The Federal Trade Commission fined Amazon $2.25 million to settle claims the company violated the Fair Credit Reporting Act by failing to provide records of fraudulent transactions to identity theft victims in a timely manner [1, 2, 3]. The FTC said Amazon sometimes failed to respond to records requests within the 30-day period required by law [1, 2, 3]. Moreover, Amazon allegedly refused to provide victims with transaction records unless they supplied the name of the fraudulent account owner, creating burdensome conditions for those affected [1, 2, 3].
The fine was announced on June 30, 2026, when the FTC confirmed Amazon agreed to pay civil penalties to resolve the complaint [2]. An Amazon spokesperson said, "We have resolved this matter with the FTC and implemented process improvements for customers who believe they may be victims of identity theft" [1].
As part of the settlement, Amazon agreed to improve its procedures and establish compliance mechanisms to provide records promptly to victims and authorized law enforcement agencies [1, 2]. This is intended to ensure timely assistance for identity theft victims moving forward [1, 2].
The FTC's 30-day response time requirement aims to help victims fight fraudulent charges quickly and prevent further harm [1, 2, 3]. Amazon’s agreement to the settlement ends the investigation but commits the company to stronger compliance measures [1, 2].
