criminallaw.wikiThe sourced reference on US criminal law

Cybercrimes

From criminallaw.wiki, the sourced reference on US criminal law
General information, not legal advice. Criminal laws differ by state and change often. For advice about a specific situation, talk to a licensed criminal defense lawyer or a public defender. See the legal disclaimer.

Law checked as of · Written by the criminallaw.wiki editorial team

Key facts: Federal cybercrime prosecutions commonly rely on the Computer Fraud and Abuse Act, the identification-document fraud statute, and the wire fraud statute, while states also maintain their own computer crime laws.[1][2][3]

Cybercrimes are offenses involving computers, networks, or electronic communications, prosecuted under both federal and state statutes. Federal law addresses unauthorized computer access through the Computer Fraud and Abuse Act[1], identity-related offenses through the identification-document fraud statute[2], and fraud schemes carried out by wire through the wire fraud statute.[3]

Overview

Cybercrime covers a range of conduct involving computers and electronic communications, including unauthorized access to computer systems, identity-related fraud, and schemes to defraud carried out through wire communications. Federal statutes address these acts directly, including the Computer Fraud and Abuse Act[1], the identification-document fraud statute[2], and the wire fraud statute.[3]These offenses often overlap with other categories discussed under white-collar crimes and property crimes. As with other offenses, the government generally must prove particular mental states, a topic discussed generally at mens rea, and cybercrime charges proceed through the same basic stages described at the criminal process step by step.

Computer Fraud and Abuse Act

The Computer Fraud and Abuse Act, codified at 18 U.S.C. § 1030, criminalizes a range of conduct involving unauthorized access to computers, including accessing a computer without authorization or exceeding authorized access to obtain certain protected information.[1]It also covers accessing a protected computer with intent to defraud and obtaining something of value, intentionally causing damage to a protected computer, trafficking in passwords, and transmitting threats to damage a protected computer with intent to extort money or other things of value.[1]Penalties vary by subsection and by whether the offense follows a prior conviction under the statute; some violations carry a maximum of one year of imprisonment, while others carry maximums of five, ten, or twenty years.[1]Conspiracy to commit, or attempt to commit, an offense under the statute is punished the same as the completed offense.[1]Because these cases turn on proof of the defendant's state of mind and the scope of any authorization granted, readers facing such charges may want to review elements of a crime and consider public defenders or other counsel.

Identity theft

Federal law addresses identity-related fraud primarily through 18 U.S.C. § 1028, which criminalizes the knowing production, transfer, or possession of false identification documents and authentication features, as well as the knowing transfer, possession, or use of another person's means of identification without lawful authority to commit or aid unlawful activity.[2]The statute defines terms such as "identification document," "authentication feature," and "document-making implement," which can include computer files or software specifically configured to produce false documents.[2]Penalties range up to 15 years for offenses involving government-issued documents, birth certificates, or driver's licenses, and up to 30 years where the offense facilitates an act of domestic or international terrorism; many other violations carry a maximum of five years or one year.[2]Identity theft charges often overlap with theft and larceny and white-collar crimes categories.

Wire fraud online

Online fraud schemes, including many internet-based scams, are frequently prosecuted under the wire fraud statute, 18 U.S.C. § 1343, which punishes anyone who devises a scheme to defraud or to obtain money or property by false pretenses and transmits or causes to be transmitted, by wire, radio, or television communication in interstate or foreign commerce, writings, signs, signals, pictures, or sounds to carry out that scheme.[3]A standard violation carries a fine or imprisonment of not more than 20 years, or both.[3]Where the violation involves a presidentially declared major disaster or emergency, or affects a financial institution, the maximum penalty increases to a $1,000,000 fine or imprisonment of not more than 30 years, or both.[3]Because wire fraud requires proof of an intent to defraud, cases often turn on the same mental-state questions discussed at mens rea, and may be charged alongside other federal crimes.

State computer crime laws

In addition to federal statutes, states maintain their own computer crime and identity theft laws, and the specific elements, definitions, and penalties vary from state to state. The sources available here describe only the federal framework under the Computer Fraud and Abuse Act, the identification-document fraud statute, and the wire fraud statute[1][2][3]; readers should not assume that a particular state's computer crime law mirrors these federal provisions. General background on how offenses are classified and punished across jurisdictions is available at felony vs misdemeanor vs infraction and crimes and offenses.

Entries in this section

Further entries planned for this section (not yet published):

Common questions

What is a cybercrime?

Cybercrime broadly refers to offenses involving computers, networks, or electronic communications, including unauthorized computer access, identity-related fraud using computer files or devices, and fraud schemes carried out by wire.[1][2][3]Federal statutes address different aspects of this conduct separately rather than through a single unified "cybercrime" law.[1][3]

What counts as unauthorized computer access?

Under the Computer Fraud and Abuse Act, unauthorized access includes knowingly accessing a computer without authorization or exceeding authorized access to obtain certain protected government, financial, or other information from a protected computer.[1]The statute also covers intentionally accessing a protected computer without authorization to further a fraud, cause damage, or traffic in passwords.[1]

Is identity theft always a federal crime?

Identity theft can be prosecuted under the federal identification-document fraud statute when the conduct involves lawful-authority violations such as producing or transferring false identification documents or using another person's means of identification to commit unlawful activity.[2]States also have their own laws addressing identity theft, and the elements and penalties differ by jurisdiction, though the sources here describe only the federal statute in detail.[2]

How is wire fraud different from the Computer Fraud and Abuse Act?

Wire fraud under 18 U.S.C. § 1343 punishes schemes to defraud that are carried out using wire, radio, or television communication in interstate or foreign commerce, regardless of whether a computer was accessed without authorization.[3]The Computer Fraud and Abuse Act instead focuses specifically on unauthorized or excessive access to computers and protected computer systems.[1]The two statutes can apply to the same underlying scheme if both unauthorized access and a wire-based fraud scheme are present.[1][3]

What penalties can apply to cybercrime convictions?

Penalties vary widely by statute and by the specific subsection charged. Computer Fraud and Abuse Act offenses can range from one year to twenty years of imprisonment depending on the subsection and any prior convictions[1], identification-document fraud offenses can range up to 30 years when tied to terrorism[2], and wire fraud carries up to 20 years, or up to 30 years and a $1,000,000 fine in disaster- or financial-institution-related cases.[3]

References

All sources retrieved November 2026.

  1. ^ a b c d e f g h i j k l m n o p q "18 U.S.C. § 1030". U.S. Code via Legal Information Institute. Retrieved November 2026.
  2. ^ a b c d e f g h i j k l m "18 U.S.C. § 1028". U.S. Code via Legal Information Institute. Retrieved November 2026.
  3. ^ a b c d e f g h i j k l m n "18 U.S.C. § 1343". U.S. Code via Legal Information Institute. Retrieved November 2026.