Amazon has agreed to pay $2.25 million in civil penalties to resolve an FTC investigation into the company's handling of identity theft cases. The tech giant allegedly violated the Fair Credit Reporting Act by refusing to provide transaction records to victims and law enforcement agencies requesting information about fraudulent purchases made using stolen identities.

The FCRA mandates that businesses supply consumers with records of fraudulent transactions within 30 days of request. According to the FTC complaint, Amazon representatives denied some customer requests citing security or privacy concerns, while others were told the necessary records couldn't be accessed. Even when information was provided, the company sometimes missed the legal deadline.

This settlement highlights ongoing tensions between major retailers and consumer protection regulators. Companies processing millions of online transactions must balance privacy obligations with victims' rights to obtain evidence needed for recovery. The case suggests gaps in how some platforms handle identity theft investigations.

The penalty serves as a reminder that federal laws require swift cooperation with identity theft victims, regardless of internal policy concerns. Amazon did not immediately respond to requests for comment on the settlement terms.