Millions of Cash App users deposited paychecks, received debit cards, dabbled in Bitcoin, and assumed their money was protected. When accounts were drained, many discovered there was no phone number to call, no investigation on the way, and no guarantee of FDIC insurance. That nightmare, multiplied across 59 million monthly users, is exactly what 46 state attorneys general spent years documenting. In July 2026, Block, Inc. agreed to pay $45 million to settle the multistate probe. The company denied wrongdoing.
Here’s what investigators found:
- Cash App allowed account creation without Social Security numbers or dates of birth, with no limit on accounts per person — essentially rolling out the red carpet for scammers.
- Most users had no official customer support phone number. Fraud victims Googling for help landed on fake “Cash App support” lines run by the scammers themselves — a phishing scheme wearing a customer service mask.
- Promotional campaigns like “Cash App Fridays” became breeding grounds for impersonation scams.
- Block marketed the platform as safe to unbanked and underbanked consumers who had nowhere else to turn. Cash App is not a bank. Funds are not automatically FDIC-insured unless held in specific partner-bank accounts.
“Cash App told people their money was safe, and millions of Americans believed them, including a lot of people who didn’t have other options,” said Oregon AG Dan Rayfield. Pennsylvania AG Dave Sunday added that Block “knew peer-to-peer payment apps were prime targets for fraudsters, and instead of taking extra steps to safeguard their platform, they misled and deceived consumers.” These weren’t abstract regulatory complaints. The most financially vulnerable users in the country got burned.
This settlement doesn’t exist in isolation. In January 2025, the CFPB ordered Block to pay up to $120 million in consumer refunds plus a $55 million civil penalty for botched fraud investigations and absent customer service. The multistate $45M backstops that action — if CFPB relief isn’t properly paid out, states can step in.
What Actually Changes Now
Regulators are forcing Cash App to behave like the bank it always implied it was — minus the charter.
Under the settlement, Block must:
- Provide live phone support at least 13.5 hours daily and live chat for roughly 18 hours daily.
- Stop making misleading safety claims.
- Educate users about common scam types.
- Actually investigate fraud complaints with legally required reimbursement for unauthorized transactions.
Block touts AI-driven fraud detection that monitors millions of transactions in real time. But regulators aren’t impressed by backend algorithms when the front door — customer support, fraud resolution, honest marketing — stays broken. Every fintech app marketing “bank-like” features just received a very expensive warning. Venmo, PayPal, and every P2P platform should be taking notes. These kinds of failures are part of a broader pattern of tech scandals that have taken advantage of millions of people.
The $45M goes to states as civil penalties, not directly to defrauded users. If you’ve lost money to Cash App fraud, your path runs through Cash App’s official support channels or the CFPB settlement process. The structural win here matters most: next time an app tells you your money is “safe,” there are now enforceable standards behind those words — and 46 attorneys general who’ve already proven they’ll use them. In the meantime, it’s worth reviewing whether you’re paying too much for financial services that leave you underprotected.
