Block Inc., the financial services company behind Cash App, has agreed to pay $45 million to settle a multistate fraud investigation led by 46 state attorneys general who alleged the company systematically misled consumers about Cash App’s fraud protections. The settlement, announced in mid-2026, marks a significant enforcement action against one of the nation’s most popular peer-to-peer payment platforms, which had marketed itself as offering bank-level fraud detection while failing to adequately protect users from unauthorized transactions.
The agreement includes not just the $45 million payment to states but also an estimated $75 to $120 million restitution program specifically for consumers who fell victim to fraud on the platform. The case highlights a troubling gap between marketing promises and actual consumer protection on digital payment apps. When a Cash App user in Texas sent $500 to what she believed was her bank’s customer service number to verify suspicious account activity, but was actually contacting a scammer who had spoofed the number, she lost the money with minimal help from Cash App’s support system—a scenario that played out for thousands of users nationwide.
Table of Contents
- What Fraud Protection Claims Did Block Inc. Make to Consumers?
- What Specific Practices Led to This Settlement?
- Who Signed onto the Settlement and Why Did Some States Sit Out?
- What Requirements Does Block Inc. Now Have Under the Settlement?
- How Does This Settlement Compare to Fraud Issues on Other Payment Platforms?
- What Is the Restitution Fund and Who Can Claim?
- What Does This Settlement Signal About Consumer Protections for Digital Payment Apps?
What Fraud Protection Claims Did Block Inc. Make to Consumers?
Block Inc. and its cash app subsidiary made explicit claims in their marketing materials that the service provided fraud detection and protection comparable to traditional bank accounts. The company advertised that Cash App users would be protected from fraudulent transactions with the same reliability consumers expected from established financial institutions. In reality, according to the state attorneys general who investigated the matter, Cash App’s fraud protection mechanisms were significantly weaker than advertised, and the company’s customer support infrastructure was inadequate to help users who encountered fraud.
The deceptive marketing extended to how Block presented its security features. The company suggested through its advertising and user interface that Cash App monitored for suspicious activity and would prevent unauthorized use, when in fact the platform lacked robust real-time fraud detection systems. One consumer in California received a text notification that $2,000 had been sent from her Cash App account to an unknown recipient, but by the time she contacted support, the scammer had already initiated a withdrawal and the money was irretrievable. Block’s investigation of her case took weeks, and she was ultimately told the transaction couldn’t be reversed because she had authorized the payment—even though she had no record of doing so and suspected her account had been compromised.
What Specific Practices Led to This Settlement?
The investigation found that Block failed to implement adequate safeguards against common fraud schemes, despite claiming such protections existed. The company also marketed Cash App in ways that actually increased fraud risk, including promoting rapid money transfers and minimal verification requirements as user-friendly features, when these same characteristics made the platform attractive to scammers. Critically, Block’s customer support was understaffed and difficult to access, meaning consumers who discovered unauthorized transactions had limited ability to quickly report fraud or get immediate assistance. Block also engaged in insufficient fraud investigation procedures.
When users reported fraudulent transactions, the company’s process for verifying claims and issuing refunds was slow, inconsistent, and often resulted in denial of legitimate claims. The settlement requires Block to stop making misleading safety claims and to fundamentally restructure its fraud response procedures. However, one limitation of this settlement is that it addresses going-forward conduct rather than providing full compensation to all past victims—the $75 to $120 million restitution fund will be divided among potentially hundreds of thousands of claimants, meaning individual payouts may be modest. Additionally, the settlement does not admit that Block committed fraud, which some consumer advocates argued would have sent a stronger deterrent message to other platforms.
Who Signed onto the Settlement and Why Did Some States Sit Out?
A total of 46 state attorneys general participated in the settlement negotiation and agreement. Four states—Hawaii, Missouri, South Carolina, and Wyoming—did not join, though their residents may still be eligible for restitution depending on where they were located when they opened their Cash App accounts. The decision by some states to sit out a major consumer protection settlement can reflect different priorities, existing litigation positions, or disagreements over settlement terms, though the specific reasons each state made its choice were not uniformly disclosed.
The large number of participating states underscores the breadth of the fraud problem across the country. State attorneys general from consumer protection divisions across the political spectrum viewed the deceptive marketing practices as serious enough to warrant coordinated action. For example, both New York’s attorney general and California’s attorney general highlighted in their statements how Cash App’s failures had disproportionately harmed lower-income and immigrant communities who often lack access to traditional bank accounts and were attracted to Cash App’s ease of use and rapid transfer speeds.
What Requirements Does Block Inc. Now Have Under the Settlement?
The settlement imposes specific operational requirements designed to prevent future fraud and provide better consumer protection. Block must now maintain 24-hour live customer support with phone access available through a human representative for at least 13.5 hours per day and live chat support for at least 18 hours per day. This is a significant upgrade from Cash App’s historical support model, which was criticized for relying too heavily on automated systems and email-based support with slow response times.
When a consumer previously tried to report fraud on Cash App, they often faced chatbots that couldn’t resolve the issue and wait times of several days for email responses—timeframes that allowed scammers to disappear with the stolen funds. Block must also comply with requirements to investigate fraud reports promptly, reimburse unauthorized transactions according to specific timelines, and educate users about common scams and how to protect themselves. The company is prohibited from making unsubstantiated claims about fraud protection, must disclose the limitations of its fraud detection systems, and must adopt industry-standard protocols for investigating suspicious activity. A limitation of these requirements is that they apply only prospectively—they don’t change what happened to fraud victims before the settlement was reached, though the restitution fund attempts to address past harms.
How Does This Settlement Compare to Fraud Issues on Other Payment Platforms?
Cash App is not the only digital payment platform that has faced fraud challenges and regulatory enforcement. PayPal, Venmo, and other peer-to-peer payment services have dealt with similar issues related to fraud protection and customer support, though few have faced settlements quite as comprehensive as Block’s. The Cash App settlement is notable because it combines financial penalties, a dedicated restitution fund, and specific operational changes—essentially forcing the company to invest in the very protections it claimed to already have. One key distinction is that some other platforms explicitly warn users that they should only send money to trusted contacts, presenting person-to-person payment as inherently different from bank transfers.
Cash App’s marketing, by contrast, suggested a higher level of automated fraud prevention than this. The settlement’s requirement for enhanced customer support addresses a real gap: many consumers don’t realize that a peer-to-peer app is not a bank and therefore doesn’t have FDIC insurance or federal protections on transfers. This misunderstanding, which Block’s marketing arguably encouraged, left users vulnerable when they encountered fraud. Consumers using Cash App should understand that even with the new settlement requirements, the platform’s fraud protections remain weaker than traditional banks, and money sent through Cash App cannot be recalled by the sender once the recipient withdraws it.
What Is the Restitution Fund and Who Can Claim?
The settlement establishes a $75 to $120 million fund specifically to compensate consumers who were victims of fraud on Cash App. The exact amount of the fund will depend on how many valid claims are submitted and the administrative costs of distributing the compensation. Unlike the $45 million settlement payment to states, which funds law enforcement activities and consumer protection efforts, this restitution is meant to go directly into consumers’ pockets.
Eligible victims will likely be those who can demonstrate unauthorized transactions on their accounts that Block failed to investigate, refund, or protect against. The claim process typically requires submitting documentation of the fraud and proof of the loss, though the specific filing procedures and deadline for this settlement have been or will be published by the state attorneys general. Consumers in non-participating states may still have paths to file, though they should verify with their state’s attorney general office or on official settlement administration websites when those are established.
What Does This Settlement Signal About Consumer Protections for Digital Payment Apps?
This settlement represents a major enforcement action against misleading claims in the fintech space and signals that state attorneys general are willing to take large companies to task for overstating their fraud protections. The case demonstrates that platforms cannot simply market themselves as offering bank-equivalent security without delivering equivalent systems and support. For consumers, it underscores the importance of understanding that digital payment apps operate in a regulatory gray zone compared to banks—they often have fewer protections and faster money movement, which benefits users under normal circumstances but creates vulnerability to fraud.
The specific support requirements imposed—24-hour assistance, live representatives, dedicated fraud investigation teams—suggest what state regulators believe should be baseline standards for platforms handling consumer money. However, the settlement is binding only on Block and doesn’t automatically raise standards across the industry. Other payment platforms are watching closely to see whether similar investigations will follow, and some may proactively upgrade their fraud protections and customer support to avoid enforcement action. The settlement also demonstrates that misleading advertising claims about fraud protection can trigger multistate enforcement action, which may discourage other companies from making unsubstantiated security promises in their marketing materials.
- —