Block, Inc.

Previous wording

Our rate of revenue and gross profit growth has slowed at times and may decline in the future, and it may slow or decline more quickly than we expect for a variety of reasons, including the risks described in this Quarterly Report on Form 10-Q. Additionally, our rate of revenue and gross profit growth may vary between our reporting segments. For example, in recent periods our Cash App segment revenue and gross profit growth has varied and may continue to vary from the growth rate of our Square segment. Our sellers and customers have no obligation to continue to use our services, and we cannot assure you that they will. We generally do not have long-term contracts with our sellers and customers, and the difficulty and costs associated with switching to a competitor may not be significant for many of the services we offer. Our sellers’ activity with us may decrease for a variety of reasons, including sellers’ level of satisfaction with our products and services, our pricing and the pricing and quality of competing products or services, the effects of economic conditions, or reductions in the aggregate spending of our sellers’ customers. Growth in transacting actives on Cash App and customers’ level of engagement with our products and services on Cash App are important to our success and long-term financial performance. However, the growth rate of transacting actives has fluctuated over time, has slowed in recent quarters, and may slow or decline in the future. A number of factors have affected and could negatively affect Cash App customer growth, inflows, and engagement levels, including our ability to introduce new products and services that are compelling to our customers and that they adopt, changes to our systems, competitive offerings in the market, processes or other technical or operational requirements that impact how customers use or access our products and services, the impact on our network of other customers choosing whether to use Cash App, our decision to expand into or exit certain markets, technical or other problems that affect customer experience, failure to provide sufficient customer support, fraud and scams targeting Cash App customers, changes in the regulatory environment or regulations applicable to us, and harm to our reputation and brand. Further, certain events or programs, such as government stimulus programs may correlate with periods of significant growth, but such growth may not be sustainable. Additionally, the growth rate of Cash App revenue may be distorted by the prices of bitcoin, as bitcoin revenue may increase or decrease due to changes in the price of, and demand for, bitcoin and may not correlate to customer or engagement growth rates.

Current wording

Our rate of revenue and gross profit growth has slowed at times and may decline in the future, and it may slow or decline more quickly than we expect for a variety of reasons, including the risks described in this Quarterly Report on Form 10-Q. Additionally, our rate of revenue and gross profit growth may vary between our reporting segments. For example, in recent periods our Cash App segment revenue and gross profit growth has varied and may continue to vary from the growth rate of our Square segment. Our sellers and customers have no obligation to continue to use our services, and we cannot assure you that they will. We generally do not have long-term contracts with our sellers and customers, and the difficulty and costs associated with switching to a competitor may not be significant for many of the services we offer. Our sellers’ activity with us may decrease for a variety of reasons, including sellers’ level of satisfaction with our products and services, our pricing and the pricing and quality of competing products or services, conditions impacting their businesses, including the effects of economic conditions, or reductions in the aggregate spending of our sellers’ customers. Growth in transacting actives on Cash App and customers’ level of engagement with our products and services on Cash App are important to our success and long-term financial performance. However, the growth rate of transacting actives has fluctuated over time, has slowed in recent quarters, and may slow or decline in the future. A number of factors have affected and could negatively affect Cash App customer growth, inflows, and engagement levels, including our ability to introduce new products and services that are compelling to our customers and that they adopt, changes to our systems, competitive offerings in the market, processes or other technical or operational requirements that impact how customers use or access our products and services, the impact on our network of other customers choosing whether to use Cash App, our decision to expand into or exit certain markets, technical or other problems that affect customer experience, failure to provide sufficient customer support, fraud and scams targeting Cash App customers, changes in the regulatory environment or regulations applicable to us, and harm to our reputation and brand. Further, certain events or programs, such as government stimulus programs may correlate with periods of significant growth, but such growth may not be sustainable. Additionally, the growth rate of Cash App revenue may be distorted by the prices of bitcoin, as bitcoin revenue may increase or decrease due to changes in the price of, and demand for, bitcoin and may not correlate to customer or engagement growth rates.

Previous wording

The growth of our business depends in part on our existing sellers and customers expanding their use of our products and services. If we are unable to increase broader use of our products and services within each of our ecosystems by our existing sellers and customers, our growth may slow or stop, and our business may be materially and adversely affected. The growth of our business also depends on our ability to attract new sellers and customers, to encourage sellers and customers to use our products and services, and to introduce successful new products and services. We have invested and will continue to invest in our business in order to offer better or new features, products, and services and to adjust our product offerings to changing economic conditions, but if those features, products, services, and changes fail to be successful on the expected timeline or at all, our growth may slow or decline.

Current wording

The growth of our business depends in part on our existing sellers and customers expanding their use of our products and services. If we are unable to increase broader use of our products and services, our growth may slow or stop, and our business may be materially and adversely affected. The growth of our business also depends on our ability to attract new sellers and customers, to encourage sellers and customers to use our products and services, and to introduce successful new products and services. We have invested and will continue to invest in our business in order to offer better or new features, products, and services and to adjust our product offerings to changing economic conditions, but if those features, products, services, and changes fail to be successful on the expected timeline or at all, our growth may slow or decline.

Previous wording

Our investments in bitcoin, our bitcoin ecosystem, and our Cash App feature that permits customers to transact in bitcoin each subject us to additional risks related to any further developments in the cryptocurrency markets and the resulting impact on customer and investor behavior. We may experience adverse impacts to our business as a result of the actions taken by regulators, legislatures, and other government actors, including the current U.S. administration, in the cryptocurrency industry. For example, to the extent the United States establishes a Strategic Bitcoin Reserve, or otherwise modifies the regulatory environment for digital assets, each of which has been contemplated by executive order and legislative proposals, demand for bitcoin, and thus, supply and pricing for bitcoin may be impacted. If the cryptocurrency environment deteriorates or improves based on these or other factors, our customers may wish to sell their bitcoin at a price or volume that exceeds the market demand for bitcoin, which could cause disruptions in our operations and have a material and adverse effect on our business and financial condition. If demand increases sharply, either to buy or to sell bitcoin, we may not be able to fulfill that demand in a timely manner or at all, which could result in customer frustration or movement to other platforms. If our customers experience losses due to market fluctuations in the prices of bitcoin, they may reduce or cease their use of Cash App, or other bitcoin-related products, which could adversely impact our results of operations. Further, our customers could attempt to seek compensation from us for their financial investment losses, and those claims, even if unsuccessful, would likely be time-consuming and costly for us to address.

Current wording

Our investments in bitcoin, our bitcoin ecosystem, and our Cash App and Square features that facilitate transactions in bitcoin by our customers and sellers each subject us to additional risks related to further developments in the cryptocurrency markets and the resulting impact on customer and investor behavior. Actions taken by regulators, legislatures, and other government actors, including the current U.S. administration, in the cryptocurrency industry, may impact market demand for bitcoin and the supply and pricing for bitcoin. If the cryptocurrency environment deteriorates or improves based on these or other factors, our customers may wish to sell their bitcoin at a price or volume that exceeds the market demand for bitcoin, which could cause disruptions in our operations and have a material and adverse effect on our business and financial condition. If demand increases sharply, either to buy or to sell bitcoin, we may not be able to fulfill that demand in a timely manner or at all, which could result in customer frustration or movement to other platforms. If our customers experience losses due to market fluctuations in the prices of bitcoin, they may reduce or cease their use of our product features that facilitate transactions in bitcoin, or other bitcoin-related products, which could adversely impact our results of operations. Further, our customers could attempt to seek compensation from us for their financial investment losses, and those claims, even if unsuccessful, would likely be time-consuming and costly for us to address.

Previous wording

•regional economic and political instability and other geopolitical risks.

Current wording

•economic and political instability and other geopolitical risks.

Previous wording

Revenue generated by our loan products such as Square Loans, as well as Cash App Borrow, and our BNPL products depends on our ability to recoup the loan amount. Loan products are generally unsecured obligations of our borrowers, and they are not guaranteed or insured in any way. Although we rely on technology to assess repayment capability for these loan products, there can be no guarantee that such processes will always accurately predict repayments. Miscalculation of repayment ability or a material increase in repayment failures, whether due to inflation, macroeconomic uncertainty and downturn, market volatility, or otherwise, may adversely affect our business, results of operations, and financial condition. If consumers who have purchased products or services using our BNPL platform do not receive the products or services, they may also cease payment on their outstanding balances or request a refund on previous payments, and our business may be negatively impacted. If a merchant ceases its operations, closes some or all of its locations, or fails to deliver goods or services to our BNPL customers, the merchant may not be able to reimburse us for chargebacks or refunds or may not be able to repay the funds we have advanced to them, all of which could result in higher charge-off rates than anticipated.

Current wording

Revenue generated by our loan products such as Square Loans, as well as Cash App Borrow, and our BNPL products depends on our ability to recoup the loan amount. Loan products are generally unsecured obligations of our borrowers, and they are not guaranteed or insured in any way. Although we rely on technology to assess repayment capability for these loan products, there can be no guarantee that such processes will always accurately predict repayments. If our underwriting processes fail to adequately capture risks or otherwise miscalculate repayment ability, we may experience higher levels of delinquencies, default and credit losses. As we expand into new products, customer segments, and geographies, or as inflation, economic downturns, or market volatility increases repayment failures, our ability to appropriately evaluate and manage credit risk may be further challenged, which could negatively impact our business, results of operations, and financial condition. If consumers who have purchased products or services using our BNPL platform do not receive the products or services, they may also cease payment on their outstanding balances or request a refund on previous payments, and our business may be negatively impacted. If a merchant ceases its operations, closes some or all of its locations, or fails to deliver goods or services to our BNPL customers, the merchant may not be able to reimburse us for chargebacks or refunds or may not be able to repay the funds we have advanced to them, all of which could result in higher charge-off rates than anticipated.

Previous wording

More generally, if our privacy, data protection, or cybersecurity measures or those of third-party developers or vendors are inadequate or are breached or otherwise compromised, and, as a result, there is improper disclosure of or someone obtains unauthorized access to or exfiltrates funds, bitcoin, investments, or other assets, or other data on our systems or our partners’ systems, or if we, our third-party developers or vendors suffer a cyber-attack, including a ransomware or advanced persistent threat attack, or if any of the foregoing is reported or perceived to have occurred, our reputation and business could be damaged, and we could face liability and financial losses. If data or assets are lost or improperly accessed, misused, disclosed, destroyed, or altered or threatened to be improperly accessed, misused, disclosed, destroyed, or altered, we could incur significant financial losses and costs and liability associated with remediation and the implementation of additional security measures and be subject to claims, litigation, regulatory scrutiny, and investigations. For example, in April 2022 we announced that we determined that a former employee downloaded certain reports of our subsidiary Cash App Investing in December 2021 that contained some U.S. customer information without permission after the former employee’s employment ended, as disclosed in our Current Report on Form 8-K filed with the SEC on April 4, 2022. We have incurred costs related to our investigation and response to this incident, and we could incur other losses, costs, and liabilities in connection with such incident.

Current wording

More generally, if our privacy, data protection, or cybersecurity measures or those of third-party developers or vendors are inadequate or are breached or otherwise compromised, and, as a result, there is improper disclosure of or someone obtains unauthorized access to or exfiltrates funds, bitcoin, investments, or other assets, or other data on our systems or our partners’ systems, or if we, our third-party developers or vendors suffer a cyber-attack, including a ransomware or advanced persistent threat attack, or if any of the foregoing is reported or perceived to have occurred, our reputation and business could be damaged, and we could face liability and financial losses. If data or assets are lost or improperly accessed, misused, disclosed, destroyed, or altered or threatened to be improperly accessed, misused, disclosed, destroyed, or altered, we could incur significant financial losses and costs and liability associated with remediation and the implementation of additional security measures and be subject to claims, litigation, regulatory scrutiny, and investigations.

Previous wording

Our software, hardware, systems, and processes may contain undetected errors or vulnerabilities that could have a material adverse effect on our business, particularly to the extent such errors or vulnerabilities are not detected and remedied quickly. We have from time to time found defects and errors in our customer-facing software and hardware, internal systems, external facing communications, manual processes, and technical integrations with third-party systems, including as a result of ordinary course updates to our software and systems, and new errors or vulnerabilities may be introduced in the future. From time to time, such errors or defects in our software, hardware, systems, or external facing communications, including as a result of human errors, have negatively impacted our customers’ experience with us and led to negative publicity and harm to our brand and reputation. In connection with any such defects or errors, we may also face government inquiries or investigations, claims and litigation, and we may incur additional costs or expenses to remediate the issues. Additionally, we rely on a limited number of component and product suppliers located outside of the U.S. to manufacture our products. As a result, our direct control over production and distribution is limited, and it is uncertain what effect such diminished control will have on the quality of our products. If there are defects in the manufacture of our hardware products, we may face similar negative publicity, investigations, and litigation, and we may not be fully compensated by our suppliers for any financial or other liability that we suffer as a result. As our hardware and software services continue to increase in size and complexity, and as we integrate new, acquired subsidiaries with different technology stacks and practices, these risks may correspondingly increase as well.

Current wording

Our software, hardware, systems, and processes may contain undetected errors or vulnerabilities that could have a material adverse effect on our business, particularly to the extent such errors or vulnerabilities are not detected and remedied quickly. We have from time to time found defects and errors in our customer-facing software and hardware, internal systems, external facing communications, manual processes, and technical integrations with third-party systems, including as a result of ordinary course updates to our software and systems, and new errors or vulnerabilities may be introduced in the future. From time to time, such errors or defects in our software, hardware, systems, or external facing communications, including as a result of human errors, have negatively impacted our customers’ experience with us and led to negative publicity and harm to our brand and reputation. In connection with any such defects or errors, we may also face government inquiries or investigations, claims and litigation, and we may incur additional costs or expenses to remediate the issues. Additionally, we rely on a limited number of component and product suppliers located outside of the U.S. to manufacture our products. As a result, our direct control over production and distribution is limited, and it is uncertain what effect such diminished control will have on the quality of our products. Any defects in our hardware products could result in negative publicity, investigations, and litigation, and we may not be fully compensated by our suppliers for any financial or other liability that we suffer as a result. As our hardware and software services continue to increase in size and complexity, and as we integrate new, acquired subsidiaries with different technology stacks and practices, these risks may correspondingly increase as well.

Previous wording

We offer payments and other products and services to a large number of customers. We have programs to vet and monitor these customers and the transactions we process for them as part of our risk management efforts, but such programs require continuous improvement and may not be effective in detecting and preventing fraud and illegitimate transactions. When our payments services are used to process illegitimate transactions, and we settle those funds to customers and are unable to recover them, we suffer losses and liability. As a greater number of larger sellers use our services, our exposure to material risk losses from a single seller, or from a small number of sellers, will increase. Illegitimate transactions can also expose us to governmental and regulatory enforcement actions, which may impair or otherwise limit our ability to operate or provide certain services, products, or features and potentially prevent us from satisfying our contractual obligations to our third-party partners, which may cause us to be in breach of our obligations. The highly automated nature of, and liquidity offered by, our payments and peer-to-peer services make us and our customers a target for illegal or improper uses, including scams and fraud directed at us and our customers, fraudulent or illegal sales of goods or services, money laundering, and terrorist financing. Identity thieves and those committing fraud using stolen or fabricated credit card, debit card, or bank account numbers, or other deceptive or malicious practices such as account takeovers, potentially can steal significant amounts of money from businesses like ours or from our customers or third parties. Our risk management policies, procedures, techniques, and processes may not be sufficient to identify all of the risks to which we are exposed, to enable us to prevent or mitigate the risks we have identified, or to identify additional risks to which we may become subject in the future. Our current business, the changing and uncertain economic, geopolitical and regulatory environment, and our anticipated domestic and international growth will continue to place significant demands on our risk management and compliance efforts. As our ecosystems grow and our business becomes more complex, we will need to continue developing, improving, and making investments into our risk management infrastructure, techniques, and processes. In addition, when we introduce new products or services, expand existing services or products to new or different cohorts of customers, including online payment acceptance and expanded methods of instantly moving money, focus on new business areas, including consumer financing and loans, or begin to operate in markets where we have a limited history of fraud loss, we may be less able to forecast and carry appropriate reserves on our books for those losses. Additionally, certain Cash App functions are available to customers between the ages of 13 through 17 with the authorization o…

Excerpt shortened here; the source contains the full paragraph.

Current wording

We offer payments and other products and services to a large number of customers. We have programs to vet and monitor these customers and the transactions we process for them as part of our risk management efforts, but such programs require continuous improvement and may not be effective in detecting and preventing fraud, bad actors, or illegitimate transactions. When our payments services are used to process illegitimate transactions, and we settle those funds to customers and are unable to recover them, we suffer losses and liability. As a greater number of larger sellers use our services, our exposure to material risk losses from a single seller, or from a small number of sellers, will increase. Illegitimate transactions and bad actors can also expose us to governmental and regulatory enforcement actions, which may impair or otherwise limit our ability to operate or provide certain services, products, or features and potentially prevent us from satisfying our contractual obligations to our third-party partners, which may cause us to be in breach of our obligations. The highly automated nature of, and liquidity offered by, our payments and peer-to-peer services make us and our customers a target for illegal or improper uses, including scams and fraud directed at us and our customers, fraudulent or illegal sales of goods or services, money laundering, and terrorist financing. Identity thieves and those committing fraud using stolen or fabricated credit card, debit card, or bank account numbers, or other deceptive or malicious practices such as account takeovers, potentially can steal significant amounts of money from businesses like ours or from our customers or third parties. Our risk management policies, procedures, techniques, and processes may not be sufficient to identify all of the risks to which we are exposed, to enable us to prevent or mitigate the risks we have identified, or to identify additional risks to which we may become subject in the future. Our current business, the changing and uncertain economic, geopolitical and regulatory environment, and our anticipated domestic and international growth will continue to place significant demands on our risk management and compliance efforts. As our ecosystems grow and our business becomes more complex, we will need to continue developing, improving, and making investments into our risk management infrastructure, techniques, and processes. In addition, when we introduce new products or services, expand existing services or products to new or different cohorts of customers, including online payment acceptance and expanded methods of instantly moving money, focus on new business areas, including consumer financing and loans, or begin to operate in markets where we have a limited history of fraud loss, we may be less able to forecast and carry appropriate reserves on our books for those losses. Additionally, certain Cash App functions are available to customers between the ages of 13 through …

Excerpt shortened here; the source contains the full paragraph.

Previous wording

If we do not continue to improve our operational, financial, and other internal controls and systems to manage growth effectively, our business could be harmed.

Current wording

If we do not continue to maintain and improve our operational, financial, and other internal controls and systems to manage growth effectively, our business could be harmed.

Previous wording

Many of our key components are procured from a single or limited number of suppliers. Thus, we are at risk of shortage, price increases, tariffs, changes, delay, or discontinuation of key components, which could disrupt and materially and adversely affect our business.

Current wording

Many of the key components in our hardware products are procured from a single or limited number of suppliers. Thus, we are at risk of shortage, price increases, tariffs, changes, delay, or discontinuation of key components, which could disrupt and materially and adversely affect our business.

Previous wording

Many of the key components used to manufacture our products, such as the custom parts of our magstripe reader, come from limited or single sources of supply. Due to our reliance on the components or products produced by third-party suppliers, we are subject to the risk of shortages and long lead times or other disruptions in the supply of certain components or products. We have in the past experienced, and may in the future experience, component shortages or delays or other problems in product assembly, and the availability of these components or products may be difficult to predict. For example, our manufacturers may experience temporary or permanent disruptions in their manufacturing operations due to equipment breakdowns, labor strikes or shortages, natural disasters, the occurrence of a contagious disease or illness, component or material shortages, cost increases, acquisitions, insolvency, bankruptcy, business shutdowns, trade restrictions, changes in legal or regulatory requirements, or other similar problems. In addition, if we underestimate or overestimate demand for a particular product, our contract manufacturers and suppliers may not be able to deliver sufficient quantities of that product to meet our requirements, or we may carry excess inventory, all of which could adversely affect our business.

Current wording

Many of the key components used to manufacture our hardware products, such as the custom parts of our magstripe reader, come from limited or single sources of supply. Due to our reliance on the components or products produced by third-party suppliers, we are subject to the risk of shortages and long lead times or other disruptions in the supply of certain components or products. We have in the past experienced, and may in the future experience, component shortages or delays or other problems in product assembly, and the availability of these components or products may be difficult to predict. For example, our manufacturers may experience temporary or permanent disruptions in their manufacturing operations due to equipment breakdowns, labor strikes or shortages, natural disasters, the occurrence of a contagious disease or illness, component or material shortages, cost increases, acquisitions, insolvency, bankruptcy, business shutdowns, trade restrictions, changes in legal or regulatory requirements, or other similar problems. In addition, if we underestimate or overestimate demand for a particular product, our contract manufacturers and suppliers may not be able to deliver sufficient quantities of that product to meet our requirements, or we may carry excess inventory, all of which could adversely affect our business.

Previous wording

Our credit agreement contains affirmative and negative covenants, including customary limitations on the incurrence of certain indebtedness and liens, restrictions on certain intercompany transactions, and limitations on dividends and stock repurchases. The indentures pursuant to which our 2026 Senior Notes, 2031 Senior Notes, and 2032 Senior Notes (collectively, the “Senior Notes”) were issued contain covenants that restrict or could restrict, among other things, our business and operations. Any debt financing obtained by us in the future could also involve restrictive covenants relating to our capital-raising activities and other financial and operational matters, which may make it more difficult for us to operate our business, obtain additional capital, and pursue business opportunities, including potential acquisitions. Our ability to comply with these covenants may be affected by events beyond our control, and breaches of these covenants could result in a default under our existing credit agreement or our Senior Notes and any future financing agreements into which we may enter. If not waived, these defaults could cause indebtedness outstanding under our credit agreement, our Senior Notes, our other outstanding indebtedness, including our 2026 Convertible Notes and 2027 Convertible Notes (collectively, the “Convertible Notes,” and together with the Senior Notes, the “Notes”), and any future financing agreements that we may enter into to become immediately due and payable or may prevent us from borrowing under our credit agreement.

Current wording

Our credit agreement contains affirmative and negative covenants, including customary limitations on the incurrence of certain indebtedness and liens, restrictions on certain intercompany transactions, and limitations on dividends and stock repurchases. The indentures pursuant to which our 2026 Senior Notes, 2030 Senior Notes, 2031 Senior Notes, 2032 Senior Notes, and 2033 Senior Notes (collectively, the “Senior Notes”) were issued contain covenants that restrict or could restrict, among other things, our business and operations. Any debt financing obtained by us in the future could also involve restrictive covenants relating to our capital-raising activities and other financial and operational matters, which may make it more difficult for us to operate our business, obtain additional capital, and pursue business opportunities, including potential acquisitions. Our ability to comply with these covenants may be affected by events beyond our control, and breaches of these covenants could result in a default under our existing credit agreement or our Senior Notes and any future financing agreements into which we may enter. If not waived, these defaults could cause indebtedness outstanding under our credit agreement, our Senior Notes, our other outstanding indebtedness, including our 2026 Convertible Notes and 2027 Convertible Notes (collectively, the “Convertible Notes,” and together with the Senior Notes, the “Notes”), and any future financing agreements that we may enter into to become immediately due and payable or may prevent us from borrowing under our credit agreement.

Previous wording

As of June 30, 2025, we had $575.0 million outstanding aggregate principal amount of 2026 Convertible Notes, $575.0 million outstanding aggregate principal amount of 2027 Convertible Notes, $1.0 billion outstanding aggregate principal amount of 2026 Senior Notes, $1.0 billion outstanding aggregate principal amount of 2031 Senior Notes, and $2.0 billion outstanding aggregate principal amount of 2032 Senior Notes.

Current wording

As of September 30, 2025, we had $575.0 million outstanding aggregate principal amount of 2026 Convertible Notes, $575.0 million outstanding aggregate principal amount of 2027 Convertible Notes, $1.0 billion outstanding aggregate principal amount of 2026 Senior Notes,$1.2 billion outstanding aggregate principal amount of 2030 Senior Notes, $1.0 billion outstanding aggregate principal amount of 2031 Senior Notes, $2.0 billion outstanding aggregate principal amount of 2032 Senior Notes, and$1.0 billion outstanding aggregate principal amount of 2033 Senior Notes.

Previous wording

The manner in which we account for our bitcoin under applicable accounting rules has changed. Prior to our adoption of ASU 2023-08, "Accounting for and Disclosure of Crypto Assets", which added Subtopic ASC 350-60, “Intangibles - Goodwill and Other - Crypto Asset”, to the accounting standards codification (“ASU 2023-08”), our bitcoin was accounted for as an indefinite-lived intangible asset and for each reporting period, we were required to evaluate our bitcoin for impairment and record impairment losses if the fair value decreased below the carrying value during the assessed period. Since impairment losses for our bitcoin investment could not be recovered for any subsequent increases in fair value until the asset was sold, our operating results were adversely affected in any period in which such impairment occurred. Upon adoption of ASU 2023-08, we remeasured our bitcoin investment to its fair value as of January 1, 2023, resulting in an adjustment to our accumulated deficit. We will continue to remeasure our bitcoin investment at the end of each reporting period with changes recognized in our consolidated statements of operations. Accordingly, fluctuations in the market value of bitcoin in any quarter may cause fluctuations in our financial results. If there are future changes in applicable accounting rules that require us to change the manner in which we account for our bitcoin investment, there could be a material and adverse effect on our financial results and the market price of our Class A common stock.

Current wording

The manner in which we account for our bitcoin under applicable accounting rules has changed. Prior to our adoption of Accounting Standards Update 2023-08, "Accounting for and Disclosure of Crypto Assets", which added Subtopic Accounting Standards Codification 350-60, “Intangibles - Goodwill and Other - Crypto Asset”, to the accounting standards codification (“ASU 2023-08”), our bitcoin was accounted for as an indefinite-lived intangible asset and for each reporting period, we were required to evaluate our bitcoin for impairment and record impairment losses if the fair value decreased below the carrying value during the assessed period. Since impairment losses for our bitcoin investment could not be recovered for any subsequent increases in fair value until the asset was sold, our operating results were adversely affected in any period in which such impairment occurred. Upon adoption of ASU 2023-08, we remeasured our bitcoin investment to its fair value as of January 1, 2023, resulting in an adjustment to our accumulated deficit. We will continue to remeasure our bitcoin investment at the end of each reporting period with changes recognized in our consolidated statements of operations. Accordingly, fluctuations in the market value of bitcoin in any quarter may cause fluctuations in our financial results. If there are future changes in applicable accounting rules that require us to change the manner in which we account for our bitcoin investment, there could be a material and adverse effect on our financial results and the market price of our Class A common stock.

Previous wording

We are subject to income taxes and non-income taxes in the United States and other countries in which we transact or conduct business, and such laws and rates vary by jurisdiction. We are subject to review and audit by U.S. federal, state, local, and foreign tax authorities. Such tax authorities have in the past disagreed, and may in the future disagree, with tax positions we take, and if any such tax authority were to successfully challenge any such position, our financial results and operations could be materially and adversely affected. For example, in June 2024, the Office of the Treasurer and Tax Collector of the City and County of San Francisco (the "Tax Collector") finalized its audit and issued an assessment of San Francisco’s gross receipts tax, including interest and penalties, following its gross receipt tax audit for fiscal years 2020, 2021 and 2022. The Tax Collector has asserted that incremental taxes are owed on a portion of the receipts generated by us related to sales of bitcoin. We strongly disagree with the Tax Collector’s assessment and plan to vigorously pursue all available remedies. In January 2025, the Tax Collector rejected our request for redetermination, and in January 2025 we paid the assessed amount of $71.4 million. In May 2025, the Tax Collector notified us that it had initiated a gross receipt tax audit for fiscal years 2023 and 2024. In June 2025 we filed a claim for refund for fiscal years 2020, 2021 and 2022. The Tax Collector may also challenge our gross receipts tax position going forward. In addition, we currently are, and expect to continue to be, subject to numerous federal, state, local and foreign tax audits relating to transfer pricing, income, sales and use, gross receipts, franchise, value-added (“VAT”), and other tax liabilities. While we have established reserves based on assumptions and estimates that we believe are reasonably sufficient to cover such eventualities, any adverse outcome of such a review or audit could have an adverse impact on our financial position and results of operations if the reserves prove to be insufficient.

Current wording

We are subject to income taxes and non-income taxes in the United States and other countries in which we transact or conduct business, and such laws and rates vary by jurisdiction. We are subject to review and audit by U.S. federal, state, local, and foreign tax authorities. Such tax authorities have in the past disagreed, and may in the future disagree, with tax positions we take, and if any such tax authority were to successfully challenge any such position, our financial results and operations could be materially and adversely affected. For example, in June 2024, the Office of the Treasurer and Tax Collector of the City and County of San Francisco (the "Tax Collector") finalized its audit and issued an assessment of San Francisco’s gross receipts tax, including interest and penalties, following its gross receipt tax audit for fiscal years 2020, 2021 and 2022. The Tax Collector has asserted that incremental taxes are owed on a portion of the receipts generated by us related to sales of bitcoin. We strongly disagree with the Tax Collector’s assessment and plan to vigorously pursue all available remedies. In January 2025, the Tax Collector rejected our request for redetermination, and in January 2025 we paid the assessed amount of $71.4 million. In May 2025, the Tax Collector notified us that it had initiated a gross receipt tax audit for fiscal years 2023 and 2024. In June 2025 we filed a claim for refund for fiscal years 2020, 2021 and 2022. In September 2025, we received a Notice of Deficiency from the Tax Collector for fiscal years 2023 and 2024 reflecting an assessment of $42.7 million, including tax, penalties and interest, which we paid in October 2025. In October 2025, we submitted our request for redetermination for fiscal years 2023 and 2024. The Tax Collector may also challenge our gross receipts tax position going forward. In addition, we currently are, and expect to continue to be, subject to numerous federal, state, local and foreign tax audits relating to transfer pricing, income, sales and use, gross receipts, franchise, value-added (“VAT”), and other tax liabilities. While we have established reserves based on assumptions and estimates that we believe are reasonably sufficient to cover such eventualities, any adverse outcome of such a review or audit could have an adverse impact on our financial position and results of operations if the reserves prove to be insufficient.

Previous wording

Our income tax obligations are based on our corporate operating structure, including the manner in which we develop, value, and use our intellectual property and the scope of our international operations. The tax authorities of the jurisdictions in which we operate may challenge our methodologies for valuing developed technology or intercompany arrangements. Additionally, tax authorities at the international, federal, state, and local levels are currently reviewing the appropriate tax treatment of companies engaged in internet commerce and financial technology and attempting to broaden the classification and definitions of activities subject to taxation. For example, various states may attempt to broaden the definition of internet hosting, data processing, telecommunications, and other services to capture additional types of activities. These developing changes could affect our financial position and results of operations. In particular, it is possible that tax authorities at the international, federal, state, and local levels may attempt to regulate our transactions or levy new or revised sales and use taxes, gross receipts, franchise, VAT, digital services taxes, digital advertising taxes, income taxes, loan taxes, streaming taxes, or other taxes relating to our activities, which would likely increase the cost of doing business. New taxes could also create significant increases in internal costs necessary to capture data and collect and remit taxes. Proposed or enacted laws regarding tax compliance obligations could require us to make changes to our infrastructure or increase our compliance obligation. Any of these events could have an adverse effect on our business and results of operations. Moreover, an increasing number of states, the U.S. federal government, and certain foreign jurisdictions have considered or adopted laws or administrative practices that impose obligations for on-demand and streaming services, online marketplaces, payment service providers and other intermediaries. These obligations may deem parties, such as us, to be the legal agent of merchants and therefore may require us to collect and remit taxes on the merchants' behalf and take on additional reporting and record-keeping obligations. For example, the American Rescue Plan Act of 2021 requires businesses that process payments to report payments for goods and services on Form 1099-K when those transactions total more than $600 in a year for a given seller, which reporting requirement applies to Square and Cash App for Business accounts. However, the IRS had delayed the $600 threshold for 2023 and prior tax years and affected businesses are only required to send out Forms 1099-K to taxpayers who receive over $20,000 and have over 200 transactions in those years. According to IRS guidance released in 2024, the threshold for reporting is $5,000 for 2024, $2,500 for 2025, and $600 for 2026. As of July 2025, the OBBB Act permanently revised the reporting threshold to $20,000…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Our income tax obligations are based on our corporate operating structure, including the manner in which we develop, value, and use our intellectual property and the scope of our international operations. The tax authorities of the jurisdictions in which we operate may challenge our methodologies for valuing developed technology or intercompany arrangements. Additionally, tax authorities at the international, federal, state, and local levels are currently reviewing the appropriate tax treatment of companies engaged in internet commerce and financial technology and attempting to broaden the classification and definitions of activities subject to taxation. For example, some jurisdictions have begun to broaden the definition of internet hosting, data processing, telecommunications, and other services to capture additional types of activities, which could affect our financial position and results of operations. In particular, it is possible that tax authorities at the international, federal, state, and local levels may attempt to regulate our transactions or levy new or revised sales and use taxes, gross receipts, franchise, VAT, digital services taxes, digital advertising taxes, income taxes, loan taxes, streaming taxes, or other taxes relating to our activities, which would likely increase the cost of doing business. New taxes could also create significant increases in internal costs necessary to capture data and collect and remit taxes. Proposed or enacted laws regarding tax compliance obligations could require us to make changes to our infrastructure or increase our compliance obligation. Any of these events could have an adverse effect on our business and results of operations. Moreover, an increasing number of states, the U.S. federal government, and certain foreign jurisdictions have considered or adopted laws or administrative practices that impose obligations for on-demand and streaming services, online marketplaces, payment service providers and other intermediaries. These obligations may deem parties, such as us, to be the legal agent of merchants and therefore may require us to collect and remit taxes on the merchants' behalf and take on additional reporting and record-keeping obligations. For example, the American Rescue Plan Act of 2021 requires businesses that process payments to report payments for goods and services on Form 1099-K when those transactions total more than $600 in a year for a given seller, which reporting requirement applies to Square and Cash App for Business accounts. However, the IRS had delayed the $600 threshold for 2023 and prior tax years and affected businesses are only required to send out Forms 1099-K to taxpayers who receive over $20,000 and have over 200 transactions in those years. According to IRS guidance released in 2024, the threshold for reporting is $5,000 for 2024, $2,500 for 2025, and $600 for 2026. As of July 2025, the OBBB Act permanently revised the reporting threshold to $20,000 and 200 transac…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

These laws, rules, regulations, and standards are enforced by multiple authorities and governing bodies in the United States, including federal agencies, such as the FDIC, the SEC, the Consumer Financial Protection Bureau ("CFPB"), the Department of Justice ("DOJ") and Office of Foreign Assets Control, self-regulatory organizations, and numerous state and local agencies, such as the Utah Department of Financial Institutions. Outside of the United States, we are subject to additional regulators, authorities, and governing bodies. As we expand into new jurisdictions, expand our product offerings in existing jurisdictions, or as laws, regulations, and standards evolve, the number of foreign regulations and regulators, authorities, and governing bodies governing our business will expand as well. For example, in connection with our acquisition of Afterpay we established a secondary listing on the ASX, subjecting us to additional listing requirements. As our business and products continue to develop and expand, we may become subject to additional rules, regulations, and industry standards. We may not always be able to accurately predict the scope or applicability of certain regulations to our business, particularly as we expand into new areas of operations, which could have a significant negative effect on our existing business and our ability to pursue future plans. In addition, certain regulators have imposed and in the future may impose additional requirements on our business as a condition for obtaining or maintaining permits, licenses or rights to conduct our business, including conditions under any settlements and consent orders with regulators, that restrict our business or our ability to take certain actions. If we fail to comply with the terms of such permits, licenses or other requirements, we could face regulatory or other enforcement actions, penalties or we may not be able to continue operating our business in the same manner.

Current wording

These laws, rules, regulations, and standards are enforced by multiple authorities and governing bodies in the United States, including federal agencies, such as the FDIC, the SEC, FinCEN, the Consumer Financial Protection Bureau ("CFPB"), the Department of Justice ("DOJ") and Office of Foreign Assets Control, self-regulatory organizations, and numerous state and local agencies, such as state money transmission license regulators and virtual currency regulators. Outside of the United States, we are subject to additional regulators, authorities, and governing bodies. As we expand into new jurisdictions, expand our product offerings in existing jurisdictions, or as laws, regulations, and standards evolve, the number of foreign regulations and regulators, authorities, and governing bodies governing our business will expand as well. For example, in connection with our acquisition of Afterpay we established a secondary listing on the ASX, subjecting us to additional listing requirements. As our business and products continue to develop and expand, we may become subject to additional rules, regulations, and industry standards. We may not always be able to accurately predict the scope or applicability of certain regulations to our business, particularly as we expand into new areas of operations, which could have a significant negative effect on our existing business and our ability to pursue future plans. In addition, certain regulators have imposed and in the future may impose additional requirements on our business as a condition for obtaining or maintaining permits, licenses or rights to conduct our business, including conditions under any settlements and consent orders with regulators, that restrict our business or our ability to take certain actions. If we fail to comply with the terms of such permits, licenses or other requirements, we could face regulatory or other enforcement actions, penalties or we may not be able to continue operating our business in the same manner.

Previous wording

For example, Cash App includes a feature that permits our customers to buy and sell bitcoin. Bitcoin is not widely accepted as legal tender or backed by governments around the world, and it has experienced price volatility, technological glitches, security compromises, and various law enforcement and regulatory interventions. Certain existing laws also prohibit transactions with certain persons and entities, and we have a risk-based program in place to prevent such transactions. Despite this, due to the nature of bitcoin and blockchain technology, we may not be able to prevent all such transactions, and there can be no guarantee that our measures will be viewed as sufficient. The regulation of bitcoin, as well as cryptocurrency and digital asset platforms is an evolving area, and we could become subject to additional legislation or regulation in the future, or we might not be able to continue operating the feature in Cash App, at least in current form. If we fail to comply with regulations or prohibitions applicable to us, we could face regulatory or other enforcement actions, potential fines, reputational harm, and other consequences. Further, we may need to make other changes to our business operations, our products or our services as a result of changes in laws, regulations, standards, or decisions made by governing or regulatory authorities, all of which could cause the price of our Class A common stock to decrease.

Current wording

For example, Cash App includes a feature that permits our customers to buy and sell bitcoin. Bitcoin is not widely accepted as legal tender or backed by governments around the world, and it has experienced price volatility, technological glitches, security compromises, and various law enforcement and regulatory interventions. Certain existing laws also prohibit transactions with certain persons and entities, and we have a risk-based program in place to prevent such transactions. Despite this, due to the nature of bitcoin and blockchain technology, we may not be able to prevent all such transactions, and there can be no guarantee that our measures will be viewed as sufficient. The regulation of bitcoin, as well as cryptocurrency and digital asset platforms is an evolving area, and we could become subject to additional legislation or regulation in the future, or we might not be able to continue operating our product features that facilitate transactions in bitcoin, at least in current form. If we fail to comply with regulations or prohibitions applicable to us, we could face regulatory or other enforcement actions, potential fines, reputational harm, and other consequences. Further, we may need to make other changes to our business operations, our products or our services as a result of changes in laws, regulations, standards, or decisions made by governing or regulatory authorities, all of which could cause the price of our Class A common stock to decrease.

Previous wording

We are subject to laws and regulations relating to the collection, use, retention, privacy, protection, security, and transfer of information, including personal information of our employees and customers. As with the other laws and regulations noted above, these laws and regulations may change or be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible they will be interpreted and applied in ways that will materially and adversely affect our business. For example, the EU’s General Data Protection Regulation (“GDPR”) and similar legislation in the United Kingdom (“U.K.”) impose stringent privacy and data protection requirements and provide for greater penalties for noncompliance of up to the greater of 4% of worldwide annual revenue or €20 million or £17.5 million, as applicable. The GDPR restricts international data transfers from the EU to other jurisdictions unless the rights of the individual data subjects in respect of their personal data is protected by an approved transfer mechanism, or one of a limited number of exceptions applies. In the U.K., the Data Protection Act and legislation referred to as the U.K. GDPR substantially enact the GDPR into U.K. law and provide for similar requirements. When transferring personal data from the EU to other jurisdictions, we utilize standard contractual clauses published by the EU Commission (the "SCCs"). We use similar mechanisms approved by the U.K. Information Commissioner’s Office when transferring personal data from the UK to other jurisdictions. On July 16, 2020, the Court of Justice of the European Union issued a decision imposing additional obligations on companies when relying on those SCCs. On July 10, 2023, the European Commission issued its “adequacy decision” for the EU-US Data Privacy Framework, concluding that the DPF ensures U.S. protection of personal data transferred between the countries is comparable to that offered in the EU. In the U.K., personal data generally may be transferred from the EU to the U.K. without restriction pursuant to an adequacy decision issued by the European Commission under the GDPR and the Law Enforcement Directive, subject to a four-year “sunset” period that expires in 2025, after which the European Commission’s adequacy decision may be renewed. The European Commission may intervene at any time with respect to its adequacy decision. The UK’s adequacy determination therefore is subject to future uncertainty and may be subject to modification or revocation in the future, particularly in light of recent updates to UK privacy law under the Data (Use and Access) Act 2025. These and other developments relating to cross-border data transfer could result in increased costs of compliance and limitations on our customers and us. Additionally, legal or regulatory challenges or other developments relating to cross-border data transfer may serve as a basis for our personal data handling practices, or those of our customer…

Excerpt shortened here; the source contains the full paragraph.

Current wording

We are subject to laws and regulations relating to the collection, use, retention, privacy, protection, security, and transfer of information, including personal information of our employees and customers. As with the other laws and regulations noted above, these laws and regulations may change or be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible they will be interpreted and applied in ways that will materially and adversely affect our business. For example, the EU’s General Data Protection Regulation (“GDPR”) and similar legislation in the United Kingdom (“U.K.”) impose stringent privacy and data protection requirements and provide for greater penalties for noncompliance of up to the greater of 4% of worldwide annual revenue or €20 million or £17.5 million, as applicable. The GDPR restricts international data transfers from the EU to other jurisdictions unless the rights of the individual data subjects in respect of their personal data is protected by an approved transfer mechanism, or one of a limited number of exceptions applies. In the U.K., the Data Protection Act and legislation referred to as the U.K. GDPR substantially enact the GDPR into U.K. law and provide for similar requirements. When transferring personal data from the EU to other jurisdictions, we utilize standard contractual clauses published by the EU Commission (the "SCCs"). We use similar mechanisms approved by the U.K. Information Commissioner’s Office when transferring personal data from the UK to other jurisdictions. On July 16, 2020, the Court of Justice of the European Union issued a decision imposing additional obligations on companies when relying on those SCCs. On July 10, 2023, the European Commission issued its “adequacy decision” for the EU-US Data Privacy Framework, concluding that the DPF ensures U.S. protection of personal data transferred between the countries is comparable to that offered in the EU. In the U.K., personal data generally may be transferred from the EU to the U.K. without restriction pursuant to an adequacy decision issued by the European Commission under the GDPR and the Law Enforcement Directive, subject to a four-year “sunset” period that expires in 2025, after which the European Commission’s adequacy decision may be renewed. The European Commission may intervene at any time with respect to its adequacy decision. The UK’s adequacy determination therefore is subject to future uncertainty and may be subject to modification or revocation in the future, particularly in light of recent updates to UK data protection law under the Data (Use and Access) Act 2025 ("DUAA"). The European Commission has proposed to renew the UK’s adequacy decision after assessing the DUAA, but additional procedural steps remain, causing some uncertainty to remain regarding the UK’s adequacy determination. These and other developments relating to cross-border data transfer could result in increased costs of compliance …

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Likewise, the California Consumer Privacy Act of 2018 (“CCPA”) became effective on January 1, 2020 and was amended by the California Privacy Rights Act, which was passed in November 2020 and became effective on January 1, 2023. The CCPA, as amended, imposes stringent data privacy and data protection requirements relating to personal information of California residents, and provides for penalties for noncompliance of up to $7,500 per violation. Aspects of the interpretation and enforcement of the CCPA remain unclear. More generally, privacy, data protection, and information security continue to be rapidly evolving areas, and further legislative activity has arisen and will likely continue to arise in the U.S., the EU, and other jurisdictions. For example, several states in the U.S. have proposed or enacted laws that contain obligations similar to the CCPA that have taken effect or will take effect in coming years. The U.S. federal government also is contemplating federal privacy legislation. Additionally, the U.S. Department of Justice has issued final rules, effective April 8, 2025, that prohibit and restrict certain access to U.S. bulk sensitive personal data and U.S. government-related data by designated countries of concern. The effects of recently proposed or enacted laws and regulation potentially are far-reaching and may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. Further, variances in these laws and regulations or their interpretations may increase our compliance costs.

Current wording

Likewise, the California Consumer Privacy Act of 2018 (“CCPA”) became effective on January 1, 2020 and was amended by the California Privacy Rights Act, which was passed in November 2020 and became effective on January 1, 2023. The CCPA, as amended, imposes stringent data privacy and data protection requirements relating to personal information of California residents, and provides for penalties for noncompliance of up to $7,500 per violation. Aspects of the interpretation and enforcement of the CCPA remain unclear. More generally, privacy, data protection, and information security continue to be rapidly evolving areas, and further legislative activity has arisen and will likely continue to arise in the U.S., the EU, and other jurisdictions. For example, several states in the U.S. have proposed or enacted laws that contain obligations similar to the CCPA that have taken effect or will take effect in coming years. Moreover, several states in the U.S. are now contemplating new regulatory frameworks specific to the privacy of individuals under 18 years of age. At the same time, the U.S. federal government continues to discuss comprehensive federal privacy legislation, which may substantially increase our compliance obligations. Additionally, the U.S. Department of Justice has issued final rules, effective April 8, 2025, that prohibit and restrict certain access to U.S. bulk sensitive personal data and U.S. government-related data by designated countries of concern. The effects of recently proposed or enacted laws and regulation potentially are far-reaching and may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. Further, variances in these laws and regulations or their interpretations may increase our compliance costs.

Previous wording

We have obtained licenses to operate as a money transmitter (or as other financial services institutions, such as virtual currency businesses) in the U.S. and in the states where this is required, as well as in some non-U.S. jurisdictions, including but not limited to the EU, the U.K., and Australia. As a licensed money transmitter, we are subject to obligations and restrictions including with respect to the investment of customer funds, reporting requirements, bonding requirements, and inspection by state and federal regulatory agencies concerning those aspects of our business considered money transmission. Evaluation of our compliance efforts, as well as the questions of whether and to what extent our products and services are considered money transmission, are matters of regulatory interpretation and could change over time. Our state money transmission license regulators also frequently collaborate on their examinations of our business. We have and continue to work with them on any concerns they raise. In the past, we have been subject to, and may in the future be subject to, fines and other penalties by such regulatory authorities due to their interpretations and applications to our business of their respective state money transmission laws. For example, in January 2025, we entered into a settlement agreement and consent order with various state money transmission license regulators related to aspects of our Bank Secrecy Act/anti-money laundering program. Failure to take required corrective actions may result in further exposure to state action. Any examinations and investigations by state regulators could result in liability, including governmental fines, restrictions on our business, or other sanctions, and we could be forced to cease conducting business or offering certain products or services in certain jurisdictions, be forced to otherwise change our business practices in certain jurisdictions, or be required to obtain additional licenses or regulatory approvals. There can be no assurance that we will be able to obtain or maintain any such licenses, and, even if we were able to do so, there could be substantial costs and potential product changes involved in maintaining such licenses, which could have a material and adverse effect on our business.

Current wording

We have obtained licenses to operate as a money transmitter (including the transmission of monetary value in the form of virtual currencies) in the U.S. and in the states where this is required, as well as in some non-U.S. jurisdictions, including but not limited to the EU, the U.K., and Australia. As a licensed money transmitter, we are subject to obligations and restrictions including with respect to the investment of customer funds, reporting requirements, bonding requirements, and inspection by state and federal regulatory agencies concerning those aspects of our business considered money transmission. Evaluation of our compliance efforts, as well as the questions of whether and to what extent our products and services are considered money transmission, are matters of regulatory interpretation and could change over time. Our state money transmission license regulators also frequently collaborate on their examinations of our business. We have and continue to work with them on any concerns they raise. In the past, we have been subject to, and may in the future be subject to, fines and other penalties by such regulatory authorities due to their interpretations and applications to our business of their respective state money transmission laws. For example, in January 2025, we entered into a settlement agreement and consent order with various state money transmission license regulators related to aspects of our Bank Secrecy Act/anti-money laundering program. Failure to take required corrective actions may result in further exposure to state action. Any examinations and investigations by state regulators could result in liability, including governmental fines, restrictions on our business, or other sanctions, and we could be forced to cease conducting business or offering certain products or services in certain jurisdictions, be forced to otherwise change our business practices in certain jurisdictions, or be required to obtain additional licenses or regulatory approvals. There can be no assurance that we will be able to obtain or maintain any such licenses, and, even if we were able to do so, there could be substantial costs and potential product changes involved in maintaining such licenses, which could have a material and adverse effect on our business.

Previous wording

Our subsidiary Cash App Investing facilitates transactions in shares and fractionalized shares of publicly-traded stock and exchange-traded funds by users of our Cash App through a third-party carrying broker-dealer, DriveWealth LLC (“DriveWealth”). Cash App Investing is registered with the SEC as a broker-dealer under the Exchange Act and is a member of FINRA. Therefore, Cash App Investing is subject to regulation, examination, and supervision by the SEC, FINRA, and state securities regulators. The regulations applicable to broker-dealers cover all aspects of the securities business, including sales practices, use and safekeeping of clients’ funds and securities, capital adequacy, record-keeping, and the conduct and qualification of officers, employees, and independent contractors. As part of the regulatory process, broker-dealers are subject to periodic examinations by their regulators, the purpose of which is to determine compliance with securities laws and regulations, and from time to time may be subject to additional routine and for-cause examinations. It is not uncommon for regulators to assert, upon completion of an examination, that the broker-dealer being examined has violated certain of these rules and regulations. Depending on the nature and extent of the violations, the broker-dealer may be required to pay a fine and/or be subject to other forms of disciplinary and corrective action. Additionally, the adverse publicity arising from the imposition of sanctions could harm our reputation and cause us to lose existing customers or fail to gain new customers.

Current wording

Our subsidiary Cash App Investing facilitates transactions in shares and fractionalized shares of publicly-traded stock and exchange-traded funds by users of our Cash App through a third-party carrying broker-dealer. Cash App Investing is registered with the SEC as a broker-dealer under the Exchange Act and is a member of FINRA. Therefore, Cash App Investing is subject to regulation, examination, and supervision by the SEC, FINRA, and state securities regulators. The regulations applicable to broker-dealers cover all aspects of the securities business, including sales practices, use and safekeeping of clients’ funds and securities, capital adequacy, record-keeping, and the conduct and qualification of officers, employees, and independent contractors. As part of the regulatory process, broker-dealers are subject to periodic examinations by their regulators, the purpose of which is to determine compliance with securities laws and regulations, and from time to time may be subject to additional routine and for-cause examinations. It is not uncommon for regulators to assert, upon completion of an examination, that the broker-dealer being examined has violated certain of these rules and regulations. Depending on the nature and extent of the violations, the broker-dealer may be required to pay a fine and/or be subject to other forms of disciplinary and corrective action. Additionally, the adverse publicity arising from the imposition of sanctions could harm our reputation and cause us to lose existing customers or fail to gain new customers.

Previous wording

Cash App Investing has adopted, and regularly reviews and updates, various policies, controls, and procedures designed for compliance with Cash App Investing’s regulatory obligations. However, appropriately addressing Cash App Investing’s regulatory obligations is complex and difficult, and our reputation could be damaged if we fail, or appear to fail, to appropriately address them. Failure to adhere to these policies and procedures may also result in regulatory sanctions or litigation against us. Cash App Investing also relies on various third parties, including DriveWealth, to provide services, including handling and executing customer orders, and failure of these third parties to adequately perform these services may negatively impact customer experience, product performance, and our reputation and may also result in regulatory sanctions or litigation against us or Cash App Investing.

Current wording

Cash App Investing has adopted, and regularly reviews and updates, various policies, controls, and procedures designed for compliance with Cash App Investing’s regulatory obligations. However, appropriately addressing Cash App Investing’s regulatory obligations is complex and difficult, and our reputation could be damaged if we fail, or appear to fail, to appropriately address them. Failure to adhere to these policies and procedures may also result in regulatory sanctions or litigation against us. Cash App Investing also relies on various third parties to provide services, including handling and executing customer orders, and failure of these third parties to adequately perform these services may negatively impact customer experience, product performance, and our reputation and may also result in regulatory sanctions or litigation against us or Cash App Investing.

Previous wording

Our subsidiary Cash App Investing is subject to the net capital requirements of the SEC and FINRA. These requirements typically specify the minimum level of net capital a broker-dealer must maintain and also mandate that a significant part of its assets be kept in relatively liquid form. Failure to maintain the required net capital may subject a firm to limitation of its activities, including suspension or revocation of its registration by the SEC and suspension or expulsion by FINRA, and ultimately may require its liquidation. Currently, Cash App Investing has relatively low net capital requirements, because it does not hold customer funds or securities, but instead introduces customers and directs transactions to DriveWealth. However, a change in the net capital rules, a change in how Cash App Investing handles or holds customer assets, or the imposition of new rules affecting the scope, coverage, calculation, or amount of net capital requirements could have adverse effects. Finally, because Cash App Investing is subject to such net capital requirements, we may be required to provide additional capital into Cash App Investing from time to time and as such, we may have liability and/or our larger business may be affected by any of these outcomes.

Current wording

Our subsidiary Cash App Investing is subject to the net capital requirements of the SEC and FINRA. These requirements typically specify the minimum level of net capital a broker-dealer must maintain and also mandate that a significant part of its assets be kept in relatively liquid form. Failure to maintain the required net capital may subject a firm to limitation of its activities, including suspension or revocation of its registration by the SEC and suspension or expulsion by FINRA, and ultimately may require its liquidation. Currently, Cash App Investing has relatively low net capital requirements, because it does not hold customer funds or securities, but instead introduces customers and directs transactions to third-party carrying broker-dealers. However, a change in the net capital rules, a change in how Cash App Investing handles or holds customer assets, or the imposition of new rules affecting the scope, coverage, calculation, or amount of net capital requirements could have adverse effects. Finally, because Cash App Investing is subject to such net capital requirements, we may be required to provide additional capital into Cash App Investing from time to time and as such, we may have liability and/or our larger business may be affected by any of these outcomes.

Previous wording

We routinely apply for patents in the U.S. and internationally to protect innovative ideas in our technology, but we may not always be successful in obtaining patent grants from these applications. We also pursue registration of copyrights, trademarks, and domain names in the United States and in certain jurisdictions outside of the United States, but doing so may not always be successful or cost-effective. In general, we may be unable or, in some instances, choose not to obtain legal protection for our intellectual property, and our existing and future intellectual property rights may not provide us with competitive advantages or distinguish our products and services from those of our competitors. The laws of some foreign countries do not protect our intellectual property rights to the same extent as the laws of the United States, and effective intellectual property protection and mechanisms may not be available in those jurisdictions. We may need to expend additional resources to defend our intellectual property in these countries, and the inability to do so could impair our business or adversely affect our international expansion. Our intellectual property rights may be contested, circumvented, or found unenforceable or invalid, and we may not be able to prevent third parties from infringing, diluting, or otherwise violating them. Additionally, our intellectual property rights and other confidential business information are subject to risks of compromise or unauthorized disclosure if our security measures or those of our third-party service providers are unable to prevent cyber-attacks. Unauthorized disclosure or use of our intellectual property rights may also occur if third parties were to breach the licensing terms under which certain of our innovations are offered broadly, including under open source licenses. Furthermore, the growing use of generative AI presents an increased risk of unintentional and/or unauthorized disclosure or use of our intellectual property rights. Significant impairments of our intellectual property rights, and limitations on our ability to assert our intellectual property rights against others, could have a material and adverse effect on our business.

Current wording

We routinely apply for patents in the U.S. and internationally to protect innovative ideas in our technology, but we may not always be successful in obtaining patent grants from these applications. We also pursue registration of copyrights, trademarks, and domain names in the United States and in certain jurisdictions outside of the United States, but doing so may not always be successful or cost-effective. In general, we may be unable or, in some instances, choose not to obtain legal protection for our intellectual property, and our existing and future intellectual property rights may not provide us with competitive advantages or distinguish our products and services from those of our competitors. The laws of some foreign countries do not protect our intellectual property rights to the same extent as the laws of the United States, and effective intellectual property protection and mechanisms may not be available in those jurisdictions. We may need to expend additional resources to defend our intellectual property in these countries, and the inability to do so could impair our business or adversely affect our international expansion. Our intellectual property rights may be contested, circumvented, or found unenforceable or invalid, and we may not be able to prevent third parties from infringing, diluting, or otherwise violating them. In some cases, our commitments to transparency regarding the circumstances in which we will enforce our intellectual property rights may limit our ability to pursue certain claims or deter misuse of our intellectual property. Additionally, our intellectual property rights and other confidential business information are subject to risks of compromise or unauthorized disclosure if our security measures or those of our third-party service providers are unable to prevent cyber-attacks. Unauthorized disclosure or use of our intellectual property rights may also occur if third parties were to breach the licensing terms under which certain of our innovations are offered broadly, including under open source licenses. Furthermore, the growing use of generative AI presents an increased risk of unintentional and/or unauthorized disclosure or use of our intellectual property rights. Significant impairments of our intellectual property rights, and limitations on our ability to assert our intellectual property rights against others, could have a material and adverse effect on our business.