Dave IncDE

Current report

Although our Board of Directors has authorized a share repurchase program, the program does not obligate us to repurchase any specific dollar amount or to acquire any specific number of shares of our common stock. The timing, manner, price and amount of any repurchases are determined at the discretion of our management, depending on market conditions and other factors. We cannot guarantee that the program will be fully consummated or that it will enhance long-term stockholder value, and it may not prove to be the best use of our cash. The program could affect the trading price of our stock and increase volatility, and any announcement of a termination of this program may result in a decrease in the trading price of our stock. In addition, any repurchase under this program will reduce our cash reserves.

Current report

Refer to “Liquidity and Capital Resources—Share Repurchase Authorization” for additional information regarding our authorized share repurchase program.

Current report

On March 14, 2025, Jason Wilk, a member of our Board of Directors and Chief Executive Officer, entered into a pre-arranged stock trading plan that provides for the potential sale of up to 173,218 shares of Dave Class A Common Stock between June 13, 2025 and December 10, 2025, subject to the plan's earlier expiration or completion in accordance with its terms.

Current report

On March 14, 2025, Kyle Beilman, Chief Financial Officer, entered into a pre-arranged stock trading plan that provides for the potential sale of up to 30,000 shares of Dave Class A Common Stock between June 13, 2025 and December 31, 2025, subject to the plan's earlier expiration or completion in accordance with its terms.

Current report

On March 11, 2025, Michael Pope, amember of our Board of Directors, entered into a pre-arranged stock trading plan that provides for the potential sale of up to 17,337 shares of Dave Class A Common Stock between June 16, 2025 and March 31, 2026, subject to the plan's earlier expiration or completion in accordance with its terms.

Current report

On March 12, 2025, Andrea Mitchell, amember of our Board of Directors, entered into a pre-arranged stock trading plan that provides for the potential sale of up to fifty percent (50%) of the gross number of shares of Dave Class A Common Stock that will vest on or about June 3, 2025 between June 11, 2025 and December 31, 2025, subject to the plan's earlier expiration or completion in accordance with its terms.

Current report

On March 14, 2025, Proem Investments Master Fund LP and Proem Special Situations Fund I LP, for which Imran Khan, a member of our Board of Directors, is Founder and Managing Member, entered into a pre-arranged stock trading plan that provides for the potential sale of up to 297,771 shares of Dave Class A Common Stock between June 13, 2025 and March 13, 2026, subject to the plan's earlier expiration or completion in accordance with its terms.

Current report

On March 6, 2025, Dan Preston, amember of our Board of Directors, entered into a pre-arranged stock trading plan that provides for the potential sale of up to fifty percent (50%) of the gross number of shares of Dave Class A Common Stock that will vest on or about June 3, 2025 between June 5, 2025 and December 31, 2025, subject to the plan's earlier expiration or completion in accordance with its terms.

Current report

These trading plans are intended to satisfy the affirmative defense conditions of Rule 10b5-1(c) under the Exchange Act.

Previous report

We currently rely on a single bank partner, and if our present or any future key banking relationships are terminated and we are not able to secure or successfully migrate client portfolios to a new bank partner or partners, or our bank partner becomes subject to regulatory restrictions or other operational disruptions, our business would be adversely affected.

Previous report

We currently rely on agreements with Evolve, our only bank partner, to provide ExtraCash and other deposit accounts, debit card services and other transaction services to us and our Members. These agreements and corresponding regulations governing banks and financial institutions may give Evolve substantial discretion in approving certain aspects of our business practices, including our application and qualification procedures for Members and require us to comply with certain legal requirements. Evolve discretionary actions under these agreements could impose material limitations to, or have a material adverse effect on, our business, financial condition and results of operations. In addition, any disruptions or restrictions on Evolve’s operations could have an adverse effect on our business, financial condition and results of operations. For example, in May 2024, Evolve experienced a cybersecurity incident that resulted in the leak of certain customer information, including information of some of our Members. If our relationship with Evolve is terminated or Evolve becomes unable to provide the necessary services to us, we would need to find another financial institution to provide those services, which could be difficult and expensive. If we are unable to find a replacement financial institution to provide the services we receive from Evolve, we would not be able to offer ExtraCash advances, service our deposit accounts, debit cards and other services, which would have a material adverse effect on our business, financial condition and results of operations. Furthermore, our financial results could be adversely affected if our costs associated with using Evolve materially change or if any penalty or claim for damages is imposed as a result of our breach of our agreements with Evolve.

Previous report

In addition, state and federal agencies have broad discretion in their interpretation of laws and requirements related to bank partnership programs and may elect to alter standards or the interpretation of the standards applicable to these programs. The uncertainty of the federal and state regulatory environments around bank partnership programs means that our efforts to launch products and services through bank partners may not ultimately be successful, or may be restricted or challenged by legislation or regulatory action. If the legal structure underlying our relationship with Evolve were to be successfully challenged or otherwise restricted, we would need to find an alternative bank relationship. Furthermore, Evolve or any other future bank partners could be subject to enforcement actions, civil monetary penalties, supervisory orders to cease and desist or other remedial actions, which, even if unrelated to our business, could impose restrictions on the bank partner’s ability to continue to extend credit on current terms or offer services that are required for certain of our products. For example, in June 2024, the Federal Reserve Board issued a cease and desist order against Evolve for alleged deficiencies in its anti-money laundering, risk management and consumer compliance programs. Federal or state regulators may also subject us to increased compliance, legal and operational costs, and could subject our business model to scrutiny and otherwise increase our regulatory requirements, or may adversely affect our ability to expand our business.

Previous report

Cyberattacks and other security breaches or disruptions suffered by us or third parties upon which we rely could have a materially adverse effect on our business, harm our reputation and expose us to public scrutiny and liability.

Previous report

In the normal course of business, we collect, process, use and retain sensitive and confidential information regarding our Members and prospective Members, including data provided by and related to Members and their transactions, as well as other data of the counterparties to their payments. We also have arrangements in place with certain third-party service providers that require us to share consumer information for servicing purposes. Information security risks in the financial services industry continue to increase generally, in part because of new technologies, the use of the Internet and telecommunications technologies (including mobile devices) to conduct financial and other business transactions and the increased sophistication and activities of organized criminals, perpetrators of fraud, hackers, terrorists and other malicious third parties. In addition to cyberattacks and other security breaches involving the theft of sensitive and confidential information, hackers, terrorists, sophisticated nation-state and nation-state supported actors and other malicious third parties recently have engaged in attacks that are designed to disrupt key business services, such as consumer-facing applications and websites.

Previous report

These cybersecurity challenges, including threats to our own IT infrastructure or those of third-party providers, may take a variety of forms ranging from stolen bank accounts, business email compromise, user fraud, account takeover, check fraud or cybersecurity attacks, such as ransomware, unauthorized encryption, denial-of-service attacks, social engineering, unauthorized access, spam or other attacks, to “mega breaches” targeted against cloud-based services and other hosted software, which could be initiated by individual or groups of hackers or sophisticated cyber criminals. A cybersecurity incident or breach could result in disclosure of confidential information and intellectual property, or cause service interruptions and compromised data. We may be unable to anticipate or prevent techniques used in the future to obtain unauthorized access or to sabotage systems because they change frequently and often are not detected until after an incident has occurred. Our information technology and infrastructure, as well as those of our third-party service providers, have experienced breaches and may be subject or vulnerable in the future to breaches or attacks. For example, a third-party breach resulted in improper disclosure of certain of our Members’ information, and any future improper disclosure of our own confidential business information or the information of our Members could materially and adversely affect our business. A core aspect of our business is the reliability and security of our platform. Any perceived or actual breach of security, regardless of how it occurs or the extent of the breach, could have a significant impact on our reputation as a trusted brand, cause us to lose existing partners or Members, prevent us from obtaining new partners and Members, require us to expend significant funds to remedy problems caused by breaches and implement measures to prevent further breaches, and expose us to legal risk and potential liability including from governmental or regulatory investigations, class action litigation and other lawsuits. If sensitive information is lost or improperly disclosed through a data breach or otherwise or threatened to be disclosed, we could experience a loss of confidence by our partners and Members in the security of our systems, products and services and prevent us from obtaining new partners and Members, and we could incur significant costs to remedy problems caused by breaches and implement measures to prevent further breaches, and expose us to legal risk and potential liability and penalties, including from governmental or regulatory investigations, class action litigation and other lawsuits, all of which could adversely affect our reputation and our operating results. Any actual or perceived security breach at a company providing services to us or our Members could have similar effects.

Previous report

Most jurisdictions have enacted laws requiring companies to notify individuals, regulatory authorities and others of security breaches involving certain types of data. In addition, our agreements with certain partners and service providers may require us to notify them in the event of a security breach. Such mandatory disclosures are costly, could lead to negative publicity, may cause our Members to lose confidence in the effectiveness of our security measures and require us to expend significant capital and other resources to respond to and/or alleviate problems caused by the actual or perceived security breach. A security breach of any of our vendors that processes personally identifiable information of our Members may pose similar risks.

Previous report

In May 2020, an unauthorized third party attempted to gain access to Dave Member accounts and was able to access Member profiles and Members’ partial or incomplete bank account information. We did not uncover any evidence that the attacker was able to take any actions with respect to the data, other than gaining read access to it, nor do we believe any unauthorized transactions were made or advances requested on our platform. We provided notice to relevant parties as required under applicable law and agreements and took steps to set up alerts to detect abnormal request volumes and introduced rate limiting at the IP address level. In addition, in June 2020, we were notified of an unauthorized third party breach of our Dave database. The third party was able to access to Dave’s system by breaching the system of one of Dave’s third party service providers. The attacker was able to download a large data set, including encrypted social security numbers for some Members; however, there was no evidence that unauthorized transactions were made or advances requested on our platform, nor do we believe that the third party gained access to decryption keys or was otherwise able to decrypt encrypted information. The May 2020 and June 2020 incidents are collectively referred to herein as the "2020 Incidents." We took remedial measures, including the engagement of an outside security consultant to monitor for ongoing dark web activity and to conduct a security audit and incident investigation, and notified relevant parties as required under applicable law and agreements. As a result of the 2020 Incidents, we are in the process of settling a purported class action in California for approximately $3.1 million and we settled individual claims outside of California for approximately $4.4 million. See Item 1. Legal Proceedings. In addition, in 2024, one of our third-party service providers experienced a data breach that resulted in improper disclosure of certain of our Members’ information. As we have increased our Member base and our brand has become more widely known and recognized, third parties may continue to seek to compromise our security controls or gain unauthorized access to our sensitive corporate information or our Members’ data.

Previous report

If our banking partner or other strategic partners were to conclude that our systems and security policies and procedures are insufficiently rigorous, they could terminate their relationships with us, and our financial results and business could be adversely affected. Under our terms of service and our contracts with strategic partners, if there is a breach of non-public personal information of our Members that we store, we could be liable to the partner for their losses and related expenses.

Previous report

Additionally, as computer malware, viruses, and computer hacking, fraudulent use attempts, and phishing attacks have become more prevalent, we, and third parties upon which we rely, face increased risk in maintaining the performance, reliability, security, and availability of our solutions and related services and technical infrastructure to the satisfaction of our Members. Any computer malware, viruses, computer hacking, fraudulent use attempts, phishing attacks, or other data security breaches related to our network infrastructure or information technology systems or to computer hardware we lease from third parties, could, among other things, harm our reputation and our ability to retain existing Members and attract new Members.

Previous report

Our insurance may be insufficient or may not cover all liabilities incurred by cybersecurity incidents. We also cannot be certain that our insurance coverage will be adequate for data handling or data security liabilities actually incurred, that insurance will continue to be available to us on economically reasonable terms, or at all, or that any insurer will not deny coverage as to any future claim. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, including premium increases or the imposition of large deductible or co-insurance requirements, could have a material adverse effect on our business, including our financial condition, operating results, and reputation.

Previous report

Our business is subject to extensive regulation and oversight in a variety of areas under federal, state and local laws, and is subject to regulatory investigations and consumer litigation.

Previous report

We are subject to extensive regulation under United States federal and state laws and regulations. Regulators have broad discretion with respect to the interpretation, implementation, and enforcement of these laws and regulations, including through enforcement actions that could subject us to civil money penalties, Member remediation, increased compliance costs, and limits or prohibitions on our ability to offer certain products or services or to engage in certain activities. Any failure or perceived failure to comply with any of these laws or regulations could subject us to lawsuits or governmental actions and/or damage our reputation, which could materially and adversely affect our business. Moreover, any competitors subject to different, or in some cases less restrictive, legislative or regulatory regimes may have or obtain a competitive advantage over us.

Previous report

We are subject to the regulatory and enforcement authority of the Consumer Financial Protection Bureau (“CFPB”), which oversees compliance with federal consumer financial protection laws. In addition, our partnership with Evolve is subject to the supervisory authority of the Federal Reserve, which is Evolve’s primary federal bank regulator. The CFPB has broad enforcement powers, and upon determining a violation of applicable law has occurred can order, among other things, rescission or reformation of contracts, the refund of moneys, restitution, disgorgement or compensation for unjust enrichment, the payment of damages or other monetary relief, public notifications regarding violations, limits on activities or functions, remediation of practices, external compliance monitoring and civil money penalties. The cost of responding to investigations can be substantial and an adverse resolution to an investigation, including a consent order or other settlement, may have a material adverse effect on our business, financial position, results of operations and future prospects.

Previous report

For example, on November 5, 2024, the Federal Trade Commission (the “FTC”) filed a civil complaint against us alleging violations of Section 5(a) of the FTC Act and the Restore Online Shoppers’ Confidence Act related to our platform and offering of our ExtraCash product. The complaint seeks a permanent injunction, monetary relief for an unspecified amount and “other relief as the court determines to be just and proper.” Given the outcome of any case in litigation is uncertain, for the period ending September 30, 2024, we have recorded a $7 million litigation and settlement accrual for this matter. Significant changes in the accrual may be required in future periods as the case progresses and additional information becomes available. At this time, we are unable to reasonably predict the possible outcome of this matter due to, among other things, the fact that it raises difficult factual and legal issues and is subject to many uncertainties and complexities. There can be no assurance that we will be successful in the litigation, and we may incur a loss in excess of the amount accrued. The defense or resolution of this matter could involve significant monetary costs and have a material impact on our business, financial results and operations. See Note 11, “Commitments and Contingencies,” to the condensed consolidated financial statements for additional information.

Previous report

In addition, we are also subject to consumer litigation, including putative consumer class actions which allege that we violate federal and/or state laws regulating the financial services industry. For example, in July 2022, a purported class action Lopez v. Dave, Inc. was filed in the U.S. District Court for the Northern District of California alleging violations of California consumer protection laws and state and federal lending laws, among other things, and we settled this matter in July 2024. In December 2022, a purported class action Golubiewski and Checchia v. Dave, Inc. was filed in the U.S. District Court for the Middle District of Pennsylvania alleging similar violations under Pennsylvania state and federal laws. We are actively litigating this matter and cannot estimate the likely outcome at this time.

Previous report

Our "terms of use" for the Dave App as well as the Evolve agreements related to the ExtraCash and deposit accounts include arbitration clauses. If our arbitration agreements were to become unenforceable for any reason, we could experience an increase to our consumer litigation costs and exposure to potentially damaging class action lawsuits. Even if our arbitration clause remains enforceable, we may be subject to mass arbitrations in which large groups of consumers bring arbitration claims against the Company simultaneously.

Previous report

We have been and may in the future also be subject to investigations and potential enforcement actions that may be brought by state regulatory authorities, state attorneys general or other state enforcement authorities and other governmental agencies. Any such actions could subject us to civil money penalties and fines, Member remediation, and increased compliance costs, damage our reputation and brand and limit or prohibit our ability to offer certain products and services or engage in certain business practices. Further, in some cases, regardless of fault, it may be less time-consuming or costly to settle these matters, which may require us to implement certain changes to our business practices, provide remediation to certain individuals or make a settlement payment to a given party or regulatory body.

Previous report

The financial services industry continues to be highly regulated and subject to new laws or regulations in many jurisdictions, including the U.S. states in which we operate, which could restrict the products and services we offer, impose additional compliance costs on us, render our current operations unprofitable or even prohibit our current or future operations.

Previous report

We are required to comply with frequently changing federal, state, and local laws and regulations that regulate, among other things, the terms of the financial products and services we offer. New laws or regulations may require us to incur significant expenses to ensure compliance. Federal and state regulators of consumer financial products and services are also enforcing existing laws, regulations, and rules more aggressively, and enhancing their supervisory expectations regarding the management of legal and regulatory compliance risks. For example, State attorneys general have indicated that they will take a more active role in enforcing consumer protection laws, including through the establishment of state consumer protection agencies as well as the use of Dodd-Frank Act provisions that authorize state attorneys general to enforce certain provisions of federal consumer financial laws and obtain civil money penalties and other relief available to the CFPB.

Previous report

In addition, regulators are interpreting existing laws, regulations and rules in new and different ways as they attempt to apply them to novel products and business models such as ours. The regulatory landscape in which we operate continues to evolve, and the CFPB has issued several interpretive statements and guidance that could impact our business practices. For example, in July 2024, the CFPB proposed interpretive rule on paycheck advance and earned wage access, a model which Dave was originally founded on but transitioned away from beginning in 2022. If the CFPB determines that our current business model and practices fall within the scope of the proposed interpretive rule, we could be subject to additional regulatory requirements and scrutiny. Moreover, "True lender" challenges of bank partnership arrangements for credit products (such as the arrangement for ExtraCash) are being raised at the federal and state levels, and banking as a service arrangements (such as the arrangements for our deposit accounts) are subject to heightened scrutiny. Changes in the laws, regulations and enforcement priorities applicable to our business, or changes in the way existing laws and regulations are interpreted and applied to us, could have a material impact on our business model, operations and financial position. In some cases, these measures could even directly prohibit some or all of our current business activities in certain jurisdictions or render them unprofitable and/or impractical to continue.

Previous report

The application of traditional federal and state consumer protection statutes and related regulations to innovative products offered by financial technology companies such as us is often uncertain, evolving and unsettled. To the extent that our products are deemed to be subject to any such laws, we could be subject to additional compliance obligations, including state licensing requirements, disclosure requirements and usury or fee limitations, among other things. Application of such requirements and restrictions to our products and services could require us to make significant changes to our business practices (which may increase our operating expenses and/or decrease revenue) and, in the event of retroactive application of such laws, subject us to litigation or enforcement actions that could result in the payment of damages, restitution, monetary penalties, injunctive restrictions, or other sanctions, as well as unenforceability of the advances facilitated through our platform, any of which could have a material adverse effect on our business, financial position, and results of operations.

Previous report

Further, we may not be able to respond quickly or effectively to regulatory, legislative, and other developments, and these changes may in turn impair our ability to offer our existing or planned features, products, and services and/or increase our cost of doing business. In addition, we expect to continue to launch new products and services in the coming years, which may subject us to additional legal and regulatory requirements under federal, state and local laws and regulations. To the extent the application of these laws or regulations to our new offerings is unclear or evolving, including changing interpretations and the implementation of new or varying regulatory requirements by federal or state governments and regulators, this may significantly affect or change our proposed business model, increase our operating expenses and hinder or delay our anticipated launch timelines for new products and services.

Previous report

Due to our bank partnership model, we are and will continue to be subject to third-party risk management obligations, our business model may need to be substantially altered and we may not be able to continue to operate our business as it is currently operated.

Previous report

Banking products made available through us by our bank partner remain subject to regulation and supervision by our bank partner’s regulators and we, as a service provider to our bank partner, undertake certain compliance obligations. If we were to become directly subject to banking regulations or if the third-party risk management requirements applicable to us were to change, our business model may need to be substantially altered and we may not be able to continue to operate our business as it is currently operated. Failure by us, or any of our business partners, to comply with applicable laws and regulations could have a material adverse effect on our business, financial position and results of operations.

Previous report

If we were found to be operating without having obtained necessary state or local licenses, it could adversely affect our business, results of operations, financial condition, and future prospects.

Previous report

Certain states have adopted laws regulating and requiring licensing, registration, notice filing, or other approval by parties that engage in certain activities regarding consumer finance transactions. We have also received inquiries from state regulatory agencies regarding requirements to obtain licenses from or register with those states, including in states where we have determined that we are not required to obtain such a license or be registered with the state, and we expect to continue to receive such inquiries. The application of certain consumer financial licensing laws to our platform and the related activities it performs is not always clear, and regulatory agencies may not agree with our determinations on the applicability of such laws to us. In addition, state licensing requirements may evolve over time, including, in particular, recent trends in legislation seeking to impose licensing requirements and regulation of parties engaged in the business of offering "earned wage access" products to consumers. For example, in 2023, the banking regulators in Connecticut and Maryland issued guidance (and in the case of Maryland, a regulatory change) (collectively, “State Regulatory Changes”) indicating that traditional “earned wage access” products would, under certain circumstances, be considered small loans under the state lending laws, and that optional fees and tips, under certain circumstances, would be finance charges for purposes of calculating the interest rate under the state’s applicable usury limit. These State Regulatory Changes would subject those covered by them to licensure and limitations or prohibitions on certain charges. Although we do not believe that our ExtraCash overdraft product offered through Evolve is covered by the State Regulatory Changes, we have recently received separate inquiries from the Connecticut and Maryland banking regulators as to whether the ExtraCash product is subject to the State Regulatory Changes, as well as a subpoena from the Maryland Attorney General requesting information regarding any earned wage access and related products that we offer in the state of Maryland. Although we believe that our practices and products offered at all times in Maryland and Connecticut have been in compliance with applicable law, the defense or resolution of these matters could involve significant monetary costs or penalties and have a significant impact on our financial results and operations.

Previous report

If we were found to be in violation of applicable state licensing or other requirements by a court or a state, federal, or local enforcement agency, or agree to resolve such concerns by voluntary agreement, we could be subject to or agree to pay fines, damages, injunctive relief (including required modification or discontinuation of our business in certain areas), criminal penalties, and other penalties or consequences, and the ExtraCash receivables facilitated through our platform could be rendered void in whole or in part, any of which could have an adverse effect on our business, results of operations, and financial condition. Additionally, in December 2021, we entered into a Memorandum of Understanding (“MOU”) with the California Department of Financial Protection and Innovation (“CA DFPI”). The MOU required us to provide the CA DFPI with certain information as requested by the CA DFPI and adhere to certain practices in connection with our prior advance product (including certain disclosures related to us not being licensed by the CA DFPI). The CA DFPI finalized a new California Consumer Finance Protection Law regulation, effective February 15, 2025, which requires providers of income-based advances (and other providers) to register with the DFPI (the "DFPI Regulation.") The DFPI Regulation has an exemption for bank-issued products such as ExtraCash. The MOU will terminate on the DFPI Regulation's effective date. It is possible that the DFPI may not agree with the Company's interpretation of the DFPI Regulation and if we were found to be in violation of the DFPI Regulation, we could be subject to fines, damages, injunctive relief, and other penalties or consequences.

Previous report

None

Previous report

None