Feds probing whether Cash App leaves door open to money launderers, terrorists (2024)

Federal financial regulators are exploring allegations by two whistleblowers that Cash App, the popular mobile payment platform, and entities providing transaction services to its users performed inadequate due diligence on customers,potentially opening the door to money laundering, terrorism financing and other illegal activities.

While banks are required to know the true identity of every customer, the Cash App program “had no effective procedure to establish the identity of its customers,” the whistleblowers said.In their complaints, reviewed by NBC News, the whistleblowers detail an array of questionable Cash App transactions with entities under sanction by the Treasury Department’s Office of Foreign Assets Control, operations known to sell personal information and credit card data for illegal purposes, and offshore gambling sites barred to U.S. citizens.

Among the big-name companies partnering with Cash App are Visa Inc., the giant payment processor, and Wells Fargo.

The whistleblowers filedtheircomplaint withthe Financial Crimes Enforcement Network, orFinCEN,a unit of the U.S. Treasury that administers the Bank Secrecy Act and analyzes financial transactions to combat money laundering, terrorist financing and other illicit activities.Early last month, FinCEN officials spoke at length with the whistleblowers, their lawyer told NBC News, and said they were referring the complaint to internal investigators as well as toother federal agencies.As is its custom, FinCEN declined to comment on the existence of the submission.

Over three-quarters of U.S. adults have used a mobile payment app, such as Cash App, PayPal or Venmo, according to a 2023studyby the Consumer Finance Protection Bureau.But these services, also known as person-to-person payment platforms, pose risks to their users and to the financial system, regulators say.In recent years, for example, law enforcement officials have cited criminals’ use of payment apps to evade laws, such as laundering stolen Covid relief funds in2020.

Feds probing whether Cash App leaves door open to money launderers, terrorists (1)

Customers of Cash App, introduced in 2013,caninstantly send and receive money among themselves, and buy stocks and Bitcoin. They can alsospend or withdraw funds using Cash Card, a prepaid Visa debit card. As of September 2023,Cash App had 55 million active transacting accounts and generated $239 billion of inflows during the prior four quarters, the company said. Cash App is so popular it has been referenced in hundreds of rap songs, sometimes in connection with illegal activities.

In addition to FinCEN, the whistleblowers made submissionsallegingdue diligence flaws at Cash App to theSecurities and Exchange Commission, the nation’s top securities cop, and theCommodities Futures Trading Commission, which combats fraud in the market for digital assets, their lawyer said. The SEC declined to comment on the existence of a whistleblower submission; the CFTC did not respond to a request for comment.

“There are obvious national security issues here and it would be foolhardy for the public to think that regulators and law enforcement are keeping pace with the financial ‘innovators,’” said Edward Siedle, a former SEC enforcement lawyer who represents the whistleblowers. NBC News interviewed the whistleblowers,who are knowledgeable on financial services compliance issues, on the condition of anonymity.

The whistleblowers’ filings arrive as regulators are increasing scrutiny on deficient anti-money laundering practices. On Monday, FinCEN proposed arulethat would require investment advisers to adopt systems to prevent money laundering and terrorism financing and report suspicious transactions to the agency. Such advisers oversee trillions of dollars but are not currently subject to these requirements, FinCEN said.

And in December 2022, federalprosecutorsand theSECtook action against Danske Bank, Denmark’s largest, for lying about inadequate transaction monitoring systems that allowed tainted money to enter the U.S. financial system. The bank pleaded guilty to defrauding banks through its lax compliance and forfeited $2 billion. And

Cash App is not abankand usesan array of banking partners toconduct certain of its services.Wells Fargo, for example, holds Cash App users’ funds in a pooled deposit account, makingthemeligible for FDIC insurance.Until 2021,Lincoln Savings Bankof Iowa handled incoming deposits by Cash App customers.Sutton Bank, anine-branch institution in Attica, Ohio, issues Cash App’s prepaidVisadebit cards.

Feds probing whether Cash App leaves door open to money launderers, terrorists (2)

Prepaid debit cards are aplatform forpotential illegality,according to a 2020reportfrom Standard & Poor’s Global Market Intelligence. It described howpayment processors, banks and other issuers of prepaid debit cards are “exposed to criminal activity that could lead to reputational damage and run-ins with regulators.

The whistleblowers’ allegations cover 2016 through 2022 and describe “a shadow financial system beyond the reach of regulators” where due diligence on Cash App’s users was negligible and often did not adhere to sound banking practices and rules. In addition, Cash App’s use of different institutionsprovidingservices for users prevents bank regulators from seeing the full scope of the transactions at the institutions they monitor, the submissions say. The siloed structure of the Cash App machine, the whistleblowers say, “misdirects the attention of regulators.”

'Economic empowerment'

Lax due diligence on Cash App customers poses risks for shareholders ofits parent,Block Inc.,the enormousfintech founded by Jack Dorsey, co-founder of Twitter,the whistleblowers said. Ditto for Marqeta Inc., a financial technology startupthat acts as a middlemantransferringfunds for Cash App transactions, and Visa Inc., whose name is on the Cash Card. Shareholders of all three companies have not been fully advised of the risks associated with the Cash App business, the submissions contend.

On Feb. 9, Larry Summers, a former Treasury secretary, resigned from the board of Block, effective immediately, after more than a decade of service. The company said his resignation was not a result of disagreements over its operations or practices and that he was departing to devote more time to his other commitments.

Lincoln Savings Bank, withlocations in central and northeastern Iowa, isalso highlighted in the complaints.Lincoln began handling customer deposits into Cash App accounts in 2016, the complaints said, and was responsible for conducting due diligencerequired under banking lawsto determine their identities and ensure their funds were not tainted by illegal activities. Lincoln’s vetting process was minimal and did not align with regulations, the complaints allege; Cash App pressed Lincoln to forgo traditional customer due diligence to ease the process of opening accounts and to generate revenues, the whistleblowers said.

NBC News described thewhistleblowers’ allegations to Cash App and asked it to comment on them. A spokesperson, who communicated with NBC News on the condition of anonymity, declined to respond on the record. Statements attributable to the company were provided on background via email.

“The bank partnership model allows Cash App to offer certain financial services products (such as the Cash App Card) that are a benefit to our customers and further our purpose of economic empowerment,” the statement said. The company performs due diligence on customers, the statement continued, employing“several hundred people who support Cash App’s Know Your Customer/due diligence, anti-money laundering and related compliance functions, and augment that workforce with supplemental staffing and resources.”

Like all financial services companies, the company added, “Cash App is not immune to bad actors attempting to use the platform for illicit purposes.” It partners with law enforcement “to help disrupt illegal or illicit activity.”

The spokesperson did not respond to allegations that the company pressured Lincoln Savings Bank to minimize due diligenceand declined to say why Cash App stopped working with Lincoln in 2021. Cash App’s bank partnership model and fund-flows structure“are standard in the industry,” the statement said, “and are known to regulators. We collaborate with our bank partners on controls and monitoring for the activities they are responsible for.”

A representative at Visa Inc. declined to comment on the whistleblowers’ allegations, and Lincoln Savings Bank did not respond to requests for comment.

A Marqeta spokesman said in a statement: “We take our obligations seriously and stand behind our disclosures regarding the risks associated with our business.”

Wells Fargo said it takes its obligations under anti-money laundering laws seriously andthat itrequires its payment services clients such as Cash App to do the same.“We conduct ongoing due diligence, including account analysis and monitoring, and where we identify suspicious activity, we report it,”the bank said in a statement.

Sutton Bank, issuer of the Cash App prepaid debit card, confirmed it has noway of knowing the sourcesof funds transferred from Cash App accounts to thedebitcard for withdrawals. Those funds come into the bank in large commingled blocks from Marqeta when a customer uses the Cash Card at an ATM or store.

“We’re an issuer to the card product to spend funds that you have with Block in your Cash App account, but that’s it,” saidMark T. Dabertin, Sutton’s general counsel and chief compliance officer.“We track ongoing monitoring of the spending activity for the card; we don’t get any visual into how the money gets in there. We report on unusual activity affecting the card usage.” Sutton’s compliance staff is “a very robust group,” he said.

Speed in banking

Cash App is amoney machine for Block, generating net revenue of $10.4 billion during the first 9 months of 2023, or 65% of Block’s net revenue, its regulatory filings show. Cash App produced $2.9 billion in gross profit for Block during the first 9 months of 2023, up 37% year over year, the company said.Block has a market value of $38 billion.

In 2016, Cash App began working with Lincoln Savings Bank to handle customers’ deposits into their accounts. Lincoln, which opened in 1902 as a one-branch agricultural bank in Iowa, is nowa fintech pioneer with $1.8 billion in assets.

Its LSB Financial Technologies unit offers virtual cards, mobile wallets and payment processing and “has created processes to allow for something unusual in banking — speed.”

Working with Cash App, Lincoln Savings Bank opened a pooled account where Cash App participants’ money was deposited and held briefly until it was transferred by Marqeta to Sutton Bank for Cash Card use or to Wells Fargo. When Cash App customers want to spend fundsor withdraw money at an ATM, their Cash Cards are loaded with money from their Cash App account. At all other times, the Cash Card has a zero balance, Sutton says.

This setup meant that neither Lincoln Savings Bank nor Sutton Bank could monitorboththe people sending the money and those withdrawing it, the whistleblowers explained. Lincoln only saw the incoming money while Sutton watched it exit. Cash App and Marqeta,neither of them banks,have views of the entire transactions, the whistleblowers said.

In the rush to attract Cash App users, neither Cash App nor Lincoln performed extensive due diligence on customers, the whistleblowers contend. For example, Cash App allowed access to the Lincoln pooled bank account for customers presenting just an email address or a phone number, the complaint said, and Lincoln “had no effective procedure to establish the identity of its customers.” Under traditional due diligence programs, federal banking regulations require abank to obtain a customer’s name, date of birth, home address, and full Social Security number or other identification number.

To receive a Cash App Visa prepaid debit card, the complaint says, a user would provide a name, date of birth and only the last four digits of their Social Security number and a “mailing address” for the card. This is not the same as a home address and could include post office boxes, the complaint notes. Most of the Visa cards were “virtual” and sent to a customer’s email address, the whistleblowers said.

The Cash App spokesperson said the company receives full Social Security numbers of customers from a vendor.

In 2018, Cash App began offering transactions in bitcoin, opening the app’s flawed customer due diligence to terrorist financing worldwide, the whistleblowers said. The Cash App spokesperson disputed this, saying bitcoin customers must go through full identity verification and ongoing sanctions screening.

Marqeta, based in Oakland, California, creates digital payment technologies and provides issuer processor and card manager services. It launched its platform publicly in 2014, and Marqeta issuedsharesto the public in 2021 at $27 each. Today the company’s stock trades around $6.

Block is Marqeta’s largest customer, generating 72% of Marqeta’s net revenue during the first nine months of 2023, regulatory filings show. For the first nine months of 2023, 77% of Marqeta payment transactions went through Sutton Bank.

Visa’s involvement in the Cash Card is problematic because of the potential for illegal activity, the complaints say. “Visa has its own compliance requirements and tight limitations on the issuance and use of prepaid cards,” the complaint alleges, but it waived standard anti-money laundering restrictions for Cash App. The whistleblowers speculated that this may have occurred because in 2017, Visa led a $25 millioninvestmentin Marqeta with some of the startup’s existing investors.

The whistleblowers told NBC News that Cash Appseemedto heighten its due diligence on customers in 2023and a Cash App executive confirmed that the company currently requires new customers to provide a full nine-digit Social Security number.

But, the whistleblowers say,Cash Appappearsnot to haveclosed accounts that were opened with inadequate vetting.Evidence for this, they said, can be seen in themarket for buying access toCash App accounts set up in the earlier years of the program when due diligence was spottyand creating the accounts didn’t require identifying information,which allows buyers to avoid the due diligence involved in setting up a new account.Existing Cash App accountsoffered for sale on the internet,can go forabove$150, up from $50 previously,the whistleblowers told NBC News.

Scrutiny of digital payment systems like Cash App is rising at other agencies. In November, the Consumer Finance Protection Bureau proposed new federal oversight of companies offering digital payment apps.“Big Tech and other companies operating in consumer finance markets blur the traditional lines that have separated banking and payments from commercial activities,” the bureau said in the Novemberannouncement. That blurring can put consumers at risk, the bureau said.

This article was originally published on NBCNews.com

Feds probing whether Cash App leaves door open to money launderers, terrorists (2024)


Feds probing whether Cash App leaves door open to money launderers, terrorists? ›

Federal regulators are probing whether Cash App leaves door open to money launderers, terrorists. The payment app, used by millions and celebrated by rappers, “had no effective procedure" to establish the true identity of customers, two whistleblowers told officials.

Is Cash App under investigation? ›

Federal prosecutors are digging into internal practices at Block, the financial technology firm launched by Twitter co-founder Jack Dorsey, discussing with a former employee alleged widespread and yearslong compliance lapses at the company's two main units, Square and Cash App, two people with direct knowledge of the ...

Can the Feds track Cash App? ›

Although, police cannot track Cash App accounts, they can obtain the login details of those who use them. The government may request this information if they suspects illegal activities on a Cash App account.

Can the government see my Cash App transactions? ›

If you have a business account with Cash App or other payment apps, the IRS requires your transactions to be reported on a Form 1099-K if you receive more than $20,000 and more than 200 transactions in 2023. A $600 reporting threshold was originally set for the 2023 tax year, but the IRS is now delaying that change.

Is Cash App federally protected? ›

Is my Cash App balance insured by the FDIC? With a Cash App Card, your Cash balance is FDIC-insured* through our partner banks, which means the federal government promises to protect it. Bitcoin and investing** balances are not covered by FDIC Insurance.

Does Cash App report to the federal government? ›

The IRS uses the information on the 1099-K forms provided by payment processors to verify income reported by taxpayers and ensure that all income—including income from Cash App and other payment processors—is accurately reported and taxed.

Is Cash App shutting down? ›

may arise due to occasional service interruptions, there is no concrete evidence to suggest that Cash App is shutting down.

Does the IRS monitor Cash App? ›

The IRS has implemented a new rule regarding Venmo, Cash App, and PayPal. If your earnings on these platforms exceed $600, they will be monitoring it and issuing a 1099 K form to you.

Is Cash App untraceable? ›

Cash App transactions are not completely anonymous, as they require user identification. To maintain some privacy, send funds without any memo or note, but the recipient can still see your username and details in the app's activity feed.

What federal agency regulates Cash App? ›

Cash App | Consumer Financial Protection Bureau.

What is the $600 rule? ›

Essentially, if you use a third-party payment platform, like PayPal, Venmo or Cash App, to collect payments for your side gig or business, you must report payments of at least $600.

Does Cash App get monitored? ›

Cash App uses the same fraud detection infrastructure and safety standards that monitor millions of daily Square Point of Sale transactions. Cash is also PCI Data Security Standard (PCI-DSS) Level 1 compliant.

Can someone find out who I am on Cash App? ›

Privacy Settings: Cash App does provide privacy settings that allow you to control the visibility of your personal information. You can choose to hide your name within the app, providing an additional layer of privacy.

Is it safe to leave money in Cash App? ›

Despite their popularity and usefulness, P2P payment apps aren't safe places to store money. Loading cash onto the apps or keeping money there after you receive funds from another user might put your money at risk. Even so, according to the CFPB, consumers are storing billions of dollars in peer-to-peer payment apps.

What bank owns Cash App? ›

Oakland, California-based Block owns Cash App along with point-of-sale software Square and buy now, pay later service Afterpay. Block is seeking to make the app the primary bank for Cash App's users, many of whom are younger and lower-income.

Can Cash App be tracked by police? ›

Can police trace cash app transactions? Police are currently unable to trace Cash App transactions, giving peace of mind to a Cash App law enforcement inquiry. Your transactions are 100% confidential, and the only way they can trace them is if they are illegal. By default, Cash App payments are fully secret.

Is there a lawsuit against Cash App? ›

Plaintiffs Michelle Salinas and Raymel Washington, both users of Cash App Investing, sued Block and Cash App in California federal court in August 2022 on behalf of all individuals nationwide whose private information was compromised because of the 2021 data breach.

What is the risk of using Cash App? ›

Fraudsters often attempt to steal your data and gain access to accounts by pretending to be a Cash App customer service representative. Cash App service representatives will never ask for or demand the following: Your sign-in code. This unique code helps keep your account safe and secure from scammers and fraudsters.

How long does Cash App investigation take? ›

Investigation Timeline

The complete investigation may take up to 45 days. When it concludes, we will notify you of the result via email and a notification in your app.

Will Cash App refund money if scammed? ›

Absolutly No, Cash App does not guarantee refunds for scams 833-317-0499.

Top Articles
Latest Posts
Article information

Author: Van Hayes

Last Updated:

Views: 6473

Rating: 4.6 / 5 (46 voted)

Reviews: 93% of readers found this page helpful

Author information

Name: Van Hayes

Birthday: 1994-06-07

Address: 2004 Kling Rapid, New Destiny, MT 64658-2367

Phone: +512425013758

Job: National Farming Director

Hobby: Reading, Polo, Genealogy, amateur radio, Scouting, Stand-up comedy, Cryptography

Introduction: My name is Van Hayes, I am a thankful, friendly, smiling, calm, powerful, fine, enthusiastic person who loves writing and wants to share my knowledge and understanding with you.