In-depth North Dakota legal guide
Theft Charges in North Dakota
A North Dakota theft case should never be reduced to the question “Did something go missing?” Chapter 12.1-23 consolidates several historically separate offenses, but each theory still requires particular conduct, knowledge, intent, property or services, and a supported grading fact. A store accusation, an employee-accounting case, a disputed vehicle sale, alleged receipt of stolen property, an unpaid hotel bill, and retention of a mistaken electronic transfer can all be called theft while presenting very different proof. I begin with the complaint, the alleged date, and the exact theory the State says occurred; then I reconstruct authorization, ownership, possession, intent, value, and every transaction from original records.
You will work directly with me.
If you hire me, I will identify the exact theft theory and offense-date law, trace the property or services and every asserted transfer, test authorization and ownership, audit value and aggregation, review the search and digital evidence, and explain what the State can and cannot prove. I do not treat a police label or loss figure as a substitute for the elements.
North Dakota consolidates theft theories but does not erase their differences
Section 12.1-23-01 calls conduct under §§ 12.1-23-02 through -04 one offense family. A charging document that fairly apprises the accused of the nature of the charge need not always name a category, and a conviction may rest on conduct sufficiently related to the conduct charged that the accused is not unfairly surprised by the case to be met. That rule makes early factual notice and discovery important; it does not let the State replace the statutory conduct and mental state with a generalized allegation of dishonesty.
- Property theory
- Unauthorized control or transfer, deception or threat, and receipt, retention, or disposal of stolen property are distinct alternatives under § 12.1-23-02.
- Services theory
- Section 12.1-23-03 addresses intentional payment avoidance and knowing diversion of services.
- Lost or mistaken-delivery theory
- Section 12.1-23-04 requires knowledge of the loss or mistake, intent to deprive, and failure to take readily available reasonable restoration measures.
- Grade
- Section 12.1-23-05 separately assigns the class through value, threat, property type, role, organized-group facts, or qualifying shoplifting history.
Primary starting points
Offense-date warning: value thresholds, repeat provisions, special-property theories, definitions, and sentencing law have changed over time. The current code is a starting point, not automatic authority for older conduct. The alleged date, amendment history, and session laws must be checked before stating a grade or maximum.
The State must connect the facts to a statutory theft theory
Section 12.1-23-02 contains three property alternatives. First, a person may knowingly take or exercise unauthorized control over, or make an unauthorized transfer of an interest in, another’s property with intent to deprive the owner. Second, a person may knowingly obtain another’s property by deception or threat with intent to deprive, or intentionally deprive another of property by deception or threat. Third, a person may knowingly receive, retain, or dispose of another’s stolen property with intent to deprive. The repeated mental-state language matters: possession, transfer, or loss is not the entire offense.
| Current theory | Conduct and culpability | Questions the evidence must answer |
|---|---|---|
| Unauthorized control or transfer, § 12.1-23-02(1) | Knowingly takes or exercises unauthorized control over, or makes an unauthorized transfer of an interest in, another’s property, plus intent to deprive. | What property interest existed? Who authorized what? When did authority begin or end? What act showed control or transfer, and what evidence supports deprivation intent? |
| Deception or threat, § 12.1-23-02(2) | Knowing acquisition by deception or threat with intent to deprive, or intentional deprivation through deception or threat. | What exact impression, omission, promise, representation, or threat is alleged? When was it made, who relied or transferred, and what contemporaneous evidence shows intent? |
| Receiving, retaining, or disposing, § 12.1-23-02(3) | Knowingly receives, retains, or disposes of property known to be stolen, with intent to deprive. | Who possessed or controlled the item? What showed knowledge that it was stolen? Was the possession actual, constructive, exclusive, or joint? What showed intent to deprive? |
| Theft of services, § 12.1-23-03 | Intentional acquisition of known compensable services by deception, threat, false token, or another payment-avoidance means; or knowing diversion of services under one’s control. | What service was performed, what payment arrangement existed, what did the accused know when obtaining it, and who controlled any diversion? |
| Lost, mislaid, or mistakenly delivered property, § 12.1-23-04 | Knowing retention or disposal after loss, misplacement, or specified delivery mistake, intent to deprive, and failure to take readily available reasonable return measures. | When did the accused learn of the loss or mistake? What return option was readily available and reasonable? What did the accused do before and after that knowledge? |
Unauthorized control depends on the scope and timing of permission
Many theft cases begin with lawful access. An employee may handle inventory or funds; a family member may use a vehicle; a contractor may possess materials; a joint account holder may move money; or a customer may receive merchandise conditionally. The question is not simply whether the person touched property. It is whether the accused knowingly exercised control or transferred an interest beyond actual authority and did so with intent to deprive. Job descriptions, policies, contracts, text messages, prior practices, account permissions, delivery terms, and withdrawal or return efforts can define the boundary.
Revoked authority also needs a chronology. A later demand for return cannot retroactively prove that an earlier use was unauthorized. Conversely, original permission does not necessarily authorize every later sale, pledge, withdrawal, disposal, or continued possession. I build a timeline that separates initial access, each relevant communication, the alleged unauthorized act, any notice or demand, recovery, and the accused’s response.
Deception is broader than a spoken lie but narrower than failed performance
Section 12.1-23-10 lists ways deception may occur, including creating or reinforcing a false impression about fact, law, status, value, intention, or another state of mind; preventing another person from acquiring information that would affect a transaction judgment; failing to correct specified false impressions; and certain lien or impediment omissions. But the statute expressly says deception about an intention to perform a promise may not be inferred from nonperformance alone unless it is part of a continuing scheme to defraud. That limitation matters in contract, financing, sale, construction, employment, and repayment disputes.
A criminal analysis should therefore identify the representation or omission word for word, the speaker or author, the audience, timing, material context, source record, and alleged transfer. It should also preserve the complete course of dealing: revisions, partial performance, payment attempts, extensions, complaints, refunds, and changes in circumstances. Hindsight after a failed deal cannot replace proof of the accused’s knowledge and intent when the property was obtained or deprivation occurred.
Threat-based theft requires the charged threat and its grading consequence
The chapter’s threat definition is detailed and should be read against the actual allegation. Section 12.1-23-05 treats property or services obtained or retained by a threat to commit a felony as Class B felony; other threat theories can produce Class C treatment when the statutory conditions are met. The prosecution must identify the communication, speaker, recipient, meaning, context, and causal connection to acquisition or retention. A heated argument, prediction, collection demand, or statement of legal action should not be relabeled without matching the statutory definition and required intent.
Receipt of stolen property requires knowledge and intent, not proximity alone
The receipt alternative covers acquiring possession, control, or title and can include lending on the security of property. A passenger, resident, buyer, borrower, repair person, or storage-unit renter may be near stolen property without knowingly receiving or retaining it. The investigation should identify who selected, transported, opened, stored, sold, advertised, altered, or benefited from the item; whether serial numbers or marks were visible; what the price and circumstances suggested; and what the accused said or did after learning the source.
In State v. Grensteiner, 2024 ND 218, the North Dakota Supreme Court reviewed theft convictions involving stolen firearms and other property found after a traffic stop. The opinion addresses constructive possession and emphasizes the evidence tying the passenger to the items rather than treating presence in a vehicle as an automatic conviction. It also illustrates the offense-date problem: the prosecution and court applied the version of the law governing the charged 2022 conduct. A current page must not silently transplant later text into an earlier case.
Theft of services focuses on intent when services are obtained or diverted
Section 12.1-23-03 covers services known to be available only for compensation when intentionally obtained through deception, threat, a false token, or another means to avoid payment. It separately covers a person who controls disposition of another’s services and knowingly diverts them for an unauthorized benefit. When compensation is ordinarily due immediately, as with hotels, restaurants, or comparable establishments, absconding without payment or provision to pay is prima facie evidence that services were obtained by deception. Prima facie evidence is not the same as an irrebuttable rule.
The defense should preserve reservation records, terms, invoices, card authorizations, attempted payments, communications, billing disputes, service quality complaints, third-party payment arrangements, departure circumstances, and proof of any plan or ability to pay. For diverted services, work schedules, client assignments, payroll records, computer logs, and actual control over the service can be more important than a final invoice.
Lost or mistakenly delivered property becomes a theft question after knowledge and inaction
Finding an item or receiving an erroneous deposit is not, standing alone, the complete offense. Section 12.1-23-04 requires knowledge that the property was lost or mislaid or delivered under a mistake as to recipient identity, nature, or amount; intent to deprive; and failure to take readily available and reasonable measures to restore it to a person entitled to possession. The practical questions are when the mistake became known, which return method was available, whether the recipient attempted to notify anyone, what instructions were given, and what later use or transfer occurred.
For electronic transfers, preserve the bank notice, account statement, transaction identifier, fraud or customer-service contacts, recorded calls, hold or reversal activity, and any instruction from the sender or institution. For physical property, preserve photographs, location, identifying information, messages, posted notices, law-enforcement contacts, and the condition and disposition of the item. A return attempt can be contested factually, so contemporaneous records matter.
Value is important, but it is not the only approach to a felony
Section 12.1-23-05 starts with three value bands: more than $50,000 is Class A felony; more than $10,000 but not more than $50,000 is Class B felony; and more than $1,000 ordinarily is Class C felony. The boundary words matter. Exactly $50,000 falls in the Class B band, not the “exceed fifty thousand” Class A band. Exactly $10,000 does not exceed $10,000 and therefore does not enter the ordinary Class B band. Exactly $1,000 does not exceed $1,000 and therefore does not enter the ordinary Class C value theory.
| Current grading theory | Class | Current general maximum under § 12.1-32-01 | What must be proved |
|---|---|---|---|
| Property or services exceed $50,000 | Class A felony | 20 years and/or $20,000 | Supported value above—not equal to—$50,000 and connection to the charged theft. |
| Property or services exceed $10,000 but do not exceed $50,000; or acquired or retained by threat to commit a felony | Class B felony | 10 years and/or $20,000 | The value band or the specified felony-threat theory. |
| Property or services exceed $1,000; or one of § 12.1-23-05(3)’s special theories | Class C felony | 5 years and/or $10,000 | The value above $1,000 or every fact of the asserted non-value theory. |
| All other theft unless subsection 5 applies | Class A misdemeanor | 360 days and/or $3,000 | The theft elements and absence of a higher or qualifying first-offense alternatives. |
| Qualifying first offense involving property or services valued at no more than $500 under § 12.1-23-05(5) | Class B misdemeanor | 30 days and/or $1,500 | First-offense status and either shoplifting or all three conditions in subsection 5(a)(2). |
| Second or third qualifying shoplifting offense within three years / fourth or later within four years | Class A misdemeanor / Class C felony | 360 days and/or $3,000 / 5 years and/or $10,000 | Qualifying offense identity, equivalence, disposition, chronology, and current offense facts. |
Special Class C theories must be pleaded and proved on their own facts
Current subsection 3 includes theft of a firearm, ammunition, explosive, or destructive device; certain government files or papers; implements uniquely associated with preparing state money or obligations; livestock taken from the owner’s premises; a key or implement stolen to gain access to felony-level property; a credit card, debit card, electronic-fund-transfer card, code, or other account-access means; prescription drugs except when five or fewer capsules, pills, or tablets are stolen; and property stolen during a statutory riot or while with an organized group of five or more individuals. It also includes specified public-servant, threat, and stolen-property-business theories.
These are not interchangeable. A low-value firearm may be Class C because of what it is. A key becomes a special theory only when it is uniquely suited to provide access to felony-level property and was stolen to gain that access. The prescription-drug exception turns on both item and quantity. A group allegation requires the statutory organized-group or riot facts, not merely several people in the same store. The complaint and discovery should identify the exact paragraph so the defense can test every predicate.
Shoplifting has a statutory definition and a narrow repeat ladder
Section 12.1-23-10 defines shoplifting to include willfully taking possession of merchandise owned, held, offered, or displayed for sale by a merchant with intent to deprive; altering or transferring price or identifying marks; transferring merchandise to another container; or causing the cash-register or checkout price to be less than the stated or total price, with the required intent. A scan error, misplaced item, misunderstood promotion, employee override, or child’s action does not automatically prove willfulness and intent.
For property or services valued at no more than $500, a first shoplifting offense may be Class B misdemeanor. A second or third offense under that shoplifting paragraph, or an equivalent ordinance, within three years is Class A misdemeanor; a fourth or subsequent violation within four years is Class C felony. The current repeat text refers to paragraph 1—the shoplifting theory—not every low-value theft. Prior judgments, offense dates, dispositions, ordinance text, identity, and the window calculation should be obtained rather than assumed from a database label.
The alternative low-value first-offense alternatives in subsection 5(a)(2) requires all three listed factors: no threat; no deception by a person standing in a confidential or fiduciary relationship to the victim; and no public servant or financial-institution officer or employee committing the theft in official duties. The statute allows that special classification to be stated in the charge or established at sentencing by a preponderance of the evidence. That unusual allocation should be identified before plea or sentencing advice.
Attempts can receive the completed-offense punishment in a defined circumstance
Section 12.1-23-05(6) departs from the ordinary attempt reduction when the actor has completed all conduct the actor believes necessary to complete the theft except receipt of the property. In that circumstance the attempt is punishable equally with the completed theft. The provision does not say every incomplete theft automatically has the completed grade. The intended property, anticipated value, alleged completed conduct, impossibility issue, and what remained to occur should be analyzed with the attempt statute in chapter 12.1-06.
“Intent to deprive,” ownership, value, and claim of right have specific meanings
Intent to deprive is more than temporary contact with property
Section 12.1-23-10 defines “deprive” through alternatives that include permanently withholding property or withholding it for so extended a period or under circumstances that a major portion of its economic value or use is lost; withholding with intent to restore only upon reward or compensation; or disposing of, using, or transferring an interest under circumstances making restoration in fact unlikely. A temporary use may still be serious, but the charged theft theory requires proof matching the statutory definition. Unauthorized use of a vehicle under § 12.1-23-06 is a separate offense with different elements and grading.
Intent is commonly inferred from conduct and circumstances. Sale listings, concealment, false explanations, stripping identifiers, pawning, destruction, refusal after notice, or movement of proceeds can support an inference; permission, repayment terms, return efforts, mistake, shared ownership, or documented business purpose may support another inference. The factfinder evaluates the complete record, not one isolated act.
Property “of another” can include divided interests
The chapter’s definitions address tangible and intangible property and interests held by another person or government. A person can face a theft allegation even when the accused also has some interest if another person has the relevant protected interest. But a creditor’s security interest and conditional-sale title receive specific treatment in the definition, and ordinary labels such as “owner” or “mine” may not resolve the statutory question. Titles, contracts, liens, account agreements, partnership documents, probate records, marital interests, and actual possession should be reviewed.
Value is the highest amount supported by a reasonable standard, not a number copied from a report
For grading, § 12.1-23-05(7) uses the highest value by any reasonable standard, regardless of the actor’s knowledge of that value, of property or services actually stolen, believed to be stolen, or reasonably anticipated to be stolen. Amounts may be aggregated when thefts are committed pursuant to one scheme or course of conduct. The rule can favor a higher supported valuation, but “reasonable standard” still requires evidence and a transparent method.
Original purchase price may be relevant but is not automatically the item’s value on the offense date. Age, condition, depreciation, functionality, repair history, market listings, replacement availability, appraisal method, wholesale and retail context, contract price, service records, and recovery condition can matter. For money or account transfers, reversals, duplicates, credits, returned funds, legitimate transactions, and amounts never obtained must be separated. For services, the charged services, customary compensation, performance, and contractual adjustments should be identified.
Aggregation requires more than adding every loss involving the same person. The State must identify the one scheme or course of conduct and connect each amount to it. A defense ledger should list each transaction, date, theory, property or service, source record, ownership, authorization, alleged act, value method, recovery, and reason for inclusion. That makes duplicate entries, disputed ownership, separate projects, and unsupported assumptions visible.
A reasonable claim of right is a statutory defense with limits
Section 12.1-23-09 provides a defense when the actor reasonably believed the actor had a claim to the property or services that the actor was entitled to assert in the manner forming the basis of the charge. The wording matters. A sincere belief in being owed money does not necessarily authorize taking any property by any method. Counsel should identify the claimed right, its factual and legal basis, why the actor believed it was reasonable, and why the manner of assertion was believed authorized.
The section also contains a limited spouse defense when the victim is the actor’s spouse, the property consists of household or personal effects or other property normally accessible to both, and the parties are living together. It is not a blanket immunity for all property between spouses and does not automatically apply to separate business assets, inaccessible property, or parties living apart.
An undercover opportunity is not automatically a defense
Section 12.1-23-09 states that stratagem or deception, an undercover operative, an opportunity to engage in the conduct, or an offer of property as stolen when it was not actually stolen does not by itself create a defense. Mere solicitation not sufficient to induce an ordinary law-abiding person is also addressed. A genuine entrapment or due-process argument requires analysis under the applicable law and facts, not the simple proposition that police created an opportunity.
A theft defense begins with the property, authorization, identity, and transaction record
| Evidence category | What to obtain | What it can and cannot establish |
|---|---|---|
| Ownership and authority | Titles, receipts, contracts, policies, account agreements, job duties, permissions, messages, prior practices, demands, and return instructions. | Defines the protected interest and scope of authority; a label alone does not prove knowing unauthorized control. |
| Identity and possession | Video, witnesses, access logs, device records, location data, keys, fingerprints, DNA, serial numbers, recovery location, and handling chronology. | May connect a person to property; proximity or shared access does not automatically establish knowing possession and deprivation intent. |
| Intent and knowledge | Complete messages, recorded calls, transaction sequence, price, concealment, explanations, return efforts, notices, and source information. | Supports competing inferences about purpose and knowledge; excerpts and later events require context. |
| Value and aggregation | Condition evidence, appraisals, comparable sales, invoices, service rates, account exports, credits, recoveries, and scheme chronology. | Supports a grading amount and one-scheme theory; purchase price or a loss spreadsheet is not automatically the statutory value. |
| Search, seizure, and digital extraction | Warrant, affidavit, return, inventory, body camera, consent record, extraction report, provider process, chain of custody, and forensic notes. | Determines lawfulness, scope, authenticity, attribution, and completeness; a recovered file does not by itself prove who created it or why. |
| Restitution | Claim, invoices, payroll, investigative costs, insurance, recovered property, credits, causation, and plea terms. | May prove directly related loss; it must be separated from punishment, unrelated expenses, and duplicate recovery. |
Retail video should be preserved in native, complete form
Store cases often arrive as a short exported clip selected by loss prevention. Request the full relevant time window, all available camera angles, native export and player, metadata, incident notes, register logs, item file, price history, scanner or self-checkout logs, receipt, loyalty-account information, employee interventions, recovery record, and training or system-error documentation. A clip beginning after the customer entered a department can omit item selection, price placement, another person’s conduct, or a failed scan.
Loss-prevention witnesses may testify about what they observed and how the system operates, but conclusions such as “skip scan” or “ticket switch” should be tied to actual images and data. Screen overlays, time synchronization, camera blind spots, frame rate, duplicate UPCs, cart movement, companion conduct, and cashier overrides can change interpretation. Preserve defense evidence promptly because commercial systems may overwrite data.
Employee-theft investigations require a reproducible accounting
An internal audit can identify a discrepancy without identifying the actor, mental state, or correct amount. Obtain the source ledger, native accounting file, audit parameters, access-control list, user credentials, change history, journal entries, bank statements, payroll, inventory, approvals, reconciliations, exception reports, and every adjustment. Determine who could enter, approve, reverse, export, or alter each transaction and whether credentials were shared or sessions remained open.
A prosecution spreadsheet should be reproducible from source records. Each line needs a transaction identifier, date, amount, source, destination, authorization rule, alleged act, recovery or credit, and reason for classification. Sampling and extrapolation should be disclosed. Business losses, investigative labor, insurance, tax corrections, and restitution are separate calculations; combining them can distort the theft value used to grade the offense.
Digital communications require attribution and completeness
Texts, social-media messages, marketplace listings, emails, payment-app notes, browser records, and cloud data can be important, but a screenshot is not the whole forensic question. Identify the account holder, device, login method, extraction source, timestamp and time zone, deleted or missing context, attachments, synchronization, and other authorized users. A message can be authentic as a communication without proving that the accused authored it, possessed the item, knew it was stolen, or intended deprivation.
N.D.R.Ev. 901 requires evidence sufficient to support a finding that an item is what the proponent claims. Rule 106 can require a completing part of a writing or recorded statement when fairness demands it after another part is introduced. Rules 602 and 702 distinguish personal-knowledge testimony from qualified expert opinion. These rules do not resolve the ultimate elements automatically; they govern how evidence reaches the factfinder.
Search and seizure can determine whether the evidence is usable
N.D.R.Crim.P. 41 governs warrants and related procedure. Review the factual nexus between the alleged theft and the place, account, vehicle, or device searched; the items authorized; dates and scope; execution; inventory; return; and any warrant exception. A broad device extraction may contain years of unrelated private material. Search terms, date limits, application categories, review protocol, and later searches should be compared with the warrant and governing law.
Consent must be evaluated from the actual interaction and scope. A person may have authority over a shared place but not every locked container or account. A private employer or merchant investigation raises different state-action questions than police direction. Vehicle searches, inventory searches, probation conditions, abandonment, plain view, and exigency each require their own facts. A suppression issue should be litigated only after the complete reports, recordings, warrant materials, and chain are obtained.
Discovery should expose the State’s theory and grade before trial
N.D.R.Crim.P. 16 governs discovery. Charge-specific requests may include the original property report, ownership proof, serial numbers, photographs, recovery logs, complete video, loss-prevention file, bank and payment records, digital extractions, search materials, witness statements, benefits or agreements, expert reports, valuation basis, prior-conviction proof, aggregation theory, and restitution documentation. The defense should ask the State to identify which paragraph of § 12.1-23-05 supplies the grade.
Preservation may need to reach third parties before ordinary discovery produces anything. Merchants, banks, marketplaces, payment processors, phone carriers, cloud providers, hotels, employers, pawnshops, and delivery services have different retention periods and legal processes. A preservation request is not a license to contact a complaining witness in violation of an order or to access an account without authorization.
Recent North Dakota cases clarify possession and restitution without rewriting the elements
State v. Grensteiner: constructive possession depends on the evidentiary connection
In Grensteiner, 2024 ND 218, the Supreme Court affirmed theft and firearm convictions arising from stolen items found after a vehicle stop. The opinion applies constructive-possession principles and examines the evidence linking the passenger to property. Its value for a current guide is not a rule that every passenger possesses cargo. It shows why dominion, control, knowledge, statements, conduct, location, and surrounding evidence must be analyzed together, and why the offense-date version of the law must be identified.
State v. Miller: restitution requires a direct causal connection
In State v. Miller, 2024 ND 167, the Supreme Court reversed restitution for extradition costs following a theft conviction. It held the expenses were not directly related to or incurred as a direct result of the theft conduct and emphasized the immediate and intimate causal connection required by restitution law. The Court also held that adding the expense as prosecution cost would conflict with the accepted binding plea agreement. The case warns against treating every government or business expense occurring after a theft as automatically recoverable restitution.
State v. Keplin: circumstantial evidence can prove directly related loss
In State v. Keplin, 2026 ND 84, the Supreme Court upheld restitution for unrecovered jewelry and cash where the district court found an immediate and intimate causal connection to the burglary and theft-related conduct. The official opinion summary explains that the State bears the preponderance burden and may establish the causal connection through circumstantial evidence and reasonable inferences. The decision does not eliminate the need to prove the property, amount, ownership, recovery status, and connection.
State v. Engelking: reasonable investigative costs may qualify when tied to employee theft
In State v. Engelking, 2026 ND 152, the Supreme Court held that reasonable business investigative costs incurred to uncover the extent, quantity, and remedy of an employee’s theft could be included when directly related to the offense. The decision also treated specified insurance-premium losses as directly connected to the charged theft. It does not authorize an unitemized internal bill. The defense should test necessity, reasonableness, source records, employee time, duplication, insurance, recovery, and the causal link to the conduct of conviction.
The offense class sets a ceiling; the sentence and restitution require separate work
Section 12.1-32-01 supplies current general maximums, not presumptive or automatic outcomes: Class A felony, twenty years and/or $20,000; Class B felony, ten years and/or $20,000; Class C felony, five years and/or $10,000; Class A misdemeanor, 360 days and/or $3,000; and Class B misdemeanor, thirty days and/or $1,500. Chapter 12.1-32 also addresses available dispositions, sentencing factors, probation, restitution, and extended sentences. Advice should identify which provisions actually apply to the person and offense date.
Theft sentences can include incarceration, suspended time, supervised or unsupervised probation, restitution, fines and fees, conditions directed to the conduct, and other lawful terms. A negotiated resolution may change the grade, count, factual basis, restitution cap or reservation, and collateral consequences. The maximum is one risk boundary, not a forecast. Criminal history, role, amount, recovery, victim impact, acceptance of responsibility, treatment needs, ability to pay, and the supported facts may affect the outcome, but none replaces the elements.
Restitution under § 12.1-32-08 should begin with an itemized claim and source records. Deduct returned property, payments, reversals, insurance or other credits as the law requires; identify ownership and value; separate repair from replacement; avoid duplicate recovery; and connect each amount directly to the criminal conduct. Miller, Keplin, and Engelking demonstrate that the causal connection is fact-specific. A theft grading amount and a restitution amount can involve different legal questions and should not be assumed identical.
Collateral consequences depend on the actual disposition and the person. A felony can affect firearms law, voting or civil rights, employment, housing, licensing, immigration, loans, education, public benefits, and future sentencing, but each area has separate law and exceptions. A misdemeanor can also matter for trust-sensitive employment, professional discipline, immigration analysis, and background screening. I would not describe any consequence as automatic without checking the conviction statute, class, sentence, person’s status, and governing collateral law.
Record relief must also be evaluated under the law applicable after the case. Dismissal, deferred imposition, sealing, retention of nonconviction records, and background-reporting outcomes are not interchangeable. A plea should be evaluated for what the judgment will say and what later relief is actually available, not a promise that the case will “disappear.”
Preserve evidence without creating a new problem
Keep the complaint, citation, bond or release order, hearing notice, discovery, receipts, contracts, ownership documents, account statements, original messages, full email threads, photos, video, devices, app exports, access logs, employee policies, valuations, and proof of return, payment, or authorization. Do not edit a ledger, factory-reset a device, delete a message, alter metadata, return property secretly, access another person’s account, contact a protected person, or coordinate witness accounts. Discuss a lawful preservation and return plan with counsel.
Write a private chronology identifying who owned each item or account, how access began, permission and limits, every transfer or use, when any problem or mistake became known, notices and responses, recovery, value evidence, and witnesses. Mark uncertainty instead of filling gaps. Keep source files unchanged and work from copies. If a merchant or provider may overwrite video or logs, tell counsel immediately so lawful preservation can be considered.
| Immediate task | Why it matters | What not to do |
|---|---|---|
| Read the complaint and identify §§ 12.1-23-02, -03, or -04 and the § 12.1-23-05 grade paragraph. | Separates the conduct theory from the classification theory. | Do not assume “theft” means only shoplifting or taking physical property. |
| Preserve originals and make a transaction/property ledger. | Creates a reproducible ownership, authorization, intent, value, and recovery chronology. | Do not edit source accounting files, messages, photos, or video. |
| Collect value and condition evidence from the alleged date. | Tests the reasonable standard and threshold boundaries. | Do not rely only on purchase price or a police estimate. |
| Identify every person with access or control. | Tests attribution, actual or constructive possession, and shared-access alternatives. | Do not contact witnesses to align stories or violate a no-contact order. |
| Compare the alleged date with the historical statute. | Prevents use of current thresholds or repeat rules for older conduct. | Do not accept a current-code summary as the final offense-date answer. |
| Audit restitution separately from grade. | Applies direct causation, credits, recovery, and plea terms. | Do not treat every loss or investigative expense as automatically recoverable. |
Frequently asked questions about North Dakota theft charges
What must the State prove for theft of property?
The answer depends on the charged alternative. Section 12.1-23-02 covers knowing unauthorized control or transfer with intent to deprive; knowing acquisition by deception or threat with intent to deprive, or intentional deprivation by those means; and knowing receipt, retention, or disposal of stolen property with intent to deprive. The State must also prove any separate grading fact.
Is every theft over $500 a felony?
No. Under the current ordinary value ladder, the Class C felony threshold is value that exceeds $1,000. Amounts of $500 and $1,000 also matter to the special first-offense rule, but special property, threat, role, riot or group circumstances, and qualifying shoplifting history can change the class without the ordinary value threshold.
What are the current theft maximum penalties?
Class B misdemeanor: thirty days and/or $1,500; Class A misdemeanor: 360 days and/or $3,000; Class C felony: five years and/or $10,000; Class B felony: ten years and/or $20,000; Class A felony: twenty years and/or $20,000. These are current general ceilings, not predictions, and historical law may govern an older offense.
Does failing to pay a debt prove theft by deception?
No. The statute says deception about an intention to perform a promise may not be inferred from nonperformance alone unless it is part of a continuing scheme to defraud. The State still needs the charged deceptive act or omission, transfer or deprivation, knowledge or intent, ownership, and grading proof.
Can I be charged for property I found or money sent to me by mistake?
Potentially, but § 12.1-23-04 requires more than receipt. It addresses knowing retention or disposal after loss, misplacement, or a specified delivery mistake, plus intent to deprive and failure to take readily available reasonable measures to restore the property to an entitled person.
Does possession of stolen property automatically prove theft?
No. The receiving theory requires knowing receipt, retention, or disposal of property known to be stolen and intent to deprive. Actual or constructive possession, knowledge, identity, shared access, source circumstances, and conduct must be proved from the complete evidence. Grensteiner illustrates the fact-specific constructive-possession inquiry.
How does the shoplifting repeat rule work?
For current qualifying shoplifting involving no more than $500, a first offense may be Class B misdemeanor. A second or third violation of that paragraph or equivalent ordinance within three years is Class A misdemeanor; a fourth or later violation within four years is Class C felony. The actual prior judgments, equivalence, identity, and dates must be verified.
Can separate transactions be added together?
Section 12.1-23-05 permits aggregation when thefts are committed pursuant to one scheme or course of conduct. The State should identify the scheme and support each included transaction. Unrelated events, duplicates, credits, recoveries, and legitimate transactions should not be added without a supported basis.
What is a claim-of-right defense?
Section 12.1-23-09 provides a defense when the actor reasonably believed the actor had a claim to the property or services that the actor was entitled to assert in the manner forming the charge. Both the claimed right and the manner of asserting it matter; a belief that money is owed does not automatically authorize self-help using any property or method.
What should I preserve for a theft lawyer?
Preserve the complaint and orders; ownership and authorization records; contracts, policies, receipts, statements, and transaction exports; original unedited messages, photos, and video; device and access information; valuation and condition evidence; return or payment efforts; witness names; prior judgments alleged for enhancement; and every restitution document. Do not delete, alter, secretly return, or access anything unlawfully.
A lawyer’s file review of Theft Charges in North Dakota
Most bad early advice comes from answering the charge label instead of reading the charging clause. I begin with the operative count and work outward: definitions, exceptions, enhancement facts, evidence, procedure, and only then possible outcomes.
Read the count as a set of propositions the State must prove
For Theft Charges in North Dakota, the governing text begins with N.D.C.C. Chapter 12.1-23. That citation matters because a familiar charge name can contain several statutory routes, definitions, and sentencing rules. I read the exact count, the alleged date, and every incorporated definition before deciding which facts are material and which allegations are simply part of the narrative.
Next, I connect each material fact to evidence the prosecution can actually present. The source might be a witness, a recording, a certified record, laboratory work, device data, or an admissible inference—but it should be identifiable and testable. That approach shows whether the real dispute concerns what happened, how evidence was obtained, whether it is admissible, or whether it proves the required element at all.
The evidence I would ask for first
For Theft Charges in North Dakota, I would not begin with a canned list of defenses. I would begin with the source file: ownership and authorization records, contracts, receipts, valuation material, surveillance video, access logs, account and device records, messages, witness interviews, inventory and loss calculations, restitution support, and the evidence offered to prove identity, intent, entry, possession, value, force, or lack of consent. A police summary can identify what an officer or witness says happened, but it cannot substitute for the recording, photograph, data, or document being summarized. The same is true of a complaint. It identifies the prosecution’s theory at the start of the case; it does not prove the theory.
I put those materials on one chronology. That lets me see what was known at each decision point, which account was contemporaneous, what appeared only after people spoke with one another, and where the record is silent. It also keeps an admissibility question separate from a factual one. A fact can be disputed even if the evidence was lawfully obtained. Evidence can also be accurate yet inadmissible for a particular purpose. Those are different arguments and should not be blurred together.
Read the charging document against the offense date
The alleged date matters because statutes, penalty thresholds, definitions, sentencing rules, and published decisions change. I save the version in force on that date and read the session-law history when the current online text is different. I also check whether a later amendment was merely clarifying or made a substantive change; that is a legal question, not an assumption. The same discipline applies to prior convictions and administrative events. A prior must fit the definition the charged statute actually uses, fall within any stated lookback period, and be proved by a reliable record.
I then compare the formal count with the probable-cause narrative and the discovery. If the prosecution’s theory shifts, I want the amended pleading and enough detail to prepare. If several factual alternatives are alleged, I identify whether they are separate elements, alternative means, enhancement facts, or merely evidentiary details. That distinction affects notice, motions, jury instructions, unanimity arguments, and how a verdict form should be read.
Separate an evidentiary weakness from a suppression issue
Not every troubling fact produces a motion to suppress. Suppression ordinarily requires a constitutional, statutory, or rule-based violation with a remedy that reaches the evidence at issue. A weak identification, an incomplete investigation, or a witness inconsistency may be powerful at trial without making evidence inadmissible. By contrast, a stop, search, interrogation, identification procedure, warrant, or test can raise a legal issue even when the resulting evidence appears incriminating. I analyze both tracks and do not promise dismissal simply because one problem exists.
For a search issue, I reconstruct what officers knew before each intrusion and what authority they claimed. For a statement, I examine custody, questioning, warnings, voluntariness, recording, and the complete context. For scientific or technical evidence, I request the method, underlying data, quality-control material, uncertainty information, and chain of custody. For hearsay or confrontation questions, I identify the actual statement, its purpose, the declarant, and the proposed foundation. Specificity matters; “the evidence is bad” is not a motion.
Prepare negotiation and trial at the same time
A plea decision should be compared with the case the State could present at trial, not with the complaint’s maximum penalty in isolation. I want to know the strongest admissible proof, the weakest required element, the realistic motion practice, the likely instructions, and the consequences of every proposed disposition. That includes custody, probation, treatment, restitution, driving, firearm restrictions, registration, employment or licensing, immigration consultation, family-court effects, and record consequences when they are actually triggered. I avoid telling a client that every collateral consequence applies to every conviction.
Trial preparation gives negotiation its credibility. Witness interviews, exhibit review, motions in limine, expert consultation, demonstrative evidence, jury instructions, and a clean theory of the case force both sides to confront what can be proved. Negotiation can continue while that work is underway. The two tracks are not opposites.
A case-law point worth keeping in its proper place
Appellate decisions matter, but a quotation should not be detached from the issue the court was deciding. In State v. Hartson, 2024 ND 78, ¶ 26, the North Dakota Supreme Court explained that, on a sufficiency challenge, “we do not weigh conflicting evidence, or judge the credibility of witnesses.” That is an appellate-review rule, not a reduction of the State’s burden at trial. At trial, the prosecution still must prove every element beyond a reasonable doubt. I cite the case for the point it actually decided and then return to the charged statute, the instructions, and the admissible evidence in the present file.
What I would want you to understand before choosing an outcome
You should be able to identify the exact charge, the facts that set its level, the disputed elements, the evidence that matters most, the motions that have a legal basis, the realistic trial issues, and the concrete effect of each proposed resolution. If an answer depends on a missing report, recording, expert opinion, or certified record, I will say so. An honest answer about what remains unknown is more useful than a confident guess.