Block, Cash App and two separate legal tracks: securities claims and a regulatory order

What happened

Two distinct legal tracks concern Block, Inc., the company behind Square and Cash App, and it is easy to conflate them.

The first is private securities litigation. According to the case page maintained by the Stanford Securities Class Action Clearinghouse, shareholders allege that Block and certain officers made materially misleading statements or omissions about the company's compliance, anti-money laundering and fraud controls, and about user metrics. These are allegations by investors. A securities class action requires plaintiffs to prove a false or misleading statement, materiality, a culpable state of mind, and a causal link to investor loss. The cited case record describes the matter as ongoing, and nothing on that page constitutes a judicial finding that the allegations are true.

The second track is regulatory. In January 2025 the US Consumer Financial Protection Bureau announced an enforcement action against Block relating to Cash App, concerning the handling of fraud complaints and error resolution obligations for consumers. The Bureau's order required the company to pay redress and a penalty, and to remediate its practices. That was a regulatory outcome under consumer financial law, not an adjudication of the shareholder claims.

The two matters overlap thematically, because both concern the adequacy of controls, but they involve different claimants, different legal standards and different remedies.

Why it matters

Payment apps have become everyday financial infrastructure. When something goes wrong, such as an unauthorised transfer or a scam-induced payment, the practical question for the user is whether the provider investigates properly and restores funds where required. Regulatory action addresses exactly that operational question.

For investors, the securities case tests a different proposition: whether a company's public description of its risk and compliance posture matched reality. Compliance quality has become a material disclosure issue for fintech businesses, not just an internal operations topic.

Together the two tracks illustrate how the same underlying facts can generate consumer redress through a regulator and, separately, contested damages claims through the courts.

What consumers should watch for

Know the difference between an allegation in a complaint and an order that has been entered. A regulator's consent order typically settles specified findings without the company necessarily admitting broader wrongdoing, while a securities class action alleges wrongdoing that must still be proved or settled.

With payment apps, act quickly when something is wrong. Report unauthorised or disputed transactions to the provider promptly and in writing, because statutory protections often depend on notifying within defined time limits.

Treat unsolicited approaches with suspicion. Fraud recovery scams frequently target people who have already lost money, and news of an enforcement action can be used as a hook.

If you hold shares and see a class action announced, check the class period and whether any deadline applies to you. Being included may be automatic, or may require a step.

European context

The US matters above do not determine rights in Europe, but European consumers using payment services have their own protections. The revised Payment Services Directive governs unauthorised payment transactions: where a payment was not authorised, the payer is generally entitled to a refund unless the provider can show fraud or gross negligence, and strong customer authentication requirements apply. Providers must also operate complaint handling with defined response times.

E-money and payment institutions operating in the EU require authorisation and are supervised by national competent authorities, and safeguarding rules govern how customer funds are held. Anti-money laundering obligations are separate and are enforced by supervisors rather than through consumer claims.

Where a dispute is not resolved, alternative dispute resolution bodies, such as national financial ombudsman schemes, offer a route that does not require litigation. Under the Representative Actions Directive, qualified entities may also bring collective actions for consumers in relation to breaches of listed consumer laws, though practice differs by Member State.

One recurring gap deserves attention: authorised push payment fraud, where the user is tricked into making a payment themselves, is treated differently from an unauthorised transaction, and the availability of reimbursement varies considerably between countries.

Practical next steps

If a payment is disputed, notify your provider in writing immediately, request the outcome and reasoning in writing, and keep transaction references, timestamps and any related messages.

If the provider's answer is unsatisfactory, escalate to the relevant national authority or ADR scheme in the country where the provider is authorised. Note any deadline for escalation.

Review the security settings you control: authentication method, device list, transaction limits and notification alerts. Reducing exposure is usually faster than recovering funds.

For investment-related concerns, retain trade confirmations and statements covering the relevant period, and take advice on the law that governs your holding. Remedies for investors vary substantially by jurisdiction.