Identity Theft by State: FTC Data and Regional Trends Across the US

The Federal Trade Commission's Consumer Sentinel Network tracks identity theft complaints filed by consumers across all 50 states and the District of Columbia, producing annual rankings that reveal sharp geographic disparities in victimization rates. This page documents how state-level FTC data is structured, what drives regional variation, and how professionals and researchers use complaint metrics to assess risk concentration. The data serves law enforcement, policy analysts, consumer protection agencies, and identity theft service providers mapping the national service landscape.

Definition and Scope

State-level identity theft data, as published by the FTC Consumer Sentinel Network, measures the number of identity theft reports per 100,000 residents within a given state in a calendar year. This per-capita normalization allows comparison across states with vastly different population sizes — California's raw complaint volume, for example, far exceeds Wyoming's, but per-capita rankings consistently show smaller or mid-size states near the top.

The FTC defines identity theft as a fraud type in which someone uses another person's personal information — name, Social Security number, date of birth, financial account credentials — without authorization (FTC Identity Theft Definition, 16 CFR Part 603). State rankings aggregate all subcategories: financial identity theft, tax identity theft, medical identity theft, government benefits identity theft, and others, into a single complaint rate per state.

The FTC's annual Consumer Sentinel Network Data Book, released each spring for the prior calendar year, is the primary public source for these rankings. Supplementary data from the Identity Theft Resource Center (ITRC) and the Social Security Administration's fraud monitoring operations contribute to a fuller picture of regional patterns, though the FTC data book remains the standard reference for state-by-state comparisons.

How It Works

The FTC compiles state rankings through a structured data intake and normalization process:

1. Report intake — Consumers file identity theft complaints directly through IdentityTheft.gov or by calling the FTC hotline. Each complaint is categorized by identity theft type, method of misuse, and state of residence.
2. Data aggregation — All complaints filed within a calendar year are consolidated in the Consumer Sentinel Network database, which also receives complaint feeds from the Social Security Administration, the Internet Crime Complaint Center (IC3), and participating state attorneys general offices.
3. Per-capita calculation — Raw state complaint counts are divided by state population estimates from the U.S. Census Bureau, then multiplied by 100,000 to produce a standardized rate.
4. Category breakdown — Each state's total is disaggregated by fraud subcategory, allowing analysts to isolate which identity theft types — government documents, credit card fraud, loan or lease fraud — are most prevalent in a given state.
5. Publication and public access — The finalized data book is released as a public PDF and interactive data tool at ftc.gov/sentinel, with state-level tables downloadable for independent analysis.

Professionals researching identity theft statistics at the national level use these state tables in conjunction with Census demographic overlays to identify correlations between victimization rates and factors such as age distribution, urbanization density, and internet penetration rates.

Common Scenarios

High-rate Sun Belt states — Florida, Georgia, and Nevada have ranked among the top five states for per-capita identity theft reports in multiple consecutive Consumer Sentinel Network annual reports. Florida, with a large retirement-age population, shows elevated rates of government benefits identity theft and tax identity theft, two fraud types disproportionately affecting older residents. Georgia's Atlanta metropolitan area generates concentrated complaint volumes tied to synthetic identity theft and credit account fraud.

Midwestern and Great Plains states — North Dakota, Montana, and South Dakota typically register the lowest per-capita identity theft complaint rates nationally, reflecting both lower population density and lower exposure to the large metropolitan data breach ecosystems that fuel credential theft at scale. The link between data breach and identity theft is well-documented; states with fewer Fortune 500 primary location and smaller healthcare system footprints see lower derivative fraud rates.

States with high military populations — Virginia, Texas, and North Carolina show elevated rates of Social Security identity theft and account takeover fraud, patterns the FTC attributes in part to the high concentration of active-duty military personnel, whose Social Security numbers are frequently targeted due to deployment-related credit monitoring gaps.

States affected by specific tax fraud spikes — Following IRS enforcement crackdowns on fraudulent refund schemes in specific tax years, states including Florida and California have seen multi-year anomalies in tax identity theft complaint volumes. The IRS Identity Protection PIN program, detailed at the IRS identity protection PIN guide, was expanded nationally in 2021 partly in response to these geographic concentrations.

Decision Boundaries

State-level FTC rankings measure reported identity theft, not actual incidence. Underreporting is a structural feature of this data: the FTC's own research has acknowledged that a significant share of identity theft victims do not file formal complaints, either because they resolved the issue through their financial institution directly or were unaware of the FTC reporting channel.

Key distinctions governing how state data should and should not be used:

• Complaint rate vs. victimization rate — Per-capita FTC complaints reflect reporting propensity as much as actual fraud volume. States with higher consumer awareness and accessible reporting infrastructure generate more complaints without necessarily having more fraud.
• State law vs. federal data — FTC rankings are collected under federal data infrastructure and do not map directly to state-level prosecution statistics. State identity theft laws vary substantially in definitional scope, penalty tiers, and enforcement mechanisms, meaning a state with aggressive prosecution may show lower FTC complaint rates simply because cases exit the civil reporting channel into criminal proceedings faster.
• Aggregate vs. type-specific rankings — A state ranked 8th overall may rank 1st for child identity theft or 3rd for medical identity theft. Aggregate rankings obscure type-specific concentrations that matter for targeted service deployment or legislative analysis.
• Annual volatility — Single-year spikes driven by large localized data breaches or coordinated fraud rings can shift a state's ranking by 10 or more positions. Three-year rolling averages provide a more stable signal than single-year snapshots for policy and resource allocation decisions.

Researchers cross-referencing FTC state data with criminal prosecution records from federal agencies overseeing identity theft gain the most complete picture, as neither data source alone captures the full scope of identity fraud activity within a state's borders.

References

• FTC Consumer Sentinel Network Data Book — Annual state-by-state identity theft complaint rankings and category breakdowns.
• Federal Trade Commission — IdentityTheft.gov — Primary consumer reporting portal; complaint data feeds into the Sentinel Network.
• FTC — 16 CFR Part 603 (Identity Theft Definition) — Regulatory definition of identity theft as used in federal consumer protection enforcement.
• IRS — Identity Protection PIN Program — Federal program expanded nationally in 2021 to address tax identity theft concentrations.
• Identity Theft Resource Center (ITRC) — Independent nonprofit tracking breach and identity theft trends at state and national levels.
• U.S. Census Bureau — State Population Estimates — Population denominators used in FTC per-capita rate calculations.
• Internet Crime Complaint Center (IC3) — Annual Reports — FBI-affiliated complaint data contributing to the Consumer Sentinel Network aggregate.