Credit Karma has been named in several federal enforcement actions and a recent private lawsuit. The largest is a 2022 Federal Trade Commission case accusing the company of telling users they were “pre-approved” for credit cards they had little real chance of getting; Credit Karma paid $3 million, and the FTC is still distributing refunds. Behind that sit an older FTC data-security settlement from 2014, a Department of Justice antitrust action tied to Intuit’s purchase of the company in 2020, and a 2025 class action alleging Credit Karma handed a woman’s credit report to her ex-husband. Here is what each matter involved and where it stands.
The 2022 FTC “Pre-Approved” Case
Between roughly February 2018 and April 2021, Credit Karma showed users messages saying they were “pre-approved” for specific credit cards or had “90% odds” of approval. The FTC alleged those claims were false. Many people who applied were denied by the issuing banks, which cost them time and, because credit card applications trigger hard inquiries, could lower their credit scores.1FTC. FTC Orders Credit Karma to Halt Deceptive Pre-Approved Credit Offers The agency described Credit Karma’s interface as using “dark patterns,” meaning design choices meant to push users toward actions that benefit the company.2FTC. FTC Finalizes Order Requiring Credit Karma to Pay $3 Million, Halt Deceptive Pre-Approved Claims
The FTC filed its complaint on September 1, 2022, and finalized the consent order by a 4-0 vote on January 23, 2023.3FTC. In the Matter of Credit Karma, LLC2FTC. FTC Finalizes Order Requiring Credit Karma to Pay $3 Million, Halt Deceptive Pre-Approved Claims Credit Karma paid $3 million within eight days and is barred going forward from making unsubstantiated claims about a consumer’s approval odds for any financial product.4Federal Register. Credit Karma, LLC — Analysis of Proposed Consent Order to Aid Public Comment
Refunds: Who Got Paid and Where Things Stand
The FTC identified 497,425 consumers as potentially eligible for a payment: people who saw the “pre-approved” or “90% odds” messaging between 2018 and 2021, applied for the advertised card, and were denied.5FTC. FTC Announces Claims Process for Consumers Harmed by Credit Karma Pre-Approved Offers The claim deadline was March 4, 2024, and the filing period is closed. No new claims are being accepted.
On October 31, 2024, the FTC began sending more than $2.5 million to 50,994 consumers by check and PayPal. Checks had to be cashed within 90 days; PayPal payments had to be accepted within 30.6FTC. FTC Sends More Than $2.5 Million to Consumers Deceived by Credit Karma7USA Today. Credit Karma Payments to Customers in FTC Settlement As of early 2026, the FTC is using Zelle to send payments directly to the bank accounts of people who never cashed their checks or accepted their PayPal transfers.8FTC. Credit Karma Settlement Refunds Questions go to the refund administrator at 1-866-848-0871.
The 2014 Data-Security Settlement
A separate FTC case in 2014 addressed a different problem. The agency alleged that Credit Karma disabled SSL certificate validation, a standard step that verifies encrypted connections, during pre-release testing of its iOS app and then shipped the app without switching it back on. From July 2012 to about January 2013, the iOS app was vulnerable to interception attacks that could expose Social Security numbers, dates of birth, and credit scores. After being warned about the flaw, Credit Karma launched an Android version in February 2013 with the same vulnerability.9FTC. Default Lines: How the FTC Says Credit Karma Sslighted Security Settings
The settlement, finalized August 19, 2014, required Credit Karma to build a comprehensive security program, submit to independent security assessments every two years for 20 years, and stop misrepresenting the privacy or security of its products.10FTC. In the Matter of Credit Karma, Inc. (Case 132 3091) No consumer refunds were part of it.
The DOJ Antitrust Action Over the Intuit Purchase
In February 2020, Intuit, the maker of TurboTax, agreed to buy Credit Karma for about $7.1 billion. The DOJ Antitrust Division saw a problem: both TurboTax and Credit Karma Tax were significant players in digital do-it-yourself tax preparation, and a merger would eliminate direct competition.11Federal Register. United States v. Intuit Inc., et al. — Response to Public Comments
On November 25, 2020, the DOJ sued to block the deal in the U.S. District Court for the District of Columbia and simultaneously filed a proposed consent decree resolving it. Intuit and Credit Karma had to divest the entire Credit Karma Tax business, including its software and intellectual property, to Square, Inc. (now Block, Inc.) for $50 million in cash. Square folded the product into Cash App.12DOJ. Justice Department Requires Divestiture of Credit Karma Tax for Intuit to Proceed With Acquisition of Credit13Finovate. Square Takes on Taxes as Justice OKs Intuit-Credit Karma Acquisition The divestiture closed on December 8, 2020, and the court entered final judgment on August 2, 2021, letting Intuit’s acquisition proceed.14DOJ. U.S. v. Intuit Inc. and Credit Karma, Inc.
The 2025 Hladik Class Action Over Credit Reports
In November 2025, Courtney Hladik filed a proposed class action against Credit Karma in the U.S. District Court for the Eastern District of Virginia (Case No. 4:25-cv-00148). She alleged that Credit Karma violated the Fair Credit Reporting Act by furnishing her credit report to her ex-husband, an unauthorized third party, without a permissible purpose. She said she had never opened a Credit Karma account and that the company kept providing access to her reports even after she told them so.15Top Class Actions. Credit Karma Class Action Alleges Company Improperly Accessed Credit Reports
Credit Karma moved to dismiss on January 23, 2026. Before the court ruled, the parties settled, and Hladik filed a notice of settlement on February 20, 2026. On April 20, 2026, District Judge Elizabeth W. Hanes signed a final order dismissing the case with prejudice as to Hladik personally but without prejudice as to the proposed class members. That distinction matters: other consumers with similar allegations are not bound by the outcome and can still bring their own claims.16PACER Monitor. Hladik v. Credit Karma, LLC