Access Device Fraud Defenses

A federal access device case looks unanswerable in the discovery. Spreadsheets of account numbers, login records, parcel tracking, and a search warrant return from a phone add up to a story that reads as settled. It is worth remembering what that record does and does not contain. Transaction data shows that an account was used. It does not show who used it, whether that person knew the account was compromised, or whether the person understood the purpose of what they were asked to do. Those gaps are where defenses under 18 U.S.C. § 1029 live, and they are usually found by working through the statute one element at a time rather than by looking for a single flaw in the government’s case.

On this page

Attribution: Who Was Actually at the Keyboard

The government must connect a person to conduct, not merely to a device or an address. Internet protocol addresses identify a subscriber line, not a user, and households, workplaces, and shared apartments routinely put several people behind one line. Devices are shared, borrowed, sold, and repaired. Credentials are reused across services, and a reused password compromised elsewhere is a common route into an account that later shows fraudulent activity. Where a shop or a warehouse is involved, several employees may hold the same terminal login.

Attribution defenses are built with records rather than with argument. Employment schedules, badge logs, router leases, device management reports, and the metadata inside the government’s own exhibits often show that the inference from account to person is weaker than the summary chart suggests. A defense forensic examiner reviewing the full image, rather than the extracted report the government produced, frequently finds synchronization artifacts, timezone errors, and application caching that change what a timestamp means.

Knowledge and Intent to Defraud

Every prohibition in § 1029 requires knowledge, and the trafficking and use provisions require intent to defraud. That is a meaningful limit. A person who received a number from an employer, a partner, or a purported client and used it as instructed may have handled an unauthorized access device without knowing it was unauthorized. Reshippers recruited through job advertisements, contractors paid to build a checkout integration, and people who accepted a transfer they were told was a refund all occupy that territory.

Proving the state of mind usually depends on communications, and communications cut both ways. The messages that show a person asking questions, requesting documentation, or being lied to by a recruiter are as admissible as the ones the government highlights. Recovering the full conversation rather than the excerpt in the case agent’s report is a routine and productive step. Where the client has a limited command of English or a limited grasp of payment systems, that context belongs in front of the prosecutor before a charging decision, not for sympathy but because it bears directly on an element.

Device Counts and the Statutory Thresholds

Several subsections of § 1029 require a threshold, either a count of devices or a value obtained within a stated period. Those thresholds are elements, which means the government must prove them beyond a reasonable doubt, and they are also the numbers that drive the guideline calculation later. This page does not reproduce the statutory figures, which are not verified in the sources behind it; read the current text of the subsection charged with counsel.

What can be said is that lists are frequently overcounted. A file recovered from a device may contain duplicates, expired accounts, test data, publicly circulating material that was never usable, and entries that belong to a co-defendant’s separate activity. Whether an entry is an access device at all is a question the defense can litigate, because the statutory definition requires that the item be capable of obtaining value or initiating a transfer. Reducing a list to the entries that survive scrutiny can move a case below a threshold element and can reshape the sentencing exposure at the same time.

Suppression and the Limits of a Digital Search

Warrants for phones, laptops, and cloud accounts are broad by nature, and their breadth is contestable. The particularity of the description, the temporal scope of what was searched, the treatment of material outside the warrant’s subject matter, and the handling of privileged content are all standard grounds. Consent is another: agents often ask for a passcode at a doorstep, and whether that consent was voluntary, informed, and given by someone with authority over the device is a factual question. Border and airport device examinations raise their own issues. Suppression rarely ends a case on its own, but excluding an image or a statement can remove the only evidence tying a client to a specific account.

Frequently Asked Questions

I was told I was doing legitimate work. Is that a defense?

It can be a complete defense, because the statute requires knowledge and intent to defraud. The question is what the record shows about what you were told and what you asked. Preserve the job advertisement, the messages, the payment records, and the name and contact details of whoever recruited you. Those materials are usually more persuasive than testimony, and they are easiest to gather before accounts are closed.

Can I be convicted if no transaction ever went through?

Yes. Possession and trafficking provisions do not require a completed transaction, and attempt and conspiracy are addressed within the section itself. That said, the absence of any completed transaction matters at sentencing and can matter to intent, because it may show that a list was never usable. It is a defense argument rather than a bar to charging.

Does it help that someone else set everything up?

It helps in two distinct ways. If the client did not know what the arrangement was for, it goes to the knowledge element and can defeat the charge. If the client did know but occupied a subordinate position, it goes to role at sentencing and can reduce the offense level. The two arguments rest on different facts, and choosing between them early usually produces a stronger position than presenting both weakly.

Should I explain my side to the agents to clear this up?

Not without counsel present and prepared. Agents are not in a position to close an investigation on the strength of an explanation, and a false or incomplete statement to a federal agent is a separate crime. Where an explanation genuinely helps, counsel can convey it in a controlled setting or in writing, which preserves the benefit without creating a new charge.

How early can a defense actually change the outcome?

Before charges, more often than people expect. Prosecutors make choices about which subsection to charge, how many counts to bring, and whether to include a related statute that carries a consecutive term. Those choices are influenced by information provided while they are still open. Once an indictment is returned, the same material is still useful but the room to move is smaller.

How Mr. Sris and the Firm’s Of Counsel Attorneys Handle Defenses in Access Device Cases

Defense work in these matters is element-driven. Attribution, knowledge, intent, and the composition of a device list are each provable or contestable with records, and the analysis is more productive than a search for a single decisive flaw.

Mr. Sris, Owner and Founder of Law Offices Of SRIS, P.C., is a former prosecutor and founded the firm in 1997. He is admitted in Virginia, Maryland, the District of Columbia, New Jersey, and New York. His background at George Mason University in accounting and information systems is applied to complex financial and technology-related cases, which is the category these matters fall into. Mr. Sris and the firm’s Of Counsel attorneys, who contract directly with the firm, work on federal criminal matters together.

The firm represents individuals and businesses in access device matters from a first agent contact through motions, trial, and sentencing. To discuss a matter under 18 U.S.C. § 1029, call (888) 437-7747 to request a consultation.

Disclaimers

This page describes defenses available in federal access device cases under 18 U.S.C. § 1029 in general terms for people trying to understand a federal process. It is not legal advice, and reading it does not create an attorney-client relationship with Law Offices Of SRIS, P.C. Federal statutes and the decisions interpreting them change over time, so confirm anything stated here against the current statutory text with counsel before acting on it.

Every federal matter turns on facts that belong to that matter alone. Case results depend on a variety of factors unique to each case. Results may vary.

Attorney responsible for this advertising: Mr. Sris. Law Offices Of SRIS, P.C. Call (888) 437-7747 to request a consultation; the firm’s intake line is staffed 24/7.

Attorney advertising. Prior results do not guarantee a similar outcome.

These defences apply to one offence. Our page on access device fraud charges sets out that offence from start to finish.