I’m curious what the pay-off is, though. Am I supposed to try to cash it, have it fail and then… what? The URL in the letter is a genuine FTC website. I suppose it could just be a “this is a mailing address for a gullible person” confirmation thing. The fact that they have that name/mailing address combo in the first place points very firmly at an Amazon data breach between three and five years ago. RT: https://spinster.club/objects/75b60e44-6fb2-4821-95d5-609df5b1cfd6