Amazon - Enforcement
Executive Summary
The Federal Trade Commission fined Amazon $2.25 million for violating the Fair Credit Reporting Act by refusing to provide identity theft victims with records of fraudulent transactions made in their names. Amazon customer service representatives denied requests or claimed they couldn't access the necessary records, and when information was provided, it often arrived outside the legally required 30-day window. The company has since settled with the FTC and implemented process improvements for...
What Happened
On June 30, 2026, the Federal Trade Commission fined Amazon $2.25 million for violating the Fair Credit Reporting Act. The FTC alleged that Amazon refused to provide identity theft victims with records of fraudulent transactions made in their names, with customer service representatives either denying requests citing security concerns or claiming inability to access necessary records. When Amazon did provide information, it often arrived outside the legally mandated 30-day response window, and in some cases victims were told they needed to identify the fraudulent account holder before Amazon would assist them.
Who Is Affected
Identity theft victims who contacted Amazon seeking records of fraudulent purchases made using their personal information were directly impacted by these practices. Some victims were unable to obtain their credit card information removed from fraudulent accounts or access transaction records needed to resolve their identity theft cases. Law enforcement agencies seeking records on behalf of victims were also reportedly denied access to necessary documentation.
Why It Matters
This case demonstrates that even major technology companies can systematically fail to comply with consumer protection laws designed to help identity theft victims. The Fair Credit Reporting Act's 30-day requirement exists specifically to help victims quickly gather evidence and resolve fraudulent activity, and Amazon's alleged pattern of delays and denials undermined these legal protections. The $2.25 million penalty and required process improvements establish accountability for companies that fail to assist identity theft victims as legally required.
What You Should Do
If you are an identity theft victim seeking records from Amazon, submit your request in writing and document all communications with customer service representatives. Cite the Fair Credit Reporting Act and the 30-day legal requirement for response in your request. If Amazon fails to respond within 30 days or refuses your request, file a complaint with the Federal Trade Commission at reportfraud.ftc.gov and consider contacting your state attorney general's office for additional assistance.
Summary generated from verified sources and reviewed before publication. How we summarize.
Sources