Block, Inc.

Previous wording

•our workforce reduction and related reorganization, including changes to our operating model and the potential for increased reliance on proactive intelligence and artificial intelligence tools;

Current wording

•our workforce reductions and related reorganizations, including changes to our operating model and the potential for increased reliance on proactive intelligence and artificial intelligence tools;

Previous wording

From time to time, we have made, and we may in the future make, strategic decisions that will have a negative effect on our short-term operating results if we believe those decisions will improve our operating results over the long-term. For example, we have implemented, and may in the future implement, expense cuts and reductions in the size of our workforce to, among other things, align our cost structure with our business and longer term strategies. In February 2026 we announced a workforce reduction restructuring plan designed to better align our organizational structure with our operating model and strategic priorities. Strategic actions and decisions we have made, and may in the future make, have resulted in, and may continue to result in, increased expenses, could materially impact our operating results in the periods in which they are incurred, may impact our ability to generate and increase revenue and may impact our ability to grow or quickly develop and introduce products. Actual costs related to these strategic decisions may exceed our estimates due to changes in assumptions, additional actions, or unforeseen circumstances. Further, these strategic decisions may not be consistent with the expectations of investors and may not produce the long-term benefits that we expect, in which case our business may be materially and adversely affected.

Current wording

From time to time, we have made, and we may in the future make, strategic decisions that will have a negative effect on our short-term operating results if we believe those decisions will improve our operating results over the long-term. For example, we have implemented, and may in the future implement, expense cuts and reductions in the size of our workforce, which we refer to as our workforce reductions and reorganizations, to, among other things, align our cost structure with our business and longer term strategies. In February 2026 we announced such a workforce reduction restructuring plan designed to better align our organizational structure with our operating model and strategic priorities. Strategic actions and decisions we have made, and may in the future make, have resulted in, and may continue to result in, increased expenses, could materially impact our operating results in the periods in which they are incurred, may impact our ability to generate and increase revenue and may impact our ability to grow or quickly develop and introduce products. Actual costs related to these strategic decisions may exceed our estimates due to changes in assumptions, additional actions, or unforeseen circumstances. Further, these strategic decisions may not be consistent with the expectations of investors and may not produce the long-term benefits that we expect, in which case our business may be materially and adversely affected.

Previous wording

In February 2026 we announced a workforce reduction restructuring plan designed to better align our organizational structure with our operating model and strategic priorities. This plan has resulted in, and we expect to continue to result in, an increased reliance on automation, proactive intelligence capabilities and AI tools that we believe will enhance productivity and maintain operational efficiency. These actions resulted in severance and other restructuring charges, and will require additional investments in technology and systems. We may not realize the expected cost savings, operating efficiencies or other anticipated benefits of these initiatives within the anticipated timeframe, or at all.

Current wording

In February 2026 we announced a workforce reduction restructuring plan designed to better align our organizational structure with our operating model and strategic priorities. This plan has resulted in, and we expect to continue to result in, an increased reliance on automation, proactive intelligence capabilities and AI tools that we believe will enhance productivity and maintain operational efficiency. Our workforce reductions and reorganizations have in the past and may in the future result in severance and other restructuring charges and require additional investments in technology and systems. We may not realize the expected cost savings, operating efficiencies or other anticipated benefits of these initiatives within the anticipated timeframe, or at all.

Previous wording

The workforce reduction and reorganization has resulted in, and may continue to result in, disruptions to our operations and adversely affect employee morale and productivity. The departure of employees, including experienced personnel, may result in the loss of institutional knowledge and expertise, and remaining employees have increased workloads and broader scopes of responsibility, which could lead to increased error rates, reduced innovation and attrition of key talent. Our ability to successfully operate with a reduced workforce and modified organizational structure is expected to depend in part on the effectiveness, reliability and adoption of proactive intelligence and AI tools. These technologies do not always perform as expected, may require significant time and expense to implement effectively and as they continue to evolve, can introduce operational or cybersecurity risks, and have not in all cases enhanced productivity or maintained operational efficiency as expected and may not do so in the future. These actions could increase the risk of operational disruptions, service interruptions, control failures or other significant events, particularly during transition periods, as responsibilities are reassigned and processes are adjusted. We expect to continue to invest in employees we wish to retain and attract, including through increased compensation. In addition, evolving regulatory requirements and public scrutiny relating to AI technologies could increase compliance costs or limit our ability to deploy such tools as intended.

Current wording

Workforce reductions and reorganizations have resulted in, and may continue to result in, disruptions to our operations and adversely affect employee morale and productivity. The departure of employees, including experienced personnel, may result in the loss of institutional knowledge and expertise, and remaining employees have increased workloads and broader scopes of responsibility, which could lead to increased error rates, reduced innovation and attrition of key talent. Our ability to successfully operate with a reduced workforce and modified organizational structure is expected to depend in part on the effectiveness, reliability and adoption of proactive intelligence and AI tools. These technologies do not always perform as expected, may require significant time and expense to implement and maintain effectively and as they continue to evolve, can introduce operational or cybersecurity risks, and have not in all cases enhanced productivity or maintained operational efficiency as expected and may not do so in the future. Workforce reductions and reorganizations could increase the risk of operational disruptions, service interruptions, control failures or other significant events, particularly during transition periods, as responsibilities are reassigned and processes are adjusted. We expect to continue to invest in employees we wish to retain and attract, including through increased compensation. In addition, evolving regulatory requirements and public scrutiny relating to AI technologies could increase compliance costs or limit our ability to deploy such tools as intended.

Previous wording

We may also incur additional costs not currently contemplated, including costs related to technology implementation, operational disruptions, employee claims, regulatory compliance, or other matters arising from the workforce reduction and reorganization. We may also suffer indirect harm to our business as a result of reputational harm or concerns our customers have regarding the use of AI. Any failure to successfully implement these actions, or any unintended consequences resulting from them, could result in delays in product development or strategic initiatives and could materially and adversely affect our business, financial condition and results of operations.

Current wording

We may also incur additional costs not currently contemplated, including costs related to technology implementation, operational disruptions, employee claims, regulatory compliance, or other matters arising from workforce reductions and reorganizations. We may also suffer indirect harm to our business as a result of reputational harm or concerns our customers have regarding the use of AI. Any failure to successfully implement these actions, or any unintended consequences resulting from them, could result in delays in product development or strategic initiatives and could materially and adversely affect our business, financial condition and results of operations.

Previous wording

In addition, any reassignment of responsibilities, together with potential increased reliance on automation and AI tools to support certain legal, regulatory compliance and risk management functions, may limit our capacity and introduce additional oversight risks. If such tools do not perform as anticipated or are not effectively implemented and monitored, our ability to maintain effective governance, compliance, and risk processes during and after the transition could be impaired, which could increase the risk of regulatory inquiries, investigations, litigation, enforcement actions, control deficiencies and penalties.

Current wording

In addition, any reassignment of responsibilities, together with potential increased reliance on automation and AI tools to support certain legal, regulatory compliance and risk management functions, may limit our capacity and introduce additional oversight risks. If such tools do not perform as anticipated or are not effectively implemented and monitored, our ability to maintain effective governance, compliance, and risk processes during and after a transition could be impaired, which could increase the risk of regulatory inquiries, investigations, litigation, enforcement actions, control deficiencies and penalties.

Previous wording

Our success depends in part on our ability to develop new technologies, to adapt to technology changes and evolving industry standards, to incorporate new technologies into our products and services, and to provide products and services that are tailored to specific needs and requirements of our customers. For example, generative AI has become more publicly available and enterprise adoption of generative AI has grown. We have incorporated and expect to continue to incorporate AI features into our products and technologies and our success will depend in part on our ability to do so in a way that is compelling to our customers and cost-effective. We are unable to predict all of the risks related to the use of AI because laws, rules, directives, and regulations governing the use of AI, as well as the technology itself, are evolving rapidly and our ability to develop or use AI may not be as we expect or may be adversely affected. Refer to the risk factor titled “Our workforce reduction and related reorganization, including changes to our operating model and the potential for increased reliance on proactive intelligence and artificial intelligence tools, may not achieve their intended benefits and could adversely affect our business, financial condition and results of operations.” for additional risks related to our expected and planned use of AI. If we are unable to provide enhancements and new features for our products and services or to develop new products and services that achieve market acceptance or that keep pace with rapid technological developments and evolving industry standards, our business would be materially and adversely affected.

Current wording

Our success depends in part on our ability to develop new technologies, to adapt to technology changes and evolving industry standards, to incorporate new technologies into our products and services, and to provide products and services that are tailored to specific needs and requirements of our customers. For example, generative AI has become more publicly available and enterprise adoption of generative AI has grown. We have incorporated and expect to continue to incorporate AI features into our products and technologies and our success will depend in part on our ability to do so in a way that is compelling to our customers and cost-effective. We are unable to predict all of the risks related to the use of AI because laws, rules, directives, and regulations governing the use of AI, as well as the technology itself, are evolving rapidly and our ability to develop or use AI may not be as we expect or may be adversely affected. Refer to the risk factor titled “Our workforce reductions and reorganizations, including changes to our operating model and the potential for increased reliance on proactive intelligence and artificial intelligence tools, may not achieve their intended benefits and could adversely affect our business, financial condition and results of operations.” for additional risks related to our expected and planned use of AI. If we are unable to provide enhancements and new features for our products and services or to develop new products and services that achieve market acceptance or that keep pace with rapid technological developments and evolving industry standards, our business would be materially and adversely affected.

Previous wording

Our investments in bitcoin, our bitcoin ecosystem, and our Cash App and Square features that facilitate transactions in bitcoin and stablecoins by our customers and sellers each subject us to additional risks related to developments in the cryptocurrency markets and the resulting impact on customer and investor behavior. Actions taken by regulators, legislatures, and other government actors, including the current U.S. administration, in the cryptocurrency industry, may impact market demand for bitcoin and the supply and pricing for bitcoin. If the cryptocurrency environment deteriorates or improves based on these or other factors, our customers may wish to sell their bitcoin at a price or volume that exceeds the market demand for bitcoin, which could cause disruptions in our operations and have a material and adverse effect on our business and financial condition. If demand increases sharply, either to buy or to sell bitcoin, we may not be able to fulfill that demand in a timely manner or at all, which could result in customer frustration or movement to other platforms. If our customers experience losses due to market fluctuations in the prices of bitcoin, they may reduce or cease their use of our product features that facilitate transactions in bitcoin, or other bitcoin-related products, which could adversely impact our results of operations. Further, our customers could attempt to seek compensation from us for their financial investment losses, and those claims, even if unsuccessful, would likely be time-consuming and costly for us to address.

Current wording

Our investments in bitcoin, our bitcoin ecosystem, and our Cash App and Square features that facilitate transactions in bitcoin and stablecoins by our customers and sellers each subject us to additional risks related to developments in the cryptocurrency markets and the resulting impact on customer and investor behavior. Actions taken by regulators, legislatures, and other government actors, including the current U.S. administration, in the cryptocurrency industry, may impact market demand for bitcoin and the supply and pricing for bitcoin as well as the stablecoins we support. If the cryptocurrency environment deteriorates or improves based on these or other factors, our customers may wish to sell their bitcoin at a price or volume that exceeds the market demand for bitcoin, which could cause disruptions in our operations and have a material and adverse effect on our business and financial condition. If demand increases sharply, either to buy or to sell bitcoin, we may not be able to fulfill that demand in a timely manner or at all, which could result in customer frustration or movement to other platforms. If our customers experience losses due to market fluctuations in the prices of bitcoin, stablecoin de-pegging or issuer failures, or failures by liquidity providers, exchanges or counterparties, they may reduce or cease their use of our product features that facilitate transactions in bitcoin, or other bitcoin-related products, which could adversely impact our results of operations. Further, our customers could attempt to seek compensation from us for their financial investment losses, and those claims, even if unsuccessful, would likely be time-consuming and costly for us to address.

Previous wording

We have incorporated and expect to continue to incorporate AI technologies, including generative AI and AI agents, into our products, internal operations and technologies. As AI technologies continue to evolve rapidly, new capabilities and associated risks may emerge that may be difficult to anticipate or address. Our use of AI depends in part on third-party large language models that we do not control, and these models may generate inaccurate, biased, hallucinated or unexpected outputs that conflict with our business objectives or brand standards.

Current wording

We have incorporated and expect to continue to incorporate AI technologies, including generative AI and AI agents, into our products, internal operations and technologies. As AI technologies continue to evolve rapidly, new capabilities and associated risks may emerge that may be difficult to anticipate or address. Our use of AI depends in part on third-party large language models that we do not control, and these models have generated and may generate inaccurate, biased, hallucinated or unexpected outputs that conflict with our business objectives or brand standards.

Previous wording

Consumer and societal attitudes toward AI are evolving and customers, regulators or the public may perceive AI technologies negatively. Concerns about automation, privacy, security, bias, transparency, flawed datasets, or other ethical considerations could reduce trust in our products and services or deter customer adoption of AI-enabled features in our products or services. Our customers and sellers may become increasingly reliant on AI outputs in our products and services when making financial or operational decisions. AI-enabled features in our products may generate outputs that could be interpreted as regulated advice, even if unintended or automated. If such AI outputs are, or are perceived to be, inaccurate, biased, unexplainable, flawed, or otherwise determined as providing regulated advice without appropriate authorization, we could face reputational harm, regulatory scrutiny, enforcement actions or liability claims, any of which could materially and adversely affect our business, financial condition, and results of operations.

Current wording

Consumer and societal attitudes toward AI are evolving and customers, regulators or the public may perceive AI technologies negatively. Concerns about automation, privacy, security, bias, transparency, flawed datasets, or other ethical considerations could reduce trust in our products and services or deter customer adoption of AI-enabled features in our products or services. Our customers and sellers may become increasingly reliant on AI outputs in our products and services when making financial or operational decisions. AI-enabled features in our products may generate outputs that could be interpreted as regulated advice, even if unintended or automated. If AI outputs are, or are perceived to be, inaccurate, biased, misleading, deceptive, unexplainable, flawed, or otherwise determined as providing regulated or unlicensed advice without appropriate authorization, we could face reputational harm, regulatory scrutiny, enforcement actions or liability claims, any of which could materially and adversely affect our business, financial condition, and results of operations. Integrations with third party AI providers through which customers access or use our services may exacerbate these risks.

Previous wording

•compliance with U.S. and foreign anti-corruption, anti-bribery, and anti-money laundering laws;

Current wording

•compliance with applicable laws, U.S. and foreign anti-corruption, anti-bribery, and anti-money laundering laws;

Previous wording

Further, as a FDIC-insured institution, our subsidiary Square Financial Services is subject to regulatory obligations, including the assessment of a quarterly deposit insurance premium, calculated based on its average consolidated total assets. We are generally unable to control the amount of premiums that we are required to pay for FDIC insurance. If there are additional bank or financial institution failures, Square Financial Services may be required to pay higher deposit insurance assessments or we may be required to pay higher fees associated with FDIC-insured products offered through our bank partnerships, or we may be subject to higher capital requirements imposed by the FDIC, our bank partners, or federal banking regulators with authority over our bank partners, which could reduce our profitability, and negatively impact our business and operations.

Current wording

Further, as an FDIC-insured institution, our subsidiary Square Financial Services is subject to regulatory obligations, including the assessment of a quarterly deposit insurance premium, calculated based on its average consolidated total assets. We are generally unable to control the amount of premiums that we are required to pay for FDIC insurance. If there are additional bank or financial institution failures, Square Financial Services may be required to pay higher deposit insurance assessments or we may be required to pay higher fees associated with FDIC-insured products offered through our bank partnerships, or we may be subject to higher capital requirements imposed by the FDIC, our bank partners, or federal banking regulators with authority over our bank partners, which could reduce our profitability, and negatively impact our business and operations.

Previous wording

We, our sellers, and our partners, including third-party vendors and data centers that we use, obtain and process large amounts of data, including data related to our customers, our sellers’ customers, and their transactions. We face risks, including to our reputation as a trusted brand, in the handling and protection of this data. These risks will increase as our business continues to expand to include new products and technologies, such as AI, and as we and our third-party vendors rely on an increasingly distributed workforce. Our operations involve the storage and transmission of data of individuals and businesses using our services, including their names, addresses, social security/tax ID numbers (or foreign equivalents), government IDs, payment card numbers and expiration dates, bank account information, loans they have applied for or obtained, and data regarding the performance of our sellers’ businesses. Additionally, certain of our products and services are subject to the Health Insurance Portability and Accountability Act of 1996 (and the rules and regulations thereunder, as amended, including with respect to the HITECH Act), and therefore we are required to take measures to safeguard protected health information of our health care entity-sellers' customers when using those products and services. Our services also provide third-party developers the opportunity to provide applications to sellers in the Square and Weebly app marketplaces. Sellers who choose to use such applications can grant permission allowing the applications to access content created or held by sellers in their Square or Weebly account. Should our internal or third-party developers experience or cause a breach, incident, technological bug, or similar event, that could lead to a compromise of the content of data held by such sellers, including personal data, our reputation may be harmed and we may be subject to significant fines, penalties or judgments. The growing use of AI in our products and services presents additional risks, including risks relating to the processing, handling, disclosure, and protection of sensitive data. AI algorithms or automated processing of data may be flawed, and datasets may be insufficient or may use third-party AI with unclear intellectual property rights or interests. Inappropriate or controversial data practices by us or others could subject us to lawsuits, regulatory investigations, legal and financial liability, or reputational harm. Additionally, our use of AI may create additional, or increase the risk of, cybersecurity breaches and incidents.

Current wording

We, our sellers, and our partners, including third-party vendors and data centers that we use, obtain and process large amounts of data, including data related to our customers, our sellers’ customers, and their transactions. We face risks, including to our reputation as a trusted brand, in the handling and protection of this data. These risks will increase as our business continues to expand to include new products and technologies, such as AI, and as we and our third-party vendors rely on an increasingly distributed workforce. Our operations involve the storage and transmission of data of individuals and businesses using our services, including their names, addresses, social security/tax ID numbers (or foreign equivalents), government IDs, payment card numbers and expiration dates, bank account information, loans they have applied for or obtained, and data regarding the performance of our sellers’ businesses. Additionally, certain of our products and services are subject to the Health Insurance Portability and Accountability Act of 1996 (and the rules and regulations thereunder, as amended, including with respect to the HITECH Act), and therefore we are required to take measures to safeguard protected health information of our health care entity-sellers' customers when using those products and services. Our services also provide third-party developers the opportunity to provide applications to sellers in the Square and Weebly app marketplaces. Sellers who choose to use such applications can grant permission allowing the applications to access content created or held by sellers in their Square or Weebly account. Should our internal or third-party developers experience or cause a breach, incident, technological bug, or similar event, that could lead to a compromise of the content of data held by such sellers, including personal data, our reputation may be harmed and we may be subject to significant fines, penalties or judgments. The growing use of AI in our products and services presents additional risks, including risks relating to the processing, handling, disclosure, and protection of sensitive data. AI algorithms or automated processing of data may be flawed, and datasets may be insufficient or may use third-party AI with unclear intellectual property rights or interests. Inappropriate or controversial data practices by us or others could subject us to lawsuits, regulatory investigations, legal and financial liability, or reputational harm. Additionally, both our use of AI and the use of AI by cyber threat actors may create additional, or increase the risk of, cybersecurity breaches and incidents.

Previous wording

In addition, we provide frequent incremental releases of product and service updates and functional enhancements, which increase the possibility of errors. The products and services we provide are designed to process complex transactions and deliver reports and other information related to those transactions, all at high volumes and processing speeds. Any errors, data leaks, security breaches or incidents, disruptions in services, or other performance problems with our products or services caused by external or internal actors could hurt our reputation and damage our and our customers’ businesses. Software and system errors, or human errors, could delay or inhibit settlement of payments, result in oversettlement, cause reporting errors, cause pricing irregularities or prevent us from collecting transaction-based fees, or negatively impact our ability to serve our customers, all of which have occurred in the past. Similarly, security breaches or incidents, which may be caused by or result from cyber-attacks by hackers or others, computer viruses, worms, ransomware, other malicious software programs, security vulnerabilities, employee or service provider theft, misuse or negligence, phishing, identity theft or compromised credentials, denial-of-service attacks, or other causes, have from time to time impacted our business and could disrupt the proper functioning of our software products or services, cause errors, allow loss or unavailability of, unauthorized access to, or disclosure of, proprietary, confidential or otherwise sensitive data of ours or our customers, and other destructive outcomes. Moreover, security breaches or incidents or errors in our hardware or software design or manufacture could cause product safety issues typical of consumer electronics devices. Any of the foregoing issues could lead to product recalls and inventory shortages, result in costly and time-consuming efforts to redesign and redistribute our products, give rise to regulatory inquiries and investigations, and result in reimbursement obligations, lawsuits and other liabilities and losses, any of which could have a material and adverse effect on our business.

Current wording

In addition, we provide frequent incremental releases of product and service updates and functional enhancements, which increase the possibility of errors. The products and services we provide are designed to process complex transactions and deliver reports and other information related to those transactions, all at high volumes and processing speeds. Any errors, data leaks, security breaches or incidents, disruptions in services, or other performance problems with our products or services caused by external or internal actors could hurt our reputation and damage our and our customers’ businesses. Software and system errors, or human errors, could delay or inhibit settlement of payments, result in oversettlement, cause reporting errors, cause pricing irregularities or prevent us from collecting transaction-based fees, or negatively impact our ability to serve our customers, all of which have occurred in the past. Similarly, security breaches or incidents, which may be caused by or result from cyber-attacks by hackers, AI or others, computer viruses, worms, ransomware, other malicious software programs, security vulnerabilities, employee or service provider theft, misuse or negligence, phishing, identity theft or compromised credentials, denial-of-service attacks, or other causes, have from time to time impacted and could impact our business, the proper functioning of our software products or services, cause errors, allow loss or unavailability of, unauthorized access to, or disclosure of, proprietary, confidential or otherwise sensitive data of ours or our customers, and other destructive outcomes. Moreover, security breaches or incidents or errors in our hardware or software design or manufacture could cause product safety issues typical of consumer electronics devices. Any of the foregoing issues could lead to product recalls and inventory shortages, result in costly and time-consuming efforts to redesign and redistribute our products, give rise to regulatory inquiries and investigations, and result in reimbursement obligations, lawsuits and other liabilities and losses, any of which could have a material and adverse effect on our business.

Previous wording

We offer payments and other products and services to a large number of customers. We have programs to vet and monitor these customers and the transactions we process for them as part of our risk management efforts, but such programs require continuous improvement and may not be effective in detecting and preventing fraud, bad actors, or illegitimate transactions. When our payments services are used to process illegitimate transactions, and we settle those funds to customers and are unable to recover them, we suffer losses and liability. As a greater number of larger sellers use our services, our exposure to material risk losses from a single seller, or from a small number of sellers, will increase. Illegitimate transactions and bad actors can also expose us to governmental and regulatory enforcement actions, which may impair or otherwise limit our ability to operate or provide certain services, products, or features and potentially prevent us from satisfying our contractual obligations to our third-party partners, which may cause us to be in breach of our obligations. The highly automated nature of, and liquidity offered by, our payments and peer-to-peer services make us and our customers a target for illegal or improper uses, including scams and fraud directed at us and our customers, fraudulent or illegal sales of goods or services, money laundering, and terrorist financing. Identity thieves and those committing fraud using stolen or fabricated credit card, debit card, or bank account numbers, or other deceptive or malicious practices such as account takeovers, potentially can steal significant amounts of money from businesses like ours or from our customers or third parties. Our risk management policies, procedures, techniques, and processes may not be sufficient to identify all of the risks to which we are exposed, to enable us to prevent or mitigate the risks we have identified, or to identify additional risks to which we may become subject in the future. Our current business, the changing and uncertain economic, geopolitical and regulatory environment, our increased use of proactive intelligence and AI tools, and our anticipated domestic and international growth will continue to place significant demands on our risk management and compliance efforts. As our ecosystems grow and our business becomes more complex, we will need to continue developing, improving, and making investments into our risk management infrastructure, techniques, and processes. In addition, when we introduce new products or services, expand existing services or products to new or different cohorts of customers, including online payment acceptance and expanded methods of instantly moving money, offering existing products to borrowers on different repayment terms or expanding product eligibility, focus on new business areas, including consumer financing and loans, or begin to operate in markets where we have a limited history of fraud loss, we may be less able to forecast …

Excerpt shortened here; the source contains the full paragraph.

Current wording

We offer payments and other products and services to a large number of customers. We have programs to vet and monitor these customers and the transactions we process for them as part of our risk management efforts, but such programs require continuous improvement and may not be effective in detecting and preventing fraud, bad actors, or illegitimate transactions. When our payments services are used to process illegitimate transactions, and we settle those funds to customers and are unable to recover them, we suffer losses and liability. As a greater number of larger sellers use our services, our exposure to material risk losses from a single seller, or from a small number of sellers, will increase. Illegitimate transactions and bad actors can also expose us to governmental and regulatory enforcement actions, which may impair or otherwise limit our ability to operate or provide certain services, products, or features and potentially prevent us from satisfying our contractual obligations to our third-party partners, which may cause us to be in breach of our obligations. Conversely, the measures we take to mitigate illegitimate transactions, including placing holds or reserves on, delaying, or limiting access to seller funds or loan proceeds, or suspending or terminating seller accounts, have been and may be challenged by sellers, regulators, or other parties and could result in complaints, litigation, regulatory inquiries or enforcement actions. The highly automated nature of, and liquidity offered by, our payments and peer-to-peer services make us and our customers a target for illegal or improper uses, including scams and fraud directed at us and our customers, fraudulent or illegal sales of goods or services, money laundering, and terrorist financing. Identity thieves and those committing fraud using stolen or fabricated credit card, debit card, or bank account numbers, or other deceptive or malicious practices such as account takeovers, potentially can steal significant amounts of money from businesses like ours or from our customers or third parties. Our risk management policies, procedures, techniques, and processes may not be sufficient to identify all of the risks to which we are exposed, to enable us to prevent or mitigate the risks we have identified, or to identify additional risks to which we may become subject in the future. Our current business, the changing and uncertain economic, geopolitical and regulatory environment, our increased use of proactive intelligence and AI tools, and our anticipated domestic and international growth will continue to place significant demands on our risk management and compliance efforts. As our ecosystems grow and our business becomes more complex, we will need to continue developing, improving, and making investments into our risk management infrastructure, techniques, and processes. In addition, when we introduce new products or services, expand existing services or products to new or different cohor…

Excerpt shortened here; the source contains the full paragraph.

Previous wording

To maintain and grow our business, we will need to identify, attract, hire, develop, motivate, and retain highly skilled employees. This requires significant time, expense, and attention. In addition, we have made and may in the future make changes in our management team or management structure that may be disruptive to our business. If our management team or management structure, including any new hires that we make, fails to work together effectively and to execute our plans and strategies on a timely basis, our business could be harmed. Competition for highly skilled personnel is intense. We may need to invest significant amounts of cash and equity to attract and retain new employees, and we may never realize returns on these investments. Further, our recent changes in our organizational structure, and restructurings of our employee base we have undertaken and may undertake in the future may adversely impact employee morale, and adversely affect our ability to retain or attract highly skilled employees. Refer to the risk factor titled “Our workforce reduction and related reorganization, including changes to our operating model and the potential for increased reliance on proactive intelligence and AI tools, may not achieve their intended benefits and could adversely affect our business, financial condition and results of operations.” for additional risks related to our workforce reduction.

Current wording

To maintain and grow our business, we will need to identify, attract, hire, develop, motivate, and retain highly skilled employees. This requires significant time, expense, and attention. In addition, we have made and may in the future make changes in our management team or management structure that may be disruptive to our business. If our management team or management structure, including any new hires that we make, fails to work together effectively and to execute our plans and strategies on a timely basis, our business could be harmed. Competition for highly skilled personnel is intense. We may need to invest significant amounts of cash and equity to attract and retain new employees, and we may never realize returns on these investments. Further, our recent changes in our organizational structure, and restructurings of our employee base we have undertaken and may undertake in the future may adversely impact employee morale, and adversely affect our ability to retain or attract highly skilled employees. Refer to the risk factor titled “Our workforce reductions and reorganizations, including changes to our operating model and the potential for increased reliance on proactive intelligence and AI tools, may not achieve their intended benefits and could adversely affect our business, financial condition and results of operations.” for additional risks related to our workforce reductions.

Previous wording

These challenges have magnified as we continue to be a distributed workforce. In addition, our workforce reduction and any resulting changes in personnel and responsibilities may require changes to our internal controls, financial reporting processes, cybersecurity oversight, or other risk management functions, which could result in disruptions or temporary deficiencies. If we are not successful in developing and implementing the right processes and tools to manage our enterprise, our ability to compete successfully and achieve our business objectives could be impaired, we could face regulatory or other enforcement actions, and our business, results of operations, and financial condition may be adversely impacted.

Current wording

These challenges have magnified as we continue to be a distributed workforce. In addition, our workforce reductions and reorganizations and any resulting changes in personnel and responsibilities may require changes to our internal controls, financial reporting processes, cybersecurity oversight, or other risk management functions, which could result in disruptions or temporary deficiencies. A failure to successfully develop and implement the right processes and tools to manage our enterprise can impact our ability to compete successfully and achieve our business objectives and subject us to regulatory or other enforcement actions, and our business, results of operations, and financial condition will be adversely impacted.

Previous wording

We are currently subletting some of our office space. Macroeconomic conditions, our work-from-home practices, and our workforce reduction have caused and may in the future cause us to need less office space than we are contractually committed to leasing. We have, and may continue to, incur losses or recognize impairment charges in connection with any unused office space if we are unable to successfully sublease any unused office space, or if we are unable to successfully terminate any of our leasing commitments.

Current wording

We are currently subletting some of our office space. Macroeconomic conditions, our work-from-home practices, and workforce reductions and reorganizations have caused and may in the future cause us to need less office space than we are contractually committed to leasing. We have, and may continue to, incur losses or recognize impairment charges in connection with any unused office space if we are unable to successfully sublease any unused office space, or if we are unable to successfully terminate any of our leasing commitments.

Previous wording

Tax laws are routinely re-examined and evaluated globally. New laws and interpretations of such laws are taken into account to the extent they are applicable to us. Tax authorities are increasingly scrutinizing the tax positions of companies and we have tax audits pending in several jurisdictions. The U.S. federal and state governments, countries in the European Union, as well as a number of other countries and organizations such as the Organization for Economic Cooperation and Development (“OECD”), are actively considering changes to existing tax laws that, if enacted, could increase our tax obligations in jurisdictions where we do business, including a 15% global minimum tax (Pillar Two) that has been implemented by several countries and is being considered for implementation by other jurisdictions. On January 5, 2026, the OECD announced a “side-by-side” elective safe harbor that exempts U.S.-parented multinational entities from some of the Pillar Two rules (including the fifteen percent global minimum tax) for fiscal years beginning on or after January 1, 2026. If U.S. or other tax authorities change applicable tax laws or successfully challenge how or where our profits are currently recognized, our overall taxes could increase, and our business, financial condition or results of operations may be adversely impacted.

Current wording

The U.S. federal and state governments, countries in the European Union, as well as a number of other countries and organizations such as the Organization for Economic Cooperation and Development (“OECD”), are actively considering changes to existing tax laws that, if enacted, could increase our tax obligations in jurisdictions where we do business, including a 15% global minimum tax (Pillar Two) that has been implemented by several countries and is being considered for implementation by other jurisdictions. If U.S. or other tax authorities change applicable tax laws or successfully challenge how or where our profits are currently recognized, our overall taxes could increase, and our business, financial condition or results of operations may be adversely impacted.

Previous wording

These laws, rules, regulations, and standards are enforced by multiple authorities and governing bodies in the United States, including federal agencies, such as the FDIC, the SEC, FinCEN, FCC, the Consumer Financial Protection Bureau ("CFPB"), the Department of Justice ("DOJ"), the Federal Trade Commission, the IRS and Office of Foreign Assets Control, self-regulatory organizations, and numerous state and local agencies, such as state money transmission license regulators and virtual currency regulators. Outside of the United States, we are subject to additional regulators, authorities, and governing bodies. As we expand into new jurisdictions, expand our product offerings in existing jurisdictions, or as laws, regulations, and standards evolve, the number of foreign regulations and regulators, authorities, and governing bodies governing our business will expand as well. For example, in connection with our acquisition of Afterpay we established a secondary listing on the ASX, subjecting us to additional listing requirements. As our business and products continue to develop and expand, we may become subject to additional rules, regulations, and industry standards. We may not always be able to accurately predict the scope or applicability of certain regulations to our business, particularly as we expand into new areas of operations, which could have a significant negative effect on our existing business and our ability to pursue future plans. In addition, certain regulators have imposed and in the future may impose additional requirements on our business as a condition for obtaining or maintaining permits, licenses or rights to conduct our business, including conditions under any settlements and consent orders with regulators, that restrict our business or our ability to take certain actions. If we fail to comply with the terms of such permits, licenses or other requirements, we could face regulatory or other enforcement actions, penalties or we may not be able to continue operating our business in the same manner.

Current wording

These laws, rules, regulations, and standards are enforced by multiple authorities and governing bodies in the United States, including federal agencies, such as the FDIC, SEC, FinCEN, FCC, the Consumer Financial Protection Bureau, the Department of Justice ("DOJ"), the Federal Trade Commission, the IRS and Office of Foreign Assets Control, self-regulatory organizations, and numerous state and local agencies, such as state money transmission license regulators and virtual currency regulators. Outside of the United States, we are subject to additional regulators, authorities, and governing bodies. As we expand into new jurisdictions, expand our product offerings in existing jurisdictions, or as laws, regulations, and standards evolve, the number of foreign regulations and regulators, authorities, and governing bodies governing our business will expand as well. For example, in connection with our acquisition of Afterpay we established a secondary listing on the ASX, subjecting us to additional listing requirements. As our business and products continue to develop and expand, we may become subject to additional rules, regulations, and industry standards. We may not always be able to accurately predict the scope or applicability of certain regulations to our business, particularly as we expand into new areas of operations, which could have a significant negative effect on our existing business and our ability to pursue future plans. In addition, certain regulators have imposed and in the future may impose additional requirements on our business as a condition for obtaining or maintaining permits, licenses or rights to conduct our business, including conditions under any settlements and consent orders with regulators, that restrict our business or our ability to take certain actions. If we fail to comply with the terms of such permits, licenses or other requirements, we could face regulatory or other enforcement actions, penalties or we may not be able to continue operating our business in the same manner.

Previous wording

When transferring personal data from the EU to other jurisdictions, we utilize standard contractual clauses published by the EU Commission (the "SCCs"). We use similar mechanisms approved by the U.K. Information Commissioner’s Office when transferring personal data from the UK to other jurisdictions. On July 16, 2020, the Court of Justice of the European Union issued a decision imposing additional obligations on companies when relying on those SCCs. On July 10, 2023, the European Commission issued its “adequacy decision” for the EU-US Data Privacy Framework, concluding that the DPF ensures U.S. protection of personal data transferred between the countries is comparable to that offered in the EU. In the U.K., personal data generally may be transferred from the EU to the U.K. without restriction pursuant to an adequacy decision issued by the European Commission under the GDPR and the Law Enforcement Directive, which was renewed in 2025 to extend through December 2031. The European Commission may intervene at any time with respect to its adequacy decision. The UK’s adequacy determination may be subject to modification or revocation in the future. These and other developments relating to cross-border data transfer could result in increased costs of compliance and limitations on our customers and us. Additionally, legal or regulatory challenges or other developments relating to cross-border data transfer may serve as a basis for our personal data handling practices, or those of our customers and vendors, to be challenged and may otherwise adversely impact our business, financial condition, and operating results. We could be required to make additional changes to the way we conduct our business and transmit data between the U.S., the U.K., the EU, and the rest of the world. Further, data protection authorities in the EU increasingly are focused on the use of online analytics and tracking tools, with some contending that the use of these tools may violate EU data protection laws. Moreover, the EU’s evolving interpretation of the ePrivacy Directive's requirements regarding the use of cookies and similar technologies may lead to regulators imposing measures in the future that could directly impact our use of such technologies or lead to significant penalties for non-compliance. Any of these changes or other developments with respect to EU data protection law could disrupt our business and otherwise adversely impact our business, financial condition, and operating results. In addition, some countries are considering or have enacted legislation addressing matters such as requirements for local storage and processing of data that could impact our compliance obligations, expose us to liability, and increase the cost and complexity of delivering our services.

Current wording

When transferring personal data from the EU to other jurisdictions, we utilize standard contractual clauses published by the EU Commission (the "SCCs"). We use similar mechanisms approved by the U.K. Information Commissioner’s Office when transferring personal data from the UK to other jurisdictions. On July 16, 2020, the Court of Justice of the European Union issued a decision imposing additional obligations on companies when relying on those SCCs. On July 10, 2023, the European Commission issued its “adequacy decision” for the EU-US Data Privacy Framework, concluding that the DPF ensures U.S. protection of personal data transferred between the countries is comparable to that offered in the EU, though this adequacy decision is subject to periodic review. In the U.K., personal data generally may be transferred from the EU to the U.K. without restriction pursuant to an adequacy decision issued by the European Commission under the GDPR and the Law Enforcement Directive, which was renewed in 2025 to extend through December 2031. The European Commission may intervene at any time with respect to its adequacy decision. The UK’s adequacy determination may be subject to modification or revocation in the future. These and other developments relating to cross-border data transfer could result in increased costs of compliance and limitations on our customers and us. Additionally, legal or regulatory challenges or other developments relating to cross-border data transfer may serve as a basis for our personal data handling practices, or those of our customers and vendors, to be challenged and may otherwise adversely impact our business, financial condition, and operating results. We could be required to make additional changes to the way we conduct our business and transmit data between the U.S., the U.K., the EU, and the rest of the world. Further, data protection authorities in the EU increasingly are focused on the use of online analytics and tracking tools, with some contending that the use of these tools may violate EU data protection laws. Moreover, the EU’s evolving interpretation of the ePrivacy Directive's requirements regarding the use of cookies and similar technologies may lead to regulators imposing measures in the future that could directly impact our use of such technologies or lead to significant penalties for non-compliance. Any of these changes or other developments with respect to EU data protection law could disrupt our business and otherwise adversely impact our business, financial condition, and operating results. In addition, some countries are considering or have enacted legislation addressing matters such as requirements for local storage and processing of data that could impact our compliance obligations, expose us to liability, and increase the cost and complexity of delivering our services.

Previous wording

Likewise, the California Consumer Privacy Act of 2018 (“CCPA”) became effective on January 1, 2020 and was amended by the California Privacy Rights Act, which was passed in November 2020 and became effective on January 1, 2023. The CCPA, as amended, imposes stringent data privacy and data protection requirements relating to personal information of California residents, and provides for penalties for noncompliance of up to $7,500 per violation. Regulations promulgated under the CCPA in September 2025 impose restrictive new obligations regarding, among other things, automated decision-making technology and cybersecurity programs. Aspects of the interpretation and enforcement of the CCPA remain unclear. More generally, privacy, data protection, and information security continue to be rapidly evolving areas, and further legislative activity has arisen and will likely continue to arise in the U.S., the EU, and other jurisdictions. For example, many states in the U.S. have proposed or enacted comprehensive privacy laws that have taken effect or will take effect in coming years. Moreover, several states in the U.S. are now contemplating new regulatory frameworks specific to the privacy of individuals under 18 years of age. At the same time, the U.S. federal government continues to discuss comprehensive federal privacy legislation and expanded legislation with respect to the privacy of children, which may substantially increase our compliance obligations. Additionally, the U.S. Department of Justice issued final rules that prohibit and restrict certain access to U.S. bulk sensitive personal data and U.S. government-related data by designated countries of concern. The effects of recently proposed or enacted laws and regulation potentially are far-reaching and may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. Further, variances in these laws and regulations or their interpretations may increase our compliance costs.

Current wording

Likewise, the California Consumer Privacy Act of 2018 (“CCPA”) became effective on January 1, 2020 and was amended by the California Privacy Rights Act, which was passed in November 2020 and became effective on January 1, 2023. The CCPA, as amended, imposes stringent data privacy and data protection requirements relating to personal information of California residents, and provides for penalties for noncompliance of up to $7,500 per violation. Regulations promulgated under the CCPA in September 2025 impose restrictive new obligations regarding, among other things, automated decision-making technology and cybersecurity programs. Aspects of the interpretation and enforcement of the CCPA remain unclear. More generally, privacy, data protection, and information security continue to be rapidly evolving areas, and further legislative activity has arisen and will likely continue to arise in the U.S., the EU, and other jurisdictions. For example, many states in the U.S. have proposed or enacted comprehensive privacy laws that have taken effect or will take effect in coming years. Moreover, several states in the U.S. are now contemplating new regulatory frameworks specific to the privacy of individuals under 18 years of age. At the same time, the U.S. federal government continues to discuss comprehensive federal privacy legislation and expanded legislation with respect to the privacy of children, which may substantially increase our compliance obligations. Additionally, the DOJ issued final rules that prohibit and restrict certain access to U.S. bulk sensitive personal data and U.S. government-related data by designated countries of concern. The effects of recently proposed or enacted laws and regulation potentially are far-reaching and may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. Further, variances in these laws and regulations or their interpretations have in the past and may in the future increase our compliance costs.

Previous wording

The number and significance of our legal or regulatory matters have increased as we have grown larger, as our business has expanded in scope and geographic reach, and as our products and services have increased in complexity, and we expect that we will continue to face additional legal or regulatory matters as we continue to grow and expand. We also receive significant media attention, which could result in increased legal or regulatory matters. Moreover, legal or regulatory matters have in the past and could in the future cause follow-on litigation or regulatory scrutiny by additional parties. These matters may require significant time and expense even if we are successful in resolving the matter, and the outcomes can be uncertain and unpredictable and may involve material penalties, fines, or restrictions on our business. In addition, our workforce reduction and any reassignment of responsibilities, together with potential increased reliance on automation and AI tools to support certain legal, regulatory compliance and risk management functions, may limit our capacity and introduce additional oversight risks. If such tools do not perform as anticipated or are not effectively implemented and monitored, our ability to maintain effective governance, compliance, and risk processes during and after the transition could be impaired, which could increase the risk of regulatory inquiries, investigations, litigation, enforcement actions, control deficiencies and penalties.

Current wording

The number and significance of our legal or regulatory matters have increased as we have grown larger, as our business has expanded in scope and geographic reach, and as our products and services have increased in complexity, and we expect that we will continue to face additional legal or regulatory matters as we continue to grow and expand. We also receive significant media attention, which could result in increased legal or regulatory matters. Moreover, legal or regulatory matters have in the past and could in the future cause follow-on litigation or regulatory scrutiny by additional parties. These matters may require significant time and expense even if we are successful in resolving the matter, and the outcomes can be uncertain and unpredictable and have in the past and may in the future involve material penalties, fines, or restrictions on our business. In addition, our workforce reductions and reorganizations and any reassignment of responsibilities, together with potential increased reliance on automation and AI tools to support certain legal, regulatory compliance and risk management functions, may limit our capacity and introduce additional oversight risks. If such tools do not perform as anticipated or are not effectively implemented and monitored, our ability to maintain effective governance, compliance, and risk processes during and after a transition could be impaired, which could increase the risk of regulatory inquiries, investigations, litigation, enforcement actions, control deficiencies and penalties.

Previous wording

Our Class B common stock has ten votes per share, and our Class A common stock has one vote per share. Stockholders who hold shares of Class B common stock, including certain of our executive officers, employees, and directors and their affiliates, held approximately 53% of the voting power of our combined outstanding capital stock as of June 30, 2026. Because of the ten-to-one voting ratio between our Class B and Class A common stock, the holders of our Class B common stock collectively hold more than a majority of the voting power of our outstanding common stock, and therefore such holders are able to control all matters submitted to our stockholders for approval. When the shares of our Class B common stock represent less than 5% of the combined voting power of our Class A common stock and Class B common stock, the then-outstanding shares of Class B common stock will automatically convert into shares of Class A common stock.

Current wording

Our Class B common stock has ten votes per share, and our Class A common stock has one vote per share. Stockholders who hold shares of Class B common stock, including certain of our executive officers, employees, and directors and their affiliates, held approximately 52% of the voting power of our combined outstanding capital stock as of September 30, 2026. Because of the ten-to-one voting ratio between our Class B and Class A common stock, the holders of our Class B common stock collectively hold more than a majority of the voting power of our outstanding common stock, and therefore such holders are able to control all matters submitted to our stockholders for approval. When the shares of our Class B common stock represent less than 5% of the combined voting power of our Class A common stock and Class B common stock, the then-outstanding shares of Class B common stock will automatically convert into shares of Class A common stock.

Previous wording

Our bylaws provide that (1) the Delaware Court of Chancery or another state court or federal court located within the State of Delaware will be the exclusive forum for substantially all disputes between us and our stockholders and (2) the federal district courts of the U.S. will be the exclusive forum for all causes of action arising under the Securities Act, which could limit our stockholders’ ability to choose the judicial forum for disputes with us or our directors, officers, or employees.

Current wording

Our bylaws provide that the Delaware Court of Chancery or another state court or federal court located within the State of Delaware will be the exclusive forum for substantially all disputes between us and our stockholders, which could limit our stockholders’ ability to choose the judicial forum for disputes with us or our directors, officers, or employees.

Previous wording

Our bylaws provide that, unless we consent to the selection of an alternative forum, the Court of Chancery of the State of Delaware (or, if the Court of Chancery of the State of Delaware does not have jurisdiction, another state court in Delaware or the federal district court for the District of Delaware) is the exclusive forum for (i) any derivative action or proceeding brought on our behalf; (ii) any action asserting a claim of breach of fiduciary duty owed by any of our directors, officers, or other employees to us or to our stockholders; (iii) any action asserting a claim arising pursuant to the Delaware General Corporation Law, our certificate of incorporation or our bylaws; or (iv) any action asserting a claim governed by the internal affairs doctrine, in all cases subject to the court having jurisdiction over the claims at issue and the indispensable parties. The choice of forum provision will not apply to suits brought to enforce any liability or duty created by the Exchange Act.

Current wording

Our bylaws provide that, unless we consent to the selection of an alternative forum, the Court of Chancery of the State of Delaware (or, if the Court of Chancery of the State of Delaware does not have jurisdiction, another state court in Delaware or the federal district court for the District of Delaware) is the exclusive forum for (i) any derivative action or proceeding brought on our behalf; (ii) any action asserting a claim of breach of fiduciary duty owed by any of our directors, officers, or other employees to us or to our stockholders; (iii) any action asserting a claim arising pursuant to the Delaware General Corporation Law, our certificate of incorporation or our bylaws; or (iv) any action asserting a claim governed by the internal affairs doctrine, in all cases subject to the court having jurisdiction over the claims at issue and the indispensable parties.