Amazon fined $2.25M for withholding evidence from fraud victims

Amazon has been hit with a $2.25 million fine for refusing to provide crucial evidence to identity theft victims, a move that’s sparked outrage and raised serious concerns about consumer protection.

The US Federal Trade Commission (FTC) has charged Amazon with violating Section 609(e) of the Fair Credit Reporting Act (FCRA), which requires companies to give customers access to records of transactions made in their names if they’ve been victimized by identity theft. In a shocking display of disregard for the law, Amazon repeatedly denied requests from customers who were trying to get to the bottom of suspicious activity on their accounts.

According to the FTC’s complaint, Amazon customer service agents would often cite “privacy” or “security” concerns as reasons to block access to these records. Even when the company did eventually share the requested information, it was often after the 30-day timeframe required by law had expired. The FTC also alleged that Amazon refused to provide records to law enforcement agencies who were trying to investigate identity theft cases.

This isn’t the first time Amazon has faced criticism for its handling of sensitive consumer data. In recent years, the company has paid out huge sums in settlements related to issues like children’s online privacy and Prime membership practices. It’s clear that Amazon’s reputation is taking a beating, and this latest fine is just another example of the consequences of ignoring consumer protection laws.

The proposed settlement requires Amazon to provide access to lawfully requested records within 30 days, as mandated by the FCRA. The company must also notify consumers who have been denied access to their records since April 2024 that they can request additional information. This is a crucial step towards ensuring that identity theft victims get the help and support they need.

The fact that Amazon’s customer service agents were so willing to bend or break the rules in order to withhold evidence from fraud victims raises serious questions about the company’s commitment to consumer protection. It’s not just about Amazon, though – this case highlights a larger issue with companies prioritizing profits over people’s rights and safety.

For consumers, the takeaway is clear: if you’re a victim of identity theft or suspect that your personal data has been compromised, don’t give up on getting help from companies like Amazon. Keep pushing for access to your records, even if it takes multiple attempts. And remember that there are laws in place to protect you – be sure to take advantage of them.

In the long run, this case is a reminder that companies must prioritize transparency and accountability when handling sensitive consumer data. As the security landscape continues to evolve, we can expect more scrutiny on major players like Amazon to ensure they’re meeting their obligations to consumers.


Source: Bleeping Computer — 2026-07-01