The Filter That Froze California

Bank of America administered California EDD debit cards. During the pandemic, fraud exploded across state unemployment systems. The bank responded by freezing accounts. Some freezes were justified. For many cardholders, the CFPB later found, a freeze meant weeks or months without benefits: a second disaster.¹ Claimants alleged they could not buy food, pay rent, or reach anyone who could explain why their cards had stopped working.

In May 2021, a federal judge found that the plaintiffs had shown "a strong likelihood of success" on claims that the bank failed to investigate reports of unauthorized charges and was "often simply freezing cardholder accounts based on a faulty screening process."² The court said continued denial of benefits would "seriously hinder the ability of many class members to feed their families and keep a roof over their heads." A preliminary injunction followed in June.³ The litigation later consolidated into multidistrict proceedings, and class certification arrived in 2025.⁴

Regulators reached the same broad conclusion from the enforcement side. In July 2022, the Consumer Financial Protection Bureau and the Office of the Comptroller of the Currency announced $225 million in penalties, with consumer redress ordered on top, tied to Bank of America's handling of unemployment benefits.¹ The agencies said the bank replaced reasonable investigation with an automated fraud filter, froze accounts, and made cardholders wait. The bank consented to both orders without admitting or denying the findings.

"Fraud controls" usually sound prudent. In a benefits program, a bad control can injure people in both directions. Too loose, and stolen identities get paid. Too blunt, and legitimate claimants lose access to rent money. California managed to hit both failure modes in the same system.

The people harmed by the freezes were also victims of the fraud panic. Their benefits had already survived the state process. Then, the CFPB found, the bank froze accounts "based solely on" its automated filter, though it "knew, or should have known," that not every account the filter caught would be fraudulent.¹

The litigation does not mean every frozen account was legitimate. It does not mean the bank faced an easy job. California's unemployment system was under attack, and identity theft claims were real. The charge in the court's preliminary findings and the regulators' consent orders is more specific: the bank's response relied on mass freezing and weak customer service, leaving many claimants without a workable remedy.

In California's frozen-card scandal, "too much fraud" and "too much enforcement" met: the same fear that thieves were draining the system helped justify controls that stranded people the program was supposed to help.

Notes

1. CFPB, consent order, In the Matter of Bank of America, N.A., 2022-CFPB-0004, July 14, 2022, Source document ($100 million penalty; redress under § VIII); OCC, penalty order AA-ENF-2022-22, July 14, 2022, Source document ($125 million); OCC press release; local enforcement summary at `cases/yick-v-bank-of-america-edd/summaries/ENFORCEMENT_CFPB-OCC_Bank-of-America_2022-07-14_summary.md`. ↩₁ ↩₂ ↩₃
2. Yick v. Bank of America, order regarding preliminary injunction, May 17, 2021, Source document. ↩
3. Yick v. Bank of America, preliminary injunction, June 2, 2021, Source document. ↩
4. In re Bank of America California Unemployment Benefits Litigation, class-certification order, June 24, 2025, Source document. ↩