Cash App is overseen by several regulators at once, each covering a different slice of what the app does. The Financial Crimes Enforcement Network (FinCEN) handles anti-money laundering rules, state financial regulators license the money movement itself, the Consumer Financial Protection Bureau (CFPB) enforces consumer protection law, and the Securities and Exchange Commission and FINRA regulate the stock investing feature. Because Cash App’s parent company, Block, Inc., is a Money Services Business rather than a chartered bank, no single agency has full authority over it. Which rules protect you depends on which part of the app you’re using.
FinCEN and Anti-Money Laundering Rules
FinCEN, a bureau of the Treasury Department, is the federal agency most directly focused on Cash App. It enforces the Bank Secrecy Act (BSA), the core federal anti-money laundering law. Every Money Services Business must register with FinCEN and renew that registration every two years.1Financial Crimes Enforcement Network. Fact Sheet on MSB Registration Rule
Registration is only the start. The BSA also requires Cash App to run a written anti-money laundering program with Know Your Customer procedures.2Financial Crimes Enforcement Network (FinCEN.gov). BSA Requirements for MSBs That’s why the app asks for your name, address, date of birth, and Social Security number. Cash App also has to watch transactions for unusual patterns and file a Suspicious Activity Report with FinCEN when something meets the $2,000 MSB reporting threshold.3Internal Revenue Service. Bank Secrecy Act – Section: Financial Institutions
The same regime applies to Cash App’s Bitcoin feature. FinCEN has said businesses dealing in convertible virtual currency are money transmitters under the BSA.4Financial Crimes Enforcement Network. Application of FinCENs Regulations to Persons Administering Exchanging or Using Virtual Currencies Crypto transfers of $3,000 or more trigger the “travel rule,” which requires Cash App to collect and pass along originator and beneficiary information to the next financial institution in the chain.5eCFR. 31 CFR 1010.410
State Money Transmitter Licenses
States regulate the basic activity of moving money. Every state requires a Money Transmitter License before a company like Cash App can operate there. Block, Inc. holds licenses in approximately 50 jurisdictions, including all 50 states and the District of Columbia, under NMLS number 942933.6Block. Legal – Licenses A few states, including New York and Louisiana, issue a separate virtual currency license on top of the standard one.
To keep those licenses, Block must meet minimum capital requirements, post a surety bond, keep customer funds separated from its own operating capital, submit audited annual financials, and sit for periodic examinations. Each state that licenses Cash App has its own window into how the company handles your money.
The CFPB and Consumer Protection Law
The Consumer Financial Protection Bureau enforces federal consumer financial law against Cash App. Its authority includes the Electronic Fund Transfer Act and its implementing rule, Regulation E, which govern how electronic payments work, how disputes are handled, and how much you can be held liable for unauthorized transactions.7Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs
The CFPB’s role here recently narrowed. In late 2024 the bureau finalized a rule letting it proactively examine large payment apps (those handling more than 50 million transactions per year) the way it examines banks.8Consumer Financial Protection Bureau. CFPB Finalizes Rule on Federal Oversight of Popular Digital Payment Apps to Protect Personal Data Reduce Fraud and Stop Illegal Debanking The rule took effect in January 2025 and was then overturned by Congress under the Congressional Review Act, with the president signing the repeal. Because it was repealed through the CRA, the CFPB cannot reissue a substantially similar rule without new congressional authorization.9Congress.gov. Congress Repeals Rule That Would Have Subjected Large Nonbank Payment Firms to CFPB Supervision
Enforcement authority still exists, and the CFPB has used it against Cash App. In January 2025 the agency ordered Block to pay up to $175 million (a $55 million civil penalty and at least $75 million, and potentially up to $120 million, in consumer redress) for years of failures in handling fraud and disputes.10Consumer Financial Protection Bureau. CFPB Orders Operator of Cash App to Pay 175 Million and Fix Its Failures on Fraud The consent order found that Block failed to adequately investigate unauthorized transactions, used unfair dispute practices, made deceptive statements to users, and for years did not offer live telephone customer service, which allowed fake support numbers to proliferate and scammers to harvest account information.11Consumer Financial Protection Bureau. Block Inc The order requires 24-hour live customer support and full investigation of unauthorized transactions going forward.
If you have an unresolved dispute with Cash App, you can file a complaint directly with the CFPB through its website.
Your Liability Limits and Dispute Deadlines
Regulation E caps how much you can lose to unauthorized transactions on Cash App, but the caps depend on how quickly you report.12Consumer Financial Protection Bureau. Regulation E – Liability of Consumer for Unauthorized Transfers
- Report within 2 business days of learning of the loss, and your maximum liability is $50 or the amount of unauthorized transfers before you notified Cash App, whichever is less.
- Report after 2 business days but within 60 days of your statement, and your liability can reach $500, covering later transfers Cash App can show would have been prevented by earlier notice.
- Wait more than 60 days after your statement, and you can be liable for the full amount of unauthorized transfers occurring after that 60-day window, with no cap.
Once you report an error or unauthorized transaction, Cash App has 10 business days to investigate. It can extend the investigation to 45 days total, but only if it provisionally credits your account within the first 10 business days so you have access to the disputed funds.13eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors The CFPB’s enforcement action found Block routinely missed these timelines, which drove much of the penalty.
SEC, FINRA, and Cryptocurrency Oversight
The investing and Bitcoin features fall under different agencies than the payment side.
Stock Investing
When you buy stocks in Cash App, you’re trading through Cash App Investing LLC, a separate subsidiary registered as a broker-dealer with the SEC.14U.S. Securities and Exchange Commission. SEC Form X-17A-5 – Cash App Investing LLC It’s also a member of FINRA, the self-regulatory organization that oversees broker-dealer conduct, fair dealing, trade execution, and disclosure.15Financial Industry Regulatory Authority. BrokerCheck – Cash App Investing LLC You can look up Cash App Investing’s regulatory record, including any disciplinary history, through FINRA’s BrokerCheck.
Bitcoin
Cryptocurrency has no single federal regulator. Cash App’s Bitcoin feature is governed primarily by FinCEN’s BSA rules as a money transmission activity.4Financial Crimes Enforcement Network. Application of FinCENs Regulations to Persons Administering Exchanging or Using Virtual Currencies At the state level, New York and Louisiana require a separate virtual currency license beyond the standard money transmitter license.6Block. Legal – Licenses The SEC has issued guidance on when crypto assets are securities, but Bitcoin itself has generally not been treated as a security by the agency.
What Insurance Actually Covers
Regulation and insurance are separate questions, and the answers differ across Cash App’s products.
Cash Balances
If you have a Cash App Card or a Sponsored Account, your Cash App balance is eligible for FDIC pass-through insurance through Wells Fargo Bank, Sutton Bank, and The Bancorp Bank, with a $250,000 coverage limit per customer when combined with any other deposits at the same bank. Without a Cash App Card or Sponsored Account, your balance is not FDIC-insured. Simply holding money in the app is not enough.
Stock Investments
Because Cash App Investing LLC is a SIPC member, stock holdings are protected up to $500,000, including a $250,000 limit for uninvested cash, if the brokerage fails.16SIPC. For Investors – What SIPC Protects SIPC does not cover losses from market declines, and stock accounts are not FDIC-insured.
Bitcoin
Bitcoin held in Cash App is not covered by FDIC insurance, SIPC, or any other federal insurance program. If the platform is hacked or becomes insolvent, there is no government backstop for cryptocurrency holdings. That is true across the industry, not just at Cash App.
Tax Reporting to the IRS
Cash App has to report certain payment activity to the IRS on Form 1099-K. Under the threshold reinstated by the One, Big, Beautiful Bill Act, third-party settlement organizations must file a 1099-K when gross payments for goods and services exceed $20,000 and the number of transactions exceeds 200 in a calendar year.17Internal Revenue Service. Form 1099-K FAQs Personal transfers between friends and family, like splitting dinner or sending a gift, are not reportable regardless of amount.
You’re still responsible for reporting taxable income even without a 1099-K. Selling Bitcoin at a profit on Cash App is a separate taxable event under capital gains rules. The IRS treats cryptocurrency as property, so every sale, exchange, or purchase using Bitcoin can produce a reportable gain or loss.