CFPB Fines U.S. Bank $37.5 Million for Illegally Exploiting Personal Data to Open Sham Accounts for Unsuspecting Customers

On August 21, 2025, pursuant to the Bureau’s authority under 12 U.S.C. § 5563(b)(3) and under Paragraph 79 of the order, the Bureau terminated the order and waived any alleged non-compliance therewith. U.S. Bank has fulfilled certain obligations under the order, including, among other things, paying a civil money penalty of $37,500,000 to the Bureau required by Section IX of the order, issuing redress payments required by Section VIII of the order, and taking steps to implement injunctive relief to prevent future violations required by “Conduct Provisions” of the order.