Block Inc. Pays $45M After Regulators Document Cash App Verification Failures and Support Gaps

The consent orders from 46 attorneys general detail how Cash App's signup process allowed single actors to operate coordinated fraud accounts while the company delayed internal investigations and imposed lockouts that stranded victims. Texas received $5 million and New York $1.6 million under the deal, which also mandates 24/7 support with 13.5 hours of live agents. This tracks directly to the January 2025 CFPB consent order requiring $75-120 million in additional redress for the same control failures.

Procurement and job records show Block prioritized rapid user growth over identity controls; the absence of basic KYC elements persisted years after peer platforms adopted them. Official statements emphasize consumer deception, yet the technical evidence centers on missing rate limits and support channels that scammers exploited by impersonating nonexistent help lines. Independent analysis of the consent judgment reveals no requirement for retroactive transaction monitoring upgrades beyond live support staffing.

The settlement reinforces a pattern across Dorsey-era fintechs where marketing claims of bank-level protection outpace implemented controls, visible in both Cash App and Square account takeover complaints logged with state regulators. Next steps include state monitoring of the mandated support hours and potential follow-on actions if complaint volumes do not decline within the 18-month reporting window.

Operational significance lies in the explicit linkage between verification gaps and social engineering success rates, a connection regulators quantified through user reports but Block had previously attributed to external factors alone.