Payment App Scam Texts: Cash App, Afterpay and the Settlement Trap, Explained for Seniors

Here is the sentence that protects you from almost every payment app scam text: a text about your money is never the place to fix a problem with your money. Cash App will never ask you to send money to claim a payment. Afterpay will never ask you for your password or a verification code. And no real settlement — not one — is claimed by tapping a link in a text message. Keep those three facts and most of the traps below fall apart on sight.

These texts work because they arrive dressed as good news or urgent news, and both are hard to ignore. The settlement text lands just after the real Cash App cases were on television. The Afterpay text lands while you really do have an order being paid off in installments. The scammers are not picking you out personally — they send these messages to millions of phones, because the timing feels personal even when it is pure luck. What they are counting on is the thirty seconds of worry before you stop and check.

This guide gives you that check, then the whole picture. You will learn the 60-second check that comes first, the five shapes Cash App scam texts actually take, the honest truth about the Cash App settlements — real cases, real money, and claim windows that have already closed — the Afterpay versions to watch for, exactly what to do in the first 10 minutes if you have already tapped or typed, and how to forward a scam text to 7726 and block the number on iPhone and Android. There is a one-page checklist near the end to print and keep by the phone.

The 60-Second Check, Explained: Why It Never Fails

The check works because it refuses to play the scammer's game on the scammer's field. A scam text controls everything inside itself: the name at the top, the logo, the wording, the link, the phone number. What it cannot control is the real Cash App or Afterpay app already sitting on your phone, signed in as you. So the entire defense is one habit: leave the message, and check the claim somewhere the message cannot reach.

Notice what this habit does not require. You do not need to spot a spelling mistake — modern scam texts are well written. You do not need to judge whether a web address "looks right" — fake addresses are built to look right at a glance. You do not need to decide whether you trust the sender's name, because phones can be made to show almost any name. You simply step outside the message. If a payment had genuinely failed on Afterpay, that failure would exist inside your real Afterpay account, in your order list. If settlement money were genuinely yours, it would not depend on a link in a text. Scammers can imitate a message. They cannot reach inside your real accounts and plant the problem there.

One more reassurance, because worry is the scammer's favorite tool: checking late costs you nothing. A genuine failed payment, a genuine account problem — those wait patiently inside the app, with proper notices and proper timeframes. Nothing genuine evaporates because you took an hour, or a day, to verify it. The only thing that evaporates is the scammer's chance.

Who this guide is for: anyone who uses Cash App or Afterpay — or whose phone simply receives texts claiming they do — and anyone whose parent or grandparent sends and receives family money on these apps. Who can skip it: nobody is fully exempt, but if you never tap links in texts and always check inside the app already, the fridge checklist near the end is the only part you need.

Cash App Scam Texts: The Five Shapes You Will Actually See

Cash App is how a lot of families move money now — a grandson paying back grocery money, a daughter covering a bill. Scammers know that, and their texts wear five familiar shapes. Learn the shapes once and you will recognize the family forever. Every example below is written by us, to show the pattern — real scam texts use the same shapes with different words.

Shape one: the settlement or "claim your payment" text. This is the busiest shape right now, because the real Cash App cases made real headlines. Cash App's own help pages warn about it directly: scammers pose as settlement notices, and some offer to file your claim for you — for a fee. Cash App calls those operators "claim preparers" and says they may be fraudsters. The section after this one gives you the full, honest settlement story.

Shape two: the accidental payment. Money appears in your Cash App from a stranger, followed by a flustered message: so sorry, wrong person, please send it back. It feels only decent to return it — and that decency is the weapon. The original payment was made with a stolen card; when it is reversed as fraud, your "repayment" — a fresh payment, from your real money — stays gone. Cash App's official guidance settles it: if a payment ever needs returning, refund the original payment inside the app; never create a new payment to send it back. Refunding uses the same rails the money arrived on. A new payment uses yours.

Shape three: the flip and the giveaway. Send $50, receive $500 back — "cash flipping" — or a giveaway that needs a small "clearance fee" or "account verification" payment first. Cash App is as blunt as a company can be: there are no legitimate businesses flipping cash, and Cash App will never request funds from a customer for any reason. There is no such thing as claiming a payment by sending money. If money must be sent before money arrives, nothing is arriving.

Shape four: the locked-account warning. Your account has been limited, suspicious activity detected, confirm your identity through this link. The link leads to a page that copies the Cash App sign-in screen, and anything typed there — login, PIN — goes straight to criminals. The real check is the 60-second one: open the app yourself. A real limitation would be standing there in plain sight.

Shape five: the helpful support number. A text — or, just as often, a web page that appears when you search for help — hands you a phone number for "Cash App support". You call, a calm professional answers, and walks you through "securing" your account straight into emptying it. This one matters enough that the government's own investigators flagged it: when the CFPB examined Cash App in 2025, it found that fake customer service lines were one of the ways people's information was stolen. The rule costs nothing: support is reached inside the app, or at the cash.app/help address you type yourself — never through a number that arrived in a message. And if a relative ever calls you mid-panic about a money problem, the family defenses in our safe-word guide and who called me guide cover the voice versions of the same trick.

The Settlement Truth: Real Cases, Closed Doors — and a New Scam Wearing Their Name

Here is the part most pages will not tell you straight, because the truth has three pieces and a headline only holds one. Piece one: the settlements are real. In the best-known case, Block — the company behind Cash App — agreed to a 15 million dollar settlement over data breaches and unauthorized account access. People who were affected could claim up to $2,500 for documented losses, and up to $75 for time spent sorting it out. Separately, a 12.5 million dollar settlement covered unwanted Cash App referral texts sent to people in Washington state between November 2019 and August 2025. And separately again, in January 2025, the Consumer Financial Protection Bureau — the federal consumer watchdog — ordered Block to pay up to 120 million dollars in refunds to users whose fraud reports had been mishandled, plus a 55 million dollar penalty. If you heard "Cash App settlement" on the news, you heard something true.

Piece two: the doors have closed. The deadline to file a claim in the 15 million dollar security settlement was 18 November 2024. The Washington texts deadline was 27 October 2025. Both windows are shut — no new claims are being accepted in either, no matter what a text message tells you. And for the CFPB refunds, the Bureau said it plainly at the time: consumers did not need to take action to obtain their redress. The money was to reach the people affected without anybody filing, claiming, verifying, or paying anything. Read that once more, because it defeats the entire scam by itself: in the biggest Cash App case of all, there was never anything to claim.

Piece three: the scam now wears the settlement's name. Because the cases were real and famous, "Cash App settlement" became the perfect bait. Cash App's own help pages describe the con exactly: fake notifications that imitate the real thing, scare tactics — threats about benefits or a paycheck — and helpers-for-hire offering to file your claim. Genuine settlement notices, Cash App says, direct you to a verified settlement administrator's website — the security settlement's is cashappsecuritysettlement.com — and a genuine process never charges you a fee, never starts from a text link, and never counts down the hours with threats. So here is the settlement rule to keep on the fridge: if a settlement is real, you can reach it calmly, for free, by typing the administrator's official address yourself — and if it must be claimed through a text, today, for a fee, it is not a settlement. It is the scam.

What if you actually filed a claim back when the windows were open? Then your job is simply patience and one safe habit: check your claim status only on the official administrator's site, typed by you, and expect payment to arrive by the method you chose when you filed — not by a fresh text asking you to "release" it. Nothing about a real payment requires a new link, a new fee, or a new login. And what if you never filed? Nothing was lost by waiting, because nothing can be filed now — let anyone who says otherwise keep talking to an empty chair.

Afterpay Text Scams: Failed Payments, Locked Accounts and Codes You Never Asked For

Afterpay's trap runs on a different feeling. Cash App texts chase the money you have; Afterpay texts chase the money you owe — or are made to believe you owe. Millions of people pay for orders in installments on Afterpay, so a message about a payment has a built-in audience. The shapes are three, and Afterpay's own security page gives you the facts that defeat all of them.

Shape one: the failed payment. Your installment could not be taken; pay now through this link or face late fees. The link leads to a page wearing Afterpay's colors, asking first for your login and then — "to fix the payment" — for your full card details. A real failed payment behaves completely differently: it sits in your account, in your order history, where the real app shows it to you with proper options. That is your check: open the app yourself. If the failed payment is not in there, it does not exist.

Shape two: the locked or suspended account. Your account has been restricted; tap to reactivate or verify. Notice the shape — it is Cash App's shape four with a different logo, because it works. The defense is identical, and Afterpay states its half of it plainly: Afterpay Customer Service will never ask you to disclose your password, your verification code, or your personal or financial details. Not by text, not by phone, not by email. Anyone asking is not Afterpay.

Shape three: the order you never placed, and the code you never asked for. A text announces an order you do not recognize — "if this was not you, tap here" — or simply delivers a six-digit verification code out of the blue. The code version is the subtle one: somewhere, a criminal may be trying to sign in as you, and the genuine system has sent the code to your phone, the way it should. The code only becomes a weapon if you hand it over — typed into a fake page, or read out to a helpful "support agent" who calls moments later. Afterpay's own instruction for this exact moment deserves quoting in full: if you received an SMS verification message that you did not trigger, you can safely ignore it. Doing nothing is not carelessness here. Doing nothing is the lock working.

One more Afterpay habit, straight from its own guidance: do not reuse your Afterpay password on other accounts. If a fake page ever does catch a login, a unique password means the damage stops at one door instead of following you to your email and your bank. And if you ever think you have entered your Afterpay details into a phishing page, Afterpay asks you to tell them what happened as soon as you can, through the official app or website — the first-10-minutes list below walks you through it in order.

Real vs Fake: The Side-by-Side Table

Every row of this table stands on its own — if a message in front of you fails even one row, you already have your answer.

Already Tapped, Typed or Paid? Your First 10 Minutes

Take a breath first. These texts reach millions of phones and are written by people who do this as a profession; tapping one does not make you careless — it makes you normal. What protects you now is order and speed. Work through the steps that apply to you, top to bottom:

1. If you typed a login or password into the page: change it now, in the real app. Open Cash App or Afterpay from your home screen — never go back through the text — change the password, and turn on every extra security step offered: a security lock or PIN on Cash App, extra login security on Afterpay. Use a password you use nowhere else.
2. If you entered bank or card details: call your bank now. Use the number printed on the back of your card. Tell them exactly what happened and what you typed. They can freeze the card and watch the account — this call matters more than everything below it combined.
3. If you sent money on Cash App: report it inside the app immediately. Open the real app, find the payment, and report the problem through the app's support — then, if a linked debit card or bank account funded it, call that bank too and ask whether anything can still be stopped. Be clear-eyed: these payments move instantly, and recovery is often impossible. Speed is a chance, not a guarantee — which is why the call happens now, not after lunch.
4. Check your recent activity in both apps for payments, orders or changes you do not recognize, and report anything wrong through the app itself.
5. Forward the text to 7726, block the number, and delete it. The steps for both phones are in the next section — two minutes, and that number's road gets harder for everyone.
6. Report it at ReportFraud.ftc.gov. The FTC collects these reports and investigators use them to track the campaigns — yours genuinely counts.
7. Tell a family member today. Not as a confession — as a warning. Scammers often try the same household twice, and households that talk about these attempts are remarkably hard to catch twice.

If all you did was tap the link and then close the page without typing anything, the risk is much lower — but still change nothing, worry less, and do steps 5 to 7. And hold one warning ready for the days ahead: if anyone contacts you offering to recover your money for a fee, that is the second act of the same scam. Real help — your bank, the app, the FTC — never starts with a fee.

Forward It to 7726, Then Block the Number (Step by Step)

Reporting a scam text to 7726 — which spells SPAM on your keypad — is the Federal Trade Commission's standing advice. It costs nothing, takes under a minute, and helps your phone company block the campaign for everyone. Here is how, on both kinds of phone.

Forwarding a text on iPhone

1. Open the conversation in Messages — but do not tap anything inside the message itself.
2. Press and hold the message bubble until a small menu appears.
3. Tap More…, then tap the curved forward arrow at the bottom right.
4. In the "To" field, type 7726 and tap send. You may get a reply asking for the number the text came from — just type that number and send it too.

Forwarding a text on Android (Samsung and most others)

1. Open the conversation in Messages.
2. Press and hold the scam message until it is selected.
3. Tap the three dots (or the share icon) and choose Forward.
4. Send it to 7726. Menu names vary slightly between brands — if you see "Share" instead of "Forward", that works too. On many Android phones you can also tap Report spam directly in the conversation's menu, which forwards and blocks in one motion.

Blocking the number afterwards

On iPhone: open the conversation, tap the number or name at the very top, tap Info, then scroll down and tap Block this Caller. On Android: open the conversation, tap the three dots, choose Details (or "Block & report spam" if shown), then Block. Blocked numbers change — scammers rotate through them — so blocking is a good habit rather than a permanent wall. Combined with your phone's built-in spam filtering, the noise drops to almost nothing; our guides to blocking spam texts on Android and stopping spam texts on iPhone walk through those settings tap by tap, and our guide to recognizing a fake delivery text covers the other family these messages travel with. For the trusted starting points themselves — the FTC, your carrier, the real company pages — our official safety resources directory keeps them in one list.

For Families: Setting Up Cash App and Afterpay With Mom or Dad

If you are the one who installed these apps on a parent's phone — the Cash App that carries grocery money between you, the Afterpay that splits a new appliance into four — this section is yours. You cannot stand between your parent and every text, but three things set up on one visit do most of the guarding. First, the locks: turn on Cash App's security lock so every payment needs a PIN or fingerprint, and set a unique password on Afterpay that is used nowhere else. Second, the route: put both real apps on the home screen, side by side, and practice the only journey they will ever need — "if a text worries you, close it, and open the app with your own finger." A route practiced twice, together, sticks.

Third, the agreement: make it a family rule that no money question is ever settled inside a text message — not a settlement, not a failed payment, not a grandchild in trouble. Any of those means a call to you, or to a number the family already knows. Say it as a game you are all playing against the scammers, never as a lecture about being careful; parents who feel trusted keep sending you the "look what I got today" messages, and that flow is the best alarm system a family can own. When one arrives, run the ritual together: the 60-second check, forward to 7726, block, and a moment of well-earned smugness. Our senior scam checklist — twelve checks covering texts, calls, emails and money requests — makes a good companion on the fridge next to this page's checklist, and if your family shops with a parent in Britain too, the same 7726 habit works there, as our guide to scam texts in the UK explains.

The Fridge Checklist: Stop. Check in the App. Forward. Block.

Print this page (your browser's print button keeps this section on one sheet) and keep it by the phone or on the fridge. Six lines are all most scam texts ever meet:

The 10-second version: a text about your money is never the place to fix a problem with your money. Cash App never asks you to send money to claim money; Afterpay never asks for your password or a code; and no live settlement is claimed through a text. Leave the message; check inside the real app.

The 3-minute routine: forward the text to 7726, block the number, delete it, and tell someone in the family.

The golden rule: never do what a text tells you. Do what you decide, through doors you open — the real app, the address you type, the number on your card.