Amazon will pay $2.25 million after the FTC said it failed to help identity theft victims get fraud records. Here’s what it means for protecting yourself.
Table of Contents
What Happened?
The FTC said Amazon refused to give some identity theft victims records linked to fraudulent transactions made with their personal information.
The complaint was filed by the Department of Justice after the FTC referred the case.
The FTC said the law required Amazon to provide certain records within 30 days after a proper request.
These records could help victims understand what happened, report the fraud, and protect themselves.
Who Was Affected and What Records Were Involved?
This case focused on identity theft victims who contacted Amazon for records about fraudulent transactions.
The FTC did not say how many consumers were affected.
The records involved application and business transaction information tied to fraudulent purchases or accounts.
In one example, the FTC said a consumer asked for records about unauthorized charges linked to a fraudulent account.
Amazon customer service reportedly told the person it could not share details unless the victim could identify the thief.
The FTC also said Amazon refused some requests from law enforcement agencies acting for identity theft victims.
This was not reported as an Amazon data breach. The issue was how Amazon handled requests from people whose personal information had already been used in fraud.
That matters because stolen personal information can be used to open accounts, place orders, or make fraud harder to untangle.
It is also worth remembering that your information may already have been leaked somewhere else online.
Many people do not learn about leaked data until suspicious activity appears later.
If you are not sure whether your information was leaked, automatic monitoring can help you spot problems earlier.
Futureproof monitors your data for leaks 24/7 and helps you reduce scam risks with simple, clear steps.
Futureproof monitors your information for data leaks 24/7 and guides you with clear steps to keep it safer from scams.
Run a free checkHow Amazon’s Record Request Problem Happened
The FTC said Amazon did not have a written policy for these identity theft record requests until early 2025.
The FTC also said some Amazon customer service agents denied requests for “security” or “privacy” reasons.
In some cases, the FTC said Amazon eventually provided records, but missed the 30-day deadline required by law.
The Fair Credit Reporting Act is a consumer protection law. In this case, it required companies to give identity theft victims certain fraud-related records after a valid request.
At Futureproof, Kevin explains digital safety in simple words, with clear tips and zero fluff. He holds a degree in information technology and studies fraud trends to keep his tips up-to-date.
In his free time, Kevin plays with his cat, enjoys board-game nights, and hunts for New York’s best cinnamon rolls.
