Dubin v. United States
The Supreme Court ruled that a man convicted of healthcare fraud was wrongly charged with 'aggravated identity theft' simply because his fraudulent billing included a patient's Medicaid number — a charge that adds a mandatory two extra years in federal prison.
The decision narrows the reach of a widely used federal criminal law, holding that aggravated identity theft applies only when the misuse of someone's identifying information is the core of the crime, not just an incidental part of how a fraudulent bill was submitted.
How it got here: The district court felt the case was not really aggravated identity theft but was bound by Fifth Circuit precedent and convicted Dubin; a Fifth Circuit panel and then the full en banc Fifth Circuit affirmed; the Supreme Court agreed to hear the case to resolve a split among federal appeals courts.
The Case in Depth
What happened
David Dubin helped manage a psychological services company that submitted a fraudulent Medicaid billing claim — overstating the credentials of the employee who actually performed the testing and altering the service date. The total fraudulent overbilling came to just $338. The government charged him not only with healthcare fraud but also with "aggravated identity theft," because the billing paperwork included the patient's Medicaid reimbursement number — a type of personal identifier.
The question before the Court
Does submitting a fraudulent Medicaid bill that happens to include a patient's identifying number count as "aggravated identity theft" under federal law — triggering a mandatory extra two years in prison on top of any fraud sentence?
The Court's answer
No — the Court ruled that Dubin's overbilling did not constitute aggravated identity theft. Although his fraudulent bill contained the patient's Medicaid number, that number was merely an incidental part of the billing process, not the crux of what made the fraud criminal. The federal aggravated identity theft law applies only when the misuse of someone's identifying information is at the heart of the underlying offense — for example, when a defendant impersonates someone else or uses another person's identity to deceive, making the fraud go to who was involved rather than just how or when services were provided.
The crux of Dubin's fraud was misrepresenting the qualifications of the employee who performed the testing and falsifying the date of service. The patient's identifying information played no deceptive role — it was simply on the billing form. Because the statute's text, title ("Aggravated identity theft"), and structure all point to a narrower reading tied to genuine identity theft, the Fifth Circuit's ruling upholding the conviction was vacated and the case sent back for further proceedings.
Curious how the Court got there? See the step-by-step legal reasoning →
Why it matters
People charged with fraud-related offenses won't automatically face an extra mandatory two-year prison sentence just because their billing happened to include someone's name or account number. Prosecutors can still bring aggravated identity theft charges, but only when the misuse of identifying information — not merely its presence in a billing record — was the heart of the fraud.
What changes now
The Fifth Circuit's ruling is undone and the case goes back to that court to be decided under the standard the Supreme Court established. One threshold question — whether Dubin properly preserved his challenges or must satisfy the higher bar for plain-error review — was left open for the Fifth Circuit to resolve first. Going forward, prosecutors pursuing aggravated identity theft charges must show that the identifying information was the core of the fraud, not merely that it appeared somewhere in a billing record.
What this does not decide
The Court expressly did not address the proper meaning of "without lawful authority," another element of the aggravated identity theft statute. It also did not decide whether plain-error review applies to Dubin's remaining challenges. The ruling explicitly does not disturb the Court's prior interpretations of similar language in the federal firearms statute (18 U.S.C. § 924(c)).
Concurrences and dissents
Concurrence — Justice Gorsuch
Justice Gorsuch agreed that the government's maximalist reading was wrong and that Dubin's conviction could not stand. But he went further than the majority was willing to go, arguing that the statute itself is likely unconstitutionally vague — it fails to give ordinary people fair notice of what it does and does not prohibit. He worried that the majority's new 'crux' test would be equally unworkable in practice, offering no clear line between conduct that violates the statute and conduct that does not, and predicted the issue would return to the Court.
How the Court got there
The legal reasoning, step by step
- The Court began by recognizing that the two key statutory terms — 'uses' and 'in relation to' — are both highly elastic and context-dependent. Neither word, standing alone, resolved the case; both can support a wide range of meanings. That forced the Court to look at the broader statutory context rather than the words in isolation.
- The statute's title, 'Aggravated identity theft,' is a legitimate and valuable interpretive tool. Because § 1028A is a focused, standalone provision (not a catch-all summary of many provisions), its title carries real weight. The ordinary meaning of 'identity theft' — the fraudulent appropriation and use of another person's identifying data to deceive others — requires the identifying information itself to be the vehicle of the fraud, not merely incidental to how a bill was sent.
- The three verbs Congress chose — 'transfers, possesses, or uses' — all point toward classic identity theft. 'Transfers' and 'possesses' strongly connote theft of a means of identification belonging to someone else. Under the canon noscitur a sociis (a word takes meaning from the company it keeps), 'uses' should be read similarly: employing someone's identifying information in a deceptive way that goes to who is involved in a transaction, not simply including a name in a routine billing form.
- The statute works as a mandatory sentencing enhancement, adding two years in prison on top of underlying offenses that carry no mandatory minimum. The government's broad reading would collapse the distinction between the enhanced crime and virtually every underlying fraud that involves a billing method — defeating Congress's evident purpose of reserving the extra punishment for the most serious form of identity misuse.
- The Court's long tradition of restraint when reading federal criminal statutes — reflected in cases like Van Buren v. United States and Marinello v. United States — reinforced rejecting the government's sweeping interpretation. Under that reading, everyday overbilling cases would make up the majority of aggravated identity theft prosecutions, and prosecutors could use the mandatory two-year threat as leverage over virtually any fraud defendant. The Court declined to read such implausible breadth into ambiguous statutory language.
Doctrinal impact
Cases affected by this decision
Reaffirms Flores-Figueroa v. United States (556 U.S. 646)
The Court built on and reaffirmed Flores-Figueroa's reading of § 1028A as covering 'classic identity theft,' using its analysis of the statute's theft-focused title and structure.