Cash App Faces Security and Fraud Scrutiny
Coverage from The Record, foodsafetycareers.org, and others
Articles
12
Active Days
83
The Topic

Cash App owner Block, Inc. is facing scrutiny over alleged weaknesses in fraud protections, identity verification, customer support, and handling of unauthorized activity. A multistate settlement requires $45 million in payments and operational changes, while separate reporting and consumer guidance address earlier data-exposure incidents, settlement eligibility, and account-security steps. The central concern is whether Cash App users received protections and assistance comparable to those associated with traditional banking services.
First Article: 04/17/26
Latest Article: 07/08/26
Summary
- A bipartisan coalition of 46 state attorneys general reached a $45 million settlement with Block over alleged Cash App security and fraud-protection failures.
- Investigators cited lax identity verification, multiple-account creation, delayed fraud investigations, account lockouts, and inadequate customer support.
- New York’s consent judgment requires 24-hour live support, including at least 13.5 hours staffed by people.
- Separate material discusses a 2022 incident involving unauthorized access to some customer data by a former employee.
- Users are advised to rely on official notices, review transactions and linked accounts, enable available security controls, and avoid phishing or fake settlement messages.
- Reported private settlement deadlines have passed, but the available material does not independently establish the status or scope of all referenced claims and payouts.
History
The updated version slightly reframes the story around regulatory enforcement and operational remediation, adding that the settlement imposes support changes while also clarifying that some private-claim deadlines have passed. It also tightens the characterization of the data incident as involving unauthorized access to some customer data by a former employee.
The story now centers on a newly reported multistate settlement and related consent-judgment obligations, making the enforcement and remediation layer more concrete than before. It also adds a separate settlement tied to an earlier unauthorized-access incident and clarifies the alleged scope of the security failures.
