BLOCK SETTLES $45M FRAUD CASE WITH 46 STATES

INDUSTRY DESK■ 1 MIN READ

THU, JUL 9, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Block, the parent company of Cash App, agreed to pay $45 million to resolve a multistate investigation into misleading fraud protection claims. State attorneys general found the company falsely advertised that Cash App offered bank-like protections and advanced fraud detection.

The settlement covers investigations by 46 state attorneys general who determined Block misrepresented Cash App's security features to users. The company claimed the payment app provided protections comparable to traditional banks, which regulators said was inaccurate. Cash App users faced fraud losses without adequate recourse, according to the investigation. Block did not admit wrongdoing as part of the settlement. The $45 million penalty reflects growing regulatory scrutiny of fintech platforms over consumer protection claims. Cash App remains one of the most popular peer-to-peer payment services in the U.S., with millions of active users. This settlement adds to Block's recent regulatory challenges. The company has faced multiple investigations into Cash App's safety measures and customer service practices across various jurisdictions.

■ SOURCES

► TechCrunch

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P624US CHARGES THREE RUSSIANS FOR BULLETPROOF HOSTING

U.S. federal prosecutors have unsealed charges against three Russian nationals accused of operating a bulletproof hosting service that supported ransomware gangs responsible for over $62 million in damages worldwide.

1H AGO— Industry Desk

P620CISA ALERTS: SHAREPOINT FLAWS UNDER ACTIVE ATTACK

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities in Internet-exposed on-premises SharePoint Server instances. Organizations running affected versions must patch immediately.

1H AGO— Security Desk

P615TAILSCALE SSH FLAW ENABLED UNAUTHORIZED ROOT ACCESS

Tailscale disclosed a critical vulnerability in its SSH implementation that allowed attackers to gain root access through insecure argument handling. The flaw has been patched in recent versions.

3H AGO— AI Desk

P614SOCIAL NETWORKS DRIVE MILLIONS TO DEEPFAKE SITES

A new study found that social media platforms referred over 5.7 million visits to nonconsensual deepfake pornography sites between December 2025 and March 2026, with YouTube and X accounting for the majority of traffic.

6H AGO— Industry Desk

◄ BACK TO NEWS

BLOCK SETTLES $45M FRAUD CASE WITH 46 STATES

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF