Block reaches three-year deferred prosecution agreement with DOJ over money laundering charge

Block, the company behind Cash App and Square, has reached an agreement with the US Department of Justice to defer a money laundering charge for three years.

That is not an acquittal. It is closer to probation for a corporation, and the clock is now running.

The deal is a deferred prosecution agreement, or DPA, tied to Block’s anti-money laundering (AML) compliance. It follows years of regulatory pressure over how Cash App monitored transactions and vetted customers, including activity involving Bitcoin.

What the deferred prosecution agreement means

Think of a DPA as a suspended sentence that arrives before the trial. Prosecutors file a charge but agree to hold off on pursuing it. If the company meets its obligations for the agreed period, the charge typically goes away.

For Block, that period is three years. The company avoids a courtroom fight, but it stays under federal oversight for the duration.

The charge stems from serious gaps in Block’s AML program. Earlier reviews flagged weak spots in Cash App’s transaction monitoring and customer due diligence.

Those are the two pillars of any AML program. Monitoring catches suspicious money movements. Due diligence confirms who your customers actually are.

High-risk transactions involving digital assets like Bitcoin were a particular point of concern. Cash App has long let users buy and sell Bitcoin alongside its peer-to-peer payments, which puts it squarely in the crosshairs when compliance controls slip.

The DOJ agreement signals that federal scrutiny of those issues is not over. It is simply being managed on a schedule.

A paper trail of penalties

The federal deal caps off a run of state-level enforcement that has been building since at least 2023.

In April 2025, the New York Department of Financial Services (NY DFS) issued a consent order against Block. The company paid a $40 million penalty for failures under the Bank Secrecy Act and AML rules tied to Cash App’s compliance program.

One detail stood out. Delays in suspicious activity reporting averaged around 129 days in certain cases.

Suspicious activity reports are how financial companies alert authorities to possible crimes. A report that shows up four months late is less of an alarm and more of a postcard from a crime scene.

Then came a multistate settlement, finalized around July 2025. That deal required Block to put approximately $80 million toward fixing AML deficiencies uncovered in examinations conducted in November 2023.

Add those together and the state actions alone account for roughly $120 million in combined penalties and remediation commitments, before any federal terms enter the picture.

Block also faces separate consumer protection settlements in 2026 totaling $45 million. Those are distinct from the money laundering matters, but they add to an already crowded legal calendar.

How Cash App got here

Much of the problem traces back to growth. Cash App expanded sharply between 2019 and 2020, and its compliance machinery did not keep pace.

The result was backlogs. When user numbers surge faster than reviewers can process alerts, flagged transactions pile up and reports go out late. That is roughly the pattern regulators later documented.

It is a familiar story in fintech. Startups optimize for frictionless signups, then discover that frictionless also applies to bad actors.

Block has since rolled out a number of operational enhancements. The company has also cooperated with regulators throughout the various investigations, which is often a factor in whether prosecutors offer a DPA rather than pursue a conviction.

What this means for Block and its users

For investors, the agreement cuts both ways. Resolving the federal matter without a trial removes a major source of uncertainty that had been hanging over the company.

The flip side is that three years is a long time to operate under a microscope. Any compliance stumble during that window could put the deferred charge back on the table, which raises the cost of getting things wrong.

The cumulative penalties also matter. Between the NY DFS fine, the multistate AML settlement, and the consumer protection settlements, Block has a growing tab for past lapses. Ongoing compliance spending is likely to remain elevated as the company works to satisfy multiple regulators at once.

For the crypto side of the business, the stakes are pointed. Regulators specifically flagged high-risk transactions involving digital assets as an area of weakness. That suggests Cash App’s Bitcoin features will face extra attention as the company proves its controls work.

Block has positioned Bitcoin as a core part of its long-term strategy. A federal agreement centered on AML failures means that strategy now runs alongside close supervision of exactly the kinds of transactions it depends on.

The broader message lands across the payments and crypto industries. Fast-growing platforms that treat compliance as an afterthought can expect state regulators to move first and federal prosecutors to follow.

What to watch: whether any further details of the DPA’s obligations emerge, how Block reports on its compliance progress, and whether the company completes the three-year period cleanly. A clean finish would let Block close one of the more expensive chapters in its history. A misstep would reopen it.