Amazon Agrees to $2.25 Million Settlement and Injunction to Resolve Alleged Violations of the Fair Credit Reporting Act

WASHINGTON — The Justice Department announced today that a federal court has entered a stipulated order against Amazon.com Inc., in a case investigated and referred to the Department by the Federal Trade Commission (FTC). 

The order resolves allegations that Amazon violated the Fair Credit Reporting Act (FCRA), and it requires Amazon to pay a $2.25 million civil penalty and follow practices that protect consumers whose identities have been stolen.

In a complaint filed in the U.S. District Court for the District of Columbia, the government alleged that Amazon violated FCRA by failing to provide identity theft victims with requested records of transactions involving people believed to have fraudulently used those victims’ identification, and by failing to provide those records within 30 days of a request. 

The court’s stipulated order resolving the case imposes a $2.25 million civil penalty and requires Amazon to provide its records of transactions alleged to have been the result of identity theft to victims who request them, free of charge within 30 days of the request, subject to verification of the victim’s identity and claim of identity theft. 

Amazon must also post a notice to its website informing identity theft victims of how they can request those records.

“Consumers whose identities have been stolen should not face unnecessary red tape when they investigate how their identities were misused and seek to clear their names,” said Assistant Attorney General Brett A. Shumate of the Justice Department’s Civil Division.

“The Justice Department will continue working with the Federal Trade Commission to protect identity theft victims.”