FTC Orders Amazon to Pay $2.25 Million Over Withheld Identity‑Theft Records

Overview

• The FTC announced Tuesday that Amazon will pay a $2.25 million civil penalty to settle allegations it blocked identity‑theft victims from getting records tied to fraudulent transactions.
• The agency’s complaint says Amazon agents often denied requests by citing vague “privacy” or “security” reasons and in some cases demanded victims identify the thief before releasing records.
• Under a DOJ‑filed proposed order, Amazon must supply lawfully requested records to victims and authorized law enforcement within 30 days and notify customers who requested records since April 2024 that they may seek additional documents.
• Amazon told reporters it has resolved the matter with the FTC, says it has implemented process changes, and directs affected customers to its identity‑theft help pages and FCRA request channels.
• Civil‑penalty critics note $2.25 million is small compared with Amazon’s size, and the settlement follows a string of prior consumer‑protection actions that regulators and analysts cite when weighing deterrence and corporate accountability.