Cash App is having the kind of month most companies would rather forget — except this time, October 2026 brought two separate piles of money changing hands. The first is a 45 million dollar multistate settlement: 46 states alleged that Block, Cash App's parent company, misled users about the strength of its fraud protections — including claims implying the app worked like a bank — while running dispute investigations that states called woefully incomplete under federal Regulation E.
The 46-state deal, announced July 8, 2026 and led by Oregon and Texas, also backstops Block's earlier 120 million dollar consumer-restitution commitment to the Consumer Financial Protection Bureau — ensuring the money gets paid even if the CFPB's own order gets canceled under the new administration. Block also agreed to keep live phone support available at least 13.5 hours a day, a milestone that apparently required a court order.
Connecticut Attorney General William Tong put it bluntly: Block told users their money was safe while knowing fraud on the platform was climbing, and doubled down on marketing instead of protections. New York alleged the company falsely claimed "cutting edge" fraud detection without a functioning fraud hotline. Block admits no wrongdoing.
Running on a parallel track, a separate 15 million dollar class-action settlement over a 2021–2023 data breach — Salinas v. Block — began paying out in October 2026 to roughly 40,380 approved users, some receiving up to 2,500 dollars for documented out-of-pocket losses.
Two settlements, one company, one month. The states get 45 million for their consumer-protection funds, breach victims get their checks, and Cash App users get something they apparently should have had all along: a phone number to call when things go wrong.
For consumers, the takeaway is practical: if you used Cash App in recent years, check whether either settlement owes you money — the breach fund paid people who filed valid claims documenting losses. And if any payment app ever asks you to resolve fraud through a random phone number you found on Google, stop. That is how the fake-support scam works, and it is exactly the gap the states just made Block pay 45 million dollars for.