Ring is a real company — Amazon-owned since February 2018 — and the doorbells and cameras work. The FTC charged that its privacy and security failures were real too: employees could access customers' videos, and hackers took control of about 55,000 U.S. customers' accounts. Ring settled in May 2023.

What did the FTC's Ring case find?

The FTC charged that until 2018 any Ring employee could access any customer's videos — one employee viewed thousands of recordings from female users in intimate spaces — and that Ring failed to stop credential-stuffing attacks; about 55,000 U.S. customers had their accounts compromised. Ring settled: $5.8 million in refunds and a mandated privacy and security program.

Scam verdict · Educational pattern check

Scam Detective research desk · Updated October 2026

Real product — settled FTC case

Is Ring Legit? The Doorbell Is Real — So Is the FTC Case Over Who Else Could Watch

Q: What should Ring owners do now?

Sign in at ring.com or the official app you opened: turn on two-factor authentication, remove shared users you don't recognize, and review the devices on the account. Never through a link a message handed you — and don't reuse passwords anywhere near the account.

Ring is a real company — Amazon-owned since February 2018 — and the doorbells and cameras work as advertised. The FTC charged that its privacy and security failures were real too: until 2018 any employee could access any customer's videos — one employee viewed thousands of recordings from female users in intimate spaces — and the company failed to stop credential-stuffing attacks that let hackers take control of accounts, cameras, and videos; about 55,000 U.S. customers had their accounts compromised, and multi-factor authentication only arrived in 2019. Ring settled: $5.8 million in consumer refunds, deletion of pre-2018 videos and face embeddings, and a mandated privacy and security program including MFA. The hardware is real; so is the record of who else could watch.

Educational verdict from documented scam patterns — not a live report. For a 0–100 risk score on the exact link in your hand, run the checker.

Check a URL free Read the full guide

Straight from the source

The verdict stands on the public record — the line below is quoted verbatim from the source named under it.

“Ring's disregard for privacy and security exposed consumers to spying and harassment. The FTC's order makes clear that putting profit over privacy doesn't pay.”

— Samuel Levine, Director of the FTC's Bureau of Consumer Protection, May 31, 2023.

Why this question never goes away

The doorbell rings; the question is who else had the feed. The FTC charged that for years — until 2018 — any Ring employee could access videos from any customer's cameras, and that one employee viewed thousands of recordings from female users in intimate spaces over several months. It charged that Ring failed to stop credential-stuffing attacks that let hackers take control of customer accounts, cameras, and videos — about 55,000 U.S. customers had their accounts compromised between January 2019 and March 2020 — and that multi-factor authentication, the standard blunting for exactly that attack, only arrived in 2019. The May 2023 settlement — filed in the U.S. District Court for the District of Columbia after a 3-0 Commission vote — required $5.8 million in consumer refunds, deletion of pre-2018 videos and face embeddings, and a mandated privacy and security program including MFA. The company is real — Amazon-owned since February 2018 — and the cameras work; the record is about the years the privacy didn't.

Five red flags — any one is enough

“Ring support” calling, texting, or emailing you first — the real company doesn't reach out about your camera, your account, or a refund; settled-brand impersonators ride every FTC headline.

Employee access you can't see — the FTC charged that until 2018 any Ring employee could access any customer's videos, and one employee viewed thousands of recordings from female users in intimate spaces.

No two-factor authentication on the account — the FTC said multi-factor authentication only arrived at Ring in 2019; without it, a stolen password is an open camera.

A reused password anywhere near the account — the FTC's case began with credential stuffing, an attack that only works against reused credentials; about 55,000 U.S. customers had their accounts compromised.

“Ring refund” or “settlement” contacts asking for information to send you money — the FTC never requires people to pay money or provide account information to send a payment.

Your next three moves

Sign in at ring.com or the official app you opened yourself — turn on two-factor authentication, remove shared users you don't recognize, and review the devices on the account. Never through a link a message handed you.

Refuse the specific ask: no “Ring support” contact you didn't start, and no reused passwords — the credential-stuffing wave in the FTC's case only worked on credentials victims used somewhere else too.

Report privacy violations and impersonators to the FTC at reportfraud.ftc.gov — and paste any “Ring” link into the $2 instant check for a 0–100 scam risk score before you act.

Sixty seconds of checking beats a four-figure mistake.

Paste any URL for a free instant preview — the full 0–100 report is $2, one-time. No subscription.

Spot the scam before it spots you.

For businesses · $19, one-time

Is someone impersonating your brand?

The costume in these scams — a lookalike domain, a copied storefront, a spoofed sender — is exactly what the brand impersonation audit researches for your company: lookalike domains, typosquats, and copycat sites trading on your name, each with evidence and a risk rating, plus a ready-to-send takedown-request template.

Audit my brand — $19

Free brand scan first — you only pay for the full audit.