Platform: Cash App (Block, Inc.)
Investigation Status: Concluded — Multiple Settlements
Total Penalties: $255 Million+
Cash App, the peer-to-peer payment platform operated by Block, Inc. (founded by Jack Dorsey), has been hit with one of the largest coordinated enforcement actions in payment platform history. Regulators at the federal and state level imposed a combined $255 million in penalties between January and April 2025 after investigations into systemic failures in fraud prevention, anti-money laundering (AML) compliance, and consumer protection.
What Went Wrong
The New York Department of Financial Services announced that Block, Inc. has agreed to pay a $40 million penalty after significant failures in its Bank Secrecy Act/Anti-Money Laundering compliance program that violate the Department’s regulations regarding money transmitter and virtual currency regulations. The Department of Financial Services investigation found critical failures in Block’s BSA/AML compliance program. The investigation found that Block had inadequate customer due diligence, had failed to implement sufficient risk-based controls to prevent money laundering and other illicit activity, and had failed to effectively and timely monitor transactions.
The investigation also found that bad actors had taken advantage of weak Know Your Customer requirements, including 8,359 accounts that were connected to a Russian organized crime group in 2022. The investigation was particularly harsh in its criticism of Block’s handling of Bitcoin transactions on its Cash App service. The service allowed largely anonymous transactions to occur without proper scrutiny of high-risk cryptocurrency transactions.
The Full Regulatory Picture
The New York settlement was only one component of a broader reckoning:
As a result of a coordinated enforcement effort involving financial regulators from 48 states, Block will pay an $80 million fine and take remedial action for violations of the Bank Secrecy Act and anti-money laundering laws that protect the financial system from illicit use. Over 50 million consumers use Cash App, a mobile payment product offered by Block.
The Consumer Financial Protection Bureau (CFPB) ordered Block, which operates the Cash App, to pay $120 million to consumers and pay a $55 million penalty to the CFPB’s victims’ relief fund. Block had weak security measures for the Cash App and put users at risk. Block is under a legal obligation to investigate and resolve customer disputes over unauthorized transactions. However, Block’s investigations were laughably incomplete.
The CFPB’s findings on the matter of consumer harm were particularly damning. The enforcement order states that Block instructed users who had suffered financial loss as a result of fraud to contact their bank and attempt to reverse the transaction. Block then proceeded to deny the request. The company also took a number of steps to prevent Cash App users from receiving assistance and thereby reduce costs for the company.
Remediation Requirements
Block is now subject to intensive oversight. Under the terms of the consent orders, the company must:
- Hire an independent monitor to perform a comprehensive evaluation of its compliance with regulatory requirements
- Implement 24-hour, live-person customer service
- Fully investigate unauthorized transactions and provide timely refunds where appropriate
- Submit detailed reports to state regulators within nine months
- Correct any compliance deficiencies identified within 12 months of the report filing
Verification Status: UNDER REGULATORY REMEDIATION
Cash App remains operational and fully licensed, but users should be aware that the platform is currently under independent monitoring as part of its regulatory settlement. The company has agreed to improve its compliance mechanisms, and its success will be independently monitored over the next year.
What This Means for Users
If you are a Cash App user who experienced unauthorized transactions, account lockouts, and fraud between 2020 and 2024, you may be eligible to receive compensation under the terms of the settlement with the CFPB. You don’t need to take any action at this time; eligible users will be notified when the redress process commences.
The regulatory status of the platform can now be verified against several enforcement actions against the company. While the company is taking steps to resolve its compliance issues, the extent of its previous violations, especially the exploitation of its weaknesses by a Russian organized crime group, does raise some questions about its previous security posture.Fintvia Assessment: Cash App’s enforcement record represents one of the most significant compliance failures among U.S. payment platforms in recent years. It is now under much stricter regulatory oversight, which is good news for users in the future. However, the compliance issues experienced in the past were widespread and entrenched, and people should not wait to see what the independent compliance review comes up with.
