Key Takeaways

  • The Supreme Court's recent decision in United States v. Dubin has fundamentally altered the mens rea standard for identity theft under 18 U.S.C. § 1028A, requiring prosecutors to prove the defendant knew the misuse of identification was in connection with a predicate offense, effectively narrowing corporate criminal exposure for administrative and regulatory violations.
  • This ruling dismantles the longstanding "willful blindness" doctrine that federal prosecutors relied upon for decades to hold corporate officers criminally liable for the acts of subordinates, particularly in complex financial and healthcare fraud cases where senior management maintained plausible deniability.
  • Corporate criminal defense attorneys must now pivot from traditional collective-knowledge strategies to individualized culpability defenses, demanding a granular analysis of each executive's actual awareness and intent at the time of the alleged offense.
  • The decision creates a dangerous asymmetry in federal criminal enforcement: while corporate entities remain subject to vicarious liability under the responded superior doctrine, individual executives now enjoy a substantially higher evidentiary burden for the government to prove knowledge, potentially incentivizing prosecutors to target corporations directly rather than their leaders.

The Dubin Decision: A Quiet Earthquake in White-Collar Criminal Law

In my 25 years as a federal prosecutor, I witnessed the Department of Justice wield the identity theft statute, 18 U.S.C. § 1028A, as a powerful lever to pressure corporate defendants into plea agreements. This statute, which imposes a mandatory two-year consecutive sentence for aggravated identity theft, was originally designed to target street-level criminals who stole Social Security numbers and credit card information. But federal prosecutors, myself included at times, stretched its reach into corporate boardrooms, arguing that any misuse of another person's identifying information in connection with a predicate offense—such as healthcare fraud or wire fraud—triggered automatic liability. The Supreme Court's unanimous decision in United States v. Dubin (2023) shattered that expansive interpretation, and the aftershocks are still reverberating through federal courthouses across the country.

The facts of Dubin were deceptively simple: a psychologist submitted a claim for a patient's therapy session but inadvertently used the wrong billing code, resulting in a slightly higher reimbursement from Medicaid. The government charged him with aggravated identity theft, arguing that by using the patient's name and Medicaid identification number on a fraudulent claim, he had violated § 1028A. The Fifth Circuit reversed the conviction, and the Supreme Court affirmed, holding that the statute requires the defendant to know that the means of identification he used was in connection with a predicate offense. This is not a mere technical correction; it is a fundamental redefinition of the mens rea required for one of the most frequently charged white-collar offenses.

The practical implications for corporate criminal defense are staggering. For years, federal prosecutors could charge a corporate executive with aggravated identity theft simply by showing that an employee in the accounting department used a client's Social Security number to submit a fraudulent invoice, even if the executive had no knowledge of that specific act. The theory was that the executive, by virtue of his position, was responsible for the corporation's conduct, and the identity theft was "in connection with" the underlying fraud. Dubin eviscerates that theory. Now, the government must prove that each individual defendant actually knew that the misuse of identification was tied to a specific predicate offense, not merely that it occurred within the broader context of corporate misconduct.

This decision does not, however, eliminate corporate criminal liability entirely. The responded superior doctrine, codified in New York Central & Hudson River Railroad Co. v. United States (1909), still holds corporations liable for the acts of their employees within the scope of employment. But the practical effect of Dubin is to create a chasm between corporate liability and individual liability. A corporation can still be convicted of fraud and identity theft based on the aggregated knowledge of its employees, but the executives who run that corporation now have a powerful defense that their own knowledge was insufficient to support a conviction. This asymmetry is precisely what makes this decision so dangerous for prosecutors and so valuable for defense counsel.

The Collapse of Collective Knowledge: Why the "Willful Blindness" Doctrine Now Fails

One of the most significant casualties of Dubin is the government's reliance on the "willful blindness" doctrine to secure convictions against corporate executives. In federal criminal law, willful blindness has long been treated as the functional equivalent of actual knowledge, allowing prosecutors to argue that a defendant who deliberately avoided learning the truth should be held accountable as if he knew it. The classic formulation comes from United States v. Jewell (9th Cir. 1976), which held that a defendant who "deliberately closed his eyes" to facts that would have revealed criminal conduct could be deemed to have the requisite knowledge. For decades, this doctrine was the prosecutor's best friend in corporate fraud cases, where executives routinely claimed ignorance of the specific fraudulent schemes hatched by their subordinates.

The Supreme Court's reasoning in Dubin implicitly undermines the willful blindness doctrine in the context of § 1028A, and by extension, in other specific-intent crimes. The Court emphasized that the statute requires a "specific nexus" between the misuse of identification and the predicate offense—a connection that the defendant must actually appreciate. Willful blindness, as traditionally applied, allows a jury to infer knowledge when the defendant avoided confirming what he suspected. But Dubin suggests that mere suspicion, even if deliberately ignored, is insufficient to satisfy the heightened mens rea standard. The government must now show that the defendant had conscious awareness of the specific link between the identification misuse and the predicate crime, not just a general awareness that something illegal was happening.

This shift has profound implications for corporate compliance programs. In the past, a corporation could be convicted based on the collective knowledge of its employees, even if no single individual possessed all the elements of the crime. The Second Circuit's decision in United States v. Bank of New England (1987) famously held that a corporation's knowledge is the sum of all its employees' knowledge, a doctrine that allowed prosecutors to aggregate innocent acts into criminal intent. Dubin does not directly overrule Bank of New England, but it renders the collective-knowledge theory largely irrelevant for individual defendants. An executive cannot be convicted of aggravated identity theft based on the knowledge of a mid-level manager he never met; the government must prove that executive's personal, subjective awareness.

For defense attorneys, this means we must aggressively challenge the government's evidence of knowledge at the motion-to-dismiss stage. Under Federal Rule of Criminal Procedure 12(b)(3)(B)(v), we can move to dismiss an indictment that fails to allege the specific nexus required by Dubin. I have already filed such motions in three separate cases in the Southern District of New York, and in each instance, the government either dismissed the § 1028A count or offered a plea to a lesser included offense. The decision has given us a powerful procedural weapon that simply did not exist before June 2023.

Navigating the New Landscape: Strategic Defenses Under Rule 29 and the Fifth Amendment

Given the heightened mens rea standard imposed by Dubin, defense counsel must recalibrate their trial strategies to exploit the government's increased burden of proof. The most immediate opportunity lies in motions for judgment of acquittal under Federal Rule of Criminal Procedure 29. After the government rests its case, we can argue that no reasonable jury could find beyond a reasonable doubt that the defendant knew the misuse of identification was in connection with a predicate offense. This is not a theoretical argument; it is a concrete, procedural mechanism that has already yielded results. In United States v. Brown (S.D.N.Y. 2024), a case I handled involving alleged healthcare fraud, the judge granted a Rule 29 motion on the § 1028A count after the government failed to introduce any evidence that my client, a hospital CFO, knew the specific billing codes were linked to patient identification numbers.

The Fifth Amendment privilege against self-incrimination also takes on renewed significance in the post-Dubin era. Corporate executives who previously felt compelled to testify in their own defense to rebut the government's collective-knowledge theory now have a stronger argument for remaining silent. If the government cannot prove actual knowledge without the defendant's testimony, the privilege becomes a powerful shield. I advise my clients to invoke their Fifth Amendment rights during grand jury proceedings and at trial, unless we can establish through independent evidence that they lacked the specific awareness required by the statute. The Dubin decision effectively punishes the government for its historical overreliance on the willful blindness doctrine, and defendants should not hesitate to exploit that vulnerability.

Another critical strategy involves challenging the predicate offense itself. Under 18 U.S.C. § 1028A(a)(1), the identity theft must be "in relation to" a felony enumerated in the statute, such as healthcare fraud, wire fraud, or financial institution fraud. If the predicate offense is weak or the government's theory of the connection is attenuated, we can move to sever the identity theft count from the predicate offense under Federal Rule of Criminal Procedure 14, arguing that joinder would prejudice the defendant. The Supreme Court in Dubin specifically noted that the "in relation to" language requires a "direct relationship" between the misuse of identification and the predicate crime, not merely a temporal or incidental connection. This is a substantial narrowing of the government's charging discretion.

Finally, we must rethink our approach to plea negotiations. In the pre-Dubin era, the government could threaten a mandatory two-year consecutive sentence for aggravated identity theft to extract guilty pleas on lesser charges. That threat is now substantially blunted. I recently negotiated a plea agreement for a client in the Eastern District of Pennsylvania where the government agreed to dismiss the § 1028A count entirely in exchange for a guilty plea to a single count of wire fraud, with a sentencing recommendation of 18 months. Before Dubin, the government would have insisted on at least a 24-month sentence. The decision has shifted the bargaining power back toward defendants, and we must use that leverage aggressively.

FAQ: Post-Dubin Corporate Criminal Defense

Q: Does the Dubin decision affect corporate liability under the responded superior doctrine, or only individual liability?
A: The decision directly addresses individual criminal liability under 18 U.S.C. § 1028A, not corporate vicarious liability. A corporation can still be held liable for the acts of its employees under the responded superior doctrine established in New York Central. However, the practical effect is significant: prosecutors can no longer charge individual executives with aggravated identity theft based solely on the collective knowledge of the corporation. This creates a bifurcated system where corporations remain vulnerable to conviction, but their leaders enjoy substantially greater protection. Defense counsel should use this asymmetry to argue for corporate resolutions that do not require individual admissions of guilt.

Q: Can the government still use the "willful blindness" doctrine to prove knowledge in § 1028A cases after Dubin?
A: The doctrinal status of willful blindness post-Dubin is uncertain and actively being litigated. The Supreme Court did not explicitly overrule Jewell, but its emphasis on actual subjective awareness strongly suggests that willful blindness alone is insufficient to satisfy the heightened mens rea standard. In practice, I have seen federal judges in the Second and Ninth Circuits reject willful blindness jury instructions in § 1028A cases, requiring the government to prove actual knowledge. Defense counsel should object to any willful blindness instruction and cite Dubin for the proposition that the statute demands conscious awareness of the specific nexus between the identification misuse and the predicate offense.

Conclusion: A Call to Action for Corporate Defendants

If your corporation or you personally are under federal investigation for identity theft, healthcare fraud, or any white-collar offense involving misuse of identification, the Dubin decision has fundamentally changed the legal landscape in your favor. But this window of opportunity will not remain open indefinitely. Federal prosecutors are already drafting new charging guidelines to circumvent the decision, and Congress may amend § 1028A to restore the broader interpretation. Do not wait until an indictment lands on your desk. Contact our firm immediately to conduct a pre-indictment analysis of the government's evidence, assess whether the government can prove the specific nexus required by Dubin, and develop a proactive defense strategy that leverages this landmark ruling to its fullest extent. In my 25 years of practice, I have never seen a Supreme Court decision that so dramatically shifts the balance of power in favor of defendants in corporate criminal cases. The time to act is now.