Fold Holdings, Inc.
For the period ended Dec 31, 2024. Filed Mar 28, 2025.
View on SEC.govAbout this filing
A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.
FY2024 · Filed Mar 28, 2025
Extracted filing text, with the paragraph anchors used by the comparison.
See the whole filing, with its images and exhibitsContents
Item 1A. Risk Factors
You should consider carefully all of the risks described below, which we believe are the principal risks that we face and of which we are currently aware, and all of the other information contained in this Annual Report. If any of the events or developments described below occur, our business, financial condition or results of operations could be negatively affected.
Risks Related to our Business and Industry
Our operating results have and will significantly fluctuate, including due to the highly volatile nature of Bitcoin.
Our operating results are in part dependent on the broader Bitcoin economy. Due to the rapidly evolving nature of digital assets and the volatile price of Bitcoin, which has experienced and continues to experience significant volatility, our operating results have, and will continue to, fluctuate significantly from quarter to quarter in accordance with market sentiments and movements in the broader Bitcoin economy. Our operating results will continue to fluctuate significantly as a result of a variety of factors, many of which are unpredictable and in certain instances are outside of our control, including:
| ● | our ability to continue to diversify and grow our subscription and services revenue; |
| ● | our mix of revenue between transaction and subscription and services; |
| ● | investments we make in the development of products and services, international expansion, and sales and marketing; |
| ● | market conditions of, and overall sentiment towards, Bitcoin; |
| ● | system failure, outages or interruptions, including with respect to our and our partners’ platforms; |
| ● | breaches of security or privacy; |
| ● | inaccessibility of our and our partners’ platforms due to our or third-party actions; |
| ● | our ability to compete with our competitors. |
In view of the rapidly evolving nature of our business and Bitcoin, period-to-period comparisons of our operating results may not be meaningful, and you should not rely upon them as an indication of future performance. Quarterly and annual expenses reflected in our financial statements may be significantly different from historical or projected rates. Our operating results in one or more future quarters may fall below the expectations of securities analysts and investors. As a result, the trading price of our common stock may increase or decrease significantly.
Our business is subject to extensive laws, rules, regulations, policies, orders, determinations, directives, treaties, and legal and regulatory interpretations and guidance in the markets in which we operate, including those governing financial services and banking, credit, Bitcoin asset custody, exchange, and transfer, privacy, data governance, data protection, cybersecurity, fraud detection, payment services (including payment processing and settlement services), money transmission (including prepaid access), virtual currency business, consumer protection, escheatment, antitrust and competition, bankruptcy, tax, anti-bribery, economic and trade sanctions, anti-money laundering, and counter-terrorist financing. Many of these legal and regulatory regimes were adopted prior to the advent of the internet, mobile technologies, Bitcoin assets, generative artificial intelligence (“AI”) and related technologies. As a result, some applicable laws and regulations do not contemplate or address unique issues associated with the Bitcoin economy, are subject to significant uncertainty, and vary widely across U.S. federal, state, and local and international jurisdictions. These legal and regulatory regimes, including the laws, rules, and regulations thereunder, evolve frequently and may be modified, interpreted, and applied in an inconsistent manner from one jurisdiction to another, and may conflict with one another. Moreover, the complexity and evolving nature of our business and the significant uncertainty surrounding the regulation of the Bitcoin economy, prepaid access, virtual currency business and gift card resale requires us to exercise our judgment as to whether certain laws, rules, and regulations apply to us, and it is possible that governmental bodies and regulators may disagree with our conclusions. To the extent we have not complied with applicable laws, rules, and regulations, we could be subject to significant fines, revocation of licenses, limitations on or temporary or permanent suspensions of our products and services, reputational harm, and other regulatory consequences, each of which may be significant and could adversely affect our business, operating results, and financial condition.
Additionally, various governmental and regulatory bodies, including legislative and executive bodies, in the United States and in other countries may adopt new laws and regulations, the direction and timing of which may be influenced by changes in the governing administrations and major events in the cryptoeconomy. For example, following the failure of several prominent crypto trading venues and lending platforms, such as FTX, Celsius Networks, Voyager and Three Arrows Capital in 2022 (the “2022 Events”), the U.S. Congress expressed the need for both greater federal oversight of the cryptoeconomy and comprehensive cryptocurrency legislation.
Presently, and in the future, various governmental and regulatory bodies, including in the U.S. and each U.S. state, may introduce new policies, laws, and regulations relating to virtual currency, bitcoin assets and the cryptoeconomy generally, and crypto asset platforms in particular. Other companies’ failures of risk management and other control functions, such as those that played a role in the 2022 Events, could accelerate an existing regulatory trend toward stricter oversight of crypto asset platforms and the cryptoeconomy. Furthermore, new interpretations of existing laws and regulations may be issued by such bodies or the judiciary, which may adversely impact the development of the cryptoeconomy as a whole and our legal and regulatory status in particular by changing how we operate our business, how our products and services are regulated, and what products or services we and our competitors can offer, requiring changes to our compliance and risk mitigation measures, imposing new licensing requirements, or imposing a total ban on certain crypto asset transactions, as has occurred in certain jurisdictions in the past. If we are unable to comply with any new requirements, our ability to offer our products and services in their current form may be adversely affected.
We believe that the products and services offered by us directly, as opposed to those that are offered by our third party service providers, including the Bitcoin Service Providers and Sutton Bank, are not subject to supervisory authority of regulatory authorities, or are only subject to certain regulatory regimes. However, these products and services may cause us to be deemed to be engaged in a form of regulated activity for which licensure is required or cause us to become subject to new and additional forms of regulatory oversight or supervision. To the extent that we or our employees, contractors, or agents are deemed or alleged to have violated or failed to comply with any laws or regulations, including related interpretations, orders, determinations, directives, or guidance, we or they could be subject to a litany of civil, criminal, and administrative fines, penalties, orders and actions, including being required to suspend or terminate the offering of certain products and services. Moreover, to the extent our customers nevertheless access our and our partners’ platforms, products or services outside of jurisdictions where we have obtained required governmental licenses and authorization, we could similarly be subject to a variety of civil, criminal, and administrative fines, penalties, orders and actions as a result of such activity.
Due to our business activities, it is possible that in the future we may be subject to investigations and inquiries, by U.S. federal and state regulators and foreign regulators, many of which have broad discretion to audit and examine our business. Further, we believe increasingly strict legal and regulatory requirements and additional regulatory investigations and enforcement, any of which could occur or intensify, may continue to result in changes to our business, as well as increased costs, and supervision and examination for ourselves, our agents, and service providers. Moreover, new laws, regulations, or interpretations may result in additional litigation, regulatory investigations, and enforcement or other actions, including preventing or delaying us from offering certain products or services offered by our competitors or could impact how we offer such products and services. Adverse changes to, or our failure to comply with, any laws and regulations have had, and may continue to have, an adverse effect on our reputation and brand and our business, operating results, and financial condition.
Our relationships with bank partners in the United States may subject us and our partners to additional regulatory scrutiny.
Prudential banking regulators in the United States, including the FDIC, have recently increased their scrutiny of bank partnerships with third-party financial service providers through the release of statements, requests for information and proposed regulations. These releases have coincided with a significant increase in the number of enforcement actions relating to banks’ third-party arrangements. These and other regulatory initiatives by U.S. federal or state prudential banking regulators may constrain the operations of our partner banks in the United States, including those with which we may partner in the future either in addition to or in lieu of our existing arrangements. Such banks may be prohibited from partnering with us, or may terminate our relationship once established, as a result of increased regulatory scrutiny or changes to applicable laws and regulations.
Our relationship with partner banks may also subject us to additional regulatory scrutiny, requirements and supervision. For example, we are subject to audit by Sutton Bank in accordance with FDIC guidance related to management of vendors. We also may be subject to the examination authority of the FDIC under the Bank Service Company Act as a result of our relationship with Sutton Bank. To the extent that we enter into similar relationships with other partner banks, either in lieu of or in addition to our relationship with Sutton Bank, we may become subject to additional regulatory requirements imposed indirectly by the partner bank or directly by U.S. federal or state prudential banking regulators. Additional regulatory requirements may adversely affect us or our bank partners, including our originating bank partners, and, therefore, our business, results of operations, financial condition and future prospects.
We may be subject to additional regulatory scrutiny due to the recent bankruptcy case of Synapse Financial Technologies, Inc.
Fold, through its partnership with Sutton Bank (and/or any other partner banks), may provide deposit accounts to Fold’s customers. Sutton Bank (and/or any other partner banks) may hold funds in the deposit account in an omnibus account on behalf of customers. In certain circumstances, Sutton Bank (and/or any other partner banks) may rely on our records for identifying customers and reconciling certain transactions made to or from deposit accounts, including any comingled funds within the omnibus account. Any failure by us to maintain complete and accurate records could create uncertainty as to fund attribution and cause delays or outages for customers seeking to withdraw funds from or through our platform.
Certain U.S. federal and state prudential banking regulators have cited the recent bankruptcy case of Synapse Financial Technologies, Inc. in connection with related proposed regulatory initiatives which may affect our business. On September 17, 2024, the FDIC, citing certain alleged recordkeeping issues attendant to Synapse’s comingling of customer funds in custodial accounts, published a notice of proposed rulemaking which would require certain heightened standards for reconciliation and recordkeeping associated with certain custodial accounts containing comingled customer funds. These and other regulatory initiatives by U.S. federal or state prudential banking regulators, if enacted, may increase compliance costs associated with our business or impact our relationships with current or prospective partner banks (see above risk factor:Our relationships with bank partners in the United States may subject us and our partners to additional regulatory scrutiny.).
We are registered as a service provider with Visa network. As such, we are subject to card network rules that could subject us to a variety of fines or penalties that may be assessed on us. The termination of our membership or any changes in card network rules or standards, including interpretation and implementation of existing rules or standards, could increase the cost of operating our business or limit our ability to provide our services to our customers, and could have a material adverse effect on our business, financial condition and results of operations.
We operate in a highly competitive industry and we compete against companies with greater financial and other resources, and our business, operating results, and financial condition may be adversely affected if we are unable to respond to our competitors effectively.
The digital assets industry is highly innovative, rapidly evolving, and characterized by healthy competition, experimentation, changing customer needs, frequent introductions of new products and services, and subject to uncertain and evolving industry and regulatory requirements. We expect competition to further intensify in the future as existing and new competitors introduce new products or enhance existing products. We compete against a number of companies operating both within the United States and abroad, and both those that focus on traditional financial services and those that focus on Bitcoin-based services. Our main competition falls into the following categories:
| ● | traditional financial firms that have entered the Bitcoin market in recent years and offer overlapping features targeted at our customers; |
| ● | financial technology providers that do not focus on Bitcoin and may attempt to position themselves as a safer alternative to our products and services; |
| ● | mobile payment companies; and |
| ● | companies focused on the Bitcoin market, some of whom choose to operate outside of local rules and regulations or in jurisdictions with less stringent local rules and regulations and are potentially able to more quickly adapt to trends and to develop new Bitcoin-based products and services due to a different standard of regulatory scrutiny. |
Many innovative start-up companies and larger companies have made, and continue to make, significant investments in research and development, and we expect these companies to continue to develop similar or potentially superior products and technologies that compete with our products. Further, more traditional financial and non-financial services businesses may choose to offer Bitcoin-based services in the future as the industry gains adoption. Our current and potential competitors may establish cooperative relationships among themselves or with third parties that may further enhance their resources.
| ● | the ability to offer products and services that we do not support or offer on our platform (due to constraints from regulatory authorities, our banking partners, and other factors) such as digital assets that constitute securities or derivative instruments under U.S. or foreign laws; |
| ● | larger sales and marketing budgets and organizations; |
| ● | more established marketing, banking, and compliance relationships; |
| ● | greater customer support resources; |
| ● | greater resources to make acquisitions; |
| ● | larger and more mature intellectual property portfolios; |
| ● | substantially greater financial, technical, and other resources. |
Our long-term success depends on our ability to develop new and innovative products and services to address and keep pace with the rapidly evolving market for payments and financial services, and, if we are not able to implement successful enhancements and new features for our products and services, our business, operating results and financial condition could be materially and adversely affected.
Rapid and significant technological changes continue to confront the industries in which we operate, including developments in digital banking, mobile financial apps, and point-of-service solutions, as well as developments in Bitcoin and in tokenization, which replaces sensitive data (e.g., payment card information) with symbols (tokens) to keep the data safe in the event that sensitive data is stolen or viewed by unauthorized third parties.
These new and evolving services and technologies may be superior to, impair, or render obsolete the products and services we currently offer or the technologies we currently use to provide them. Incorporating new technologies into our products and services may require substantial expenditures and take considerable time, and we may not be successful in realizing a return on these development efforts in a timely manner or at all. Our ability to develop new and innovative products and services may be inhibited by industry-wide standards, payment networks, existing and future laws and regulations, resistance to change from our users or third parties’ intellectual property rights. Our success will depend on our ability to develop new technologies and to adapt to technological changes and evolving industry standards. If we are unable to provide enhancements and new features for our products and services or to develop new and innovative products and services that achieve market acceptance or that keep pace with rapid technological developments and evolving industry standards, our business, operating results and financial condition would be materially and adversely affected.
We often rely not only on our own initiatives and innovations, but also on third parties, including some of our competitors, for the development of and access to new technologies and development of a robust market for these new products and technologies. Failure to accurately predict or to respond effectively to developments in our industry may significantly impair our business.
As we expand and localize our international activities, our obligations to comply with the laws, rules, regulations, and policies of a variety of jurisdictions will increase and we may be subject to inquiries, investigations, and enforcement actions by U.S. and non-U.S. regulators and governmental authorities, including those related to sanctions, export control, and anti-money laundering.
As we expand and localize our international activities, we will become increasingly obligated to comply with the laws, rules, regulations, policies, and legal interpretations of both the jurisdictions in which we operate and those into which we offer services on a cross-border basis. For instance, financial regulators outside the United States have increased their scrutiny of crypto asset service providers over time, such as by requiring crypto asset custodians and other service providers operating in their local jurisdictions to be regulated and licensed under local laws. Moreover, laws regulating financial services, the internet, mobile technologies, crypto, and related technologies outside of the United States are highly evolving, extensive and often impose different, more specific, or even conflicting obligations on us, as well as broader liability. In addition, we are required to comply with laws and regulations related to economic sanctions and export controls enforced by the U.S. Department of the Treasury’s Office of Foreign Assets Control (“OFAC”), the U.S. Department of Commerce’s Bureau of Industry and Security, and U.S. anti-money laundering and counter-terrorist financing laws and regulations, enforced by the Financial Crimes Enforcement Network (“FinCEN”) and certain state financial services regulators. U.S. sanctions and export control laws and regulations generally restrict dealings by persons subject to U.S. jurisdiction with certain jurisdictions that are the target of comprehensive embargoes, currently the Crimea Region, the so-called Donetsk People’s Republic, and the so-called Luhansk People’s Republic of Ukraine, Cuba, Iran, North Korea, and Syria, as well as with persons, entities, and governments identified on certain prohibited party lists. Moreover, as a result of the Russian invasion of Ukraine, the United States, the E.U., the United Kingdom, and other jurisdictions have imposed wide-ranging sanctions on Russia and Belarus and persons and entities associated with Russia and Belarus. There can be no certainty regarding whether such governments or other governments will impose additional sanctions, or other economic or military measures against Russia or Belarus. We have an OFAC compliance program in place that includes monitoring of IP addresses to identify prohibited jurisdictions and of blockchain addresses that have either been identified by OFAC as prohibited or that otherwise are believed by us to be associated with prohibited persons or jurisdictions. Nonetheless, there can be no guarantee that our compliance program will prevent transactions with particular persons or addresses or prevent every potential violation of OFAC sanctions. From time to time, we have submitted voluntary disclosures to OFAC or responded to administrative subpoenas from OFAC. Certain of these voluntary self-disclosures are currently under review by OFAC. To date, none of those proceedings has resulted in a monetary penalty or finding of violation. Any present or future government inquiries relating to sanctions could result in negative consequences for us, including costs related to government investigations, financial penalties, and harm to our reputation. The impact on us related to such matters could be substantial. Although we have implemented controls, and are working to implement additional controls and screening tools designed to prevent sanctions violations, there is no guarantee that we will not inadvertently provide access to our products and services to sanctioned parties or jurisdictions in the future.
Regulators worldwide frequently study each other’s approaches to the regulation of the cryptoeconomy. Consequently, developments in any jurisdiction may influence other jurisdictions. New developments in one jurisdiction may be extended to additional services and other jurisdictions. As a result, the risks created by any new law or regulation in one jurisdiction are magnified by the potential that they may be replicated, affecting our business in another place or involving another service. Conversely, if regulations diverge worldwide, we may face difficulty adjusting our products, services, and other aspects of our business with the same effect. These risks are heightened as we face increased competitive pressure from other similarly situated businesses that engage in regulatory arbitrage to avoid the compliance costs associated with regulatory changes.
| ● | substantial administrative costs, including arbitration fees; |
| ● | additional compliance and licensure requirements; |
| ● | criminal sanctions or consent decrees; |
| ● | changes to our business model and practices; |
| ● | damage to our brand and reputation. |
If we cannot keep pace with rapid industry changes to provide new and innovative products and services, the use of our products and services, and consequently our net revenue, could decline, which could adversely impact our business, operating results, and financial condition.
Our industry has been characterized by many rapid, significant, and disruptive products and services in recent years. These include advancements in payments services, new digital assets and related technologies and use cases, etc. We expect new services and technologies to continue to emerge and evolve, which may be superior to, or render obsolete, the products and services that we currently provide. For example, disruptive technologies such as generative AI may fundamentally alter the use of our products or services in unpredictable ways. We cannot predict the effects of new services and technologies on our business. However, our ability to grow our customer base and net revenue will depend heavily on our ability to innovate and create successful new products and services, both independently and in conjunction with third-party developers. In particular, developing and incorporating new products and services into our business may require substantial expenditures, take considerable time, and ultimately may not be successful. Any new products or services could fail to attract customers, generate revenue, or perform or integrate well with third-party applications and platforms. In addition, our ability to adapt and compete with new products and services may be inhibited by regulatory requirements and general uncertainty in the law, constraints by our banking partners and payment processors, third-party intellectual property rights, or other factors. Moreover, we must continue to enhance our technical infrastructure and other technology offerings to remain competitive and maintain a platform that has the required functionality, performance, capacity, security, and speed to attract and retain customers, including large, high-frequency and high-volume traders. As a result, we expect to incur significant costs and expenses to develop and upgrade our technical infrastructure to meet the evolving needs of the industry. Our success will depend on our ability to develop and incorporate new offerings and adapt to technological changes and evolving industry practices. If we are unable to do so in a timely or cost-effective manner, our business and our ability to successfully compete, to retain existing customers, and to attract new customers may be adversely affected.
Bitcoin’s status as a “security” in any relevant jurisdiction, as well as the status of our Bitcoin-related products and services, is subject to a high degree of uncertainty and if we are unable to properly characterize a product or service offering, we may be subject to regulatory scrutiny, inquiries, investigations, fines, and other penalties, which may adversely affect our business, operating results, and financial condition.
The SEC and its staff have taken the position that a range of crypto assets, products and services fall within the definition of a “security” under the U.S. federal securities laws. Despite the SEC being the principal federal securities law regulator in the United States, whether or not an asset, product or service is a security or constitutes a securities offering under federal securities laws is ultimately determined by a federal court. The legal test for determining whether any given crypto asset, product or service is a security was set forth in the 1946 Supreme Court case*SEC v. W.J. Howey Co.*and requires a highly complex, fact-driven analysis. Accordingly, whether any given crypto asset, product or service would be ultimately deemed to be a security is uncertain and difficult to predict notwithstanding the conclusions of the SEC or any conclusions we may draw based on our risk-based assessment regarding the likelihood that a particular crypto asset, product or service could be deemed a “security” or “securities offering” under applicable laws. The SEC generally does not provide advance guidance or confirmation on its assessment of the status of any particular crypto asset, product or service as a security. It is also possible that a change in the governing administration or the appointment of new SEC commissioners could substantially impact the approach to enforcement by the SEC and its staff.
Public statements made by senior officials at the SEC indicate that the SEC does not intend to take the position that Bitcoin (as currently offered and sold) is a “security” under the U.S. federal securities laws. However, such statements are not official policy statements by the SEC and reflect only the speakers’ views, which are not binding on the SEC or any other agency or court and cannot be generalized to any other crypto asset. As of the date of this proxy statement/prospectus, with the exception of certain centrally issued digital assets that have received “no-action” letters from the SEC staff, Bitcoin is the only crypto asset which senior officials at the SEC have publicly stated is unlikely to be considered a “security.” With respect to all other crypto assets, there is no certainty under the applicable legal test that such assets are not securities, notwithstanding the conclusions we may draw based on our risk-based assessment regarding the likelihood that a particular crypto asset could be deemed a “security” under applicable laws.
Any enforcement action by the SEC or any international or state securities regulator asserting that Bitcoin is a “security,” or a court decision to that effect, would be expected to have an immediate material adverse impact on the trading value of Bitcoin, as well as our business. This is because the business models behind most crypto assets are incompatible with regulations applying to transactions in securities. If a crypto asset is determined or asserted to be a “security,” it is likely to become difficult or impossible for the crypto asset to be traded, cleared or custodied in the United States and elsewhere through the same channels used by non-security crypto assets, which in addition to materially and adversely affecting the trading value of the crypto asset is likely to significantly impact its liquidity and market participants’ ability to convert the crypto asset into U.S. dollars and other currencies.
Several foreign jurisdictions have taken a broad-based approach to classifying crypto assets, products and services as “securities,” while other foreign jurisdictions, such as Switzerland, Malta, and Singapore, have adopted a narrower approach. As a result, certain crypto assets, products or services may be deemed to be a “security” under the laws of some jurisdictions but not others. Various foreign jurisdictions may, in the future, adopt additional laws, regulations, or directives that affect the characterization of crypto assets, products or services as “securities.”
The classification of a crypto asset, product or service as a security under applicable law has wide-ranging implications for the regulatory obligations that flow from the offer, sale, trading, and clearing, as applicable, of such assets, products or services. For example, a crypto asset, product or service that is a security in the United States may generally only be offered or sold in the United States pursuant to a registration statement filed with the SEC or in an offering that qualifies for an exemption from registration. Persons that effect transactions in crypto assets, products or services that are securities in the United States may be subject to registration with the SEC as a “broker” or “dealer.” Platforms that bring together purchasers and sellers to trade crypto assets that are securities in the United States are generally subject to registration as national securities exchanges, or must qualify for an exemption, such as by being operated by a registered broker-dealer as an ATS in compliance with rules for ATSs. Persons facilitating clearing and settlement of securities may be subject to registration with the SEC as a clearing agency. Foreign jurisdictions may have similar licensing, registration, and qualification requirements.
The Fold app is not registered or licensed with the SEC or foreign authorities as a broker-dealer, national securities exchange, or alternative trading system (or foreign equivalents), and none of our products or services are registered as securities offerings, because we only offer products and services related to Bitcoin, and we believe there are good arguments that Bitcoin and our related products and services are not securities (including based on prior statements by a number of SEC senior officials). However, statements, settlements and enforcement actions are not rules or regulations of the SEC and are not binding on the SEC. Regardless of public statements made by senior officials at the SEC and our conclusions, we could in the future be subject to legal or regulatory action in the event the SEC or a state or a foreign regulatory authority were to assert, or a court were to determine, that either Bitcoin itself or a product or service that we offer related to Bitcoin, such as lending, rewards or savings products, could be viewed a “security” under applicable laws. There can be no assurance that we will properly characterize over time any given Bitcoin product or service offering as a security or non-security, or that the SEC, foreign regulatory authority, or a court having final determinative authority on the topic, if the question was presented to it, would agree with our assessment. We expect our risk assessment policies and procedures to continuously evolve to take into account case law, legislative developments, facts, and developments in technology.
If an applicable regulatory authority or a court, in either case having final determinative authority on the topic, were to determine that a product or service offered by us is a security, we would not be able to offer such product or service until we are able to do so in a compliant manner. A determination by the SEC, a state or foreign regulatory authority, or a court that a product or service that we offer constitutes a security may result in us ceasing to offer that product or service, and may also result in us determining that it is advisable to cease offering products and services entirely, that have similar characteristics to the product or service that was alleged or determined to be a security. Alternatively, we may determine to continue to offer a product or service even if the SEC or another regulator alleges that the product or service is a security, pending a final judicial determination as to that product or service’s proper characterization, and the fact that we waited for a final judicial determination would generally not preclude penalties or sanctions against us for our having previously made that product or service available without registering that product or service with the SEC. As such, we could be subject to judicial or administrative sanctions for failing to offer or sell the product or service in compliance with the registration requirements, or for acting as a broker, dealer, or national securities exchange without appropriate registration. Such an action could result in injunctions, cease and desist orders, as well as civil monetary penalties, fines, and disgorgement, criminal liability, and reputational harm. Additionally, the SEC has brought and may in the future bring enforcement actions against other cryptoeconomy participants and their product offerings and services that may cause us to modify or discontinue a product offering or service. If we were to modify or discontinue any product offering or service for any reason, our decision may be unpopular with users, may reduce our ability to attract and retain customers (especially if similar products or services continue to be offered by our competitors), and may adversely affect our business, operating results, and financial condition.
Loss of a critical banking or insurance relationship could adversely impact our business, operating results, and financial condition.
Although a number of significant U.S. banks and investment institutions, such as Goldman Sachs, Citigroup, J.P. Morgan, Bank of America and BlackRock, have indicated they plan to begin allowing their customers to carry and invest in Bitcoin, the acceptance and use of Bitcoin by banks is relatively uncommon and may never become mainstream. Indeed, a number of companies and individuals engaged in Bitcoin-related activities have been unable to find banks or financial institutions that are willing to provide them with banking services. Similarly, a number of companies and individuals or businesses associated with Bitcoin may have had and may continue to have their existing banking services discontinued with financial institutions in response to government action. We also may be unable to obtain or maintain these services for our business. To date, we have not experienced such issues in finding banks or financial institutions willing to provide services to us that has had a material impact on our business, financial condition or results of operations.
We rely on bank relationships to provide our products and services and to connect us to mobile card networks. As a bitcoin-asset related business, our banking partners view us as a higher risk customer for purposes of their anti-money laundering programs. We may face difficulty establishing or maintaining banking relationships due to instability in the global banking system, increasing regulatory uncertainty and scrutiny, or our banking partners’ policies. The loss of these banking partners or the imposition of operational restrictions by these banking partners and the inability for us to utilize other redundant financial institutions may result in a disruption of business activity as well as regulatory risks.
However, if these financial institutions are subject to receivership, resolution or failure, or if banking relationships become severely limited or unavailable to Bitcoin participants, there could be temporary delays in or unavailability of services in that are critical to our or our partners’ operations, developers or customers, a further limit on available vendors, reduced quality in services For example, while our business and operations were not materially affected by the closures of Silvergate Capital Corp. and Signature Bank and the cessation of their real-time fiat currency payment networks in March 2023, large cryptoeconomy participants experienced a temporary inability to transfer fiat currencies outside of standard business hours.
We also rely on insurance carriers to insure customer losses resulting from a breach of our physical security, cyber security, or by employee or third party theft. Our ability to maintain crime, specie, and cyber insurance is subject to the insurance carriers’ ongoing underwriting criteria and our inability to obtain and maintain appropriate insurance coverage could cause a substantial business disruption, adverse reputational impact, inability to compete with our competitors, and regulatory scrutiny.
Any significant disruption in our products and services, in our information technology systems, or in blockchain networks related to our business, could result in a loss of customers or funds and adversely impact our brand and reputation and our business, operating results, and financial condition.
Our reputation and ability to attract and retain customers and grow our business depends on our ability to operate our service at high levels of reliability, scalability, and performance, including the ability to process and monitor, on a daily basis, a large number of transactions that occur at high volume and frequencies across multiple systems. Our platform, the ability of our customers to trade, and our ability to operate at a high level, are dependent on our ability to access the blockchain networks underlying Bitcoin, for which access is dependent on our systems’ ability to access the internet. Further, the successful and continued operations of such blockchain networks will depend on a network of computers, miners, and validators, and their continued operations, all of which may be impacted by service interruptions.
Our systems, the systems of our third-party service providers and partners, and certain blockchain networks have experienced from time to time, and may experience in the future service interruptions or degradation because of hardware and software defects or malfunctions, computer viruses or other malware, distributed denial-of-service and other cyberattacks, disruptions in telecommunications services, insider threats, break-ins, sabotage, human error, vandalism, earthquakes, hurricanes, floods, fires, and other natural disasters, power losses, fraud, military or political conflicts, terrorist attacks, or other events. In addition, extraordinary volumes of usage could cause our computer systems to operate at an unacceptably slow speed or even fail. Some of our systems or the systems of our third-party service providers and partners are not fully redundant, and our or their disaster recovery planning may not be sufficient for all possible outcomes or events.
If any of our systems, or those of our third-party service providers, are disrupted for any reason, our products and services may be interrupted or fail, resulting in unanticipated disruptions, slower response times and delays in our customers’ trade execution and processing, failed settlement of trades, incomplete or inaccurate accounting, recording or processing of trades, unauthorized trades, loss of customer information, increased demand on limited customer support resources, customer claims, complaints with regulatory organizations, lawsuits, or enforcement actions. A prolonged interruption in the availability or reduction in the availability, speed, or functionality of our products and services could harm our business. Significant or persistent interruptions in our services could cause current or potential customers to believe that our systems are unreliable, leading them to switch to our competitors or to avoid or reduce the use of our products and services, and could permanently harm our reputation and brands. Moreover, to the extent that any system failure or similar event results in damages to our customers, these customers could seek significant compensation or contractual penalties from us for their losses, and those claims, even if unsuccessful, would likely be time-consuming and costly for us to address. Problems with the reliability or security of our systems would harm our reputation and the cost of remedying these problems could negatively affect our business, operating results, and financial condition.
Our or our third-party partners’ failure to safeguard and manage our and our customers’ fiat currencies and Bitcoin could adversely impact our business, operating results, and financial condition.
Our third-party banking partner, Sutton Bank (“Sutton Bank”) holds cash on behalf of our customers, and our third-party custody partners Fortress Trust LLC (“Fortress”) and BitGo Trust Company, Inc. (“BitGo” and together with Fortress, the “Bitcoin Service Providers”) safeguard Bitcoin on behalf of our customers. Safeguarding customers’ cash and Bitcoin is integral to the trust we build with our customers. We believe our and our partners’ policies, procedures, operational controls and controls over financial reporting, protect us from material risks surrounding the safeguarding of these assets and conflicts of interest. Our partners’ controls include among others, controls over the segregation of corporate Bitcoin balances from customer Bitcoin balances, controls over the processes of customer Bitcoin deposits and customer Bitcoin withdrawals and corporate and customer fiat balances. Our financial statements and disclosures, as a whole, will be available through periodic filings on a quarterly basis, and compliant with annual audit requirements of Article 3 of Regulation S-X.
As of December 31, 2024, 99%+ of our proprietary Bitcoin was held at BitGo. Bitcoin that we hold at BitGo is held in separate wallets under Fold’s name and is not commingled with the Bitcoin held on behalf of our customers, BitGo’s other customers, or BitGo itself. As of December 31, 2024, 99% of our proprietary Bitcoin that we custody with BitGo was held in multi-signature cold storage wallets, with the remainder held in self-managed hot wallets for operational purposes.
Bitcoin held on behalf of our customers is stored in one of three places: (1) directly at Fortress; (2) directly at BitGo, or (3) at BitGo in a sub-custodial arrangement with Fortress.
| (1) | Bitcoin held on behalf of our customers directly at Fortress is held primarily in omnibus cold storage wallets for which Fortress controls the private keys. At any given time, approximately 90% of Bitcoin held in this capacity is held in omnibus cold storage wallets, with the remainder held in hot wallets used to facilitate customer withdrawals and other real-time operational needs. |
| (2) | Bitcoin held on behalf of our customers directly at BitGo is held primarily in omnibus cold storage wallets for which BitGo controls the private keys. At any given time, approximately 90% of Bitcoin held in this capacity is held in omnibus cold storage wallets, with the remainder held in hot wallets used to facilitate customer withdrawals and other real-time operational needs. |
| (3) | Fortress also utilizes BitGo as a sub-custodian. Within this sub-custodial arrangement, Fortress sends Fold customer funds to an omnibus BitGo cold storage wallet that is dedicated to Fold customer assets. Those funds are not commingled with Fold’s proprietary Bitcoin, BitGo’s other customers, or BitGo itself. BitGo controls the keys to this wallet. 100% of this Bitcoin is held in cold storage. |
As of December 31, 2024, 1% of Fold customer Bitcoin was held directly at Fortress, 22% was held directly at BitGo, and 77% was held at BitGo in a sub-custodial capacity for Fortress.
We hold cash at Sutton Bank in accounts designated as for the benefit of our customers. We have also entered into partnerships with third parties where our partners receive and hold customer funds. Our customers open accounts directly with Fortress and/or BitGo to custody their Bitcoin and receive other Bitcoin-related services, and directly with Sutton Bank to hold cash and receive other fiat-related services. Our and our financial partners’ abilities to accurately hold customer cash and Bitcoin, as well as cash and Bitcoin we hold for our own investment and operating purposes, requires a high level of internal controls. We are limited in our ability to influence or manage the controls and processes of third party partners or vendors and may be dependent on our partners’ and vendors’ operations, liquidity and financial condition to manage these risks. As we maintain, grow and expand our product and services offerings we also must scale and strengthen our internal controls and processes, and monitor our third party partners’ and vendors’ ability to similarly scale and strengthen. Failure to do so could adversely impact our business, operating results, and financial condition. This is important both to the actual controls and processes and the public perception of the same.
Any material failure by us or our partners to maintain the necessary controls, policies, procedures or to manage the Bitcoin or cash we hold for our own investment and operating purposes could also adversely impact our business, operating results, and financial condition. Further, any material failure by us or our partners to maintain the necessary controls or to manage customer Bitcoin and funds appropriately and in compliance with applicable regulatory requirements could result in reputational harm, litigation, regulatory enforcement actions, significant financial losses, lead customers to discontinue or reduce their use of our and our partners’ products, and result in significant penalties and fines and additional restrictions, which could adversely impact our business, operating results, and financial condition.
Our and our customers’ Bitcoin could be subject to risk in the event of an insolvency of one of our Bitcoin Service Providers.
Although we have implemented various measures that are designed to mitigate our counterparty risks, including by storing substantially all of the bitcoin we own in custody accounts at U.S.-based, institutional-grade custodians and negotiating contractual arrangements intended to establish that our property interest in custodially-held bitcoin is not subject to claims of our custodians’ creditors, applicable insolvency law is not fully developed with respect to the holding of digital assets in custodial accounts. Thus, Bitcoin held by us or our customers at one of the Bitcoin Service Providers may be considered to be the property of a bankruptcy estate, in the event of a bankruptcy of one of the Bitcoin Service Providers. In addition, Bitcoin held on behalf of our customers could also be considered part of our own bankruptcy estate if we were to become insolvent.
Bitcoin held in segregated wallets, such as our proprietary bitcoin that is held by BitGo, could be viewed as less of a risk in an insolvency proceeding of the relevant Bitcoin Service Provider. This is because it is possible to clearly identify the assets to which we have title, as opposed to where assets are commingled with those of other holders. Bitcoin that we hold in self-custody is also stored in a separate m-of-n wallet for which we control the majority of the private keys. We are able to directly confirm the contents of this self-custody wallet.
However, our Bitcoin Service Providers do not currently offer segregated wallet services to our customers. This may cause our customers to view our bitcoin-related services as more risky compared to other types of bitcoin products and services, and may cause our customers to withdraw bitcoin from the wallet services we provide through the Bitcoin service providers.
If custodially-held bitcoin is determined to be the property of a Bitcoin Service Provider’s bankruptcy estate, we and our customers could be treated as a general unsecured creditor of such custodians, inhibiting our and our customers’ ability to exercise ownership rights with respect to such bitcoin and potentially being required to share the value of our Bitcoin with those of other creditors of the Bitcoin Service Provider. In addition, it is possible that a bankruptcy court would require all Bitcoin and other digital assets held by a custodian to be converted into cash, which could result in our incurring significant capital gains tax charges. Even if we are able to prevent our and our customers’ bitcoin from being considered the property of a Bitcoin Service Provider’s bankruptcy estate as part of an insolvency proceeding, it is possible that we or our customers would still be delayed or may otherwise experience difficulty in accessing bitcoin held by the affected Bitcoin Service Provider during the pendency of the insolvency proceedings.
Any such outcome could have a material adverse effect on our financial condition and the market price of our stock. In addition, even if our Bitcoin Service Providers themselves do not become insolvent, a series of insolvencies of high-profile custodians such as occurred in 2022 could result in customers finding our services more risky and less attractive as compared to other types of rewards cards, and any failure to increase our customer base, discontinuation or reduction in use of our platform and products by existing customers as a result could adversely impact our business, operating results, and financial condition.
The theft, loss, or destruction of private keys required to access any Bitcoin may be irreversible. If we or our Bitcoin Service Providers are unable to access private keys for the Bitcoin wallets holding our or our customers’ Bitcoin, or if we or our Bitcoin Service Providers experience a hack or other data loss relating to their ability to access any Bitcoin, it could cause regulatory scrutiny, reputational harm, and other losses.
Bitcoin is generally controllable only by the possessor of the unique private key relating to the digital wallet in which the Bitcoin is held. While blockchain protocols typically require public addresses to be published when used in a transaction, private keys must be safeguarded and kept private in order to prevent a third party from accessing the Bitcoin held in such a wallet. To the extent that any of the private keys relating to wallets containing Bitcoin held for the benefit of us or our customers is lost, destroyed, or otherwise compromised or unavailable, and no backup of the private key is accessible, we or the Bitcoin Service Providers will be unable to access the Bitcoin assets held in the related wallet. Further, we cannot provide assurance that the private keys to Bitcoin wallets held by us directly or by our service providers will not be hacked or compromised. Bitcoin assets and blockchain technologies have been, and may in the future be, subject to security breaches, hacking, or other malicious activities. Any loss of private keys relating to, or hack or other compromise of, digital wallets used to store our customers’ Bitcoin could adversely affect our customers’ ability to access or sell their Bitcoin. In addition, if any of our customers’ Bitcoin is lost, we may choose, or in some cases we may be required to, reimburse our customers for their losses, which could subject us to significant financial losses in addition to losing customer trust in us and our products. As such, any loss of private keys due to a hack, employee or service provider misconduct or error, or other compromise by third parties could hurt our brand and reputation, result in significant losses, and adversely impact our business.
We believe this risk is remote because the majority of the Bitcoin held on behalf of our customers is retained in multi-signature “cold storage” wallets, which means that the related private keys are not held on a computer system that is connected to the internet. Multi-signature cold storage wallets are intended to keep the Bitcoin as secure as possible by requiring multiple keys to authorize a transaction while also providing redundancy in the event that one of the private keys is lost. In the event that a private key is lost, the remaining keys in the multi-signature wallet can be used to regenerate a new key.
With regards to Bitcoin held on behalf of our customers, approximately 95% is retained in multi-signature cold storage wallets at any given time, while the remaining assets are held in hot wallets used to facilitate customer withdrawals and other real-time operational needs.
Our digital asset custody partners’ security technology is designed to prevent, detect, and mitigate inappropriate access to their systems, by internal or external threats. We believe our digital asset custody partners have developed and maintained administrative, technical, and physical safeguards designed to comply with applicable legal requirements and industry standards. However, it is nevertheless possible that hackers, employees or service providers acting contrary to those policies, or others could circumvent these safeguards to improperly access the systems or documents of our business partners, agents, or service providers, and improperly access, obtain, or misuse customer crypto assets and funds. The methods used to obtain unauthorized access, disable, or degrade service or sabotage systems are also constantly changing and evolving and may be difficult to anticipate or detect for long periods of time. Additionally, transactions undertaken through our websites or other electronic channels may create risks of fraud, hacking, unauthorized access or acquisition, and other deceptive practices. Any security incident resulting in a compromise of customer assets could result in substantial costs to us and require us to notify impacted individuals, and in some cases regulators, of a possible or actual incident, expose us to regulatory enforcement actions, including substantial fines, limit our ability to provide services, subject us to litigation, significant financial losses, damage our reputation, and adversely affect our business, operating results, financial condition, and cash flows.
BitGo has advised us that it carries a $250 million umbrella insurance policy for the digital assets it custodies. However, this insurance policy covers all digital assets custodied by BitGo, not only those held on behalf of us and our customers. In addition, BitGo has not contractually committed to maintain any specific levels of insurance coverage, and has no obligation to reimburse us for any damages due to loss or theft of Bitcoin (including claims by our customers) except where such loss or theft is due to BitGo’s gross negligence or willful misconduct.
Our success depends on our ability to retain existing customers and attract new customers, including developers, to increase engagement with our products, services, and platform. To do so, we must continue to offer leading technologies and ensure that our products and services are secure, reliable, and engaging. We must also expand our products and services, and offer competitive prices in an increasingly crowded and price-sensitive market. There is no assurance that we will be able to continue to do so, that we will be able to retain our current customers or attract new customers, or keep our customers engaged. Any number of factors can negatively affect customer retention, growth, and engagement, including if:
| ● | customers increasingly engage with competing products and services, including products and services that we are unable to offer due to regulatory reasons; |
| ● | we fail to introduce new and improved products and services, or if we introduce new products or services that are not favorably received; |
| ● | there are changes in sentiment about the quality or usefulness of our products and services or concerns related to privacy, security, fiat pegging or other factors; |
| ● | customers perceive Bitcoin to be a bad investment; |
| ● | technical or other problems prevent us from delivering our products and services with the speed, functionality, security, and reliability that our customers expect; |
| ● | cybersecurity incidents, employee or service provider misconduct, or other unforeseen activities cause losses to us or our customers, including losses to assets held by us on behalf of our customers; |
| ● | we fail to provide adequate customer service; |
| ● | regulatory and governmental bodies in countries that we target for expansion express negative views towards Bitcoin or, more broadly, the Bitcoin economy; or |
| ● | we or other companies or high-profile figures in the digital assets industry are the subject of adverse media reports or other negative publicity. |
From time to time, certain of these factors have negatively affected customer retention, growth, and engagement to varying degrees. If we are unable to maintain or increase our customer base and customer engagement, our revenue and financial results may be adversely affected. Any decrease in user retention, growth, or engagement could render our products and services less attractive to customers, which may have an adverse impact on our revenue, business, operating results, and financial condition. If our customer growth rate slows or declines, we will become increasingly dependent on our ability to maintain or increase levels of user engagement and monetization in order to drive growth of revenue.
Our operating expenses may increase in the future and we may not be able to achieve profitability or positive cash flow from operations on a consistent basis, which may cause our business, operating results, and financial condition to be adversely impacted.
Our operating expenses may increase in the future as we continue to attract and retain talent, expand our sales and marketing efforts, develop additional products and services, expand our international business, incur unforeseen regulatory or compliance expenses, and in connection with certain expenses related to operating as a public company. While we consistently evaluate opportunities to drive efficiency, we cannot guarantee that these efforts will be successful or that we will not re-accelerate operating expenditures in the future. Our operations may prove more expensive than we currently anticipate, and we may not succeed in increasing our net revenue sufficiently to offset these higher expenses. Our revenue growth may be further impacted by reduced demand for our offerings, increased competition, adverse macroeconomic conditions, a decrease in the growth or size of the Bitcoin economy, regulatory uncertainty or scrutiny, or changes that impact our ability to offer certain products or services, any failure to capitalize on growth opportunities, or failure of new products and services we develop to gain traction in the market. We cannot be certain that we will be able to achieve profitability or achieve positive operating cash flow on any quarterly or annual basis. If we are unable to effectively manage these risks and difficulties as we encounter them, our business, operating results, and financial condition may suffer.
If we do not effectively scale our business, or are unable to maintain and improve our systems and processes, our operating results could be adversely affected.
We have experienced a period of significant growth in recent years, both in terms of employee headcount and customer growth, followed by the scaling back of our business in response to changing economic conditions. As our business changes, it becomes increasingly complex. To effectively manage and capitalize on our growth periods, we need to manage headcount, capital and processes efficiently while making investments such as expanding our information technology and financial, operating, and administrative systems and controls. Growth and scaling back initiatives could strain our existing resources, and we could experience ongoing operating difficulties in managing our business as it expands across numerous jurisdictions, including difficulties in hiring, training, managing and retaining a remote and evolving employee base. If we do not adapt or scale to meet these evolving challenges, we may experience erosion to our brand, the quality of our products and services may suffer, and our company culture may be harmed. Moreover, the failure of our systems and processes could undermine our ability to provide accurate, timely, and reliable reports on our financial and operating results, including the financial statements provided herein, and could impact the effectiveness of our internal controls over financial reporting. In addition, our systems and processes may not prevent or detect all errors, omissions, or fraud. Any of the foregoing operational failures could lead to noncompliance with laws, loss of operating licenses or other authorizations, or loss of bank relationships that could substantially impair or even suspend company operations.
Successful implementation of our growth strategy will also require significant expenditures before any substantial associated revenue is generated and we cannot guarantee that these increased investments will result in corresponding and offsetting revenue growth. Because we have a limited history operating our business at its current scale, it is difficult to evaluate our current business and future prospects, including our ability to plan for and model future growth. Our limited operating experience at this scale, combined with the rapidly evolving nature of the Bitcoin asset market in which we operate, substantial uncertainty concerning how these markets may develop, and other economic factors beyond our control, reduces our ability to accurately forecast quarterly or annual revenue.
Additionally, from time to time, we may realign our resources and talent to implement stage-appropriate business strategies, including furloughs, layoffs and reductions in force. If there are unforeseen expenses associated with such realignments in our business strategies, and we incur unanticipated charges or liabilities, then we may not be able to effectively realize the expected cost savings or other benefits of such actions. Failure to manage any growth or any scaling back of our operations could have an adverse effect on our business, operating results, and financial condition.
Our services must integrate with a variety of operating systems. If we are unable to ensure that our services or hardware interoperate with such operating systems and devices, our business may be materially and adversely affected.
We are dependent on the ability of our products and services to integrate with a variety of operating systems, web browsers, and wired and wireless interfaces to mobile devices that we do not control, including those of Sutton Bank and the Bitcoin Service Providers. Any changes in these systems that degrade the functionality of our products and services, impose additional costs or requirements on us, or give preferential treatment to competitive services, including their own services, could materially and adversely affect usage of our products and services. In addition, we rely on app marketplaces, such as the Apple App Store and Google Play, to drive downloads of our mobile apps. Apple, Google, or other operators of app marketplaces regularly make changes to their marketplaces, and those changes may make access to our products and services more difficult. In the event that it is difficult for our customers to access and use our products and services, our business may be materially and adversely affected. Furthermore, Apple, Google, or other operators of app marketplaces regularly provide software updates, and such software updates may not operate effectively with our products and services, which may reduce the demand for our products and services, result in dissatisfaction by our customers, and may materially and adversely affect our business.
Our strategy and focus on delivering high-quality, compliant, easy-to-use, and secure Bitcoin-related financial services may not maximize short-term or medium-term financial results.
We have taken, and expect to continue to take, actions that we believe are in the best interests of our customers and the long-term interests of our business, even if those actions do not necessarily maximize short-term or medium-term results. These include expending significant managerial, technical, and legal efforts on complying with laws and regulations that are applicable to our products and services and ensuring that our products are secure. We also focus on driving long-term engagement with our customers through innovation and developing new industry-leading products and technologies. These decisions may not be consistent with the short-term and medium-term expectations of our stockholders and may not produce the long-term benefits that we expect, which could have an adverse effect on our business, operating results, and financial condition.
Due to our limited operating history, it may be difficult to evaluate our business and future prospects, and we may not be able to achieve or maintain profitability in any given period.
We began our operations in 2019 and since then our business model has continued to evolve. Our net revenue has significantly grown since our formation, but there is no assurance that growth will continue in future periods and you should not rely on the net revenue growth of any given quarterly or annual period as an indication of our future performance. If our total net revenue were to decline significantly for an extended period of time, our business, operating results and financial condition could be adversely affected. Our limited operating history and the volatile nature of our business make it difficult to evaluate our current business and our future prospects. We have encountered and will continue to encounter risks and difficulties as described in this section. If we do not manage these risks successfully, our business may be adversely impacted. If our revenue growth rate were to decline significantly or become negative, it could adversely affect our operating results and financial condition. If we are not able to achieve or maintain positive cash flow from operations, our business may be adversely impacted and we may require additional financing, which may not be available on favorable terms or at all, or which would be dilutive to our stockholders.
Disputes with our customers could adversely impact our brand and reputation and our business, operating results, and financial condition.
From time to time we have been, and may in the future be, subject to claims and disputes with our customers with respect to our products and services, such as fraudulent or unauthorized transactions, account takeovers, deposits and withdrawals of Bitcoin, failures or malfunctions of our systems and services, or other issues relating to our products services. Additionally, the ingenuity of criminal fraudsters, combined with many consumer users’ susceptibility to fraud, may cause our customers to be subject to ongoing account takeovers and identity fraud issues. While we have taken measures to detect and reduce the risk of fraud, there is no guarantee that they will be successful and, in any case, require continuous improvement and optimization for continually evolving forms of fraud to be effective. There can be no guarantee that we will be successful in detecting and resolving these disputes or defending ourselves in any of these matters, and any failure may result in impaired relationships with our customers, damage to our brand and reputation, and substantial fines and damages. In some cases, the measures we have implemented to detect and deter fraud have led to poor customer experiences, including indefinite account inaccessibility for some of our customers, which increases our customer support costs and can compound damages. We could incur significant costs in compensating our customers, such as if a transaction was unauthorized, erroneous, or fraudulent. We could also incur significant legal expenses resolving and defending claims, even those without merit. To the extent we are found to have failed to fulfill our regulatory obligations, we could become subject to conditions that could make operations more costly, impair our ability to grow, and adversely impact our operating results. We may in the future become subject to investigation and enforcement action by state, federal, and international consumer protection agencies, including the Consumer Financial Protection Bureau (the “CFPB”), the Federal Trade Commission (the “FTC”), the Federal Insurance Corporation (the “FDIC”) and state attorneys general in the United States, each of which monitors customer complaints against us and, from time to time, escalates matters for investigation and potential enforcement against us.
While certain of our customer agreements contain arbitration provisions with class action waiver provisions that may limit our exposure to consumer class action litigation, some federal, state, and foreign courts have refused or may refuse to enforce one or more of these provisions, and there can be no assurance that we will be successful in enforcing these arbitration provisions, including the class action waiver provisions, in the future or in any given case. Legislative, administrative, or regulatory developments may directly or indirectly prohibit or limit the use of pre-dispute arbitration clauses and class action waiver provisions. Any such prohibitions or limitations on or discontinuation of the use of such arbitration or class action waiver provisions could subject us to additional lawsuits, including additional consumer class action litigation, and significantly limit our ability to avoid exposure from consumer class action litigation.
We may from time to time make acquisitions and investments, which could require significant management attention, disrupt our business, result in dilution to our stockholders, and adversely affect our financial results.
As part of our business strategy, we may become active in acquiring and investing in order to, among other things, add specialized employees, complementary companies, products, services, licenses, or technologies. As part of our business strategy, we may conduct discussions and evaluate opportunities for possible acquisitions, strategic investments, entries into new businesses, joint ventures, and other transactions. We may also invest in companies and technologies that are highly speculative in nature. In the future, we may not be able to find suitable acquisition and investment candidates, and we may not be able to complete acquisitions or make investments on favorable terms, if at all. In some cases, the costs of such acquisitions may be substantial, and there is no assurance that we will receive a favorable return on investment for our acquisitions. We may in the future be required to write off acquisitions or investments. Moreover, our future acquisitions may not achieve our goals, and any future acquisitions we complete could be viewed negatively by customers, developers, advertisers, or investors. In addition, if we fail to successfully close or integrate any acquisitions, or integrate the products or technologies associated with such acquisitions into our company, our net revenue and operating results could be adversely affected. Our ability to acquire and integrate companies, products, services, licenses, employees, or technologies in a successful manner is unproven. Any integration process may require significant time and resources, and we may not be able to manage the process successfully, including successfully securing regulatory approvals which may be required to close the transaction and to continue to operate the target firm’s business or products in a manner that is useful to us. We may not successfully evaluate or utilize the acquired products, services, technology, or personnel, or accurately forecast the financial impact of an acquisition transaction, including accounting charges. We may have to pay cash, incur debt, or issue equity securities to pay for any such acquisition, any of which could adversely affect our financial results. The sale of equity or issuance of debt to finance any such acquisitions could result in dilution to our stockholders, which, depending on the size of the acquisition, may be significant. The incurrence of indebtedness would result in increased fixed obligations and could also include covenants or other restrictions that would impede our ability to manage our operations.
While we regularly evaluate strategic opportunities, we do not currently have any plans, proposals or understandings, formally or informally, to make acquisitions or strategic investments.
Our business could be harmed if we are unable to accurately forecast customer demand for Bitcoin and to adequately manage our Bitcoin balances, including the Bitcoin balances we maintain for our own account or Bitcoin balances that may be maintained for use in our rewards program.
Our purpose for holding Bitcoin in treasury is twofold: (1) to fulfill Bitcoin rewards to customers in accordance with the terms and conditions of Fold’s user agreements (“Rewards Treasury”); and (2) as a treasury asset with the intention to hold as a long-term investment (“Investment Treasury”). Our goal is to maintain an amount of Bitcoin in our Rewards Treasury sufficient to satisfy our obligations to provide customer rewards in accordance with our user agreements. Customer rewards are denominated in Bitcoin as of the date the rewards are earned, and therefore we try to purchase Bitcoin for our Rewards Treasury at a similar cost basis to the rewards earned by our customers. If the price of Bitcoin were to decrease, we may need to fulfill customer reward obligations with Bitcoin that we have previously purchased at a higher price, which could adversely impact our financial position and operating results. In addition, if the price of Bitcoin were to increase, demand for Bitcoin on the open market may also increase. If we were unable to obtain additional Bitcoin for our Rewards Treasury in a cost-effective manner, that may adversely impact our financial position and operating results.
Our investments in Bitcoin are subject to volatile market prices and risks of loss.
As of December 31, 2024, we had approximately $102.1 million of Bitcoin in our Treasury accounts. The price of Bitcoin has been highly volatile and may continue to be volatile in the future, including as a result of various associated risks and uncertainties. For example, the prevalence of Bitcoin is a relatively recent trend, and the long-term adoption of Bitcoin by investors, consumers, and businesses remains uncertain. The lack of a physical form, reliance on technology for creation, existence, and transactional validation, and decentralization may subject Bitcoin’s integrity to the threat of malicious attacks and technological obsolescence. To the extent the market value of the Bitcoin we hold decreases materially relative to our cost basis, our financial condition may be adversely impacted.
If there are future changes in applicable accounting rules that require us to change the manner in which we account for our Bitcoin, there could be a material and adverse effect on our financial results and the market price of our common stock may suffer as a result.
Our brand and reputation are key assets and a competitive advantage. Maintaining, protecting, and enhancing our brand depends largely on the success of our marketing efforts, ability to provide consistent, high-quality, and secure products, services, features, and support, and our ability to successfully secure, maintain, and defend our rights to use the “Fold” mark and other trademarks important to our brand. We believe that the importance of our brand will increase as competition further intensifies. Our brand and reputation could be harmed if we fail to achieve these objectives or if our public image were to be tarnished by negative publicity, unexpected events, or actions by third parties. Unfavorable publicity about us, including our products, services, technology, customer service, personnel, and Bitcoin or Bitcoin platforms generally could diminish confidence in, and the use of, our products and services. Moreover, to the extent that we acquire a company and maintain that acquired company’s separate brand, we could experience brand dilution or fail to retain positive impressions of our own brand to the extent such impressions are instead attributed to the acquired company’s brand. In addition, because we are a founder-led company, actions by, or unfavorable publicity about, Will Reeves, our co-founder and Chief Executive Officer, may adversely impact our brand and reputation. Such negative publicity also could have an adverse effect on the size and engagement of our customers and could result in decreased revenue, which could have an adverse effect on our business, operating results, and financial condition.
Our long-term success depends on our ability to develop products and services to address the rapidly evolving market for payments and financial services, and, if we are not able to implement successful enhancements and new features for our products and services, our business could be materially and adversely affected.
Rapid and significant technological changes continue to confront the industries in which we operate, including developments in omnichannel commerce, proximity payment devices (including contactless payments via NFC technology), digital banking, mobile financial apps, tokenization (e.g., replacing sensitive data such as payment card information with symbols (tokens) to keep the data safe), blockchain, and artificial intelligence (“AI”), including machine learning.
These new and evolving services and technologies may be superior to, impair, or render obsolete the products and services we currently offer or the technologies we currently use to provide them. Our ability to develop new products and services may be inhibited by industry-wide standards, payment card networks, existing and future laws and regulations, resistance to change from our customers, which includes our sellers and their customers, or third parties’ intellectual property rights. Incorporating new technologies into our products and services may require substantial expenditures and take considerable time, and we may not be successful in realizing a return on our efforts in a timely manner or at all.
Our success will depend on our ability to develop new technologies, to adapt to technology changes and evolving industry standards, to incorporate new technologies into our products and services, and to provide products and services that are tailored to specific needs and requirements of our customers. For example, generative AI has become more publicly available and enterprise adoption of generative AI has grown. If we are unable to provide enhancements and new features for our products and services or to develop new products and services that achieve market acceptance or that keep pace with rapid technological developments and evolving industry standards, our business would be materially and adversely affected.
We often rely, not only on our own initiatives and innovations, but also on third parties, including some of our competitors, for the development of and access to new technologies and development of a robust market for these new products and technologies. Failure to accurately predict or to respond effectively to developments in our industry may significantly impair our business. In addition, because our products and services are designed to operate with a variety of systems, infrastructures, and devices, we need to continuously modify and enhance our products and services to keep pace with changes in technologies. Any failure of our products and services to continue to operate effectively with third-party infrastructures and technologies could reduce the demand for our products and services, result in dissatisfaction of our customers, and materially and adversely affect our business.
Our products and services may not function as intended due to undetected errors in our software, hardware, and systems, product defects, developmental delays, or due to security breaches or incidents or human error in administering these systems, which could damage user or third-party relations, decrease our potential profitability and expose us to liability, and materially and adversely affect our business.
Our software, hardware, systems, and processes may contain undetected errors or vulnerabilities that could have a material adverse effect on our business, particularly to the extent such errors or vulnerabilities are not detected and remedied quickly. We have from time to time found defects in our user-facing software and hardware, internal systems, and technical integrations with third-party systems, and new errors or vulnerabilities may be introduced in the future. If there are such errors or defects in our software, hardware, or systems, we may face negative publicity, government investigations, and litigation. Additionally, we rely on a limited number of component and product suppliers located outside of the U.S. to manufacture our products. As our hardware and software services continue to increase in size and complexity, and as we integrate new, acquired subsidiaries with different technology stacks and practices, these risks may correspondingly increase as well.
In addition, we provide incremental releases of product and service updates and functional enhancements, which increase the possibility of errors. Any errors, data leaks, security breaches or incidents, disruptions in services, or other performance problems with our products or services caused by external or internal actors could hurt our reputation and damage our business. Software and system errors, or human error, could delay or inhibit settlement of payments, result in over settlement, cause reporting errors, or prevent us from collecting transaction-based fees, or negatively impact our ability to serve our users. Similarly, security breaches or incidents, which may be caused by or result from cyber-attacks by hackers or others, computer viruses, worms, ransomware, other malicious software programs, security vulnerabilities, employee or service provider theft, misuse or negligence, phishing, identity theft or compromised credentials, denial-of-service attacks, or other causes, could impact our business and disrupt the proper functioning of our products or services, cause errors, allow loss or unavailability of, unauthorized access to, or disclosure of, proprietary, confidential or otherwise sensitive information of ours or our users, and other destructive outcomes. Any of the foregoing issues could result in costly and time-consuming efforts to redesign and redistribute our products, give rise to regulatory inquiries and investigations, and result in lawsuits and other liabilities and losses, which could have a material and adverse effect on our business.
We regularly review key business metrics to measure our performance and make strategic decisions. These key metrics are calculated using internal company data and have not been validated by an independent third-party. While these numbers are based on what we believe to be reasonable estimates for the applicable period of measurement at the time of reporting, there are inherent challenges in such measurements. If we fail to maintain an effective analytics platform, our key metrics calculations may be inaccurate, and we may not be able to identify those inaccuracies. Additionally, we have in the past and may in the future, calculate key business metrics using third-party data. While we believe the third-party data we have used in the past or may use in the future is reliable, we have not independently verified and may not in the future independently verify the accuracy or completeness of the data contained in such sources and there can be no assurance that such data is free of error. Any inaccuracy in the third-party data we use could cause us to overstate or understate our key metrics. We regularly review our processes for calculating these metrics, and from time to time we make adjustments to improve their accuracy.
Our key business metrics may also be impacted by compliance or fraud-related bans, technical incidents, or false or spam accounts in existence on our platform. We regularly deactivate fraudulent and spam accounts that violate our terms of service, and exclude these users from the calculation of our key business metrics; however, we may not succeed in identifying and removing all such accounts from our platform.
We may change our key business metrics from time to time, which may be perceived negatively. Given the rapid evolution of the digital assets space, we regularly evaluate whether our key business metrics remain meaningful indicators of the performance of our business. As a result of these evaluations, in the past we have decided to make changes, and in the future may make additional changes, to our key business metrics, including eliminating or replacing existing metrics. Further if investors or the media perceive any changes to our key business metrics disclosures negatively, our business could be adversely affected.
Unfavorable media coverage could negatively affect our business.
Unfavorable publicity regarding, for example, our product changes, product quality, litigation or regulatory activity, privacy practices, terms of service, employment matters, the use of our products or services (including Bitcoin-related products and services) for illicit or objectionable ends, the actions of our customers, or the actions of other companies that provide similar services to ours, has in the past, and could in the future, adversely affect our reputation. Further, we have in the past, and may in the future, be the target of social media campaigns criticizing actual or perceived actions or inactions that are disfavored by our customers, employees, or society at-large, which campaigns could materially impact our customers’ decisions to use our platform. Any such negative publicity could have an adverse effect on the size, activity, and loyalty of our customers and result in a decrease in net revenue, which could adversely affect our business, operating results, and financial condition.
Our products and services may be exploited to facilitate illegal activity such as fraud, money laundering, gambling, sanctions violations, tax evasion, and scams. If any of our customers use our products or services to further such illegal activities, our business could be adversely affected.
Our products and services may be exploited to facilitate illegal activity including fraud, sanctions violations, money laundering, gambling, tax evasion, and scams. We or our partners may be specifically targeted by individuals seeking to conduct fraudulent transfers, and it may be difficult or impossible for us to detect and avoid such transactions in certain circumstances. The use of our platform for illegal or improper purposes could subject us to claims, individual and class action lawsuits, and government and regulatory investigations, prosecutions, enforcement actions, inquiries, or requests that could result in liability and reputational harm for us. Moreover, certain activities that may be legal in one jurisdiction may be illegal in another jurisdiction, and certain activities that are at one time legal may in the future be deemed illegal in the same jurisdiction. As a result, there is significant uncertainty and cost associated with detecting and monitoring transactions for compliance with local laws. In the event that a customer is found responsible for intentionally or inadvertently violating the laws in any jurisdiction or we are found responsible for failure to prevent the use of our products or services for illegal activities, we may be subject to governmental inquiries, enforcement actions, prosecuted, or otherwise held secondarily liable for aiding or facilitating such activities. Changes in law have also increased the penalties for certain illegal activities, and government authorities may consider increased or additional penalties from time to time. Any threatened or resulting claims could result in reputational harm, and any resulting liabilities, loss of transaction volume, or increased costs could harm our business.
Moreover, while fiat currencies can be used to facilitate illegal activities, Bitcoin is relatively new and, in many jurisdictions, may be lightly regulated or largely unregulated. Bitcoin has characteristics, such as the speed with which digital currency transactions can be conducted, the ability to conduct transactions without the involvement of regulated intermediaries, the ability to engage in transactions across multiple jurisdictions, the irreversible nature of certain crypto asset transactions, and encryption technology that anonymizes these transactions, that make it susceptible to use in illegal activity. U.S. federal and state and foreign regulatory authorities and law enforcement agencies, such as the Department of Justice (“DOJ”), SEC, CFTC, FTC, or the Internal Revenue Service (“IRS”), and various state securities and financial regulators have taken and continue to take legal action against persons and entities alleged to be engaged in fraudulent schemes or other illicit activity involving Bitcoin.
While we believe that our risk management and compliance framework is designed to detect significant illicit activities conducted by our potential or existing customers, we cannot ensure that we will be able to detect all illegal activity on our platform. If any of our customers use our platform for such illegal activities or we are found responsible for failure to prevent the use of our products or services for illegal activities, our business could be adversely affected.
Our ability to comply with applicable complex and evolving laws, regulations, and rules is largely dependent on the establishment, maintenance, and scaling of our compliance, internal audit, and reporting systems to continuously keep pace with our customer activity and transaction volume, as well as our ability to attract and retain qualified compliance and other risk management personnel. While we have devoted significant resources to develop policies and procedures to identify, monitor, and manage our risks, and expect to continue to do so in the future, we cannot assure you that our policies and procedures are and will always be effective or that we have been and will always be successful in monitoring or evaluating the risks to which we are or may be exposed in all market environments or against all types of risks, including unidentified or unanticipated risks. Our risk management policies and procedures rely on a combination of technical and human controls and supervision that are subject to error and failure. Some of our methods for managing risk are discretionary by nature and are based on internally developed controls and observed historical market behavior, and also involve reliance on standard industry practices. Accordingly, in the future, we may identify gaps in such policies and procedures or existing gaps may become higher risk, and may require significant resources and management attention. Our risk management policies and procedures also may not adequately prevent losses due to technical errors if our testing and quality control practices are not effective in preventing failures. In addition, we may elect to adjust our risk management policies and procedures to allow for an increase in risk tolerance, which could expose us to the risk of greater losses.
Our regulators and financial institution partners, including their regulators, may periodically review our compliance program, including our policies and procedures, and with applicable law. We may from time to time receive examination reports citing violations of applicable law and inadequacies in existing compliance programs requiring us to enhance certain practices with respect to our practices or compliance program, including due diligence, training, monitoring, reporting, and recordkeeping. If we fail to comply with these, or do not adequately remediate certain findings, regulators and financial institution partners could take a variety of actions that could impair our ability to conduct our business, including, but not limited to, delaying, denying, withdrawing, or conditioning approval of certain products and services. In addition, regulators have broad enforcement powers to censure, fine, issue cease and desist orders, prohibit us from engaging in some of our business activities, or revoke our licenses. We face significant intervention by regulatory authorities, including extensive auditing and surveillance activities, and will continue to face the risk of significant intervention by regulatory authorities and financial institution partners in the future. In the case of non-compliance or alleged non-compliance, we could be subject to investigations and proceedings that may result in substantial penalties or civil lawsuits, including by customers, for damages, which can be a significant loss to us or our financial institution partner(s). Any of these outcomes would adversely affect our reputation and brand and our business, operating results, and financial condition. Some of these outcomes could adversely affect our ability to conduct our business.
The Bitcoin market has been characterized by significant volatility and unexpected price movements, and has previously experienced significant declines. Bitcoin may become more volatile and less liquid in a very short period of time. A series of recent high-profile bankruptcies, closures, liquidations, regulatory enforcement actions and other events relating to companies operating in the digital asset industry, including the filings for bankruptcy protection by Three Arrows Capital, Celsius Network, Voyager Digital, FTX Trading and Genesis Global Capital, the closure or liquidation of certain financial institutions that provided lending and other services to the digital assets industry, including Signature Bank and Silvergate Bank, SEC enforcement actions against Coinbase, Inc. and Binance Holdings Ltd., the placement of Prime Trust, LLC into receivership following a cease-and desist order issued by Nevada’s Department of Business and Industry, and the filing and subsequent settlement of a civil fraud lawsuit by the New York Attorney General against Genesis Global Capital, its parent company Digital Currency Group, Inc., and former partner Gemini Trust Company, have highlighted the counterparty risks applicable to owning and transacting in digital assets.
Although these bankruptcies, closures, liquidations and other events have not resulted in any loss or misappropriation of our Bitcoin, nor have such events adversely impacted our access to our Bitcoin, they created significant volatility in the markets for cryptocurrency generally and for Bitcoin particularly. Additional bankruptcies, closures, liquidations, regulatory enforcement actions or other events involving participants in the digital assets industry in the future could result in market prices being subject to erratic and abrupt market movement, which could harm our business. Further, because there is no centralized authority which determines the price of Bitcoin, pricing often differs between exchanges. When some exchanges are viewed as higher risk, that price differential can widen as traders attempt to exploit these differences. Volatility in the price of Bitcoin, as well as the lack of a standard price, could lead consumers to see Bitcoin as an unsafe asset, which would result in losses of customers and resulting harm to our business. In addition, if we were to attempt to monetize the Bitcoin we hold on our balance sheet, such price volatility could lead to trading losses, impacting our financial position.
For example, based on aggregate US exchange markets data collected by CoinMarketCap, on December 18, 2023, the price of Bitcoin at 10:00 P.M. UTC was $42,623.54. On December 18, 2024, the price of Bitcoin at 10:00 P.M. UTC was $100,041.54. Between those dates, Bitcoin experienced significant volatility. For example, on August 1, 2024, the price of Bitcoin was $65,353.50, and on August 5, 2024 the price of Bitcoin was $53,991.35. On August 24, 2024, the price of Bitcoin had risen again to $64,176.37. In 2022, price swings were even more drastic, with prices as high as $47,459 at the end of March 2022 and as low as $16,530 at the end of the year. Such volatility will impact the overall value of our business and could cause volatility in the price of our stock.
The trading volume of Bitcoin typically increases during periods of extreme volatility. For example, in the days following the federal elections in November 2024, the price of Bitcoin rose sharply from $69,289.27 on November 2 to $87,250.43 on November 14, and volumes increased from 18,184,612,091 to 87,616,705,248 during that time period according to aggregate data from US exchange markets collected by CoinMarketCap. Such volume increases can lead to extreme pressures on our and our partners’ platforms and infrastructure that can lead to inadvertent suspension of services across parts of the platforms or the entire platforms. As a result, from time to time we may experience outages. Outages can lead to increased customer service expense, can cause customer loss and reputational damage, result in inquiries and actions by regulators, and can lead to other damages for which we may be responsible, any of which could harm our business.
Risks Related to Bitcoin
Due to unfamiliarity and some negative publicity associated with Bitcoin products and services, confidence or interest in our platforms may decline.
Bitcoin is relatively new. Many of our competitors offering Bitcoin-related products and services are unlicensed, unregulated, operate without supervision by any governmental authorities, and do not provide the public with significant information regarding their ownership structure, management team, corporate practices, cybersecurity, and regulatory compliance. As a result, customers and the general public may lose confidence or interest in Bitcoin platforms, including platforms like ours that partner with regulated providers.
Negative perception, a lack of stability and standardized regulation in the cryptoeconomy, and the closure or temporary shutdown of crypto asset platforms due to fraud, business failure, hackers or malware, or government mandated regulation, and associated losses suffered by customers may continue to reduce confidence or interest in the cryptoeconomy and result in greater volatility of the prices of assets, including significant depreciation in value. Any of these events could have an adverse impact on our business and our customers’ perception of us, including decreased use of our platform and loss of customer demand for our products and services.
Transferring Bitcoin on the Bitcoin blockchain involves risks, which could result in loss of customer assets or our proprietary assets, customer disputes and other liabilities, which could adversely impact our business.
In order to transfer Bitcoin on the Bitcoin blockchain, a person must have a private and public key pair associated with a network address, commonly referred to as a “wallet.” Each wallet is associated with a unique “public key” and “private key” pair, each of which is a large number. To send Bitcoin on the Bitcoin blockchain, a user must sign a transaction that is created using the private key of the wallet from where the user is transferring Bitcoin, a hash of the recipient wallet’s public key, the amount of Bitcoin to be sent, and the transaction fee. The transaction must be signed using the user’s private key through a cryptographic process, which creates a digital signature to prove ownership of the Bitcoin. Once signed, the transaction is broadcasted to the Bitcoin network to be included in a new block by miners. If we wish to purchase Bitcoin, the seller would need to send a transaction to our designated wallet in this manner. A number of errors can occur in the process of transmitting Bitcoin, such as typos, mistakes, or the failure to include the information required by the blockchain network, which could result in losses of our proprietary Bitcoin or, where our customers choose to transfer and use Bitcoin on its underlying blockchain network, the Bitcoin held by us on behalf of our customers. For instance, a customer may incorrectly enter our crypto custody partner’s wallet’s address or the desired recipient’s public key when depositing and withdrawing Bitcoin, respectively. Alternatively, a customer may send Bitcoin to a wallet address that the customer does not own, control or hold the private keys to. If any of the foregoing errors occur, all of the Bitcoin sent by the customer will be permanently and irretrievably lost with no means of recovery. We have encountered and expect to continue to encounter similar incidents with our customers, and although we have not experienced such incidents with respect to Bitcoin that we hold on a proprietary basis it is possible that they could occur in the future. Such incidents could result in customer disputes, damage to our brand and reputation, legal claims against us, and financial liabilities, any of which could adversely affect our business.
BitGo has represented that they will safekeep all Bitcoin held in custody by them, and that they have procedures to process redemptions and withdrawals expeditiously, following the terms of the applicable user agreements. Our customers have not experienced excessive redemptions or withdrawals, or prolonged suspended redemptions or withdrawals, of Bitcoin to date. However, similar to traditional financial institutions, our Bitcoin Service Providers may experience temporary process-related withdrawal delays. For example, like traditional financial institutions, our Bitcoin Service Providers may experience such delays if there is a significant volume of withdrawal requests that is vastly beyond anticipated levels. This does not mean our Bitcoin Service Providers cannot or will not satisfy withdrawals, but this may mean a temporary delay in satisfying withdrawal requests, which our customers still expect to be satisfied within the withdrawal timelines set forth in the applicable user agreements or otherwise communicated by us or our Bitcoin Service Providers. To the extent we or one of our Bitcoin Service Providers have process-related delays, even if brief or due to blockchain network congestion or heightened redemption activity, and within the terms of an applicable user agreement or otherwise communicated by us, we may experience increased customer complaints and damage to our brand and reputation and face additional regulatory scrutiny, any of which could adversely affect our business.
A temporary or permanent blockchain “fork” to Bitcoin could adversely affect our business.
Blockchain protocols, including Bitcoin, are open source. Any user can download the software, modify it, and then propose that Bitcoin users and miners adopt the modification. When a modification is introduced and a substantial majority of users and miners consent to the modification, the change is implemented and the Bitcoin protocol network remains uninterrupted. However, if less than a substantial majority of users and miners consent to the proposed modification, and the modification is not compatible with the software prior to its modification, the consequence would be what is known as a “fork” (i.e., “split”) of the impacted blockchain protocol network and respective blockchain, with one prong running the pre-modified software and the other running the modified software. The effect of such a fork would be the existence of two parallel versions of the Bitcoin protocols running simultaneously, but with each split network’s Bitcoin lacking interchangeability.
Bitcoin has previously been subject to “forks” that resulted in the creation of new networks, including Bitcoin Cash ABC, Bitcoin Cash SV, Bitcoin Diamond, Bitcoin Gold, and others. Some of these forks have caused fragmentation among platforms as to the correct naming convention for forked crypto assets. Due to the lack of a central registry or rulemaking body, no single entity has the ability to dictate the nomenclature of forked crypto assets, causing disagreements and a lack of uniformity among platforms on the nomenclature of forked crypto assets, and which results in further confusion to customers as to the nature of assets they hold on platforms. In addition, several of these forks were contentious and as a result, participants in certain communities may harbor ill will towards other communities. As a result, certain community members may take actions that adversely impact the use, adoption, and price of Bitcoin.
Future forks may occur at any time. A fork can lead to a disruption of networks and our information technology systems, cybersecurity attacks, replay attacks, or security weaknesses, any of which can further lead to temporary or even permanent loss of our and our customers’ assets. In addition, our Bitcoin Service Providers have the right to temporarily suspend their services in the event of a fork, and to determine not to support any particular fork in the future. If a fork of the bitcoin blockchain occurs and our Bitcoin Service Providers provide access to a forked asset, we intend to retain the forked assets that are created as a result of our proprietary bitcoin. Any forked assets corresponding to our customers’ bitcoin holdings would be managed by our Bitcoin Service Providers in accordance with their policies. We will cooperate with our Bitcoin Service Providers in connection with their distribution of any forked assets corresponding to our customers’ bitcoin, solely to the extent our involvement is requested by a Bitcoin Service Provider. Prior to undertaking any such involvement in the distribution or other action by a Bitcoin Service Provider in respect of any forked assets, we would take steps to seek to ensure that any actions we may take would be in compliance with applicable law, including federal securities laws, which steps may include, among others, (i) communicating regularly with the Bitcoin Service Providers regarding their legal analysis pertaining to forked assets and any distribution thereof, (ii) staying abreast of developments regarding treatment of cryptocurrencies, including forked assets, under applicable securities laws, (iii) consulting with legal counsel regarding the specific facts and circumstances pertaining to the legal status of any forked asset and (iv) seeking guidance and clarification from applicable government regulators, including the SEC, with respect to the legal status of any forked asset. If a fork occurs and one of our Bitcoin Service Providers determines not to support one of the assets created as a result of the fork, this could cause us or our customers to miss an opportunity regarding a new digital asset. In addition, any suspension of services ahead of a fork could cause customer complaints and cause us to be exposed to liability, even in circumstances where we do not have the ability to alter a Bitcoin Service Provider’s policy regarding a fork. To the extent a forked asset is determined to be a “security” under applicable federal securities laws, any distribution of such forked asset would expose the distributor thereof to significant liability under such laws. For additional information regarding the risks and liabilities associated with uncertainty regarding the status of bitcoin and other cryptocurrencies as a “security,” please see the risk factor above entitled “Bitcoin’s status as a “security” in any relevant jurisdiction, as well as the status of our Bitcoin-related products and services, is subject to a high degree of uncertainty and if we are unable to properly characterize a product or service offering, we may be subject to regulatory scrutiny, inquiries, investigations, fines, and other penalties, which may adversely affect our business, operating results, and financial condition.”
Due to the new and evolving nature of crypto assets and the absence of comprehensive legal and tax guidance with respect to crypto asset products and transactions, many significant aspects of the U.S. and foreign tax treatment of transactions involving crypto assets, such as the purchase and sale of Bitcoin on our platform, are uncertain, and it is unclear whether, when and what guidance may be issued in the future on the treatment of crypto asset transactions for U.S. and foreign tax purposes.
In 2014, the IRS released Notice 2014-21, discussing certain aspects of “virtual currency” for U.S. federal income tax purposes and, in particular, stating that such virtual currency (i) is “property,” (ii) is not “currency” for purposes of the rules relating to foreign currency gain or loss, and (iii) may be held as a capital asset. From time to time, the IRS has released other notices and rulings relating to the tax treatment of virtual currency or crypto assets reflecting the IRS’s position on certain issues. The IRS has not addressed many other significant aspects of the U.S. federal income tax treatment of crypto assets and related transactions.
There continues to be uncertainty with respect to the timing, character and amount of income inclusions for various crypto asset transactions. Although we believe our treatment of Bitcoin transactions for federal income tax purposes is consistent with existing positions from the IRS and/or existing U.S. federal income tax principles, because of the rapidly evolving nature of crypto asset innovations and the increasing variety and complexity of crypto asset transactions and products, it is possible the IRS and various U.S. states may disagree with our treatment of certain Bitcoin offerings for U.S. tax purposes, which could adversely affect our customers and the vitality of our business. Similar uncertainties exist in the foreign markets in which we operate with respect to direct and indirect taxes, and these uncertainties and potential adverse interpretations of tax law could impact the amount of tax we and our non-U.S. customers are required to pay, and the vitality of our platforms outside of the United States.
There can be no assurance that the IRS, the U.S. state revenue agencies or other foreign tax authorities, will not alter their respective positions with respect to crypto assets in the future or that a court would uphold the treatment set forth in existing positions. It also is unclear what additional tax authority positions, regulations, or legislation may be issued in the future on the treatment of existing crypto asset transactions and future crypto asset innovations under U.S. federal, U.S. state or foreign tax law. Any such developments could result in adverse tax consequences for holders of crypto assets and could have an adverse effect on the value of crypto assets and the broader crypto assets markets. Future technological and operational developments that may arise with respect to crypto assets may increase the uncertainty with respect to the treatment of crypto assets for U.S. and foreign tax purposes. The uncertainty regarding tax treatment of crypto asset transactions impacts our customers, and could impact our business, both domestically and abroad.
Our tax information reporting obligations with respect to Bitcoin transactions are subject to change.
Although we believe we are compliant with U.S. tax reporting and withholding requirements with respect to our customers’ Bitcoin transactions, the exact scope and application of such requirements, including but not limited to U.S. onboarding requirements through Forms W-9 and W-8, backup withholding, non-resident alien withholding, and Form 1099 and Form 1042-S reporting obligations, is not entirely clear for all of the crypto asset transactions that we facilitate. In November 2021, the U.S. Congress passed the Infrastructure Investment and Jobs Act (the “IIJA”), providing that brokers would be responsible for reporting to the IRS the transactions of their customers in digital assets, including transfers to other exchanges or non-exchanges. In June 2024, the U.S. Treasury Department and the IRS released regulations in addition to other administrative guidance on tax information reporting in connection with the IIJA (the “IIJA Regulations”) for reporting transactions with respect to digital assets became effective. The IIJA Regulations introduce new rules related to our tax reporting and withholding obligations on our customer transactions in ways that differ from our existing compliance protocols and there is risk that we will not have proper records to ensure compliance for certain legacy customers or transactions. If the IRS determines that we are not in compliance with our tax reporting or withholding requirements with respect to customer Bitcoin transactions, we may be exposed to significant taxes and penalties, which could adversely affect our financial position. The IIJA Regulations will require us to invest substantially in new compliance measures and that may require significant retroactive compliance efforts, which also could adversely affect our financial position. Further, additional guidance may be issued, including, guidance on the treatment of non-custodial parties, which could impose additional compliance efforts, and which would adversely affect our financial position.
Similarly, it is likely that new rules for reporting crypto assets under the global “common reporting standard” as well as the “crypto-asset reporting framework” will be implemented on our international operations, creating new obligations and a need to invest in new onboarding and reporting infrastructure. Such rules are under discussion today by the member and observer states of the “Organization for Economic Cooperation and Development” and by the European Commission on behalf of the member states of the European Union. These new rules may give rise to potential liabilities or disclosure requirements for prior customer arrangements and new rules that affect how we onboard our customers and report their transactions to taxing authorities. Additionally, the European Union has issued directives, commonly referred to as “CESOP” (the Central Electronic System of Payment information), requiring payment service providers in the European Union to report cross-border fiat transactions to taxing authorities on a quarterly basis beginning in January 2024. Any actual or perceived failure by us to comply with the above or any other emerging tax regulations that apply to our operations could harm our business.
The accounting rules and regulations that we must comply with are complex and subject to interpretation by the Financial Accounting Standards Board (the “FASB”), the SEC, and various other bodies formed to promulgate and interpret appropriate accounting principles. Recent actions and public comments from the FASB and the SEC have focused on the integrity of financial reporting and internal controls and many companies’ accounting policies are being subjected to heightened scrutiny by regulators and the public. Further, there has been limited precedent for the financial accounting of crypto assets and related valuation and revenue recognition. Moreover, a change in these principles or interpretations could have a significant effect on our reported financial results, and may even affect the reporting of transactions completed before the announcement or effectiveness of a change.
For example, on March 31, 2022, the staff of the SEC issued Staff Accounting Bulletin No. 121 (“SAB 121”), which represented a significant change regarding how a company safeguarding crypto assets held for its platform users reports such crypto assets on its balance sheet and required retrospective application as of January 1, 2022. On January 30, 2025, the SEC issued Staff Accounting Bulletin (“SAB”) No. 122 (“SAB 122”). SAB 122 rescinded the previously-issued SAB 121 guidance with respect to accounting for obligations to safeguard digital assets that an entity holds for its customers. SAB 122 directs an entity to apply Accounting Standards Codification (“ASC”) 450-20, Loss Contingencies to determine whether an entity has a liability related to risk of loss from an obligation to safeguard digital assets for customers.
Uncertainties in or changes to regulatory or financial accounting standards could result in the need to change our accounting methods and restate our financial statements and impair our ability to provide timely and accurate financial information, which could adversely affect our financial statements, result in a loss of investor confidence, and more generally impact our business, operating results, and financial condition.
Risks Related to Government Regulation and Privacy Matters
The regulatory environment in which the consumer finance industry operates could have a material adverse effect on our business and operating results.
The Dodd-Frank Wall Street Reform and Consumer Protection Act (the “Dodd-Frank Act”) was signed into law on July 21, 2010. The Dodd-Frank Act is extensive and significant legislation that, among other things, created the CFPB, an agency responsible for administering and enforcing the laws and regulations for consumer financial products and services. The CFPB has broad rulemaking, examination and enforcement authority over providers of financial services and products, which could include us and our affiliates, including authority to prevent “unfair, deceptive or abusive” practices and to collect fines and provide consumer restitution in the event of violations. In addition to the CFPB, other federal agencies, such as the FTC, and state regulators, such as consumer protection and financial services regulators and attorneys general, may exercise supervision and enforcement authority over providers of goods or services, like us. Depending on how such governmental authorities elect to exercise its statutory authority, it could increase the compliance costs for us and our third party service providers, potentially delay our ability to respond to marketplace changes, result in requirements to alter products and services that would make them less attractive to consumers, impair our ability to offer products and services, and harm our reputation or otherwise adversely affect our businesses.
At the end of 2022 and the beginning of 2023, the CFPB proposed two new regulations that would require certain non-bank financial services companies to make submissions to the CFPB for inclusion in an online public registry. The first such proposed regulation would require most non-bank financial services companies to submit to the CFPB consent orders or other non-supervisory orders with or issued by a federal, state, or local regulator or a court in connection with an action by a federal, state, or local regulator. The second such proposed regulation requires CFPB supervised non-bank financial services companies to submit consumer contract terms that limit consumers’ legal rights and remedies, such as mandatory arbitration provisions. Under both regulations, the CFPB would publish online information it receives from non-bank financial services companies. If we were required to make such submissions to the CFPB, it could increase the risk of enforcement or supervisory action by the CFPB against us.
We are subject to various regulatory, financial and other requirements in the jurisdictions in which we operate. We may become involved from time to time in reviews, investigations and proceedings and information gathering requests, by government and self-regulatory agencies, including state attorneys general. Any of such events could result in the imposition of damages, fines or civil or criminal claims and/or penalties. No assurance can be given that the ultimate outcome of any such event would not have a material adverse effect on us or our ability to provide services.
The financial services industry is likely to see increased disclosure obligations, licensing requirements, restrictions on pricing and enforcement proceedings. Compliance with applicable laws is costly and can affect operating results, as processes, procedures, control and infrastructure are required to support applicable requirements. Compliance may also create operational constraints and impose limits on pricing, as financial services industry laws are designed primarily to protect consumers. The failure to comply could result in significant statutory civil and criminal penalties, monetary damages, attorneys’ fees and costs, possible revocation of licenses and damage to reputation, brand, loss of our bank partnerships, and loss of customer relationships.
The cryptoeconomy is novel. As a result, policymakers are just beginning to consider what a regulatory regime for crypto would look like and the elements that would serve as the foundation for such a regime. We may be unable to effectively react to proposed legislation and regulation of crypto assets or crypto asset platforms that are adverse to our business.
As crypto assets have grown in both popularity and market size, various U.S. federal, state, and local and foreign governmental organizations, consumer agencies and public advocacy groups have been examining the operations of crypto networks, users and platforms, with a focus on how crypto assets can be used to launder the proceeds of illegal activities, fund criminal or terrorist enterprises, and the safety and soundness of platforms and other service providers that hold crypto assets for users. Many of these entities have called for heightened regulatory oversight, and have issued consumer advisories describing the risks posed by crypto assets to users and investors. For instance, in September 2022, the White House published a fact sheet described as the first-ever “Comprehensive Framework for Responsible Development of Digital Assets,” which encouraged “agencies to issue guidance and rules to address current and emergent risks in the digital asset ecosystem.”
Competitors, including traditional financial services providers, have spent years cultivating professional relationships with relevant policymakers on behalf of their industry so that those policymakers may understand that industry, the current legal landscape affecting that industry, and the specific policy proposals that could be implemented in order to responsibly develop that industry. The lobbyists working for these competitors have similarly spent years developing and working to implement strategies to advance these industries. Members of the cryptoeconomy have started to engage policymakers directly and with the help of external advisors and lobbyists. However, this work is in a relatively nascent stage. As a result, new laws and regulations may be proposed and adopted in the United States and internationally, or existing laws and regulations may be interpreted in new ways, that harm the cryptoeconomy or crypto asset platforms, which could adversely impact our business. Additionally, our political activities to further our mission may be perceived unfavorably by investors and the public and have an adverse impact on our brand and reputation.
Bitcoin is subject to regulatory authority by the CFTC. Any fraudulent or manipulative activity in Bitcoin occurring through our products and services could subject us to increased regulatory scrutiny, regulatory enforcement, and litigation.
The CFTC has stated and judicial decisions involving CFTC enforcement actions have confirmed that Bitcoin falls within the definition of a “commodity” under the CEA. As a result, the CFTC has general enforcement authority to police against manipulation and fraud in the Bitcoin market. From time to time, manipulation, fraud, and other forms of improper trading by market participants have resulted in, and may in the future result in, CFTC investigations, inquiries, enforcement action, and similar actions by other regulators, government agencies, and civil litigation. Such investigations, inquiries, enforcement actions, and litigation may cause us to incur substantial costs and could result in negative publicity.
Certain transactions in Bitcoin may constitute “retail commodity transactions” subject to regulation by the CFTC as futures contracts. If Bitcoin transactions we facilitate are deemed to be such retail commodity transactions, we would be subject to additional regulatory requirements, licenses and approvals, and potentially face regulatory enforcement, civil liability, and significant increased compliance and operational costs.
Any transaction in a commodity, including Bitcoin, entered into with or offered to retail investors using leverage, margin, or other financing arrangements (a “retail commodity transaction”) is subject to CFTC regulation as a futures contract unless such transaction results in actual delivery within 28 days. The meaning of “actual delivery” has been the subject of commentary and litigation, and in 2020, the CFTC adopted interpretive guidance addressing the “actual delivery” of a crypto asset. To the extent that Bitcoin transactions that we facilitate or facilitated are deemed retail commodity transactions, including pursuant to current or subsequent rulemaking or guidance by the CFTC, we may be subject to additional regulatory requirements and oversight, and we could be subject to judicial or administrative sanctions if we do not or did not at a relevant time possess appropriate registrations. The CFTC has previously brought enforcement actions against entities engaged in retail commodity transactions without appropriate registrations, as well as recent enforcement settled orders against developers of decentralized platforms.
Certain transactions in Bitcoin could be deemed “commodity interests” (e.g., futures, options, swaps) or security-based swaps subject to regulation by the CFTC or SEC, respectively. If the products and services we or our Bitcoin Service Providers offer to our customers are deemed a commodity interest or a security-based swap, we would be subject to additional regulatory requirements, registrations and approvals, and potentially face regulatory enforcement, civil liability, and significant increased compliance and operational costs.
Commodity interests, as such term is defined by the CEA and CFTC rules and regulations, are subject to more extensive supervisory oversight by the CFTC, including registrations of entities engaged in, and platforms offering, commodity interest transactions. This CFTC authority extends to Bitcoin futures contracts and swaps, including transactions that are based on current and future prices of Bitcoin and indices of Bitcoin. To the extent that transactions in Bitcoin are deemed to fall within the definition of a commodity interest, including pursuant to subsequent rulemaking or guidance by the CFTC, we may be subject to additional regulatory requirements and oversight and could be subject to judicial or administrative sanctions if we do not or did not at a relevant time possess appropriate registrations as an exchange (for example, as a designated contract market for trading futures or options on futures, or as a swaps execution facility for trading swaps) or as a registered intermediary (for example, as a futures commission merchant or introducing broker). Such actions could result in injunctions, cease and desist orders, as well as civil monetary penalties, fines, and disgorgement, as well as reputational harm. The CFTC has previously brought enforcement actions against entities engaged in crypto asset activities for failure to obtain appropriate exchange, execution facility and intermediary registrations.
Furthermore, the CFTC and the SEC have jointly adopted regulations defining “security-based swaps,” which include swaps based on single securities and narrow-based indices of securities. If Bitcoin is deemed to be a security, certain transactions referencing Bitcoin could constitute a security-based swap. Bitcoin or a transaction therein that is based on or references a security or index of securities, whether or not such securities are themselves crypto assets, could also constitute a security-based swap. To the extent that Bitcoin is deemed to fall within the definition of a security-based swap, including pursuant to subsequent rulemaking or guidance by the CFTC or SEC, we may be subject to additional regulatory requirements and oversight by the SEC and could be subject to judicial or administrative sanctions if we do not or did not a relevant time possess appropriate registrations as an exchange (for example, as a security-based swaps execution facility) or as a registered intermediary (for example, as a security-based swap dealer or broker-dealer). This could result in injunctions, cease and desist orders, as well as civil monetary penalties, fines, and disgorgement, as well as reputational harm.
If we or our third-party providers fail to protect confidential information and/or experience cybersecurity incidents, there may be damage to our brand and reputation, material financial penalties, and legal liability, which would materially adversely affect our business, results of operations, and financial condition.
We rely on computer systems, hardware, software, technology infrastructure and online sites and networks for both internal and external operations that are critical to our business (collectively, “IT Systems”). We own and manage some of these IT Systems but also rely on third parties for a range of IT Systems and related products and services, including but not limited to cloud computing services. We and certain of our third-party providers collect, maintain and process data about customers, employees, business partners and others, including information about individuals and their financial assets (such as Bitcoin), as well as proprietary information belonging to our business such as trade secrets (collectively, “Confidential Information”).
We face numerous and evolving cybersecurity risks that threaten the confidentiality, integrity and availability of our IT Systems and Confidential Information, including from diverse threat actors, such as state-sponsored organizations, opportunistic hackers and hacktivists, as well as through diverse attack vectors, such as social engineering/phishing, malware (including ransomware), malfeasance by insiders, human or technological error, and as a result of malicious code embedded in open-source software, or misconfigurations, bugs or other vulnerabilities in commercial software that is integrated into our (or our suppliers’ or service providers’) IT Systems, products or services. As knowledge and techniques in cryptography continue to advance, threat actors may exploit these advancements to develop more sophisticated and effective attack methods, increasing the frequency and severity of cyberattacks as well. Because we make extensive use of third party suppliers, service providers, and partners (including our partnerships with crypto wallet providers and financial institutions), successful cyberattacks that disrupt or result in unauthorized access to third party IT Systems can materially impact our operations and financial results.
Moreover, we may acquire companies with cybersecurity vulnerabilities and/or unsophisticated security measures, which exposes us to significant cybersecurity, operational, and financial risks. Remote and hybrid working arrangements at our company (and at our third-party providers) also increase cybersecurity risks due to the challenges associated with managing remote computing assets and security vulnerabilities that are present in many non-corporate and home networks. Additionally, any integration of artificial intelligence in our or any service providers’ operations, products or services is expected to pose new or unknown cybersecurity risks and challenges. Because our products and services are integrated with our customers’ systems and processes, any circumvention or failure of our cybersecurity defenses or measures could compromise the confidentiality, integrity, and availability of our customers’ own IT Systems and/or Confidential Information as well. Moreover, certain threats are designed to remain dormant or undetectable until launched against a target and we may not be able to implement adequate preventative measures. If such an event were to occur and cause interruptions in our operations, result in the unauthorized access, disclosure, loss, processing, or other compromise of Personal Information or Confidential Information, or jeopardize the confidentiality, integrity, or availability of our information systems or any information residing therein, it could result in a material disruption of our development programs and our business operations, whether due to a loss of our trade secrets or other similar disruptions.
Some of the federal, state, and foreign government requirements include obligations of companies to notify individuals of certain cybersecurity breaches involving particular personal information, which could result from breaches experienced by us or by our vendors, contractors, or organizations with which we have formed strategic relationships. Even though we may have contractual protections with such vendors, contractors, or other organizations, notifications and follow-up actions related to a cybersecurity breach could impact our reputation, cause us to incur significant costs, including legal expenses, harm customer confidence, hurt our expansion into new markets, cause us to incur remediation costs, or cause us to lose existing customers.
Further, the cryptocurrency industry is a frequent target for cyberattacks, including hacks of exchanges and wallets. The underlying technology of cryptocurrencies, including blockchain, is complex and still developing, which means technical issues, bugs, or vulnerabilities could impact our operations and the security of user funds. Additionally, any actual or perceived breach or cybersecurity attack directed at other financial institutions or crypto companies, whether or not we are directly impacted, could lead to a general loss of customer confidence in the cryptoeconomy or in the use of technology to conduct financial transactions, which could negatively impact us, including the market perception of the effectiveness of our security measures and technology infrastructure.
Cyberattacks are expected to accelerate on a global basis in frequency and magnitude as threat actors are becoming increasingly sophisticated in using techniques and tools — including artificial intelligence — that circumvent security controls, evade detection and remove forensic evidence. As a result, we may be unable to detect, investigate, remediate or recover from future attacks or incidents, or to avoid a material adverse impact to our IT Systems, Confidential Information or business. There can also be no assurance that our cybersecurity risk management program and processes, including our policies, controls or procedures, will be fully implemented, complied with or effective in protecting our IT Systems and Confidential Information. Furthermore, given the nature of complex systems, software and services like ours, and the scanning tools that we deploy across our networks and products, we regularly identify and track security vulnerabilities. We are unable to comprehensively apply patches or confirm that measures are in place to mitigate all such vulnerabilities, or that patches will be applied before vulnerabilities are exploited by a threat actor. In other situations, vulnerabilities persist even after we have issued security patches because our customers may fail to apply patches or update their systems to newer software versions. If attackers are able to exploit critical vulnerabilities before patches are installed or mitigating measures are implemented, significant compromises could impact our and our customers’ IT Systems and/or Confidential Information.
We and certain of our third-party providers regularly experience cyberattacks and other incidents, and we expect such attacks and incidents to continue in varying degrees. While to date no incidents have had a material impact on our operations or financial results, we cannot guarantee that material incidents will not occur in the future. Any adverse impact to the availability, integrity or confidentiality of our IT Systems or Confidential Information can result in legal claims or proceedings (such as class actions), regulatory investigations and enforcement actions, fines and penalties, negative reputational impacts that cause us to lose existing or future customers, and/or significant incident response, system restoration or remediation and future compliance costs. Any or all of the foregoing could materially adversely affect our business, results of operations, and financial condition. Finally, we cannot guarantee that any costs and liabilities incurred in relation to an attack or incident will be covered by our existing insurance policies or that applicable insurance will be available to us in the future on economically reasonable terms or at all.
We are subject to laws, regulations, and industry requirements related to data privacy, data protection and information security, and user protection across different markets where we conduct our business. Any actual or perceived failure to comply with such laws, regulations, and industry requirements, or our privacy policies, could adversely affect our business, results of operations, or financial condition.
In connection with running our business, we receive, store, use and otherwise process information that relates to individuals and/or constitutes “personal data,” “personal information,” “personally identifiable information,” or similar terms under applicable data privacy laws, including information that is considered “sensitive” under such laws (collectively, “Personal Information”), from and about actual and prospective users, as well as our employees, business contacts, and other individuals. We also depend on a number of third party vendors and partners (including digital wallet providers, cryptocurrency payment processors, financial institutions, retail partners, and security and compliance providers) in relation to the operation of our business, a number of which process Personal Information on our behalf.
We and our vendors are subject to a variety of federal and state data privacy laws, rules, regulations, industry standards and other requirements, including those that apply generally to the handling of Personal Information, and those that are specific to certain industries, sectors, contexts, or locations. These requirements and their application and interpretation are constantly evolving. It is also possible that new laws, regulations and other requirements, or amendments to or changes in interpretations of existing laws, regulations and other requirements (especially related to the regulation of cryptocurrency and related assets), may require us to incur significant costs, implement new processes, or change our handling of information and business operations, which could ultimately hinder our ability to grow our business by extracting value from our data assets.
For example, in the United States, the FTC and state regulators enforce a variety of data privacy issues, such as promises made in privacy policies or failures to appropriately protect information about individuals, as unfair or deceptive acts or practices in or affecting commerce in violation of the Federal Trade Commission Act or similar state laws. The FTC expects a company’s cybersecurity measures to be reasonable and appropriate in light of the sensitivity and volume of consumer information it holds, the size and complexity of its business, and the cost of available tools to improve security and reduce vulnerabilities.
In addition, in recent years, certain states have adopted or modified data privacy and security laws and regulations that may apply to our business. For example, the California Consumer Privacy Act (“CCPA”) requires businesses that process personal information of California residents to, among other things: provide certain disclosures to California residents regarding the business’s collection, use, and disclosure of their personal information; receive and respond to requests from California residents to access, delete, and correct their personal information, or to opt-out of certain disclosures of their personal information; and enter into specific contractual provisions with service providers that process California resident personal information on the business’s behalf.
The enactment of the CCPA has prompted a wave of similar legislative developments in other states in the United States, which has created a patchwork of overlapping but different state laws. For example, since the CCPA went into effect, comprehensive privacy statutes that share similarities with the CCPA are now in effect and enforceable in Virginia, Colorado, Connecticut, Utah, Florida, Texas, and Oregon, and will soon be enforceable in several other states as well. Similar laws have been proposed in many other states and at the federal level as well. Certain states have also enacted new laws regulating specific types of personal information, such as health and biometric data or children’s data, some of which impose onerous notice and consent obligations, prohibit certain personal information processing, and/or provide for a private right of action. As a result, our processing of certain sensitive data, such as biometric data and geolocation data, in such states may subject us to additional compliance obligations and expose us to increased risk of liability. Moreover, the FTC and state attorneys general have focused particular attention on the processing of biometric data in recent years, which elevates the risk of our processing of such data even in states that have not enacted specific laws.
Additionally, we may be considered a “financial institutions” under the Gramm-Leach Bliley Act (the “GLBA”). The GLBA regulates, among other things, the use of certain information about individuals (“non-public personal information”) in the context of the provision of financial services, including by banks and other financial institutions. The GLBA includes both a “Privacy Rule,” which imposes obligations on financial institutions relating to the use or disclosure of non-public personal information, and a “Safeguards Rule,” which imposes obligations on financial institutions and, indirectly, their service providers to implement and maintain physical, administrative and technological measures to protect the security of non-public personal financial information. Any failure to comply with the GLBA could result in substantial financial penalties. Moreover, in recent years, regulators such as the CFPB have proposed rulemaking packages focused on implementing additional oversight on large nonbank payment companies, including digital wallet services, which could indirectly affect our business. Increased regulatory scrutiny on data use and consumer protection practices in this industry may require us to adjust our data management protocols and modify our partnerships with digital wallets and payment apps that fall under the new regulations, potentially impacting our business, results of operations, and financial condition.
There are various risks associated with the facilitation of payments from customers, including risks related to fraud, compliance with existing and evolving rules and regulations, and reliance on third parties and any failure to comply with laws and regulations related to payments, fraud, anti-money laundering and money transmission or failure of a third party to perform could harm our business, results of operations and financial condition.
We rely upon third-party service providers, payment processors and financial institution partners to provide key components of our services on our behalf, including payments processing and disbursement. Our utilization of such payment processing tools may be impacted by factors outside of our control, including disruptions in the payment processing industry generally. If these service providers, processors or partners do not perform adequately, or if our relationships with these service providers were to change or terminate, it could negatively affect our customers’ ability to complete transactions, and our ability to operate our services. This could decrease revenue, increase costs, lead to potential legal liability and negatively impact our brands and business. In addition, if these providers increase the fees they charge us, our operating expenses could increase. Alternatively, if we respond by increasing the fees we charge to our customers, some customers may stop using our services or even close their accounts altogether.
Moreover, if we or any of our third-party payment processors or financial institution partners experience a security breach affecting payment card information, we could be subjected to fines, penalties and assessments arising out of state and federal regulatory enforcement, liability to consumers, the major card brands’ rules and regulations, contractual indemnification obligations or other obligations contained in user agreements and similar contracts, and we may lose our ability to accept card payments for our services.
Our ability to expand our services into additional countries is dependent upon the third-party service providers and partners we use to support our services. As we expand the availability of our services to additional markets or make new payment methods available to our customers in the future, we may become subject to additional and evolving regulations and compliance requirements, and may be exposed to heightened fraud risk, which could lead to an increase in our operating expenses.
The laws and regulations related to payments and financial services are complex and vary across different jurisdictions in the U.S. and globally. Furthermore, changes in laws, rules and regulations have occurred and may occur in the future, which may impact our business practices. We may be required to expend considerable time and effort to determine if such laws and regulations apply to our business and may be required to spend significant time and effort to comply, and ensure we are in compliance, with those laws and regulations. Any failure or claim of our failure to comply or any failure by our third-party service providers and partners to comply with such laws and regulations or other requirements, including the payment network rules and Payment Card Industry Data Security Standard, could divert substantial resources, result in liabilities or force us to stop offering our services, which will harm our business and results of operations.
There can be no assurance that we meet, or we will be able to meet, all compliance obligations under applicable law, including obtaining any such licenses in all of the jurisdictions we operate in or offer a service in, and, even if we were able to do so, there could be substantial costs and potential product changes involved in complying with such laws, which could have a material and adverse effect on our business financial condition and results of operations. Any noncompliance by us in relation to existing or new laws and regulations, or any alleged noncompliance, could result in reputational damage, litigation, penalties, fines, increased costs or liabilities, damages or require us to stop offering payment services in certain markets. For example, if we are deemed to be a money transmitter, including a money services business, provider of prepaid access, or any other similar term defined by applicable money transmission or money services business laws, or virtual currency business we could be subject to certain laws, rules and regulations enforced by multiple authorities and governing bodies in the U.S. and numerous state and local agencies who may define money transmitter and virtual currency business differently. For example, certain states may have a more expansive view of money transmitters and virtual currency business activities. Additionally, outside of the U.S., we could be subject to additional laws, rules and regulations related to the provision of payments and financial services, and as we expand into new jurisdictions, the foreign regulations and regulators governing our business that we are subject to will expand as well. If we are found to be a money transmitter or virtual currency business under any applicable regulation and we are not in compliance with such regulations, we may be subject to fines or other penalties in one or more jurisdictions levied by federal, state or local regulators, including state Attorneys General, as well as those levied by foreign regulators. In addition to fines and penalties, consequences for failing to comply with applicable rules and regulations could include criminal and civil proceedings, forfeiture of significant assets or other enforcement actions. We could also be required to make changes to our business practices or compliance programs as a result of regulatory scrutiny. In addition, failure to predict how a U.S. law or regulation or a law or regulation from another jurisdiction in which we operate with respect to money transmission or similar requirements apply or will be applied to us could result in licensure or registration requirements, administrative enforcement actions and/or could materially interfere with our ability to offer certain payment methods or to conduct our business in particular jurisdictions. We cannot predict what actions the U.S. or other governments may take or what restrictions these governments may impose that will affect our ability to process, accept or transmit payments or to conduct our business in particular jurisdictions. Further, we may become subject to changing payment and financial services regulations and requirements that could potentially affect the compliance of our current payment processes and increase the operational costs we incur to support payments. The factors identified here could impose substantial additional costs, involve considerable delay to the development or provision of our solutions, require significant and costly operational changes, or prevent us from providing our products or solutions in any given market.
We are also subject to rules governing electronic funds transfers and payment card association rules. We may also be directly or indirectly liable to the payment networks for rule violations. Payment networks set and interpret their network operating rules and may allege that our business model violates these operating rules. If such allegations are not resolved favorably, they may result in significant fines and penalties or require changes in our business practices that may be costly and adversely affect our business. The payment networks could adopt new operating rules or interpret or reinterpret existing rules, including as a result of a change in our designation by major payment card providers or by a payment network, that we or our processors might find difficult or even impossible to follow, or costly to implement. As a result, we could lose our ability to give customers the option of using cards to fund their accounts or purchases or the choice of currency in which they would like their card to be charged or we may be required to change our business operations. If we are unable to accept cards or are limited in our ability to do so, our business would be adversely affected. In addition, any increase to fees charged or interchange assessed under, or increased costs associated with compliance with, payment network rules or payment card provider rules could lead to increased fees and costs for us or our customers, which may negatively impact payments on our services and usage of our services. Payment networks have imposed, and may impose in the future, special fees on the purchase of crypto assets, including on our platform, which could negatively impact us and significantly increase our costs. We could attempt to pass these increases along to our customers, but this could negatively impact our business or result in the loss of customers, thereby reducing our revenue and earnings. If competitive practices prevent us from passing along the higher fees to our customers in the future, we may have to absorb all or a portion of such increases, thereby increasing our operating costs and reducing our earnings.
Due to the risk of our platform being used for illegal or illicit activity, any perceived or actual breach of compliance by us with respect to anti-money laundering (“AML”) laws, rules and regulations, including the Bank Secrecy Act, USA Patriot Act and Title 18 U.S.C. Sections 1956-57 and 1960, could have a significant impact on our reputation and could cause us to lose customers, prevent us from obtaining new customers, require us to expend significant funds to remedy civil and criminal problems caused by violations and to avert further violations and expose us to legal risk and potential liability that could have a material effect on our business. Several of these laws require certain companies to adopt an AML compliance program, including those companies that are characterized as a federal money services business or state money transmitter. Moreover, many states have their own AML and money transmitter and virtual currency regulatory regimes and interpretations and applications of those legal principles are complex and varied. If the federal government or any state government took the position that we were a money services business, money transmitter or virtual currency business, they could require us to register as such and obtain money transmitter or virtual currency licenses. Furthermore, should a federal or state regulator make a determination that we have operated as an unlicensed money services business, money transmitter, or virtual currency business, we could be subject to civil and criminal fines, penalties, costs, legal fees, reputational damage or other negative consequences, all of which may have an adverse effect on our business, financial condition and results of operations.
Risks Related to Third Parties
We rely on our program agreement with Sutton Bank to offer our Fold prepaid card product. If our relationship with Sutton Bank were to end, the ability to continue to offer our card product would be affected, which could affect our financial and business results.
We market Fold prepaid cards issued by Sutton Bank to consumers through a program agreement with Bank, our bank partner for the card. If our relationship with Sutton Bank were to end or if Sutton Bank were to cease or restrict operations, our ability to continue to offer our card product would be affected, which could adversely affect our financial and business results. In such an event, we would need to partner with a different bank to continue to offer the Fold Card product (as defined below). If we partner with a new bank, issuance and servicing of the Fold Card product could be disrupted and delayed as we transition to a different bank partner. We also may face increased costs and compliance burdens if the program agreement with Sutton Bank is terminated.
Sutton Bank is subject to regulation and supervision by the Federal Deposit Insurance Corporation (“FDIC”). Many laws and regulations that apply directly to Sutton Bank indirectly impact us (and our products) as Sutton Bank’s service provider. As such, our partnership with Sutton Bank is subject to the supervision and enforcement authority of the FDIC, Sutton Bank’s primary banking regulator.
We may in the future, enter into partnerships, collaborations, joint ventures, or strategic alliances with third parties. If we are unsuccessful in establishing or maintaining strategic relationships with these third parties or if these third parties fail to deliver certain operational services, our business, operating results, and financial condition could be adversely affected.
We may in the future, enter into partnerships, collaborations, joint ventures, or strategic alliances with third parties in connection with the development, operation and enhancements to our platform and products and the provision of our services. For example, we may partner with additional Bitcoin custody or service providers to expand the reach of our services or increase resilience of our network, or we may partner with other companies to provide new products or services such as a credit card or savings product. Identifying strategic relationships with third parties, and negotiating and documenting relationships with them may be time-consuming and complex and may distract management. Moreover, we may be delayed, or not be successful, in achieving the objectives that we anticipate as a result of such strategic relationships. In evaluating counterparties in connection with partnerships, collaborations, joint ventures or strategic alliances, we consider a wide range of economic, legal and regulatory criteria depending on the nature of such relationship, including the counterparties’ reputation, operating results and financial condition, operational ability to satisfy our and our customers’ needs in a timely manner, efficiency and reliability of systems, certifications costs to us or to our customers, and licensure and compliance status. Despite this evaluation, third parties may still not meet our or our customers’ needs which may adversely affect our ability to deliver products and services to customers, may adversely impact our business, operating results, and financial condition. Counterparties to any strategic relationship may have economic or business interests or goals that are, or that may become, inconsistent with our business interests or goals, and may subject us to additional risks to the extent such third party becomes the subject of negative publicity, faces its own litigation or regulatory challenges, or faces other adverse circumstances. Conflicts may arise with our strategic partners, such as the interpretation of significant terms under any agreement, which may result in litigation or arbitration which would increase our expenses and divert the attention of our management. If we are unsuccessful in establishing or maintaining strategic relationships with third parties, our ability to compete in the marketplace or to grow our revenue could be impaired and our business, operating results, and financial condition could be adversely affected.
We rely on third parties in connection with many aspects of our business, including payment processors, banks, and payment gateways to process transactions; cloud computing services and data centers that provide facilities, infrastructure, website functionality and access, components, and services, including databases and data center facilities and cloud computing; as well as third parties that provide outsourced customer service, compliance support and product development functions, which are critical to our operations. Because we rely on third parties to provide these services and to facilitate certain of our business activities, we face increased operational risks. We do not directly manage the operation of any of these third parties, including their data center facilities that we use. These third parties may be subject to financial, legal, regulatory, and labor issues, cybersecurity incidents, data theft or loss, break-ins, computer viruses or vulnerabilities in their code, denial-of-service attacks, sabotage, acts of vandalism, loss, disruption, or instability of third-party banking relationships, privacy breaches, service terminations, disruptions, interruptions, and other misconduct. They are also vulnerable to damage or interruption from human error, power loss, telecommunications failures, fires, floods, earthquakes, hurricanes, tornadoes, pandemics and similar events. In addition, these third parties may breach their agreements with us, disagree with our interpretation of contract terms or applicable laws and regulations, refuse to continue or renew these agreements on commercially reasonable terms or at all, fail or refuse to process transactions or provide other services adequately, take actions that degrade the functionality of our services, impose additional costs or requirements on us or our customers, or give preferential treatment to competitors. There can be no assurance that third parties that provide services to us or to our customers on our behalf will continue to do so on acceptable terms, or at all. If any third parties do not adequately or appropriately provide their services or perform their responsibilities to us or our customers on our behalf, such as if third-party service providers to close their data center facilities without adequate notice, are unable to restore operations and data, fail to perform as expected, or experience other unanticipated problems, we may be unable to procure alternatives in a timely and efficient manner and on acceptable terms, or at all, and we may be subject to business disruptions, losses or costs to remediate any of the deficiencies, customer dissatisfaction, reputational damage, legal or regulatory proceedings, or other adverse consequences which could harm our business.
We rely on our agreements with Fortress and BitGo to offer our Bitcoin-related services. If our relationship with either Fortress or BitGo were to end, the ability to continue to offer our Bitcoin services would be affected, which could affect our financial and business results.
We market certain Bitcoin services offered or supported by the Bitcoin Service Providers to consumers through program agreements with the Bitcoin Service Providers. Fold utilizes both Fortress and BitGo for the purpose of providing operational redundancy in the event of technical or regulatory limitations at one or the other. In addition, certain states are supported by only one of the two Bitcoin Service Providers, and those states can change from time to time based on the licensing status of each provider. If our relationship with one of the Bitcoin Service Providers were to end, or if either of the Bitcoin Service Providers were to restrict or cease operations, our ability to continue to offer Bitcoin services would be affected, which could adversely affect our financial and business results. In such an event, we may need to partner with a different financial institution with authority to provide services substantially similar to our Bitcoin services to continue to offer these services. If we partner with a new crypto service provider, our Bitcoin-related services would be disrupted and delayed as customers would be required to open new accounts with a different Bitcoin service provider, and as we transition connectivity of our information technology systems to such different financial institution partner. We also may face increased costs and compliance burdens if our program agreement with one of the Bitcoin Service Providers is terminated. We entered into our agreement with Fortress in June, 2023, whereby Fortress would custody Bitcoin on behalf of our customers itself or use BitGo as a sub-custodian in states where BitGo was not authorized to provide custody services directly. In August, 2024, we entered into an agreement directly with BitGo, and we anticipate that over time more of our customers will be serviced under this direct relationship with BitGo.
Fortress is subject to regulation and supervision by the Division of Financial Institutions of the Nevada Department of Business and Industry, and BitGo is subject to regulation and supervision by the Division of Banking of the South Dakota Department of Labor and Regulation. In addition, certain custodial services are provided by BitGo’s affiliate BitGo New York Trust Company LLC, which is subject to regulation and supervision by the New York Department of Financial Services. In addition, the Bitcoin Service Providers are subject to regulation and supervision by many other state banking and financial institution regulators (individually and collectively, “State Banking Departments”). Many laws and regulations that apply directly to the Bitcoin Service Providers indirectly impact us (and our products) as a partner of the Bitcoin Service Providers. As such, our partnerships with the Bitcoin Service Providers may be subject to the supervision and enforcement authority of the State Banking Departments.
Our customers enter into agreements directly with Sutton Bank and our Bitcoin Service Providers.
Our customers enter into agreements for banking services directly with Sutton Bank, and enter into agreements for Bitcoin-related services directly with one or more of the Bitcoin Service Providers. Our third-party service providers have not agreed to indemnify us for losses based on their breaches of their agreements with our customers. Although our terms of use clearly state that we are not responsible for the services provided by those third parties, it is possible that customers could blame us for a failure by one of those third parties to fulfill its obligations. This could have a material adverse impact on our reputation and business.
We are subject to risks related to the banking and financial services ecosystem, and to our banking and crypto service providers specifically.
Volatility in the banking and financial services sectors and regulatory enforcements by the FDIC or other regulators may impact our bank partnerships and could negatively impact our business. For example, we offer certain FDIC-insured products through our partnership with Sutton Bank, a member of the FDIC, and if the FDIC were to seek to enter into an enforcement action against Sutton Bank, it may adversely impact our business or relationship with Sutton Bank. For example, in February 2024, Sutton Bank became subject to an FDIC enforcement order that, among other things, required Sutton Bank to correct certain banking practices and within 60 days devise a plan to review all prepaid card customers since July 1, 2020 for compliance with anti-money laundering requirements. Similarly, for certain Bitcoin related services, we partner with the Bitcoin Service Providers, which are regulated by various federal and state regulators, and if such regulators were to enter into an enforcement action against either of the Bitcoin Service Providers, it may adversely impact our business or relationship with them. In addition, although we believe our banking and financial services programs comply with all applicable law, if Sutton Bank or Bitcoin Service Providers fail to comply with applicable law, it may adversely impact our business and reputation.
Although we believe our banking partner maintains proper records and satisfies requirements for each eligible participant’s deposits to be covered by FDIC insurance, up to the applicable maximum deposit insurance amount, the FDIC may disagree. In such an event, the FDIC may not recognize the participants’ claims as covered by deposit insurance in the event Sutton Bank fails and enters receivership proceedings under the Federal Deposit Insurance Act (“FDIA”). If the FDIC were to determine that funds held at Sutton Bank are not covered by deposit insurance, or if Sutton Bank were to fail and enter receivership proceedings under the FDIA, our customers may seek to withdraw their funds, or may not be able to withdraw all their funds in a timely manner, which could adversely affect our brand, business and results of operations, and may lead to claims or litigation, which may be costly to address. Additionally, in instances where we are a service-provider to or are otherwise in a third-party relationship with Sutton Bank in connection with these programs, we are subject to certain risk-management standards for third-party relationships in accordance with federal bank regulatory guidance and examinations by the federal banking regulators.
We intend to continue to explore other products, models, and structures for our product offerings, including with existing and new bank and cryptocurrency partners. Certain of our current product offerings may subject us to reporting requirements, bonding requirements, and inspection by applicable federal or state regulatory agencies, and our future product offerings may potentially require, or be deemed to require, additional data, procedures, partnerships, licenses, regulatory approvals, or capabilities that we have not yet obtained or developed. Should we fail to successfully expand and evolve our product offerings, or should our new products, models or structures, or new laws or regulations or interpretations of existing laws or regulations, impose requirements on us that are cumbersome or that we cannot satisfy, our business may be materially and adversely affected.
Any change to the Bitcoin Service Providers’ fee schedules could adversely impact our business.
We rely on our cryptocurrency custody providers to process customers’ Bitcoin transactions and we pay these providers fees for their services. From time to time, our crypto custody providers have increased, and may increase in the future, the fees they charge for the provision of custody services and for transactions that use their networks. While these fees are payable directly by our customers, any increases in such fees might result in the loss of customers to other custodians or cryptocurrency platforms.
We are subject to economic and geopolitical risk, business cycles, and the overall level of consumer, business and government spending, which could negatively affect our business, financial condition, results of operations, and cash flows.
The payments technology industry depends heavily on the overall level of consumer, business and government spending. We are exposed to general economic conditions that affect consumer confidence, spending, and discretionary income and changes in consumer purchasing habits. A sustained deterioration in general economic conditions in the markets in which we operate, supply chain disruptions, inflationary pressure or interest rate fluctuations may adversely affect our financial performance by reducing demand for cryptocurrencies and cryptocurrency-based services and thereby reducing transaction volumes. A reduction in transaction volumes could result in a decrease in our revenues and profits.
A downturn in the economy could force retailers or financial institutions to close or petition for bankruptcy protection, resulting in lower revenue and earnings for us. We also have a certain amount of fixed costs, such as rents and salaries, which could limit our ability to quickly adjust costs and respond to changes in our business and the economy. Changes in economic conditions could also adversely affect our future revenues and profits and cause a materially adverse effect on our business, financial condition, results of operations, and cash flows.
In addition, our business, growth, financial condition or results of operations could be materially adversely affected by instability or changes in a country’s or region’s economic conditions; inflation; changes in laws or regulations or in the interpretation of existing laws or regulations, whether caused by a change in government or otherwise; increased difficulty of conducting business in a country or region due to actual or potential political or military conflict; or action by the U.S. or foreign governments that may restrict our ability to transact business in a foreign country or with certain foreign individuals or entities. A possible slowdown in global trade caused by increasing tariffs or other restrictions could decrease consumer or corporate confidence and reduce consumer, government and corporate spending in countries inside or outside the U.S., which could adversely affect our operations. Climate-related events, including extreme weather events and natural disasters and their effect on critical infrastructure in the U.S. or internationally, could have similar adverse effects on our operations, users, or third-party suppliers.
We depend on major mobile operating systems and third-party platforms for the distribution of certain products. If Google Play, the Apple App Store, or other platforms prevent customers from downloading our apps, our ability to grow may be adversely affected.
We rely upon third-party platforms for the distribution of certain products and services. Our Fold app is provided as a free application through both the Apple App Store and the Google Play Store. The Google Play Store and Apple App Store are global application distribution platforms and the main distribution channels for our app. As such, the promotion, distribution, and operation of our app is subject to the respective platforms’ terms and policies for application developers, which are very broad and subject to frequent changes and re-interpretation. Further, these distribution platforms often contain restrictions related to crypto assets that are uncertain, broadly construed, and can limit the nature and scope of services that can be offered. If our products are found to be in violation of any such terms and conditions, we may no longer be able to offer our products through such third-party platforms. There can be no guarantee that third-party platforms will continue to support our product offerings, or that customers will be able to continue to use our products. Any changes, bugs, technical or regulatory issues with third-party platforms, our relationships with mobile manufacturers and carriers, or changes to their terms of service or policies could degrade our products’ functionalities, reduce or eliminate our ability to distribute our products, give preferential treatment to competitive products, limit our ability to deliver high quality offerings, or impose fees or other charges, any of which could affect our product usage and harm our business.
We rely on search engines, social networking sites, and other web-based platforms to attract a meaningful portion of our users, and if those search engines, social networking sites and other web-based platforms change their listings or policies regarding advertising, or increase their pricing or suffer problems, it may limit our ability to attract new users.
Many users locate our website through internet search engines, such as Google, and advertisements on social networking sites and other web-based platforms. If we are listed less prominently or fail to appear in search results for any reason, downloads of our mobile application, and visits to our website and kiosks, could decline significantly, and we may not be able to replace this traffic. Search engines revise their algorithms from time to time in an attempt to optimize their search results. If the search engines on which we rely for algorithmic listings modify their algorithms, we may appear less prominently or not at all in search results, which could result in reduced traffic to our website that we may not be able to replace. Additionally, if the costs of search engine marketing services, such as Google AdWords, increase, we may incur additional marketing expenses, we may be required to allocate a larger portion of our marketing spend to this channel or we may be forced to attempt to replace it with another channel (which may not be available at reasonable prices, if at all), and our business, financial condition and results of operations could be adversely affected.
Furthermore, competitors may in the future bid on search terms that we use to drive traffic to our website and engagement with current and potential users. Such actions could increase our marketing costs and result in decreased traffic to our website or use of our application. In addition, search engines, social networking sites and other web-based platforms may change their advertising policies from time to time. If any change to these policies delays or prevents us from advertising through these channels, it could result in reduced traffic to our website or use of our application. Additionally, new search engines, social networking sites and other web-based platforms may develop in specific jurisdictions or more broadly that reduce traffic on existing search engines, social networking sites and other web-based platforms. Moreover, the use of voice recognition technology such as Alexa, Google Assistant, Cortana, or Siri may drive traffic away from search engines, potentially resulting in reduced traffic to our website or use of our application. If we are not able to achieve awareness through advertising or otherwise, we may not achieve significant traffic to our website or mobile application.
Risks Related to Intellectual Property
Our business depends in large part on our proprietary technology and our brand. We rely on, and expect to continue to rely on, a combination of trademark, copyright, trade secret and other intellectual property laws, as well as confidentiality and license agreements with our employees, contractors, consultants, and third parties with whom we have relationships, to establish and protect our brand, our proprietary technology and our intellectual property rights. However, our efforts to protect our intellectual property rights may not be sufficient or effective and may not adequately permit us to gain or keep any competitive advantage. Despite our efforts to obtain and maintain intellectual property rights, we cannot guarantee that will be able to prevent unauthorized use or disclosure of our confidential information, intellectual property or technology, and any of our intellectual property rights may be challenged, which could result in them being narrowed in scope or declared invalid or unenforceable. There can be no assurance that our intellectual property rights will be sufficient to protect against others offering products, services, or technologies that are substantially similar to ours and that compete with our business.
Effective protection of our intellectual property may be expensive and difficult to maintain, both in terms of application and registration costs as well as the costs of defending and enforcing those rights. As we have grown, we have sought to obtain and protect our intellectual property rights in an increasing number of countries, a process that can be expensive and may not always be successful. Further, intellectual property protection may not be available to us in every country in which our products and services may become available.
We may be sued by third parties for alleged infringement of their intellectual property rights.
In recent years, there has been considerable patent, copyright, trademark, domain name, trade secret and other intellectual property development activity in the cryptocurrency and payments industries, as well as litigation, based on allegations of infringement or other violations of intellectual property, including by large financial institutions. Furthermore, individuals and groups can purchase patents and other intellectual property assets for the purpose of making claims of infringement to extract settlements from companies like ours. Our use of third-party intellectual property rights also may be subject to claims of infringement. We cannot guarantee that our internally developed or acquired technologies and content do not or will not infringe or otherwise violate the intellectual property rights of others. From time to time, our competitors or other third parties may claim that we are infringing or have misappropriated their intellectual property rights, and we may be found liable as a result. Any claims or litigation, whether having merit or not, could cause us to incur significant expenses and may be time consuming to defend. And if any such claims are successfully asserted against us, we could be required to pay substantial damages or ongoing royalty payments, we could be prevented from offering our products or services or using certain technologies, or we could be forced to implement expensive work-arounds. We expect that the occurrence of infringement claims related to our Bitcoin related products and services is likely to grow as the Bitcoin market grows and matures. Accordingly, our exposure to damages resulting from infringement claims could increase and potentially exhaust our financial and management resources. Further, during the course of any litigation, we may make announcements regarding the results of hearings and motions, and other interim developments. If securities analysts and investors regard these announcements as negative, the market price of our common stock may decline. Even if intellectual property claims are meritless, do not result in litigation or are resolved in our favor, these claims, and the time and resources necessary to resolve them, could divert the resources of our management and require significant expenditures. Any of the foregoing could prevent us from competing effectively and could have an adverse effect on our business, operating results, and financial condition.
Our technology platform includes software licensed to us by third-party authors under “open source” licenses. Use and distribution of open source software may entail greater risks than use of third-party commercial software, as open source licensors generally do not provide support, warranties, indemnification or other contractual protections regarding infringement claims or the quality of the code. In addition, the public availability of such software may make it easier for others to compromise our technology or services.
Some open source licenses contain requirements that we make available source code for modifications or derivative works we create based upon the type of open source software we use, or grant other licenses to our intellectual property. If we combine our proprietary software with open source software in a certain manner, we could, under certain open source licenses, be required to release the source code of our proprietary software to the public, be precluded from charging fees to users of our proprietary software, or be required to license our proprietary software for purposes of making derivative works. Among other things, this would allow our competitors to create similar offerings with lower development effort and time and ultimately could result in a loss of competitive advantage. While we try to avoid subjecting our proprietary software to such open-source licenses, we cannot guarantee we will always be successful, and if we discover any potential open-source issues, we could be required to expend substantial time and resources to re-engineer some or all of our software.
We have not recently conducted an extensive audit of our use of open source software and, as a result, we cannot assure you that our processes for controlling our use of open source software in our platform are, or will be, effective. If we are held to have breached or failed to fully comply with all the terms and conditions of an open source software license, we could face litigation or other liability, or be required to seek costly licenses from third parties to continue providing our offerings on terms that are not economically feasible, to re-engineer our platform, to discontinue or delay the provision of our offerings if re-engineering could not be accomplished on a timely basis or to make generally available, in source code form, our proprietary code, any of which could adversely affect our business, operating results, and financial condition. Moreover, the terms of many open source licenses have not been interpreted by U.S. or foreign courts. As a result, there is a risk that these licenses could be construed in a way that could impose unanticipated conditions or restrictions on our ability to provide or distribute our platform. From time to time, there have been claims challenging the ownership of open source software against companies that incorporate open source software into their solutions. As a result, we could be subject to lawsuits by parties claiming ownership of what we believe to be open source software. Any of the foregoing could have a material adverse effect on our business, financial condition and results of operations.
We operate in a relatively new industry that is not widely understood and requires highly skilled and technical personnel. We believe that our future success is highly dependent on the talents and contributions of our senior management team, including Mr. Reeves, our co-founder and Chief Executive Officer, members of our executive team, and other key employees across product, engineering, risk management, finance, compliance and legal, and marketing. Our future success depends on our ability to attract, develop, motivate, and retain highly qualified and skilled employees. Due to the nascent nature of the cryptoeconomy, the pool of qualified talent is extremely limited, particularly with respect to executive talent, engineering, risk management, and financial regulatory expertise. We face intense competition for qualified individuals from numerous software and other technology companies. To attract and retain key personnel, we incur significant costs, including salaries, benefits and equity incentives. Even so, these measures may not be enough to attract and retain the personnel we require to operate our business effectively. The loss of even a few key employees or senior leaders, or an inability to attract, retain and motivate additional highly skilled employees required for the planned expansion of our business could adversely impact our operating results and impair our ability to grow.
Our culture emphasizes innovation, and if we cannot maintain this culture, our business and operating results could be adversely impacted.
We believe that our entrepreneurial and innovative corporate culture has been a key contributor to our success. We encourage and empower our employees to develop and launch new and innovative products and services, which we believe is essential to attracting high quality talent, partners, and developers, as well as serving the best, long-term interests of our company. If we cannot maintain this culture, we could lose the innovation, creativity and teamwork that has been integral to our business. Additionally, from time to time, we realign our resources and talent to implement stage-appropriate business strategies, including furloughs, layoffs, or reductions in force. In such cases, we may find it difficult to prevent a negative effect on employee morale or attrition beyond our planned reduction, in which case our products and services may suffer and our business, operating results, and financial condition could be adversely impacted.
Employee or service provider misconduct or error could subject us to legal liability, financial losses, and regulatory sanctions and could seriously harm our reputation and negatively affect our business. Such misconduct could include engaging in improper or unauthorized transactions or activities, misappropriation of customer funds, insider trading and misappropriation of information, failing to supervise other employees or service providers, improperly using confidential information, as well as improper trading activity such as spoofing, layering, wash trading, manipulation and front-running. Employee or service provider errors, including mistakes in executing, recording, or processing transactions for customers, could expose us to the risk of material losses even if the errors are detected. Although we have implemented processes and procedures and provide trainings to our employees and service providers to reduce the likelihood of misconduct and error, these efforts may not be successful. Moreover, the risk of employee or service provider error or misconduct may be even greater for novel products and services and is compounded by the fact that many of our employees and service providers are accustomed to working at tech companies which generally do not maintain the same compliance customs and rules as financial services firms. This can lead to high risk of confusion among employees and service providers with respect to compliance obligations, particularly including confidentiality, data access, trading, and conflicts. It is not always possible to deter misconduct, and the precautions we take to prevent and detect this activity may not be effective in all cases. If we were found to have not met our regulatory oversight and compliance and other obligations, we could be subject to regulatory sanctions, financial penalties, restrictions on our activities for failure to properly identify, monitor and respond to potentially problematic activity and seriously damage our reputation. Our employees, contractors, and agents could also commit errors that subject us to financial claims for negligence, as well as regulatory actions, or result in financial liability. Further, allegations by regulatory or criminal authorities of improper trading activities could affect our brand and reputation.
General Risk Factors
Our performance is subject to general economic conditions, and their impact on the Bitcoin market and our customers. The United States and other key international economies have experienced cyclical downturns from time to time in which economic activity declined resulting in lower consumption rates, restricted credit, reduced profitability, weaknesses in financial markets, bankruptcies, and overall uncertainty with respect to the economy. Adverse general economic conditions have impacted the cryptoeconomy, although the extent of which remains uncertain and dependent on a variety of factors, including market adoption of crypto assets, global trends in the cryptoeconomy, central bank monetary policies, instability in the global banking system and other events beyond our control. Geopolitical developments, such as trade wars and foreign exchange limitations can also increase the severity and levels of unpredictability globally and increase the volatility of global financial and crypto asset markets. For example, the capital and credit markets have experienced extreme volatility and disruptions, resulting in steep declines in the value of Bitcoin. To the extent general economic conditions and the Bitcoin market materially deteriorate or the current decline continues for a prolonged period, our ability to generate revenue and to attract and retain customers could suffer and our business, operating results and financial condition could be adversely affected. Moreover, even if general economic conditions improve, there is no guarantee that the cryptoeconomy will similarly improve.
Further, in 2022, a number of blockchain protocols and crypto financial firms, and in particular protocols and firms involving high levels of financial leverage such as high-yield lending products or derivatives trading, suffered from insolvency and liquidity crises leading to the 2022 Events. Some of the 2022 Events are alleged or have been held to be the result of fraudulent activity by insiders, including misappropriation of customer funds and other illicit activity and internal controls failures. In connection with the 2022 Events, concerns were raised about the potential for a market condition where the failure of one company leads to the financial distress of other companies, which has the potential to depress the prices of assets used as collateral by other firms. If such a market condition were to become widespread in the cryptoeconomy, we could suffer from increased counterparty risk, including defaults or bankruptcies of major customers or counterparties, which could lead to significantly reduced activity on our platform and fewer available Bitcoin market opportunities in general. Further, forced selling of Bitcoin by distressed companies could lead to lower Bitcoin prices and may lead to a reduction in our revenue. To the extent that conditions in the general economic and the Bitcoin market were to materially deteriorate, our ability to attract and retain customers may suffer.
Actual events involving limited liquidity, defaults, non-performance or other adverse developments that affect financial institutions, transactional counterparties or other companies in the financial services industry, or the financial services industry generally, or concerns or rumors about any such events or other similar risks, have in the past and may in the future lead to market-wide liquidity problems. Further, if the instability in the global banking system continues or worsens, there could be additional negative ramifications, such as additional all market-wide liquidity problems or impacted access to deposits and investments for customers of affected banks and certain banking partners, and our business, operating results and financial condition could be adversely affected.
We are a remote-first company which subjects us to heightened operational risks.
Our employees and service providers work from home and we are a remote-first company. This subjects us to heightened operational risks. For example, technologies in our employees’ and service providers’ homes may not be as robust as in an office environment and could cause the networks, information systems, applications, and other tools available to employees and service providers to be more limited or less reliable than in an office environment. Further, the security systems in place at our employees’ and service providers’ homes may be less secure than those used in an office environment, and while we have implemented technical and administrative safeguards to help protect our systems as our employees and service providers work from home, we may be subject to increased cybersecurity risk, which could expose us to risks of data or financial loss, and could disrupt our business operations. There is no guarantee that the data security and privacy safeguards we have put in place will be completely effective or that we will not encounter risks associated with employees and service providers accessing company data and systems remotely. We also face challenges due to the need to operate with the remote workforce and are addressing those challenges to minimize the impact on our ability to operate.
Being a remote-first company may make it more difficult for us to preserve our corporate culture and our employees may have decreased opportunities to collaborate in meaningful ways. Further, we cannot guarantee that being a remote-first company will not have a negative impact on employee morale and productivity. Any failure to preserve our corporate culture and foster collaboration could harm our future success, including our ability to retain and recruit personnel, innovate and operate effectively, and execute on our business strategy.
There is an increasing focus from certain investors, regulators, employees, users and other stakeholders concerning corporate responsibility, specifically related to environmental, social and governance matters (“ESG”). Some investors may use these non-financial performance factors to guide their investment strategies and, in some cases, may choose not to invest in us if they believe our policies and actions relating to corporate responsibility are inadequate. The growing investor demand for measurement of non-financial performance is addressed by third-party providers of sustainability assessment and ratings on companies. The criteria by which our corporate responsibility practices are assessed may change due to the constant evolution of the sustainability landscape, which could result in greater expectations of us and cause us to undertake costly initiatives to satisfy such new criteria. If we elect not to or are unable to satisfy such new criteria, investors may conclude that our policies and actions with respect to corporate social responsibility are inadequate. We may face reputational damage in the event that we do not meet the ESG standards set by various constituencies.
Furthermore, if our competitors’ corporate social responsibility performance is perceived to be better than ours, potential or current investors may elect to invest with our competitors instead. In addition, in the event that we communicate certain initiatives and goals regarding environmental, social and governance matters, we could fail, or be perceived to fail, in our achievement of such initiatives or goals, or we could be criticized for the scope of such initiatives or goals. If we fail to satisfy the expectations of investors, employees and other stakeholders or our initiatives are not executed as planned, our reputation and business, operating results and financial condition could be adversely impacted.
Changes in U.S. and foreign tax laws, as well as the application of such laws, could adversely impact our financial position and operating results.
Our determination of our tax liability is subject to review and may be challenged by applicable U.S. and foreign tax authorities. Any adverse outcome of such a challenge could harm our operating results and financial condition. The determination of our worldwide provision for income taxes and other tax liabilities requires significant judgment and, in the ordinary course of business, there are many transactions and calculations where the ultimate tax determination is complex and uncertain. Moreover, if we become a multinational business, we may have subsidiaries that engage in many intercompany transactions in a variety of tax jurisdictions where the ultimate tax determination is complex and uncertain. Our existing corporate structure and intercompany arrangements have been implemented in a manner we believe is in compliance with current prevailing tax laws. Furthermore, if we operate in multiple taxing jurisdictions, the application of tax laws can be subject to diverging and sometimes conflicting interpretations by tax authorities of these jurisdictions. It is not uncommon for taxing authorities in different countries to have conflicting views with respect to, among other things, the characterization and source of income or other tax items, the manner in which the arm’s-length standard is applied for transfer pricing purposes, or with respect to the valuation of intellectual property. The taxing authorities of the jurisdictions in which we operate or may operate may challenge our tax treatment of certain items or the methodologies we use for valuing developed technology or intercompany arrangements, which could impact our worldwide effective tax rate and harm our financial position and operating results.
Further, any changes in the tax laws governing our activities may increase our tax expense, the amount of taxes we pay, or both. For example, the Tax Cuts and Jobs Act (the “TCJA”), enacted on December 22, 2017, significantly reformed the U.S. federal tax code, reducing the U.S. federal corporate income tax rate, making sweeping changes to the rules governing international business operations, and imposing new limitations on a number of tax benefits, including deductions for business interest and the use of net operating loss carryforwards. Effective beginning in 2022, the TCJA also eliminated the option to immediately deduct research and development expenditures and required taxpayers to amortize domestic expenditures over five years and foreign expenditures over fifteen years. The Inflation Reduction Act of 2022 (the “Inflation Reduction Act”), enacted on August 16, 2022, further amended the U.S. federal tax code, imposing a 15% minimum tax on “adjusted financial statement income” of certain corporations as well as an excise tax on the repurchase or redemption of stock by certain corporations, beginning in the 2023 tax year. In addition, over the last several years, the Organization for Economic Cooperation and Development has been working on a Base Erosion and Profit Shifting Project that, if implemented, would change various aspects of the existing framework under which our tax obligations are determined in many of the countries in which we may do business. As of July 2023, nearly 140 countries have approved a framework that imposes a minimum tax rate of 15%, among other provisions. As this framework is subject to further negotiation and implementation by each member country, the timing and ultimate impact of any such changes on our tax obligations are uncertain. There can be no assurance that future tax law changes will not increase the rate of the corporate income tax, impose new limitations on deductions, credits or other tax benefits, or make other changes that may adversely affect our business, cash flows or financial performance.
In addition, the IRS has yet to issue guidance on a number of important issues regarding the tax treatment of cryptocurrency and the products we provide to our customers and from which we derive our income. In the absence of such guidance, we will take positions with respect to any such unsettled issues. There is no assurance that the IRS or a court will agree with the positions taken by us, in which case tax penalties and interest may be imposed that could adversely affect our business, cash flows or financial performance.
We also are subject to non-income taxes, such as payroll, sales, use, value-added, digital services, net worth, property, and goods and services taxes in the United States and may become subject to similar non-income taxes in various foreign jurisdictions. Specifically, we may be subject to new allocations of tax as a result of increasing efforts by certain jurisdictions to tax activities that may not have been subject to tax under existing tax principles. Companies such as ours may be adversely impacted by such taxes. Tax authorities may disagree with certain positions we have taken. As a result, we may have exposure to additional tax liabilities that could have an adverse effect on our operating results and financial condition.
Realization of our deferred tax assets, in the form of future domestic or foreign tax deductions, credits or other tax benefits, will depend on future taxable income, and there is a risk that some or all of such tax assets could be subject to limitation or otherwise unavailable to offset future income tax liabilities, all of which could adversely affect our operating results. For example, future changes in our stock ownership, the causes of which may be outside of our control, could result in an ownership change under Section 382 of the Internal Revenue Code of 1986, as amended (the “Code”), which could limit our use of such tax assets in certain circumstances. Similarly, additional changes may be made to U.S. (federal and state) and foreign tax laws which could further limit our ability to fully utilize these tax assets against future taxable income.
Under the Inflation Reduction Act, our ability to utilize tax deductions or losses from prior years may be limited by the imposition of the 15% minimum tax if, in future years, such minimum tax applies to us. Therefore, we may be required to pay additional U.S. federal income taxes in future years despite any available future tax deductions, U.S. federal net operating loss (“NOL”) carryforwards, credits or other tax benefits that we accumulate.
The preparation of financial statements in conformity with generally accepted accounting principles (“GAAP”) requires management to make estimates and assumptions that affect the amounts reported in the financial statements and accompanying notes. We base our estimates on historical experience and on various other assumptions that we believe to be reasonable under the circumstances. The results of these estimates form the basis for making judgments about the carrying values of assets, liabilities, and equity, and the amount of revenue and expenses that are not readily apparent from other sources. Significant estimates and judgments that comprise our critical accounting estimates involve the valuation of assets acquired and liabilities assumed in business combinations, valuation of strategic investments, evaluation of tax positions, and evaluation of legal and other contingencies. Our operating results may be adversely affected if our assumptions change or if actual circumstances differ from those in our assumptions, which could cause our operating results to fall below the expectations of analysts and investors, resulting in a decline in the trading price of our stock.
Natural disasters or other catastrophic events may also cause damage or disruption to our operations, international commerce, and the global economy, and could have an adverse effect on our business, operating results, and financial condition. Our business operations are subject to interruption by natural disasters, fire, power shortages, and other events beyond our control. In addition, our global operations expose us to risks associated with public health crises, such as pandemics and epidemics, which could harm our business and cause our operating results to suffer. For example, the COVID-19 pandemic and the related precautionary measures that we adopted have in the past resulted, and could in the future result, in difficulties or changes to our customer support, or create operational or other challenges, any of which could adversely impact our business and operating results. Further, acts of terrorism, labor activism or unrest, and other geopolitical unrest, including ongoing regional conflicts around the world, could cause disruptions in our business or the businesses of our partners or the economy as a whole. In the event of a natural disaster, including a major earthquake, blizzard, or hurricane, or a catastrophic event such as a fire, power loss, or telecommunications failure, we may be unable to continue our operations and may endure system interruptions, reputational harm, delays in development of our platform, lengthy interruptions in service, breaches of data security, and loss of critical data, all of which could have an adverse effect on our future operating results. We do not maintain insurance sufficient to compensate us for the potentially significant losses that could result from disruptions to our services. Additionally, all the aforementioned risks may be further increased if we do not implement a disaster recovery plan or our partners’ disaster recovery plans prove to be inadequate. To the extent natural disasters or other catastrophic events concurrently impact data centers we rely on in connection with private key restoration, customers will experience significant delays in withdrawing funds, or in the extreme we may suffer loss of customer funds.
We have funded our operations since inception primarily through debt, equity financings and revenue generated by our products and services. We cannot be certain when or if our operations will generate sufficient cash to fully fund our ongoing operations or the growth of our business. We intend to continue to make investments in our business, including developing new products and services, enhancing our operating infrastructure, expanding our international operations, and acquiring complementary businesses and technologies, all of which may require us to secure additional funds. Additional financing may not be available on terms favorable to us, if at all, including due to general macroeconomic conditions, crypto market conditions and any disruptions in the crypto market, instability in the global banking system, increasing regulatory uncertainty and scrutiny or other unforeseen factors. In addition, even if debt financing is available, the cost of additional financing may be significantly higher than our current debt. If we incur additional debt, the debt holders would have rights senior to holders of our common stock to make claims on our assets, and the terms of any debt could restrict our operations, including our ability to pay dividends on our common stock. If we issue additional equity securities, stockholders will experience dilution, and the new equity securities could have rights senior to those of our currently authorized and issued common stock. The trading prices for our common stock may be highly volatile, which may reduce our ability to access capital on favorable terms or at all. In addition, a slowdown or other sustained adverse downturn in the general economic or Bitcoin market could adversely affect our business and the value of our common stock. Because our decision to raise capital in the future will depend on numerous considerations, including factors beyond our control, we cannot predict or estimate the amount, timing, or nature of any future issuances of securities. As a result, our stockholders bear the risk of future issuances of debt or equity securities reducing the value of our common stock and diluting their interests. Our inability to obtain adequate financing or financing on terms satisfactory to us, when we require it, could significantly limit our ability to continue supporting our business growth and responding to business challenges.
Risks Related to Being a Public Company Following the Business Combination
The market price of shares of our common stock may be volatile or may decline regardless of our operating performance. You may lose some or all of your investment.
The trading price of our common stock is likely to be volatile. The stock market recently has experienced extreme volatility. This volatility often has been unrelated or disproportionate to the operating performance of particular companies. You may not be able to resell your shares at an attractive price due to a number of factors such as those listed in “—Risks Related to Our Business and Industry” and the following:
| ● | our operating and financial performance and prospects; |
| ● | the size of our public float; |
| ● | changes in laws or regulations, including laws or regulations relating to environmental, health and safety matters or initiatives relating to climate change, or changes in the implementation of regulations by regulatory bodies, which adversely affect our industry or us; |
| ● | changes in senior management or key personnel; |
| ● | changes in our dividend policy; |
We currently intend to retain all available funds and any future earnings to fund the development and growth of our business. As a result, we do not anticipate declaring or paying any cash dividends on our common stock in the foreseeable future. Any decision to declare and pay dividends in the future will be made at the discretion of our board of directors and will depend on, among other things, our business prospects, results of operations, financial condition, cash requirements and availability, certain restrictions related to our indebtedness, industry trends and other factors that our board of directors may deem relevant. Any such decision will also be subject to compliance with contractual restrictions and covenants in the agreements governing our current and future indebtedness. In addition, we may incur additional indebtedness, the terms of which may further restrict or prevent us from paying dividends on our common stock. As a result, you may have to sell some or all of your common stock after price appreciation in order to generate cash flow from your investment, which you may not be able to do. Our inability or decision not to pay dividends, particularly when others in our industry have elected to do so, could also adversely affect the market price of our common stock.
The trading market for our common stock will be influenced by the research and reports that industry or securities analysts publish about us or our business. We may be unable or slow to attract research coverage and if one or more analysts cease coverage of us, the price and trading volume of our securities would likely be negatively impacted. If any of the analysts that may cover us change their recommendation regarding our securities adversely, or provide more favorable relative recommendations about our competitors, the price of our securities would likely decline. If any analyst that may cover us ceases covering us or fails to regularly publish reports on us, we could lose visibility in the financial markets, which could cause the price or trading volume of our securities to decline. Moreover, if one or more of the analysts who cover us downgrades our common stock or if our reporting results do not meet their expectations, the market price of our common stock could decline.
We may issue additional shares of our common stock or securities convertible into common stock pursuant to a variety of transactions, including through our Incentive Award Plan and Employee Stock Purchase Plan (“ESPP”), and through acquisitions. We may also execute or have executed agreements which allow certain third parties the right to purchase additional shares of our common stock or securities convertible into common stock. The issuance by us of additional shares of our common stock or securities convertible into our common stock would dilute your ownership of us and the sale of a significant amount of such shares in the public market could adversely affect prevailing market prices of our common stock.
The requirements of being a public company, including compliance with the reporting requirements of the Exchange Act, the requirements of the Sarbanes-Oxley Act and the requirements of the Nasdaq, may strain our resources, increase our costs and require additional attention of management, and we may be unable to comply with these requirements in a timely or cost-effective manner.
As a public company, we are subject to laws, regulations and requirements, certain corporate governance provisions of the Sarbanes-Oxley Act, related regulations of the SEC and the requirements of the Nasdaq, which Legacy Fold was not required to comply with as a private company. Complying with these statutes, regulations and requirements will occupy a significant amount of time of our board of directors and management and significantly increases our costs and expenses.
We are required to maintain internal controls over financial reporting and to report any material weaknesses in such internal controls. In addition, we will be required in the future to furnish a report by management on the effectiveness of our internal control over financial reporting, pursuant to Section 404 of the Sarbanes-Oxley Act. The process of designing, implementing, and testing the internal control over financial reporting required to comply with this obligation is time-consuming, costly, and complicated.
If we are unable to comply with the requirements of Section 404 of the Sarbanes-Oxley Act in a timely manner, or if we are unable to assert that our internal control over financial reporting is effective, we will be unable to certify that our internal control over financial reporting is effective. We cannot assure you that there will not be any additional material weaknesses or significant deficiencies in our internal control over financial reporting in the future.
Any failure to maintain internal control over financial reporting could severely inhibit our ability to accurately report our financial condition or results of operations. If we are unable to conclude that our internal control over financial reporting is effective, or if our independent registered public accounting firm determines we have a material weakness or significant deficiency in our internal control over financial reporting, investors may lose confidence in the accuracy and completeness of our financial reports and the market price of our common stock could decline. We could become subject to investigations by the stock exchange on which our securities are listed, the SEC or other regulatory authorities, which could require additional financial and management resources.
Our executive officers have limited experience in the management of a publicly traded company. Our management team may not successfully or effectively manage its transition to a public company that will be subject to significant regulatory oversight and reporting obligations under federal securities laws. Their limited experience in dealing with the increasingly complex laws pertaining to public companies could be a significant disadvantage in that it is likely that an increasing amount of their time may be devoted to these activities which will result in less time being devoted to the management and growth of the company. We may not have adequate personnel with the appropriate level of knowledge, experience, and training in the accounting policies, practices or internal controls over financial reporting required of public companies in the United States. The development and implementation of the standards and controls necessary for the company to achieve the level of accounting standards required of a public company in the United States may require costs greater than expected. It is possible that we will be required to expand its employee base and hire additional employees to support its operations as a public company which will increase its operating costs in future periods.
All statements contained herein concerning U.S. federal income tax (or other tax) consequences are based on existing law and interpretations thereof. The tax regimes to which we are subject or under which we operate, including income and non-income taxes, are unsettled and may be subject to significant change. While some of these changes could be beneficial, others could negatively affect our after-tax returns. Accordingly, no assurance can be given that the currently anticipated tax treatment will not be modified by legislative, judicial or administrative changes, possibly with retroactive effect. In addition, no assurance can be given that any tax authority or court will agree with any particular interpretation of the relevant laws.
If the perceived benefits of the Business Combination do not meet the expectations of investors or securities analysts, the market price of our securities may decline.
If the perceived benefits of the Business Combination do not meet the expectations of investors or securities analysts, the market price of our securities may decline, which could contribute to the loss of all or part of your investment.
Broad market and industry factors may materially harm the market price of our securities after the Business Combination, irrespective of our operating performance. The stock market in general and Nasdaq have experienced price and volume fluctuations that have often been unrelated or disproportionate to the operating performance of the particular companies affected. The trading prices and valuations of these securities may not be predictable. A loss of investor confidence in the market for retail stocks or the stocks of other companies, notably in the Bitcoin financial services industry, which investors perceive to be similar to us, could depress our stock price regardless of its business, prospects, financial conditions or results of operations. A decline in the market price for our securities also could adversely affect our ability to issue additional securities and to obtain additional financing in the future.
Nasdaq may delist our securities from trading which could limit investors’ ability to make transactions in our securities and subject us to additional trading restrictions.
We cannot assure you that our securities will continue to be listed on Nasdaq in the future. In order to continue listing our securities on Nasdaq, we must maintain certain financial, distribution and stock price levels.
| ● | a reduced level of trading activity in the secondary trading market for our Common Stock; |
| ● | a limited amount of news and analyst coverage for us; |
| ● | our securities would not be “covered securities” under the National Securities Markets Improvement Act of 1996, which is a federal statute that prevents or pre-empts the states from regulating the sale of certain securities, including securities listed on the Nasdaq, in which case our securities would be subject to regulation in each state where we offer and sell securities. |
Future resales of our securities may cause the market price of such securities to drop significantly, even if our business is doing well.
The sale of our securities in the public market, including by entities to which we have issued shares in connection with transactions, or the perception that such sales could occur, could harm the prevailing market price of our securities. These sales, or the possibility that these sales may occur, also might make it more difficult for us to sell equity securities in the future at a time and at a price that we deem appropriate.
We may issue additional shares or other equity securities without your approval, which would dilute your ownership interest and may depress the market price of our securities.
Pursuant to the Incentive Award Plan, we may initially issue an aggregate of up to the number of shares equal to 10% of our Common Stock issued and outstanding at the Closing on a fully-diluted basis, which amount will automatically increase annually and may further be subject to increase from time to time. We may also issue additional securities of equal or senior rank in the future in connection with, among other things, future acquisitions or repayment of outstanding indebtedness, without shareholder approval, in a number of circumstances.
| ● | existing shareholders’ proportionate ownership interest in us will decrease; |
| ● | the market price of our securities may decline. |
The stock markets experience volatility that is often unrelated to operating performance. These broad market fluctuations may adversely affect the trading price of our securities, and, as a result, there may be significant volatility in the market prices of our securities. Separately, if we are unable to achieve profitability in line with investor expectations, the market price of our Common Stock will likely decline when it becomes apparent that the market expectations may not be realized. In addition to operating results, many economic and seasonal factors outside of our control could have an adverse effect on the price of our securities and increase fluctuations in our results. These factors include certain of the risks discussed herein, operating results of other companies in the same industry, changes in financial estimates or recommendations of securities analysts, speculation in the press or investment community, negative media coverage or risk of proceedings or government investigation, change in government regulation, foreign currency fluctuations and uncertainty in tax policies, the possible effects of war, terrorist and other hostilities, other factors affecting general conditions in the economy or the financial markets or other developments affecting the Bitcoin financial services industry.
Claims for indemnification by our directors and officers may reduce its available funds to satisfy successful third-party claims against us and may reduce the amount of money available to us.
Our organizational documents provide that we will indemnify our directors and officers, in each case to the fullest extent permitted by Delaware law.
In addition, as permitted by Section 145 of the DGCL, our amended and restated bylaws and our indemnification agreements entered into with our directors and officers provide that:
| ● | We will indemnify our directors and officers for serving in those capacities or for serving other business enterprises at its request, to the fullest extent permitted by Delaware law. Delaware law provides that a corporation may indemnify such person if such person acted in good faith and in a manner such person reasonably believed to be in or not opposed to the best interests of the registrant and, with respect to any criminal proceeding, had no reasonable cause to believe such person’s conduct was unlawful; |
| ● | we may not retroactively amend our bylaw provisions to reduce its indemnification obligations to directors, officers, employees and agents. |
We are an “emerging growth company” and, as a result of the reduced disclosure and governance requirements applicable to emerging growth companies, our securities may be less attractive to investors.
We qualify as an “emerging growth company” as defined in Section 2(a)(19) of the Securities Act, as modified by the JOBS Act, as of the closing of the Business Combination. As such, we are eligible for and take advantage of certain exemptions from various reporting requirements applicable to other public companies that are not emerging growth companies for as long as we continue to be an emerging growth company, including, but not limited to, (a) not being required to comply with the auditor attestation requirements of Section 404 of the Sarbanes-Oxley Act, (b) reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements and (c) exemptions from the requirements of holding a nonbinding advisory vote on executive compensation and stockholder approval of any golden parachute payments not previously approved. As a result, our stockholders may not have access to certain information they may deem important. We will remain an emerging growth company until the earliest of (i) the last day of the fiscal year in which the market value of shares of Common Stock that are held by non-affiliates exceeds $700 million as of June 30 of that fiscal year, (ii) the last day of the fiscal year in which we have total annual gross revenue of $1.235 billion or more during such fiscal year (as indexed for inflation), (iii) the date on which we have issued more than $1 billion in non-convertible debt in the prior three-year period or (iv) December 31, 2026, which is the last day of the fiscal year following the fifth anniversary of the date of the first sale of Common Stock in EMLD’s initial public offering. We cannot predict whether investors will find our securities less attractive because we will rely on these exemptions. If some investors find our securities less attractive as a result of our reliance on these exemptions, the trading prices of our securities may be lower than they otherwise would be, there may be a less active trading market for our securities and the trading prices of our securities may be more volatile.
As an emerging growth company, we may also take advantage of certain exemptions from various reporting requirements that are applicable to other public companies that are not emerging growth companies including, but not limited to, not being required to obtain an assessment of the effectiveness of our internal controls over financial reporting from our independent registered public accounting firm pursuant to Section 404 of the Sarbanes-Oxley Act, reduced disclosure obligations regarding executive compensation in our periodic reports and proxy statements and exemptions from the requirements of holding a nonbinding advisory vote on executive compensation and stockholder approval of any golden parachute payments not previously approved. We cannot predict if investors will find our shares of common stock less attractive because we will rely on these exemptions. If some investors find our shares of common stock less attractive as a result, there may be a less active market for our shares of common stock and our share price may be more volatile.
Anti-takeover provisions contained in our Charter and Bylaws, as well as provisions of Delaware law, could impair a takeover attempt.
Our Charter and Bylaws contain provisions that could have the effect of delaying or preventing changes in control or changes in our management without the consent of our board of directors. These provisions include:
| ● | the exclusive right of our board of directors to elect a director to fill a vacancy created by the expansion of the board of directors or the resignation, death, or removal of a director with or without cause by stockholders, which prevents stockholders from being able to fill vacancies on our board of directors; |
| ● | the requirement that a special meeting of stockholders may be called only by the chairperson of the board of directors, the chief executive officer, the president or the board of directors, which may delay the ability of our stockholders to force consideration of a proposal or to take action, including the removal of directors; |
| ● | providing for a staggered board, in which the members of the board of directors are divided into three classes to serve for a period of three years from the date of their respective appointment or election; |
| ● | granting the ability to remove directors with cause by the affirmative vote of 662/3% in voting power of the outstanding shares of our Common Stock entitled to vote thereon; |
| ● | requiring the affirmative vote of at least 662/3% of the voting power of the outstanding shares of our capital stock entitled to vote generally in the election of directors, voting together as a single class, to amend the Bylaws or certain provisions of the Charter; and |
| ● | advance notice procedures that stockholders must comply with in order to nominate candidates to our Board or to propose matters to be acted upon at a stockholders’ meeting, which may discourage or deter a potential acquirer from conducting a solicitation of proxies to elect the acquirer’s own slate of directors or otherwise attempting to obtain control of us. |
These provisions, alone or together, could delay hostile takeovers and changes in control of us or changes in the Board and management.
As a Delaware corporation, we are also subject to provisions of Delaware law, including Section 203 of the DGCL, which will prevent some stockholders holding more than 15% of our outstanding Common Stock from engaging in certain business combinations without approval of the holders of substantially all of our Common Stock. Any provision of the Charter or Bylaws or Delaware law that has the effect of delaying or deterring a change in control could limit the opportunity for our stockholders to receive a premium for their shares of our Common Stock and could also affect the price that some investors are willing to pay for our Common Stock.
Our business and operations could be negatively affected if it becomes subject to any securities litigation or stockholder activism, which could cause us to incur significant expense, hinder execution of business and growth strategy and impact its stock price.
In the past, following periods of volatility in the market price of a company’s securities, securities class action litigation has often been brought against that company. Stockholder activism, which could take many forms or arise in a variety of situations, has been increasing recently. Volatility in the stock price of our Common Stock or other reasons may in the future cause it to become the target of securities litigation or stockholder activism. Securities litigation and stockholder activism, including potential proxy contests, could result in substantial costs and divert management’s and the board of directors’ attention and resources from our business. Additionally, such securities litigation and stockholder activism could give rise to perceived uncertainties as to our future, adversely affect its relationships with service providers and make it more difficult to attract and retain qualified personnel. Also, we may be required to incur significant legal fees and other expenses related to any securities litigation and activist stockholder matters. Further, its stock price could be subject to significant fluctuation or otherwise be adversely affected by the events, risks and uncertainties of any securities litigation and stockholder activism.
The Public Warrants have become exercisable for shares of our Common Stock, which exercise could increase the number of shares eligible for future resale in the public market and result in dilution to our stockholders.
Outstanding Public Warrants to purchase an aggregate of 12,434,671 shares of our Common Stock have become exercisable following the completion of the Business Combination. Each whole warrant entitles the holder thereof to purchase one share of our Common Stock at a price of $11.50 per whole share, subject to adjustment. Public Warrants may be exercised only for a whole number of shares of our Common Stock. To the extent such warrants are exercised, additional shares of our Common Stock will be issued, which will result in dilution to the then existing holders of our Common Stock and an increase in the number of shares eligible for resale in the public market. Sales of substantial numbers of such shares in the public market could adversely affect the market price of our Common Stock.
We may amend the terms of the Public Warrants in a manner that may be adverse to holders of Public Warrants with the approval by the holders of at least a majority of the then outstanding Public Warrants or for amendments necessary for the warrants to be classified as equity. As a result, the exercise price of the Public Warrants could be increased, the exercise period could be shortened and the number of shares of Common Stock purchasable upon exercise of a Public Warrant could be decreased, all without your approval.
The Public Warrants were issued in registered form under the Warrant Agreement between Continental Stock Transfer & Trust Company, N.A., as warrant agent, and EMLD. The Warrant Agreement provides that the terms of the Public Warrants may be amended without the consent of any holder to cure any ambiguity or correct any defective provision, but requires the approval by the holders of at least 50% of the then outstanding Public Warrants to make any change that adversely affects the interests of the registered holders of Public Warrants. Accordingly, we may amend the terms of the Public Warrants (i) in a manner adverse to a holder if holders of at least 50% of the then outstanding Public Warrants approve of such amendment or (ii) to the extent necessary for the Public Warrants to be classified as equity in the financial statements without the consent of any holder. Although our ability to amend the terms of the Public Warrants with the consent of at least 50% of the then outstanding Public Warrants is unlimited, examples of such amendments could be amendments to, among other things, increase the exercise price of the Public Warrants, convert the Public Warrants into cash or stock, shorten the exercise period or decrease the number of shares of Common Stock purchasable upon exercise of a Public Warrant.
Emerald has the ability to redeem outstanding Public Warrants at any time prior to their expiration, at a price of $0.01 per warrant, provided that the closing price of our Common Stock equals or exceeds $18.00 per share (as adjusted for stock splits, stock dividends, reorganizations, recapitalizations and the like) for any 20 trading days within a 30 trading-day period ending on the third trading day prior to the date on which we give proper notice of such redemption, provided that on the date we give notice of redemption and during the entire period thereafter until the time we redeem the Public Warrants, we have an effective registration statement under the Securities Act covering the shares of Common Stock issuable upon exercise of the Public Warrants and a current prospectus relating to them is available. If and when the Public Warrants become redeemable, we may exercise our redemption right even if we are unable to register or qualify the underlying securities for sale under all applicable state securities laws. As a result, we may redeem the Public Warrants as set forth above even if the holders are otherwise unable to exercise the Public Warrants. Redemption of the outstanding Public Warrants could force you: (i) to exercise your Public Warrants and pay the exercise price therefor at a time when it may be disadvantageous for you to do so, (ii) to sell your Public Warrants at the then-current market price when you might otherwise wish to hold your Public Warrants or (iii) to accept the nominal redemption price which, at the time the outstanding Public Warrants are called for redemption, is likely to be substantially less than the market value of your Public Warrants.
A 1% U.S. federal excise tax may be imposed on us in connection with our redemptions of our shares in connection with redemptions pursuant to the Business Combination.
Because we are a Delaware corporation and our securities trade on Nasdaq, we are a “covered corporation” for purposes of the Excise Tax. Because the application of the Excise Tax is not entirely clear, the redemptions effected in connection with the Business Combination may be subject to the Excise Tax. The extent to which we will be subject to the Excise Tax in connection with such redemptions will depend on a number of factors, including: (i) whether the redemption is treated as a repurchase of stock for purposes of the Excise Tax, (ii) the fair market value of the redemptions, (iii) the nature and amount of any PIPE issuances, (iv) the nature and amount of the equity issued by us in connection with the Business Combination, including the shares issued to Legacy Fold stockholders in the Business Combination (or otherwise issued by EMLD not in connection with the Business Combination but within the same taxable year of the redemption treated as a repurchase of stock), and (v) the content of any proposed or final regulations and other guidance from the Treasury.
The imposition of the Excise Tax on us as a result of such redemptions could reduce the amount of cash available to the Company following the Closing, which could cause investors in our securities who did not redeem or the other stockholders of the Company to economically bear the impact of any such Excise Tax.
The text of this filing, as the company filed it with the SEC, without its images or exhibits. This is not investment advice.