Block Inc. reached a $45 million settlement with 46 states this week over claims that its popular Cash App service misled users about security features and left them vulnerable to fraud. The agreement comes just over a year after the Consumer Financial Protection Bureau hit the company with a far larger $175 million order for similar shortcomings. Yet the latest action shows how state attorneys general continue to press fintech firms on consumer protections even as federal oversight faces uncertainty.
The multistate probe found that Block advertised Cash App as offering bank-like safeguards. In reality, the peer-to-peer payment app fell short. Accounts could be opened without a Social Security number or date of birth. Users faced no limits on the number of accounts they could create. These design choices, investigators said, made the platform an easy target for scammers. TechCrunch reported that states alleged Block responded to a surge in fraud reports by ramping up marketing instead of fixing core weaknesses.
Customer support proved especially problematic. For years Cash App lacked an official live phone number. Scammers filled the void by setting up fake support lines that tricked locked-out users into handing over more information or money. The states documented how this gap persisted even after the company knew about the issue in 2018. Live phone support did not arrive until 2021. And even then, response times often disappointed.
Block denied any wrongdoing in the settlement. A company spokesperson told Reuters that the deal “resolves a previously disclosed legacy matter that primarily relates to historical aspects of our business.” The statement highlighted recent investments in consumer protection, customer service and compliance systems. “We share the commitment of the attorneys general to addressing industry challenges and continue to invest in operations and technology,” the spokesperson added.
But the record shows a pattern. In January 2025 the CFPB ordered Block to provide up to $120 million in consumer redress and pay a $55 million penalty. CFPB Director Rohit Chopra said at the time, “Cash App created the conditions for fraud to proliferate on its popular payment platform. When things went wrong, Cash App flouted its responsibilities and even burdened local banks with problems that the company caused.” The bureau found weak security protocols, incomplete investigations of unauthorized transactions, and tactics that discouraged users from filing complaints. The order required 24-hour live customer service, full investigations and timely refunds. The CFPB announcement detailed how the company often told victims to seek chargebacks from their banks only to deny responsibility later.
The new state settlement builds on that foundation. Block must stop making misleading claims about its fraud detection and FDIC insurance. Cash App balances are not directly insured. Coverage applies only if the partner bank fails. The company also agreed to provide live agents for at least 13.5 hours a day as part of round-the-clock support. Complaints must receive responses within three days. These changes aim to close the gaps that left many users high and dry.
California Attorney General Rob Bonta described the outcome in blunt terms. His office secured roughly $2.9 million of the total payout. “Consumers were left high and dry,” Bonta said in a release that also noted the deal prevents Block from evading its CFPB redress obligations if federal enforcement weakens. The multistate coalition included attorneys general from Oregon, Texas, New York and dozens of others. Texas stands to receive about $5 million. Oregon will get around $3 million. New York’s share is near $1.6 million. California’s Department of Justice outlined the terms.
Cash App serves roughly 59 million monthly active users. Its growth turned Block into a major player in digital payments. Jack Dorsey’s company also operates Square, the card-reading service for small businesses. Success brought scrutiny. Earlier actions included an $80 million multistate penalty for anti-money laundering violations and a $40 million fine from New York’s Department of Financial Services. A separate Washington state settlement addressed Cash App’s role in processing $22 million in fraudulent unemployment benefits during the pandemic.
Industry observers see the case as part of broader pressure on nonbank financial apps. Unlike traditional banks, these platforms often market speed and simplicity. Yet that convenience can mask inadequate controls. The states argued Block knew fraud was rising yet prioritized user acquisition. Easy onboarding and social media promotions fueled adoption but also abuse.
The settlement requires Block to maintain improved fraud prevention systems. It must better verify user identities and limit account proliferation. Regulators want faster detection of suspicious activity. And they demand genuine support channels so victims do not fall prey to secondary scams. Block will face ongoing oversight to confirm compliance.
Still, the payment represents a fraction of Cash App’s revenue. The company reported strong growth in recent quarters. Its stock reacted mildly to the news. Investors appear to view the matter as contained. But for the thousands of users who lost funds to fraud, the impact was personal. Many never recovered their money. Others spent hours on hold or chasing fake support lines.
And the timing matters. The CFPB order came during the prior administration. With federal agencies now under new leadership, states have stepped forward. Their coordinated action shows a willingness to fill perceived gaps. Oregon Attorney General Dan Rayfield and Maryland Attorney General Anthony Brown both issued statements emphasizing consumer harm. Similar releases came from offices across the country.
Block has promised better. The company points to upgrades already made since the investigated period. Enhanced identity checks, improved monitoring tools and expanded support teams form part of its response. Whether these steps match the scale of its user base remains an open question. Cash App’s rapid expansion outpaced some operational safeguards. That mismatch created openings scammers exploited.
Fintech executives face a clear message. Growth at all costs carries risks. Marketing claims must match actual capabilities. Support cannot be an afterthought. And when fraud spikes, the response must focus on protection rather than promotion. The states’ $45 million settlement, while not admission of liability, extracts a price for past choices.
Users, meanwhile, should approach such apps with caution. Enable security features. Monitor accounts closely. Report problems immediately through official channels. The convenience of instant transfers comes with trade-offs. This episode reminds everyone that digital dollars still require real-world vigilance.
The deal closes one chapter. But it does not end the conversation. Other regulators may examine similar platforms. Lawmakers could push for clearer rules on nonbank payment services. And consumers will keep testing whether promised protections actually work. For Block and Cash App, the test continues.
WebProNews is an iEntry Publication