Office of Public Affairs | Amazon Agrees to $2.25 Million Settlement and Injunction to Resolve Alleged Violations of the Fair Credit Reporting Act | United States Department of Justice
The settlement explicitly imposes a $2.25 million monetary penalty on Amazon for FCRA violations, making Financial Penalty the most specific and direct classification.
Mandatory inheritance: Financial Penalty is a child of Enforcement, so Enforcement must be raised as the secondary tag.
Product
This enforcement action concerns identity theft record-keeping obligations under the Fair Credit Reporting Act and does not directly regulate a specific financial product or service from the taxonomy.
While Amazon operates payment and transaction services, this settlement addresses FCRA compliance and identity theft victim protections rather than a defined product type.
Obligation
The settlement mandates that Amazon provide identity theft victims with transaction records within a 30-day timeframe and post a website notice explaining how to request such records, which are prescribed information-provision duties to retail customers.
The settlement also requires Amazon to establish and operate a documented process for verifying victim identity and processing record requests within the 30-day window, which involves designing and deploying a practical control to prevent non-compliance with the FCRA.
Activity
The settlement requires Amazon to provide transaction records to identity theft victims within 30 days, which involves fraud investigation and victim support processes related to identity theft detection and response.
The requirement to verify victim identity and maintain records of fraudulent transactions relates to customer onboarding and identity verification procedures, though this is a secondary element of the enforcement action.
Themes
The settlement addresses Amazon's failure to provide identity theft victims with transaction records and required disclosures, which directly reflects the Consumer Protection theme of ensuring retail customers are treated fairly and not harmed by service failures.
The FCRA violations and mandatory practices to support identity theft victims' ability to investigate and clear their names reflect the Fraud Prevention theme of reducing first-party fraud harm and supporting customer recovery.
Functions
Customer Support must implement processes to receive identity theft victim requests, verify identity, and provide transaction records within 30 days, though this is a specialized compliance-adjacent obligation that may require human review given the confidence below 0.75.
Compliance functions must interpret and monitor adherence to the new FCRA obligations and ensure the firm's processes align with the court order requirements, though this is a supporting role and confidence below 0.75 warrants human review.
2026-08-19 13:39:18·ataylor@vixio.com
Meta Id
3407117
Content ID
3415599
GUID
12cd877aacb8a4d32933a47fe7a7dbf0
Pipeline Progress
🔄 Pipeline Journey
⏱
20s
total
✓
Queued13:38:57
+1s
✓
Metadata13:38:58
+0s
✓
S3 Content13:38:58
+0s
✓
Extracted13:38:58
+4s
✓
LLM Gen13:39:02
+15s
✓
Stored13:39:17
TITLE: United States Department of Justice Resolves Amazon Fair Credit Reporting Act Violations Through Settlement
BODY:
On August 14, 2026, the Justice Department announced that a federal court entered a stipulated order against Amazon.com Inc. resolving allegations of Fair Credit Reporting Act (FCRA) violations. The Federal Trade Commission (FTC) investigated the case and referred it to the Justice Department.
The government alleged that Amazon violated the FCRA by failing to provide identity theft victims with requested records of transactions involving individuals believed to have fraudulently used those victims' identification. Amazon also failed to provide these records within the 30-day timeframe required by law. The stipulated order imposes a $2.25 million civil penalty on Amazon and establishes mandatory practices to protect identity theft victims.
Under the court order, Amazon must provide records of transactions alleged to result from identity theft to victims who request them at no cost within 30 days of the request, subject to verification of the victim's identity and claim of identity theft. Additionally, Amazon must post a notice on its website informing identity theft victims how they can request such records. Assistant Attorney General Brett A. Shumate of the Justice Department's Civil Division said consumers whose identities have been stolen should not face unnecessary obstacles when investigating misuse of their identities and seeking to clear their names. The Justice Department is represented in this action by Assistant Directors Lory D. Alexander and Zachary A. Dietert from the Enforcement Section of the Civil Division's Enforcement and Affirmative Litigation Branch, working in coordination with the FTC's Bureau of Consumer Protection.
REFERENCES:
United States Department of Justice, Office of Public Affairs. "Amazon Agrees to $2.25 Million Settlement and Injunction to Resolve Alleged Violations of the Fair Credit Reporting Act." August 14, 2026. Available at: www.justice.gov/opa
Office of Public Affairs | Amazon Agrees to $2.25 Million Settlement and Injunction to Resolve Alleged Violations of the Fair Credit Reporting Act | United States Department of Justice Skip to main content MENU News All News Blogs Photo Galleries Podcasts Press Releases Speeches Videos Archived Press Releases Archived News Press Release Amazon Agrees to $2.25 Million Settlement and Injunction to Resolve Alleged Violations of the Fair Credit Reporting Act Friday, August 14, 2026 Share Facebook X LinkedIn Email For Immediate Release Office of Public Affairs The Justice Department announced today that a federal court has entered a stipulated order against Amazon.com Inc., in a case investigated and referred to the Department by the Federal Trade Commission (FTC). The order resolves allegations that Amazon violated the Fair Credit Reporting Act (FCRA), and it requires Amazon to pay a $2.25 million civil penalty and follow practices that protect consumers whose identities have been stolen. In a complaint filed in the U.S. District Court for the District of Columbia, the government alleged that Amazon violated FCRA by failing to provide identity theft victims with requested records of transactions involving people believed to have fraudulently used those victims’ identification, and by failing to provide those records within 30 days of a request. The court’s stipulated order resolving the case imposes a $2.25 million civil penalty and requires Amazon to provide its records of transactions alleged to have been the result of identity theft to victims who request them, free of charge within 30 days of the request, subject to verification of the victim’s identity and claim of identity theft. Amazon must also post a notice to its website informing identity theft victims of how they can request those records. “Consumers whose identities have been stolen should not face unnecessary red tape when they investigate how their identities were misused and seek to clear their names,” said Assistant Attorney General Brett A. Shumate of the Justice Department’s Civil Division. “The Justice Department will continue working with the Federal Trade Commission to protect identity theft victims.” The United States is represented in this action by Assistant Directors Lory D. Alexander and Zachary A. Dietert from the Enforcement Section of the Civil Division’s Enforcement and Affirmative Litigation Branch, in coordination with staff from the FTC’s Bureau of Consumer Protection. For more information about the Enforcement & Affirmative Litigation Branch and its enforcement efforts visit www.justice.gov/civil/enforcement-affirmative-litigation-branch . Updated August 14, 2026 Topic Consumer Protection Component Civil Division Press Release Number: 26-932 Related Content Press Release Justice Department Files Complaint Against Manufacturer and Retailer of Allegedly Imminently Hazardous Immersion Water Heaters The Justice Department, together with the Consumer Product Safety Commission (CPSC), announced today the filing of a complaint against Cixi Miaojie Electrical Appliance Co. Ltd., and Changsha Jiayi Tianzhuo Trading... July 22, 2026 Press Release Alibaba Group and AUS Merchant Services Agree to Pay $600 Million to Resolve Allegations that they Failed to Prevent Illegal Sales of Pharmaceuticals, Pharmaceutical Equipment, and Other Illegal Products Alibaba Group Holding Limited (Alibaba) — one of China’s largest companies — and its U.S.-based payment processor, AUS Merchant Services Inc. (AUS, and formerly known as Alipay US), have entered... July 1, 2026 Press Release Adobe Agrees to $150 Million Settlement and Injunction to Resolve Alleged Violations of the Restore Online Shoppers’ Confidence Act The Justice Department announced that it has filed a proposed stipulated order that, if entered by the court, will resolve a case against software company Adobe Inc. and two of... March 13, 2026