Cash App Settlement Eligibility by State — Complete 2026 Guide

The settlement class is defined at the federal level and applies uniformly across all 50 states and US territories. The two data-security incidents covered are: (1) the December 2021 breach in which a former Cash App Investing employee downloaded customer brokerage records without authorization, affecting approximately 8.2 million users; and (2) the 2023 incident in which a third party exploited recycled phone numbers to gain unauthorized access to accounts. You do not need to prove you were personally harmed by either incident — you only need to show you were a customer during the class period and that your account information was potentially exposed.

The Salinas class was defined as current and former US customers of Cash App and Cash App Investing. Cash App is a US-based service; its users are overwhelmingly US residents. If you were a US resident who held a qualifying account during the class period but subsequently moved abroad, you would generally still be considered part of the class. If you were a foreign national who somehow held a US Cash App account without a US address, your eligibility would depend on the specific account registration facts. The settlement administrator at CashAppSecuritySettlement.com was the authoritative source for edge-case eligibility questions during the claim-filing period.

No. The $15M Salinas class-action settlement pays every approved claimant on the same terms, based on their documented losses and the type of claim they filed — not their state of residence. Out-of-pocket claims qualify for up to $2,500; transaction-loss claims for documented amounts; lost-time claims for $25 per hour for up to three hours. There is no state-based multiplier or bonus inside the class settlement fund. The parallel CFPB redress fund and the 49-state enforcement settlement ($80M) are also distributed based on the type of harm, not your geography.

July 8, 2026 - $45 million multistate settlement: state attorneys general announced a $45M settlement with Block, Inc. resolving allegations that Block misled consumers about Cash App's safety and failed to provide promised fraud protection and dispute resolution. Per Block's official statement, this agreement includes no additional customer payments. Consumer money flows only through the CFPB order of January 16, 2025 (up to $120M redress plus $55M penalty) - those compensation checks are mailed automatically nationwide by administrator Epiq (cashappcfpbsettlement.com), with no claim form and no state-specific eligibility rules.

Beginning in January 2025, Block, Inc. faced a sweeping set of enforcement actions that dwarfed the $15M class-action settlement in total value. The first two were announced within 48 hours of one another in January 2025, totaling $255 million in combined exposure; a third followed in April 2025.

First, the Consumer Financial Protection Bureau issued a consent order requiring Block to pay up to $120 million directly to consumers whose unauthorized-transfer complaints were mishandled — for example, users whose fraud disputes were never investigated, or who were denied provisional credits during delayed investigations. Block was also required to pay a $55M penalty into the CFPB's victims relief fund. Critically, consumers do not need to file a claim for CFPB redress — Block must identify and compensate eligible users automatically under CFPB supervision. Users with questions can contact Block at 1-888-488-1181 or CFPBinquiry@cash.app. Update: that redress is now underway — the official administrator site for the CFPB consent-order settlement (cashappcfpbsettlement.com, run by Epiq) confirms checks have been mailing in batches since June 8, 2026, rolling through the year, with no claim form required. You can verify a check's tracking number with Epiq at (888) 832-1301.

Second, regulators from 49 states and the District of Columbia — led by California, Massachusetts, Florida, Texas, Maine, Arkansas, and Washington — reached an $80 million enforcement settlement with Block for Bank Secrecy Act and anti-money laundering compliance failures. This action addressed systemic weaknesses in Cash App's fraud-prevention and compliance infrastructure, not the data breach specifically.

Third, the New York Department of Financial Services issued a separate $40 million consent order against Block on April 10, 2025, citing inadequate anti-money laundering controls and virtual-currency compliance failures specific to New York's licensed money-transmitter regulations. New York residents are not entitled to any additional payment from this order — it is an enforcement penalty paid to the state, not a consumer redress fund.

A fourth action followed in July 2026: a $45 million settlement between Block and 46 state attorneys general over fraud-complaint handling — like the other state enforcement actions, it is paid to the states, not to consumers. None of these regulatory actions affect whether you were eligible for the Salinas class-action settlement or how much you receive from the $15M fund. They are entirely separate proceedings with different legal theories, different covered conduct, and different distribution mechanisms.

Unfortunately, no. The New York Department of Financial Services $40 million consent order issued on April 10, 2025, is an enforcement penalty paid to the state of New York — it goes into New York's general regulatory fund, not into a consumer redress account. New York residents do not receive a direct payment from this order. The DFS action addressed anti-money laundering and Bank Secrecy Act compliance failures, not the data breach that gave rise to the class action. New York residents who experienced unauthorized transactions may, however, qualify for automatic redress through the CFPB's separate $120M fund, which does compensate individual consumers directly.

The tax treatment of class-action settlement payments is determined primarily by what the payment is meant to compensate. Under IRC § 104, damages received for personal physical injuries or physical sickness are excluded from gross income — but data-breach settlements rarely qualify for this exclusion because invasion of privacy and unauthorized account access are not physical injuries in the tax-law sense.

For the Salinas settlement specifically, payments fall into three buckets: out-of-pocket loss reimbursements, transaction-loss reimbursements, and lost-time payments. Reimbursements for actual out-of-pocket losses (documented expenses you already incurred, such as credit-monitoring costs or bank fees) are generally not taxable because you are simply being made whole for money you already spent. Unauthorized transaction loss reimbursements similarly restore money that was yours — generally not treated as income. Lost-time payments ($25/hour for up to 3 hours), however, are compensating for your time rather than a specific financial loss, and the IRS typically treats such payments as ordinary income.

State income tax treatment generally mirrors the federal treatment, but a handful of states — including California and New Jersey — have their own rules on the taxability of lawsuit proceeds. If you receive a settlement payment and are uncertain, a tax professional can advise based on how you documented and categorized your claim. No 1099 form is automatically issued for small class-action settlements, but that does not mean the payment is necessarily tax-free.

Federal tax law determines the primary treatment: reimbursements for documented out-of-pocket losses and unauthorized transaction losses are generally not taxable because they restore money you already lost. Lost-time payments ($25/hour) are more likely to be treated as ordinary income by the IRS. Most state income-tax regimes follow federal treatment, but California, New Jersey, and a few other states have their own rules on lawsuit proceeds. If your settlement payment is small (under $200), the practical tax impact is minimal. If you receive a larger reimbursement for documented losses — up to $2,500 — and are unsure how to report it, a tax professional familiar with your state's rules is the right resource. No 1099-MISC is automatically issued for class-action payments of this size.

Self-employed users with personal accounts. Many freelancers, gig workers, and sole proprietors use a personal Cash App account for both personal and work-related payments. The Salinas settlement did not exclude self-employed individuals — if you held a standard personal Cash App or Cash App Investing account, you were eligible regardless of whether you also used it for business income. The class definition covers current and former customers; occupation is not a disqualifying factor.

Cash App for Business accounts. Cash App offers a separate product — Cash App for Business — designed for merchants and registered businesses. The settlement class is defined around personal Cash App and Cash App Investing accounts. If your only Cash App presence was a merchant business account opened under a business entity rather than your personal identity, your eligibility would depend on the specific facts of your account setup and is not clearly addressed in publicly available settlement documents. If you held both a personal account and a business account, your personal account use would be the relevant basis for eligibility.

Minor account holders. Cash App's minimum age is 13 (with parental approval for users under 18). Minor users who held accounts during the class period were part of the class; in practice, a parent or legal guardian would have filed the claim on the minor's behalf.

Deceased class members. If a class member died after the class period began but before the settlement was distributed, their estate was generally eligible to file a claim. The claim form required the executor or administrator of the estate to sign on the deceased's behalf and provide supporting documentation. Settlement proceeds received by an estate are typically treated as estate income for tax purposes.