Inside This Report

• Amazon will pay a $2.25 million civil penalty — the largest ever under this section of federal credit law — after regulators say it denied fraud victims access to records they were legally owed.
• Federal investigators allege Amazon customer service reps wrongly cited "privacy" concerns to deny victims, and in some cases misled law enforcement about needing a subpoena.
• The court order now forces Amazon to hand over fraud records within 30 days and publicly post instructions for how identity theft victims can request them.

By Samuel López | USA Herald

Amazon is paying the price for allegedly leaving identity theft victims out in the cold.

A federal court has signed off on a stipulated order requiring the e-commerce giant to pay $2.25 million in civil penalties after the Department of Justice — acting on a referral from the Federal Trade Commission — accused the company of systematically violating the Fair Credit Reporting Act.

At the center of the case is a provision of federal law that most consumers have never heard of but that matters enormously the moment their identity is stolen: Section 609(e) of the FCRA. That statute requires companies to hand over transaction records tied to fraudulent activity within 30 days of a request from a verified victim. According to the government's complaint, filed in the U.S. District Court for the District of Columbia, Amazon routinely failed to do that — and sometimes refused outright.

Investigators say the pattern went beyond simple delay. Customer service representatives reportedly told consumers seeking their own fraud records that Amazon could not release them for "privacy" or "security" reasons — even though the law exists specifically to give victims that access. In other instances, the company is accused of telling law enforcement officers investigating identity theft that they needed a subpoena to obtain records on a victim's behalf, despite no such requirement existing under the FCRA.

"Consumers whose identities have been stolen should not face unnecessary red tape when they investigate how their identities were misused and seek to clear their names," said Assistant Attorney General Brett A. Shumate of the Justice Department's Civil Division. "The Justice Department will continue working with the Federal Trade Commission to protect identity theft victims."

The $2.25 million figure is more than a symbolic slap. It marks the largest penalty ever secured under Section 609(e) of the FCRA, according to regulators — surpassing the FTC's first case under that provision, brought against Kohl's Department Stores back in 2020.

Beyond the fine, the order carries teeth going forward. Amazon is now permanently barred from violating the FCRA's identity theft records provisions and must supply qualifying records to victims — and to law enforcement acting on their behalf — free of charge and within the statutory 30-day window, once identity and claims are verified. The company is also required to post a notice on its website explaining exactly how identity theft victims can request those records, closing the information gap regulators say fueled the problem in the first place.

The case was handled for the government by Assistant Directors Lory D. Alexander and Zachary A. Dietert of the Civil Division's Enforcement and Affirmative Litigation Branch, working alongside the FTC's Bureau of Consumer Protection.

For the millions of Americans who discover fraudulent charges under their name every year, the order is a reminder that federal law already guarantees them a paper trail — and that companies ignoring that obligation can expect regulators to come calling.

About the Author

Samuel López is a Senior Legal Analyst and investigative journalist for USA Herald, where he covers federal enforcement actions, consumer protection litigation, and corporate accountability cases. With more than two decades spent tracking complex litigation through the federal court system, López has built a reputation for translating dense regulatory filings — from DOJ consent orders to FTC complaints — into reporting that everyday readers can actually use. His close working knowledge of agencies like the Justice Department's Civil Division and the FTC's Bureau of Consumer Protection gives his analysis a level of legal precision rarely found outside specialized trade publications.

Stay Ahead of the Story

Loved this investigation? Get the reporting that breaks it first. USA Herald's newsletter delivers exclusive legal investigations, breaking national security coverage, and insider analysis you won't find anywhere else — straight to your inbox. Subscribe to the USA Herald newsletter today.

👉 Follow us on X: https://x.com/RealUSAHerald