Cash App is regulated by several agencies at once because it isn’t a bank. The Financial Crimes Enforcement Network (FinCEN) handles anti-money laundering, individual state regulators license it to move your money, the Consumer Financial Protection Bureau (CFPB) enforces consumer protection laws, and the Securities and Exchange Commission (SEC) along with FINRA oversee its stock investing feature. Which rules protect you depends on which part of the app you’re using, so understanding who regulates Cash App is really a question of matching each feature to its regulator.
Cash App’s parent company, Block, Inc., is classified as a Money Services Business rather than a chartered bank. No single regulator has the full picture, and that shapes everything below.
The Federal Regulators and What Each One Covers
FinCEN, a bureau of the Treasury Department, is the federal government’s main point of contact with Cash App. It enforces the Bank Secrecy Act, which requires every Money Services Business to register federally and renew that registration every two years.1Financial Crimes Enforcement Network. Fact Sheet on MSB Registration Rule2Financial Crimes Enforcement Network (FinCEN.gov). BSA Requirements for MSBs3Internal Revenue Service. Bank Secrecy Act – Section: Financial Institutions These same rules apply to Bitcoin activity on the app, because FinCEN treats convertible virtual currency businesses as money transmitters.4Financial Crimes Enforcement Network. Application of FinCENs Regulations to Persons Administering Exchanging or Using Virtual Currencies
The CFPB enforces federal consumer financial law against Cash App. That includes the Electronic Fund Transfer Act and its implementing rule, Regulation E, which set the terms for how electronic payments have to work, how disputes must be resolved, and how much you can lose if someone uses your account without permission.5Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs The CFPB can investigate the company and bring enforcement actions, which it has done.
The stock investing feature is regulated separately. Trades run through Cash App Investing LLC, a subsidiary registered as a broker-dealer with the SEC and a member of FINRA.6U.S. Securities and Exchange Commission. SEC Form X-17A-5 – Cash App Investing LLC7Financial Industry Regulatory Authority. BrokerCheck – Cash App Investing LLC FINRA enforces broker-dealer conduct rules covering fair dealing, trade execution, and disclosure. You can look up Cash App Investing’s regulatory record, including any disciplinary actions, through FINRA’s BrokerCheck tool.
State Money Transmitter Licensing
Every state also regulates the basic act of moving money. Block holds Money Transmitter Licenses in all 50 states and the District of Columbia under NMLS number 942933.8Block. Legal – Licenses A few states go further for cryptocurrency. New York and Louisiana each issue a separate virtual currency license on top of the standard money transmission license.
Keeping those licenses isn’t automatic. States require Block to meet minimum capital thresholds, post surety bonds that typically run from $100,000 to $2,000,000 depending on transaction volume, keep customer funds segregated from operating capital, submit audited annual financials, and sit for periodic examinations. Each state has its own window into how Cash App is handling your money, and any one of them can act on what it sees.
What the CFPB Has Actually Done About Cash App
Federal oversight isn’t just theoretical here. In January 2025, the CFPB ordered Block to pay up to $175 million: $55 million in civil penalties and at least $75 million (up to $120 million) in consumer redress.9Consumer Financial Protection Bureau. CFPB Orders Operator of Cash App to Pay 175 Million and Fix Its Failures on Fraud The consent order found that Block failed to adequately investigate unauthorized transactions, used unfair dispute resolution practices, made deceptive representations to users, and for years did not provide live telephone customer service, a gap scammers exploited by setting up fake customer service numbers to steal account information.10Consumer Financial Protection Bureau. Block Inc The order requires Block to set up 24-hour live-person customer support and to fully investigate unauthorized transactions going forward.
One boundary worth knowing. In late 2024 the CFPB finalized a rule that would have let it examine large payment apps proactively, the way it examines banks.11Consumer Financial Protection Bureau. CFPB Finalizes Rule on Federal Oversight of Popular Digital Payment Apps to Protect Personal Data Reduce Fraud and Stop Illegal Debanking Congress repealed that rule under the Congressional Review Act, and the CFPB cannot reissue a substantially similar rule without new congressional authorization.12Congress.gov. Congress Repeals Rule That Would Have Subjected Large Nonbank Payment Firms to CFPB Supervision The CFPB still has its enforcement power. It just doesn’t have routine examination authority over Cash App.
Your Rights When Something Goes Wrong
Regulation E limits how much you can lose to unauthorized transactions on Cash App, and the limits depend on how quickly you report the problem.13Consumer Financial Protection Bureau. Regulation E – Liability of Consumer for Unauthorized Transfers
- Report within 2 business days of learning about the loss, and your maximum liability is $50, or the total amount of unauthorized transfers before you notified Cash App, whichever is less.
- Report after 2 business days but within 60 days of your statement, and your liability can climb to $500, covering unauthorized transfers that happened after the two-day window if Cash App can show they wouldn’t have occurred had you reported sooner.
- Wait longer than 60 days after the statement showing the unauthorized activity, and you can be liable for the full amount of transfers that occur after that 60-day period. There is no cap.
Once you report an error, Cash App has 10 business days to investigate and resolve it. The investigation can extend to 45 days total, but only if Cash App provisionally credits your account within the initial 10 business days so you have access to the disputed funds while it works. For new accounts (within 30 days of the first deposit), those deadlines stretch to 20 business days and 90 days.14eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors The CFPB’s action against Block found the company was routinely missing these timelines, which is a big part of why the penalty was as large as it was.
Whether Your Money Is Actually Insured
Regulation is one question. Whether your money is insured if the platform fails is a different question, and the answer changes depending on what you hold.
Cash Balances
If you have a Cash App Card or a Sponsored Account, your Cash App balance is eligible for FDIC pass-through insurance through Wells Fargo Bank, Sutton Bank, and The Bancorp Bank, up to $250,000 per customer when combined with any other deposits you hold at the same bank. Without a Cash App Card or Sponsored Account, your balance is not FDIC-insured. Simply keeping money in Cash App does not mean it’s insured.
Stock Investments
Cash App Investing LLC is a SIPC member, so your stock holdings are protected up to $500,000, including a $250,000 sub-limit for uninvested cash, if the brokerage fails.15SIPC. For Investors – What SIPC Protects SIPC protects against broker failure, not against losses from market declines. Stock accounts are not FDIC-insured.
Bitcoin
Bitcoin held in Cash App is not covered by FDIC insurance, SIPC coverage, or any other federal insurance program. If Cash App were hacked or became insolvent, there is no government backstop for your crypto. That’s true across the industry, not just at Cash App.
How to File a Complaint
If you have an unresolved dispute with Cash App, you can file a complaint directly with the CFPB through its website. Complaints are tracked publicly and can trigger enforcement attention. For issues specific to stock trading, FINRA’s BrokerCheck page for Cash App Investing is the place to check regulatory history and file investor complaints. State money transmitter regulators, listed on Block’s licensing page, take complaints tied to payment activity in their state.