Yes, Venmo improperly shared user transaction data, and the company has faced multiple legal actions as a result. The most significant case came in 2018 when the Federal Trade Commission (FTC) settled charges against PayPal and Venmo for misrepresenting how the app’s privacy settings worked. By default, Venmo shared all transaction details publicly on the internet—including who paid whom, how much money changed hands, and what the payment was for—without users realizing it. The company had claimed users could limit visibility to just the “Venmo social web,” but the reality was far different.
Users had to take an undisclosed second step to restrict visibility, and even then, many were unaware their payments had been broadcast to the world. Beyond the 2018 FTC settlement, Venmo users have been involved in multiple class action lawsuits addressing various data-sharing and privacy violations. These include a settled case involving unauthorized access to bank account data through Plaid (which paid $58 million), as well as several active cases addressing account freezing practices, unsolicited text messages, and California’s privacy laws. Understanding what happened, what settlements exist, and what claims may still be available is critical for anyone who used Venmo during these periods.
Table of Contents
- How Did Venmo Share User Transaction Data Without Proper Consent?
- What Was the FTC Settlement and What Did It Require?
- The Plaid Class Action Settlement and Unauthorized Bank Account Data Access
- Active Venmo Class Actions Currently in Litigation (2025–2026)
- Washington State Text Message Investigation and Potential Statutory Damages
- California Privacy Law Claims and Class Certification Status
- Current Status and What’s Next for Venmo Privacy Claimants
- Conclusion
How Did Venmo Share User Transaction Data Without Proper Consent?
Venmo’s core privacy violation involved the app’s default public transaction visibility setting. When users downloaded Venmo and began sending and receiving money, their transaction history was automatically visible to anyone on the internet. This wasn’t limited to a private social network of friends—it was truly public. Someone could visit the Venmo website, search for transactions by phone number, and see payments between strangers: “$50 for rent,” “$30 for lunch,” “$200 for medical bills.” The FTC found that Venmo had misrepresented this practice, claiming that the app’s privacy settings allowed users to share transactions only within the “Venmo social web.” In reality, users had to discover and manually enable an additional privacy setting to limit visibility, and the default remained dangerously open. The 2018 FTC settlement required PayPal and Venmo to immediately stop misrepresenting their privacy practices and security safeguards.
The company was also obligated to obtain clear affirmative consent from users before sharing any personal financial information and to implement stronger security measures. What makes this violation especially concerning is that many Venmo users never realized their payment history was public. Millions of transactions—revealing everything from relationship details to financial struggles to business dealings—were searchable online without consent. This same default-public approach created additional risks. Bad actors could use the public transaction feed to identify payment patterns, target victims for fraud, or gather intelligence on individuals. The privacy violation wasn’t just about exposing data; it was about enabling real-world harms based on financial information that users believed was private.
What Was the FTC Settlement and What Did It Require?
The federal Trade Commission’s 2018 settlement with PayPal and Venmo was the first major enforcement action addressing Venmo’s privacy practices. Under the settlement, PayPal agreed to provide injunctive relief, meaning the company was prohibited from making any future misrepresentations about its privacy or security practices. The FTC also required PayPal and Venmo to implement a comprehensive privacy and security program, with regular third-party assessments, to ensure compliance going forward. However, it’s important to note that the FTC settlement itself did not provide direct cash payments to affected users.
The settlement was an enforcement action, not a compensation mechanism. The settlement did establish that Venmo’s practices violated the Gramm-Leach-Bliley Act’s Privacy and Safeguards Rules, which apply to financial institutions handling consumer financial information. This was a significant legal finding because it meant Venmo was subject to the same privacy obligations as traditional banks—obligations the company had been sidestepping. The limitation of the FTC settlement is that while it stopped future violations and required policy changes, it didn’t compensate millions of users whose transaction data had already been exposed. For actual compensation, affected users had to look to separate class action lawsuits.
The Plaid Class Action Settlement and Unauthorized Bank Account Data Access
While Venmo’s direct handling of transaction data was addressed by the FTC, a separate class action settlement addressed another serious data-sharing problem: unauthorized access to Venmo users’ bank account information through a data aggregator company called Plaid. Between January 2013 and November 2021, Plaid accessed bank account data from millions of Venmo users without proper authorization or clear disclosure. Plaid’s “read-write” access meant the company could theoretically perform transactions on behalf of users, creating significant security and privacy risks. The class action settlement against Plaid resulted in a $58 million compensation fund. Affected users received $35.97 per person, with claims distributed between 2022 and 2023.
However, this settlement is now closed. The claim deadline was April 28, 2022, meaning no new claims can be filed. If you used Venmo during the affected period (January 2013 – November 2021) and connected your bank account to the app, you may have been affected by the Plaid data access issue. The key limitation here is that the settlement has already concluded; you cannot file a claim now. Anyone who missed the deadline has lost the opportunity to claim compensation from this particular settlement.
Active Venmo Class Actions Currently in Litigation (2025–2026)
As of early 2026, several Venmo-related class action lawsuits remain active and unresolved. One significant case involves account freezing practices. Venmo has frozen user accounts, sometimes without advance notice or clear explanation, affecting users’ ability to access their own funds. A consolidated lawsuit in the Northern District of California addressing these practices completed discovery in late 2025, with class certification motions expected in Q1 2026. This means the case is progressing toward a potential class certification vote, where a judge will decide whether the case can proceed on behalf of all affected users.
Another active investigation involves Venmo sending unsolicited promotional text messages to users in Washington State. Regulators are investigating whether these messages violated CEMA (Commercial Email and Marketing Act) rules. If violations are proven, statutory damages could reach up to $500 per violation per person, which could represent substantial compensation if a user received multiple unsolicited messages. Additionally, a California privacy class action survived a motion to dismiss in 2025. The court ruled that Venmo’s default public transaction settings may violate California’s state privacy laws, allowing the case to move forward toward class certification. Unlike the closed Plaid settlement, these cases are still active, meaning there may eventually be claim periods where affected users can seek compensation.
Washington State Text Message Investigation and Potential Statutory Damages
Venmo’s marketing practices have come under scrutiny in Washington State, where regulators are investigating potentially deceptive or unsolicited text messages. The investigation centers on whether Venmo violated state consumer protection laws by sending promotional messages without proper consent or clear opt-out mechanisms. What distinguishes this potential claim is the statutory damage structure: if violations are substantiated, affected users could recover up to $500 per text message violation, not just actual damages. This means a single user who received multiple unsolicited texts could have claims totaling thousands of dollars.
The significant limitation with this investigation is timing and uncertainty. As of March 2026, the investigation is ongoing but no settlement has been reached. It’s unclear whether Venmo will eventually face class action liability, settle the investigation, or dispute the claims entirely. Users cannot currently file claims related to unsolicited texts because no settlement process exists yet. If you received unsolicited promotional texts from Venmo in Washington State, it may be worth documenting these messages and monitoring for any future settlement announcement, but no immediate claim process is available.
California Privacy Law Claims and Class Certification Status
California residents have filed a separate class action claiming that Venmo’s default-public transaction visibility violates California’s privacy statutes. The case survived a motion to dismiss in 2025 when the court found the claims potentially valid—meaning the lawsuit can continue instead of being dismissed outright. The judge determined that Venmo’s practice of defaulting users to public transaction sharing, combined with the cumbersome process to restrict visibility, may constitute unlawful privacy violations under California law. This is an important development because it keeps alive one of the strongest privacy claims against Venmo at the state level.
However, the case has not yet reached class certification, meaning a judge has not yet formally approved it as a class action lawsuit. Class certification is a critical threshold: once certified, the case can proceed on behalf of all affected California residents, which significantly strengthens the plaintiffs’ negotiating position and makes settlement more likely. Currently, the case remains in litigation. If and when class certification is granted, and if the case settles or proceeds to judgment, there will likely be a claim period for affected users. Anyone who lived in California and used Venmo during the public default settings period should monitor this case’s progress.
Current Status and What’s Next for Venmo Privacy Claimants
As of March 2026, there are no active settlement claim forms available for Venmo privacy violations. The Plaid settlement has closed. The FTC settlement never included a compensation fund for users. The active cases—account freezing, Washington State text messages, and California privacy violations—remain in litigation or investigation phases without settled claim processes.
This means that while multiple legal avenues exist for Venmo users to pursue compensation, most of them are not yet at the point where claims can be filed. The most likely next step is that one or more of the active cases will reach settlement or class certification, at which point a claim period will be announced. Affected users should monitor legal claims websites and the relevant courts’ websites for updates on these cases, particularly the California privacy case and the account freezing litigation. If you are affected by any of these issues—account freezing, unsolicited texts in Washington State, or use during the default-public transaction period—it’s worth keeping documentation of your experiences, as this evidence may be needed to support a future claim when a settlement process becomes available.
Conclusion
Venmo’s privacy violations were real, documented, and far-reaching. The company’s default-public transaction settings exposed millions of users’ financial information to public scrutiny without clear consent. While the 2018 FTC settlement stopped ongoing misrepresentation and the Plaid settlement compensated users for unauthorized bank data access, multiple unresolved lawsuits remain active.
As of mid-2026, no current settlement claim forms are accepting applications, but litigation is advancing on account freezing, unsolicited marketing texts, and state privacy violations. If you used Venmo during the periods covered by these lawsuits, monitor the status of active cases for announcements about settlement claim periods. Keep records of any account freezing, unsolicited messages, or other issues you experienced. When claim processes do open for the active cases, affected users will have the opportunity to seek compensation for Venmo’s privacy and consumer protection violations.
You Might Also Like
- Progressive Snapshot Privacy Class Action Claims Driver Data Was Collected Without Proper Consent
- LexisNexis Driver Data Class Action Claims Consumer Driving Reports Were Shared Improperly
- Verisk Insurance Data Class Action Claims Policyholder Risk Data Was Misused
Open Settlements You Can Claim Now
Browse current class action settlements accepting claims — several require no proof of purchase: