Superintendent of Financial Services, Adrienne A. Harris, announced today that Block, Inc. will pay a $40 million penalty for significant failures in its Bank Secrecy Act/Anti-Money Laundering compliance program, which violated the New York Department of Financial Services’s money transmitter and virtual currency regulations.

In addition to the monetary penalty, Block is required to retain an independent monitor to perform a comprehensive evaluation of its compliance with the Department’s regulations and its remediation efforts.

Block owns and operates Cash App, a peer-to-peer money transmission service that allows users to send and receive fiat currency. The company has been licensed by the Department to conduct money transmission business in the State of New York since 2013, and virtual currency business through Cash App since 2018.

The Department’s investigation revealed critical gaps in Block’s Bank Secrecy Act/Anti-Money Laundering (BSA/AML) program, including inadequate customer due diligence, failure to implement sufficient risk-based controls designed to prevent money laundering and illicit activity, and failure to effectively and timely monitor transactions. Notably, Block’s lax treatment of high-risk Bitcoin transactions allowed largely anonymous transactions to proceed without proper scrutiny.

Additionally, Block’s rapid growth between 2019 and 2020 contributed to a severe transaction alert backlog, which Block left unaddressed for a significant period of time.

Block’s rapid growth, coupled with inadequate BSA/AML controls, created an environment vulnerable to criminal exploitation. Under the terms of the consent order, an Independent Monitor will be installed to ensure Block builds a successful and effective compliance program capable of identifying and preventing illicit activity, protecting the integrity of New York’s financial system.

The Department acknowledges Block’s cooperation throughout the investigation. The company has already committed significant financial and other resources to remediate the shortcomings identified in the Consent Order.