Identity Theft and Personation Charges in Alberta: What You're Actually Facing

"Identity theft" in everyday speech covers a wide range of conduct. Under Canadian criminal law it covers a wider range still. The 2009 reform package enacted by Bill S-4 — An Act to amend the Criminal Code (identity theft and related misconduct), S.C. 2009, c. 28, assented to October 22, 2009 and brought into force on January 8, 2010 — created new identity-related offences and revised existing ones, covering the obtaining, trafficking, possession, and use of identity information, identity documents, and credit card data, alongside the offences of personating another person and personating a peace officer. The core of the framework operates in three stages: obtaining or possessing identity information, trafficking it, and using it to defraud. Each stage is its own offence, and the Crown can charge at any one of them or at more than one. Sentencing exposure runs from a hybrid five-year maximum for some provisions through to ten years for the credit-card, computer and identity-fraud offences.

This page explains the eight principal identity-related offences in the Criminal Code — section 56.1 (identity documents), section 130 (personating peace officer), section 342(1) and 342(3) (credit card theft, forgery, and unauthorized use of credit card data), section 342.01 (instruments for copying credit card data), section 342.1 (unauthorized use of computer), section 402.2 (identity theft and trafficking in identity information), and section 403 (identity fraud) — what the Crown must actually prove under each, how data-breach and dark-web-marketplace investigations are conducted, the s. 738(1)(d) victim-restitution provision that can follow a finding of guilt, and the Charter and substantive defences that engage. KJR Law represents people facing identity-related charges across Calgary and Southern Alberta.

Do Not Give a Statement Before You Speak with a Lawyer

Identity-related investigations can be technical and document-heavy, and some have been running for months by the time charges are laid. The Crown's case can rest on financial records, electronic device contents, surveillance, and statements the accused has made to police, banks, or fraud investigators. A statement offered to "clear things up" — about how the accused came to possess a piece of identification, about a credit card transaction, about a relationship with the named complainant — can supply elements the Crown would otherwise have to prove. You are not obliged to give the police a statement. Once a person is arrested or detained, s. 7 of the Canadian Charter of Rights and Freedoms protects the right to choose whether to speak to the authorities (R v Hebert, [1990] 2 SCR 151), and s. 10(b) gives the right to retain and instruct counsel without delay and to be told of that right. A bank's or merchant's fraud investigator is not the police, and what is said to them can come into the hands of police and become evidence. Call a lawyer first. Anything beyond that conversation can be prepared properly later.

What Counts as "Identity Information" — Section 402.1

Section 402.1 of the Criminal Code defines "identity information" as "any information — including biological or physiological information — of a type that is commonly used alone or in combination with other information to identify or purport to identify an individual." The statutory definition is non-exhaustive — it lists twenty examples but does not limit the section to those examples. The phrase "of a type that is commonly used" is the threshold that constrains the breadth: not every personal data point falls within the section, only data of a type commonly used to identify a person.

For navigation, the enumerated examples can be grouped (the groupings are presentational; the statute itself lists them as a single sequence):

• Biological and physiological data — fingerprints, voice prints, retina images, iris images, DNA profiles.
• Personal identifiers — names, addresses, dates of birth, written signatures, electronic signatures, digital signatures.
• Account credentials — user names, passwords.
• Financial identifiers — credit card numbers, debit card numbers, financial institution account numbers.
• Government-issued numbers — passport numbers, Social Insurance Numbers, health insurance numbers, driver's licence numbers.

The breadth of the definition matters because s. 402.1 defines the term for both identity theft under s. 402.2 and identity fraud under s. 403. Possessing identity information, even information relating to several people, is not by itself the offence under s. 402.2(1): the Crown must also prove the intent discussed below. Whether what the Crown has established is "identity information" of "another person," and whether the information is of a type commonly used for identification within the meaning of the section, can be contested.

The Eight Principal Offences

The Criminal Code provides eight principal identity-related offences. A single file can involve more than one of them, and the choice of which provisions to lay can substantially affect sentencing exposure. Every offence below is hybrid. None of the provisions specifies its own summary penalty, so on summary conviction each carries the general maximum under s. 787(1) of the Criminal Code: a fine of not more than $5,000, imprisonment for not more than two years less a day, or both. The indictable maxima vary by provision and are stated below.

Section 56.1 — Identity documents (5 years on indictment)

Section 56.1 makes it an offence, without lawful excuse, to procure to be made, possess, transfer, sell, or offer for sale an identity document that relates or purports to relate, in whole or in part, to another person. "Identity document" is defined more narrowly than "identity information," at s. 56.1(3) — Social Insurance Number cards, driver's licences, health insurance cards, birth certificates, death certificates, passports, documents that simplify the process of entry into Canada, certificates of citizenship, documents indicating immigration status in Canada, certificates of Indian status, employee identity cards bearing the employee's photograph and signature, and any similar document issued or purported to be issued by a department or agency of the federal, a provincial, or a foreign government. Section 56.1(2) confirms that the offence does not reach conduct carried out (a) in good faith, in the ordinary course of the person's business or employment, or in the exercise of the duties of their office; (b) for genealogical purposes; (c) with the consent of the person to whom the document relates, of a person authorized to consent on their behalf, or of the entity that issued the document; or (d) for a legitimate purpose related to the administration of justice. Hybrid offence. Maximum 5 years on indictment; 2 years less a day on summary conviction.

Section 130 — Personating a peace officer (5 years on indictment)

Section 130 makes it an offence to falsely represent oneself as a peace officer or public officer, or — not being a peace or public officer — to use a badge, article of uniform, or equipment in a manner likely to cause persons to believe one is a peace officer or public officer. Before the 2009 amendments enacted by S.C. 2009, c. 28, s. 2, s. 130 was a summary-conviction-only offence with the then-default six-month maximum under s. 787(1). It is now a hybrid offence with a maximum of 5 years on indictment and 2 years less a day on summary conviction. Paragraph (a) reaches a false representation; paragraph (b) reaches the use of a badge, uniform item, or equipment in a manner likely to create that belief, without any express claim to be an officer. Section 130.1 of the Criminal Code, added in 2014, requires the sentencing court to consider as an aggravating circumstance that the personation was carried out to facilitate the commission of another offence.

Section 342(1) — Theft, forgery, or fraudulent use of credit card (10 years on indictment)

Section 342(1) creates four discrete offences: (a) stealing a credit card, (b) forging or falsifying a credit card, (c) possessing, using, or trafficking in a credit card or a forged or falsified credit card, knowing it was obtained, made, or altered by the commission of an offence in Canada or by conduct elsewhere that would have been an offence had it occurred in Canada, and (d) using a credit card knowing it has been revoked or cancelled. Hybrid offence. Maximum 10 years on indictment; 2 years less a day on summary conviction. Where the credit card was physically taken from a wallet, found and used, or fabricated from skimmed information and re-encoded onto blank card stock, s. 342(1) is the operative provision.

Section 342(3) — Unauthorized use of credit card data (10 years on indictment)

Section 342(3) is the provision engaged where there is no physical card. It makes it an offence to fraudulently and without colour of right possess, use, traffic in, or permit another person to use credit card data, including personal authentication information, whether or not the data is authentic, that would enable a person to use a credit card or to obtain the services that are provided by the issuer of a credit card to credit card holders. Section 342(4) defines "personal authentication information" as a personal identification number or any other password or information that a credit card holder creates or adopts to authenticate their identity in relation to the credit card, and defines "traffic" as selling, exporting from or importing into Canada, distributing, or dealing in any other way with the credit card or credit card data. Depending on the facts, the provision can be engaged by card numbers stored in a phone, card data offered on a dark-web marketplace, card-not-present transactions conducted online, BIN attacks, skimmer data, and stored credentials. Hybrid offence. Maximum 10 years on indictment; 2 years less a day on summary conviction.

Section 342.01 — Instruments for copying credit card data (10 years on indictment)

Section 342.01 targets the apparatus side of card fraud. It makes it an offence, without lawful justification or excuse, to make, repair, buy, sell, export from Canada, import into Canada, or possess any instrument, device, apparatus, material, or thing that the person knows has been used, or knows is adapted or intended for use, (a) in copying credit card data for use in an offence under s. 342(3), or (b) in forging or falsifying credit cards. Depending on the evidence of knowledge, skimming devices, magnetic stripe writers, blank card stock with magnetic strips, point-of-sale overlays, ATM skimmers, and "carding" software can fall within the section. On conviction, the items can be ordered forfeited (s. 342.01(2)), but not property of a person who was not a party to the offence (s. 342.01(3)). Hybrid offence. Maximum 10 years on indictment; 2 years less a day on summary conviction.

Section 342.1 — Unauthorized use of computer (10 years on indictment)

Section 342.1 covers the computer side of identity-related conduct. It makes it an offence, fraudulently and without colour of right, to obtain any computer service; to intercept any function of a computer system by means of a device; to use a computer system with intent to commit either of those offences or an offence under s. 430 in relation to computer data or a computer system; or to use, possess, traffic in, or permit another person to have access to a computer password that would enable any of the foregoing. Depending on the facts, the section can be engaged by credential-stuffing attacks, account takeovers, SIM swapping, and unauthorized access to email or financial accounts. Hybrid offence. Maximum 10 years on indictment; 2 years less a day on summary conviction.

Section 402.2(1) — Identity theft (5 years on indictment)

Section 402.2(1) makes it an offence to obtain or possess another person's identity information "with intent to use it to commit an indictable offence that includes fraud, deceit or falsehood as an element of the offence." The provision targets the preparatory stage — obtaining or holding identity information before any fraud has been attempted. The Crown does not have to prove a completed fraud or even an attempt. It must prove the obtaining or possession, and the accused's intent to use the information to commit such an offence. Hybrid offence. Maximum 5 years on indictment; 2 years less a day on summary conviction.

Section 402.2(2) — Trafficking in identity information (5 years on indictment)

Section 402.2(2) is the parallel trafficking provision. It targets transmitting, making available, distributing, selling, offering for sale, or possessing for any of those purposes another person's identity information, knowing or being reckless as to whether the information will be used to commit an indictable offence that includes fraud, deceit, or falsehood as an element. The provision addresses the data-breach economy — identity information moves through dark-web marketplaces, encrypted channels, and forums, and s. 402.2(2) is the provision the Crown uses to prosecute participation at the trafficking stage. Hybrid offence. Maximum 5 years on indictment; 2 years less a day on summary conviction.

Section 403 — Identity fraud (personation) (10 years on indictment)

Section 403 — formerly "personation with intent" — is the use-stage provision. It makes it an offence to fraudulently personate another person, living or dead, with intent to (a) gain advantage for oneself or another person, (b) obtain any property or interest in property, (c) cause disadvantage to the person being personated or another person, or (d) avoid arrest or prosecution, or obstruct, pervert, or defeat the course of justice. Section 403(2) makes clear that "personating" includes pretending to be the person or using the person's identity information, alone or in combination with other identity information, as if it pertains to the user. The provision can reach card-not-present fraud using stolen data, opening bank accounts in another person's name, and giving another person's name on arrest to avoid prosecution. Hybrid offence. Maximum 10 years on indictment; 2 years less a day on summary conviction.

The Three-Stage Architecture: Obtain → Traffic → Use

The Bill S-4 reform package was designed around a three-stage understanding of how identity-related crime operates. Identity information is first obtained — through data breach, phishing, skimming, theft of physical documents, social engineering, or unauthorized access to systems. It is then trafficked — sold on dark-web marketplaces, transferred between groups, packaged with other data points to create more complete identity sets. And finally it is used — to open fraudulent accounts, apply for credit, conduct card-not-present transactions, file false tax returns, or personate the victim in other dealings. Section 402.2(1) targets the obtain-and-possess stage. Section 402.2(2) targets the traffic stage. Section 403 targets the use stage. A single accused can be charged at any one stage or at more than one, including on the same information. Understanding which stage the Crown's case actually rests on, and where the evidence is thinnest, is the defence-side starting point.

The Intent Element Under Section 402.2(1)

Since its amendment in 2018 (S.C. 2018, c. 29, s. 45), s. 402.2(1) requires the Crown to prove that the accused obtained or possessed another person's identity information with intent to use it to commit an indictable offence that includes fraud, deceit, or falsehood as an element. The Crown does not have to prove that a fraud was completed or attempted, but it must prove that intent. Section 402.2(3) clarifies that the qualifying indictable offences include forgery of or uttering a forged passport (s. 57), fraudulent use of a certificate of citizenship (s. 58), personating a peace officer (s. 130), perjury (s. 131), the credit-card offences in s. 342, false pretence or false statement (s. 362), forgery (s. 366), use, trafficking or possession of a forged document (s. 368), fraud (s. 380), and identity fraud (s. 403). Before 2018, the subsection was framed around circumstances supporting a reasonable inference that the information was intended for such use, rather than proof of the accused's intent; decisions on the earlier wording need to be read with the change in mind.

Intent is usually not admitted, and the Crown may seek to prove it from the circumstances of the possession. Where the case on intent is circumstantial, guilt must be the only reasonable inference available on the evidence as a whole.

Circumstances the Crown may point to. Identity information held in volume (multiple persons' data), held in conjunction with apparatus (skimming devices, card-writing equipment), held alongside other indicia of fraud preparation (counterfeit document templates, instruction lists, lists of merchant targets), or held by a person with no apparent legitimate reason to possess it (not a family member, not an employer, not a legal representative).

Circumstances that can bear against the inference. Information that came into possession through a plausible legitimate channel (a relative's documents during estate administration, a former employer's records held following separation, documents found and not yet returned), information held in a context consistent with the lawful purpose for which the accused acquired it, or information whose presence is inadvertent (data received in a forwarded email or shared cloud drive). The defence work involves engaging with the totality of the circumstances and testing whether intent is the only reasonable inference the evidence supports.

Modern Investigation Patterns

Identity-related prosecutions in Alberta can originate in several ways:

• Bank fraud-investigation referrals. Financial institutions' fraud-investigation units can refer files to police where unauthorized transactions, account takeovers, or suspected identity-information misuse have occurred. The internal bank investigation may already have produced a substantial document set before any criminal investigation begins.
• Canadian Anti-Fraud Centre referrals. The Canadian Anti-Fraud Centre, operated jointly by the RCMP, Competition Bureau, and Ontario Provincial Police, receives and analyzes complaints of fraud and identity theft and can refer matters to local police of jurisdiction.
• Traffic-stop or arrest discoveries. Identity-related charges can arise from unrelated investigations — for example, a vehicle search incident to an unrelated arrest that turns up credit cards in other persons' names, a phone seizure that turns up stored identity information, or a residence search that turns up a notebook of credentials.
• Cybercrime unit investigations. Police cybercrime units, including the RCMP's National Cybercrime Coordination Centre, investigate dark-web marketplaces, credential-stuffing operations, and organized identity-information trafficking.
• Victim complaints. A person notices unauthorized accounts in their name, unauthorized charges, or evidence of personation, and reports the matter to police, triggering an investigation that traces the misuse back to a suspect. On a s. 402.2 or s. 403 charge, that person's account can now be tendered by affidavit under s. 657.4 (discussed below).

These investigations can produce voluminous digital and documentary disclosure: financial records, device contents, surveillance footage, statements from the victim, statements from bank investigators, and expert evidence from cybercrime analysts. The defence-side scrutiny of how each piece of evidence was obtained — and what it actually establishes — is the core of these files.

The Defences in Play

Defence issues that can arise in identity-related files:

Knowledge — the accused did not know. Possession-based offences (ss. 56.1, 342, 402.2) all require the Crown to prove the accused knew of the presence of the information or document. Where the documents or information were on a shared device, in a shared residence, or in a vehicle the accused did not exclusively control, the knowledge element is open to argument. The Crown may attempt to bridge the gap with the doctrine of wilful blindness — but wilful blindness has its own elements and is itself contestable on the facts.

Lawful excuse — section 56.1. Section 56.1(1) applies only to conduct "without lawful excuse," and s. 56.1(2) confirms that it does not reach conduct carried out in good faith in the ordinary course of business or employment or in the exercise of the duties of office; for genealogical purposes; with consent (of the person, of someone authorized on their behalf, or of the issuing entity); or for a legitimate purpose related to the administration of justice. Where the accused's possession of an identity document fits one of these categories, the conduct falls outside the offence.

Colour of right and absence of fraudulent purpose — sections 342 and 342.1. Section 342(3) and s. 342.1 both require the Crown to prove the conduct was "fraudulently and without colour of right." An honest belief in a legal entitlement to use the card data or computer service — for example, in a family or business setting where authorization was understood — can raise a reasonable doubt on that element. Stealing a credit card under s. 342(1)(a) incorporates theft, which itself requires that the taking or conversion be fraudulent and without colour of right (s. 322(1)); s. 342(1)(b) to (d) are framed instead on forging or falsifying, knowledge of the card's criminal origin, and knowledge of revocation or cancellation.

The intent element — section 402.2(1). The Crown must prove that the accused obtained or possessed the information with intent to use it to commit an indictable offence that includes fraud, deceit, or falsehood as an element. Possession alone, even of information belonging to several people, does not establish that intent. Defence work on this element involves presenting the legitimate context for the possession and testing whether intent is the only reasonable inference on the evidence as a whole.

Identification. Where credit card transactions occurred remotely, where dark-web activity is attributed by IP address, or where the Crown's identification of the accused as the user of an account is circumstantial, identification can be contested. IP attribution is itself contestable — shared connections, VPNs, compromised home networks, and proxy servers can, depending on the evidence, raise a reasonable doubt.

Proof of non-consent by affidavit — section 657.4. In proceedings for an offence under s. 402.2 or s. 403, s. 657.4 allows the Crown to tender the evidence of the person whose identity information was used, or was obtained or possessed with intent to be used, by affidavit or solemn declaration. Under s. 657.4(2), the person "shall state" (a) "that the person is the person whose identity information was used or intended to be used to commit the offence"; (b) "the nature of the identity information that was used or intended to be used to commit the offence"; (c) "that the person did not consent to the use of their identity information by the accused"; and (d) "any facts within the personal knowledge of the person relied on to justify the statements referred to in paragraphs (b) and (c)." A compliant affidavit or declaration is admissible and, in the absence of evidence to the contrary, is evidence of its statements without proof of the signature (s. 657.4(1)). Unless the court orders otherwise, it cannot be received unless the prosecutor has, before the trial or other proceeding, given the accused a copy and reasonable notice of the intention to produce it (s. 657.4(3)). The court may require the person to appear for examination or cross-examination on any of the statements (s. 657.4(4)). Section 657.4 came into force on July 18, 2026 (S.C. 2026, c. 19, s. 52) and applies to any matter or proceeding ongoing on that date, whatever the date of the alleged offence (c. 19, s. 109). It does not apply to charges under ss. 56.1, 130, 342, 342.01, or 342.1. Where consent, the nature of the information, or the facts relied on are in issue, s. 657.4(4) is the statutory route to having the person attend and be cross-examined.

Charter section 8 — search and seizure. Device searches, account-information production orders under s. 487.014 of the Criminal Code, IP-to-subscriber resolutions under R v Spencer, 2014 SCC 43 and R v Bykovets, 2024 SCC 6 (the latter extending Spencer upstream to the IP address itself), computer-search authorizations under R v Vu, 2013 SCC 60, phone searches incident to arrest under the narrow limits in R v Fearon, 2014 SCC 77, and shared-device consent under R v Reeves, 2018 SCC 56 are all reviewable. For text-message evidence, R v Marakah, 2017 SCC 59 establishes that the subject matter of the search is the electronic conversation itself, and that a sender can retain a reasonable expectation of privacy in sent messages even when they are recovered from the recipient's device. Its companion decision R v Jones, 2017 SCC 60 extends the privacy framework to historical text-message records obtained from a service provider by production order. R v Campbell, 2024 SCC 42 reaffirms Marakah and refines the analysis: the Charter inquiry is content-neutral, focused on the potential of an electronic conversation to reveal biographical core information rather than on whether the actual content turns out to be mundane or criminal. Campbell also holds that police impersonation of a participant in a text-message conversation is itself a "search" requiring lawful authority. Where a warrant or other authorization was issued, the question on review is not whether the reviewing judge would have issued it, but whether, on the record before the issuing justice — with misleading information excised, and amplified only to correct good-faith errors — it could have issued (R v Garofoli, [1990] 2 SCR 1421; R v Morelli, 2010 SCC 8). Where it could not, or where digital evidence was obtained in breach of one of these frameworks, the evidence may be excluded under s. 24(2) on the Grant analysis. Exclusion is not automatic.

Limits on the Charter framework — identifying information voluntarily provided to commercial counterparties. The Charter does not protect every piece of personally-identifying information held by a third party. In R v Neumann, 2023 ABCA 200, the Alberta Court of Appeal held that a name and cell phone number, without more, voluntarily given to businesses in the ordinary course (a motel registration card, a car dealership's service records) did not attract an objectively reasonable expectation of privacy where police obtained them only to apply for judicially authorized tracking and transmission-data warrants, and distinguished the internet subscriber information in Spencer. The Charter analysis is sensitive to the specific information at issue, the nature of the third-party relationship, and the contractual privacy framework that governs the holding of the information. Defence-side framing of Charter applications in identity-related files needs to engage Neumann alongside the broader privacy line, not assume that all third-party identifying information is equally protected.

Warrantless commercial-counterparty information requests and pinging. At the trial level in Ontario, R v Campbell, 2024 ONSC 3924 (a separate case from the SCC decision above, involving a different accused) held that a warrantless request to a service provider for subscriber information, followed by location-pinging without judicial authorization, was not saved by "exigent circumstances" where the police waited eight hours to contact the provider and where the asserted exigency was, on the facts, expediency rather than imminent risk. The Charter line between exigent and expedient is one that defence counsel litigate when the disclosure shows time was available to obtain a warrant.

Charter sections 9 and 10 — detention and right to counsel. Statements taken without the accused having been advised of the right to counsel — or after a request for counsel was not facilitated — and detentions effected without lawful authority can support exclusion under s. 24(2). R v Grant, 2009 SCC 32 governs the admissibility analysis. Where the Crown's case rests substantially on statements the accused made during the investigation, Charter litigation on the admissibility of those statements can substantially reshape the file.

Sentencing, Restitution, and Collateral Consequences

Identity-related sentencing ranges widely, depending on the provision charged and the scale of the conduct. A first-offence s. 402.2(1) finding of guilt for a small-scale possession can attract a non-custodial disposition — a discharge, a suspended sentence with probation, a conditional sentence, or a fine. A serious s. 403 personation involving large-value fraud, sophisticated planning, and multiple victims can attract multi-year penitentiary sentences. The Crown's election and the breadth of the file are significant factors.

Conditional sentences — section 742.1. A conditional sentence under s. 742.1 of the Criminal Code is available for the identity-related offences on this page, subject to one exception noted below. None of them carries a minimum term of imprisonment (s. 742.1(b)). None is among the offences listed in s. 742.1(c) — attempted murder sentenced under s. 239(1)(b), torture (s. 269.1), and advocating genocide (s. 318), to which, for offences committed on or after July 15, 2026, Parliament added sexual assault with a weapon, threats to a third party or causing bodily harm (s. 272) and aggravated sexual assault (s. 273), in any mode. The bars added on the same date for certain sexual offences prosecuted by indictment (s. 742.1(c.1) and (c.2)) do not reach these offences either. Offences committed before July 15, 2026 take the pre-amendment s. 742.1, whose paragraph (c) named only ss. 239(1)(b), 269.1 and 318. The exception is s. 742.1(d), which bars a conditional sentence for a terrorism offence, or a criminal organization offence prosecuted by indictment with a maximum term of 10 years or more. That bar can reach the 10-year identity offences (ss. 342, 342.01, 342.1, 403) where they are prosecuted by indictment as criminal organization offences. Otherwise, a conditional sentence may be imposed where the court imposes imprisonment of less than two years and is satisfied that serving the sentence in the community would not endanger the safety of the community and would be consistent with the fundamental purpose and principles of sentencing in ss. 718 to 718.2.

A discharge under s. 730(1) is also legally available for each identity-related offence on this page, because none carries a minimum punishment or a maximum of 14 years or life; the test is whether a discharge is in the accused's best interests and not contrary to the public interest. A companion count is assessed on its own terms. No discharge is available for fraud over $5,000 (s. 380(1)(a)) or possession of forgery instruments (s. 368.1), both of which carry 14-year maxima. Where a companion fraud is prosecuted on indictment and the total value of the subject matter exceeds $1 million, s. 380(1.1) prescribes a minimum term of two years' imprisonment. At any sentencing on or after July 18, 2026, whatever the offence date, s. 718.4 requires the court to impose a shorter term where the minimum would amount to cruel and unusual punishment for that offender; the shorter term is still a minimum term of imprisonment (s. 718.4(5)), so it opens neither a conditional sentence (s. 742.1(b)) nor a discharge (s. 730(1)).

Section 738(1)(d) — restitution for re-establishing identity. A feature of the 2009 reform package that distinguishes identity-related sentencing from most other offences is the restitution provision at s. 738(1)(d) of the Criminal Code. Where an offender is convicted of, or discharged under s. 730 of, an offence under s. 402.2 or s. 403, the court may order the offender to pay restitution to a person who, as a result of the offence, incurs expenses to re-establish their identity — including expenses to replace identity documents and to correct credit history and credit rating — in an amount that is not more than the amount of those expenses, to the extent that they are reasonable, if the amount is readily ascertainable. The paragraph is confined to s. 402.2 and s. 403; for the credit-card and other offences, restitution for lost property is sought under the general provision at s. 738(1)(a), which is limited to replacement value where readily ascertainable. The offender's financial means or ability to pay does not prevent an order (s. 739.1). For offences committed on or after July 18, 2026, an unpaid payment requirement in a probation or conditional sentence order is deemed to continue as a restitution order when the order ends (s. 740.1). The "reasonable" and "readily ascertainable" qualifiers are where quantum can be contested.

Section 380.1 sentencing framework — where companion fraud is laid. Identity-related files can include a companion fraud charge under s. 380, which carries a 14-year maximum where the value of the subject matter exceeds $5,000. On a sentencing for an offence referred to in s. 380, 382, 382.1, or 400, s. 380.1(1) directs the court to consider as aggravating circumstances (a) the magnitude, complexity, duration, or degree of planning of the fraud; (b) any adverse effect or potential adverse effect on the stability of the Canadian economy, financial system, or financial markets, or investor confidence in such a market; (c) a large number of victims; (c.1) significant impact on victims given their personal circumstances, including age, health, and financial situation; (d) the offender's taking advantage of the high regard in which the offender was held in the community; (e) non-compliance with any licensing requirement or professional standard normally applicable; and (f) concealment or destruction of records related to the fraud or the disbursement of its proceeds. Section 380.1(2) goes the other way: where the offender's employment, employment skills or status, or reputation in the community were relevant to, contributed to, or were used in the commission of the offence, the court "shall not consider" those circumstances as mitigation. On a conviction, or a conditional discharge, for fraud under s. 380(1), s. 380.2 also permits an order prohibiting employment or volunteer work that involves authority over another person's real property, money, or valuable security. These provisions apply to the companion fraud sentencing; they do not directly govern sentencing on the s. 402.2 or s. 403 conviction itself, but the factors animate the same sentencing record.

Beyond the criminal sentence:

• Criminal record consequences. A conviction for an identity-theft or personation offence appears on a criminal record and can affect employment, professional licensing, security clearances, and travel.
• Civil liability. A criminal conviction or admission can support parallel civil recovery actions by financial institutions, the persons whose information was used, and any business affected by the fraud.
• Banking relationships. A conviction for a credit-card or identity offence can affect banking relationships, including account closures, withdrawal of credit, and refusal of future banking products.
• Immigration consequences. For permanent residents, a conviction for an offence with a 10-year maximum (ss. 342, 342.01, 342.1, 403) is serious criminality under s. 36(1)(a) of the Immigration and Refugee Protection Act; a conviction under ss. 56.1, 130, or 402.2 (5-year maximum) reaches that threshold if a term of imprisonment of more than six months is imposed. For foreign nationals, the criminality ground can reach any of these offences, because s. 36(3)(a) treats a hybrid offence as indictable even when it was prosecuted summarily. Immigration advice is needed before any charge is resolved.
• Travel. Whether a conviction affects entry to the United States turns on United States law, not on Canadian classifications; advice from United States immigration counsel is needed before travel.
• Computer-related conditions. Probation and conditional sentence orders can include reasonable conditions restricting computer use, internet access, or possession of credentials where the offence involved them.

Companion Charges

An identity-related information can contain more than one count. Charges that can accompany identity offences include:

• Fraud — s. 380. Where the identity-theft conduct produced a completed fraud, a fraud charge may accompany the identity charge. Fraud over $5,000 carries a 14-year maximum and engages the s. 380.1 sentencing framework discussed above.
• Possession of property obtained by crime — s. 354. Where the accused was found with goods purchased through the fraud, a possession charge may be laid.
• Forgery and uttering forged document — ss. 366 to 368. Where counterfeit documents (cheques, identification, contracts) are involved.
• Possession of forgery instruments — s. 368.1. Where instruments, devices, or materials known to have been used, or known to be adapted or intended for use, to commit forgery are seized. Hybrid; 14-year maximum on indictment.
• Devices for unauthorized computer use or mischief — s. 342.2. Where a device designed or adapted primarily to commit an offence under s. 342.1 or s. 430 is seized. Hybrid; 2-year maximum on indictment.
• Mischief in relation to computer data — s. 430(1.1). Where unauthorized access destroyed, altered, or interfered with computer data.
• Conspiracy — s. 465. Where the Crown alleges the conduct was part of an agreement to commit an offence.
• Criminal organization offences — ss. 467.11 to 467.13. Where the alleged conduct is connected to organized identity-information trafficking. Where an offence was committed for the benefit of, at the direction of, or in association with a criminal organization, s. 718.07 directs the court to give primary consideration to denunciation and deterrence. Parliament has directed that s. 718.07 applies to matters pending on July 15, 2026; its application to offences committed before that date may be contested. See also the s. 742.1(d) conditional-sentence bar discussed above.

Where We Appear

We act on identity-related files in the Alberta Court of Justice, the Court of King's Bench of Alberta, and the Court of Appeal of Alberta. From our Calgary office we travel to court in Airdrie, Cochrane, Canmore, Okotoks, Diamond Valley, Didsbury, Strathmore, Drumheller, Hanna, Brooks, Medicine Hat, Lethbridge, Fort Macleod, Taber, Pincher Creek, and Cardston, and we appear in matters arising on the Tsuut'ina, Siksika, and Kainai (Blood Tribe) Nations.

The First Conversation Is Free.

Identity-related files call for careful work on the technical foundations of the Crown's case — what was actually obtained, what the evidence shows about intent, what the digital forensics actually establish, and what the Charter status of the underlying searches and authorizations is. Early engagement gives counsel the time to review disclosure carefully, identify the seams in the Crown's theory, and frame the resolution conversation accordingly.