Computing Internet Online Security ‘Amazon put identity theft victims through a Kafkaesque ordeal’: FTC issues $2.5 million fine over denying requests News By Scott Younker Published 1 July 2026 Amazon accused of violating Fair Credit Reporting Act When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works . (Image credit: Shutterstock) Copy link Facebook X Reddit Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter The Federal Trade Commission is fining Amazon $2.25 million over allegations that the retail giant regularly denied records requests from identity theft victims . The U.S. agency accused Amazon of violating the Fair Credit Reporting Act. Per an FTC press release , a complaint was filed by the Department of Justice as a referral from the FTC. It alleged that Amazon failed to comply with Section 609(e) of the FCRA , which requires companies to provide victims of identity theft with records about transactions made in their name within 30 days of a consumer’s request. FTC accusations against Amazon Amazon apparently did not have a written policy for responding to 609(e) requests until last year. Latest Videos From Watch full video here: Amazon often put identity theft victims through a Kafkaesque ordeal by demanding they identify the thief who stole their information before Amazon would release the records. Christopher Mufarrige, FTC “Amazon often put identity theft victims through a Kafkaesque ordeal by demanding they identify the thief who stole their information before Amazon would release the records the law entitles them to—records that could help victims protect themselves and recover from the fraudulent conduct,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection said in the release. The complaint claims that customers who reached out to Amazon were often told that the requested records could not be provided for “security” or “privacy” reasons. In one provided example, a consumer tried to get business records related to unauthorized charges from a fraudulent account. However, Amazon reportedly refused for security reasons unless the consumer “guessed the name on the [fraudulent] account,” which they were unable to do. You may like Ring doorbell cameras could be collecting your face without permission, $5 million lawsuit claims We put the best identity theft protection to the test to protect your entire digital life — these are the services I recommend Social media scams cost Americans more than $2.1 billion last year, according to the FTC Penalties and resolution (Image credit: Shutterstock) Alongside the $2.25 million civial penalty, the DOJ’s proposed order requires Amazon to provide records lawfully requested by identity theft victim s and law enforcement agencies. It also requires the company to provide notice to customers about how they can request FCRA records. Additionally, Amazon is required to contact any customers who requested records since April 2024. Tom’s Guide: Direct to Your Inbox Get instant access to breaking news, the hottest reviews, great deals and helpful tips. Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. An Amazon spokesperson told Tom’s Guide that it has implemented process improvements and resolved the matter with the FTC. “We are committed to providing customers with their detailed account information when they need it most. We’ve resolved this matter with the FTC and have implemented process improvements for customers who believe they may be victims of identity theft. Customers who need assistance requesting their records can visit our Help Page to learn more.” How to contact Amazon for Identity Theft records (Image credit: Shutterstock) Amazon
Sumber: Tom’s Guide