The Consumer Financial Protection Bureau issued an order against Block, the operator of Cash App, requiring the company to provide up to USD 120 million in refunds and other redress to affected consumers, pay a USD 55 million penalty into the CFPB’s victims relief fund, and remediate failures in fraud prevention, customer service, and handling disputes over unauthorized transactions. The CFPB found that weak security protocols left Cash App users at risk and that the company failed to meet legal obligations to investigate and resolve disputes about unauthorized transfers, including closing cases without completing legally required investigations. The order describes practices that shifted responsibility to users and linked banks, including terms that led consumers to believe their bank was responsible for disputes and directing consumers to ask their bank to attempt reversals that Block would then deny. It also cites ineffective customer support, including a Cash Card telephone number that for years did not connect consumers to support, leaving users to rely on in-app or mail channels that generated delayed or inaccurate responses and increasing exposure to impersonation scams. Required remediation includes establishing 24-hour live-person customer service, fully investigating unauthorized transactions, and providing timely refunds where appropriate; the redress program has a USD 75 million minimum payment and consumers do not need to take action at this time. The order is limited to consumer financial protection laws within the CFPB’s remit, and the release notes that state regulators separately ordered Block to pay USD 80 million for Bank Secrecy Act and anti-money laundering law violations.
Consumer Financial Protection Bureau 2025-01-16
Consumer Financial Protection Bureau orders Block to pay up to USD 120 million in consumer redress and a USD 55 million penalty and fix Cash App fraud dispute handling
The Consumer Financial Protection Bureau (CFPB) ordered Block, operator of Cash App, to provide up to USD 120 million in refunds and pay a USD 55 million penalty for failures in fraud prevention and customer service. The CFPB found inadequate security protocols and improper handling of unauthorized transaction disputes, requiring Block to establish 24-hour customer service and ensure timely refunds. State regulators also fined Block USD 80 million for Bank Secrecy Act and anti-money laundering violations.