Amazon’s $2.25 Million Settlement Gives Identity-Theft Victims a Clearer Path to Transaction Records

What the federal settlement requires

A federal court entered an order requiring Amazon to pay a $2.25 million civil penalty and improve access to records sought by identity-theft victims, the U.S. Department of Justice announced August 14. The case arose from allegations under the Fair Credit Reporting Act.

The government alleged that Amazon did not consistently provide requested records involving transactions believed to have used victims’ identifying information and did not always provide them within the required period. The settlement resolves those allegations through a stipulated court order.

Under the order, Amazon must provide qualifying transaction records free of charge within 30 days of a request, subject to verification of the requester’s identity and identity-theft claim. The company must also publish a notice explaining how affected consumers can request the information.

Why transaction records matter to victims

A person confronting identity theft may need documentation to dispute charges, identify unfamiliar accounts, contact financial institutions or assist investigators. Without records showing how identifying information was used, resolving those problems can become more difficult and time-consuming.

The settlement does not mean that every Amazon customer receives a payment or that anyone can demand another person’s private transaction history. Verification requirements remain part of the process, and the obligation concerns records tied to a qualifying identity-theft request.

The Justice Department described the alleged conduct in a civil complaint; that description should not be confused with a criminal conviction. A stipulated order establishes enforceable requirements without automatically answering every disputed factual question a trial might have considered.

Practical steps for online shoppers

Consumers who discover suspicious activity should contact the relevant financial institution, preserve transaction details and follow official reporting procedures. The Federal Trade Commission also explains how credit freezes can limit the opening of new accounts using stolen information.

Requests for Amazon records should use verified company channels and the instructions required by the court order. Consumers should avoid responding to unsolicited messages that demand passwords, payment, remote computer access or verification codes in exchange for supposed fraud assistance.

Limits and what to watch

The settlement resolves government allegations without establishing that every Amazon customer is eligible for compensation or that Amazon admitted every allegation.

The next development to watch is Amazon’s publication of request instructions and the implementation of the 30-day record-access requirement.