Amazon will pay $2.25 million after the FTC said it denied identity theft victims access to fraud records. Here’s what your rights are and how to request the needed records.
Table of Contents
What Happened?
The Department of Justice filed the complaint and proposed order on June 30, 2026, following a referral from the FTC.
The FTC said Amazon repeatedly failed to follow Section 609(e) of the Fair Credit Reporting Act, known as the FCRA.
Section 609(e) is part of the law that gives identity theft victims the right to request records about fake accounts or purchases made using their personal information.
Businesses must provide these records free of charge within 30 days after receiving a valid request.
The $2.25 million penalty is the largest announced for a Section 609(e) violation. The proposed order needs approval and a federal judge’s signature before it has full legal effect.
Who Was Affected and What Records Did Amazon Not Provide?
The case involved consumers whose personal information was used for fake Amazon accounts or purchases. The FTC did not say how many people were affected.
The FTC also said Amazon failed to provide some account and transaction records requested by victims and authorized law enforcement officers. These records may include account details, contact information, and receipts. In fact, this information can help victims dispute charges, prove they did not make the purchases, and support police investigations.
Under the proposed order, Amazon must contact consumers who requested records after April 2024 but did not receive them. As a result, these consumers may be able to request additional records.
This case did not involve a newly announced Amazon data breach. Instead, it focused on information already used by identity thieves. Criminals may get personal information through earlier data breaches, phishing, stolen mail, or other fraud.
In many cases, people do not know their information was leaked until an unfamiliar charge, account, or message appears. Futureproof helps you catch these problems earlier by monitoring your data for leaks 24/7 and showing you what to do next in simple, clear steps.
How Amazon Failed Identity Theft Victims
The FTC said Amazon often refused to provide fraud records, citing security or privacy concerns.
In one case, Amazon asked a victim to guess the name used by the identity thief. The consumer tried 30 names but still did not receive the records. Amazon also rejected some requests submitted by authorized law enforcement officers. In other cases, the company missed the 30-day legal deadline.
According to the FTC, Amazon did not have a written policy for handling these requests until early 2025.
Futureproof monitors your information for data leaks 24/7 and guides you with clear steps to keep it safer from scams.
Run a free checkWhy Fraud Records Can Help You Clear Your Name
Identity theft records can show how your information was used. They may also help prove that you did not make the purchase or open the account. These records may include applications, invoices, account statements, receipts, or contact details linked to the fraudulent transaction.
According to the FTC’s guidance for businesses, these documents can help victims record the fraud. In some cases, they may also provide useful evidence about the identity thief.
In fact, identity theft is a common problem for many Americans. In March 2025, the FTC reported receiving more than 1.1 million identity theft reports through IdentityTheft.gov during 2024.
That is why fraud records can be so important. You can use fraud records to dispute charges, correct account information, or support a police report. Law enforcement may also use them to investigate the crime.
Under Section 609(e) of the FCRA, businesses must provide the requested records free within 30 days. You may also authorize law enforcement to request them for you.
5 Steps to Take After Identity Theft
These steps can help you stop further damage and collect the records needed to clear your name:
1. Contact the company and your bank quickly
Look for purchases, withdrawals, or accounts you do not recognize.
Identity thieves may continue using your information while the affected account remains open.
Contact the company’s fraud department and your bank or card issuer. Ask them to block charges and secure the affected account.
2. Report the identity theft to the FTC
Create an Identity Theft Report at IdentityTheft.gov. The report documents what happened and gives you a personal recovery plan.
Save a copy because businesses may ask for it before releasing fraud-related records.
3. Request the records in writing
Tell the company you are requesting records under Section 609(e) of the Fair Credit Reporting Act.
The FTC says to include proof of identity, an FTC Identity Theft Report, and a police report.
The business has 30 days to provide the records free of charge.
Keep copies of everything you send and use a delivery method you can track.
4. Track the 30-day deadline
Write down when the company received your request.
A clear timeline can help if the company delays, loses your paperwork, or sends an incomplete response.
Follow up in writing if the deadline passes. If the company still does not respond, you can file a complaint with the FTC about its failure to provide the requested records at ReportFraud.ftc.gov.
5. Protect your main email and financial accounts
Watch for password reset messages, new-account notices, or login alerts you did not request.
Remember that your email connects to many services. Someone with access may reset passwords and enter your other accounts.
To strengthen your email security, open your email settings and select Security. Review recent sign-ins, create a strong unique password, and turn on two-step verification.
Two-step verification requires a second code after your password when you sign in.
If setup feels confusing, the Futureproof Email Protection tool guides you through each step.
Email Protection helps you create a strong password and set up two-step verification to secure your account.
You Have a Right to Records That Can Clear Your Name
Identity theft can leave you searching for proof that a purchase or account was not yours.
Section 609(e) gives you a direct way to request records from the business involved.
Act quickly, keep written copies, and track every deadline.
Tools like Futureproof can also help you notice leaked information and strengthen your email account before more problems appear.
Clear records and steady action can make recovery easier and help you feel more in control.
At Futureproof, Kevin explains digital safety in simple words, with clear tips and zero fluff. He holds a degree in information technology and studies fraud trends to keep his tips up-to-date.
In his free time, Kevin plays with his cat, enjoys board-game nights, and hunts for New York’s best cinnamon rolls.
