Skip to main content

Block Inc

For the period ended Sep 30, 2024. Filed Nov 7, 2024.

View on SEC.gov

About this filing

A company's report for each of its first three quarters. The financial statements are not audited. It shows how the business has moved since the last annual report, and what management says changed.

Sep 30, 2024 · Filed Nov 7, 2024

XYZ$85.48+1.7%Stored close · as of Nov 6, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-Q

Period ended 2024-06-30; filed 2024-08-01.

0001628280-24-034157

Item 1A. Risk Factors

Current report: 10-Q

Period ended 2024-09-30; filed 2024-11-07.

0001628280-24-046294

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 307 previous paragraphs and 307 current paragraphs.

287 unchanged; 20 reworded; 0 added; 0 removed; 0 previous and 0 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Reworded paragraphs (20)

Previous wording

Our success will depend on our ability to develop new technologies, to adapt to technology changes and evolving industry standards, to incorporate new technologies into our products and services, and to provide products and services that are tailored to specific needs and requirements of our customers. For example, generative AI has become more publicly available and enterprise adoption of generative AI has grown. We have incorporated and expect to continue to incorporate AI features into our products and technologies and our success will depend in part on our ability to do so in a way that is compelling to our customers. It is difficult to predict all of the risks related to the use of AI because laws, rules, directives, and regulations governing the use of AI are evolving rapidly and our ability to develop or use AI may be adversely affected. If we are unable to provide enhancements and new features for our products and services or to develop new products and services that achieve market acceptance or that keep pace with rapid technological developments and evolving industry standards, our business would be materially and adversely affected.

Current wording

Our success will depend on our ability to develop new technologies, to adapt to technology changes and evolving industry standards, to incorporate new technologies into our products and services, and to provide products and services that are tailored to specific needs and requirements of our customers. For example, generative AI has become more publicly available and enterprise adoption of generative AI has grown. We have incorporated and expect to continue to incorporate AI features into our products and technologies and our success will depend in part on our ability to do so in a way that is compelling to our customers and cost-effective. It is difficult to predict all of the risks related to the use of AI because laws, rules, directives, and regulations governing the use of AI are evolving rapidly and our ability to develop or use AI may be adversely affected. If we are unable to provide enhancements and new features for our products and services or to develop new products and services that achieve market acceptance or that keep pace with rapid technological developments and evolving industry standards, our business would be materially and adversely affected.

Previous wording

Our investments in bitcoin, our bitcoin ecosystem, and our Cash App feature that permits customers to transact in bitcoin, subject us to additional risks related to any further developments in the cryptocurrency markets and the resulting impact on customer and investor behavior. We may experience adverse impacts to our business as a result of the downstream effects of the bankruptcies filed by certain cryptocurrency market participants, its severity, and the actions taken by regulators to address its impact. Enforcement actions by U.S. regulators against major crypto asset platforms and negative publicity associated with crypto asset activities may, among other things, result in a decline in confidence or interest in crypto assets. If the cryptocurrency environment deteriorates, our customers may wish to sell their bitcoin at a price or volume that exceeds the market demand for bitcoin, which could cause disruptions in our operations and have a material and adverse effect on our business and financial condition. If our customers experience losses due to market fluctuations in the prices of bitcoin, they may reduce or cease their use of Cash App and our results of operations may be adversely impacted. Further, our customers could attempt to seek compensation from us for their financial investment losses, and those claims, even if unsuccessful, would likely be time-consuming and costly for us to address.

Current wording

Our investments in bitcoin, our bitcoin ecosystem, and our Cash App feature that permits customers to transact in bitcoin, subject us to additional risks related to any further developments in the cryptocurrency markets and the resulting impact on customer and investor behavior. We may experience adverse impacts to our business as a result of the downstream effects of the bankruptcies filed by certain cryptocurrency market participants and the actions taken by regulators to address its impact. Enforcement actions by U.S. regulators against major crypto asset platforms and negative publicity associated with crypto asset activities may, among other things, result in a decline in confidence or interest in crypto assets. If the cryptocurrency environment deteriorates, our customers may wish to sell their bitcoin at a price or volume that exceeds the market demand for bitcoin, which could cause disruptions in our operations and have a material and adverse effect on our business and financial condition. If our customers experience losses due to market fluctuations in the prices of bitcoin, they may reduce or cease their use of Cash App and our results of operations may be adversely impacted. Further, our customers could attempt to seek compensation from us for their financial investment losses, and those claims, even if unsuccessful, would likely be time-consuming and costly for us to address.

Previous wording

Volatility in the banking and financial services sectors may impact our bank partnerships and could negatively impact our business. For example, we offer certain FDIC-insured products through our partnerships with banks that are members of the FDIC. We believe our banking programs, including records maintained by us and our bank partners, comply with all applicable requirements for each eligible participant's deposits to be covered by FDIC insurance, up to the applicable maximum deposit insurance amount. However, if the FDIC were to disagree, the FDIC may not recognize the participants’ claims as covered by deposit insurance in the event a bank partner fails and enters receivership proceedings under the Federal Deposit Insurance Act (“FDIA”). If the FDIC were to determine that funds held at a bank partner are not covered by deposit insurance, or if one or more of our bank partners were to fail and enter receivership proceedings under the FDIA, our sellers and customers may seek to withdraw their funds, or may not be able to withdraw all their funds in a timely manner, which could adversely affect our brand, business and results of operations, and may lead to claims or litigation, which may be costly to address. Additionally, in instances where we are a service-provider to or are otherwise in a third-party relationship with our bank partners in connection with these programs, we are subject to certain risk-management standards for third-party relationships in accordance with federal bank regulatory guidance and examinations by the federal banking regulators. Should we or our bank partners be unable to satisfy these standards, we may have to discontinue certain product offerings or discontinue certain third-party relationships, and our business and operations may be materially and adversely affected.

Current wording

Volatility in the banking and financial services sectors may impact our bank partnerships and could negatively impact our business. For example, we offer certain FDIC-insured products through our partnerships with banks that are members of the FDIC. We believe our banking programs, including records maintained by us and our bank partners, satisfy all applicable regulatory conditions for each eligible participant's deposits to be covered by FDIC insurance, up to the applicable maximum deposit insurance amount. However, if the FDIC were to disagree, the FDIC may not recognize the participants’ claims as covered by deposit insurance in the event a bank partner fails and enters receivership proceedings under the Federal Deposit Insurance Act (“FDIA”). If the FDIC were to determine that funds held at a bank partner are not covered by deposit insurance, or if one or more of our bank partners were to fail and enter receivership proceedings under the FDIA, our sellers and customers may seek to withdraw their funds, or may not be able to withdraw all their funds in a timely manner, which could adversely affect our brand, business and results of operations, and may lead to claims or litigation, which may be costly to address. Additionally, in instances where we are a service-provider to or are otherwise in a third-party relationship with our bank partners in connection with these programs, we are subject to certain risk-management standards for third-party relationships in accordance with federal bank regulatory guidance and examinations by the federal banking regulators. Should we or our bank partners be unable to satisfy these standards, we may have to discontinue certain product offerings or discontinue certain third-party relationships, and our business and operations may be materially and adversely affected.

Previous wording

The business loans provided by Square Loans are generally unsecured obligations of our sellers, and they are not guaranteed or insured in any way. Adverse changes in macroeconomic conditions or the credit quality of our sellers could cause some sellers who utilize Square Loans to cease operating or to experience a decline in their payment processing volume, thereby rendering them unable to make payment on the business loan and/or extend the repayment period beyond the contractual repayment terms on the business loan. To the extent a seller breaches a contractual obligation, such as the requirement to make minimum payments or other breach, the seller would be liable for an accelerated business loan repayment, where our recourse is to the business and not to any individual or other asset. In addition, because the servicing fees we receive from third-party investors depend on the collectability of the business loans, if there is an increase in sellers who utilize Square Loans who are unable to repay their business loans, we will be unable to collect our entire servicing fee for such loans. While our exposure to loans that we sell to third parties is more limited, if the sellers who utilize Square Loans are unable to repay their loans, the risk of loss in our owned loan portfolio will increase and our business may be adversely affected.

Current wording

The business loans provided by Square Loans are generally unsecured obligations of our sellers, and they are not guaranteed or insured in any way. Adverse changes in macroeconomic conditions or the credit quality of our sellers could cause some sellers who utilize Square Loans to cease operating or to experience a decline in their payment processing volume, thereby rendering them unable to make payment on the business loan and/or extend the repayment period beyond the contractual repayment terms on the business loan. To the extent a seller breaches a contractual obligation, such as the requirement to make minimum payments or other breach, the seller would be liable for an accelerated business loan repayment, where our recourse is to the business and not to any individual or other asset. In addition, because the servicing fees we receive from third-party investors depend on the repayment of the business loans, if there is an increase in sellers who utilize Square Loans who are unable to repay their business loans, we will be unable to collect our entire servicing fee for such loans. While our exposure to loans that we sell to third parties is more limited, if the sellers who utilize Square Loans are unable to repay their loans, the risk of loss in our owned loan portfolio will increase and our business may be adversely affected.

Previous wording

To provide our products and services, we rely on third parties that we do not control, such as the payment card networks, our acquiring and issuing processors, the payment card issuers, a carrying broker, bank partners, various financial institution partners, systems like the Federal Reserve Automated Clearing House, and other partners. We rely on these third parties for a variety of services, including the transmission of transaction data, processing of chargebacks and refunds, settlement of funds to our sellers, certain brokerage services, storing customer funds, authorizing payment transactions under our various card programs, originating loans to customers, provide liquidity for Cash App’s feature that permits our customers to buy and sell bitcoin, and the provision of information and other elements of our services. For example, we rely on a limited number of acquiring processors in some of the jurisdictions in which we offer our services. We are in the process of transitioning one of our acquiring processors, and we frequently review and assess third-party partners that provide services. Adding or transitioning to new acquiring or issuing processors or other third-party providers may significantly disrupt our business or increase our costs. We have also in the past experienced outages with third parties we have worked with, which have affected our ability to provide services and process payments, including for cards issued under our own brands. In the event these third parties fail to provide these services adequately, including as a result of financial difficulty or insolvency, errors in their systems, outages or events beyond their control, or refuse to provide these services or renew our agreements with them on terms acceptable to us or at all, and we are not able to find suitable alternatives, our business may be materially and adversely affected.

Current wording

To provide our products and services, we rely on third parties that we do not control, such as the payment card networks, our acquiring and issuing processors, the payment card issuers, a carrying broker-dealer, bank partners, various financial institution partners, systems like the Federal Reserve Automated Clearing House, and other partners. We rely on these third parties for a variety of services, including the transmission of transaction data, processing of chargebacks and refunds, settlement of funds to our sellers, certain brokerage services, storing customer funds, authorizing payment transactions under our various card programs, originating loans to customers, providing liquidity for Cash App’s feature that permits our customers to buy and sell bitcoin, and providing information and other elements of our services. For example, we rely on a limited number of acquiring processors in some of the jurisdictions in which we offer our services. We are in the process of transitioning one of our acquiring processors, and we frequently review and assess third-party partners that provide services. Adding or transitioning to new acquiring or issuing processors or other third-party providers may significantly disrupt our business or increase our costs. We have also in the past experienced outages with third parties, which have affected our ability to provide services and process payments, including for cards issued under our own brands. In the event these third parties fail to provide these services adequately, including as a result of financial difficulty or insolvency, errors in their systems, outages or events beyond their control, or refuse to provide these services or renew our agreements with them on terms acceptable to us or at all, and we are not able to find suitable alternatives, our business may be materially and adversely affected.

Previous wording

To maintain and grow our business, we will need to identify, attract, hire, develop, motivate, and retain highly skilled employees. This requires significant time, expense, and attention. In addition, from time to time, there may be changes in our management team that may be disruptive to our business. If our management team, including any new hires that we make, fails to work together effectively and to execute our plans and strategies on a timely basis, our business could be harmed. Competition for highly skilled personnel is intense. We may need to invest significant amounts of cash and equity to attract and retain new employees, and we may never realize returns on these investments. Further, our plan to continue to cap our employee base at approximately 12,000, and any other future plans to restructure our employee base to improve operational efficiencies and operating costs, may adversely affect our ability to retain or attract highly skilled employees.

Current wording

To maintain and grow our business, we will need to identify, attract, hire, develop, motivate, and retain highly skilled employees. This requires significant time, expense, and attention. In addition, from time to time, there may be changes in our management team or management structure that may be disruptive to our business. If our management team or management structure, including any new hires that we make, fails to work together effectively and to execute our plans and strategies on a timely basis, our business could be harmed. Competition for highly skilled personnel is intense. We may need to invest significant amounts of cash and equity to attract and retain new employees, and we may never realize returns on these investments. Further, our plan to continue to cap our employee base at approximately 12,000, and any other future plans to restructure our employee base to improve operational efficiencies and operating costs, may adversely affect our ability to retain or attract highly skilled employees.

Previous wording

In addition, our ability to repurchase or to pay cash upon conversion or at maturity of the Notes may be limited by law or regulatory authority. Our failure to repurchase Notes as required following a fundamental change or to pay cash upon conversion of our Convertible Notes (unless we elect to deliver solely shares of our Class A common stock to settle such conversion) or at maturity of the Notes as required by the applicable indenture would constitute a default under such indenture. A default under the applicable indenture or the fundamental change itself could also lead to a default under our credit agreement, our other outstanding indebtedness, or agreements governing our future indebtedness and could have a material adverse effect on our business, results of operations, and financial condition. If the payment of our other outstanding indebtedness or future indebtedness were to be accelerated after any applicable notice or grace periods, we may not have sufficient funds to repay such indebtedness and repurchase the Notes or to pay cash upon conversion of the Convertible Notes or at maturity of the Notes.

Current wording

In addition, our ability to repurchase or to pay cash upon conversion or at maturity of the Notes may be limited by law or regulatory authority. Our failure to repurchase Notes as required following a fundamental change or to pay cash upon conversion of our Convertible Notes (unless we elect to deliver solely shares of our Class A common stock to settle such conversion) or at maturity of the Notes as required by the applicable indenture would constitute a default under such indenture. A default under the applicable indenture could also lead to a default under our credit agreement, our other outstanding indebtedness, or agreements governing our future indebtedness. Moreover, the occurrence of the fundamental change itself could lead to such a default. Any such default could have a material adverse effect on our business, results of operations, and financial condition. If the payment of our other outstanding indebtedness or future indebtedness were to be accelerated after any applicable notice or grace periods, we may not have sufficient funds to repay such indebtedness and repurchase the Notes or to pay cash upon conversion of the Convertible Notes or at maturity of the Notes.

Previous wording

Our tax liability could be adversely affected by changes in tax laws, rates, regulations, and administrative practices. For example, various levels of government and international organizations, such as in the United States, the Organisation for Economic Co-operation and Development (“OECD”), and the European Union (“EU”), have increasingly focused on tax reform and any result from this development may create changes to long-standing tax principles, which could adversely affect our effective tax rate. On October 8, 2021, the OECD announced an international agreement with more than 130 countries to implement a new global minimum effective corporate tax rate of 15% (known as "Pillar Two") for large multinational companies starting in 2023. Additionally, under the agreement, new rules have been introduced that will result in the reallocation of certain profits from large multinational companies to market jurisdictions where customers and users are located. On December 12, 2022, the EU Council unanimously agreed to implement Pillar Two, which EU member countries are required to adopt into their respective tax codes by the end of 2023. On July 17, 2023, the OECD published Administrative Guidance regarding certain safe harbor rules that effectively extend certain effective dates to January 1, 2027. Although certain implementation details have yet to be developed and the enactment of these changes has not yet taken effect, these changes may have adverse tax consequences for us.

Current wording

Our tax liability could be adversely affected by changes in tax laws, rates, regulations, and administrative practices. For example, various levels of government and international organizations, such as in the United States, the Organisation for Economic Co-operation and Development (“OECD”), and the European Union (“EU”), have increasingly focused on tax reform and any result from this development may create changes to long-standing tax principles, which could adversely affect our effective tax rate. On October 8, 2021, the OECD announced an international agreement with more than 130 countries to implement a new global minimum effective corporate tax rate of 15% (known as "Pillar Two") for large multinational companies starting in 2023. Additionally, under the agreement, new rules have been introduced that will result in the reallocation of certain profits from large multinational companies to market jurisdictions where customers and users are located. On December 12, 2022, the EU Council unanimously agreed to implement Pillar Two, which EU member countries are required to adopt into their respective tax codes by the end of 2023. On July 17, 2023, the OECD published Administrative Guidance regarding certain safe harbor rules that effectively extend certain effective dates to January 1, 2027. Although certain implementation details have yet to be developed, these changes may have adverse tax consequences for us.

Previous wording

On August 16, 2022, the Inflation Reduction Act was enacted in the United States, which introduced, among provisions, a new minimum corporate income tax on certain large corporations, an excise tax of 1% on certain share repurchases by corporations, and increased funding for the Internal Revenue Service. Although we do not anticipate the new corporate minimum income tax will currently apply to us, changes in our business and any future regulations or other guidance on the interpretation and application of the new corporate minimum tax may result in additional taxes payable by us, which could materially and adversely affect our financial results and operations.

Current wording

On August 16, 2022, the Inflation Reduction Act was enacted in the United States, which introduced, among provisions, a new minimum corporate income tax on certain large corporations, an excise tax of 1% on certain share repurchases by corporations, and increased funding for the Internal Revenue Service. Although we do not anticipate the new corporate minimum income tax will currently apply to us, we may be subject to the corporate minimum income tax in the future due to changes in our financial results, business and any future regulations or other guidance on the interpretation and application of the new corporate minimum tax. In addition, as announced on August 1, 2024, our board of directors approved an increase to our share repurchase program authorizing the repurchase of up to an additional $3.0 billion of our Class A common stock. The new minimum corporate income tax and 1% excise tax on share repurchases may result in additional taxes payable by us, which could materially and adversely affect our financial results and operations.

Previous wording

Our income tax obligations are based on our corporate operating structure, including the manner in which we develop, value, and use our intellectual property and the scope of our international operations. The tax authorities of the jurisdictions in which we operate may challenge our methodologies for valuing developed technology or intercompany arrangements. Additionally, tax authorities at the international, federal, state, and local levels are currently reviewing the appropriate tax treatment of companies engaged in internet commerce and financial technology and attempting to broaden the classification and definitions of activities subject to taxation. For example, various states may attempt to broaden the definition of internet hosting, data processing, telecommunications, and other services to capture additional types of activities. These developing changes could affect our financial position and results of operations. In particular, it is possible that tax authorities at the international, federal, state, and local levels may attempt to regulate our transactions or levy new or revised sales and use taxes, gross receipts, franchise, VAT, digital services taxes, digital advertising taxes, income taxes, loan taxes, streaming taxes, or other taxes relating to our activities, which would likely increase the cost of doing business. New taxes could also create significant increases in internal costs necessary to capture data and collect and remit taxes. Proposed or enacted laws regarding tax compliance obligations could require us to make changes to our infrastructure or increase our compliance obligation. Any of these events could have an adverse effect on our business and results of operations. Moreover, an increasing number of states, the U.S. federal government, and certain foreign jurisdictions have considered or adopted laws or administrative practices that impose obligations for on-demand and streaming services, online marketplaces, payment service providers and other intermediaries. These obligations may deem parties, such as us, to be the legal agent of merchants and therefore may require us to collect and remit taxes on the merchants' behalf and take on additional reporting and record-keeping obligations. For example, the American Rescue Plan Act of 2021 requires businesses that process payments to report payments for goods and services on Form 1099-K when those transactions total more than $600 in a year for a given seller, which reporting requirement applies to Square and Cash App for Business accounts. This new threshold is currently expected to apply to transactions occurring in 2024, subject to any changes implemented by the Internal Revenue Service. Any failure by us to prepare for and to comply with these and similar reporting and record-keeping obligations could result in substantial monetary penalties and other sanctions, adversely impact our ability to do business in certain jurisdictions, and harm our business.

Current wording

Our income tax obligations are based on our corporate operating structure, including the manner in which we develop, value, and use our intellectual property and the scope of our international operations. The tax authorities of the jurisdictions in which we operate may challenge our methodologies for valuing developed technology or intercompany arrangements. Additionally, tax authorities at the international, federal, state, and local levels are currently reviewing the appropriate tax treatment of companies engaged in internet commerce and financial technology and attempting to broaden the classification and definitions of activities subject to taxation. For example, various states may attempt to broaden the definition of internet hosting, data processing, telecommunications, and other services to capture additional types of activities. These developing changes could affect our financial position and results of operations. In particular, it is possible that tax authorities at the international, federal, state, and local levels may attempt to regulate our transactions or levy new or revised sales and use taxes, gross receipts, franchise, VAT, digital services taxes, digital advertising taxes, income taxes, loan taxes, streaming taxes, or other taxes relating to our activities, which would likely increase the cost of doing business. New taxes could also create significant increases in internal costs necessary to capture data and collect and remit taxes. Proposed or enacted laws regarding tax compliance obligations could require us to make changes to our infrastructure or increase our compliance obligation. Any of these events could have an adverse effect on our business and results of operations. Moreover, an increasing number of states, the U.S. federal government, and certain foreign jurisdictions have considered or adopted laws or administrative practices that impose obligations for on-demand and streaming services, online marketplaces, payment service providers and other intermediaries. These obligations may deem parties, such as us, to be the legal agent of merchants and therefore may require us to collect and remit taxes on the merchants' behalf and take on additional reporting and record-keeping obligations. For example, the American Rescue Plan Act of 2021 requires businesses that process payments to report payments for goods and services on Form 1099-K when those transactions total more than $600 in a year for a given seller, which reporting requirement applies to Square and Cash App for Business accounts. However, the IRS has delayed the $600 threshold for 2023 and prior tax years and affected businesses are only required to send out Forms 1099-K to taxpayers who receive over $20,000 and have over 200 transactions in those years. For the 2024 tax year, the IRS has announced plans for a threshold of $5,000 to phase in reporting requirements, which is potentially subject to change until new federal legislation raising the threshold and/or f…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

As of June 30, 2024, we had a valuation allowance for deferred tax assets in the United States and in certain other countries. Our net deferred tax assets relate predominantly to the United States federal and state tax jurisdictions. The need for a valuation allowance requires an assessment of both positive and negative evidence when determining whether it is more likely than not that deferred tax assets are recoverable; such assessment is required on a jurisdiction-by-jurisdiction basis. In making such an assessment, significant weight is given to evidence that can be objectively verified.

Current wording

As of September 30, 2024, we had a valuation allowance for deferred tax assets in the United States and in certain other countries. Our deferred tax assets relate predominantly to the United States federal and state tax jurisdictions. The need for a valuation allowance requires an assessment of both positive and negative evidence to determine whether it is more likely than not that deferred tax assets are recoverable; such assessment is required on a jurisdiction-by-jurisdiction basis. In making such an assessment, significant weight is given to evidence that can be objectively verified.

Previous wording

We continue to monitor the likelihood that we will be able to recover our deferred tax assets in the future. Future adjustments in our valuation allowance may be required. The recording of any future increases in our valuation allowance could have a material impact on our reported results, and both the recording and release of the valuation allowance could cause fluctuations in our quarterly and annual results of operations.

Current wording

We continue to monitor the likelihood that we will be able to recover our deferred tax assets in the future and adjustments in our valuation allowance may be required. Given our recent results and expected future results in the United States, sufficient positive evidence may exist in a future period to support the conclusion that all or a portion of the valuation allowance will no longer be required. The release of the United States valuation allowance would result in the recognition of material federal and state deferred tax assets and a corresponding decrease to income tax expense and the effective tax rate in the period it is recorded. The timing and amount of any valuation allowance release is unknown because it is dependent on the assessment of all available evidence, including projected future taxable income in each applicable jurisdiction. The recording of any future increases in or release of all or any portion of our valuation allowance could have a material impact on our reported results, and both the recording and release of the valuation allowance could cause fluctuations in our quarterly and annual results of operations.

Previous wording

These laws, rules, regulations, and standards are enforced by multiple authorities and governing bodies in the United States, including federal agencies, such as the FDIC, the SEC, the Consumer Financial Protection Bureau ("CFPB"), and Office of Foreign Assets Control, self-regulatory organizations, and numerous state and local agencies, such as the Utah Department of Financial Institutions. Outside of the United States, we are subject to additional regulators, authorities, and governing bodies. As we expand into new jurisdictions, expand our product offerings in existing jurisdictions, or as laws, regulations, and standards evolve, the number of foreign regulations and regulators, authorities, and governing bodies governing our business will expand as well. For example, in connection with our acquisition of Afterpay we established a secondary listing on the ASX, subjecting us to additional listing requirements. As our business and products continue to develop and expand, we may become subject to additional rules, regulations, and industry standards. We may not always be able to accurately predict the scope or applicability of certain regulations to our business, particularly as we expand into new areas of operations, which could have a significant negative effect on our existing business and our ability to pursue future plans. In addition, certain regulators have imposed and in the future may impose additional requirements on our business as a condition for obtaining or maintaining permits, licenses or rights to conduct our business that restrict our business or our ability to take certain actions. If we fail to comply with the terms of such permits, licenses or other requirements, we could face regulatory or other enforcement actions, penalties or we may not be able to continue operating our business in the same manner.

Current wording

These laws, rules, regulations, and standards are enforced by multiple authorities and governing bodies in the United States, including federal agencies, such as the FDIC, the SEC, the Consumer Financial Protection Bureau ("CFPB"), the Department of Justice ("DOJ") and Office of Foreign Assets Control, self-regulatory organizations, and numerous state and local agencies, such as the Utah Department of Financial Institutions. Outside of the United States, we are subject to additional regulators, authorities, and governing bodies. As we expand into new jurisdictions, expand our product offerings in existing jurisdictions, or as laws, regulations, and standards evolve, the number of foreign regulations and regulators, authorities, and governing bodies governing our business will expand as well. For example, in connection with our acquisition of Afterpay we established a secondary listing on the ASX, subjecting us to additional listing requirements. As our business and products continue to develop and expand, we may become subject to additional rules, regulations, and industry standards. We may not always be able to accurately predict the scope or applicability of certain regulations to our business, particularly as we expand into new areas of operations, which could have a significant negative effect on our existing business and our ability to pursue future plans. In addition, certain regulators have imposed and in the future may impose additional requirements on our business as a condition for obtaining or maintaining permits, licenses or rights to conduct our business that restrict our business or our ability to take certain actions. If we fail to comply with the terms of such permits, licenses or other requirements, we could face regulatory or other enforcement actions, penalties or we may not be able to continue operating our business in the same manner.

Previous wording

We are subject to audits, inspections, inquiries, and investigations from regulators, authorities, and governing bodies, as applicable, on an ongoing basis. Although we have a compliance program focused on the laws, rules, regulations, and standards applicable to our business, we have been and are still subject to audits, inspections, inquiries, investigations, fines, or other actions or penalties in one or more jurisdictions levied by regulators, including federal agencies, state Attorneys General and private plaintiffs who may be acting as private attorneys general pursuant to various applicable laws, as well as those levied by foreign regulators, authorities, and governing bodies. For example, following the publication of a short seller report in March 2023, we received inquiries from the SEC and Department of Justice and we continue to cooperate in such matters. Further, regulatory, governmental and other agencies have and may continue to coordinate or share information from time to time. In addition to fines, penalties for failing to comply with applicable rules and regulations could include significant criminal and civil lawsuits, forfeiture of significant assets, increased licensure requirements, revocation of licenses or other enforcement actions. We have been and may be required to make changes to our business practices or compliance programs as a result of regulatory scrutiny. In addition, any perceived or actual failure by us to comply with applicable laws, rules, regulations, and standards could have a significant impact on our reputation as a trusted brand and could cause us to lose existing customers, prevent us from obtaining new customers, require us to expend significant funds to remedy problems caused by breaches and to avert further breaches, and expose us to legal risk and potential criminal and civil liability.

Current wording

We are subject to audits, inspections, inquiries, and investigations from regulators, authorities, and governing bodies, as applicable, on an ongoing basis. Although we have a compliance program focused on the laws, rules, regulations, and standards applicable to our business, we have been and are still subject to audits, inspections, inquiries, investigations, fines, or other actions or penalties in one or more jurisdictions levied by regulators, including federal agencies, state Attorneys General and private plaintiffs who may be acting as private attorneys general pursuant to various applicable laws, as well as those levied by foreign regulators, authorities, and governing bodies. For example, following the publication of a short seller report in March 2023, we received inquiries from the SEC and DOJ and we continue to cooperate in such matters. Further, as discussed in Note 17., Commitments and Contingencies, we have received CIDs from the CFPB and have been engaged in discussions regarding certain compliance matters. Regulatory, governmental and other agencies have and may continue to coordinate or share information from time to time, which may result in new or consolidated actions by various agencies against us. In addition to fines, penalties for failing to comply with applicable rules and regulations could include significant criminal and civil lawsuits, forfeiture of significant assets, increased licensure requirements, revocation of licenses or other enforcement actions. We have been and may be required to make changes to our business practices or compliance programs as a result of regulatory scrutiny. In addition, any perceived or actual failure by us to comply with applicable laws, rules, regulations, and standards could have a significant impact on our reputation as a trusted brand and could cause us to lose existing customers, prevent us from obtaining new customers, require us to expend significant funds to remedy issues identified by regulators, and expose us to legal risk and potential criminal and civil liability.

Previous wording

We are subject to laws and regulations relating to the collection, use, retention, privacy, protection, security, and transfer of information, including personal information of our employees and customers. As with the other laws and regulations noted above, these laws and regulations may change or be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible they will be interpreted and applied in ways that will materially and adversely affect our business. For example, the European Union’s General Data Protection Regulation (“GDPR”) and similar legislation in the United Kingdom (“U.K.”) impose stringent privacy and data protection requirements and provide for greater penalties for noncompliance of up to the greater of 4% of worldwide annual revenue or €20 million or £17.5 million, as applicable. The GDPR restricts international data transfers from the EU to other jurisdictions unless the rights of the individual data subjects in respect of their personal data is protected by an approved transfer mechanism, or one of a limited number of exceptions applies. The U.K.’s data protection regime contains similar requirements. When transferring personal data from the EU to other jurisdictions, we utilize standard contractual clauses published by the EU Commission (the "SCCs"). On July 16, 2020, the Court of Justice of the European Union issued a decision that may impose additional obligations on companies when relying on those SCCs. On July 10, 2023, the European Commission issued its “adequacy decision” for the EU-US Data Privacy Framework, concluding that the DPF ensures U.S. protection of personal data transferred between the countries is comparable to that offered in the EU. These and other developments relating to cross-border data transfer could result in increased costs of compliance and limitations on our customers and us. Additionally, legal or regulatory challenges or other developments relating to cross-border data transfer may serve as a basis for our personal data handling practices, or those of our customers and vendors, to be challenged and may otherwise adversely impact our business, financial condition, and operating results. In the U.K., the Data Protection Act and legislation referred to as the UK GDPR substantially enact the EU GDPR into U.K. law, with penalties for noncompliance of up to the greater of £17.5 million or four percent of worldwide revenues. The European Commission has issued an adequacy decision under the GDPR and the Law Enforcement Directive, pursuant to which personal data generally may be transferred from the EU to the U.K. without restriction, subject to a four-year “sunset” period, after which the European Commission’s adequacy decision may be renewed. During that period, the European Commission will continue to monitor the legal situation in the U.K. and may intervene at any time with respect to its adequacy decision. The UK’s adequacy determination therefore is subje…

Excerpt shortened here; the source contains the full paragraph.

Current wording

We are subject to laws and regulations relating to the collection, use, retention, privacy, protection, security, and transfer of information, including personal information of our employees and customers. As with the other laws and regulations noted above, these laws and regulations may change or be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible they will be interpreted and applied in ways that will materially and adversely affect our business. For example, the European Union’s General Data Protection Regulation (“GDPR”) and similar legislation in the United Kingdom (“U.K.”) impose stringent privacy and data protection requirements and provide for greater penalties for noncompliance of up to the greater of 4% of worldwide annual revenue or €20 million or £17.5 million, as applicable. The GDPR restricts international data transfers from the EU to other jurisdictions unless the rights of the individual data subjects in respect of their personal data is protected by an approved transfer mechanism, or one of a limited number of exceptions applies. In the U.K., the Data Protection Act and legislation referred to as the GDPR substantially enact the GDPR into U.K. law and provide for similar requirements. When transferring personal data from the EU to other jurisdictions, we utilize standard contractual clauses published by the EU Commission (the "SCCs"). We use similar mechanisms approved by the U.K. Information Commissioner’s Office when transferring personal data from the UK to other jurisdictions. On July 16, 2020, the Court of Justice of the European Union issued a decision that may impose additional obligations on companies when relying on those SCCs. On July 10, 2023, the European Commission issued its “adequacy decision” for the EU-US Data Privacy Framework, concluding that the DPF ensures U.S. protection of personal data transferred between the countries is comparable to that offered in the EU. These and other developments relating to cross-border data transfer could result in increased costs of compliance and limitations on our customers and us. Additionally, legal or regulatory challenges or other developments relating to cross-border data transfer may serve as a basis for our personal data handling practices, or those of our customers and vendors, to be challenged and may otherwise adversely impact our business, financial condition, and operating results. In the U.K., personal data generally may be transferred from the EU to the U.K. without restriction pursuant to an adequacy decision issued by the European Commission under the GDPR and the Law Enforcement Directive, subject to a four-year “sunset” period, after which the European Commission’s adequacy decision may be renewed. During that period, the European Commission will continue to monitor the legal situation in the U.K. and may intervene at any time with respect to its adequacy decision. The UK’s adequacy determination therefor…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Some of the laws and regulations affecting the internet, mobile commerce, payment processing, BNPL, bitcoin and equity investing, streaming service, business financing, and employment were not written with businesses like ours in mind, and many of the laws and regulations, including those affecting us have been enacted relatively recently. As a result, there is substantial uncertainty regarding the scope and application of many of the laws and regulations to which we are or may be subject, which increases the risk that we will be subject to claims alleging violations of those laws and regulations. The scope, outcome, and impact of claims, lawsuits, government or regulatory investigations, subpoenas, inquiries or audits, and other proceedings to which we are subject cannot be predicted with certainty. Regardless of the outcome, such investigations and legal proceedings can have a material and adverse impact on us due to their costs, diversion of our resources, and other factors. Plaintiffs may seek, and we may become subject to, preliminary or provisional rulings in the course of litigation, including preliminary injunctions requiring us to cease some or all of our operations. We may decide to settle legal disputes on terms that are unfavorable to us.

Current wording

Some of the laws and regulations affecting the internet, mobile commerce, dispute resolution, payment processing, BNPL, bitcoin and equity investing, streaming service, business financing, and employment were not written with businesses like ours in mind, and many of the laws and regulations, including those affecting us have been enacted relatively recently. As a result, there is substantial uncertainty regarding the scope and application of many of the laws and regulations to which we are or may be subject, which increases the risk that we will be subject to claims alleging violations of those laws and regulations. The scope, outcome, and impact of claims, lawsuits, government or regulatory investigations, subpoenas, inquiries or audits, and other proceedings to which we are subject cannot be predicted with certainty. Regardless of the outcome, such investigations and legal proceedings can have a material and adverse impact on us due to their costs, diversion of our resources, restrictions placed on our business, and other factors. Plaintiffs may seek, and we may become subject to, preliminary or provisional rulings in the course of litigation, including preliminary injunctions requiring us to cease some or all of our operations. We may decide to settle legal disputes on terms that are unfavorable to us.

Previous wording

We have obtained licenses to operate as a money transmitter (or as other financial services institutions) in the U.S. and in the states where this is required, as well as in some non-U.S. jurisdictions, including but not limited to the EU, the U.K., and Australia. As a licensed money transmitter, we are subject to obligations and restrictions including with respect to the investment of customer funds, reporting requirements, bonding requirements, and inspection by state and federal regulatory agencies concerning those aspects of our business considered money transmission. Evaluation of our compliance efforts, as well as the questions of whether and to what extent our products and services are considered money transmission, are matters of regulatory interpretation and could change over time. Our state money transmission license regulators also frequently collaborate on their examinations of our business. We have and continue to work with them on any concerns they raise. In the past, we have been subject to fines and other penalties by such regulatory authorities due to their interpretations and applications to our business of their respective state money transmission laws. Any examinations and investigations by state regulators could result in liability, including governmental fines, restrictions on our business, or other sanctions, and we could be forced to cease conducting business in certain jurisdictions, be forced to otherwise change our business practices in certain jurisdictions, or be required to obtain additional licenses or regulatory approvals. There can be no assurance that we will be able to obtain or maintain any such licenses, and, even if we were able to do so, there could be substantial costs and potential product changes involved in maintaining such licenses, which could have a material and adverse effect on our business.

Current wording

We have obtained licenses to operate as a money transmitter (or as other financial services institutions) in the U.S. and in the states where this is required, as well as in some non-U.S. jurisdictions, including but not limited to the EU, the U.K., and Australia. As a licensed money transmitter, we are subject to obligations and restrictions including with respect to the investment of customer funds, reporting requirements, bonding requirements, and inspection by state and federal regulatory agencies concerning those aspects of our business considered money transmission. Evaluation of our compliance efforts, as well as the questions of whether and to what extent our products and services are considered money transmission, are matters of regulatory interpretation and could change over time. Our state money transmission license regulators also frequently collaborate on their examinations of our business. We have and continue to work with them on any concerns they raise. In the past, we have been subject to, and may in the future be subject to, fines and other penalties by such regulatory authorities due to their interpretations and applications to our business of their respective state money transmission laws. Any examinations and investigations by state regulators could result in liability, including governmental fines, restrictions on our business, or other sanctions, and we could be forced to cease conducting business in certain jurisdictions, be forced to otherwise change our business practices in certain jurisdictions, or be required to obtain additional licenses or regulatory approvals. There can be no assurance that we will be able to obtain or maintain any such licenses, and, even if we were able to do so, there could be substantial costs and potential product changes involved in maintaining such licenses, which could have a material and adverse effect on our business.

Previous wording

The regulation of BNPL products is evolving, and it is possible that states or countries pass new or additional regulations or additional and changing legal, regulatory, tax, licensing, and compliance requirements and industry standards that could adversely impact our BNPL products or the way we operate our BNPL platform. In addition, the CFPB has clarified that companies offering BNPL products are subject to many of the same regulatory requirements as credit card issuers. Increased compliance obligations and regulatory scrutiny may negatively impact our revenue and profitability. Any inability, or perceived inability, to comply with existing or new compliance obligations issued by the CFPB or any other regulatory authority, including with respect to BNPL products, could lead to regulatory investigations, or result in administrative or enforcement action, such as fines, penalties, and/or enforceable undertakings and adversely affect us and our results of operations. Regulatory scrutiny or changes in the BNPL space may impose significant compliance costs and make it uneconomical for us to continue to operate in our current markets or for us to expand into new markets.

Current wording

The regulation of BNPL products is evolving, and states or countries have and may continue to pass new or additional regulations or additional and changing legal, regulatory, tax, licensing, and compliance requirements and industry standards that could adversely impact our BNPL products or the way we operate our BNPL platform. The CFPB has clarified that companies offering certain BNPL products are subject to many of the same regulatory requirements as credit card issuers. Increased compliance obligations and regulatory scrutiny may negatively impact our revenue and profitability. Any inability, or perceived inability, to comply with existing or new compliance obligations issued by the CFPB or any other regulatory authority, including with respect to BNPL products, could lead to regulatory investigations, or result in administrative or enforcement action, such as fines, penalties, and/or enforceable undertakings and adversely affect us and our results of operations. Regulatory scrutiny or changes in the BNPL space may impose significant compliance costs and make it uneconomical for us to continue to operate in our current markets or for us to expand into new markets.

Previous wording

Our subsidiary Cash App Investing facilitates transactions in shares and fractionalized shares of publicly-traded stock and exchange-traded funds by users of our Cash App through a third-party clearing and carrying broker, DriveWealth LLC (“DriveWealth”). Cash App Investing is registered with the SEC as a broker-dealer under the Exchange Act and is a member of FINRA. Therefore, Cash App Investing is subject to regulation, examination, and supervision by the SEC, FINRA, and state securities regulators. The regulations applicable to broker-dealers cover all aspects of the securities business, including sales practices, use and safekeeping of clients’ funds and securities, capital adequacy, record-keeping, and the conduct and qualification of officers, employees, and independent contractors. As part of the regulatory process, broker-dealers are subject to periodic examinations by their regulators, the purpose of which is to determine compliance with securities laws and regulations, and from time to time may be subject to additional routine and for-cause examinations. It is not uncommon for regulators to assert, upon completion of an examination, that the broker-dealer being examined has violated certain of these rules and regulations. Depending on the nature and extent of the violations, the broker-dealer may be required to pay a fine and/or be subject to other forms of disciplinary and corrective action. Additionally, the adverse publicity arising from the imposition of sanctions could harm our reputation and cause us to lose existing customers or fail to gain new customers.

Current wording

Our subsidiary Cash App Investing facilitates transactions in shares and fractionalized shares of publicly-traded stock and exchange-traded funds by users of our Cash App through a third-party clearing and carrying broker-dealer, DriveWealth LLC (“DriveWealth”). Cash App Investing is registered with the SEC as a broker-dealer under the Exchange Act and is a member of FINRA. Therefore, Cash App Investing is subject to regulation, examination, and supervision by the SEC, FINRA, and state securities regulators. The regulations applicable to broker-dealers cover all aspects of the securities business, including sales practices, use and safekeeping of clients’ funds and securities, capital adequacy, record-keeping, and the conduct and qualification of officers, employees, and independent contractors. As part of the regulatory process, broker-dealers are subject to periodic examinations by their regulators, the purpose of which is to determine compliance with securities laws and regulations, and from time to time may be subject to additional routine and for-cause examinations. It is not uncommon for regulators to assert, upon completion of an examination, that the broker-dealer being examined has violated certain of these rules and regulations. Depending on the nature and extent of the violations, the broker-dealer may be required to pay a fine and/or be subject to other forms of disciplinary and corrective action. Additionally, the adverse publicity arising from the imposition of sanctions could harm our reputation and cause us to lose existing customers or fail to gain new customers.

Previous wording

Investors, regulators, customers, employees and other stakeholders continue to focus on environmental, social, and governance (“ESG”) matters. Our ESG strategy is focused on four key areas: our customers and communities, global climate action, our people, and corporate governance. We publicly report on certain commitments, initiatives, and goals regarding ESG matters in our annual Corporate Social Responsibility Report, on our website, in our SEC filings, and elsewhere. For example, we are committed to building a diverse workforce and one of our climate goals is to achieve net zero carbon for operations by 2030. The implementation of our ESG commitments, initiatives, and goals may require additional investments, and in certain cases, are reliant on third-party verification and/or performance, and we cannot guarantee that we will make progress on our commitments and initiatives or achieve our goals. If we fail, or are perceived to fail, to make such progress or achievements, or to maintain ESG practices that meet evolving stakeholder expectations, or if we revise any of our ESG commitments, initiatives, or goals, our reputation and our ability to attract and retain employees could be harmed, and we may be negatively perceived by investors or our customers. To the extent that our required or voluntary disclosures about ESG matters increase, we could also be criticized or face claims regarding the accuracy, adequacy, or completeness of such disclosures and our reputation could be negatively impacted, or we could face claims regarding our policies and programs. In addition, regulatory requirements with respect to carbon emissions disclosures and other aspects of ESG may result in increased compliance requirements on our business and supply chain, and may increase our operating costs. For example, in October 2023, the California Governor signed into law the Climate-Related Financial Risk Act and the Climate Corporate Data Accountability Act, which significantly expand climate-related disclosure requirements for companies doing business in California, and the SEC recently adopted rules that will require registrants to provide climate-related information in their registration statements and annual reports, such as disclosure of material climate-related risks, Board of Directors’ oversight and risk management activities, material greenhouse gas emissions, and material climate-related targets and goals. The SEC rules will also require entities to quantify certain effects of severe weather events and other natural conditions in the audited financial statements. While the SEC's rules have been stayed pending judicial review, to the extent they become effective, we expect to expend significant time and resources to comply with the requirements.

Current wording

Investors, regulators, customers, employees and other stakeholders continue to focus on environmental, social, and governance (“ESG”) matters. Our ESG strategy is focused on four key areas: our customers and communities, global climate action, our people, and corporate governance. We publicly report on certain commitments, initiatives, and goals regarding ESG matters in our annual Corporate Social Responsibility Report, on our website, in our SEC filings, and elsewhere. For example, we are committed to building a diverse workforce and one of our climate goals is to achieve net zero carbon for operations by 2030. The implementation of our ESG commitments, initiatives, and goals may require additional investments, and in certain cases, are reliant on third-party verification and/or performance, and we cannot guarantee that we will make progress on our commitments and initiatives or achieve our goals. If we fail, or are perceived to fail, to make such progress or achievements, or to maintain ESG practices that meet evolving stakeholder expectations, or if we revise any of our ESG commitments, initiatives, or goals, our reputation and our ability to attract and retain employees could be harmed, and we may be negatively perceived by investors or our customers. To the extent that our required or voluntary disclosures about ESG matters increase, we could also be criticized or face claims regarding the accuracy, adequacy, or completeness of such disclosures and our reputation could be negatively impacted, or we could face claims regarding our policies and programs. In addition, regulatory requirements with respect to carbon emissions disclosures and other aspects of ESG may result in increased compliance requirements on our business and supply chain, and may increase our operating costs. For example, in October 2023, the California Governor signed into law the Climate-Related Financial Risk Act and the Climate Corporate Data Accountability Act, which significantly expand climate-related disclosure requirements for companies doing business in California, and the SEC recently adopted rules that will require registrants to provide climate-related information in their registration statements and annual reports, such as disclosure of material climate-related risks, Board of Directors’ oversight and risk management activities, material greenhouse gas emissions, and material climate-related targets and goals. The SEC rules will also require entities to quantify certain effects of severe weather events and other natural conditions in the audited financial statements. While the SEC's rules have been stayed pending judicial review, to the extent they become effective, we expect to expend significant time and resources to comply with the requirements. In addition, a number of jurisdictions outside the United States have adopted ESG rules that apply to us and we will incur costs and expend resources to comply with such applicable ESG rules.