Law / United States / Arizona
Unlawful possession of an access device
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force.
A computer misuse rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Do not knowingly possess, traffic in, publish, or control another person's access device, a credential or similar means of reaching an account or system, without the consent of its issuer, owner, or authorized user and with intent to use or distribute it; this can reach obtaining or trading in login credentials used to collect data from behind a login wall.
- Possessing five or more unconsented access devices may itself support an inference of intent to use or distribute them.
If you get it wrong
Criminal exposureYes
Criminal exposure note
A class 6 felony for possessing fewer than five access devices, a class 5 felony for five to ninety-nine, and a class 4 felony for one hundred or more.
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Makes it unlawful to knowingly possess, traffic in, publish, or control an access device, a credential or similar means of reaching an account or system, without the consent of its issuer, owner, or authorized user and with intent to use or distribute it; possessing five or more such devices without consent may itself support an inference of that intent.
This reaches obtaining or trading in login credentials or similar access devices used to reach data behind a login wall, rather than the act of automated collection itself.
When LexLint raises it
crawls_web
Read the law
official Arizona Revised Statutes text, Arizona State Legislature website