Cash App's parent company Block failed to investigate fraud and unauthorized transactions, and refused to refund customers, the Consumer Financial Protection Bureau said.