraud alerts. To file a complaint, West Virginia residents can use the online Consumer Complaint Form, call the Consumer Hotline at 1-800-368-8808, or mail a completed form to the Consumer Protection Division in Charleston.

Whether West Virginia has a mandatory police-report statute requiring an agency to accept an identity theft report, a formal identity-theft passport or victim-certification program, or an expungement process for fraudulent charges was not confirmed in either direction during this article's research; the state code's own search function proved unreliable, so treat these as open questions rather than confirmed absences, and confirm directly with the Attorney General's office if they matter to your situation.

Breach Notification

West Virginia's breach notification statute, Code section 46A-2A-102, requires notice to affected residents without unreasonable delay upon discovery of a breach involving unencrypted personal information reasonably believed to have been accessed by an unauthorized person. The required notice must include the categories of information exposed, contact information for fraud inquiries, and credit reporting agency contact details for fraud alerts and security freezes. Breaches affecting more than 1,000 people also require notice to the credit bureaus. Enforcement rests with the Attorney General, who can pursue a civil penalty of up to $150,000 per breach or series of breaches for repeated and willful violations. That authority is not absolute: section 46A-2A-104(b) grants the Attorney General exclusive authority "except as provided by subsection (c)," and subsection (c) provides that a violation by a licensed financial institution "shall be enforceable exclusively by the financial institution's primary functional regulator." Either way, the statute does not create a private right of action for an individual consumer to sue over a notification failure.

The Federal Layer

Every West Virginia identity theft victim can also draw on federal protections that apply regardless of state. The Fair Credit Reporting Act's fraud-alert provisions give victims the extended 7-year alert described above, and since 2018 all three nationwide credit bureaus must offer free security freezes to any consumer. IdentityTheft.gov, run by the Federal Trade Commission, remains the fastest way to generate the initial recovery plan most other steps build on.

Information last verified on 2026-08-13. This article has not yet been reviewed by a licensed lawyer.

Related Resources

• Identity Theft Laws: Federal Rules and State Penalties
• How to Report Identity Theft
• Credit Freeze vs. Fraud Alert

---

Last updated: 2026-08-13.

Frequently Asked Questions

What is the penalty for identity theft in West Virginia?

It is a felony punishable by confinement in the penitentiary for up to 5 years, a fine of up to $1,000, or both. The penalty is a single flat tier with no dollar-loss threshold, victim-count escalation, or repeat-offense enhancement.

Does West Virginia have a credit freeze law for minors?

No. West Virginia's security freeze law is written for adult consumers only, with no protected-consumer or representative category for minors. West Virginia minors rely on the federal minor-freeze right instead.

What benefit does filing a police report unlock in West Virginia?

Filing a police-department identity theft report entitles a victim to a free extended 7-year fraud alert under federal law and unlocks a free credit freeze for documented identity theft victims.

Does West Virginia's breach notification law let a victim sue a business directly?

No. The breach notification statute does not create a private right of action for an individual consumer. Enforcement rests with the Attorney General, except that a violation by a licensed financial institution is enforceable exclusively by that institution's primary functional regulator under section 46A-2A-104(c).

Where should a West Virginia resident report identity theft?

File a report at IdentityTheft.gov for a federal recovery plan, file a police report with local law enforcement to unlock the extended fraud alert, and file a complaint with the West Virginia Attorney General's Consumer Protection Division using the online form or the 1-800-368-8808 hotline.