The punishment should be: everything the perpetrator built, earned and bought gets given to the victim. Oh and prison. The perpetrator gets prison too. Could you imagine getting arrested for reporting identity theft? Getting charged and incarcerated for it? Madness.