The Consumer Financial Protection Bureau issued an enforcement order against Block, Inc. on 16 January 2025, requiring the company to pay up to $175 million in total for widespread failures in how its Cash App platform handled fraud and consumer complaints. The order mandates that Block pay at least $75 million and up to $120 million in refunds and redress to consumers harmed by the platform's conduct, alongside a $55 million civil money penalty paid to the bureau. The action follows findings that Block violated the Electronic Fund Transfer Act and Regulation E, its implementing rule.
The CFPB found that Block routinely failed to properly investigate reports of unauthorised transactions made through Cash App, did not provide provisional credits to customers during delayed investigations as required by law, and locked users out of their accounts for extended periods without adequate recourse. The agency concluded that these failures left tens of millions of Cash App users exposed to financial harm with little meaningful protection from the platform they had trusted to handle their money.
STATE ENFORCERS COMPOUND THE PRESSURE
The federal action did not arrive in isolation. On 15 January 2025 — one day before the CFPB order was issued — a coalition of state regulators separately ordered Block to pay $80 million for Bank Secrecy Act and anti-money laundering violations. That enforcement round addressed concerns about Cash App's financial crime compliance rather than its consumer protection practices, but it reflected many of the same underlying concerns about the pace at which Block's compliance infrastructure had kept up with the rapid growth of the platform. Taken together, the two sets of settlements bring Block's combined financial obligations to approximately $255 million.
The simultaneous pursuit of Block by both federal consumer protection authorities and state financial regulators underscores the mounting scrutiny facing mobile payment platforms that have scaled rapidly without always maintaining compliance programmes commensurate with their size and product complexity. Cash App, which began as a simple peer-to-peer money transfer tool, has expanded into banking-like services including direct deposits, a debit card product, and cryptocurrency trading, each of which brings its own regulatory requirements. The CFPB's action makes clear that the consumer protection obligations attached to those products were not being met.
MANDATORY REFORMS TO CUSTOMER SERVICE AND DISPUTE HANDLING
Beyond the financial settlements, the CFPB's order imposes operational requirements on Block that go to the core of how Cash App handles customer complaints and fraud disputes. Block must establish a 24-hour live-person customer service capability, addressing longstanding criticism that the platform relied too heavily on automated processes and provided customers with no meaningful way to speak with a real person when their accounts were frozen or transactions were disputed. The company must also fully and properly investigate all reports of unauthorised transactions going forward, in line with the requirements of EFTA and Regulation E.
The order represents one of the most significant enforcement actions taken against a major fintech payments platform under the Electronic Fund Transfer Act. For Block, which also operates the Square merchant payments business and has made Bitcoin services a prominent feature of its offering, the combined financial and reputational costs of the settlements arrive at a sensitive moment. The company has been positioning itself as a comprehensive financial services provider for underbanked and mainstream consumers alike, and its ability to sustain that ambition will depend in part on demonstrating that the compliance and consumer protection failures identified by regulators are being addressed substantively rather than superficially.