FTC fines Amazon $2.25 million for blocking identity theft records
Amazon has agreed to a $2.25 million settlement with the FTC to resolve allegations that the company violated the Fair Credit Reporting Act by failing to provide transaction records to identity theft victims. The settlement includes a ten-year injunction and mandates new operational procedures for handling consumer requests related to fraudulent account activity.
Key Takeaways
- Amazon failed to establish a written policy for Section 609(e) requests until early 2025, after learning of the FTC investigation.
- Section 609(e) of the Fair Credit Reporting Act requires businesses to provide transaction records to victims within 30 days.
- The 10-year injunction mandates that Amazon post record-request instructions on its website and proactively contact eligible victims from 2024.
- The 2026 settlement marks only the second enforcement action taken under this specific federal provision since its addition in 2003.
Why It Matters
The settlement defines a clear boundary for platform accountability in data-sharing, signaling that internal 'privacy' policies cannot supersede statutory mandates. For streaming services and digital marketplaces handling recurring payments, the FTC's emphasis on response timelines and the invalidity of circular authentication logic is a warning against automated brush-offs in customer support. The requirement to proactively remediate unfulfilled requests from previous years indicates that technical friction in compliance leads to direct regulatory exposure. Operators should track whether federal scrutiny of 'dark patterns' and data transparency prompts more aggressive enforcement of older, underutilized consumer protection statutes like the FCRA.
Additional Context
The Identity Theft Records case is part of a broader regulatory escalation against Amazon’s consumer practices. In September 2025, the FTC secured a record $2.5 billion settlement—the largest in the agency's history—after alleging that Amazon used 'dark patterns' to deceptive enroll millions into Prime memberships while making cancellation intentionally difficult, per FTC reports. That agreement included $1.5 billion in consumer redress and $1 billion in civil penalties. In January 2026, the agency began distributing these refunds, which capped at $51 per affected customer, while simultaneously moving forward with a separate monopolization case against the company in the Western District of Washington. Simultaneous to these consumer protection efforts, the FTC's 2026-2030 Strategic Plan, published in April 2026, reaffirms a focus on 'Big Tech' and data security while restoring mission language about avoiding 'unduly burdening' legitimate business activity. Despite this framing, the agency has maintained pressure on e-commerce transparency; in September 2025, it secured a $2 million settlement with the marketplace Temu under the INFORM Consumers Act regarding third-party seller disclosures. This regulatory landscape suggests the FTC is increasingly utilizing niche or newly passed statutes—from INFORM to the FCRA—to impose operational changes and monetary penalties on dominant platform operators.
Read full article at ppc.land
Get this in your inbox → Subscribe
Enjoy our coverage?
Add StreamingMeme as a preferred source on Google to see more of our streaming news at the top of your Search results.
Add as preferred source