Google Pay / Google Wallet is a payments product offered by Google LLC and its wholly owned subsidiary Google Payment Corp. (GPC), part of the publicly traded Alphabet Inc. (published dossier: alphabet, composite 27). The Google Payments Privacy Notice discloses collection of card/bank account numbers, address, phone number, date of birth and government-issued ID numbers at registration, plus third-party-sourced data including consumer reports under the US Fair Credit Reporting Act; it states GPC shares creditworthiness information with its Google affiliates for their everyday business purposes and lets those affiliates market to users based on shared account data, subject to an opt-out. The broader Google Privacy Policy, which the Payments Notice explicitly incorporates, discloses use of cookies, pixel tags and local storage, and that Google receives information from partners to provide advertising and research services on their behalf. In December 2024 the CFPB published a supervisory-designation order over Google Payment Corp. citing consumer complaints about transaction-dispute and fraud handling; the CFPB's own release states this is not a wrongdoing finding and the order does not require an examination, and the CFPB's own release page records that the Bureau withdrew the designation order on May 7, 2025.
TRACK RECORD
1 ENFORCEMENT ACTION
[2024-12-01]
The CFPB states it published a supervisory-designation order over Google Payment Corp., pointing to consumer complaints and other risk indicators as the basis for such orders, but explicitly clarifies that the order 'does not constitute a finding that the entity has engaged in wrongdoing' and does not itself require a supervisory examination.
Google's Payments Privacy Notice states that registering for Google Payments may require providing a credit or debit card number and expiry date, bank account number and expiry date, address, phone number, date of birth, and national insurance number or taxpayer identification number (or other government-issued ID numbers), and separately discloses that Google obtains consumer reports (as defined by the US Fair Credit Reporting Act) and card-issuer information about users from third parties.
The Consumer Financial Protection Bureau's own release independently names 'Google Payment Corp.' as the entity subject to its supervisory-designation order, corroborating from a federal regulator's page the operating-subsidiary name Google discloses in its own Payments Privacy Notice.
Google's Payments Privacy Notice states that it applies to services offered by Google LLC or its wholly owned subsidiaries, including Google Payment Corp., naming the specific subsidiary that operates Google Payments/Google Pay within the wider Google/Alphabet corporate family.
Google's Payments Privacy Notice discloses that Google Payment Corp. (GPC) shares information about a user's creditworthiness with its Google affiliates for their everyday business purposes, and that those affiliates may market their own products or services to the user based on personal information GPC collects and shares with them, subject to a user opt-out available in Google Payments privacy settings.
The CFPB states it published a supervisory-designation order over Google Payment Corp., pointing to consumer complaints and other risk indicators as the basis for such orders, but explicitly clarifies that the order 'does not constitute a finding that the entity has engaged in wrongdoing' and does not itself require a supervisory examination.
The Google Privacy Policy, which the Payments Privacy Notice explicitly incorporates for Google Payments users, states that Google receives information from partners to provide advertising and research services on their behalf, and uses various technologies to collect and store information including cookies, pixel tags, local storage (browser web storage/application data caches), databases and server logs.