Amazon Hit with $2.5 Million FTC Fine Over Handling of Identity Theft Reports

The Federal Trade Commission (FTC) has officially penalized Amazon with a $2.5 million fine following a series of investigations into the retail giant's handling of identity theft cases. According to regulatory officials, the company repeatedly failed to comply with the Fair Credit Reporting Act (FCRA), effectively placing victims of fraud in a difficult, 'Kafkaesque' situation when they attempted to clear their names.

The Failure to Comply with FCRA

At the core of the dispute is Section 609(e) of the Fair Credit Reporting Act. This federal mandate requires companies to provide victims of identity theft with transaction records linked to fraudulent accounts within a 30-day window. The FTC alleged that Amazon systematically failed to meet these obligations, often leaving affected individuals without the critical data needed to report or resolve their cases.

A 'Kafkaesque' Ordeal

Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection, highlighted the severity of the situation, stating that victims were forced to navigate a 'Kafkaesque ordeal.' In several documented instances, when victims reached out to Amazon to request records of unauthorized activity, the company demanded they identify the perpetrator or 'guess the name' associated with the fraudulent account. These demands were often made under the guise of security or privacy, creating an impossible barrier for victims who were already struggling to recover from theft.

Penalties and New Requirements

The $2.5 million civil penalty is only part of the resolution. The Department of Justice, working alongside the FTC, has mandated that Amazon overhaul its internal policies for handling such requests. The company is now required to:

• Provide legally requested records to identity theft victims within 30 days.
• Proactively inform customers about the process for requesting FCRA-related records.
• Contact any customers who filed unsuccessful or rejected requests dating back to April 2024.

Amazon's Response

In response to the fine, an Amazon spokesperson claimed that the company has implemented necessary process improvements and has fully resolved the matter. Customers looking to report fraudulent activity or request records of unauthorized transactions are now directed to use the 'Report Suspicious Activity' portal on Amazon’s official help pages, or reach out to their legal department at [email protected] with appropriate documentation, such as a police report or a government-issued identity theft report.