Risk Factors Dashboard
Once a year, publicly traded companies issue a comprehensive report of their business, called a 10-K. A component mandated in the 10-K is the ‘Risk Factors’ section, where companies disclose any major potential risks that they may face. This dashboard highlights all major changes and additions in new 10K reports, allowing investors to quickly identify new potential risks and opportunities.
View risk factors by ticker
Search filings by term
Risk Factors - RPAY
-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing
Our business involves significant risks. In addition to the risks and uncertainties discussed above under “Cautionary Note Regarding Forward-Looking Statements,” you should carefully consider the specific risks set forth herein. If any of these risks actually occur, it may materially harm our business, financial condition, liquidity and results of operations. As a result, the market price of our securities could decline, and you could lose all or part of your investment. Additionally, the risks and uncertainties described in this Annual Report on Form 10-K or in any document incorporated by reference herein are not the only risks and uncertainties that we face. Additional risks and uncertainties not presently known to us or that we currently believe to be immaterial may become material and adversely affect our business.
Unless the context requires otherwise, “we,” “us,” “our,” “Repay” and the “Company” refer to the business of Repay Holdings Corporation and its subsidiaries. Unless the context requires otherwise, “we,” “us,” “our,” “Repay” and the “Company” refer to the business of Repay Holdings Corporation and its subsidiaries. In the sections of the Risk Factors entitled “Risks Related to Our Ownership Structure” and “Risks Related to Our Class A Common Stock,” “we,” us” and “our” refer only to Repay Holdings Corporation excluding, unless the context requires otherwise or as expressly stated, its subsidiaries.
Risks Related to Our Business
The payment processing industry is highly competitive. Such competition could adversely affect the fees we receive, and as a result, our margins, business, financial condition and results of operations.
The market for payment processing services is highly competitive. There are other payment processing service providers that have established a sizable market share in the markets in which we compete and service more clients than we do. Our growth will depend, in part, on a combination of the continued growth of the electronic payment market and our ability to increase our market share.
Many of our competitors have substantially greater financial, technological, management and marketing resources than we have. Many of our competitors have substantially greater financial, technological, management and marketing resources than we have. Accordingly, if these competitors target our business model and, in particular, the vertical markets that we serve, they may be able to offer more attractive fees or payment terms and advances to our clients and more attractive compensation to our software integration partners. They also may be able to offer and provide services and solutions that we do not offer. In addition, certain clients, particularly larger enterprises, may seek to develop or bring in-house certain payment processing capabilities or otherwise reduce their reliance on third-party payment service providers. If such efforts are successful, we could experience reduced transaction volumes, pricing pressure or the loss of client relationships.
There are also a large number of small providers of processing services, including emerging technology and non-traditional payment processing companies, that provide various ranges of services to our existing and potential clients. There are also a large number of small providers of processing services, including emerging technology and non-traditional payment processing companies, that provide various ranges of services to our existing and potential clients. This competition may effectively limit the prices we can charge, cause us to increase the compensation we pay to our software integration partners and require us to control costs aggressively in order to maintain acceptable profit margins.
Unauthorized disclosure of client or consumer data, whether through breach of our computer systems, computer viruses or otherwise, could expose us to liability and protracted and costly litigation and damage our reputation. Unauthorized disclosure of client or consumer data, whether through breach of our computer systems, computer viruses or otherwise, could expose us to liability and protracted and costly litigation and damage our reputation.
We are responsible for data security for us and for third parties with whom we partner, including with respect to rules and regulations established by the payment networks, such as Visa, MasterCard, Discover and American Express, and debit card networks. We are responsible for data security for us and for third parties with whom we partner, including with respect to rules and regulations established by the payment networks, such as Visa, MasterCard, Discover and American Express, and debit card networks. These third parties include our clients, software integration partners and other third-party service providers and agents. We and other third parties collect, process, store and/or transmit sensitive data, such as names, addresses, social security numbers, credit or debit card numbers, expiration dates, driver’s license numbers, bank account numbers and protected health information. We have ultimate liability to the payment networks and our sponsor banks that register us with the payment networks for our failure or the failure of other third parties with whom we contract to protect this data in accordance with payment network requirements. The loss, destruction or unauthorized modification of client or consumer data by us or our contracted third parties could result in significant fines, sanctions, proceedings or actions against us by the payment networks, governmental bodies, consumers or others.
Threats may result from human error, fraud or malice on the part of employees or third parties, or from accidental technological failure. Threats may result from human error, fraud or malice on the part of employees or third parties, or from accidental technological failure. For example, certain of our employees have access to sensitive data that could be used to commit identity theft or fraud. Concerns about security increase when we transmit information electronically because such transmissions can be subject to attack, interception or loss. Also, computer viruses can be distributed and spread rapidly over the Internet and could infiltrate our systems or those of our contracted third parties. Denial of service or other attacks could be launched against us for a variety of purposes, including interfering with our services or to create a diversion for other malicious activities. These types of actions and attacks and others could disrupt our delivery of services or make them unavailable.
16
We and our contracted third parties could be subject to breaches of security by hackers. Our encryption of data and other protective measures may not prevent unauthorized access to or use of sensitive data. A systems breach may subject us to material losses or liability, including payment network fines, assessments and claims for unauthorized purchases with misappropriated credit, debit or card information, impersonation or other similar fraud claims. A misuse of such data or a cybersecurity breach (including a ransomware attack) could harm our reputation and deter clients from using electronic payments generally and our services specifically, thus reducing our revenue. A misuse of such data or a 16 cybersecurity breach (including a ransomware attack) could harm our reputation and deter clients from using electronic payments generally and our services specifically, thus reducing our revenue. In addition, any such misuse or breach could cause us to incur costs to correct the breaches or failures, expose us to uninsured liability, increase our risk of regulatory scrutiny, subject us to lawsuits and result in the imposition of material penalties and fines under state and federal laws or by the payment networks or limitations on our ability to process payment transactions on such payment networks. While we maintain cyber insurance coverage (which, in certain cases, is required pursuant to certain of our contractual commitments) that may, subject to policy terms and conditions, cover certain aspects of these risks, our insurance coverage may be insufficient to cover all losses. Additionally, we may be required to increase our cyber insurance coverage pursuant to our contractual commitments entered into in the future. Our cyber insurance costs have increased significantly following well-publicized ransomware attacks involving other organizations. The costs to maintain or increase our cyber insurance coverage could have a material adverse effect on our business, financial condition and results of operations.
Any human error, fraud, malice, accidental technological failure or attacks against us or our contracted third parties could hurt our reputation, force us to incur significant expenses in remediating the resulting impacts, expose us to uninsured liability, result in the loss of our sponsor bank relationships or our ability to participate in the payment networks, subject us to lawsuits, fines or sanctions, distract our management, increase our costs of doing business and/or materially impede our ability to conduct business. Any human error, fraud, malice, accidental technological failure or attacks against us or our contracted third parties could hurt our reputation, force us to incur significant expenses in remediating the resulting impacts, expose us to uninsured liability, result in the loss of our sponsor bank relationships or our ability to participate in the payment networks, subject us to lawsuits, fines or sanctions, distract our management, increase our costs of doing business and/or materially impede our ability to conduct business.
Although we generally require that our agreements with our software integration partners or service providers include confidentiality obligations, we cannot guarantee that these contractual measures will prevent the unauthorized use, modification, destruction or disclosure of data or allow us to seek reimbursement from the contracted party. Our future growth and profitability depend, in part, upon our continued expansion within the vertical markets in which we currently operate, the emergence of other vertical markets for electronic payments and our integrated solutions, and our ability to penetrate new vertical markets and our current software integration partners’ client bases. Our future growth and profitability depend, in part, upon our continued expansion within the vertical markets in which we currently operate, the emergence of other vertical markets for electronic payments and our integrated solutions, and our ability to penetrate new vertical markets and our current software integration partners’ client bases. In addition, many of our clients are small and medium-sized businesses that may have limited competency regarding data security and handling requirements and may thus experience data breaches. Any unauthorized use, modification, destruction or disclosure of data could result in protracted and costly litigation and the incurrence of significant losses by us.
In addition, our agreements with our sponsor banks and our third-party payment processors (as well as payment network requirements) require us to take certain protective measures to ensure the confidentiality of client and consumer data. In addition, our agreements with our sponsor banks and our third-party payment processors (as well as payment network requirements) require us to take certain protective measures to ensure the confidentiality of client and consumer data. Any failure to adequately comply with these protective measures could result in fees, penalties, litigation or termination of our sponsor bank agreements. Further, certain of our sponsor banks have experienced, and could in the future experience, cybersecurity incidents that could disrupt our operations, expose us to liability and protracted and costly litigation and damage our reputation.
Security breaches may be subject to scrutiny from governmental agencies such as the FTC, the U.S. Department of Health and Human Services Office for Civil Rights, state attorneys general and the CFPB. See “Risks Related to Regulation” below.
If we cannot keep pace with rapid developments and changes in our industry, the use of our products and services could decline, causing a reduction in our revenues. If we cannot keep pace with rapid developments and changes in our industry, the use of our products and services could decline, causing a reduction in our revenues.
The electronic payments market is subject to constant and significant changes. The electronic payments market is subject to constant and significant changes. This market is characterized by rapid technological evolution, new product and service introductions, evolving industry standards, changing client needs and the entrance of new competitors, including products and services that enable card networks and banks to transact with consumers directly. For example, in July 2023, the U.S. Federal Reserve launched its FedNow Service that enables individuals and businesses to send instant payments through their depositary institution accounts. In addition, advances in automation, data analytics and artificial intelligence are increasingly being incorporated into payment processing, risk management, compliance and customer support workflows across the industry.
To remain competitive, we continually pursue initiatives to develop new products and services and to enhance existing solutions. These projects carry risks, such as difficulty in determining market demand and timing for delivery, cost overruns, delays in delivery, data quality challenges and integration complexity, performance problems and lack of client acceptance, and some projects may require investment in non-revenue generating products or services that our software integration partners and clients expect to be included in our offerings. These projects carry risks, such as difficulty in determining market demand and timing for delivery, cost overruns, delays in delivery, performance problems and lack of client acceptance, and some projects may require investment in non-revenue generating products or services that our software integration partners and clients expect to be included in our offerings. In addition, new products and offerings may not perform as intended or generate the business or revenue growth expected.
The continued growth and development of our payment processing services and solutions will depend on our ability to anticipate and adapt to changes in consumer and business behavior, client expectations and technology adoption. Any failure
17
to timely integrate emerging payment methods into our software, to anticipate consumer or business behavior changes or to contract with processing partners that support such emerging payment technologies could cause us to lose traction among our clients or referral sources, including industry associations, resulting in a corresponding loss of revenue, if those methods become popular among end-users of their services.
Our products and services are designed to process complex transactions and provide reports and other information on those transactions, all at very high volumes and processing speeds. Our technology offerings must also integrate with a variety of network, hardware, mobile and software platforms and technologies, and we need to continuously modify and enhance our products and services to adapt to changes and innovation in these technologies. Any failure to deliver an effective, reliable and secure service or any performance issue that arises with a new product or service could result in significant processing or reporting errors or other losses. If we do not deliver a promised new product or service to our clients or software integration partners in a timely manner or the product or service does not perform as anticipated, our development efforts could result in increased costs and a loss in business, reducing our earnings and causing a loss of revenue. We also rely in part on third parties, including some of our competitors and potential competitors, for the development of and access to, or production of, new technologies, including software and hardware. For example, we rely on our software integration partners to integrate our services and products into the software platforms being used by our clients. Our future success will depend in part on our ability to develop or adapt to technological changes and evolving industry standards (including those related to automation and artificial intelligence). Our future success will depend in part on our ability to develop or adapt to technological changes and evolving industry standards. If we are unable to develop, adapt to or access technological changes or evolving industry standards on a timely and cost-effective basis, our business, financial condition and results of operations could be materially adversely affected.
If our vertical markets do not increase their acceptance of electronic payments or if there are adverse developments in the electronic payment industry in general, our business, financial condition and results of operations may be adversely affected. If our vertical markets do not increase their acceptance of electronic payments or if there are adverse developments in the electronic payment industry in general, our business, financial condition and results of operations may be adversely affected.
The vertical markets we primarily serve have not historically utilized electronic payments to the same extent as traditional markets such as retail and travel. The vertical markets we primarily serve have not historically utilized electronic payments to the same extent as traditional markets such as retail and travel. If consumers and businesses in our primary vertical markets do not increase their use of cards as payment methods for their transactions or if the mix of payment methods changes in a way that is adverse to us, such developments may have a material adverse effect on our business, financial condition and results of operations.
Industry consolidation within our vertical markets can adversely affect our growth or results.
Our focus on specific vertical markets exposes us to various risks associated with changes or disruptions within these sectors. For example, the consolidation or merger of businesses within the vertical markets we primarily serve reduces the number of potential clients and may limit our market opportunities. If key clients in these vertical markets merge or consolidate at an accelerated pace, we may face a decrease in demand, loss of business relationships or pricing pressures. These events may have a material and adverse impact on our results of operations.
Potential clients or software integration partners may be reluctant to switch to, or develop a relationship with, a new payment processor, which may adversely affect our growth. Potential clients or software integration partners may be reluctant to switch to, or develop a relationship with, a new payment processor, which may adversely affect our growth.
Many potential clients and software integration partners worry about potential disadvantages associated with switching payment processing providers, such as a loss of accustomed functionality, increased costs and business disruption. Many potential clients and software integration partners worry about potential disadvantages associated with switching payment processing providers, such as a loss of accustomed functionality, increased costs and business disruption. There can be no assurance that our strategies for overcoming potential reluctance to change payment processing providers or to initiate a relationship with us will be successful, and this resistance may adversely affect our growth and our business overall.
Our sales efforts to large enterprises involve considerable time and expense with long and unpredictable sales cycles.
One of the factors affecting our growth and financial performance is the adoption of our solutions by large enterprise clients. One of the factors affecting our growth and financial performance is the adoption of our solutions by large enterprise clients. As part of our sales efforts, we invest considerable time and expense evaluating the specific organizational needs of potential clients and educating these potential clients about the technical capabilities and value of our solutions. Large enterprises often have more consumers impacted by a change in payment processing providers, which leads these potential clients to evaluate our solutions and our technology platform at multiple levels within their organization. Additionally, in recent years, individuals and groups have been purchasing intellectual property assets for the sole purpose of making claims of infringement or other violations and attempting to extract settlements from companies like us. These evaluations often involve their senior management and require specific and stringent requirements. In connection with these evaluations, large enterprise clients may demand that we implement enhanced cybersecurity measures, privacy protocols or other compliance initiatives tailored to their needs or their industry regulations, which could increase our costs. As a result, our sales efforts to large enterprises span over considerable time and require greater expense with long and unpredictable sales cycles, which may cause our results of operations to fluctuate.
18
Our revenue is sensitive to shifts in payment mix.
Most of our revenues are derived from volume-based payment processing fees and other related fixed per transaction fees. Most of our revenues are derived from volume-based payment processing fees and other related fixed per transaction fees. In general, we receive more revenue for card-based payments than for ACH payments. Accordingly, if more of our client’s customers start paying by ACH or other payment methods with lower transaction fees, it may have a material and adverse impact on our results of operations.
If we fail to comply with the applicable requirements of payment networks and industry self-regulatory organizations, those payment networks or organizations could seek to fine us, suspend us or terminate our registrations through our sponsor banks. If we fail to comply with the applicable requirements of payment networks and industry self-regulatory organizations, those payment networks or organizations could seek to fine us, suspend us or terminate our registrations through our sponsor banks.
We rely on sponsor banks and, in certain cases, third-party processors to access the payment card networks, such as Visa and MasterCard, that enable our ability to offer to our clients the acceptance of credit cards and debit cards, and we must pay fees for such services. We rely on sponsor banks and, in certain cases, third-party processors to access the payment card networks, such as Visa and MasterCard, that enable our ability to offer to our clients the acceptance of credit cards and debit cards, and we must pay fees for such services. To provide our merchant acquiring services, we are registered through our sponsor banks with the Visa and MasterCard networks as a service provider for member institutions. As such, we, our sponsor banks and many of our clients are subject to complex and evolving payment network rules. As such, we, our sponsor banks and many of our 18 clients are subject to complex and evolving payment network rules. The payment networks routinely update and modify requirements applicable to merchant acquirers, including rules regulating data integrity, third-party relationships (such as those with respect to sponsor banks and ISOs), merchant chargeback standards and PCI DSS. The rules of the card networks are set by their boards, which may be influenced by card issuers, some of which offer competing transaction processing services. Any changes in payment network rules or standards may be imposed on highly compressed timelines and may have a negative impact on our results of operations.
If we or our sponsor banks fail to comply with the applicable rules and requirements of any of the payment networks, such payment network could suspend or terminate our registration. If we or our sponsor banks fail to comply with the applicable rules and requirements of any of the payment networks, such payment network could suspend or terminate our registration. Further, our transaction processing capabilities, including with respect to settlement processes, could be delayed or otherwise disrupted, and recurring non-compliance could result in the payment networks seeking to fine us or suspend or terminate our registrations that allow us to process transactions on their networks, which would make it impossible for us to conduct our business on its current scale.
Under certain circumstances specified in the payment network rules, we may be required to submit to periodic audits, self-assessments or other assessments with regard to our compliance with the PCI DSS. Under certain circumstances specified in the payment network rules, we may be required to submit to periodic audits, self-assessments or other assessments with regard to our compliance with the PCI DSS. Such audits or assessments may reveal that we have failed to comply with the PCI DSS. In addition, even if we comply with the PCI DSS, there is no assurance that we will be protected from a security breach. The termination of our registrations with the payment networks, or any changes in payment network or issuer rules that limit our ability to provide merchant acquiring services, could have an adverse effect on our payment processing volumes, revenues and operating costs. If we are unable to comply with the requirements applicable to our payment processing activities, the payment networks could no longer allow us to provide these solutions, which would render us unable to conduct our business. If we were precluded from processing Visa and MasterCard electronic payments, we would lose a substantial portion of our revenues.
We are also subject to the operating rules of the NACHA. We are also subject to the operating rules of the NACHA. NACHA is a self-regulatory organization which administers and facilitates private-sector operating rules for ACH payments and defines the roles and responsibilities of financial institutions and other ACH network participants. The NACHA Rules and Operating Guidelines impose obligations on us and our partner financial institutions. These obligations include audit and oversight by the financial institutions and the imposition of mandatory corrective action, including termination, for serious violations. If an audit or self-assessment under PCI DSS or NACHA identifies any deficiencies that we need to remediate, the remediation efforts may distract our management team and be expensive and time consuming.
We rely on sponsor banks in order to process electronic payment transactions, and such sponsor banks have substantial discretion with respect to certain elements of our business practices. We rely on sponsor banks in order to process electronic payment transactions, and such sponsor banks have substantial discretion with respect to certain elements of our business practices. If these sponsorships are terminated and we are not able to secure new sponsor banks, we will not be able to conduct our business.
Because we are not a bank, we are not eligible for membership in the Visa, MasterCard and other payment networks, and are, therefore, unable to directly access these payment networks, which are required to process transactions. Because we are not a bank, we are not eligible for membership in the Visa, MasterCard and other payment networks, and are, therefore, unable to directly access these payment networks, which are required to process transactions. We are currently registered with payment networks through our sponsor banks.
If these sponsorships are terminated and we are unable to secure a replacement sponsor bank within the applicable wind down period, we will not be able to process electronic payment transactions. While we maintain relationships with multiple sponsor banks for flexibility in the processing of payment volume and in the pricing of our clients’ solutions, the loss of or termination of a relationship with a sponsor bank or a significant decrease in the amount of payment volume that a sponsor bank processes for us could reduce such flexibility and negatively affect our business. To the extent the number of our sponsor banks decreases, we will become increasingly reliant on our remaining sponsor banks, which would materially adversely affect
19
our business should our relationship with any of such remaining banks be terminated or otherwise disrupted. Furthermore, our agreements with our sponsor banks provide the sponsor banks with substantial discretion in approving certain elements of our business practices, including our solicitation, application and underwriting procedures for clients. Our sponsor banks’ actions under these agreements could be detrimental to us.
To acquire and retain clients, we depend on our software integration partners that integrate our services and solutions into software used by our clients. To acquire and retain clients, we depend on our software integration partners that integrate our services and solutions into software used by our clients.
We rely heavily on the efforts of our software integration partners to ensure our services and solutions are properly integrated into the software that our clients use. We rely heavily on the efforts of our software integration partners to ensure our services and solutions are properly integrated into the software that our clients use. Generally, our agreements with software integration partners are not exclusive and these partners retain the right to refer potential clients to other payment processors. In addition, our agreements with software integration partners do not generally prohibit these partners from providing payment processing solutions to clients (including by acquiring a competing payment processing business). In addition, our agreements with 19 software integration partners do not generally prohibit these partners from providing payment processing solutions to clients (including by acquiring a competing payment processing business).
We may need to provide financial concessions to maintain or enhance relationships with current software integration partners or to attract potential software integration partners from our competitors. We may need to provide financial concessions to maintain or enhance relationships with current software integration partners or to attract potential software integration partners from our competitors. We have been required, and expect to be required in the future, to make concessions with our software integration partners (including when renewing contracts or when needed to incentivize the software integration partner to update or enhance the integration), and such concessions can have a material impact on our financial condition or operating performance.
If our software integration partners focus more heavily on working with other payment processors, acquire or develop their own payment processing capabilities, cease operations or become insolvent, we may be at risk of losing existing clients with whom these software integration partners have relationships. If our software integration partners focus more heavily on working with other payment processors, acquire or develop their own payment processing capabilities, cease operations or become insolvent, we may be at risk of losing existing clients with whom these software integration partners have relationships. If we are unable to maintain our existing base of software integration partners or develop relationships with new software integration partners, our business, financial condition and results of operations would be materially adversely affected. In addition, our efforts to form relationships with new software integration partners may be hindered to the extent they perceive that integrating with a new payment processor or switching to us from another payment processor is too costly or time-consuming. Many software providers choose to integrate with only a small number of payments processors due to the requisite time and cost of integrating their systems with a payment processor’s solutions.
Failure to effectively manage risk and prevent fraud could increase our chargeback liability and other liability. Failure to effectively manage risk and prevent fraud could increase our chargeback liability and other liability.
We are potentially liable for losses caused by fraudulent card transactions or business fraud. We are potentially liable for losses caused by fraudulent card transactions or business fraud. Card fraud occurs when a merchant’s customer uses a stolen card (or a stolen card number in a card-not-present transaction) to purchase merchandise or services. In a traditional card-present transaction, if the merchant swipes the card, receives authorization for the transaction from the card issuing bank and verifies the signature on the back of the card against the paper receipt signed by its customer, the card issuing bank remains liable for any loss. In a fraudulent card-not-present transaction, even if the merchant receives authorization for the transaction, the merchant may be liable for any loss arising from the transaction. In addition, consumers may dispute repayments on a loan or other obligation by claiming it was unlawful under applicable law. In addition, consumers may dispute repayments on a loan by claiming it was unlawful under applicable law.
Business fraud occurs when a business or organization, rather than a cardholder, opens a fraudulent merchant account and conducts fraudulent transactions or when a business, rather than a consumer (though sometimes working together with a consumer engaged in fraudulent activities), knowingly uses a stolen or counterfeit card or card number to record a false sales transaction, intentionally fails to deliver the merchandise or services sold in an otherwise valid transaction, or provides services in violation of applicable law. Business fraud occurs when a business or organization, rather than a cardholder, opens a fraudulent merchant account and conducts fraudulent transactions or when a business, rather than a consumer (though sometimes working together with a consumer engaged in fraudulent activities), knowingly uses a stolen or counterfeit card or card number to record a false sales transaction, intentionally fails to deliver the merchandise or services sold in an otherwise valid transaction, or provides services in violation of applicable law. Business fraud also occurs when employees of businesses change the business demand deposit accounts to their personal bank account numbers, so that payments are improperly credited to the employee’s personal account.
Certain of these types of fraud present potential liability for chargebacks associated with our clients’ processing transactions. Certain of these types of fraud present potential liability for chargebacks associated with our clients’ processing transactions. If a billing dispute between a client and a consumer is not ultimately resolved in favor of our client, the disputed transaction is “charged back” to the client’s bank and credited to the consumer’s bank. Anytime our client is unable to satisfy a chargeback, we are responsible for that chargeback. We have a number of contractual protections and other means of recourse to mitigate those risks, including collateral or reserve accounts that we may require our clients to maintain for these types of contingencies. Nonetheless, if we are unable to collect the chargeback from the clients’ account or reserve account (if applicable), or if the client refuses or is financially unable due to bankruptcy or other reasons to reimburse us for the chargeback, we bear the loss for the amount of the refund paid to the cardholder’s bank. We have established systems and procedures to detect and reduce the impact of business fraud, but these measures may not be effective, and incidents of fraud could increase in the future. During the year ended December 31, 2025, our chargeback rate was less than 1% of payment volume. During the year ended December 31, 2023, we believe our chargeback rate was less than 1% of payment volume. Any increase in chargebacks not paid by our clients could have a material adverse effect on our business, financial condition and results of operations.
20
Our processes to reduce fraud losses depend in part on our ability to restrict the deposit of processing funds while we investigate suspicious transactions. We could be sued by parties alleging that our restriction and investigation processes violate federal and state laws on consumer protection, unfair business practices or other applicable laws. If we are unable to defend any such claim successfully, we could be required to restructure our anti-fraud processes in ways that would harm our business or pay substantial fines.
As part of our program to reduce fraud losses, we may temporarily restrict the ability of clients to access certain processing deposits if those transactions or their account activity are identified by our anti-fraud models as suspicious. As part of our program to reduce fraud losses, we may temporarily restrict the ability of clients to access certain processing deposits if those transactions or their account activity are identified by our anti-fraud models as suspicious. We could be sued by parties alleging that our restriction and investigation processes violate federal and state laws on consumer protection or unfair business practices. If we are unable to defend any such claim successfully, we could be required to restructure our anti-fraud processes in ways that could harm our business and to pay substantial fines. Even if we are able to defend a claim successfully, the litigation could damage our reputation, consume substantial amounts of our management’s time and attention, and require us to change our client service and operations in ways that could increase our costs and decrease the effectiveness of our anti-fraud program. Even if we are able to 20 defend a claim successfully, the litigation could damage our reputation, consume substantial amounts of our management’s time and attention, and require us to change our client service and operations in ways that could increase our costs and decrease the effectiveness of our anti-fraud program. In addition, if a client has filed for bankruptcy protection, then our normal processes may be limited by applicable bankruptcy laws.
We receive savings related to favorable pricing or incentives on certain interchange and other payment network fees. To the extent we cannot maintain such savings and cannot pass along any corresponding increases in such fees to our clients, our operating results and financial condition may be materially adversely affected.
We bear interchange, assessment, transaction and other fees set by the payment networks to the card issuing banks and the payment networks for each transaction we process as a merchant acquirer. We bear interchange, assessment, transaction and other fees set by the payment networks to the card issuing banks and the payment networks for each transaction we process as a merchant acquirer. Under certain circumstances, the payment networks afford us preferential rates or incentives with respect to such fees, which helps us to control our operating costs. From time to time, the payment networks increase the interchange fees and other fees that they charge payment processors and the sponsor banks. At their sole discretion, our sponsor banks have the right to pass any increases in interchange and other fees on to us, and they have consistently done so in the past. We are generally permitted under the contracts into which we enter with our clients, and in the past have been able to, pass these fee increases along to our clients through corresponding increases in our processing fees. However, if we are unable to pass through these and other fees in the future (which could be the result of the structure of “flat rate” or convenience fee pricing under certain contracts), or if the payment networks decline to offer us preferential rates or incentives on such fees as compared to those charged to other payment processors, our business, financial condition and results of operations could be materially adversely affected.
Our systems and those of our third-party providers may fail due to factors beyond our control, which could interrupt our service, resulting in our inability to process payments or provide ancillary services, loss of business, increase in costs and exposure to liability.
We depend on the efficient and uninterrupted operation of numerous systems, including our computer network systems, software, data centers and telecommunication networks, as well as the systems and services of our sponsor banks, the payment networks, third-party providers of processing services and other third parties. We depend on the efficient and uninterrupted operation of numerous systems, including our computer network systems, software, data centers and telecommunication networks, as well as the systems and services of our sponsor banks, the payment networks, third-party providers of processing services and other third parties. Our systems and operations, or those of our third-party providers, such as our provider of dial-up authorization services, or the payment networks themselves, could be exposed to damage or interruption from, among other things, hardware and software defects or malfunctions, telecommunications failure, computer denial-of-service and other cyberattacks, unauthorized entry, computer viruses or other malware, human error, natural disaster, power loss, acts of terrorism or sabotage, financial insolvency of such providers and similar events. These threats, and errors or delays in the processing of payment transactions, system outages or other difficulties, could result in failure to process transactions or provide ancillary services, additional operating and development costs, diversion of technical and other resources, loss of revenue, clients and software integration partners, loss of client and accountholder data, harm to our business or reputation, exposure to fraud losses or other liabilities and fines and other sanctions imposed by payment networks. Our property and business interruption insurance may not be adequate to compensate us for all losses or failures that may occur.
At present, our critical operational systems, such as our payment gateway, are fully redundant, while certain of our less critical systems are not. At present, our critical operational systems, such as our payment gateway, are fully redundant, while certain of our less critical systems are not. Therefore, certain aspects of our operations may be subject to interruption. Also, while we have disaster recovery policies and arrangements in place, they have not been tested under actual disasters or similar events. Maintaining and upgrading our system is costly and time-consuming, involves significant technical risk and may divert our resources from new features and products, and there can be no assurances that such systems will be effective. Frequent or persistent site interruptions could lead to regulatory scrutiny, significant fines and penalties and mandatory and costly changes to our business practices.
21
In addition, we are continually improving and upgrading our information systems and technologies. Implementation of new systems and technologies is complex, expensive and time-consuming. If we fail to timely and successfully implement new information systems and technologies or improvements or upgrades to existing information systems and technologies, or if such systems and technologies do not operate as intended, this could have an adverse impact on our business, internal controls (including internal controls over financial reporting), results of operations and financial condition.
We rely on other service and technology providers. We rely on other service and technology providers. If such providers fail in or discontinue providing their services or technology to us, our ability to provide services to clients may be interrupted, and, as a result, our business, financial condition and results of operations could be adversely impacted.
We rely on third parties to provide or supplement card processing services and for infrastructure hosting services. We rely on third parties to provide or supplement card processing services and for infrastructure hosting services. We also rely on third parties for specific software and hardware used in providing our products and services. The termination by our service or technology providers of their arrangements with us or their failure to perform their services efficiently and effectively may adversely affect our relationships with our clients and, if we cannot find alternate providers quickly, may cause those clients to terminate their relationships with us. The termination by our service or technology providers of their arrangements with us or their failure to perform their services efficiently and 21 effectively may adversely affect our relationships with our clients and, if we cannot find alternate providers quickly, may cause those clients to terminate their relationships with us.
Our third-party processors and third-party program managers, which provide us with front-end authorization services, card issuance program services and certain other services, compete with us or may compete with us in the future in the vertical markets that we serve. Our third-party processors and third-party program managers, which provide us with front-end authorization services, card issuance program services and certain other services, compete with us or may compete with us in the future in the vertical markets that we serve. There can be no assurance that these processors will maintain their relationships with us in the future or that they will refrain from competing directly with the solutions that we offer.
If we are unable to renew our existing contracts with our most significant vendors, we might not be able to replace the related products or services at the same cost, which would negatively impact our profitability. Additionally, while we believe we would be able to locate alternative vendors to provide substantially similar services at comparable rates, or otherwise replicate such services internally, no assurance can be made that a change would not be disruptive to our business, which could potentially lead to a material adverse impact on our revenue and profitability until resolved.
We also rely in part on third parties for the development of and access to new technologies, and updates to existing products and services for which third parties provide ongoing support, which reliance increases the cost associated with new and existing product and service offerings. We also rely in part on third parties for the development of and access to new technologies, and updates to existing products and services for which third parties provide ongoing support, which reliance increases the cost associated with new and existing product and service offerings. Failure by these third-party providers to devote an appropriate level of attention to our products and services could result in delays in introducing new products or services, or delays in resolving any issues with existing products or services for which third-party providers provide ongoing support.
We are subject to economic and political risk, the business cycles of our clients and software integration partners and the overall level of consumer and commercial spending, which could negatively impact our business, financial condition and results of operations. We are subject to economic and political risk, the business cycles of our clients and software integration partners and the overall level of consumer and commercial spending, which could negatively impact our business, financial condition and results of operations.
The electronic payment industry depends heavily on the overall level of consumer and commercial spending. The electronic payment industry depends heavily on the overall level of consumer and commercial spending. We are exposed to general economic conditions that affect consumer confidence, consumer spending, consumer discretionary income and changes in consumer purchasing habits, including natural disasters and health emergencies, including earthquakes, fires, power outages, typhoons, floods, pandemics or epidemics and manmade events such as civil unrest, labor disruption, international trade disputes, international conflicts, terrorism, wars and critical infrastructure attacks. We are exposed to general economic conditions that affect consumer confidence, consumer spending, consumer discretionary income and changes in consumer purchasing habits, including natural disasters and health emergencies, including earthquakes, fires, power outages, typhoons, floods, pandemics or epidemics (such as the COVID-19 pandemic) and manmade events such as civil unrest, labor disruption, international trade disputes, international conflicts, terrorism, wars and critical infrastructure attacks. A sustained deterioration in general economic conditions, particularly in the United States, continued uncertainty for an extended period of time, persistent inflation or increases in interest rates, could adversely affect our financial performance by reducing the number or aggregate volume of transactions made using electronic payments. A sustained deterioration in general economic conditions, particularly in the United States, continued uncertainty for an extended period of time, persistent inflation or further increases in interest rates, could adversely affect our financial performance by reducing the number or aggregate volume of transactions made using electronic payments. Our consumer finance and mortgage clients may be disproportionately impacted by increased interest rates or a general economic downturn, which could result in a decrease to our revenue and profits. Our consumer finance and mortgage clients may be disproportionately impacted by further increased interest rates or a general economic downturn, which could result in a decrease to our revenue and profits. If our consumer finance or mortgage clients make fewer or smaller loans (or their borrowers fail to make required payments), or consumers and businesses spend less money through electronic payments, we will have fewer transactions to process at lower dollar amounts, resulting in lower revenue. Smaller tax refunds to consumers, due to the absence of additional stimulus or similar impacts or otherwise, could also negatively impact our results of operations.
The U.S. and international markets are continuing to experience uncertain and volatile economic conditions, including from the impacts of sustained inflation, recession concerns and threat of increased tariffs or other protectionist trade policies. These conditions make it extremely difficult for us to accurately forecast and plan future business activities. Together, these circumstances create an environment in which it is challenging for us to predict future operating results. If these uncertain business, macroeconomic or political conditions continue or further decline, our business, financial condition and results of operations could be materially adversely affected.
22
Our risk management policies and procedures may not be fully effective in mitigating our risk exposure in all market environments or against all types of risks associated with providing payment processing solutions.
We operate in a rapidly changing industry. We operate in a rapidly changing industry. Accordingly, our risk management policies and procedures may not be fully effective to identify, monitor, manage and remediate our risks associated with providing payment processing solutions. Some of our risk evaluation methods depend upon information provided by others and public information regarding markets, clients or other matters that are otherwise inaccessible by us. In some cases, that information may not be accurate, complete or up-to-date. Additionally, our risk detection system is subject to a high degree of “false positive” risks being detected, which makes it difficult for us to identify real risks in a timely manner. If our policies and procedures are not fully effective or we are not always successful in capturing all risks to which we are or may be exposed, we may suffer harm to our reputation or be subject to litigation or regulatory actions that materially increase our costs and limit our ability to grow and may cause us to lose existing clients.
Certain payment funding methods expose us to the credit and/or operating risk of our clients.
When we process certain types of transactions (including ACH payments and our Instant Funding solutions) for certain clients, we occasionally transfer funds from our settlement account to the intended destination account before we receive funds from a client’s source account. The vast majority of these occurrences are resolved quickly through normal processes. However, if they are not resolved and we are then unable to reverse the transaction that sent funds to the intended destination, a shortfall in our settlement account will be created. Although we have legal recourse against our clients for the amount of the shortfall, timing of recovery may be delayed by litigation or the amount of any recovery may be less than the shortfall. In either case, we would have to fund the shortfall in our settlement account from our corporate funds.
We may not be able to continue to expand our share in our existing vertical markets or continue to expand into new vertical markets, which would inhibit our ability to grow and increase our profitability. 22 We may not be able to continue to expand our share in our existing vertical markets or continue to expand into new vertical markets, which would inhibit our ability to grow and increase our profitability.
Our future growth and profitability depend, in part, upon our continued expansion within the vertical markets in which we currently operate, the emergence of other vertical markets for electronic payments and our integrated solutions, and our ability to penetrate new vertical markets and our current software integration partners’ client bases. Our future growth and profitability depend, in part, upon our continued expansion within the vertical markets in which we currently operate, the emergence of other vertical markets for electronic payments and our integrated solutions, and our ability to penetrate new vertical markets and our current software integration partners’ client bases. As part of our strategy to expand into new vertical markets and increase our share in our existing vertical markets, we look for acquisition opportunities and partnerships with other businesses that will allow us to increase our market penetration, technological capabilities, product offerings and distribution capabilities. We may not be able to successfully identify suitable acquisition or partnership candidates in the future, and if we do identify them, they may not provide us with the benefits we anticipated. In addition, our ability to continue to grow and profitably service clients in Canada is uncertain and will require additional resources and controls, and we may encounter unanticipated challenges.
Our expansion into new vertical markets also depends on our ability to adapt our existing technology or to develop new technologies to meet the particular needs of each new vertical market. Our expansion into new vertical markets also depends on our ability to adapt our existing technology or to develop new technologies to meet the particular needs of each new vertical market. We may not have adequate financial or technological resources to develop effective and secure services or distribution channels that will satisfy the demands of these new vertical markets. Penetrating these new vertical markets may also prove to be more challenging or costly or may take longer than we may anticipate. If we fail to expand into new vertical markets and increase our penetration into existing vertical markets, we may not be able to continue to grow our revenues and earnings.
We may not be able to successfully manage our intellectual property and are subject to infringement claims. We may not be able to successfully manage our intellectual property and are subject to infringement claims.
We rely on a combination of contractual rights and copyright, trademark, patent and trade secret laws to establish and protect our proprietary technology, which is critical to our success, particularly in our strategic verticals where we may offer proprietary software solutions to our clients. We rely on a combination of contractual rights and copyright, trademark, patent and trade secret laws to establish and protect our proprietary technology, which is critical to our success, particularly in our strategic verticals where we may offer proprietary software solutions to our clients. Third parties have, and in the future may, challenge, circumvent, infringe or misappropriate our intellectual property, or such intellectual property may not be sufficient to permit us to take advantage of current market trends or otherwise to provide competitive advantages, which could result in costly redesign efforts, discontinuance of service offerings or other competitive harm. Other parties, including our competitors, may independently develop similar technology and duplicate our services or design around our intellectual property and, in such cases, we may not be able to assert our intellectual property rights against such parties. Further, our contractual arrangements may be subject to termination or renegotiation with unfavorable terms to us, and our third-party licensors may be subject to bankruptcy, insolvency and other adverse business dynamics, any of which might affect our ability to use and exploit the products licensed to us by such third-party licensors. Additionally, our contractual arrangements may not effectively prevent disclosure of our confidential information or provide an adequate remedy in the event of unauthorized disclosure of our confidential information. We may have to litigate to enforce or determine the scope and enforceability of our intellectual property rights and know-how, which is expensive, could cause a diversion of resources and may not prove successful. Also, because of the rapid pace of technological change in our industry, aspects of our business and our services rely on technologies developed or licensed by
23
third parties, and we may not be able to obtain or retain licenses and technologies from these third parties on reasonable terms or at all. The loss of intellectual property protection or the inability to license or otherwise use third-party intellectual property could harm our business and ability to compete. We regularly engage third parties for offshore development activities, which may heighten all of the risks noted above.
We are also subject to costly litigation if our services and technology are alleged to infringe upon or otherwise violate a third party’s proprietary rights. We are also subject to costly litigation if our services and technology are alleged to infringe upon or otherwise violate a third party’s proprietary rights. Third parties may have, or may eventually be issued, patents that could be infringed by our products, services or technology. Some of these third parties have made, and any of these third parties could make in the future, a claim of infringement, breach or other violation of third-party intellectual property rights against us with respect to our products, services or technology. Any claim from third parties may result in a limitation on our ability to use the intellectual property subject to these claims. Additionally, in recent years, individuals and groups have been purchasing intellectual property assets for the sole purpose of making claims of infringement or other violations and attempting to extract settlements from companies like us. Even if we believe that intellectual property related claims are without merit, defending against such claims is time consuming and expensive and could result in the diversion of time and attention of our management and employees. Claims of intellectual property infringement or violation also may require us to redesign affected products or services, enter into costly settlement or license agreements, pay costly damage awards, or face a temporary or permanent injunction prohibiting us from marketing or selling certain of our products or services. Even if we have an agreement for indemnification against such costs, the indemnifying party, if any in such circumstance, may be unable to uphold its contractual obligations. If we cannot or do not license the infringed technology on reasonable terms or substitute similar technology from another source, our revenue and earnings could be adversely impacted.
The loss of key personnel or the loss of our ability to attract, recruit, retain and develop qualified employees, could adversely affect our business, financial condition and results of operations. 23 The loss of key personnel or the loss of our ability to attract, recruit, retain and develop qualified employees, could adversely affect our business, financial condition and results of operations.
We depend on the ability and experience of a number of our key personnel who have substantial experience with our operations, the rapidly changing payment processing industry and the vertical markets in which we offer our products and services. We depend on the ability and experience of a number of our key personnel who have substantial experience with our operations, the rapidly changing payment processing industry and the vertical markets in which we offer our products and services. Our success depends in part on the continued service and expertise of our senior management and other key personnel, many of whom have developed significant institutional knowledge and industry experience. Our senior leaders and other key employees have developed important relationships with the card networks and our sponsor banks, key clients, software integration partners and other payment processing and service providers, and the loss of one or more of these individuals could disrupt our operations, strategic initiatives or client relationships. From time to time, we have experienced, and may continue to experience, turnover in key management or other critical roles, and there can be no assurance that we will be able to retain or replace such personnel with individuals possessing comparable experience, expertise or industry relationships on a timely basis, or at all.
Further, in order for us to continue to successfully compete and grow, we must attract, recruit, develop and retain personnel who will provide us with the expertise we need. Further, in order for us to continue to successfully compete and grow, we must attract, recruit, develop and retain personnel who will provide us with the expertise we need. Our success also depends on the skill and experience of our sales force, which we must continuously work to maintain. While we have a number of key personnel who have substantial experience with our operations, we must also develop our personnel so that our personnel are capable of maintaining the continuity of our operations, supporting the development of new services and solutions and expanding our client base. The market for qualified personnel is highly competitive, and we may not succeed in recruiting additional personnel or may fail to effectively replace current personnel who depart with qualified or effective successors. Our efforts to retain and develop personnel may also result in significant additional expenses, which could adversely affect our profitability.
We have been the subject of various claims and legal proceedings and may become the subject of claims, litigation or investigations which could have a material adverse effect on our business, financial condition or results of operations. We have been the subject of various claims and legal proceedings and may become the subject of claims, litigation or investigations which could have a material adverse effect on our business, financial condition or results of operations.
In the ordinary course of business, we are the subject of various claims and legal proceedings and may become the subject of claims, litigation or investigations, including commercial disputes and employee claims, such as claims of age discrimination, sexual harassment, gender discrimination or local, state and federal labor law violations, and from time to time may be involved in governmental or regulatory investigations or similar matters arising out of our current or future business. In the ordinary course of business, we are the subject of various claims and legal proceedings and may become the subject of claims, litigation or investigations, including commercial disputes and employee claims, such as claims of age discrimination, sexual harassment, gender discrimination or local, state and federal labor law violations, and from time to time may be involved in governmental or regulatory investigations or similar matters arising out of our current or future business. Any claims asserted against us or our management, regardless of merit or eventual outcome, could harm our reputation and have an adverse impact on our relationships with our clients, software integration partners and other third parties and could lead to additional related claims. In light of the potential cost and uncertainty involved in litigation, we have in the past and may in the future settle matters even when we believe we have a meritorious defense. Certain claims may seek injunctive relief, which could disrupt the ordinary conduct of our business and operations or increase our costs of doing business. Our insurance or indemnities may not cover all claims that may be asserted against us. Furthermore, there is no guarantee that we will be successful in defending pending or future litigation or similar matters under various laws. Any judgments or settlements in any
24
pending or future claims, litigation or investigations could have a material adverse effect on our business, financial condition and results of operations.
We may not be able to successfully execute our growth strategies.
If we are unable to execute on our growth strategies, our business, financial condition and results of operations may be adversely affected. An important part of our growth strategy is to enter into new vertical markets through platform acquisitions of vertically-focused integrated payment and software solutions providers, to expand within our existing vertical markets through selective tuck-in acquisitions and to otherwise increase our presence in the payments processing market. A significant part of our growth strategy is to enter into new vertical markets through platform acquisitions of vertically-focused integrated payment and software solutions providers, to expand within our existing vertical markets through selective tuck-in acquisitions and to otherwise increase our presence in the payments processing market. However, we have not completed an acquisition in over three years.
Although we expect to continue to execute our acquisition strategy:
The occurrence of any of these factors could continue to adversely affect our growth strategy. The occurrence of any of these factors could adversely affect our growth strategy.
Our acquisitions subject us to a variety of risks that could harm our business and the anticipated benefits from our acquisitions may not be realized on the expected timeline or at all. Our acquisitions subject us to a variety of risks that could harm our business and the anticipated benefits from our acquisitions may not be realized on the expected timeline or at all.
We may experience various challenges associated with our acquired businesses, such as:
25
These challenges and costs and expenses may adversely affect our business, financial condition and results of operations.
Actual or perceived adverse developments affecting financial institutions could have a material and adverse impact on our business, financial condition or results of operations. Actual or perceived adverse developments affecting financial institutions could have a material and adverse impact on our business, financial condition or results of operations.
In our business, we maintain relationships with financial institutions in various capacities. Our cash and cash equivalents are held in accounts with banks or other financial institutions that are insured by the Federal Deposit Insurance Corporation (“FDIC”). In most cases, the amounts held in these accounts exceed the FDIC insurance limits. We also rely on financial institutions to act as our sponsor banks in order to enable us to process electronic payment transactions for our clients. In this regard, we maintain relationships with multiple sponsor banks in an effort to secure competitive pricing for our clients and to maintain redundancy. In addition, our clients include credit unions, banks and non-bank lenders who utilize our payment technology solutions in exchange for processing fees.
Periods of actual or perceived stress in the banking or broader financial services sector—whether resulting from liquidity concerns, changes in regulatory expectations, macroeconomic conditions or other factors—could adversely affect the financial institutions with which we do business or the terms on which they provide services to us. Any failure of, or material adverse development affecting, one or more of our sponsor banks or other financial institution counterparties, or market concerns regarding their financial condition, could impair our liquidity, disrupt our ability to process transactions for clients, or negatively affect our relationships with clients and partner. Similarly, adverse developments affecting the financial institutions on which our clients rely could negatively impact our clients’ operations or financial condition, which in turn could reduce payment volumes processed through our platform or otherwise adversely affect our business, financial condition or results of operations. Such clients are also subject to negative public perceptions that their consumer lending activities constitute predatory or abusive lending to consumers, and concerns raised by consumer advocacy groups and government officials may lead to efforts to further regulate the industry in which many of our clients operate.
Risks Related to Regulation
We and our clients are subject to extensive government regulation, and any new laws and regulations, industry standards or revisions made to existing laws, regulations or industry standards affecting our business, our clients’ businesses or the electronic payments industry, or our or our clients’ actual or perceived failure to comply with such obligations, may have an unfavorable impact on our business, financial condition and results of operations.
We and the clients we serve are subject to numerous federal and state regulations that affect the electronic payments industry. We and the clients we serve are subject to numerous federal and state regulations that affect the electronic payments industry. The regulatory environment applicable to our business and our clients’ businesses is complex, fragmented and subject to change, and regulatory priorities, interpretations and enforcement approaches may vary over time due to legal, policy, funding and administrative factors. Other parties, including our competitors, may independently develop similar technology and duplicate our services or design around our intellectual property and, in such cases, we may not be able to assert our intellectual property rights against such parties. Changes to statutes, regulations or industry standards, including interpretation and implementation of statutes, regulations or standards, could increase our cost of doing business or affect the competitive balance. Failure to comply with regulations may have an adverse effect on our business, including the limitation, suspension or termination of services provided to, or by, third parties, and the imposition of penalties or fines. To the extent these regulations negatively impact the business, operations or financial condition of our clients, our business and results of operations could be materially and adversely affected because, among other matters, our clients could have less capacity to purchase products and services from us, could decide to avoid or abandon certain lines of business, or could seek to pass on increased costs to us by negotiating price reductions. We could be required to invest a significant amount of time and resources to comply with additional regulations or oversight or to modify the manner in which we contract with or provide products and services to our clients; and those regulations could directly or indirectly limit how much we can charge for our services. We may not be able to update our existing products and services, or develop new ones, to satisfy our client’ needs. Any of these events, if realized, could have a material adverse effect on our business, results of operations and financial condition.
Interchange fees, which are typically paid to the card issuer in connection with credit and debit card transactions, are subject to increasingly intense legal, regulatory and legislative scrutiny. Interchange fees, which are typically paid to the card issuer in connection with credit and debit card transactions, are subject to increasingly intense legal, regulatory and legislative scrutiny. In particular, the Dodd-Frank Act significantly changed the U.S. financial regulatory system by regulating and limiting debit card fees charged by certain issuers, allowing merchants to set minimum dollar amounts for the acceptance of credit cards and allowing merchants to offer discounts or other incentives for different payment methods. These regulations (as well as any related modifications or changes in interpretation) could negatively affect the number of debit transactions, and prices charged per transaction, which would negatively affect our business.
Many of our clients desire to impose a convenience fee or a surcharge in connection with their customers’ use of a credit or debit card or other form of electronic payment. Many of our clients desire to impose a convenience fee or a surcharge in connection with their customers’ use of a credit or debit card or other form of electronic payment. Recent federal actions aimed at addressing so-called “junk fees” have heightened regulatory scrutiny in this area, further complicating compliance with various state laws and regulations that impose prohibitions or other limitations on those types of fees or charges. There can be no assurance that our strategies for overcoming potential reluctance to change payment processing providers or to initiate a relationship with us will be successful, and this resistance may adversely affect our growth and our business overall. The interpretation of these laws and regulations, as well as evolving payment network rules, continue to change, which can create uncertainty. These developments could negatively affect
26
the willingness of some of our clients to accept credit or debit card or other electronic payment or result in less favorable terms to us in exchange for our clients to absorb those fees and costs, all of which would negatively affect our business.
Laws and regulations, even if not directed at us, may require us to take significant efforts to change our services and solutions and may require that we incur additional compliance costs and change how we price our products and services to our clients and software integration partners. Laws and regulations, even if not directed at us, may require us to take significant efforts to change our services and solutions and may require that we incur additional compliance costs and change how we price our products and services to our clients and software integration partners. Implementing new compliance efforts is difficult because of the complexity of new regulatory requirements, and we are devoting and will continue to devote significant resources to ensure compliance. Furthermore, regulatory actions may precipitate changes in business practices by us and other industry participants which could affect how we market, price and distribute our products and services, and which could materially adversely affect our business, financial condition and results of operations. In addition, even an inadvertent failure to comply with laws and regulations or evolving public perceptions of our business could damage our business or our reputation.
Depending on how our products and services evolve, we may be subject to a variety of additional laws and regulations, including those governing money transmission, gift cards and other prepaid access instruments, electronic funds transfers, anti-money laundering, counter-terrorist financing, restrictions on foreign assets, banking and lending, and import and export restrictions. Depending on how our products and services evolve, we may be subject to a variety of additional laws and regulations, including those governing money transmission, gift cards and other prepaid access instruments, electronic funds transfers, anti-money laundering, counter-terrorist financing, restrictions on foreign assets, gambling, banking and lending, and import and export restrictions.
Our efforts to comply with these laws and regulations could be costly and result in diversion of management time and effort and may still not guarantee compliance. Our efforts to comply with these laws and regulations could be costly and result in diversion of management time and effort and may still not guarantee compliance. In addition, to the extent we decide to offer our products and services in additional jurisdictions (for example, our expansion into Canada), we may incur additional compliance-related costs with respect to operating in such jurisdictions. Additionally, as our products and services evolve, and as regulators continue to increase their scrutiny of compliance with these obligations, we may be subject to a variety of additional laws and regulations, or we may be required to further revise or expand our compliance management system, including the procedures we use to verify the identity of our clients and their end customers and to monitor transactions. Additionally, as our products and services evolve, and as regulators continue to increase their scrutiny of compliance with these obligations, we may be subject to a variety of additional laws and regulations, or we may be 26 required to further revise or expand our compliance management system, including the procedures we use to verify the identity of our clients and their end customers and to monitor transactions. If we are found to be in violation of any such legal or regulatory requirements, we may be subject to monetary fines or other penalties, such as a cease and desist order, or we may be required to alter the nature or packaging of our services and solutions, any of which could adversely affect our business or operating results.
The businesses of many of our clients are strictly regulated in every jurisdiction in which they operate, and such regulations, and our clients’ failure to comply with them, could have an adverse effect on our clients’ businesses and, as a result, our results of operations. The businesses of many of our clients are strictly regulated in every jurisdiction in which they operate, and such regulations, and our clients’ failure to comply with them, could have an adverse effect on our clients’ businesses and, as a result, our results of operations.
A meaningful portion of our clients are consumer lenders that provide personal loans and automotive loans to consumers that have varying degrees of credit risk. A meaningful portion of our clients are consumer lenders that provide personal loans and automotive loans to consumers that have varying degrees of credit risk. The regulatory environment that these clients operate in is very complex because applicable regulations are often enacted by multiple agencies in the state and federal governments. Such clients are also subject to negative public perceptions that their consumer lending activities constitute predatory or abusive lending to consumers, and concerns raised by consumer advocacy groups and government officials may lead to efforts to further regulate the industry in which many of our clients operate.
Similarly, our clients in the receivables management industry are subject to a complex and evolving framework of federal and state laws and regulations that govern debt collection practices. These requirements are enforced by multiple regulatory authorities and, in some cases, through private litigation, and regulatory priorities, interpretations and enforcement approaches may vary over time. Increased scrutiny of debt collection practices—whether through rulemaking, guidance, supervisory activity or enforcement actions—could result in investigations, penalties or required changes to our clients’ business practices. In addition, the FDCPA and comparable state laws provide for private rights of action against debt collectors, including the potential for actual damages, statutory damages and attorneys’ fees and costs.
The combination of these factors could materially adversely affect the business of our clients and may force our consumer lender or receivables management clients to change their business models. As a result, we may need to be nimble and quickly respond to the evolving needs of the vertical markets that we serve.
If the business of our clients is materially adversely affected by the uncertainties described above and if we or our clients fail to respond to such changes in the industry in a timely manner, or if there are significant changes in such vertical markets that we do not anticipate, our business, financial condition and results of operations would be materially adversely affected.
We may be required to become licensed under state money transmission statutes.
We provide payment processing services through our various operating subsidiaries. We provide payment processing services through our various operating subsidiaries. We, along with our third party service providers, use structural arrangements designed to remove our activities from the scope of money transmitter regulation.
27
There can be no assurance that these structural arrangements will remain effective as money transmitter laws continue to evolve or that the applicable regulatory bodies, particularly state agencies, will view our payment processing activities as compliant. Any determination that we are in fact required to be licensed under the state money transmission statutes may require substantial expenditures of time and money and could lead to liability in the nature of penalties or fines, which would have a materially adverse effect on our business and our financial results.
We must comply with laws and regulations prohibiting unfair or deceptive acts or practices, and any failure to do so could materially and adversely affect our business. We must comply with laws and regulations prohibiting unfair or deceptive acts or practices, and any failure to do so could materially and adversely affect our business.
We and many of our clients are subject to Section 5 of the Federal Trade Commission Act prohibiting unfair or deceptive acts or practices and various state laws that are similar in scope and subject matter. We and many of our clients are subject to Section 5 of the Federal Trade Commission Act prohibiting unfair or deceptive acts or practices and various state laws that are similar in scope and subject matter. In addition, provisions of the Dodd-Frank Act that prohibit unfair, deceptive or abusive acts or practices, the Telemarketing Sales Act and other laws, rules and/or regulations, may directly impact the activities of certain of our clients, and in some cases may subject us, as the electronic payment processor or provider of payment settlement services, to investigations, fees, fines and disgorgement of funds if we are found to have improperly aided and abetted or otherwise provided the means and instrumentalities to facilitate the illegal or improper activities of a client through our services. Various federal and state regulatory enforcement agencies, including the FTC and state attorneys general have authority to take action against non-banks that engage in UDAAP, or violate other laws, rules and regulations. To the extent we are processing payments or providing products and services for a client suspected of violating such laws, rules and regulations, we may face enforcement actions and incur losses and liabilities that may adversely affect our business. To the extent we are processing payments or providing products and services for a client suspected of 27 violating such laws, rules and regulations, we may face enforcement actions and incur losses and liabilities that may adversely affect our business.
Governmental regulations designed to protect or limit access to or use of consumer information could adversely affect our ability to effectively provide our products and services. Governmental regulations designed to protect or limit access to or use of consumer information could adversely affect our ability to effectively provide our products and services.
In addition to those regulations discussed previously that are imposed by the card networks and NACHA, governmental bodies in the United States have adopted, or are considering the adoption of, laws and regulations restricting the use, collection, storage, transfer and disposal of, and requiring safeguarding of, non-public personal information. In addition to those regulations discussed previously that are imposed by the card networks and NACHA, governmental bodies in the United States have adopted, or are considering the adoption of, laws and regulations restricting the use, collection, storage, transfer and disposal of, and requiring safeguarding of, non-public personal information. Our operations are subject to certain provisions of these laws. Applicable federal privacy laws may restrict our collection, processing, storage, use and disclosure of personal information, may require us to notify individuals of our privacy practices and provide individuals with certain rights to prevent the use and disclosure of protected information, and mandate certain procedures with respect to safeguarding and proper description of stored information. Certain state laws impose similar privacy obligations as well as obligations to provide notification of security breaches of personal information to affected individuals, state officers, consumer reporting agencies and businesses and governmental agencies. The applicable regulatory framework for privacy issues is evolving and is likely to continue doing so for the foreseeable future, which creates uncertainty. The state privacy law framework is described under “Privacy and Information Security Regulations” in Item 1. Business above.
Further, we are obligated by our clients, sponsor banks and software integration partners to maintain the confidentiality and security of non-public consumer information that our clients and their end customers share with us. Further, we are obligated by our clients, sponsor banks and software integration partners to maintain the confidentiality and security of non-public consumer information that our clients and their end customers share with us. Our contracts may require periodic audits by independent parties regarding our compliance with applicable standards, and may permit our counterparties to audit our compliance with best practices established by regulatory guidelines with respect to confidentiality and security of non-public personal information. Our ability to maintain compliance with these standards and satisfy these audits will affect our ability to attract, grow and maintain business in the future, and any failure to do so could subject us to contractual liability, each of which could have a material effect on our business and results of operations.
If we fail to comply with these laws, regulations or contractual terms, or if we experience security breaches, we could face regulatory enforcement proceedings, suits for breach of contract and monetary liabilities. If we fail to comply with these laws, regulations or contractual terms, or if we experience security breaches, we could face regulatory enforcement proceedings, suits for breach of contract and monetary liabilities. Additionally, any such failure could harm the relationships and reputation we depend on to retain existing clients and software integration partners and obtain new clients and software integration partners. If federal and state governmental bodies adopt more restrictive privacy laws in the future, our compliance costs could increase, and it could make our due diligence reviews and monitoring regarding the risk of our clients more difficult, complex and expensive. As our business grows, we may also be required to invest in a more substantive and complex compliance management system than the one we currently employ.
Changes in tax laws or their judicial or administrative interpretations, or becoming subject to additional U.S., state or local taxes that cannot be passed through to our clients, could negatively affect our business, financial condition and results of operations.
Our operations are subject to extensive tax liabilities, including federal and state and transactional taxes such as excise, sales/use, payroll, franchise, withholding and ad valorem taxes. Our operations are subject to extensive tax liabilities, including federal and state and transactional taxes such as excise, sales/use, payroll, franchise, withholding and ad valorem taxes. Changes in tax laws or their judicial or administrative interpretations could decrease the amount of revenues we receive, the value of any tax loss carryforwards and tax credits recorded on our balance sheet and the amount of our cash flow, and may have a material adverse impact on our business,
28
financial condition and results of operations. Some of our tax liabilities are subject to periodic audits by the applicable taxing authority which could increase our tax liabilities. Furthermore, companies in the payment processing industry, including us, may become subject to incremental taxation in various taxing jurisdictions. Taxing jurisdictions have not yet adopted uniform positions on this topic. If we are required to pay additional taxes and are unable to pass the tax expense through to our clients, our costs would increase and our net income would be reduced, which could have a material adverse effect on our business, financial condition and results of operations.
Failure to maintain effective systems of internal and disclosure control could have a material adverse effect on our results of operation and financial condition. Failure to maintain effective systems of internal and disclosure control could have a material adverse effect on our results of operation and financial condition.
Effective internal and disclosure controls are necessary for us to provide reliable financial reports and effectively prevent fraud, and to operate successfully as a public company. Effective internal and disclosure controls are necessary for us to provide reliable financial reports and effectively prevent fraud, and to operate successfully as a public company. If we cannot provide reliable financial reports or prevent fraud, our reputation and operating results would be harmed. As part of our ongoing monitoring of internal control, we have discovered in the past and may discover in the future material weaknesses or significant deficiencies in internal control that require remediation. A “material weakness” is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of a company’s annual or interim financial statements will not be prevented or detected on a timely basis.
We have in the past discovered, and may in the future discover, material weaknesses and other areas of our internal controls that need improvement. We continue to work to improve our internal controls. We cannot be certain that these measures will ensure that we implement and maintain adequate controls over our financial processes and reporting in the future. Any failure to maintain effective controls or to timely implement any necessary improvement of our internal and disclosure controls could, among other things, result in losses from fraud or error, harm our reputation, or cause investors to lose confidence in the reported financial information, all of which could have a material adverse effect on our results of operation and financial condition. In addition, as a result of such material weaknesses and other matters raised or that may in the future be raised by the SEC, we face potential for litigation or other disputes.
Risks Related to Our Indebtedness
Our level of indebtedness could adversely affect our ability to meet our obligations under our indebtedness, react to changes in the economy or our industry and to raise additional capital to fund operations.
On July 10, 2024, we increased our existing senior secured credit facilities to a $250.0 million revolving credit facility pursuant to an amendment to the revolving credit agreement with Truist Bank and certain other lenders (the “Second Amended Credit Agreement”). On December 29, 2021, we increased our existing senior secured credit facilities to a $185.0 million revolving credit facility pursuant to an amendment to the revolving credit agreement with Truist Bank and certain other lenders (as amended, the “Amended Credit Agreement”). On January 19, 2021, we issued $440.0 million in aggregate principal amount of our 0.00% convertible senior notes due 2026 (the “2026 Notes”). On July 8, 2024, we repurchased $220.0 million of the 2026 Notes. Additionally, on July 8, 2024, we issued $287.5 million in aggregate principal amount of our 2.875% convertible senior notes due 2029 (the “2029 Notes”). On August 22, 2025, we repurchased $73.5 million of the 2026 Notes. On or about February 2, 2026, we used borrowings from the Second Amended Credit Agreement, together with some of our cash hand, to satisfy the remaining obligations under the 2026 Notes. Our ability to service our obligations under our indebtedness, including the 2029 Notes and any indebtedness we have incurred or may further incur under the Second Amended Credit Agreement, depends on our future performance, which is subject to economic, financial, competitive and other factors beyond our control. Our ability to service our obligations under our indebtedness, including the 2026 Notes and any indebtedness we may incur under the Amended Credit Agreement, depends on our future performance, which is subject to economic, financial, competitive and other factors beyond our control. If we are unable to generate the necessary cash flow, we may be required to adopt one or more alternatives, such as selling assets, restructuring debt or obtaining additional debt financing or equity capital on terms that may be onerous or highly dilutive.
Our indebtedness under the Second Amended Credit Agreement bears interest at a variable rate, primarily based on the Secured Overnight Financing Rate (“SOFR”), and, as a result, our interest expense may increase if market interest rates rise, which could adversely affect our cash flows and results of operations.
Our ability to refinance our indebtedness will depend on the capital markets and our financial condition at such time. Our ability to refinance our indebtedness will depend on the capital markets and our financial condition at such time. We may not be able to engage in any of these activities or engage in these activities on desirable terms, which could result in a default on our debt obligations, and such level of indebtedness could have important consequences to our stockholders.
We may also incur future debt obligations that might subject us to additional restrictive covenants that could affect our financial and operational flexibility.
29
Future operating flexibility is limited by the restrictive covenants in the Amended Credit Agreement, and we may be unable to comply with all covenants in the future.
The Second Amended Credit Agreement imposes restrictions that could impede our ability to enter into certain corporate transactions, as well as increases our vulnerability to adverse economic and industry conditions, by limiting our flexibility in planning for, and reacting to, changes in our business and industry. The Amended Credit Agreement imposes restrictions that could impede our ability to enter into certain corporate transactions, as well as increases our vulnerability to adverse economic and industry conditions, by limiting our flexibility in planning for, and reacting to, changes in our business and industry. These restrictions will limit our ability to, among other things:
In addition, the Second Amended Credit Agreement contains certain negative covenants that restrict the incurrence of indebtedness unless certain incurrence-based financial covenant requirements are met. In addition, the Amended Credit Agreement contains certain negative covenants that restrict the incurrence of indebtedness unless certain incurrence-based financial covenant requirements are met. The restrictions may prevent us from taking actions that we believe would be in the best interests of the business and may make it difficult for us to successfully execute our business strategy or effectively compete with companies that are not similarly restricted. Our ability to comply with these restrictive covenants in future periods will largely depend on our ability to successfully implement our overall business strategy. The breach of any of these covenants or restrictions could result in a default, which could result in the acceleration of our debt. In the event of an acceleration of our indebtedness, we could be forced to apply all available cash flows to repay such debt, which would reduce or eliminate distributions to us, which could also force us into bankruptcy or liquidation.
We may not have the ability to raise the funds necessary to settle conversions of the 2029 Notes, or to repurchase the 2029 Notes upon a fundamental change, and our future debt may contain, limitations on our ability to pay cash upon conversion or repurchase of the 2029 Notes.
Holders of the 2029 Notes have the right to require us to repurchase their 2029 Notes upon the occurrence of a fundamental change at a repurchase price equal to 100% of their principal amount, plus accrued and unpaid interest, if any. Holders of the 2026 Notes have the right to require us to repurchase their 2026 Notes upon the occurrence of a fundamental change at a repurchase price equal to 100% of their principal amount, plus accrued and unpaid interest, if any. Upon conversion of the 2029 Notes, we will be required to make cash payments up to the aggregate principal amount of the 2029 Notes being converted and in respect of the remainder, if any, of our conversion obligation, we may elect to make cash payments or deliver shares of our Class A common stock, or a combination, to settle such conversion. However, we may not have enough available cash or be able to obtain financing at the time we are required to make repurchases of the 2029 Notes surrendered therefor or to pay cash with respect to the 2029 Notes being converted.
In addition, our ability to repurchase the 2029 Notes or to pay cash upon conversion of the 2029 Notes may be limited by law, by regulatory authority or by agreements governing our future indebtedness. In addition, our ability to repurchase the 2026 Notes or to pay cash upon conversion of the 2026 Notes may be limited by law, by regulatory authority or by agreements governing our future indebtedness. Our failure to repurchase the 2029 Notes at a time when the repurchase is required by the indenture governing the 2029 Notes (the “indenture”) or to pay any cash payable on future conversions of the 2029 Notes as required by the indenture, would constitute a default under the indenture. A default under the indenture, or the fundamental change itself, could also lead to a default under our Second Amended Credit Agreement and other agreements governing our existing or future indebtedness. A default under the indenture, or the fundamental change itself, could also lead to a default under our Amended Credit Agreement and other agreements governing our existing or future indebtedness. If the repayment of the related indebtedness were to be accelerated after any applicable notice or grace periods, we may not have sufficient funds to repay the indebtedness, repurchase, make interest payments on or make cash payments upon conversion of the 2029 Notes.
The conditional conversion feature of the 2029 Notes, if triggered, may adversely affect our financial condition and operating results. The conditional conversion feature of the 2026 Notes, if triggered, may adversely affect our financial condition and operating results.
In the event the conditional conversion feature of the 2029 Notes is triggered, holders of the 2029 Notes will be entitled to convert their 2029 Notes at any time during specified periods at their option. In the event the conditional conversion feature of the 2026 Notes is triggered, holders of the 2026 Notes will be entitled to convert their 2026 Notes at any time during specified periods at their option. If one or more holders elect to convert their 2029 Notes, we would be required to settle any converted principal amount of such notes through the payment of cash, which could adversely affect our liquidity. In addition, even if holders do not elect to convert their 2029 Notes, we could be required under applicable accounting rules to reclassify all or a portion of the outstanding principal of the 2029 Notes as a current rather than long-term liability, which would result in a material reduction of our net working capital.
Provisions in the indenture could delay or prevent an otherwise beneficial takeover of the Company
Certain provisions of the 2029 Notes and the indenture could make a third party attempt to acquire us more difficult or expensive. For example, if a takeover constitutes a fundamental change, then we will be required to make an offer to the
30
holders of the 2029 Notes to repurchase for cash all or part of their outstanding 2029 Notes. In addition, if a takeover constitutes a make-whole fundamental change, then we may be required to increase the conversion rate temporarily. In either case, and in other cases, our obligations under the 2029 Notes could increase the cost of acquiring us or otherwise discourage a third party from acquiring us or removing incumbent management, including in a transaction that you may view as favorable.
Risks Related to Our Ownership Structure
We are a holding company and our only material asset is our interest in Hawk Parent, and we are accordingly dependent upon distributions made by our subsidiaries to pay taxes, make payments under the Tax Receivable Agreement, meet our financial obligations under the Second Amended Credit Agreement or the 2029 Notes and pay dividends.
We are a holding company with no material assets other than our ownership of limited liability company interests of Hawk Parent (the “Post-Merger Repay Units” and holders of such Post-Merger Repay Units other than the Company, the “Repay Unitholders”) and our managing member interest in Hawk Parent, and we have no independent means of generating revenue or cash flow. We are a holding company with no material assets other than our ownership of limited liability company interests of Hawk Parent (the “Post-Merger Repay Units” and holders of such Post-Merger Repay Units other than the Company, the “Repay Unitholders”) and our managing member interest in Hawk Parent, and we have no independent means of generating revenue or cash flow. Upon the completion of the Business Combination, we entered into that certain Tax Receivable Agreement (the “Tax Receivable Agreement” or “TRA”) with the Repay Unitholders. Our ability to pay taxes, make payments under the Tax Receivable Agreement, meet our financial obligations under the Notes and pay dividends will depend on the financial results and cash flows of Hawk Parent and its subsidiaries and the distributions we receive from Hawk Parent. Our ability to pay taxes, make payments under the Tax Receivable Agreement, meet our financial obligations under the 2026 Notes and pay dividends will depend on the financial results and cash flows of Hawk Parent and its subsidiaries and the distributions we receive from Hawk Parent. Deterioration in the financial condition, earnings or cash flow of Hawk Parent and its subsidiaries, including its operating subsidiaries, for any reason could limit or impair Hawk Parent’s ability to pay such distributions. Additionally, to the extent that we need funds and Hawk Parent and/or any of its subsidiaries are restricted from making such distributions under applicable law or regulation or under the terms of any financing arrangements, or Hawk Parent is otherwise unable to provide such funds, it could materially adversely affect our liquidity and financial condition.
Hawk Parent is treated as a partnership for U.S. federal income tax purposes and, as such, generally is not subject to any entity-level U.S. federal income tax. Instead, taxable income is allocated to Repay Unitholders (including us). Accordingly, we will be required to pay income taxes on our allocable share of any net taxable income of Hawk Parent. Under the terms of Hawk Parent’s Amended and Restated Operating Agreement, Hawk Parent is obligated to make tax distributions to Repay Unitholders (including us) calculated at certain assumed tax rates. In addition to tax expenses, we will also incur expenses related to our operations, including payment obligations under the Tax Receivable Agreement (and the cost of administering such payment obligations), which could be significant. We intend to cause Hawk Parent to make distributions to Repay Unitholders in amounts sufficient to cover all applicable taxes (calculated at assumed tax rates), relevant operating expenses, payments under the Tax Receivable Agreement and dividends, if any, declared by Hawk Parent. However, as discussed below, Hawk Parent’s ability to make such distributions may be subject to various limitations and restrictions including, but not limited to, restrictions on distributions that would either violate any contract or agreement to which Hawk Parent is then a party, including debt agreements, or any applicable law, or that would have the effect of rendering Hawk Parent insolvent. If our cash resources are insufficient to meet our obligations under the Tax Receivable Agreement and to fund our obligations, we may be required to incur additional indebtedness to provide the liquidity needed to make such payments, which could materially adversely affect our liquidity and financial condition and subject us to various restrictions imposed by any such lenders. To the extent that we are unable to make payments under the Tax Receivable Agreement for any reason, such payments will be deferred and will accrue interest until paid; provided, however, that nonpayment for a specified period may constitute a material breach of a material obligation under the Tax Receivable Agreement and therefore accelerate payments due under the Tax Receivable Agreement.
Additionally, although Hawk Parent generally is not subject to any entity-level U.S. federal income tax, it may be liable under recent federal tax legislation for adjustments to its tax return, absent an election to the contrary. In the event Hawk Parent’s calculations of taxable income are incorrect, its members, including us, in later years may be subject to material liabilities pursuant to this federal legislation and its related guidance.
We anticipate that the distributions we will receive from Hawk Parent may, in certain periods, exceed our actual tax liabilities and obligations to make payments under the Tax Receivable Agreement. We anticipate that the distributions we will receive from Hawk Parent may, in certain periods, exceed our actual tax liabilities and obligations to make payments under the Tax Receivable Agreement. Our board of the directors, in its sole discretion, will make any determination from time to time with respect to the use of any such excess cash so accumulated, which may include, among other uses, to acquire additional newly issued Post-Merger Repay Units from Hawk Parent at a per unit price determined by reference to the market value of the Class A common stock; to pay dividends, which may include special dividends, on our Class A common stock; to fund repurchases of Class A common stock; or any combination of the foregoing. We will have no obligation to distribute such cash (or other available cash other than any declared dividend) to our stockholders. To the extent that we do not distribute such excess cash as dividends on Class A common stock or otherwise undertake ameliorative actions between Post-Merger Repay Units and shares of Class A common stock and instead, for example, hold such cash balances, Repay Unitholders that hold interests in Hawk Parent pre-Business Combination may benefit
31
from any value attributable to such cash balances as a result of their ownership of Class A common stock following an exchange of their Post-Merger Repay Units, notwithstanding that such holders may previously have participated as holders of Post-Merger Repay Units in distributions by Hawk Parent that resulted in such excess cash balances being held by us.
Dividends on our common stock, if any, will be paid at the discretion of our board of directors, which will consider, among other things, our business, operating results, financial condition, current and expected cash needs, plans for expansion and any legal or contractual limitations on our ability to pay such dividends. Financing arrangements may include restrictive covenants that restrict our ability to pay dividends or make other distributions to our stockholders. In addition, Hawk Parent is generally prohibited under Delaware law from making a distribution to a member to the extent that, at the time of the distribution, after giving effect to the distribution, liabilities of Hawk Parent (with certain exceptions) exceed the fair value of its assets. Hawk Parent’s subsidiaries are generally subject to similar legal limitations on their ability to make distributions to Hawk Parent. If Hawk Parent does not have sufficient funds to make distributions, our ability to declare and pay cash dividends may also be restricted or impaired.
Under the Tax Receivable Agreement, we will be required to pay 100% of the tax benefits relating to tax depreciation or amortization deductions as a result of the tax basis step-up we receive in connection with the exchanges (including an exchange in a sale for cash) of Post-Merger Repay Units into our Class A common stock and related transactions, and those payments may be substantial.
The Repay Unitholders may exchange their Post-Merger Repay Units for shares of Class A common stock pursuant to the Exchange Agreement, subject to certain conditions as set forth therein and in Hawk Parent’s Amended and Restated Operating Agreement, or in an exchange in a sale for cash. These exchanges are expected to result in increases in our allocable share of the tax basis of the tangible and intangible assets of Hawk Parent. These increases in tax basis may increase (for tax purposes) depreciation and amortization deductions and therefore reduce the amount of income or franchise tax that we would otherwise be required to pay in the future had such exchanges never occurred. These increases in tax basis may increase (for tax 31 purposes) depreciation and amortization deductions and therefore reduce the amount of income or franchise tax that we would otherwise be required to pay in the future had such exchanges never occurred.
In connection with the Business Combination, we entered into the Tax Receivable Agreement, which generally provides for the payment to the Repay Unitholders by us of 100% of certain tax benefits, if any, that we realize (or in certain cases are deemed to realize) (a portion of which will be paid in turn to certain service providers on behalf of them in respect of certain transaction expenses) as a result of these increases in tax basis and certain other tax attributes of Hawk Parent and tax benefits related to entering into the Tax Receivable Agreement, including tax benefits attributable to payments under the Tax Receivable Agreement. In connection with the Business Combination, we entered into the Tax Receivable Agreement, which generally provides for the payment to the Repay Unitholders by us of 100% of certain tax benefits, if any, that we realize (or in certain cases are deemed to realize) (a portion of which will be paid in turn to certain service providers on behalf of them in respect of certain transaction expenses) as a result of these increases in tax basis and certain other tax attributes of Hawk Parent and tax benefits related to entering into the Tax Receivable Agreement, including tax benefits attributable to payments under the Tax Receivable Agreement. These payments are our obligation and not an obligation of Hawk Parent. The actual increase in our allocable share of Hawk Parent’s tax basis in its assets, as well as the amount and timing of any payments under the Tax Receivable Agreement, will vary depending upon a number of factors, including the timing of exchanges, the market price of the Class A common stock at the time of the exchange, the extent to which such exchanges are taxable and the amount and timing of the recognition of our income. While many of the factors that will determine the amount of payments that we will make under the Tax Receivable Agreement are outside of our control, we expect that the payments we will make under the Tax Receivable Agreement will be substantial and could have a material adverse effect on our financial condition. Any payments made by us under the Tax Receivable Agreement will generally reduce the amount of overall cash flow that might have otherwise been available to us. To the extent that we are unable to make timely payments under the Tax Receivable Agreement for any reason, the unpaid amounts will be deferred and will accrue interest until paid. Furthermore, our future obligation to make payments under the Tax Receivable Agreement could make us a less attractive target for an acquisition, particularly in the case of an acquirer that cannot use some or all of the tax benefits that may be deemed realized under the Tax Receivable Agreement.
In certain cases, payments under the Tax Receivable Agreement may exceed the actual tax benefits we realize or be accelerated. In certain cases, payments under the Tax Receivable Agreement may exceed the actual tax benefits we realize or be accelerated.
Payments under the Tax Receivable Agreement will be based on the tax reporting positions that we determine, and the Internal Revenue Service or another taxing authority may challenge all or any part of the tax basis increases, as well as other tax positions that we take, and a court may sustain such a challenge. Payments under the Tax Receivable Agreement will be based on the tax reporting positions that we determine, and the Internal Revenue Service or another taxing authority may challenge all or any part of the tax basis increases, as well as other tax positions that we take, and a court may sustain such a challenge. In the event any tax benefits initially claimed by us are disallowed, the current Repay Unitholders will not be required to reimburse us for any excess payments that may previously have been made under the Tax Receivable Agreement, for example, due to adjustments resulting from examinations by taxing authorities. Rather, excess payments made to such holders will be netted against any future cash payments otherwise required to be made by us, if any, after the determination of such excess. However, a challenge to any tax benefits initially claimed by us may not arise for a number of years following the initial time of such payment or, even if challenged early, such excess cash payment may be greater than the amount of future cash payments that we might otherwise be required to make under the terms of the Tax Receivable Agreement and, as a result, there might not be future cash payments from which to net against. As a
32
result, in certain circumstances, we could make payments under the Tax Receivable Agreement in excess of our actual income or franchise tax savings, which could materially impair our financial condition.
Moreover, the Tax Receivable Agreement provides that, in the event that (i) we exercise our early termination rights under the Tax Receivable Agreement, (ii) we become bankrupt or undergo a similar insolvency event, (iii) certain changes of control of us occur (as described in the Tax Receivable Agreement) or (iv) we are more than three months late in making of a payment due under the Tax Receivable Agreement (unless we in good faith determine that we have insufficient funds to make such payment), our obligations under the Tax Receivable Agreement will accelerate and we will be required to make an immediate lump-sum cash payment to the Repay Unitholders equal to the present value of all forecasted future payments that would have otherwise been made under the Tax Receivable Agreement, which lump-sum payment would be based on certain assumptions, including those relating to our future taxable income. Moreover, the Tax Receivable Agreement provides that, in the event that (i) we exercise our early termination rights under the Tax Receivable Agreement, (ii) we become bankrupt or undergo a similar insolvency event, (iii) certain changes of control of us occur (as described in the Tax Receivable Agreement) or (iv) we are more than three months late in making of a payment due under the Tax Receivable Agreement (unless we in good faith determine that we have insufficient funds to make such payment), our obligations under the Tax Receivable Agreement will accelerate and we will be required to make an immediate lump-sum cash payment to the Repay Unitholders equal to the present value of all forecasted future payments that would have otherwise been made under the Tax Receivable Agreement, which lump-sum payment would be based on certain assumptions, including those relating to our future taxable income. The lump-sum payment to the Repay Unitholders could be substantial and could exceed the actual tax benefits that we realize subsequent to such payment because such payment would be calculated assuming, among other things, that we would be able to use the assumed potential tax benefits in future years, and that tax rates applicable to us would be the same as they were in the year of the termination.
There may be a material negative effect on our liquidity if the payments under the Tax Receivable Agreement exceed the actual income or franchise tax savings that we realize. There may be a material negative effect on our liquidity if the payments under the Tax Receivable Agreement exceed the actual income or franchise tax savings that we realize. Furthermore, our obligations to make payments under the Tax Receivable Agreement could also have the effect of delaying, deferring or preventing certain mergers, asset sales, other forms of business combinations or other changes of control. Conversely, our executives and directors who are TRA beneficiaries could be incentivized to take actions, including asset sales or restructuring activities, in order to trigger TRA payments sooner. We may need to incur additional indebtedness to finance payments under the Tax Receivable Agreement to the extent our cash resources are insufficient to meet our obligations under the Tax Receivable Agreement as a result of timing discrepancies or otherwise. Such indebtedness may have a material adverse effect on our financial condition.
Risks Related to our Class A Common Stock
Future issuances or sales of substantial amounts of our Class A common stock in the public market, or the perception that such issuances or sales may occur, could cause the market price for our Class A common stock to decline.
Hawk Parent has outstanding an aggregate of 5,285,883 Post-Merger Repay Units as of March 4, 2026. Pursuant to the Exchange Agreement, Repay Unitholders have the right to elect to exchange such Post-Merger Repay Units into shares of our Class A common stock on a one-for-one basis, subject to the terms of the Exchange Agreement. Hawk Parent has outstanding an aggregate of 5,844,095 Post-Merger Repay Units as of February 22, 2024. Pursuant to the Exchange Agreement, Repay Unitholders have the right to elect to exchange such Post-Merger Repay Units into shares of our Class A common stock on a one-for-one basis, subject to the terms of the Exchange Agreement. However, Hawk Parent may elect to settle such exchange in cash in lieu of delivering shares of our Class A common stock pursuant to the terms of the Exchange Agreement.
In addition, we have reserved a total of 22,226,728 shares of Class A common stock for issuance under our Repay Holdings Corporation Omnibus Incentive Plan (as amended, the “Incentive Plan. In addition, we have reserved a total of 13,826,728 shares of Class A common stock for issuance under our Repay Holdings Corporation Omnibus Incentive Plan (as amended, the “Incentive Plan. ”). To the extent such shares have vested or vest in the future (and settle into shares, in the case of restricted stock units), they can be freely sold in the public market upon issuance, subject to volume limitations applicable to affiliates.
If these stockholders exercise their sale or exchange rights and sell shares or are perceived by the market as intending to sell shares, the market price of our shares of Class A common stock could drop significantly. If these stockholders exercise their sale or exchange rights and sell shares or are perceived by the market as intending to sell shares, the market price of our shares of Class A common stock could drop significantly. These factors could also make it more difficult for us to raise additional funds through offerings of our shares of Class A common stock or other securities at a time and at a price that we deem appropriate.
We also have outstanding $287.5 million aggregate principal amount of our 2029 Notes which are convertible into shares of our Class A common stock in certain circumstances. We also have outstanding $440.0 million aggregate principal amount of our 2026 Notes which are convertible into shares of our Class A common stock in certain circumstances. Investors will incur further dilution upon the conversion of any of our convertible senior notes if we elect to deliver shares of Class A common stock upon such conversion. Investors will incur further dilution upon the conversion of any of our 2026 Notes if we elect to deliver shares of Class A common stock upon such conversion. In the future, we may also issue additional securities in connection with investments, acquisitions or capital raising activities, which could constitute a material portion of our then-outstanding shares of our Class A common stock and may result in additional dilution to investors or adversely impact the price of our Class A common stock.
Our stock price may be volatile, which could negatively affect our business and operations. Our stock price may be volatile, which could negatively affect our business and operations.
Historically, our Class A common stock has experienced substantial price volatility. Historically, our Class A common stock has experienced substantial price volatility. For example, the closing price per share of our Class A common stock on The Nasdaq Capital Market ranged from a low of $3.00 to a high of $7.70 during the period from January 2, 2025 to December 31, 2025. This volatility could be the result of changes in our volumes, revenue,
33
earnings and margins or general market and economic factors. If our future operating results or margins are below the expectations of stock market analysts or our investors, our stock price will likely decline.
Speculation and opinions in the press or investment community about our strategic position, financial condition, results of operations or significant transactions can also cause changes in our stock price. Speculation and opinions in the press or investment community about our strategic position, financial condition, results of operations or significant transactions can also cause changes in our stock price. In particular, speculation on our go-forward strategy, competition in some of the markets we address and the effect of general economic and political conditions (such as recession concerns, interest rate changes and inflation) on our business, may have a dramatic effect on our stock price.
Volatility in the stock price of our common stock or other reasons may in the future cause us to become the target of securities litigation or shareholder activism. Volatility in the stock price of our common stock or other reasons may in the future cause us to become the target of securities litigation or shareholder activism. Securities litigation and shareholder activism, including potential proxy contests, could result in substantial costs and divert management’s and board of directors’ attention and resources from our business. Additionally, such securities litigation and shareholder activism could give rise to perceived uncertainties as to our future, adversely affect our relationships with service providers and make it more difficult to attract and retain qualified personnel. Also, we may be required to incur significant legal fees and other expenses related to any securities litigation or activist shareholder matters.
Because we do not currently intend to pay dividends, holders of our Class A common stock will benefit from an investment in our Class A common stock only if it appreciates in value. Because we do not currently intend to pay dividends, holders of our Class A common stock will benefit from an investment in our Class A common stock only if it appreciates in value.
We have never declared or paid any dividends on our Class A common stock, and do not expect to pay cash dividends in the foreseeable future. We have never declared or paid any dividends on our Class A common stock, and do not expect to pay cash dividends in the foreseeable future. As a result, the success of an investment in our common stock will depend entirely upon future appreciation in its value. There is no guarantee that our Class A common stock will maintain its value or appreciate in value.
Delaware law and our governing documents contain certain provisions, including anti-takeover provisions that limit the ability of stockholders to take certain actions and could delay or discourage takeover attempts that stockholders may consider favorable. 33 Delaware law and our governing documents contain certain provisions, including anti-takeover provisions that limit the ability of stockholders to take certain actions and could delay or discourage takeover attempts that stockholders may consider favorable.
Our certificate of incorporation, bylaws and Delaware General Corporation Law (“DGCL”) contain provisions that could have the effect of rendering more difficult, delaying, or preventing an acquisition deemed undesirable by our board of directors and therefore depress the trading price of our Class A common stock. Our certificate of incorporation, bylaws and Delaware General Corporation Law (“DGCL”) contain provisions that could have the effect of rendering more difficult, delaying, or preventing an acquisition deemed undesirable by our board of directors and therefore depress the trading price of our Class A common stock. These provisions could also make it difficult for stockholders to take certain actions, including electing directors who are not nominated by the current members of our board of directors or taking other corporate actions, including effecting changes in management. Among other things, our certificate of incorporation and bylaws include provisions regarding:
34
In addition, as a Delaware corporation, we are generally subject to provisions of Delaware law, including the DGCL. In addition, as a Delaware corporation, we are generally subject to provisions of Delaware law, including the DGCL. Although we have elected not to be governed by Section 203 of the DGCL, certain provisions of our certificate of incorporation, in a manner substantially similar to Section 203 of the DGCL, prohibit certain of our stockholders (other than those stockholders who are party to a stockholders’ agreement with us) who hold 15% or more of our outstanding capital stock from engaging in certain business combination transactions with us for a specified period of time unless certain conditions are met.
Our certificate of incorporation designates a state or federal court located within the State of Delaware as the exclusive forum for substantially all disputes between us and our stockholders, which could limit our stockholders’ ability to choose the judicial forum for disputes with us or our directors, officers, or employees. Our certificate of incorporation designates a state or federal court located within the State of Delaware as the exclusive forum for substantially all disputes between us and our stockholders, which could limit our stockholders’ ability to choose the judicial forum for disputes with us or our directors, officers, or employees.
Our certificate of incorporation provides that, unless we consent in writing to the selection of an alternative forum, the Court of Chancery of the State of Delaware, or if such court does not have subject matter jurisdiction, any other court located in the State of Delaware with subject matter jurisdiction, will be the sole and exclusive forum for (i) any derivative action or proceeding brought on behalf of us, (ii) any action asserting a claim of breach of a fiduciary duty owed by any of our current or former directors, officers, other employees or stockholders to us or our stockholders, (iii) any action asserting a claim against us or our officers or directors arising pursuant to any provision of the DGCL or our certificate of incorporation or bylaws or as to which the DGCL confers jurisdiction on the Court of Chancery of the State of Delaware, or (iv) any action asserting a claim against us or any of our directors or officers governed by the internal affairs doctrine of the law of the State of Delaware. Our certificate of incorporation provides that, unless we consent in writing to the selection of an alternative forum, the Court of Chancery of the State of Delaware, or if such court does not have subject matter jurisdiction, any other court located in the State of Delaware with subject matter jurisdiction, will be the sole and exclusive forum for (i) any derivative action or proceeding brought on behalf of us, (ii) any action asserting a claim of breach of a fiduciary duty owed by any of our current or former directors, officers, other employees or stockholders to us or our stockholders, (iii) any action asserting a claim against us or our officers or directors arising pursuant to any provision of the DGCL or our certificate of incorporation or bylaws or as to which the DGCL confers jurisdiction on the Court of Chancery of the State of Delaware, or (iv) any action 34 asserting a claim against us or any of our directors or officers governed by the internal affairs doctrine of the law of the State of Delaware.
Any person or entity purchasing or otherwise acquiring any interest in any of our securities will be deemed to have notice of and consented to this provision. Any person or entity purchasing or otherwise acquiring any interest in any of our securities will be deemed to have notice of and consented to this provision. These exclusive-forum provisions may limit a stockholder’s ability to bring a claim in a judicial forum of its choosing for disputes with us or our directors, officers, or other employees, which may discourage lawsuits against us or our directors, officers, and other employees. If a court were to find these exclusive-forum provisions to be inapplicable or unenforceable in an action, we may incur additional costs associated with resolving the dispute in other jurisdictions, which could harm our results of operations.
ITEM 1B. UNRESOLVED STAFF COMMENTS.
None.
ITEM 1C. CYBERSECURITY.
We recognize the critical importance of developing, implementing and maintaining robust cybersecurity programs in order to mitigate risk and to safeguard the sensitive data collected, processed and stored by us. Our cybersecurity programs are guided in part by certain regulatory requirements (including payment network rules) that require periodic testing and external reviews. Cybersecurity is also one of the initiatives we have identified to guide our ongoing corporate sustainability efforts. Our Chief Information Security Officer (“CISO”), who reports directly to our Chief Technology Officer (“CTO”), has day-to-day responsibility for our cybersecurity programs. Given the significant risks associated with cybersecurity incidents in the payment processing business, our cybersecurity programs are generally operated in a dedicated and independent manner. Due to the critical risks associated with cybersecurity incidents in the payment processing business, our cybersecurity programs are generally operated in a dedicated and independent manner.
Risk Management and Strategy
Risk Identification and Assessment
We employ structured processes and procedures to identify and assess cybersecurity risks and events. Our CISO oversees a cybersecurity risk assessment program that includes, for each identified material risk, an evaluation of the applicable threat level for such risk and the current mitigation plan for such risk. Our CISO maintains a cybersecurity risk assessment program that includes, for each identified material risk, an evaluation of the applicable threat level for such risk and the current mitigation plan for such risk. The cybersecurity risk assessment receives input from cross-functional teams across our organization. We also engage various third parties (including penetration testers, auditing firms and managed security service providers) to assist in identifying and assessing material cybersecurity risks.
Risk Management
Our cybersecurity-related risks are managed using a combination of documented policies and procedures, management oversight and security systems and hardware. Relevant policies are developed with the assistance of appropriate subject matter experts and are reviewed at least annually. As part of these policies and procedures, we maintain a Security Incident Response Plan (the “SIRP”) that is intended to establish a structured and coordinated approach to handling cybersecurity incidents in our
35
business. During the past year, we conducted a tabletop exercise with our executive management team that simulated a cybersecurity incident to evaluate the effectiveness of our SIRP, identify potential improvements and enhance our incident response readiness.
Employee and contractor compliance is bolstered by hiring, onboarding and termination procedures that are designed to align with cybersecurity objectives. All of our employees and contractors are required to complete security awareness training (which covers the policies and other information regarding our cybersecurity programs) both at the time of hire or engagement and then on annual basis. We also routinely disseminate cybersecurity and physical security educational materials to all employees and contractors.
We utilize a variety of physical security controls to protect our offices and assets from unauthorized access, tampering and environmental hazards. We have implemented a variety of physical security controls to protect our offices and assets from unauthorized access, tampering and environmental hazards. Our systems include third party logging, intrusion detection and prevention systems to monitor our information systems for anomalous and suspicious activity in support of our security objectives and incident management plans. We utilize a combination of third party logging, intrusion detection and penetration systems to monitor our information systems for anomalous and suspicious activity in support of our security objectives and incident management plans.
Third Parties
We regularly
As an important part of our cybersecurity programs,
Risks from Cybersecurity Threats
While we
Governance
Board of Directors Oversight
Our board of directors established a technology committee (the “Technology Committee”) to oversee the risks from cybersecurity threats.
Management’s Role
36
department, our finance department and various units within our technology department. Our CTO also currently serves as a member of the Security and Privacy Steering Committee.
Our CISO is responsible for managing any cybersecurity incidents under the SIRP and coordinating with our senior management. Our CISO is responsible for managing any cybersecurity incidents under the SIRP and coordinating with our senior management. The SIRP includes a process under which senior leaders from our information security, legal and accounting teams will assess the impact and significance of a cybersecurity incident to determine any necessary external notifications or filings. The SIRP also contains parameters regarding the requirements and timing for notifications of certain cybersecurity incidents to our board of directors. The SIRP also contains parameters regarding the requirements and timing for notifications of certain cybersecurity incidents to our board of directors.
Our CISO has served in various roles in information security, information technology and engineering operations for over 25 years. Our CISO has served in various roles in information security, information technology and engineering operations for over 25 years. Our CISO holds an undergraduate degree in electronics and communications engineering, and he has attained a professional certification in leadership from a leading graduate school. He also maintains an Information Systems Security Professional (CISSP) certification from the International Information System Security Certification Consortium (ISC2). He also maintains a Certificate Information Systems Security Professional (CISSP) certification from the International Information System Security Certification Consortium (ISC2). Our CTO holds an undergraduate degree in management and information systems, and he has served in various technology roles for over 30 years. Our CTO’s prior experience includes serving as the Chief Information Officer and Chief Information Security Officer of a public company and as Chief Technology Officer of a separate public company.
Recently Filed
| Ticker * | File Date |
|---|---|
| RBB | 48 minutes ago |
| TETEF | 53 minutes ago |
| CHGG | 56 minutes ago |
| SABS | an hour ago |
| TREE | an hour ago |
| CHRS | an hour ago |
| ACIC | an hour ago |
| EDIT | an hour ago |
| AMPY | an hour ago |
| GLRE | an hour ago |
| NL | an hour ago |
| FSP | an hour ago |
| OYSE | an hour ago |
| OWLT | an hour ago |
| RAIL | an hour ago |
| SVCC | an hour ago |
| HTBK | an hour ago |
| FIGX | an hour ago |
| OSUR | an hour ago |
| ACCO | an hour ago |
| NPWR | an hour ago |
| ZVRA | an hour ago |
| MYO | 2 hours ago |
| CRBP | 2 hours ago |
| RBOT | 2 hours ago |
| RPAY | 2 hours ago |
| SEPN | 2 hours ago |
| KRO | 2 hours ago |
| MGNX | 2 hours ago |
| DSGN | 2 hours ago |
| EGBN | 2 hours ago |
| FISI | 2 hours ago |
| BOX | 2 hours ago |
| CTM | 2 hours ago |
| ALXO | 2 hours ago |
| DDD | 2 hours ago |
| TIPT | 2 hours ago |
| VYGR | 2 hours ago |
| EBMT | 3 hours ago |
| BCBP | 4 hours ago |
| BETA | 8 hours ago |
| CRCL | 9 hours ago |
| DY | 10 hours ago |
| GBTG | 10 hours ago |
| SPRB | 10 hours ago |
| DNTH | 10 hours ago |
| BOLD | 11 hours ago |
| RNAC | 11 hours ago |
| CCRN | 11 hours ago |
| MASS | 12 hours ago |