Oportun Financial Corp

Previous wording

We are required to continuously develop and adapt our operations, systems, and infrastructure in response to the increasing sophistication of the consumer financial services market, evolving fraud and information security landscape, and regulatory developments relating to existing and planned business operations. Although we have experienced rapid growth in our business and operations in the past, many economic and other factors outside of our control, including general economic and market conditions, public health outbreaks, consumer and commercial credit availability, the imposition of tariffs and other non-tariff trade barriers, increased energy and commodity price volatility, inflation, fluctuating interest rates, unemployment, and consumer debt levels, may adversely affect our ability to sustain revenue growth consistent with recent history and we cannot assure you that our business will grow at our historical growth rates. In addition, in the past, the growth and expansion of our business has placed significant demands on our management, operational, risk management, technology, marketing, compliance and finance and accounting infrastructure, and resulted in increased expenses, and we may not be able to increase our revenue sufficiently to offset such higher expenses. Overall revenue growth depends on a number of factors, including our ability to increase the origination volume of our products and services, attract new members and retain existing members, build our brand, expand and manage our remote-first workforce, all while managing our business systems, operations and expenses. If we are unable to accomplish these tasks, our future growth may be harmed.

Current wording

We are required to continuously develop and adapt our operations, systems, and infrastructure in response to the increasing sophistication of the consumer financial services market, evolving fraud and information security landscape, and regulatory developments relating to existing and planned business operations. Although we have experienced rapid growth in our business and operations in the past, many economic and other factors outside of our control, including general economic and market conditions, public health outbreaks, consumer and commercial credit availability, the imposition of tariffs and other non-tariff trade barriers, increased energy and commodity price volatility, inflation, fluctuating interest rates, unemployment, and consumer debt levels, may adversely affect our ability to sustain revenue growth consistent with recent history and we cannot assure you that our business will grow at our historical growth rates. In addition, in the past, the growth and expansion of our business has placed significant demands on our management, operational, risk management, technology, marketing, compliance and finance and accounting infrastructure, and resulted in increased expenses, and we may not be able to increase our revenue sufficiently to offset such higher expenses. Overall revenue growth depends on a number of factors, including our ability to increase the origination volume of our products and services, attract new members and retain existing members, build our brand, manage our remote-first workforce, all while managing our business systems, operations and expenses. If we are unable to accomplish these tasks, our future growth may be harmed.

Previous wording

In 2025, we entered into an amended and restated program agreement, as amended, to extend our partnership with Pathward through 2029, which replaced the prior agreement in its entirety and governs the ongoing terms of our relationship. The amended and restated program agreement has an initial term of four years and will automatically renew for successive two-year periods following the initial four-year term, unless either party provides notice of its intent to not renew.

Current wording

In 2025, we entered into an amended and restated program agreement to extend our partnership with Pathward through 2029, which replaced the prior agreement in its entirety and governs the ongoing terms of our relationship. The amended and restated program agreement has an initial term of four years and will automatically renew for successive two-year periods following the initial four-year term, unless either party provides notice of its intent to not renew.

Previous wording

We or Pathward may terminate our arrangement immediately upon a material breach by the other party and failure to cure such breach within a cure period, if any representations or warranties are found to be false and such error is not cured within a cure period, bankruptcy or insolvency of either party, receipt of an order or judgment by a governmental entity, a material adverse effect, or a change of control. If our bank partnership arrangement with Pathward were to be suspended or limited, including a reduction in the volume of loans that Pathward chooses to originate, or if Pathward ceased their operations or otherwise terminated their relationship with us, our business, financial condition and results of operations would be adversely affected. If we need to enter into alternative arrangements with a different bank to replace or supplement our existing arrangement, we may not be able to negotiate a comparable alternative arrangement in a timely manner or at all and transitioning loan originations to a new bank may result in delays in the issuance of new loans. In addition, if we are unable to enter into an alternative arrangement with a different bank to fully replace or supplement our relationship with Pathward, we would potentially need to obtain additional state licenses to enable us to originate loans directly in the states where Pathward originates loans, as well as comply with other state and federal laws, which would be costly and time consuming, and there can be no assurances that any such licenses could be obtained in a timely manner or at all. For a further discussion of the risks and regulations applicable to our bank partnership with Pathward, see “Risk Factors—Our bank partnership products may lead to regulatory risk and may increase our regulatory burden, —We are, and intend in the future to continue, expanding into new geographic regions, and our failure to comply with applicable laws or regulations, or accurately predict demand or growth, related to these geographic regions could have an adverse effect on our business, —Security breaches and incidents may harm our reputation, adversely affect our results of operations, and expose us to liability.”

Current wording

We or Pathward may terminate our arrangement immediately upon a material breach by the other party and failure to cure such breach within a cure period, if any representations or warranties are found to be false and such error is not cured within a cure period, bankruptcy or insolvency of either party, receipt of an order or judgment by a governmental entity, a material adverse effect, or a change of control. If our bank partnership arrangement with Pathward were to be suspended or limited, including a reduction in the volume of loans that Pathward chooses to originate, or if Pathward ceased its operations or otherwise terminated its relationship with us, our business, financial condition and results of operations would be adversely affected. If we need to enter into alternative arrangements with a different bank to replace or supplement our existing arrangement, we may not be able to negotiate a comparable alternative arrangement in a timely manner or at all and transitioning loan originations to a new bank may result in delays in the issuance of new loans. In addition, if we are unable to enter into an alternative arrangement with a different bank to fully replace or supplement our relationship with Pathward, we would potentially need to obtain additional state licenses to enable us to originate loans directly in the states where Pathward originates loans, as well as comply with other state and federal laws, which would be costly and time consuming, and there can be no assurances that any such licenses could be obtained in a timely manner or at all. For a further discussion of the risks and regulations applicable to our bank partnership with Pathward, see “Risk Factors—Our bank partnership products may lead to regulatory risk and may increase our regulatory burden, —We are, and intend in the future to continue, expanding into new geographic regions, and our failure to comply with applicable laws or regulations, or accurately predict demand or growth, related to these geographic regions could have an adverse effect on our business, —Security breaches and incidents may harm our reputation, adversely affect our results of operations, and expose us to liability.”

Previous wording

In particular, it is important that we continue to ensure that our members with loans remain loyal to us and we continue to extend loans to members who have successfully repaid their previous loans. As of March 31, 2026 and 2025, members with repeat loans comprised 79% and 78%, respectively, of our Owned Principal Balance at End of Period. If our repeat loan rates decline, we may not realize consistent or improved operating results from our existing member base.

Current wording

In particular, it is important that we continue to ensure that our members with loans remain loyal to us and we continue to extend loans to members who have successfully repaid their previous loans. As of June 30, 2026 and 2025, members with repeat loans comprised 80% and 77%, respectively, of our Owned Principal Balance at End of Period. If our repeat loan rates decline, we may not realize consistent or improved operating results from our existing member base.

Previous wording

We use estimates and assumptions in determining the fair value of our loans receivable held for investment and asset-backed notes. Our Loans Receivable at Fair Value represented 88% of our total assets and our Asset-backed notes at Fair Value represented 7% of our total liabilities as of March 31, 2026. The fair value of our loans receivable held for investment are determined using Level 3 inputs and the fair value of our asset-backed notes are determined using Level 2 inputs. Changes to these inputs could significantly impact our fair value measurements. Valuations are highly dependent upon the reasonableness of our assumptions and the predictability of the relationships that drive the results of our valuation methodologies. In addition, a variety of factors such as changes in the interest rate environment and the credit markets, changes in average life, higher than anticipated delinquency and default levels or financial market illiquidity, may ultimately affect the fair values of our loans receivable and asset-backed notes. Material differences in these ultimate values from those determined based on management’s estimates and assumptions may require us to adjust the value of certain assets and liabilities, including in a manner that is not comparable to others in our industry, which could adversely affect our results of operations.

Current wording

We use estimates and assumptions in determining the fair value of our loans receivable held for investment and asset-backed notes. Our Loans Receivable at Fair Value represented 87% of our total assets and our Asset-backed notes at Fair Value represented 5% of our total liabilities as of June 30, 2026. The fair value of our loans receivable held for investment are determined using Level 3 inputs and the fair value of our asset-backed notes are determined using Level 2 inputs. Changes to these inputs could significantly impact our fair value measurements. Valuations are highly dependent upon the reasonableness of our assumptions and the predictability of the relationships that drive the results of our valuation methodologies. In addition, a variety of factors such as changes in the interest rate environment and the credit markets, changes in average life, higher than anticipated delinquency and default levels or financial market illiquidity, may ultimately affect the fair values of our loans receivable and asset-backed notes. Material differences in these ultimate values from those determined based on management’s estimates and assumptions may require us to adjust the value of certain assets and liabilities, including in a manner that is not comparable to others in our industry, which could adversely affect our results of operations.

Previous wording

We earn over 90% of our revenue from interest payments on the loans we make to our members. Financial institutions and other funding sources provide us with the capital to fund a substantial portion of the principal amount of our loans to members and charge us interest on funds that we borrow. In the event that the spread between the interest rate at which we lend to our members and the rate at which we borrow from our lenders decreases, our Net Revenue will decrease. We have capped the APR for newly originated loans at 36% since August 2020. Interest rates continue to fluctuate, which may increase our interest expense and cost of funds and may result in lower operating margins. The interest rates we charge to our members and pay to our lenders could each be affected by a variety of factors, including our ability to access capital markets, the volume of loans we make to our members, product mix, competition and regulatory limitations.

Current wording

We earn over 90% of our revenue from interest payments on the loans we make to our members. Financial institutions and other funding sources provide us with the capital to fund a substantial portion of the principal amount of our loans to members and charge us interest on funds that we borrow. In the event that the spread between the interest rate at which we lend to our members and the rate at which we borrow from our lenders decreases, our Net Revenue will decrease. Interest rates continue to fluctuate, which may increase our interest expense and cost of funds and may result in lower operating margins. The interest rates we charge to our members and pay to our lenders could each be affected by a variety of factors, including our ability to access capital markets, the volume of loans we make to our members, product mix, competition and regulatory limitations.

Previous wording

We recently announced the appointment of Doug Bland as our Chief Executive Officer, following the transition of our former Chief Executive Officer. Changes in our executive management team resulting from the hiring or departure of executives, including key personnel or members of senior management, could disrupt our operations and impact our ability to attract, integrate, retain and motivate employees, and have an adverse effect on our business. In particular, it could adversely impact our internal control environment, divert employee and management attention from ongoing business activities and strategic objectives, negatively affect employee morale and retention, and damage company culture. There can be no assurance that any of our other key personnel will remain with us, that the costs associated with retaining current key personnel and hiring new key personnel will be favorable or acceptable to us or that new key personnel will be as successful as their predecessors.

Current wording

Changes in our executive management team resulting from the hiring or departure of executives, including key personnel or members of senior management, could disrupt our operations and impact our ability to attract, integrate, retain and motivate employees, and have an adverse effect on our business. In particular, it could adversely impact our internal control environment, divert employee and management attention from ongoing business activities and strategic objectives, negatively affect employee morale and retention, and damage company culture. There can be no assurance that any of our other key personnel will remain with us, that the costs associated with retaining current key personnel and hiring new key personnel will be favorable or acceptable to us or that new key personnel will be as successful as their predecessors.

Previous wording

We are increasingly dependent on information systems, services and infrastructure to operate our business. In the ordinary course of our business, we collect, process, transmit and store large amounts of sensitive information, including personal information, credit information and other sensitive data of our members and potential members. It is critical that we do so in a manner designed to maintain the confidentiality, integrity and availability of such sensitive information. Our reputation and ability to attract, retain and serve our members is dependent upon the reliable performance and security of our technology infrastructure and those of third parties that we utilize in our operations. These systems may be subject to damage or interruption from, among other things, earthquakes, adverse weather conditions, other natural disasters, terrorist attacks, rogue employees, power loss, telecommunications failures, technological errors or outages, and cybersecurity risks. Like other financial and technology services firms, we have been and continue to be the subject of actual or attempted unauthorized access, mishandling or misuse of information, computer viruses, ransomware or other malware, and cyber-attacks that could obtain or disclose confidential information, destroy data, disrupt or degrade service, threaten the integrity and availability of our systems, distributed denial of service attacks, social engineering, security breaches and incidents, and infiltration, exfiltration or other similar events. Our adoption of remote working arrangements for our corporate and many of our contact center employees may result in increased consumer or employee privacy, security, and fraud concerns arising from the increased electronic transfer and other online activity. For example, our employees are accessing our servers remotely through home or other networks to perform their job responsibilities and such security systems may be less secure than those used in our offices, which may subject us to increased security risks, including cybersecurity-related events, and expose us to risks of data or financial loss and associated disruptions to our business operations. Techniques used in cybersecurity attacks to obtain unauthorized access, disable or sabotage information technology systems change frequently, as data breaches and other cybersecurity events have become increasingly commonplace, including as a result of the intensification of state-sponsored cybersecurity attacks during periods of geopolitical conflict, such as the ongoing conflicts in Ukraine and recent escalation of hostilities in the Middle East. We have seen, and will continue to see, industry-wide vulnerabilities, which could affect our or other parties’ systems. We also have incorporated A.I. technologies into our platform, and may continue to incorporate additional A.I. technologies into our platform in the future. Our use of A.I. technologies may create additional cybersecurity risks or incre…

Excerpt shortened here; the source contains the full paragraph.

Current wording

We are increasingly dependent on information systems, services and infrastructure to operate our business. In the ordinary course of our business, we collect, process, transmit and store large amounts of sensitive information, including personal information, credit information and other sensitive data of our members and potential members. It is critical that we do so in a manner designed to maintain the confidentiality, integrity and availability of such sensitive information. Our reputation and ability to attract, retain and serve our members is dependent upon the reliable performance and security of our technology infrastructure and those of third parties that we utilize in our operations. These systems may be subject to damage or interruption from, among other things, earthquakes, adverse weather conditions, other natural disasters, terrorist attacks, rogue employees, power loss, telecommunications failures, technological errors or outages, and cybersecurity risks. Like other financial and technology services firms, we have been and continue to be the subject of actual or attempted unauthorized access, mishandling or misuse of information, computer viruses, ransomware or other malware, and cyber-attacks that could obtain or disclose confidential information, destroy data, disrupt or degrade service, threaten the integrity and availability of our systems, distributed denial of service attacks, social engineering, security breaches and incidents, and infiltration, exfiltration or other similar events. Our adoption of remote working arrangements for our corporate and many of our contact center employees may result in increased consumer or employee privacy, security, and fraud concerns arising from the increased electronic transfer and other online activity. For example, our employees are accessing our servers remotely through home or other networks to perform their job responsibilities and such security systems may be less secure than those used in our offices, which may subject us to increased security risks, including cybersecurity-related events, and expose us to risks of data or financial loss and associated disruptions to our business operations. Techniques used in cybersecurity attacks to obtain unauthorized access, disable or sabotage information technology systems change frequently, as data breaches and other cybersecurity events have become increasingly commonplace, including as a result of the intensification of state-sponsored cybersecurity attacks during periods of geopolitical conflict, such as the ongoing conflicts in Ukraine and escalation of hostilities in the Middle East. We have seen, and will continue to see, industry-wide vulnerabilities, which could affect our or other parties’ systems. We also have incorporated A.I. technologies into our platform, and may continue to incorporate additional A.I. technologies into our platform in the future. Our use of A.I. technologies may create additional cybersecurity risks or increase cyb…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

As of March 31, 2026, 36.2%, 27.0%, 12.4%, 6.6% and 4.8% of our Owned Principal Balance at End of Period related to members from California, Texas, Florida, Illinois and New Jersey, respectively. If any of the events noted in these risk factors were to occur in or have a disproportionate impact in regions where we operate or plan to commence operations, it may negatively affect our business in many ways, including increased delinquencies and loan losses or a decrease in future originations.

Current wording

As of June 30, 2026, 35.7%, 26.6%, 12.4%, 6.7% and 4.9% of our Owned Principal Balance at End of Period related to members from California, Texas, Florida, Illinois and New Jersey, respectively. If any of the events noted in these risk factors were to occur in or have a disproportionate impact in regions where we operate or plan to commence operations, it may negatively affect our business in many ways, including increased delinquencies and loan losses or a decrease in future originations.

Previous wording

As of March 31, 2026, we had 1,578 employees in Mexico, including employees related to our two contact centers. These employees provide certain English/Spanish bilingual support related to member-facing contact center activities, administrative and technology support of the contact centers and back-office support services. In addition, we have a technology development center in India, where we had 205 employees as of March 31, 2026. We have also previously engaged vendors that utilized employees or contractors based outside of the U.S. These international activities are subject to inherent risks that are beyond our control, including:

Current wording

As of June 30, 2026, we had 1,528 employees in Mexico, including employees related to our two contact centers. These employees provide certain English/Spanish bilingual support related to member-facing contact center activities, administrative and technology support of the contact centers and back-office support services. In addition, we have a technology development center in India, where we had 200 employees as of June 30, 2026. We have also previously engaged vendors that utilized employees or contractors based outside of the U.S. These international activities are subject to inherent risks that are beyond our control, including:

Previous wording

Hello Digit, Inc. (“Digit”) received a CID from the CFPB in June 2020. The CID was disclosed and discussed during the acquisition process. The stated purpose of the CID is to determine whether Digit, in connection with offering its products or services, misrepresented the terms, conditions, or costs of the products or services in a manner that is unfair, deceptive, or abusive. While the Company believes that the business practices of the Company, including Digit, have been in full compliance with applicable laws, in the interest of resolving this matter, on August 11, 2022, Digit agreed to a consent order with the CFPB resolving such CID. In connection with such consent order, Digit agreed to implement a redress and compliance plan to pay at least $68,145 in consumer redress to consumers who may have been harmed and paid a $2.7 million civil penalty to the CFPB in the third quarter of 2022.

Current wording

Hello Digit, Inc. (“Digit”) received a CID from the CFPB in June 2020. The CID was disclosed and discussed during the acquisition process. The stated purpose of the CID was to determine whether Digit, in connection with offering its products or services, misrepresented the terms, conditions, or costs of the products or services in a manner that is unfair, deceptive, or abusive. While the Company believes that the business practices of the Company, including Digit, have been in full compliance with applicable laws, in the interest of resolving this matter, on August 11, 2022, Digit agreed to a consent order with the CFPB resolving such CID.

Previous wording

We collect, store, use, disclose, and otherwise process a large volume of personal information about individuals (including members and employees). New laws and regulations concerning the processing of personal information continue to be vigorously debated and enacted at all levels of government across the United States and around the globe while existing laws, such as the Gramm-Leach-Bliley Act (“GLBA”) are being amended or reinterpreted to account for the rapidly evolving data economy. The California Consumer Privacy Act (“CCPA”), as augmented and otherwise amended by the California Privacy Rights Act of 2020, imposes significant requirements on businesses processing consumer personal information, principally around enabling and honoring consumer choices related to such processing. Regulations under the CCPA have now been finalized addressing, among other matters, the use of automated decision-making technology (“ADMT”) in “significant decisions”. The CCPA and other state comprehensive privacy laws enacted to date contain certain exemptions for personal information that is subject to the GLBA. In some cases, these laws also contain broader exemptions for entities, such as financial institutions, that are subject to the GLBA; however, these exemptions may not exempt us completely from these laws, and their scope and interpretation remain subject to uncertainty. Further, future laws may not include such exemptions. Violations of the CCPA can result in civil penalties assessed by the California Attorney General or the California Privacy Protection Agency and individual plaintiffs may pursue statutory damages in a private right of action for certain data breaches. Several U.S. states have already followed California’s lead in enacting comprehensive privacy legislation and others are likely to do so in the future. These developments reflect the continued evolution of state privacy regulation and the potential for expanding obligations on businesses that use consumer data. At the federal level, regulators, including the CFPB and FTC, have adopted, or are considering adopting, laws and regulations concerning personal information and data privacy and security. The FTC, for example, released its updated Standards for Safeguarding Customer Information (Safeguards Rule), effective June 9, 2023, which raises the bar for covered financial institutions’ information security programs through proscriptive requirements for accountability, oversight, risk assessments, encryption, and multi-factor authentication to protect all forms of customer information.

Current wording

We collect, store, use, disclose, and otherwise process a large volume of personal information about individuals (including members and employees). New laws and regulations concerning the processing of personal information continue to be vigorously debated and enacted at all levels of government across the United States and around the globe while existing laws, such as the Gramm-Leach-Bliley Act (“GLBA”) are being amended or reinterpreted to account for the rapidly evolving data economy. The California Consumer Privacy Act (“CCPA”), as augmented and otherwise amended by the California Privacy Rights Act of 2020, imposes significant requirements on businesses processing consumer personal information, principally around enabling and honoring consumer choices related to such processing. Regulations under the CCPA have now been finalized addressing, among other matters, the use of automated decision-making technology (“ADMT”) in “significant decisions”. The CCPA and other state comprehensive privacy laws enacted to date contain certain exemptions for personal information that is subject to the GLBA. In some cases, these laws also contain broader exemptions for entities, such as financial institutions, that are subject to the GLBA; however, these exemptions may not exempt us completely from these laws, and their scope and interpretation remain subject to uncertainty. Further, future laws may not include such exemptions. Violations of the CCPA can result in civil penalties assessed by the California Attorney General or the California Privacy Protection Agency and individual plaintiffs may pursue statutory damages in a private right of action for certain data breaches. Several U.S. states have already followed California’s lead in enacting comprehensive privacy legislation and others are likely to do so in the future. These developments reflect the continued evolution of state privacy regulation and the potential for expanding obligations on businesses that use consumer data. At the federal level, regulators, including the CFPB and FTC, have adopted, or are considering adopting, laws and regulations concerning personal information and data privacy and security. The FTC, for example, released its updated Standards for Safeguarding Customer Information (Safeguards Rule), effective June 9, 2023, which raises the bar for covered financial institutions’ information security programs through proscriptive requirements for accountability, oversight, risk assessments, encryption, and multi-factor authentication to protect all forms of customer information. Further, on October 22, 2024, the CFPB finalized the Section 1033 Rule on Personal Financial Data Rights, which requires certain financial institutions, and any party who controls or possesses information concerning a covered financial product or service, to provide financial data to consumers in a standardized electronic format through a consumer interface and limits collecting and maintaining data only as ne…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Further, on October 22, 2024, the CFPB finalized the Section 1033 Rule on Personal Financial Data Rights, which requires certain financial institutions, and any party who controls or possesses information concerning a covered financial product or service, to provide financial data to consumers in a standardized electronic format through a consumer interface and limits collecting and maintaining data only as necessary to carry out transactions a consumer requests, prohibiting use of any information for targeted or behavioral advertising. The final rule has been challenged in the Eastern District Court of Kentucky. On July 29, 2025, the Eastern District of Kentucky issued an Order granting the stay of litigation requested by the CFPB while it works to promulgate a new rule-making process to revise the rule’s scope, definitions and timing. Compliance deadlines are uncertain since the CFPB has been enjoined from enforcing the rule and the April 1, 2026 deadline for the largest institutions has passed without action from the CFPB, and the rule’s ultimate substantive obligations could change materially. Because the substance and timing of the revised rule are uncertain at this time, it is possible it could adversely affect our business. The U.S. federal government also is contemplating federal privacy legislation. This patchwork of state and federal legislation and regulation may give rise to conflicts or differing views of personal privacy rights and of privacy, data protection, and security obligations to which we must adhere.

Current wording

CFPB while it works to promulgate a new rule-making process to revise the rule’s scope, definitions and timing. Compliance deadlines are uncertain since the CFPB has been enjoined from enforcing the rule and the April 1, 2026 deadline for the largest institutions has passed without action from the CFPB, and the rule’s ultimate substantive obligations could change materially. Because the substance and timing of the revised rule are uncertain at this time, it is possible it could adversely affect our business. The U.S. federal government also is contemplating federal privacy legislation. This patchwork of state and federal legislation and regulation may give rise to conflicts or differing views of personal privacy rights and of privacy, data protection, and security obligations to which we must adhere.

Previous wording

We currently have bank partnership programs with Pathward to offer unsecured personal loans, secured personal loans, and provide deposit accounts, and other transaction services to our members. State and federal agencies have broad discretion in their interpretation of laws and their interpretation of requirements related to bank partnership programs and may elect to alter standards or the interpretation of the standards applicable to these programs. States are also introducing and passing legislation designed to examine these programs by defining who has the “predominant economic interest” in the loan transaction and prohibiting such entity from collecting interest and fees above state mandated caps. In addition, as a result of our bank partnerships, prudential bank regulators with supervisory authority over our partners have the ability to regulate aspects of our business. There has also been significant recent government enforcement action and litigation challenging the validity of such arrangements for lending products, including disputes seeking to recharacterize lending transactions on the basis that the non-bank party rather than the bank is the “true lender” or “de facto lender”, and in case law challenging the “valid when made” doctrine, which holds that based on federal preemption, state interest rate limitations are not applicable in the context of certain bank-non-bank partnership arrangements.

Current wording

We currently have bank partnership programs with Pathward and Column banks to offer unsecured personal loans, secured personal loans, and provide deposit accounts, and other transaction services to our members. State and federal agencies have broad discretion in their interpretation of laws and their interpretation of requirements related to bank partnership programs and may elect to alter standards or the interpretation of the standards applicable to these programs. States are also introducing and passing legislation designed to examine these programs by defining who has the “predominant economic interest” in the loan transaction and prohibiting such entity from collecting interest and fees above state mandated caps. In addition, as a result of our bank partnerships, prudential bank regulators with supervisory authority over our partners have the ability to regulate aspects of our business. There has also been significant recent government enforcement action and litigation challenging the validity of such arrangements for lending products, including disputes seeking to recharacterize lending transactions on the basis that the non-bank party rather than the bank is the “true lender” or “de facto lender”, and in case law challenging the “valid when made” doctrine, which holds that based on federal preemption, state interest rate limitations are not applicable in the context of certain bank-non-bank partnership arrangements.

Previous wording

Our amended and restated certificate of incorporation authorizes us to issue shares of common stock authorized but unissued and rights relating to common stock for the consideration and on the terms and conditions established by our Board in its sole discretion, whether in connection with acquisitions or otherwise. We have authorized a total of 19,222,629 shares for issuance under our 2019 Equity Incentive Plan with 11,004,696 shares, net of vested and exercised shares, remaining available for issuance, 3,076,776 shares for issuance under our 2019 Employee Stock Purchase Plan, and 1,105,000 shares authorized for issuance under our Amended and Restated 2021 Inducement Equity Incentive Plan with 615,531 shares, net of vested and exercised shares, remaining for issuance, each subject to adjustment in certain events. Any common stock that we issue, including under our existing equity incentive plans or other equity incentive plans that we may adopt in the future, or in connection with any acquisitions, financings, investments or otherwise, could dilute your percentage ownership.

Current wording

Our amended and restated certificate of incorporation authorizes us to issue shares of common stock authorized but unissued and rights relating to common stock for the consideration and on the terms and conditions established by our Board in its sole discretion, whether in connection with acquisitions or otherwise. We have authorized a total of 19,222,629 shares for issuance under our 2019 Equity Incentive Plan with 10,782,817 shares, net of vested and exercised shares, remaining available for issuance, 3,076,776 shares for issuance under our 2019 Employee Stock Purchase Plan, and 2,305,000 shares authorized for issuance under our Amended and Restated 2021 Inducement Equity Incentive Plan with 1,784,444 shares, net of vested and exercised shares, remaining for issuance, each subject to adjustment in certain events. Any common stock that we issue, including under our existing equity incentive plans or other equity incentive plans that we may adopt in the future, or in connection with any acquisitions, financings, investments or otherwise, could dilute your percentage ownership.

Previous wording

As of March 31, 2026, warrants to purchase 2,682,788 shares of our common stock issued in connection with our Corporate Financing, remain outstanding and exercisable. The exercise price of these warrants is $0.01 per share. To the extent such warrants are exercised, additional shares of common stock will be issued, which will result in dilution to holders of our common stock and increase the number of shares eligible for resale in the public market. The fact that such warrants may be exercised or sales of substantial numbers of such shares in the public market could adversely affect the market price of our common stock.

Current wording

As of June 30, 2026, warrants to purchase 2,588,375 shares of our common stock issued in connection with our Corporate financing, remain outstanding and exercisable. The exercise price of these warrants is $0.01 per share. To the extent such warrants are exercised, additional shares of common stock will be issued, which will result in dilution to holders of our common stock and increase the number of shares eligible for resale in the public market. The fact that such warrants may be exercised or sales of substantial numbers of such shares in the public market could adversely affect the market price of our common stock.

Previous wording

As of December 31, 2025, the Company had federal net operating loss carryforwards of $150.9 million, all of which carry forward indefinitely. Additionally, the Company had state net operating loss carryforwards of $136.8 million which are set to begin expiring in 2031. As of December 31, 2025, the Company had federal and California research and development tax credit carryforwards of $19.6 million and $8.4 million, respectively. The federal research and development tax credit carryforwards expire beginning in 2041, and the California research and development tax credits are not subject to expiration. Realization of these net operating loss and research and development tax credit carryforwards depends on future income, and there is a risk that some of our existing carryforwards could expire unused or may be unavailable to fully offset future income tax liabilities, which could adversely affect our results of operations. Other limitations may also apply under state law. For example, California legislation limits the use of state net operating loss carryforwards and tax credits for tax years beginning on or after January 1, 2024, and before January 1, 2027. As a result of this legislation or other unforeseen reasons, we may not be able to utilize some or all of our net operating loss carryforwards and tax credits, even if we attain profitability.

Current wording

As of December 31, 2025, we had federal net operating loss carryforwards of $150.9 million, all of which carry forward indefinitely. Additionally, we had state net operating loss carryforwards of $136.8 million which are set to begin expiring in 2031. As of December 31, 2025, we had federal and California research and development tax credit carryforwards of $19.6 million and $8.4 million, respectively. The federal research and development tax credit carryforwards expire beginning in 2041, and the California research and development tax credits are not subject to expiration. Realization of these net operating loss and research and development tax credit carryforwards depends on future income, and there is a risk that some of our existing carryforwards could expire unused or may be unavailable to fully offset future income tax liabilities, which could adversely affect our results of operations. Other limitations may also apply under state law. For example, California legislation limits the use of state net operating loss carryforwards and tax credits for tax years beginning on or after January 1, 2024, and before January 1, 2027. As a result of this legislation or other unforeseen reasons, we may not be able to utilize some or all of our net operating loss carryforwards and tax credits, even if we attain profitability.