Amazon agreed to pay $2.25M to settle FTC charges that it knowingly violated the Fair Credit Reporting Act by refusing to give identity-theft victims records of fraudulent transactions made in their names. The penalty is a record for a violation of Section 609(e), which requires companies to hand over such records within 30 days at no cost, and the FTC said Amazon even denied requests from law enforcement acting on victims’ behalf and had no written policy for handling them until early 2025, after learning of the investigation. The DOJ filed the complaint on the FTC’s referral, with a proposed consent order now before a federal court in Washington that also bars Amazon from future 609(e) violations.
