GLOBAL PAYMENTS INC

Previous wording

•Our inability to protect our systems and data from continually evolving cybersecurity threats or other technological risks could adversely affect our ability to deliver our services; damage our reputation among our customers, card issuers, financial institutions, card networks, partners and cardholders; adversely affect our continued card network registration or membership and financial institution sponsorship; and expose us to penalties, fines, liabilities, legal claims and defense costs.

Current wording

•Our inability to protect our systems and data from continually evolving cybersecurity threats or other technological risks could adversely affect our ability to deliver our services; damage our reputation among our customers, card issuers, financial institutions, card networks, partners and cardholders; adversely affect our continued card network registration or membership and financial institution sponsorship; and expose us to lost revenues, penalties, fines, liabilities, legal claims and defense costs.

Previous wording

The integration and conversion of our acquired operations or other future acquisitions, if any, could result in increased operating costs if the anticipated synergies from the combination are not achieved, a loss of strategic opportunities if management is distracted by the integration process and a loss of customers if our service levels drop during or following the integration process.

Current wording

•The integration and conversion of our acquired operations or other future acquisitions, if any, could result in increased operating costs if the anticipated synergies from the combination are not achieved on a timely basis or at all or in the way that they were anticipated, a loss of strategic opportunities if management is distracted by the integration process and a loss of customers if our service levels drop during or following the integration process.

Previous wording

•Our revenues from the provision of services to merchants that accept Visa and Mastercard are dependent upon our continued Visa and Mastercard registrations, financial institution sponsorship and, in some cases, continued membership in certain card networks.

Current wording

•Our revenues from the provision of services to merchants that accept Visa and Mastercard, or any other network, are dependent upon our continued Visa and Mastercard registrations, financial institution sponsorship and, in some cases, continued membership in certain card networks.

Previous wording

•Our future growth depends in part on the continued expansion within markets in which we already operate, the emergence of and our entry into new markets and the continued availability of alliance relationships and strategic acquisition and joint venture opportunities.

Current wording

•Our future growth depends in part on the continued expansion within the markets in which we already operate, the emergence of and our successful entry into new markets and the continued availability of alliance relationships as well as strategic acquisition and joint venture opportunities.

Previous wording

•There may be a decline in the use of cards and other digital payments as a payment mechanism for consumers or other adverse developments with respect to the card industry in general.

Current wording

•There may be a decline in the use of cards and other digital payments as a payment mechanism for consumers or other adverse developments affecting the card industry in general.

Previous wording

•Investor and other stakeholder scrutiny related to our sustainability practices, and our disclosed performance and aspirations for these practices, may increase costs and expose us to numerous risks.

Current wording

•Investor and other stakeholder interest in our sustainability practices, and our disclosed performance and aspirations for these practices, may, from time to time, result in additional considerations or expectations and expose us to risks.

Previous wording

Our inability to protect our systems and data from continually evolving cybersecurity threats or other technological risks could adversely affect our ability to deliver our services; damage our reputation among our customers, card issuers, financial institutions, card networks, partners and cardholders; adversely affect our continued card network registration or membership and financial institution sponsorship; and expose us to penalties, fines, liabilities, legal claims and defense costs.

Current wording

Our inability to protect our systems and data from continually evolving cybersecurity threats or other technological risks could adversely affect our ability to deliver our services; damage our reputation among our customers, card issuers, financial institutions, card networks, partners and cardholders; adversely affect our continued card network registration or membership and financial institution sponsorship; and expose us to lost revenues, penalties, fines, liabilities, legal claims and defense costs.

Previous wording

We are a regular target of malicious third-party attempts to identify and exploit system vulnerabilities, and/or penetrate or bypass our security measures, in order to gain unauthorized access to our networks and systems or those of our associated third parties. Such attempts at unauthorized access can lead, and occasionally have led, to the compromise of sensitive, business, personal or confidential information. To mitigate these risks, we follow a defense-in-depth model for cybersecurity, meaning we proactively seek to employ multiple methods at different layers to defend our systems against intrusion and attack and to protect the data we possess. We have adopted policies and procedures, including an incident response plan and oversight of cybersecurity risks by both the board of directors and management oversight of cybersecurity risks, that we believe are designed to facilitate the identification, assessment and management of those risks, including any risks that have the potential to be material. Our information security program includes technical, physical and administrative controls that are designed to maintain the confidentiality, integrity and availability of our information and technical assets. However, we cannot provide any assurance that these cybersecurity risk management processes and controls will be fully complied with or effective, and we cannot be certain that these measures or others will always be successful or will always be sufficient to counter, or to rapidly detect, contain and remediate all current and emerging technology threats.

Current wording

We are a regular target of malicious attempts to identify and exploit system vulnerabilities, and/or to penetrate or bypass our security measures, in order to gain unauthorized access to our networks and systems or those of our associated third parties. Such attempts at unauthorized access can lead, and occasionally have led, to the compromise of sensitive, business, personal or confidential information. To mitigate these risks, we follow a defense-in-depth model for cybersecurity, meaning we proactively seek to employ multiple methods at different layers to defend our systems against intrusion and attack and to protect the data we possess. We have adopted policies and procedures as part of our information security program, as well as an incident response plan, that are designed to facilitate the identification, assessment and management of those risks, including any risks that have the potential to be material. Our information security program, which is designed to address cybersecurity risks and is subject to oversight by both the Board of Directors and management, includes technical, physical and administrative controls that are designed to maintain the confidentiality, integrity and availability of our information and technical assets. However, we cannot provide any assurance that these cybersecurity risk management processes and controls will be fully complied with or effective, and we cannot be certain that these measures or others will always be successful or will always be sufficient to counter, or to rapidly detect, contain and remediate all current and emerging technology threats.

Previous wording

More particularly, our computer systems and/or our associated third parties’ computer systems have been, and we expect will continue to be, targeted for penetration on a regular basis, and our data protection measures may not prevent, and occasionally have not prevented, unauthorized access. The techniques used to obtain unauthorized access, disable or degrade services or sabotage systems change frequently. These techniques are often difficult to detect and they continually evolve and may become more sophisticated. Threats to our systems and our associated third parties’ systems (such as the use of AI by threat actors in furtherance of cyberattacks) can derive from human error or malicious actions by employees or third parties, including state-sponsored organizations with significant financial and technological resources. In addition, we have experienced and may continue to experience system disruptions or delays caused by computer viruses and other malware or vulnerabilities that could infect our systems or those of our associated third parties. Denial of service, ransomware or other methods of attacks could be launched against us for a variety of purposes, including to interfere with our services or to create a diversion for other malicious activities. Our defensive measures may not prevent downtime, unauthorized access or misuse of sensitive data. We have experienced all of the incident types described in this paragraph in the past, and we cannot guarantee that we will be able to detect and prevent all such incidents in the future. While we maintain first- and third-party insurance policies that may provide coverage for certain aspects of cybersecurity risks, such insurance coverage may be insufficient to cover all losses resulting from an incident.

Current wording

More specifically, our computer systems and/or our associated third parties’ computer systems have been, and we expect will continue to be, targeted on a regular basis, and our data protection measures may not prevent, and occasionally have not prevented, unauthorized access. The techniques used to obtain unauthorized access, disable or degrade services or sabotage systems change frequently. These techniques are often difficult to detect and they continually evolve and may become more sophisticated. These threats may be facilitated and exacerbated by the use of AI technologies, which may increase system complexity, expand data usage, and introduce new attack surfaces or modes of exploitation. Threats to our systems and our associated third parties’ systems can derive from human error or malicious actions by employees or third parties, including state-sponsored organizations with significant financial and technological resources. In addition, we have experienced and may continue to experience system disruptions or delays caused by computer viruses and other malware or vulnerabilities that could infect our systems or those of our associated third parties. Denial of service, ransomware, phishing attempts, brute force attacks, exploiting software vulnerabilities (including “zero-day attacks”), supply chain attacks and other events or other methods of attacks could be launched against us for a variety of purposes, including to interfere with our services or to create a diversion for other malicious activities. Our defensive measures may not prevent downtime, unauthorized access or misuse of sensitive data. We have experienced all of the incident types described in this paragraph in the past, and we cannot guarantee that we will be able to detect and prevent all such incidents in the future. While we maintain first- and third-party insurance policies that may provide coverage for certain aspects of cybersecurity risks, such insurance coverage may be insufficient to cover all losses resulting from an incident.

Previous wording

Companies we acquire may also require implementation of additional cyber defense controls or processes to align with our information security program and, as a result, there may be a period of heightened risk between the acquisition date and the completion of such implementation. Furthermore, certain of our third-party relationships are subject to our vendor management program and are governed by written contracts that contain requirements relating to information security. We believe we have designed our risk identification, assessment and management processes and procedures to account for cybersecurity risks associated with our use of third-party service providers. However, we do not control the actions of our associated third parties, and any disruptions in their services caused by cyberattacks and/or security breaches could adversely affect our ability to service our customers or otherwise conduct our business.

Current wording

Companies we acquire may also require implementation of additional cybersecurity defense controls or processes to align with our information security program and, as a result, there may be a period of heightened risk between the acquisition date and the completion of such implementation. Furthermore, certain of our third-party relationships are subject to our vendor management program and are governed by written contracts that contain requirements relating to information security. We have designed our risk identification, assessment and management processes and procedures to account for cybersecurity risks associated with our use of third-party service providers. However, we do not control the actions of our associated third parties, and any disruptions in their services caused by cybersecurity attacks and/or security breaches could adversely affect our ability to service our customers or otherwise conduct our business.

Previous wording

In addition, we impose contractual requirements on our counterparties, including vendors and other third parties, to comply with applicable privacy and security laws related to the use and security of sensitive or personal information. We cannot provide assurances that these contractual requirements will be followed or will be adequate to prevent the misuse of this data. We have occasionally received notifications from third parties informing us that our data stored on their systems has been accessed without authorization. Any future misuse or compromise of personal information stored on those systems, or any other failure by a vendor, partner or other third party to abide by our contractual requirements, could expose us to regulatory fines, third-party liability, protracted and costly litigation and, with respect to misuse of the personal information of our customers, lost revenue and reputational harm.

Current wording

We impose contractual requirements on our counterparties, including vendors and other third parties, to comply with applicable privacy and security laws related to the use and security of sensitive or personal information. We cannot provide assurances that these contractual requirements will be followed or will be adequate to prevent the misuse of this data. We have occasionally received notifications from third parties informing us that our data stored on their systems has been accessed without authorization. Any future misuse or compromise of personal information stored on those systems, or any other failure by a vendor, partner or other third party to abide by our contractual requirements, could expose us to regulatory fines, third-party liability, protracted and costly litigation and, with respect to misuse of the personal information of our customers, lost revenue and reputational harm.

Previous wording

Any type of security breach, cyberattack, unintentional or intentional disclosure of sensitive business and personal information or misuse of data described above or otherwise, whether experienced by us or an associated third party, could harm our reputation; deter existing and prospective customers from using our services or from making digital payments generally; increase our operating expenses in order to contain and remediate the incident; expose us to unanticipated or uninsured liability; disrupt our operations (including potential service interruptions); distract our management; increase our risk of litigation or regulatory scrutiny; result in the imposition of penalties and fines under state, federal and foreign laws or by the card networks; and adversely affect our continued card network registration or membership and financial institution sponsorship. Removal from the networks' lists of Payment Card Industry Data Security Standard ("PCI DSS") compliant service providers could mean that existing customers, sales partners or other third parties could cease using or referring others to our services. Also, prospective merchant customers, financial institutions, sales partners or other third parties could choose to terminate negotiations with us, or delay or choose not to consider us for their processing needs.

Current wording

Any type of security incident, cybersecurity attack, unintentional or intentional disclosure of sensitive business and personal information, or misuse of data described above or otherwise, whether experienced by us or an associated third party, could harm our reputation; deter existing and prospective customers from using our services or from making digital payments generally; cause a loss of revenue; increase our operating expenses in order to contain and remediate the incident; expose us to unanticipated or uninsured liability; disrupt our operations (including potential service interruptions); distract our management; increase our risk of litigation or regulatory scrutiny; and result in the imposition of penalties and fines under state, federal and foreign laws or by the card networks (which may not be covered by our insurance policies). Removal from the networks' lists of Payment Card Industry Data Security Standard ("PCI DSS") compliant service providers could mean that existing customers, sales partners or other third parties could cease using or referring others to our services. Also, prospective merchant customers, sales partners or other third parties could choose to terminate negotiations with us, or delay or choose not to consider us for their processing needs.

Previous wording

In addition, as a global company, we are increasingly subject to complex and varied cybersecurity incident reporting requirements across numerous jurisdictions. With the often short timeframes required for cyber incident reporting, there is a risk that the Company or its associated third parties will fail to meet the reporting deadlines for any given incident. Regardless of where an incident occurs, it may take considerable time for us to investigate and evaluate the full impact of a cybersecurity incident, particularly in the case of a sophisticated attack. These factors may inhibit our ability to provide prompt, full and reliable information about the cybersecurity incident to our customers, partners and regulators, as well as to the public. If we are unable to comply with reporting requirements, we could be subject to monetary damages, civil and criminal penalties, litigation, investigations and proceedings and damage to our reputation.

Current wording

In addition, as a global company, we are increasingly subject to complex and varied cybersecurity incident reporting requirements across numerous jurisdictions. With the often short timeframes required for cybersecurity incident reporting, there is a risk that we or our associated third parties will fail to meet the reporting deadlines for any given incident. Regardless of where an incident occurs, it may take considerable time for us to investigate and evaluate the full impact of a cybersecurity incident, particularly in the case of a sophisticated attack. These factors may inhibit our ability to provide prompt, full and reliable information about the cybersecurity incident to our customers, partners and regulators, as well as to the public. If we are unable to comply with reporting requirements, we could be subject to monetary damages, civil and criminal penalties, litigation, investigations and proceedings and damage to our reputation.

Previous wording

Our core services are based on software and computing systems that may encounter development delays, and the underlying software may contain undetected errors, viruses, defects or vulnerabilities. The hardware infrastructure on which our systems run may have a faulty component or fail. Defects in our software services, underlying hardware or errors or delays in our processing of digital transactions could result in additional development costs, diversion of technical and other resources from our other development efforts and could result in loss of credibility with current or potential customers, harm to our reputation and exposure to liability claims.

Current wording

Our core services are based on software and computing systems that may encounter development delays, and the underlying software may contain undetected errors, viruses, defects or vulnerabilities. The hardware infrastructure on which our systems run may have faulty components or fail. Defects in our software services, underlying hardware or errors or delays in our processing of digital transactions could result in additional development costs, diversion of technical and other resources from our other development efforts and could result in loss of business, loss of credibility with current or potential customers, harm to our reputation and exposure to liability claims. We may not be able to effectively mitigate these risks or to implement new technology to address these risks in a timely fashion.

Previous wording

We depend on the efficient and uninterrupted operation of our computer systems, software, data centers and telecommunications networks, as well as the systems and services of third parties. Not only could we suffer damage to our reputation in the event of a system outage or data loss, but we could also be liable to third parties. Many of our contractual agreements with financial institutions and certain other customers require the payment of penalties if we do not meet certain operating standards. Our systems and operations or those of our third-party providers could be exposed to damage or interruption from, among other things, fire; climate-related events, including extreme weather events; natural disasters; pandemics; power loss; telecommunications failure; terrorist acts; war; unauthorized entry; malicious attacks; human error; hardware failure; and computer viruses or other defects. We have been and continue to be exposed to defects in our systems or those of third parties, errors or delays in the processing of payment transactions, telecommunications failures, or other difficulties (including those related to system relocation), which could result in loss of revenues, loss of customers, loss of merchant and cardholder data, harm to our business or reputation, exposure to fraud losses or other liabilities, negative publicity, additional operating and development costs, litigation expenses, fines and other sanctions imposed by card networks or regulators and/or diversion of technical and other resources. There is also a risk that third-party suppliers of hardware and infrastructure required to support our employee productivity or our suppliers could be affected by supply chain disruptions, such as manufacturing and shipping delays. An extended supply chain disruption could also affect the delivery of our services. Any of the foregoing could have a material adverse effect on our business, financial condition, results of operations and cash flows. In addition, if we are unable to renew or renegotiate our agreements with key suppliers on favorable terms to us or at all, or find alternative third-party providers, our services may be affected.

Current wording

We depend on the efficient and uninterrupted operation of our computer systems, software, data centers and telecommunications networks, as well as the systems and services of third parties. Not only could we suffer damage to our reputation in the event of a system outage or data loss, but we could also be liable to third parties. Certain of our contractual agreements with customers require the payment of penalties if we do not meet certain operating standards. Our systems and operations or those of our third-party providers could be exposed to damage or interruption from, among other things, fire; climate-related events, including extreme weather events; natural disasters; pandemics; power loss; telecommunications failure; terrorist acts; war; unauthorized entry; cybersecurity attacks; human error; hardware failure; and computer viruses, vulnerabilities or other defects. We have been and continue to be exposed to defects in our systems or those of third parties, errors or delays in the processing of payment transactions, telecommunications failures, or other difficulties (including those related to system relocation), which could result in loss of revenues, loss of customers, loss of merchant and cardholder data, harm to our business or reputation, exposure to fraud losses or other liabilities, negative publicity, additional operating and development costs, litigation expenses, fines and other sanctions imposed by card networks or regulators and/or diversion of technical and other resources. There is also a risk that third-party suppliers of hardware and infrastructure required to support our employee productivity or our suppliers could be affected by supply chain disruptions or delays caused by the events described above. An extended supply chain disruption could also affect the delivery of our services. In addition, if we are unable to renew or renegotiate our agreements with key suppliers on favorable terms to us or at all, or find alternative third-party providers, our services may be affected. Any of the foregoing could have a material adverse effect on our business, financial condition, results of operations and cash flows.

Previous wording

•The integration and conversion of our acquired operations or other future acquisitions, if any, could result in increased operating costs if the anticipated synergies from the combination are not achieved, a loss of strategic opportunities if management is distracted by the integration process and a loss of customers if our service levels drop during or following the integration process.

Current wording

The integration and conversion of our acquired operations or other future acquisitions, if any, could result in increased operating costs if the anticipated synergies from the combination are not achieved on a timely basis or at all, a loss of strategic opportunities if management is distracted by the integration process and a loss of customers if our service levels drop during or following the integration process.

Previous wording

The acquisition, integration, and conversion of businesses and the formation or operation of alliances or joint ventures and other partnering arrangements involve a number of risks. Core risks are in the area of valuation (negotiating a fair price for the business based on, in certain cases, limited diligence) and integration and conversion (managing the complex process of integrating the acquired company's people, services, information security and technology and other assets to realize the projected value of the acquired company and the synergies projected to be realized in connection with the acquisition). In addition, international acquisitions, joint ventures and alliances often involve additional or increased risks, including, for example: managing geographically separated organizations, systems, and facilities; integrating personnel with diverse cultural and business backgrounds and organizational cultures; complying with foreign regulatory requirements; fluctuations in currency exchange rates; enforcement of intellectual property rights in some foreign countries; difficulty entering new foreign markets due to, among other things, regulatory licensure, customer acceptance and business knowledge of those new markets; and general economic and political conditions. See “—Risks Related to General Economic Conditions—We are subject to economic and geopolitical risk, health and social events or conditions, the business cycles and credit risk of our customers and the overall level of consumer, business and government spending, which could adversely affect our business, financial condition, results of operations and cash flows.” for further information about how general economic conditions could adversely affect our business, financial condition, results of operations and cash flows.

Current wording

The acquisition, integration, and conversion of businesses and the formation or operation of alliances or joint ventures and other partnering arrangements involve a number of risks, including our acquisition and integration of Worldpay. Core risks are in the area of valuation (negotiating a fair price for the business based on, in certain cases, limited diligence) and integration and conversion (managing the complex process of integrating the acquired company's people, services, information security and technology and other assets to realize the projected value of the acquired company and the synergies projected to be realized in connection with the acquisition). In addition, international acquisitions, joint ventures and alliances often involve additional or increased risks, including, for example: managing geographically separated organizations, systems, and facilities; integrating personnel with diverse cultural and business backgrounds and organizational cultures; complying with foreign regulatory requirements; fluctuations in currency exchange rates; enforcement of intellectual property rights in some foreign countries; difficulty entering new foreign markets due to, among other things, regulatory licensure, customer acceptance and business knowledge of those new markets; and general economic and political conditions. See “—Risks Related to General Economic Conditions—We are subject to economic and geopolitical risk, health and social events or conditions, the business cycles and credit risk of our customers and the overall level of consumer, business and government spending, which could adversely affect our business, financial condition, results of operations and cash flows.” for further information about how general economic conditions could adversely affect our business, financial condition, results of operations and cash flows.

Previous wording

If the integration and conversion process does not proceed smoothly, the following factors, among others, could reduce our revenues and earnings, increase our operating costs and result in us not achieving projected synergies:

Current wording

If the integration and conversion process with respect to the Worldpay Acquisition and other acquisitions does not proceed smoothly or on a timely basis, the following factors, among others, could reduce our revenues and earnings, increase our operating costs and result in us not achieving projected synergies, each adversely affecting our business, financial condition, results of operations and cash flows:

Previous wording

•The acquisition or joint venture may otherwise cause disruption to, as applicable, the acquired company’s or our joint venture partners' business and operations and relationships with financial institution sponsors, customers, merchants, employees and other partners;

Current wording

•The acquisition or joint venture may otherwise cause disruption to, as applicable, our, the acquired company’s or our joint venture partners' current and future business and operations and relationships with financial institution sponsors, customers, merchants, employees and other partners;

Previous wording

•The costs related to the integration of the acquired business and operations into ours may be greater than anticipated.

Current wording

•The costs related to the integration of the acquired business and operations into ours may be greater than anticipatedor such integration and achievement of cost savings could come at the expense of other aspects of our operations, including degradation of products and services, which may incur additional and/or unexpected costs in order to realize these cost savings.

Previous wording

We operate in the payments technology industry, which is highly competitive and highly innovative. In this industry, our primary competitors include other independent payment processors, credit card processing firms, third-party card processing software institutions, as well as financial institutions, ISOs, payment facilitators and, potentially, card networks. Some of our current and potential competitors may be larger than we are and have greater financial and operational resources or brand recognition than we have. Our competitors that are financial institutions or subsidiaries of financial institutions do not incur the costs associated with being sponsored by a direct member for participation in the card networks, as we do in certain jurisdictions, and may be able to settle transactions more quickly for merchants than we can. These financial institutions may also provide payment processing services to merchants at lower margins or at a loss in order to generate banking fees from such merchants. It is also possible that larger financial institutions, including some who are customers of ours, could decide to perform in-house some or all of the services that we currently provide or could provide. These attributes may provide them with a competitive advantage in the market.

Current wording

We operate in the payments technology industry, which is highly competitive and highly innovative. In this industry, our primary competitors include other independent payment processors, card processing firms, third-party card processing software institutions, as well as financial institutions, ISOs, payment facilitators and, potentially, card networks. Some of our current and potential competitors may be larger than we are and have greater financial and operational resources or brand recognition than we have. Our competitors that are financial institutions or subsidiaries of financial institutions do not incur the costs associated with being sponsored by a direct member for participation in the card networks, as we do in certain jurisdictions, and may be able to settle transactions more quickly for merchants than we can. These financial institutions may also provide payment processing services to merchants at lower margins or at a loss in order to generate banking fees from such merchants. It is also possible that larger financial institutions could decide to perform in-house some or all of the services that we currently provide or could provide. These attributes may provide them with a competitive advantage in the market.

Previous wording

Furthermore, we are facing increasing competition from nontraditional competitors, including new entrant technology companies, who offer certain innovations in payment methods. Some of these competitors utilize proprietary software and service solutions. Some of these nontraditional competitors have significant financial resources and robust networks and are highly regarded by consumers. In addition, some nontraditional competitors, such as private companies or startup companies, may be less risk averse than we are and, therefore, may be able to respond more quickly to market demands. These competitors may compete in ways that minimize or remove the role of traditional card networks, acquirers, issuers and processors in the digital payments process. If these nontraditional competitors gain a greater share of total digital payments transactions, it could have an adverse effect on our business, financial condition, results of operations and cash flows.

Current wording

Furthermore, we are facing increasing competition from nontraditional competitors, including new entrant technology companies, who offer certain innovations in payment method acceptance and processing. Some of these competitors utilize proprietary software and service solutions. Some of these nontraditional competitors have significant financial resources and robust networks and are highly regarded by consumers. In addition, some nontraditional competitors, such as private companies or startup companies, may be less risk averse than we are and, therefore, may be able to respond more quickly to market demands. These competitors may compete in ways that minimize or remove the role of traditional card networks, acquirers, issuers and processors in the digital payments process. If these nontraditional competitors gain a greater share of total digital payments transactions, it could have an adverse effect on our business, financial condition, results of operations and cash flows.

Previous wording

The payments technology industry in which we compete is characterized by rapid technological change, new product introductions, evolving industry standards and changing customer needs. In order to remain competitive, we are continually involved in a number of projects, including the development of new platforms, products, mobile payment applications, ecommerce services and other new offerings emerging in the payments technology industry. These projects carry the risks associated with any development effort, including cost overruns, delays in delivery and performance problems, which could in turn lead to impairment of long-lived assets associated with projects. In the payments technology industry, these risks are even more acute. Any delay in the delivery of new services or the failure to differentiate our services could render our services less desirable to customers, or possibly even obsolete. Furthermore, as the market for alternative payment processing services evolves, it may develop too rapidly or not rapidly enough for us to recover the costs we have incurred in developing new services targeted at this market, which could have a material adverse effect on our business, financial condition and results of operations.

Current wording

The payments technology industry in which we compete is characterized by rapid technological change, new product introductions, evolving industry standards and changing customer needs. In order to remain competitive, we are continually involved in a number of projects, including the development of new platforms, products, mobile payment applications, ecommerce services and other new offerings emerging in the payments technology industry. These projects carry the risks associated with any development effort, including cost overruns, delays in delivery and implementation and performance problems, which could in turn lead to impairment of long-lived assets associated with projects. In the payments technology industry, these risks are even more acute. Any delay in the delivery and implementation of new services or the failure to differentiate our services could render our services less desirable to customers, or possibly even obsolete. Furthermore, as the market for alternative payment processing services evolves, it may develop too rapidly or not rapidly enough for us to recover the costs we have incurred in developing new services targeted at this market, which could have a material adverse effect on our business, financial condition and results of operations.

Previous wording

Our revenues from the provision of services to merchants that accept Visa and Mastercard are dependent upon our continued Visa and Mastercard registrations, financial institution sponsorship and, in some cases, continued membership in certain card networks.

Current wording

Our revenues from the provision of services to merchants that accept Visa and Mastercard, or any other network, are dependent upon our continued Visa and Mastercard registrations, financial institution sponsorship and, in some cases, continued membership in certain card networks.

Previous wording

In order to provide our Visa and Mastercard transaction processing services, we must be either a direct member or registered as a merchant processor or service provider of Visa and Mastercard, respectively. Registration as a merchant processor or service provider is dependent upon our being sponsored by members of each organization in certain jurisdictions. If a sponsor financial institution in any of the markets in which we currently, or in the future may, operate should stop providing sponsorship for us, we would need to find another financial institution to provide those services or we would need to attain direct membership with the card networks, either of which could prove to be difficult and expensive. Relatedly, transitioning to a new sponsor financial institution requires technical development work, which takes time and investments. If we were unable to find a replacement financial institution to provide sponsorship or transition to a new sponsor financial institution in a timely manner or attain direct membership, we may no longer be able to provide processing services to affected and potential customers in that market, which could adversely affect our business, financial condition, results of operations and cash flows. Furthermore, some agreements with our financial institution sponsors give them substantial discretion in approving certain aspects of our business practices, including our solicitation, application and qualification procedures for merchants and the terms of our agreements with merchants. Our sponsors' discretionary actions under these agreements could have a material adverse effect on our business, financial condition and results of operations. In connection with direct membership, the rules and regulations of various card associations and card networks prescribe certain capital requirements. Any increase in the capital level required would limit our use of capital for other purposes.

Current wording

In order to provide our Visa and Mastercard transaction processing services, we must be either a direct member or registered as a merchant processor of Visa and Mastercard, respectively. Registration as a merchant processor is dependent upon our being sponsored by members of each organization in certain jurisdictions. If a sponsor financial institution in any of the markets in which we currently, or in the future may, operate should stop providing sponsorship for us, we would need to find another financial institution to provide those services or we would need to attain direct membership with the card networks, either of which could prove to be difficult and expensive. Relatedly, transitioning to a new sponsor financial institution requires technical development work, which takes time and investments. If we were unable to find a replacement financial institution to provide sponsorship or transition to a new sponsor financial institution in a timely manner or attain direct membership, we may no longer be able to provide processing services to affected and potential customers in that market, which could adversely affect our business, financial condition, results of operations and cash flows. Furthermore, some agreements with our financial institution sponsors give them substantial discretion in approving certain aspects of our business practices, including our solicitation, application and qualification procedures for merchants and the terms of our agreements with merchants. Our sponsors' discretionary actions under these agreements could have a material adverse effect on our business, financial condition and results of operations. In connection with direct membership, the rules and regulations of various card associations and card networks prescribe certain capital requirements. Any increase in the capital level required would limit our use of capital for other purposes.

Previous wording

The termination of our registration, or any changes in the rules of Visa or Mastercard or any other network that would impair our registration or prevent us from providing services to our customers, could require us to stop providing payment processing services or prevent us from successfully submitting transactions to such network, which would make it impossible for us to conduct our business on its current scale. The rules of the card networks may be influenced by card issuers, and some of those issuers also provide acquiring services and may be our competitors. If we fail to comply with the applicable requirements of the card networks, the card networks could seek to fine us, suspend us or terminate our registrations or membership. The termination of our registrations or our membership or our status as a service provider or a merchant processor, or any changes in card association or other network rules or standards, including interpretation and implementation of the rules or standards, that increase the cost of doing business or limit our ability to provide transaction processing services to our customers, could have a material adverse effect on our business, financial condition, results of operations and cash flows. If a merchant fails to comply with the applicable requirements of the card associations and networks, we, the merchant or, in some cases the ISO, could be subject to a variety of fines or penalties that may be levied by the card associations or networks. If we cannot collect or pursue collection of such amounts from the applicable merchant or, in some cases the ISO, we may have to bear the cost of such fines or penalties, resulting in lower earnings for us.

Current wording

The termination of our registration, or any changes in the rules of Visa or Mastercard or any other network that would impair our registration or prevent us from providing services to our customers, could require us to stop providing payment processing services or prevent us from successfully submitting transactions to such network, which would make it impossible for us to conduct our business on its current scale. The rules of the card networks may be influenced by card issuers, and some of those issuers also provide acquiring services and may be our competitors. If we fail to comply with the applicable requirements of the card networks, the card networks could seek to fine us, suspend us or terminate our registrations or membership. The termination of our registrations or our membership or our status as a merchant processor, or any changes in card association or other network rules or standards, including interpretation and implementation of the rules or standards, that increase the cost of doing business or limit our ability to provide transaction processing services to our customers, could have a material adverse effect on our business, financial condition, results of operations and cash flows. If a merchant fails to comply with the applicable requirements of the card associations and networks, we, the merchant or, in some cases the ISO, could be subject to a variety of fines or penalties that may be levied by the card associations or networks. If we cannot collect or pursue collection of such amounts from the applicable merchant or, in some cases the ISO, we may have to bear the cost of such fines or penalties, resulting in lower earnings for us.

Previous wording

We experience attrition in merchant credit and debit card processing volume resulting from several factors, including merchant closures, loss of merchant accounts to our competitors, unsuccessful contract renewal negotiations and account closures that we initiate for various reasons, such as heightened credit risks or contract breaches by merchants. Our referral partners are a significant source of new business. If a referral partner switches to another transaction processor, terminates our services, internalizes payment processing functions that we perform, merges with or is acquired by one of our competitors or shuts down or becomes insolvent, we may no longer receive new merchant referrals from such referral partner, and we risk losing existing merchants that were originally enrolled by the referral partner. We cannot predict the level of attrition in the future, and it could increase. Higher than expected attrition could negatively affect our results, which could have a material adverse effect on our business, financial condition, results of operations and cash flows.

Current wording

We experience attrition in merchant credit and debit card processing volume resulting from several factors, including merchant closures, loss of merchant accounts to our competitors, unsuccessful contract renewal negotiations and account closures that we initiate for various reasons, such as heightened credit risks or contract breaches by merchants. Our referral partners are a significant source of new business. If a referral partner switches to another transaction processor, terminates our services, internalizes payment processing functions that we perform, merges with or is acquired by one of our competitors or shuts down or becomes insolvent, we may no longer receive new merchant referrals from such referral partner, and we risk losing existing merchants that were originally enrolled by the referral partner. We cannot predict the level of attrition in the future, and it could increase. Higher than historical attrition may have a material adverse effect on our business, financial condition, results of operations and cash flows.

Previous wording

Our future growth depends in part on the continued expansion within markets in which we already operate, the emergence of and our entry into new markets and the continued availability of alliance relationships and strategic acquisition and joint venture opportunities.

Current wording

Our future growth depends, in part, on the continued expansion within the markets in which we already operate, the emergence of and our successful entry into new markets and the continued availability of alliance relationships as well as strategic acquisition and joint venture opportunities.

Previous wording

Our future growth and profitability depend upon our continued expansion within the markets in which we currently operate, the further expansion of these markets, the emergence of other markets for payment technology and software solutions and our ability to penetrate these markets. As part of our strategy to achieve this expansion, we look for acquisition and joint venture opportunities, investments and alliance relationships with other businesses, including referral partners, ISOs and other financial institutions, that will allow us to increase our market penetration, technological capabilities, service offerings and distribution capabilities. We may not be able to successfully identify suitable acquisition, joint venture, investment and alliance candidates in the future, and if we do, they may not provide us with the value and benefits we anticipate, which may inhibit our growth prospects and adversely affect our business, financial condition and results of operations.

Current wording

Our future growth and profitability also depend on our ability to deepen our presence in our existing markets, benefit from the further development of these markets, and capitalize on the emergence of new markets for payment technology and software solutions. As part of our strategy, we look for acquisition and joint venture opportunities, investments and alliance relationships with other businesses, including referral partners, ISOs and other financial institutions, that will allow us to increase our market penetration, technological capabilities, service offerings and distribution capabilities. We may not be able to successfully identify suitable acquisition, joint venture, investment and alliance candidates in the future; and if we do, they may not provide us with the value and benefits we anticipate, which may inhibit our growth prospects and adversely affect our business, financial condition and results of operations.

Previous wording

Our expansion into new markets is also dependent upon our ability to apply our existing technology or to develop new applications to meet the particular service needs of each new market. We may not have adequate financial or technological resources to develop effective and secure services and distribution channels that will satisfy the demands of these new markets. If we fail to expand into new and existing markets for payment technology and software solutions, we may not be able to continue to grow our revenues and earnings.

Current wording

Our expansion into new markets is also dependent upon our ability to apply our existing technology or to develop new applications to meet the particular service needs of each new market. We may not have the financial or technological resources necessary to develop effective and secure services and distribution channels that will satisfy the demands of these new markets. If we fail to expand into new and existing markets for payment technology and software solutions, we may not be able to continue to grow our revenues and earnings.

Previous wording

Our ability to acquire other businesses or technologies, make strategic investments or integrate acquired businesses effectively may also be impaired by a variety of factors including adverse financial conditions, trade tensions and increased global scrutiny of foreign investments. A number of countries, including the U.S. and countries in Europe and the Asia-Pacific region, are considering or have adopted restrictions on foreign investments. Governments may continue to adopt or tighten economic sanctions, tariffs or trade restrictions of this nature, and such restrictions could adversely affect our business, financial condition and results of operations.

Current wording

Our ability to acquire other businesses or technologies, make strategic investments or integrate acquired businesses effectively may also be impaired by a variety of factors, including adverse financial conditions, trade tensions and increased global scrutiny of foreign investments. A number of countries, including countries in Europe and the Asia-Pacific region, have implemented or are considering restrictions on foreign investments. Governments may continue to tighten or expand economic sanctions, tariffs or trade restrictions of this nature, and such restrictions could adversely affect our business, financial condition and results of operations.

Previous wording

Furthermore, our future success will depend, in part, upon our ability to integrate and manage our expanded business, which could pose substantial challenges for our management team, including challenges related to the management and monitoring of new operations and associated costs and complexity. We may also face increased scrutiny from governmental authorities if we become a larger business.

Current wording

Furthermore, our future success will depend, in part, upon our ability to integrate and manage our expanded business, which could pose substantial challenges for our management team, including managing and monitoring new operations and the associated costs and complexity.

Previous wording

There may be a decline in the use of cards and other digital payments as a payment mechanism for consumers or other adverse developments with respect to the card industry in general.

Current wording

There may be a decline in the use of cards and other digital payments as a payment mechanism for consumers, or other adverse developments affecting the card industry in general.

Previous wording

If consumers do not continue to use credit, debit or other digital payment methods of the type we process as a payment mechanism for their transactions or if there is a change in the mix of payments between cash, checks, credit cards and debit cards that is adverse to us, it could have a material adverse effect on our business, financial condition, results of operations and cash flows. Consumer credit risk may make it more difficult or expensive for consumers to gain access to credit facilities such as credit cards. Regulatory changes may result in financial institutions seeking to charge their customers additional fees for use of credit or debit cards. Such fees may result in decreased use of credit or debit cards by cardholders. In each case, our business, financial condition, results of operations and cash flows could be adversely affected.

Current wording

If consumers do not continue to use credit, debit or other digital payment methods of the type we process as a payment mechanism for their transactions, or if there is a change in the mix of payments between cash, checks, credit cards and debit cards that is adverse to us, it could have a material adverse effect on our business, financial condition, results of operations and cash flows. Consumer credit risk may make it more difficult or expensive for consumers to access credit facilities such as credit cards. In addition, regulatory changes may lead financial institutions to impose additional fees on the use of credit or debit cards, which could reduce card usage. In each case, our business, financial condition, results of operations and cash flows could be adversely affected.

Previous wording

In the event a dispute between a cardholder and a merchant is not resolved in favor of the merchant, the transaction is normally charged back to the merchant and the purchase price is credited or otherwise refunded to the cardholder. If we are unable to collect such amounts from the merchant's account or reserve account (if applicable), or if the merchant refuses or is unable, due to closure, bankruptcy or other reasons, to reimburse us for a chargeback, we may bear the loss for the amount of the refund paid to the cardholder. The risk of chargebacks is typically greater with those merchants that promise future delivery of goods and services rather than delivering goods or rendering services at the time of payment. We may experience significant losses from chargebacks in the future. Any increase in chargebacks not paid by our merchants could have a material adverse effect on our business, financial condition, results of operations and cash flows. We have policies to manage merchant-related credit risk and attempt to mitigate such risk by requiring collateral and monitoring transaction activity. Notwithstanding our programs and policies for managing credit risk, it is possible that a default on such obligations by one or more of our merchants could have a material adverse effect on our business.

Current wording

In the event a dispute between a cardholder and a merchant is not resolved in favor of the merchant, the transaction is normally charged back to the merchant and the purchase price is credited or otherwise refunded to the cardholder. If we are unable to collect such amounts from the merchant's account or reserve account (if applicable), or if the merchant refuses or is unable, due to closure, bankruptcy or other reasons, to reimburse us for a chargeback, we may bear the loss for the amount of the refund paid to the cardholder. The risk of chargebacks is typically greater with those merchants that promise future delivery of goods and services rather than delivering goods or rendering services at the time of payment. Worldpay provides services to a large portfolio of high risk merchants who promise future delivery of goods and services, and upon our acquisition of Worldpay, we have increased exposure to merchants who present a heightened financial risk to our business. We may experience significant losses from chargebacks in the future. Any increase in chargebacks not paid by our merchants could have a material adverse effect on our business, financial condition, results of operations and cash flows. We have policies to manage merchant-related credit risk and attempt to mitigate such risk by requiring collateral and monitoring transaction activity. These risk mitigation processes and policies do not guarantee that we will not experience losses in connection with merchant chargebacks. Events outside of our control and outside of a merchant’s control, including macroeconomic trends, geopolitical developments, and natural disasters may increase the likelihood of chargebacks to certain merchants and, accordingly, losses to our business. Notwithstanding our programs and policies for managing credit risk, it is possible that a default on such obligations by one or more of our merchants could have a material adverse effect on our business, financial condition, results of operations and cash flows.

Previous wording

We have potential liability for fraudulent digital payment transactions or credits initiated by merchants or others. Criminals are using increasingly sophisticated methods to engage in illegal activities, such as counterfeiting and fraud. Failure to effectively manage risk and prevent fraud could increase our chargeback losses or cause us to incur other liabilities. It is possible that incidents of fraud could increase in the future. Increases in chargebacks or other liabilities could have a material adverse effect on our business, financial condition, results of operations and cash flows.

Current wording

We have potential liability for fraudulent digital and other payment transactions or credits initiated by merchants or others. Criminals are using increasingly sophisticated methods to engage in illegal activities, such as counterfeiting and fraud. Failure to effectively manage risk and prevent fraud could increase our chargeback losses or cause us to incur other liabilities. It is possible that incidents of fraud could increase in the future. Increases in chargebacks or other liabilities could have a material adverse effect on our business, financial condition, results of operations and cash flows.

Previous wording

As of December 31, 2024, our allowance for credit losses increased to $24.7 million from $19.0 million as of December 31, 2023, a 30% increase. The accompanying consolidated financial statements reflect management’s estimates and assumptions related to allowances for transaction and credit losses utilizing the most currently available information. Actual losses could differ materially from those estimates.

Current wording

As of December 31, 2025, our allowance for credit losses increased to $50.2 million from $24.0 million as of December 31, 2024, a 109% increase. The accompanying consolidated financial statements reflect management’s estimates and assumptions related to allowances for transaction and credit losses utilizing the most currently available information. Actual losses could differ materially from those estimates.

Previous wording

From time to time, we may dispose of businesses that do not meet our strategic objectives.

Current wording

From time to time, we may dispose of businesses that do not meet our strategic objectives, such as the Issuer Solutions divestiture.

Previous wording

We are streamlining and simplifying our strategy, organization and operating environment through a transformation program to deliver a global unified operating company. These transformation activities began in the third quarter of 2024, and are expected to continue over the next few years. Our strategic initiatives may not deliver the expected benefits within the anticipated timeframes. In addition, these efforts may disrupt our business activities, which could adversely affect our business, financial condition and results of operation.

Current wording

We are streamlining and simplifying our strategy, organization and operating environment through a transformation program to deliver a global unified operating company. These transformation activities began in the third quarter of 2024, continued in 2025 and are expected to continue into 2027. Our strategic initiatives may not deliver the expected benefits within the anticipated timeframes. In addition, these efforts may disrupt our business activities, which could adversely affect our business, financial condition and results of operation.

Previous wording

Our development and use of AI technology in our operations remains in the early phases. While we intend to develop and use AI responsibly and attempt to mitigate ethical and legal issues presented by its use, we may ultimately be unsuccessful in identifying or resolving these issues before they arise. AI technologies are complex and rapidly evolving, and the technologies that we develop or use may ultimately be flawed. Moreover, AI technology is subject to rapidly evolving domestic and international laws and regulations, which could impose significant costs and obligations on us. As a result, our ability to leverage AI could be restricted by significant costs and costly legal requirements, which could adversely affect our business, financial condition and results of operations.

Current wording

Our development and use of AI technology is ongoing. While we intend to develop and use AI responsibly and attempt to mitigate ethical and legal issues presented by its use, we may ultimately be unsuccessful in identifying or resolving these issues before they arise. AI technologies are complex and rapidly evolving, and the technologies that we develop or use may ultimately be flawed. For example, any direct or indirect use of AI and machine learning is subject to risks that algorithms and datasets are flawed or may be insufficient or contain biased information. In addition, the models and processes relating to AI and machine learning are not always transparent, which could increase the risk of unintended deficiencies. These deficiencies could result in inaccurate and ineffective decisions, predictions or analysis, which could subject us to competitive harm, legal liability, increased regulatory scrutiny, reputational harm or other consequences that we may not be able to predict, any of which could adversely affect our business, financial condition and results of operations.