via The Verge
Amazon Fined $2.25 Million for Failing to Assist Identity Theft Victims
Amazon has been fined $2.25 million by the Federal Trade Commission (FTC) for allegedly refusing to provide identity theft victims with records of fraudulent transactions, a violation of the Fair Credit Reporting Act (FCRA). The penalty, announced in 2025, underscores growing regulatory scrutiny of big tech platforms' responsibilities in safeguarding consumer data and aiding fraud victims. As of early 2026, Amazon has not publicly committed to systemic changes beyond the settlement, though the FTC continues to push for stricter compliance measures across the industry.
## Background of the Case
The FTC's investigation revealed that between 2019 and 2023, Amazon failed to meet its legal obligations under FCRA Section 609(e), which requires companies to provide identity theft victims with transaction records upon request. Victims reported being unable to obtain copies of fraudulent orders placed using their stolen identities, delaying their ability to contest charges and restore their credit. According to the FTC complaint, Amazon's customer service processes lacked proper procedures for verifying and fulfilling these requests, leaving victims without critical evidence for police reports and credit bureau disputes.
## The $2.25 Million Settlement
The $2.25 million civil penalty is one of the first FTC actions specifically targeting a major e-commerce platform for FCRA non-compliance regarding identity theft records. The settlement does not include an admission of wrongdoing by Amazon, but the company has agreed to pay the fine and implement new procedures to handle victim requests more effectively. Under the terms, Amazon must also maintain clear internal policies for staff training, track response times, and report compliance to the FTC for five years. However, consumer advocates note that the fine is relatively small compared to Amazon's $574 billion annual revenue in 2025, raising questions about its deterrent effect.
## Implications for Consumers
Identity theft victims now face a steep challenge: while the FTC action sets a legal precedent, experts warn that many consumers still encounter difficulties when requesting transaction records from Amazon. A 2026 survey by the Identity Theft Resource Center found that 68% of victims who contacted Amazon about fraudulent orders reported unresolved cases after three months. The FTC has since launched additional investigations into other major online marketplaces, signaling that failure to assist victims may lead to broader enforcement actions. For affected consumers, the recommended steps include filing a formal identity theft affidavit with the FTC, contacting Amazon's dedicated fraud team via written correspondence, and working with credit bureaus to place fraud alerts.
## Broader Context in 2026
The Amazon fine is part of a larger push by the FTC under its current leadership to hold technology companies accountable for consumer protection failures. In 2025, the agency proposed new rules requiring online platforms to establish real-time fraud-reporting systems and maintain accessible archives of transaction data for at least five years. As of early 2026, those rules remain under review, but the Amazon case is frequently cited by policymakers as evidence of the need for stronger enforcement. Simultaneously, state attorneys general in California, New York, and Texas have filed separate lawsuits against Amazon alleging similar violations, seeking additional penalties and structural reforms.
## What This Means Going Forward
For the tech industry, this case highlights the growing legal expectation that e-commerce companies must actively cooperate with identity theft victims—not merely process refunds. Amazon's $2.25 million fine signals that regulators are willing to penalize even the largest firms for systemic failures in fraud response. Smaller retailers and marketplaces should review their FCRA compliance procedures, as the FTC's scrutiny is expected to intensify. Consumers, meanwhile, should remain vigilant: if you suspect identity theft involving an Amazon order, document all communications with the company and report uncooperative behavior to the FTC's Consumer Sentinel Network. As the landscape evolves, the balance between corporate efficiency and consumer rights will continue to be tested in courts and regulatory agencies.