Cash App-owner Block must offer up to $120 million in refunds to consumers who federal regulators say were exposed to potential fraud.

Block, the owner of Cash App and Square, will pay $175 million to settle allegations that its lax consumer protection practices put customers at high risk of fraud, the Consumer Financial Protection Bureau said.

Block Inc. was fined by dozens of state regulators and then ordered by the Consumer Financial Protection Bureau to refund consumers in two separate settlements in the last 24 hours over Cash App. The CFPB Thursday ordered Block,