Identity Theft Lawyer | What Counts as Identity Theft and How Defense Strategy Is Built
Summary
Identity theft (명의도용) in Korean criminal practice usually refers to using another person's name, resident registration number, or personal information without their consent to sign up for a service, open an account, or complete a transaction. Depending on what was actually done, it can be prosecuted under the Resident Registration Act (주민등록법), the Personal Information Protection Act (개인정보보호법), or combined with fraud (형법 제347조) or private document forgery (형법 제231조). Because these statutes require intentional and unauthorized use, whether you knew the information wasn't yours to use - and how far you actually used it - are usually the two things that determine whether this becomes a minor administrative fine or a criminal record.
Criminal · CyberRelated Law: Personal Information Protection ActRelated Law: Resident Registration Act
Identity Theft | How the Charge Is Structured
There is no single 'identity theft crime' in the Korean Criminal Act. Instead, prosecutors piece together whichever statute fits the facts - and which one they pick changes both the potential penalty and the available defenses.
Unauthorized Use of Resident Registration Number
Using another person's resident registration number without permission - for example, to sign up for a website, open a bank account, or register a phone line - can be charged under the Resident Registration Act, which prohibits using another's resident registration number in an unlawful manner (주민등록법 제37조). This is the most commonly cited provision in everyday 'used my sibling's/parent's ID' cases.
Personal Information Protection Act Angle
If the case involves collecting, processing, or providing someone's personal information beyond what they consented to, the Personal Information Protection Act's provisions on unlawful acquisition and use of personal information can also apply (개인정보보호법 제59조, 제71조). This is common when the information was obtained from a third source (e.g., a leaked database) rather than directly from the victim.
When It Becomes Forgery or Fraud
If you filled out and submitted a document (like a contract or application) in someone else's name, that can separately trigger private document forgery and uttering charges (형법 제231조, 제234조). If the identity was used to obtain money, goods, or a loan, fraud charges (형법 제347조) may be added on top. These add-on charges are often what turn a low-level case into a more serious one.
Identity Theft | Why Intent and Scope of Use Are the Real Battleground
Almost every identity theft statute requires that the person knew the information belonged to someone else and used it without consent. In practice, most defense arguments focus on undercutting one of those two elements, or on showing the use was narrow and caused no real harm.
Did You Know It Wasn't Yours to Use?
A common real-world scenario is using a family member's name with their casual, verbal permission at the time, only for that person to later deny consenting or to have forgotten giving it. Because the statutes require an unlawful/unauthorized act, contemporaneous evidence of consent (texts, call records, shared accounts) can be decisive.
How Far Did the Use Actually Go?
Investigators and prosecutors look closely at whether the information was used once for a minor sign-up, or repeatedly to open multiple accounts, obtain credit, or extract money. A narrow, one-off use with no financial gain is treated very differently from a pattern of use across several platforms, even under the same statute.
Was There Actual Harm to the Named Person?
Whether the person whose identity was used suffered financial loss, credit damage, or had to spend time correcting records affects both the victim's willingness to settle and the severity prosecutors and courts assign to the case. Documenting that no such harm occurred - or that it was promptly remedied - is a standard part of building a defense.
Identity Theft | When Multiple Statutes Overlap in One Case
Because identity theft sits at the intersection of several laws, one set of facts can generate multiple separate charges. Understanding which ones actually apply - and which are being over-charged - is central to negotiating a resolution.
Resident Registration Act vs. Personal Information Protection Act
These two statutes can apply to overlapping conduct, but they protect slightly different interests: one focuses specifically on the resident registration number system, the other on personal information generally (개인정보보호법 제59조, 주민등록법 제37조). A defense may argue that only one, not both, should properly apply to avoid double punishment for the same act.
Aggravating Combination with Fraud
If the identity use resulted in obtaining a loan, a mobile phone contract, or goods on credit, prosecutors often add a fraud charge (형법 제347조), which carries materially different sentencing considerations than the identity-related statutes alone. Separating what was identity misuse from what was actually fraudulent inducement is often a key defense task.
Victim Complaint and Settlement
For some of these offenses, an agreement with the person whose identity was used, or a formal complaint withdrawal, can materially affect how the case is resolved at the investigation or sentencing stage. Whether a given charge is one that permits this kind of resolution depends on the specific statute involved, which is worth checking early.
Identity Theft | From Receiving a Police Notice to Case Resolution
1
Initial Case Review We review the police or prosecution notice, the specific statutes cited, and the underlying facts to identify which charges are actually supportable and which are overreach.
2
Evidence Gathering We collect evidence relevant to intent and consent - messages, call logs, account histories - and evidence relevant to scope of use and any harm (or absence of harm) to the named person.
3
Police/Prosecutor Interview Preparation Before any interview, an identity theft lawyer in Seoul or elsewhere on our team can help you prepare a consistent, accurate account and flag questions that carry legal risk if answered imprecisely.
4
Victim Communication and Settlement Where appropriate, we explore contact with the person whose identity was used, including remediation of any harm and a possible settlement or complaint withdrawal, where the specific charge allows this to matter.
5
Formal Response and Advocacy We prepare written opinions to the prosecutor or, if the case proceeds to court, defense briefs addressing intent, scope of use, and any overlapping-charge issues.
6
Case Conclusion Depending on the stage and severity, the case may end in a non-prosecution disposition, a summary fine, or a court judgment; we explain what each outcome means going forward.
Identity Theft | How Legal Fees Are Structured
Retainer Fee Typically set based on the stage of the case (police investigation only vs. prosecution vs. trial) and the number of separate statutes charged, since each additional charge requires separate legal analysis.
Success Fee If used, this is tied to a defined outcome such as a non-prosecution decision or a reduction from indictment to summary proceedings, not to a guaranteed result, and is agreed in advance in the retainer contract.
Victim Settlement Costs If settlement or remediation payments to the person whose identity was used are part of the strategy, these are separate from legal fees and depend on the harm actually caused.
Additional Proceedings If the case also involves a civil claim from the victim or a separate administrative fine process under the Personal Information Protection Act, handling those may involve additional fee arrangements.
※ Costs vary depending on case complexity and specific circumstances; exact fees will be provided during consultation. No specific outcome is guaranteed.
Identity Theft | Self-Check Before Your Consultation
1️⃣ Understanding What You're Accused Of
Do you know exactly which statute(s) the notice cites - Resident Registration Act, Personal Information Protection Act, or the Criminal Act?
Is the accusation about a single sign-up/transaction, or a pattern across multiple platforms?
Did the use involve obtaining money, goods, or a loan, or was it purely administrative (e.g., a sign-up)?
Has anyone besides the named person (e.g., a company, a platform) also filed a complaint?
2️⃣ Evidence of Consent or Relationship
Do you have any messages, calls, or witnesses showing the person agreed to let you use their information, even informally?
Was this a family member or close acquaintance, and did you regularly share access to accounts or documents before?
Has the named person changed their account of events since the complaint was filed?
3️⃣ Scope of Use and Harm
Can you list every specific instance where the information was used?
Did the named person suffer any financial loss, credit issue, or need to correct official records?
Have you already taken any steps to undo or remedy the use (e.g., canceling the account, repaying money)?
4️⃣ Before You Talk to Investigators
Have you avoided giving a statement to police or the complainant before consulting a lawyer?
Do you have copies of the notice, any prior correspondence, and related documents ready to bring to a consultation?
Are you clear on what you actually did versus what the complaint alleges, so you don't over- or under-admit facts?
Frequently Asked Questions
Q. I used my parent's or sibling's resident registration number with their casual permission. Is that still a crime?
A. It can still be charged under the Resident Registration Act if the use was found to be unauthorized in a legal sense, but evidence of actual consent - even informal - is highly relevant to intent (주민등록법 제37조). Whether prosecutors pursue it seriously often depends on whether the family member later disputes the consent and whether any harm occurred.
Q. What's the difference between this and fraud?
A. Identity theft statutes punish the unauthorized use of another's identifying information itself, while fraud (형법 제347조) requires that you deceived someone to obtain money, goods, or a benefit. If you used someone's name to sign up for a free service with no financial gain, fraud typically doesn't apply, but the identity-related statute still can.
Q. Can this be resolved without going to trial?
A. Many identity theft cases, especially first-time, low-harm ones, are resolved through non-prosecution decisions or summary fine proceedings rather than a full trial, depending on the specific statute and facts. Settlement with the person whose identity was used can be a meaningful factor in that outcome for certain charges.
Q. The person whose name I used says they never gave permission - can I still argue I believed I had it?
A. Yes, a genuine and reasonable belief that you had permission goes to whether you acted with the required intent, which is a core element of these offenses. This is fact-specific and usually turns on documented communications or the history of the relationship, which is why gathering that evidence early matters.
Q. Do I need a separate lawyer if I'm also being investigated under the Personal Information Protection Act?
A. You don't necessarily need two separate lawyers, but the case should be reviewed for whether both statutes properly apply to the same conduct, since overlapping charges for a single act can sometimes be challenged (개인정보보호법 제59조, 주민등록법 제37조). A single defense team handling both statutes together can present a more consistent argument.
Q. What if I only used the information once, a long time ago, and nothing bad happened?
A. A single, non-repeated use with no financial harm to the named person is generally treated more leniently than repeated or profit-driven use, though it doesn't automatically mean no charge will be filed. This kind of fact pattern is often central to arguing for a non-prosecution decision or a reduced disposition.
Q. Is there a statute of limitations for identity theft charges?
A. Yes, criminal statutes of limitations apply and the specific period depends on which statute and penalty range is charged; this should be checked case by case rather than assumed. If you're unsure whether the alleged conduct is even still prosecutable, this is worth raising early with a lawyer.
Q. I'm based outside Seoul - can I still get help with this kind of case?
A. Yes, an identity theft defense lawyer can generally assist regardless of where the police station or prosecutor's office handling your case is located, since much of the early work involves document review and interview preparation rather than in-person court appearances. A consultation can clarify what, if anything, requires travel.
Q. Will this show up on my criminal record?
A. Whether a case results in a criminal record depends on how it's ultimately resolved - non-prosecution decisions and certain administrative fines generally do not create the same record as a court conviction. This is one of the reasons the stage at which the case is resolved matters so much for your future.
법무법인 프런티어(이하 “사무소”)는 개인정보보호법에 따라 정보주체의 개인정보 및 권익을 보호하고 개인정보와 관련된 정보주체의 고충을 신속하고 원활하게 처리하기 위하여 본 개인정보 처리방침을 수립·공개합니다.
제 1 조 수집하는 개인정보의 항목, 목적, 방법
제 2 조 개인정보의 처리 및 보유기간
제 3 조 개인정보의 제3자 제공
제 4 조 개인정보 처리업무의 위탁
제 5 조 정보주체의 권리·의무 및 그 행사방법
제 6 조 개인정보의 파기
제 7 조 의견수렴 및 불만처리
제 8 조 개인정보 처리방침의 변경
제 9 조 개인정보의 안전성 확보 조치
제 1 조 (수집하는 개인정보의 항목, 목적, 방법)
① 게시판 글 작성 시 필수 항목에 대한 수집목적은 ‘별도의 구체적 상담을 위하여’이며 수집항목은 ‘이름, 이메일, 연락처’입니다.
② 전항 외에 고객의 서비스 이용 과정이나 요청 사항 처리 과정에서 ‘IP주소, 접속로그, 단말기 및 환경정보, 서비스 이용기록, 쿠키’와 같은 정보들이 자동으로 수집 및 저장될 수 있으며, 이 때의 수집목적은 ‘사용자 홈페이지 이용, 사이트 이용에 대한 문의 민원 등 고객 고충 처리’입니다.
③ 사무소는 ‘홈페이지 고객 문의/고충 처리 시 전화 또는 인터넷을 통한 상담’과 같은 방법으로 개인정보를 수집합니다
제 2 조 (개인정보의 처리 및 보유기간)
관계법령의 규정에 따라 개인정보를 보존하여야 하는 의무가 있는 경우가 아닌 한, 정보주체의 개인정보는 원칙적으로 해당 개인정보의 처리목적이 달성될 때까지 보유 및 이용되며, 그 목적이 달성되면 지체 없이 파기됩니다.
제 3 조 (개인정보의 제3자 제공)
사무소는 정보주체의 개인정보를 본 처리방침에서 명시한 목적에 한해서만 처리하며 정보주체의 사전동의가 있는 경우 또는 개인정보보호법 등 관계법령의 규정에 의거한 경우에만 개인정보를 제3자에게 제공합니다. 사무소는 현재 개인정보를 제3자에게 제공하지 않고 있습니다.
제 4 조 (개인정보 처리업무의 위탁)
사무소는 현재 귀하의 개인정보 보호를 위해 귀하의 개인정보를 직접 취급 관리하고 있습니다. 단, 향후 보다 전문적인 서비스를 제공하기 위하여 제3의 전문기관에 귀하의 정보를 위탁할 필요가 있다고 판단되는 경우, 귀하의 사전 동의 하에 개인정보에 대한 취급을 위탁할 수 있습니다.
제 5 조 (정보주체의 권리·의무 및 그 행사방법)
① 정보주체는 개인정보보호법 등 관계법령이 정하는 바에 따라 사무소에 대해 개인정보의 열람, 정정 및 삭제, 처리정지 요구 등 개인정보 보호 관련 권리를 행사할 수 있습니다.
② 제1항에 따른 권리행사는 정보주체의 법정대리인이나 위임을 받은 사람을 통해서도 할 수 있습니다. 다만, 이 경우에는 개인정보보호법 시행규칙에 따른 위임장을 사무소에 제출하여야 합니다.
③ 사무소는 정보주체의 권리행사에 대하여 개인정보보호법 등 관계법령이 정하는 바에 따라 지체 없이 조치하겠습니다.
제 6 조 (개인정보의 파기)
① 사무소는 원칙적으로 개인정보의 처리목적이 달성된 경우 등 그 개인정보가 불필요하게 되었을 때에는 지체 없이 해당 개인정보를 파기합니다.
② 사무소가 관계법령의 규정에 따라 개인정보를 파기하지 아니하고 보존하여야 하는 경우에는 해당 개인정보 또는 개인정보파일을 다른 개인정보와 분리해서 저장·관리 합니다.
③ 사무소는 파기사유가 발생한 개인정보를 선정하여 개인정보 보호책임자의 승인을 받아 해당 개인정보를 파기합니다.
④ 사무소는 파기하여야 할 개인정보가 전자적 파일 형태인 경우 복원이 불가능한 방법으로 영구 삭제하며, 이외의 기록물, 인쇄물, 서면, 그 밖의 기록매체인 경우 파쇄 또는 소각합니다.
제 7 조 (의견수렴 및 불만처리)
정보주체는 개인정보 보호 관련 문의, 불만처리, 피해구제 등에 관한 사항을 아래 개인정보 보호책임자 또는 담당부서에 문의하실 수 있습니다. 사무소는 정보주체의 문의에 대하여 신속하고 충분한 답변을 드릴 것입니다.
개인정보 보호 책임자 : 변호사
연락처 : 02.
제 8 조 (개인정보 처리방침의 변경)
사무소의 개인정보 처리방침은 관련 법령, 지침 및 사무소 내부규정에 따라 변경될 수 있으며, 개인정보 처리방침이 변경되는 경우 관련 법령이 정하는 방법에 따라 공개합니다.
제 9 조 (개인정보의 안전성 확보 조치)
사무소는 개인정보의 안전성 확보를 위해 다음과 같은 조치를 취하고 있습니다.
관리적 조치 : 내부관리계획의 수립 및 시행, 구성원에 대한 정기적인 개인정보 보호교육 등
기술적 조치 : 개인정보처리시스템 등의 접근권한 관리, 접근통제시스템 설치, 고유식별정보 등의 암호화, 보안프로그램의 설치 등
물리적 조치 : 전산실, 자료보관실 등 개인정보 보관장소에 대한 접근통제