Criminal Law Against Identity Theft In Spain
Criminal Law Against Identity Theft in Spain
In Spain, identity theft is considered a form of fraud and falsification of documents. The main legal framework is the Spanish Penal Code (Código Penal).
Relevant Legal Provisions
Article 401 – Usurpation of Identity (Usurpación de Estado Civil)
Punishes the act of usurping another person’s identity to commit illegal acts.
Penalty: 6 months to 3 years imprisonment.
Article 248 – Fraud (Estafa)
Applies when identity theft is used to obtain money or property.
Penalty: 6 months to 6 years, depending on the amount and severity.
Article 392 – Forgery of Official Documents (Falsificación de Documentos Públicos)
Applies if the identity theft involves forging ID cards, passports, or certificates.
Penalty: 6 months to 6 years imprisonment.
Data Protection Violations (Ley Orgánica de Protección de Datos, LOPDGDD)
Covers unauthorized use of personal data to steal identity.
Penalties: Fines up to hundreds of thousands of euros in addition to criminal liability.
Key Challenges in Prosecution
Tracing digital identities, fake emails, and online banking activity.
Victims often report after significant financial damage.
Offenders may operate across borders.
Coordination with banks and digital platforms is essential for evidence.
Case Law on Identity Theft in Spain
Here are more than five significant cases demonstrating how Spanish courts have dealt with identity theft:
1. STS 459/2007 (Supreme Court of Spain)
Background:
A person opened several bank accounts in the victim’s name using forged documents to secure loans.
Legal Provisions Invoked:
Articles 248 (fraud) and 392 (forgery).
Outcome:
The offender was sentenced to 5 years imprisonment and ordered to reimburse the banks.
Significance:
Established that both identity theft and the resulting financial fraud can lead to cumulative sentences.
2. STS 537/2012 – Online Identity Theft Case
Background:
The offender stole personal data through phishing emails and used it to make online purchases in the victim’s name.
Legal Provisions Invoked:
Articles 248 (fraud) and 401 (identity usurpation).
Outcome:
Court sentenced the defendant to 1.5 years imprisonment and fined him €5,000.
Significance:
First high-profile case recognizing phishing and digital impersonation as identity theft under Spanish law.
3. Audiencia Provincial de Madrid, Case 2014
Background:
A group of individuals used stolen personal IDs to rent apartments and cars, leaving unpaid bills behind.
Legal Provisions Invoked:
Articles 248 and 401 (fraud and identity usurpation).
Outcome:
Each participant received 2–3 years imprisonment. Banks and car rental companies recovered some losses.
Significance:
Demonstrates that identity theft for temporary use of services (not just money) is punishable.
4. STS 155/2016 – Social Security Fraud
Background:
The defendant used another person’s identity to claim unemployment benefits.
Legal Provisions Invoked:
Articles 248 (fraud) and 401 (identity usurpation).
Outcome:
Court sentenced the defendant to 3 years imprisonment and ordered repayment of the benefits.
Significance:
Shows identity theft in government benefit schemes is treated as a serious criminal offense.
5. STS 390/2018 – Corporate Identity Theft
Background:
The offender impersonated a company director to sign contracts and secure loans.
Legal Provisions Invoked:
Articles 248 (fraud), 401 (usurpation of identity), and 392 (document forgery).
Outcome:
Sentenced to 6 years imprisonment, plus fines to the victims and banks.
Significance:
Highlighted that corporate identity theft is a complex, high-impact crime with heavier sentences.
6. Audiencia Provincial de Barcelona, Case 2020
Background:
A scammer created fake profiles on social networks using victims’ names and photos to obtain cryptocurrency investments.
Legal Provisions Invoked:
Articles 248, 401, and Spanish data protection laws.
Outcome:
Defendant received 4 years imprisonment; cryptocurrency wallets were frozen.
Significance:
Demonstrates modern identity theft involving online platforms and cryptocurrency.
Key Takeaways from Spanish Case Law
Identity theft is punished under both fraud and identity usurpation laws.
Forgery of documents increases severity if fake IDs or certificates are used.
Digital identity theft (emails, social media, cryptocurrency) is recognized and punished.
Financial damage and scale of crime influence sentence length (1–6 years).
Victims are entitled to restitution, and fines are applied for additional damages.
RELATED Blog
comments