Fraudulent Transactions Criminal Code, s. 402.2, 403

Identity Theft and Fraud

Identity Theft and Fraud are when you use someone else's identity to commit theft or fraud or to impersonate them to gain benefit or to evade justice.

Last reviewed: July 2026 Section: Criminal Code, s. 402.2, 403 Procedure: Procedure depends on the section and facts
Jump to section

Plain-Language Summary

Identity Theft and Fraud: What Counts and What Happens Next

Identity theft and identity fraud both involve misusing someone else's personal information. Theft means keeping that information, planning to use it in a crime. Fraud means pretending to be someone else to gain something, such as property, or to cause harm. Theft carries up to 5 years. Fraud carries up to 10 years.

Identity Theft and Fraud: Section 402.2 (1) of the Criminal CodeA federal act codifying most criminal offences in Canada states that identity theftObtaining someone's identity information to commit a crime occurs when you obtain or possess someone else's identity information with the intention of using that to commit theft or fraud, while s.403 (1) of the Code states that identity fraudUsing another person's identity information for fraud, theft, or deception. involves impersonating someone to gain some benefit or to evade justice. Those found guilty of identity theft face up to five years in prison, with that maximum penalty doubled for identity fraud.

What is Identity Theft in Canada?

Section 402.2 (1) of the Criminal Code makes it a crime for you to obtain or possess another person's identity information with the intention of using it to commit an indictable offenceA more serious type of Canadian criminal offence. such as fraud or theft. Subsection 2 of that charge makes it an offence for you to sell or offer someone else's identity information, knowing that it may be used for an indictable offence. You can also be charged under this subsection if you are reckless about knowing what the identity information is to be used for. Common examples would be to create documents such as fraudulent passports, certificates of citizenship, credit cards or any other forged documents.

For both Identity theft and for Identity fraud, the Code states that "identity information" can be anything used alone or in combination with other information to identify, or purport to identify, an individual. Examples given include a fingerprint, voice print, DNA profile, digital signature, credit card number, health insurance number or a driver's licence.

What is Identity Fraud in Canada?

Section 403 (1) of the Code makes it an offence to fraudulently impersonate another person, living or dead, in order to gain property or financial benefit. You can also be charged if you impersonate someone with the intention of avoiding arrest or to obstruct the course of justice.

According to information from the Canadian Anti-Fraud Centre, as of July 31, 2021 more than 32,000 Canadians reported they were victims of fraud in 2021, losing $130 million to the crime.

What is Needed to Convict

For a Crown prosecutor to win an identity theft conviction, the court must be satisfied beyond a reasonable doubtThe high standard the Crown must meet to prove guilt. that you purposely possessed someone’s personal information with the intention of using it to obtain goods, services, or anything of value.

With identity fraud, the Crown has to prove that you purposely impersonated another person for your own financial benefit or to mislead investigators. With both charges, the Crown must prove that you knew your actions were illegal and they would cause someone else to suffer a monetary loss or deprivation of some variety.

Treated as Hybrid Offences

hybrid offenceAn offence the Crown can proceed with summarily or by indictment. falls between a summary and an indictable offence.

If you have been charged with identity theft, the Crown can prosecute it as an indictable offence with the maximum penalty of five years in prison. It can also be handled as a summary convictionLess-serious criminal offences, with a maximum penalty of two years less a day in jail.

If you have been charged with identity fraud, the maximum penalty is 10 years in prison if it is treated as an indictable offence, or two years less a day in jail if the charge is handled as a summary conviction.

Personation: identity fraud and personating an officer

"Impersonation" can describe more than one offence. Identity fraud under the Criminal Code deals with fraudulently personating another person to gain an advantage, obtain property, or obstruct justice.

Personating a peace officerPeople involved in upholding justice or a public officer is a separate offence with different elements. If you were searching for pretending to be a police officer, see our Personating a Peace Officer or Public Officer page.

What the Crown Must Prove

To get a conviction, the Crown must prove every part of the offence beyond a reasonable doubt.

Section

1

Identity theft (s.402.2(1))

The accused obtained or possessed another person's identity information (as defined in s.402.1 — e.g. name, date of birth, SIN, credit/debit card number, passport number, password, biometric data, etc.).

2

Intent to enable a listed or qualifying indictable offence

The accused intended to use that identity information to commit an indictable offence that includes fraud, deceit or falsehood as an element — s.402.2(3) expressly lists qualifying offences including forgery (s.366), fraud (s.380), identity fraud (s.403), false pretence (s.362), and others.

3

Trafficking in identity information (s.402.2(2)) — alternative basis

Alternatively, the Crown may prove the accused transmitted, made available, distributed, sold, or offered for sale another person's identity information (or possessed it for one of those purposes), knowing or being reckless as to whether it would be used to commit such an indictable offence.

4

Identity fraud (s.403(1)) — fraudulent personation

The accused fraudulently personated another person, living or dead — which under s.403(2) includes pretending to be that person or using their identity information (alone or combined with another's).

5

One of the four specified intents for s.403

The personation was done with intent to: (a) gain advantage for themselves or another person; (b) obtain property or an interest in property; (c) cause disadvantage to the person being personated or another person; or (d) avoid arrest or prosecution, or obstruct, pervert or defeat the course of justice.

6

No presumption applies

Neither s.402.2 nor s.403 contains a statutory presumption or reverse-onus proof rule — the Crown must prove intent/knowledge/recklessness as an ordinary element in each case.

A proof rule (a presumption) is a rule about evidence. It does not mean the person is automatically guilty. It means the court may treat one fact as evidence of another fact unless there is evidence pointing the other way.

Possible Penalties

These are maximum sentences. Actual sentences depend on the facts, criminal history, and any mitigating or aggravating circumstances.

Identity theft, or trafficking in identity information — s. 402.2

Hybrid
Maximum penalty (by indictment)
5 years
How it proceeds
Crown may proceed by indictment or summary conviction

Obtaining, possessing, or trafficking in identity information for use in an indictable offence involving fraud, deceit or falsehood. No mandatory minimum applies. On summary conviction, the general s. 787(1) default applies: a fine of up to $5,000, imprisonment for up to two years less a day, or both.

Identity fraud — fraudulently personating another person, living or dead — s. 403

Hybrid
Maximum penalty (by indictment)
10 years
How it proceeds
Crown may proceed by indictment or summary conviction

Personation with intent to gain advantage, obtain property, cause disadvantage, or avoid arrest or prosecution (s. 403(1)(a)–(d)). No mandatory minimum applies. On summary conviction, the general s. 787(1) default applies: a fine of up to $5,000, imprisonment for up to two years less a day, or both.

What these words mean
Indictable
The more serious way to prosecute an offence. It can carry higher maximum penalties.
Summary conviction
The less serious, usually faster way to prosecute an offence, with lower maximum penalties.
Hybrid
An offence the Crown can prosecute either way — by indictment or by summary conviction.
Summary only
Summary-only offences are prosecuted by summary conviction. The Criminal Code sets the maximum penalty in the specific offence section.
Crown election
The Crown prosecutor’s choice of which way to proceed on a hybrid offence.

Possible Defences and Legal Issues

Identity Theft and Fraud — ss.402.2, 403

Sections 402.2 and 403 do not list a special defence in the Criminal Code. The Crown still has to prove the parts of the offence, including the required intent, knowledge, or recklessness -- for example, that the accused obtained, possessed, sold, or transmitted "identity information" for a prohibited purpose, or fraudulently personated another person for one of the purposes listed in s.403(1), such as gaining an advantage or avoiding arrest.

Possible issues may still depend on the facts, the evidence, and whether the Crown can prove each part of the offence, including identity, whether what was used or possessed was "identity information", and whether it was used or possessed for a prohibited purpose. This is general legal information, not legal advice.

Common Legal Terms

Terms marked with a dotted underline in the article above are defined here and available in the full site glossary.

Beyond a reasonable doubt
Glossary entry →
The high standard the Crown must meet to prove guilt.
Hybrid offence
Glossary entry →
An offence the Crown can proceed with summarily or by indictment.
Indictable offence
Glossary entry →
A more serious type of Canadian criminal offence.
Peace officer
Glossary entry →
People involved in upholding justice
Summary offence
Glossary entry →
Less-serious criminal offences

Legal sources

The official statute section(s) this page is based on. Always confirm against the official source before relying on it.

  • Criminal Code s. 402.2 Identity theft and trafficking in identity information
    Source current to: 2026-05-26
    View official source ↗
  • Criminal Code s. 403 Identity fraud
    Source current to: 2026-05-26
    View official source ↗
  • Criminal Code s. 402.1 Definition of 'identity information'
    Source current to: 2026-05-26
    View official source ↗
  • Criminal Code s. 787 General summary-conviction penalty (default fallback for both sections)
    Source current to: 2026-05-26
    View official source ↗

Government References

Find a Criminal Defence Lawyer Near You

If you or someone you know is facing criminal charges, a criminal defence lawyer can review the situation and explain the options.

Search the Lawyer Directory

Criminal Code Help does not endorse or recommend specific lawyers.

Report an inaccuracy or concern about this page

Report an inaccuracy or concern about this page

Report: Identity Theft and Fraud

Use this form to report a possible error, outdated information, unclear wording, broken link, or other concern about this page.

This form is for page concerns only. Do not send confidential case details or legal questions.

Fields marked with * are required.

What are you reporting?
Please include the sentence, section, or issue you are concerned about.
Optional. You may include a link to legislation, a court decision, or another reliable source.
Optional.
Optional. Include your email only if you are willing to be contacted about this report.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.