Cash App-owner Block must offer up to $120 million in refunds to consumers who federal regulators say were exposed to potential fraud.

Poor customer service is irritating and exhausting. And for Oakland-based Block, which operates the popular Cash App and Square products, it’s also proving to be expensive. The financial tech company is required to pay at least $75 million to Cash App customers and $55 million to a government-run penalty fund under a Thursday order from the Consumer Financial Protection Bureau.

The transfer-money app, owned by Jack Dorsey’s Block, racked up a hefty bill of fines and restitution for what federal regulators called “woefully incomplete” customer protections.