Cash App's fake support line ran for 5 years. Fines: $300M.
Summary
From 2016 to 2021, Cash App printed a customer-service phone number on its cards that didn't actually connect to a human -- and fraudsters filled the gap with fake 'support' numbers that tricked users into installing malware and draining their accounts. Three separate regulators have now penalized Block, Inc., Cash App's parent, over related failures: the CFPB ($175 million, January 2025), a 48-state banking-regulator coalition ($80 million, January 2025), and a 46-state attorney general coalition ($45 million, July 2026) -- about $300 million combined.
A gap fraudsters filled
Unable to reach real support, many customers searched online⧉ and found fake 'Cash App support' numbers posted by fraudsters. Callers were told to install a 'remote access tool' -- malware that let the fraudsters drain the victim's account. 's order states Block knew about the fake numbers but didn't warn customers until late 2020, and its attempts to get the fraudulent ads taken down didn't work.
View data as table
| CFPB (Jan. 2025): penalty + consumer redress | 175,000,000 |
|---|---|
| 48 state banking regulators (Jan. 2025): BSA/AML | 80,000,000 |
| 46 states attorneys general (Jul. 2026) | 45,000,000 |
Three regulators, three separate cases
's January 2025 order⧉ required Block to reserve at least $75 million for consumer redress (up to $120 million) plus a $55 million penalty -- $175 million combined -- for unfair customer-service and fraud-prevention failures. The same month, a coalition of 48 state banking regulators separately fined Block $80 million over Bank Secrecy Act and anti-money-laundering compliance gaps. Then in July 2026, 46 states reached a $45 million settlement over deceptive fraud-safety claims and inadequate protections -- including a 'Cash App Fridays' promotion that encouraged users to publicly post payment identifiers fraudsters then exploited.
View data as table
| Block's 2023 Cash App gross profit | 4,000,000,000 |
|---|---|
| Combined enforcement, 2025-2026 | 300,000,000 |
What changes now
The July 2026 settlement requires Block to offer live support 24 hours a day⧉ -- a human reachable by phone at least 13.5 hours of that and by live chat at least 18 hours -- stop the marketing practices regulators say encouraged fraud, and properly investigate and reimburse unauthorized transactions going forward. 'Cash App was riddled with fraud, and the company did next to nothing to protect its customers,' Connecticut Attorney General William Tong said in announcing the settlement. Block has not conceded that characterization: responding to the 's order, the company said it 'strongly disagree[d] with the 's mischaracterizations' even as it chose to settle, and it similarly denied wrongdoing in the July 2026 settlement.
The takeaway
- Three different regulators, three different legal theories. Unfair/deceptive practices (), anti-money-laundering compliance (48 state banking regulators), and consumer-protection law (46 states) -- each found a separate basis to penalize the same underlying platform.
- The core problem predates all three actions. The non-working support number ran from 2016 to 2021 -- years before any of the settlements were reached.
- $300 million is real money, but it's a fraction of what Cash App earns. The combined total is about 7.5% of the $4 billion in gross profit Block says Cash App generated in 2023 alone.
Block consented to all three actions without admitting or denying wrongdoing, consistent with standard practice in agency and multistate consent settlements; none of the three is a judicial finding of liability, and Block disputes the regulators' characterizations even while agreeing to pay and to the required changes. 's $120 million redress ceiling is a maximum, not a guarantee -- the $75 million floor is what Block was required to reserve regardless of how many consumers file valid claims. The $300 million combined-enforcement figure spans roughly 18 months across three separate actions (January 2025 to July 2026); comparing it to Block's single-year 2023 Cash App profit is a scale reference, not a same-period ratio. Coverage describing the July 2026 settlement as including the District of Columbia could not be confirmed against a primary state source, so this article states 46 states only. This article covers three enforcement actions specifically tied to Cash App's fraud-prevention and compliance practices; it does not cover Block's broader business or its other products.
Sources(5) ▾
- Consumer Financial Protection Bureau, In the Matter of Block, Inc. -- Consent Order (File No. 2025-CFPB-0001) (2025-01-16) — The 's full 75-page consent order against Block, Inc. (operator of Cash App), including the Bureau's factual findings, the legal violations cited, and the redress/penalty terms. Fetched directly from files.consumerfinance.gov and converted with pdftotext -layout; read in full. files.consumerfinance.gov · original document
- Conference of State Bank Supervisors (CSBS), State Regulators Issue $80 Million Penalty to Block, Inc., Cash App for BSA/AML Violations (2025-01-15) — CSBS's announcement of a coordinated multistate banking-regulator settlement with Block, Inc. over Bank Secrecy Act/anti-money-laundering compliance failures, separate from and roughly concurrent with the 's consent order. csbs.org · original document
- Connecticut Office of the Attorney General, Attorney General Tong Announces Multistate Settlement Over Deceptive Practices on Cash App (2026-07-08) — One state's official announcement of a coordinated multistate attorney general settlement (46 states; DC's inclusion could not be confirmed against a primary source and is not claimed here) with Block, Inc. over deceptive fraud-safety claims and inadequate fraud protection on Cash App. portal.ct.gov · original document
- Consumer Financial Protection Bureau, CFPB Orders Operator of Cash App to Pay $175 Million and Fix Its Failures on Fraud (2025-01-16) — 's own press release announcing its consent order against Block, used here for the Director's quote and the summary framing of the $175 million total, corroborating the full order document. consumerfinance.gov · original document
- Bloomberg Law, Block to Pay $175 Million for Cash App Customer Service Failures (contains Block's public statement responding to the CFPB order) (2025-01-16) — Secondary news report used only for its verbatim quotation of Block's own public statement responding to the order; Block's statement itself does not appear in any of the primary regulatory documents used elsewhere in this article, so it is sourced here transparently as B-grade secondary reporting rather than a primary filing. news.bloomberglaw.com · original document
Comments
Always open. Logged-in readers can annotate paragraphs in place.
For five years, Cash App told customers to call a phone number printed right on their card -- and that number never connected to a real person. CFPB's consent order⧉ against Block, Inc. found that from 2016 until February 2021, the company provided no live customer support at all, even as it kept the non-functional number on Cash Cards and in its Terms of Service. Three separate regulators have since penalized Block over related failures, totaling roughly $300 million.