18 U.S. Code § 1029 (fraud and related activity in connection with access devices) lays out the federal penalties for credit card fraud. If convicted, first-time offenders may spend up to 15 years in prison, and those with a prior conviction can face a 20-year prison sentence.