Federal credit card fraud penalties start at up to 10 years in prison for a first offense and climb to 15 or even 20 years depending on the conduct and the defendant’s history. Those numbers are just the statutory ceilings under the primary fraud statute. In practice, prosecutors stack additional charges for wire fraud and aggravated identity theft, and sentencing guidelines tied to the dollar loss often drive the actual sentence higher than the headline maximums suggest.
The Core Statute and Its Penalty Tiers
Most federal credit card fraud cases are charged under 18 U.S.C. § 1029, which criminalizes fraud involving “access devices.” The statute reaches physical cards, account numbers, PINs, electronic serial numbers, and any other tool that can be used to obtain money, goods, or services or to initiate a funds transfer.1Office of the Law Revision Counsel. 18 USC 1029 – Fraud and Related Activity in Connection With Access Devices Every charge under this statute requires intent to defraud. An honest billing mistake or accidental use of someone else’s card does not qualify.
Section 1029 lists ten categories of prohibited conduct and sets different penalty ceilings depending on which category applies:
- Using a counterfeit or unauthorized access device, trafficking in stolen card data, or possessing 15 or more unauthorized devices carries up to 10 years in prison on a first offense.
- Producing, possessing, or selling device-making equipment or scanning receivers carries up to 15 years, reflecting the larger-scale harm that equipment enables.
- A second conviction under any subsection of § 1029 raises the ceiling to 20 years.2Office of the Law Revision Counsel. 18 U.S. Code 1029 – Fraud and Related Activity in Connection With Access Devices
The 15-device threshold matters because it captures conduct that never resulted in an actual transaction. Someone holding stolen card numbers for later use or resale can be charged even if none of the numbers were ever run. The offense must affect interstate or foreign commerce, which is a low bar since virtually any electronic transaction crosses state lines.
The Other Charges Prosecutors Stack
Federal prosecutors rarely charge credit card fraud under § 1029 alone. Layered charges are the norm, and this is what usually drives sentences past the § 1029 ceiling.
Wire Fraud
Any scheme that used electronic communications, which today means nearly all of them, can also be charged under 18 U.S.C. § 1343. Wire fraud carries up to 20 years in prison on its own, and up to 30 years if the fraud affected a financial institution.3Office of the Law Revision Counsel. 18 U.S. Code 1343 – Fraud by Wire, Radio, or Television Prosecutors favor wire fraud counts because the statute is broad, the penalties are severe, and the interstate wire element is easy to establish whenever the scheme involved phone calls, emails, or online transactions.
Aggravated Identity Theft
This is the charge that surprises most defendants. Under 18 U.S.C. § 1028A, when someone uses another person’s identifying information during a credit card fraud scheme, prosecutors can add an aggravated identity theft count that carries a mandatory two-year prison sentence. That sentence must run consecutively, stacked on top of whatever the defendant receives for the underlying fraud. Courts cannot reduce the fraud sentence to offset it, and probation is not available.4Office of the Law Revision Counsel. 18 USC 1028A – Aggravated Identity Theft A defendant sentenced to 5 years for access device fraud who also picks up an aggravated identity theft count will serve at least 7.
Fraudulent Use of Credit Cards
A separate statute, 15 U.S.C. § 1644, specifically targets fraudulent credit card use in interstate commerce when the transactions total $1,000 or more within any one-year period. It also covers transporting a fraudulent card across state lines and knowingly receiving goods purchased with one. The penalty is a fine of up to $10,000 or up to 10 years in prison.5Office of the Law Revision Counsel. 15 USC 1644 – Fraudulent Use of Credit Cards
How the Sentence Is Actually Calculated
Statutory maximums set the ceiling, but federal judges work from the U.S. Sentencing Guidelines, which build a recommended range from a numerical offense level. In fraud cases the single most influential factor is the total financial loss.
The base offense level for fraud gets increased on a sliding scale tied to loss amount. Losses above $6,500 trigger the first increase, and the adjustments continue upward through progressively larger thresholds.6United States Sentencing Commission. Loss Calculation A scheme with $100,000 in losses lands at a significantly higher offense level than one with $10,000, even if the underlying conduct is identical. Loss includes not just what the defendant actually obtained but also the reasonably foreseeable harm the scheme was intended to cause.7United States Sentencing Commission. Primer on Loss Calculation Under 2B1.1 Intended loss can exceed actual loss in cases where the defendant possessed hundreds of stolen numbers but was caught before using most of them.
Other enhancements push the number higher:
- The number of victims.
- Use of sophisticated means, such as skimmers, cloning equipment, or layered digital tools.
- A leadership role in a larger operation.
- Targeting of vulnerable victims.
Someone who ran a multi-state skimming ring affecting hundreds of victims faces a very different guidelines range than someone who made a handful of unauthorized purchases on a single stolen card, even though both could be charged under the same statute.
Restitution and Forfeiture
Prison is not the whole penalty. Federal fraud convictions carry mandatory financial consequences that defendants often underestimate.
Restitution is not discretionary in these cases. Under 18 U.S.C. § 3663A, the court must order the defendant to repay the full pecuniary harm suffered by every identifiable victim.8Office of the Law Revision Counsel. 18 U.S. Code 3663A – Mandatory Restitution to Victims of Certain Crimes The obligation survives prison. If the defendant cannot pay at sentencing, the debt follows them after release and is enforceable through wage garnishment and asset seizure.
Forfeiture runs alongside restitution. For access device fraud under § 1029, wire fraud under § 1343, and related offenses, the court must order forfeiture of any property that constitutes or was derived from the proceeds of the fraud.9Office of the Law Revision Counsel. 18 USC 982 – Criminal Forfeiture Where the scheme involved telemarketing, forfeiture reaches property used to facilitate the fraud, including equipment and real estate. Defendants keep nothing they gained from the scheme, and legitimate assets used in the operation can be lost as well.
When a Case Goes Federal
Not every credit card fraud case ends up in federal court. State courts handle most of them, particularly when the conduct stays inside one state, involves a single victim or a small number of victims, and the dollar amount is modest. Many states charge low-value fraud as a misdemeanor, with felony treatment kicking in above a threshold that varies by jurisdiction.
Federal jurisdiction attaches when the fraud crosses state lines or involves transactions in interstate commerce, which by default covers most electronic transactions. Federal agencies get involved when the loss amounts are large, the scheme is organized, or a federally insured financial institution is affected. The U.S. Secret Service has specific statutory authority to investigate access device fraud under § 1029,2Office of the Law Revision Counsel. 18 U.S. Code 1029 – Fraud and Related Activity in Connection With Access Devices and the FBI also investigates these cases, particularly when they overlap with broader financial crime networks.
A case that could be charged in either system typically goes federal when the loss is substantial or the scheme is sophisticated. Federal prosecution usually means longer sentences, guideline-driven ranges, and fewer opportunities for probation-based plea deals. Defendants do not get to choose the forum.
Putting the Numbers Together
The statutory maximums are a starting point, not a prediction. A first-time defendant convicted only under § 1029 for using a counterfeit card faces up to 10 years, but the guidelines calculation on a small loss may recommend far less. A defendant charged with § 1029, wire fraud, and aggravated identity theft on a large-loss scheme faces a very different picture: a wire fraud ceiling of 20 years, a mandatory consecutive two-year identity theft sentence, guideline enhancements for loss and sophisticated means, plus mandatory restitution and forfeiture of everything the scheme produced. That is why federal credit card fraud sentences often run substantially longer than the underlying access device count would suggest on its own.