Block will pay $45m to 46 US states over Cash App fraud handling, as state regulators move into ground the weakened CFPB has vacated.