$SQ Risk Factor changes from 00/02/24/22/2022 to 00/02/22/24/2024

ITEM 1A. RISK FACTORSInvesting in our securities involves a high degree of risk.

You should carefully consider the risks and uncertainties described below, together with all of the other information in this Annual Report on Form 10-K, including the section titled Management’s Discussion and Analysis of Financial Condition and Results of Operations and our consolidated financial statements and related notes, before making any investment decision with respect to our securities. The risks and uncertainties described below may not be the only ones we face. If any of the risks actually occur, our business could be materially and adversely affected. In that event, the market price of our Class A common stock could decline, and you could lose part or all of your investment.

For example, in recent periods our Cash App segment revenue has grown at a high rate, which has varied and may continue to vary from the growth rate of our Square segment. Our sellers and customers have no obligation to continue to use our services, and we cannot assure you that they will. We generally do not have long-term contracts with our sellers and customers, and the difficulty and costs associated with switching to a competitor may not be significant for many of the services we offer. Our sellers’ activity with us may decrease for a variety of reasons, including sellers’ level of satisfaction with our products and services, our pricing and the pricing and quality of competing products or services, the effects of economic conditions, or reductions in the aggregate spending of our sellers’ customers. A number of factors have affected and could negatively affect Cash App customer growth, inflows, and engagement levels, including our ability to introduce new products and services that are compelling to our customers and that they adopt, changes to our systems, processes or other technical or operational requirements that impact how customers use or access our products and services, the impact on our network of other customers choosing whether to use Cash App, our decision to expand into or exit certain markets, technical or other problems that affect customer experience, failure to provide sufficient customer support, fraud and scams targeting Cash App customers, and harm to our reputation and brand. Further, certain events or programs, such as government stimulus programs may correlate with periods of significant growth, but such growth may not be sustainable. The growth of our business depends in part on our existing sellers and customers expanding their use of our products and services. The growth of our business also depends on our ability to attract new sellers and customers, to encourage sellers and customers to use our products and services, and to introduce successful new products and services. We have invested and will continue to invest in our business in order to offer better or new features, products, and services and to adjust our product offerings to changing economic conditions, but if those features, products, services, and changes fail to be successful on the expected timeline or at all, our growth may slow or decline. Thus, we may not be able to maintain profitability.During the year ended December 31, 2023, we generated a net income of $9. As of December 31, 2023, we had an accumulated deficit of $528. If the costs associated with acquiring and supporting new or larger sellers, attracting and supporting new Cash App customers, or with developing and supporting our products and services materially increase in the future, including the fees we pay to third parties to advertise our products and services, our expenses may rise significantly. In addition, increases in our seller base could cause us to incur increased losses because costs associated with new sellers are generally incurred up front, while revenue is recognized in future periods as our products and services are used by our sellers. For example, prior to its acquisition, Afterpay historically generated net losses. If we are unable to generate adequate revenue growth and manage our expenses, we may incur significant losses and may not maintain profitability on a consistent basis.24From time to time, we have made and may make decisions that will have a negative effect on our short-term operating results if we believe those decisions will improve our operating results over the long term. For example, from time to time, we have implemented expense cuts and reduced the size of our workforce to, among other things, align our cost structure with our business and longer term strategies, which may increase expenses in the short term and impact our ability to grow or quickly develop and introduce products. These decisions may not be consistent with the expectations of investors and may not produce the long-term benefits that we expect, in which case our business may be materially and adversely affected.Our business depends on our ability to maintain, protect, and enhance our brands.Having a strong and trusted brand has contributed significantly to the success of our business. Maintaining and promoting our brands will depend largely on our ability to continue to provide useful, reliable, secure, and innovative products and services, as well as our ability to maintain trust and be a technology leader. We may introduce, or make changes to, features, products, services, privacy practices, or terms of service that customers do not like, which may materially and adversely affect our brands. Our brand promotion activities may not generate customer awareness or increase revenue, and even if they do, any increase in revenue may not offset the expenses we incur in building our brands. If we fail to successfully promote and maintain our brands or if we incur excessive expenses in this effort, our business could be materially and adversely affected.The introduction and promotion of new products and services, as well as the promotion of existing products and services, may be partly dependent on our visibility on third-party advertising platforms, such as Google, Facebook, or X. Changes in the way these platforms operate or changes in their advertising prices, data use practices or other terms could make the maintenance and promotion of our products and services and our brands more expensive or more difficult. If we are unable to market and promote our brands on third-party platforms effectively, our ability to acquire new customers would be materially harmed. We also use retail partners to sell hardware and acquire sellers for Square. Our ability to acquire new sellers could be materially harmed if we are unable to enter into or maintain these partnerships on terms that are commercially reasonable to us, or at all. In addition, negative statements about us can cause and have caused a decline in the market price of our Class A common stock, divert our management’s attention and resources, and could cause other adverse impacts to our business. Partners and influencers or other third parties with whom we maintain relationships could engage in behavior or use their platforms to communicate directly with our sellers and customers in a manner that reflects poorly on our brands and such behavior or communications may adversely affect us. Further, negative publicity or commentary regarding the partners and influencers or other third parties who are, or are perceived to be, affiliated with us may also damage our reputation, even if the negative publicity or commentary is not directly related to us. Any negative publicity about the industries we operate in or our company, the quality and reliability of our products and services, our risk management processes, changes to our products and services, our ability to effectively manage and resolve customer complaints, our privacy, data protection, and information security practices, litigation, regulatory activity, policy positions, and the experience of our sellers and customers with us, our products or services could adversely affect our reputation and the confidence in and use of our products and services. If we do not successfully maintain, protect or enhance our brands, our business could be materially and adversely affected.25Our efforts to expand our product portfolio and market reach, including through acquisitions, may not succeed and may reduce our revenue growth and profitability.We intend to continue to broaden the scope of products and services we offer. However, we may not be successful in maintaining or growing our revenue, or deriving any significant new revenue streams from these products and services. Failure to successfully broaden the scope of products and services that are attractive may inhibit our growth and harm our business. Furthermore, we expect to continue to expand our markets in the future, and we may have limited or no experience in such newer markets. If any of this were to occur, it could damage our reputation, limit our growth, and materially and adversely affect our business.Our long-term success depends on our ability to develop products and services to address the rapidly evolving market for payments and financial services, and, if we are not able to implement successful enhancements and new features for our products and services, our business could be materially and adversely affected.g., replacing sensitive data such as payment card information with symbols (tokens) to keep the data safe), blockchain, and artificial intelligence ("AI"), including machine learning.These new and evolving services and technologies may be superior to, impair, or render obsolete the products and services we currently offer or the technologies we currently use to provide them. Our ability to develop new products and services may be inhibited by industry-wide standards, payment card networks, existing and future laws and regulations, resistance to change from our customers, which includes our sellers and their customers, or third parties’ intellectual property rights. Incorporating new technologies into our products and services may require substantial expenditures and take considerable time, and we may not be successful in realizing a return on our efforts in a timely manner or at all. For example, generative AI has become more publicly available and enterprise adoption of generative AI has grown. We have incorporated and expect to continue to incorporate AI features into our products and technologies and our success will depend in part on our ability to do so in a way that is compelling to our customers. If we are unable to provide enhancements and new features for our products and services or to develop new products and services that achieve market acceptance or that keep pace with rapid technological developments and evolving industry standards, our business would be materially and adversely affected.We often rely, not only on our own initiatives and innovations, but also on third parties, including some of our competitors, for the development of and access to new technologies and development of a robust market for these new products and technologies. Failure to accurately predict or to respond effectively to developments in our industry may significantly impair our business. Any failure of our products and services to continue to operate effectively with third-party infrastructures and technologies could reduce the demand for our products and services, result in dissatisfaction of our customers, and materially and adversely affect our business.We compete in markets characterized by vigorous competition, changing technology, evolving industry standards, changing customer needs, and frequent introductions of new products and services. We expect competition to intensify in the future as existing and new competitors introduce new services or enhance existing services. For example, companies not traditionally associated with the payments industry have introduced products or services that are or may become competitive with our business. We compete against many companies to attract customers across our products and services, and some of these companies have greater financial resources and substantially larger bases of customers than we do, which may provide them with significant competitive advantages. These companies may devote greater resources to the development, promotion, and sale of products and services, may achieve economies of scale due to the size of their customer bases, and may more effectively introduce their own innovative products and services that adversely impact our growth. In addition, mergers and acquisitions by, and collaborations between, the companies we compete against may lead to even larger competitors with more resources.Certain sellers have long-standing exclusive, or nearly exclusive, relationships with our competitors to accept payment cards and other services that compete with what we offer. Competing services tied to established brands may engender greater confidence in the safety and efficacy of their services. If we are unable to differentiate ourselves from and successfully compete with our competitors, our business will be materially and adversely affected.We may also face pricing pressures from competitors. Some competitors may offer lower prices by cross-subsidizing certain services that we also provide through other products they offer. Such competition may result in the need for us to alter our pricing and could reduce our gross profit. Also, sellers may demand more customized and favorable pricing from us, and competitive pressures may require us to agree to such pricing, reducing our gross profit. We currently negotiate pricing discounts and other incentive arrangements with certain large sellers to increase acceptance and usage of our products and services. If we continue this practice and if an increasing proportion of our sellers are large sellers, we may have to increase the discounts or incentives we provide, which could also reduce our gross profit.Developments in the cryptocurrency market subject us to additional risks.Our investments in bitcoin, our bitcoin ecosystem, and our Cash App feature that permits customers to transact in bitcoin, subject us to additional risks related to any further developments in the cryptocurrency markets and the resulting impact on customer and investor behavior. We may experience adverse impacts to our business as a result of the downstream effects of the bankruptcies filed by certain cryptocurrency market participants, its severity, and the actions taken by regulators to address its impact. Enforcement actions by U.S. If our customers experience losses due to market fluctuations in the prices of bitcoin, they may reduce or cease their use of Cash App and our results of operations may be adversely impacted. Further, our customers could attempt to seek compensation from us for their financial investment losses, and those claims, even if unsuccessful, would likely be time-consuming and costly for us to address.Deteriorations in the cryptocurrency markets may also have an adverse effect on our reputation, and any negative perception by our customers of one or more cryptocurrencies may lead to a loss of customer demand for our products and services, any of which could have an adverse impact on our business and financial condition. We may also suffer a decline in the market price of our Class A common stock due to any negative perception by our customers, investors, or the general public, of bitcoin or the cryptocurrency markets. We have in the past acquired or invested in, and we continue to seek to acquire or invest in, businesses, technologies, or other assets that we believe could complement or expand our business, including acquisitions of new lines of business that are adjacent to or outside of our existing ecosystems or geographic territories. As we grow, the pace and scale of our acquisitions may increase and may include larger acquisitions than we have done historically. The identification, evaluation, and negotiation of potential acquisition or strategic investment transactions may divert the attention of management and entail various expenses, whether or not such transactions are ultimately completed. There can be no assurance that we will be successful in identifying, negotiating, and consummating favorable transaction opportunities. Moreover, acquired businesses’ technology stacks may add complexity, resource constraints, and legacy technological challenges that make it difficult and time consuming to achieve such adequate controls, processes, and procedures.•we may fail to identify or assess the magnitude of certain liabilities, shortcomings, or other circumstances prior to acquiring or investing in a business, which could result in additional financial, legal, regulatory, or tax exposure and may subject us to additional controls, policies, procedures, liabilities, litigation, costs of compliance or remediation, or other adverse effects on our business, operating results, or financial condition;•we may have difficulty entering into new market segments or new geographic territories;•we may be unable to retain the customers, vendors, and partners of acquired businesses;•there may be lawsuits or regulatory actions resulting from the transaction;28•there may be risks associated with undetected security weaknesses, cyberattacks, or security breaches or incidents at companies that we acquire or with which we may combine or partner;•there may be local and foreign regulations applicable to the international activities of our business and the businesses we acquire; and•acquisitions could result in dilutive issuances of equity securities or the incurrence of debt.We have experienced certain of these risks in connection with our past acquisitions, and any of the foregoing could harm our business and negatively impact our results of operations.We have in the past, and may in the future, also choose to divest certain businesses or product lines. If we decide to sell assets or a business, we may have difficulty obtaining terms acceptable to us in a timely manner, or at all. If a divestiture is not completed for any reason, we may not be able to find another buyer on the same terms, and we may have incurred significant costs without any corresponding benefit.Joint ventures and minority investments inherently involve a lesser degree of control over business operations, thereby potentially increasing the financial, legal, operational, regulatory, and/or compliance risks associated with the joint venture or minority investment. In addition, we may be dependent on joint venture partners, controlling shareholders, management, or other persons or entities who control them and who may have business interests, strategies, or goals that are inconsistent with ours. Business decisions or other actions or omissions of the joint venture partners, controlling shareholders, management, or other persons or entities who control them may adversely affect the value of our investment, result in litigation or regulatory action against us, and may otherwise damage our reputation and brand.The ongoing integration of Afterpay could disrupt our business and adversely affect our future results of operations.Our ability to benefit from our acquisition of Afterpay depends on our ability to complete the integration of Afterpay with our business in a timely and effective manner. Difficulties that we have encountered and may continue to encounter in the integration process include the following: •challenges and difficulties associated with managing the larger, more complex, combined company;•conforming standards and controls and consolidating corporate infrastructures between the companies;•integrating personnel from the two companies while maintaining focus on developing, producing and delivering consistent, high quality products and services;•loss of key employees;•coordinating geographically dispersed organizations;•potential unknown liabilities and unforeseen expenses; and•the diversion of management’s attention caused by integrating the companies’ operations.29TIDAL subjects us to risks and uncertainties related to the music industry. We cannot provide assurances that we or TIDAL will be able to maintain or expand arrangements with partners and other third parties on acceptable terms, if at all. Further, the music industry is highly concentrated, which means we rely on a small number of entities that may take adverse actions or take advantage of their market power to pursue arduous financial or other terms that may adversely affect us or may restrict our ability to innovate and improve our streaming service. Our streaming service also competes for listeners on the basis of the presence and visibility of our app, which is distributed via app stores operated by Apple and Google. We face significant competition for listeners from these companies, which also promote their own music and content. In addition, our competitors’ streaming products may be pre-loaded or integrated into consumer electronics products or automobiles more broadly than our streaming product, which makes such competitors more visible to consumers. If we are unable to compete successfully for listeners against other media providers, then our TIDAL business may suffer. If we fail to successfully operate and grow our TIDAL business, we will not realize the benefits anticipated when we acquired a majority interest in the business, and any such failure could result in adverse effects on our business and financial results, including substantial impairment charges. We may not be successful enough in these new geographies to recoup our investments in a timely manner or at all.S.As a result of these risks, our efforts to expand our global operations may not be successful, which could limit our ability to grow our business.Our BNPL platform increases our exposure to consumer defaults and merchant insolvency. In addition, if consumers who have purchased products or services using our BNPL platform do not receive the products or services, they may cease payment on their outstanding balances or request a refund on previous payments, and our business may be negatively impacted. The performance of our BNPL platform depends also on the sales of products and services by retail merchants. Merchants’ sales may decrease as a result of factors outside of their control, including deteriorating macroeconomic conditions and supply chain disruptions. If a merchant ceases its operations, closes some or all of its locations, or fails to deliver goods or services to our consumers, the merchant may not be able to reimburse us for chargebacks or refunds or may not be able to repay the funds we have advanced to them, all of which could result in higher charge-off rates than anticipated.Volatility in the banking and financial services sectors may impact our bank partnerships and could negatively impact our business. For example, we offer certain FDIC-insured products through our partnerships with banks that are members of the FDIC. If the FDIC were to determine that funds held at a bank partner are not covered by deposit insurance, or if one or more of our bank partners were to fail and enter receivership proceedings under the FDIA, our sellers and customers may seek to withdraw their funds, or may not be able to withdraw all their funds in a timely manner, which could adversely affect our brand, business and results of operations, and may lead to claims or litigation, which may be costly to address. Additionally, in instances where we are a service-provider to or are otherwise in a third-party relationship with our bank partners in connection with these programs, we are subject to certain risk-management standards for third-party relationships in accordance with federal bank regulatory guidance and examinations by the federal banking regulators.Further, as a FDIC-insured institution, our subsidiary Square Financial Services is subject to regulatory obligations, including the assessment of a quarterly deposit insurance premium, calculated based on its average consolidated total assets. We are generally unable to control the amount of premiums that we are required to pay for FDIC insurance. If there are additional bank or financial institution failures, we may be required to pay higher deposit insurance assessments or higher fees associated with FDIC-insured products offered through our bank partnerships, or we may be subject to higher capital requirements imposed by the FDIC, our bank partners, or federal banking regulators with authority over our bank partners, which could reduce our profitability, and negatively impact our business and operations.31We intend to continue to explore other products, models, and structures for our product offerings, including with bank partners. Certain of our current product offerings subject us to reporting requirements, bonding requirements, and inspection by applicable federal or state regulatory agencies, and our future product offerings may potentially require, or be deemed to require, additional data, procedures, partnerships, licenses, regulatory approvals, or capabilities that we have not yet obtained or developed. Square Loans are subject to additional risks related to availability of capital, seller payments, interest rate, deposit insurance premiums, and general macroeconomic conditions.Square Loans is our commercial lending program. Square Financial Services, as the originator of the loans provided by Square Loans in the U.S.

, is subject to risks in addition to those described elsewhere in this Annual Report on Form 10-K. Maintaining and growing our Square Loans business is dependent on institutional third-party investors purchasing the eligible business loans originated by us. If such third parties fail to continue to purchase such business loans or reduce the amount of future loans they purchase, then we may need to reduce originations, or we would need to fund the purchase of additional business loans from our own resources. We then may have to reduce the scale of Square Financial Services, which could have a direct impact on our ability to grow. Additionally, Square Financial Services has certain customary repurchase obligations in its loan purchase and servicing agreements with such institutional third-party investors for breaches of certain eligibility representations and warranties. If third parties reduce the price they are willing to pay for these business loans or reduce the servicing fees they pay us in exchange for servicing the business loans on their behalf, then the financial performance of Square Financial Services would be harmed.The business loans provided by Square Loans are generally unsecured obligations of our sellers, and they are not guaranteed or insured in any way. Adverse changes in macroeconomic conditions or the credit quality of our sellers could cause some sellers who utilize Square Loans to cease operating or to experience a decline in their payment processing volume, thereby rendering them unable to make payment on the business loan and/or extend the repayment period beyond the contractual repayment terms on the business loan. To the extent a seller breaches a contractual obligation, such as the requirement to make minimum payments or other breach, the seller would be liable for an accelerated business loan repayment, where our recourse is to the business and not to any individual or other asset. While our exposure to loans that we sell to third parties is more limited, if the sellers who utilize Square Loans are unable to repay their loans, the risk of loss in our owned loan portfolio will increase and our business may be adversely affected. If we fail to correctly predict the likelihood of timely repayment or correctly price such business loans, our business may be materially and adversely affected. Square Financial Services’ profitability depends, in part, on its net interest income. Net interest income is the difference between interest income earned on interest-bearing assets, such as loans and securities, and interest expense paid on interest-bearing liabilities, such as deposits and borrowed funds. Changes in interest rates and monetary policy can impact the demand for new loans, the credit profile of our borrowers, the yields earned on loans and securities, and the rates paid on deposits and borrowings. The impact of any sudden and substantial move in interest rates and/or increased competition may have an adverse effect on our business, financial condition and results of operations, as our net interest income may be adversely affected.32Operational Risks We, our sellers, our partners, and others who use our services obtain and process a large amount of sensitive data. Any real or perceived improper or unauthorized use of, disclosure of, or access to such data could harm our reputation as a trusted brand, as well as have a material and adverse effect on our business.We, our sellers, and our partners, including third-party vendors and data centers that we use, obtain and process large amounts of sensitive data, including data related to our customers, our sellers’ customers, and their transactions. We face risks, including to our reputation as a trusted brand, in the handling and protection of this data. Our services also provide third-party developers the opportunity to provide applications to sellers in the Square and Weebly app marketplaces. Sellers who choose to use such applications can grant permission allowing the applications to access content created or held by sellers in their Square or Weebly account. Should our internal or third-party developers experience or cause a breach, incident, or technological bug, that could lead to a compromise of the content of data held by such sellers, including personal data, our reputation may be harmed and we may be subject to significant fines, penalties or judgments. The growing use of AI in our products and services presents additional risks. AI algorithms or automated processing of data may be flawed, and datasets may be insufficient or may use third party AI with unclear intellectual property rights or interests. Inappropriate or controversial data practices by us or others could subject us to lawsuits, regulatory investigations, legal and financial liability, or reputational harm. Additionally, our use of AI may create additional, or increase the risk of, cybersecurity breaches and incidents. If there is a security vulnerability, error, or other bug in one of these third-party products or components and if there is a security exploit targeting them, we could face increased costs, claims and liability, proceedings and litigation, reduced revenue, or harm to our reputation or competitive position. The natural sunsetting of third-party products and operating systems that we use requires our personnel to reallocate time and attention to migration and updates, during which period potential security vulnerabilities could be exploited. For example, in April 2022 we announced that we determined that a former employee downloaded certain reports of our subsidiary Cash App Investing in December 2021 that contained some U.S. customer information without permission after the former employee’s employment ended, as disclosed in our Current Report on Form 8-K filed with the SEC on April 4, 2022. We have incurred costs related to our investigation and response to this incident, and we could incur other losses, costs, and liabilities in connection with such incident.33Under payment card rules and our contracts with our card processors and other counterparties, if there is a breach of payment card information that we store or that is stored by our sellers or other third parties with which we do business, we could be liable to the payment card issuing banks for certain of their costs and expenses. A core aspect of our business is the reliability and security of our payments platforms.While we maintain cybersecurity insurance, our insurance may be insufficient to cover all liabilities incurred by such attacks. The successful assertion of one or more large claims against us that exceed available insurance coverage, or the occurrence of changes in our insurance policies, premiums, or deductibles could have a material adverse effect on our business, including our financial condition, operating results, and reputation.Our products and services may not function as intended due to errors in our software, hardware, and systems, product defects, or due to security breaches or incidents or human error in administering these systems, which could materially and adversely affect our business.Our software, hardware, systems, and processes may contain undetected errors or vulnerabilities that could have a material adverse effect on our business, particularly to the extent such errors or vulnerabilities are not detected and remedied quickly. We have from time to time found defects and errors in our customer-facing software and hardware, internal systems, external facing communications, manual processes, and technical integrations with third-party systems, including as a result of ordinary course updates to our software and systems, and new errors or vulnerabilities may be introduced in the future. From time to time, such errors or defects in our software, hardware, systems, or external facing communications, including as a result of human errors, have negatively impacted our customers’ experience with us and led to negative publicity and harm to our brand and reputation. In connection with any such defects or errors, we may also face government inquiries or investigations, claims and litigation, and we may incur additional costs or expenses to remediate the issues.S. As a result, our direct control over production and distribution is limited, and it is uncertain what effect such diminished control will have on the quality of our products. As our hardware and software services continue to increase in size and complexity, and as we integrate new, acquired subsidiaries with different technology stacks and practices, these risks may correspondingly increase as well.34In addition, we provide frequent incremental releases of product and service updates and functional enhancements, which increase the possibility of errors. The products and services we provide are designed to process complex transactions and deliver reports and other information related to those transactions, all at high volumes and processing speeds. Any errors, data leaks, security breaches or incidents, disruptions in services, or other performance problems with our products or services caused by external or internal actors could hurt our reputation and damage our and our customers’ businesses. Similarly, security breaches or incidents, which may be caused by or result from cyber-attacks by hackers or others, computer viruses, worms, ransomware, other malicious software programs, security vulnerabilities, employee or service provider theft, misuse or negligence, phishing, identity theft or compromised credentials, denial-of-service attacks, or other causes, have from time to time impacted our business and could disrupt the proper functioning of our software products or services, cause errors, allow loss or unavailability of, unauthorized access to, or disclosure of, proprietary, confidential or otherwise sensitive data of ours or our customers, and other destructive outcomes. Moreover, security breaches or incidents or errors in our hardware or software design or manufacture could cause product safety issues typical of consumer electronics devices.Additionally, electronic payment, hardware, and software products and services, including ours, have been, and could continue to be in the future, specifically targeted and penetrated or disrupted by hackers and other malicious actors. Because the techniques used to obtain unauthorized access to data, products, and services and to disable, degrade, or sabotage them change frequently and may be difficult to detect or remediate for long periods of time, we and our customers may be unable to anticipate these techniques or implement adequate preventative measures to stop them. If we or our sellers or other customers are unable to anticipate or prevent these attacks, our sellers' or other customers may be harmed, our reputation could be damaged, and we could incur significant liability. Systems failures, interruptions, delays in service, catastrophic events, and resulting interruptions in the availability of our products or services, or those of our sellers, could harm our business and our brand, and subject us to substantial liability.Our systems and those of our third-party vendors, including data center facilities, may experience service interruptions, outages, cyber-attacks and security breaches and incidents, human error, earthquakes, hurricanes, floods, pandemics, fires, other natural disasters, power losses, disruptions in telecommunications services, fraud, military or political conflicts, terrorist attacks and other geopolitical unrest, computer viruses, ransomware, and other malicious software, changes in social, political, or regulatory conditions or in laws and policies, or other changes or events. Our systems and facilities are also subject to break-ins, sabotage, and acts of vandalism. Some of our systems are not fully redundant, and our disaster-recovery planning is not sufficient for all eventualities. In addition, as a provider of payments solutions and other financial services, we are subject to increased scrutiny by regulators that may require specific business continuity and disaster recovery plans and more rigorous testing of such plans. This increased scrutiny may be costly and time-consuming and may divert our resources from other business priorities.We have experienced and will likely continue to experience denial-of-service and other cyber-attacks, system failures, outages, security incidents, and other events or conditions that interrupt the availability, data integrity, or reduce the speed or functionality of our products and services. These events have resulted and likely will result in loss of revenue. The risk of security incidents is increasing as we experience an increase in electronic payments, e-commerce, and other online activity. Additionally, due to political uncertainty and military actions associated with Russia’s invasion of Ukraine, we and our service providers are vulnerable to heightened risks of security incidents and security and privacy breaches from or affiliated with nation-state actors, including attacks that could materially disrupt our systems, operations, supply chain, products, and services. We cannot provide assurances that our preventative efforts against such incidents will be successful. A prolonged interruption in the availability or reduction in the speed or other functionality of our products or services could materially harm our reputation and business. Moreover, to the extent that any system failure or similar event results in damages to customers or contractual counterparties, these customers and contractual counterparties could seek compensation from us for their losses, and those claims, even if unsuccessful, would likely be time-consuming and costly for us to address.35A significant natural or man-made disaster could have a material and adverse impact on our business. Certain of our offices and data center facilities are located in the San Francisco Bay Area, a region known for seismic activity. Despite any precautions we may take, the occurrence of a natural disaster or other unanticipated problems at our offices or data centers could result in lengthy interruptions in our services or could result in related liabilities. We do not maintain insurance sufficient to compensate us for the potentially significant losses that could result from disruptions to our services.Significant natural or other disasters, including pandemics, could also have a material and adverse impact on our sellers or other customers, which, in the aggregate, could in turn adversely affect our results of operations.The theft, loss, or destruction of private keys required to access the bitcoin we hold on behalf of ourselves and other parties, such as our customers and our trading partners, may be irreversible, and any failure to safeguard such bitcoin could materially and adversely affect our business, operating results, and financial condition.We hold bitcoin on behalf of ourselves and other parties such as our customers and our trading partners. Bitcoin can be accessed by the possessor of the unique cryptographic keys relating to the digital wallet in which the bitcoin is held. While the bitcoin and blockchain ledger require a public key relating to a digital wallet to be published when used in a transaction, private keys must be safeguarded and kept private in order to prevent a third-party from accessing the bitcoin held in such digital wallet. The vast majority of bitcoin we hold for ourselves and our customers is held in offline and air-gapped cold storage. To facilitate transactions, we hold a small portion of bitcoin in a networked hot wallet. At times, we may also utilize third-party custodians to custody our bitcoin or a portion of the bitcoin held for our customers on our behalf. The bitcoin and blockchain ledger, as well as other cryptocurrencies and blockchain technologies, have been, and may in the future be, subject to security breaches or incidents, hacking, or other malicious activities.36Our risk management efforts may not be effective, which could expose us to losses and liability and otherwise harm our business.We offer payments and other products and services to a large number of customers. We have programs to vet and monitor these customers and the transactions we process for them as part of our risk management efforts, but such programs require continuous improvement and may not be effective in detecting and preventing fraud and illegitimate transactions. When our payments services are used to process illegitimate transactions, and we settle those funds to customers and are unable to recover them, we suffer losses and liability. As a greater number of larger sellers use our services, our exposure to material risk losses from a single seller, or from a small number of sellers, will increase. Illegitimate transactions can also expose us to governmental and regulatory enforcement actions and potentially prevent us from satisfying our contractual obligations to our third-party partners, which may cause us to be in breach of our obligations. The highly automated nature of, and liquidity offered by, our payments and peer-to-peer services make us and our customers a target for illegal or improper uses, including scams and fraud directed at our customers, fraudulent or illegal sales of goods or services, money laundering, and terrorist financing. Our risk management policies, procedures, techniques, and processes may not be sufficient to identify all of the risks to which we are exposed, to enable us to prevent or mitigate the risks we have identified, or to identify additional risks to which we may become subject in the future. Our current business, the changing and uncertain economic, geopolitical and regulatory environment, and our anticipated domestic and international growth will continue to place significant demands on our risk management and compliance efforts. As our ecosystems grow and our business becomes more complex, we will need to continue developing, improving, and making investments into our risk management infrastructure, techniques, and processes. Additionally, certain Cash App functions are available to customers between the ages of 13 through 17 with the authorization of a parent or guardian. The risks and the potential harm to our reputation are magnified in instances of fraud or unauthorized or inappropriate transactions involving minors.While we maintain a program of insurance coverage for various types of liabilities, we may self-insure against certain business risks and expenses where we believe we can adequately self-insure against the anticipated exposure and risk or where insurance is either not deemed cost-effective or unavailable.We are currently, and will continue to be, exposed to risks associated with chargebacks and refunds in connection with payment card fraud or relating to the goods or services provided by our sellers. In the event that a billing dispute between a cardholder and a seller is not resolved in favor of the seller, including in situations where the seller engaged in fraud, the transaction is typically “charged back” to the seller and the purchase price is credited or otherwise refunded to the cardholder. The risk of chargebacks is typically greater with our sellers that promise future delivery of goods and services. Moreover, chargebacks typically increase during economic downturns due to sellers becoming insolvent or bankrupt or otherwise unable to fulfill their commitments for goods or services. Global supply chain disruptions and shortages may also negatively affect sellers' ability to deliver goods and services on time or at all, which increases the risk of chargebacks. If we are unable to collect chargebacks or refunds from the seller’s account, or if the seller refuses to or is unable to reimburse us for chargebacks or refunds due to closure, bankruptcy, or other reasons, we, as the merchant of record, may bear the loss for the amounts paid to the cardholder. We collect and hold reserves for a limited number of sellers whose businesses are deemed higher risk in order to help cover potential losses from chargebacks and refunds, but this practice is limited and there can be no assurances that we will be successful in mitigating such losses. Our financial results would be adversely affected to the extent sellers do not fully reimburse us for the related chargebacks and refunds. In addition, if more of our sellers, or a number of our larger sellers, become insolvent or bankrupt, our potential losses from chargebacks and refunds may increase and exceed our reserves, in which case we may suffer financial losses and our business may be adversely affected. Not all of the readers we offer to merchants are EMV-compliant. If we are unable to maintain our losses from chargebacks at acceptable levels, the payment card networks could fine us, increase our transaction-based fees, or terminate our ability to process payment cards. Any increase in our transaction-based fees could damage our business, and if we were unable to accept payment cards, our business would be materially and adversely affected. If any of our risk management policies and processes, including self-insurance or holding seller reserves, are ineffective, we may suffer large financial losses, we may be subject to civil and criminal liability, and our business may be materially and adversely affected.37We are dependent on payment card networks and acquiring processors, and any changes to their rules or practices could harm our business.Our business depends on our ability to accept credit and debit cards, and this ability is provided by the payment card networks, including Visa, Mastercard, American Express, and Discover. As a result, we must rely on banks and acquiring processors to process transactions on our behalf. They might also take actions that degrade the functionality of our services, impose additional costs or requirements on us, or give preferential treatment to competitive services, including their own services. If we are unsuccessful in establishing, renegotiating, or maintaining mutually beneficial relationships with these payment card networks, banks, and acquiring processors, our business may be harmed.The payment card networks and our acquiring processors require us to comply with payment card network operating rules, including special operating rules that apply to us as a “payment facilitator” providing payment processing services to merchants. The payment card networks set these network rules and have discretion to interpret the rules and change them at any time. Changes to these network rules or how they are interpreted could have a significant impact on our business and financial results. For example, changes in the payment card network rules regarding chargebacks may affect our ability to dispute chargebacks and the amount of losses we incur from chargebacks. Any changes to or interpretations of the network rules that are inconsistent with the way we or our acquiring processors currently operate may require us to make changes to our business that could be costly or difficult to implement. If we fail to make such changes or otherwise resolve the issue with the payment card networks, the networks could fine us or prohibit us from processing payment cards. In addition, violations of the network rules or any failure to maintain good relationships with the payment card networks could impact our ability to receive incentives from them, increase our costs, or otherwise harm our business. If we were unable to accept payment cards or were limited in our ability to do so, our business would be materially and adversely affected. From time to time, payment card networks have increased, and may increase in the future, the interchange fees and assessments that they charge for each transaction processed using their networks. In some cases, we have negotiated favorable pricing with acquiring processors and networks that are contingent on certain business commitments and other conditions. Moreover, our acquiring processors and payment card networks may refuse to renew our agreements with them on terms that are favorable, commercially reasonable, or at all. Interchange fees or assessments are also subject to change from time to time due to government regulation. Any increase or decrease in interchange fees or assessments or in the fees we pay to our third-party payment processors, payment networks, or financial institutions could increase our costs, make our pricing less competitive, lead us to change our pricing model, or adversely affect our margins, all of which could materially harm our business and financial results. Any such penalties could become material and could result in termination of our ability to accept payment cards or could require changes in our process for registering new sellers and customers. This could materially and adversely affect our business.38We rely on third parties and their systems for a variety of services, including the processing of transaction data and settlement of funds to us and our customers, and these third parties’ failure to perform these services adequately could materially and adversely affect our business. For example, we rely on a limited number of acquiring processors in some of the jurisdictions in which we offer our services. We are in the process of transitioning one of our acquiring processors, and we frequently review and assess third-party partners that provide services. Adding or transitioning to new acquiring or issuing processors or other third-party providers may significantly disrupt our business or increase our costs. We have also in the past experienced outages with third parties we have worked with, which have affected our ability to provide services and process payments, including for cards issued under our own brands.We depend on key management, as well as our experienced and capable employees, and any failure to attract, motivate, and retain our employees could harm our ability to maintain and grow our business.Our future success is significantly dependent upon the continued service of our executives and other key employees. If we lose the services of any member of management or any key personnel, we may not be able to locate a suitable or qualified replacement, and we may incur additional expenses to recruit and train a replacement, which could disrupt our business and growth. To maintain and grow our business, we will need to identify, attract, hire, develop, motivate, and retain highly skilled employees. This requires significant time, expense, and attention. In addition, from time to time, there may be changes in our management team that may be disruptive to our business. If our management team, including any new hires that we make, fails to work together effectively and to execute our plans and strategies on a timely basis, our business could be harmed. We may need to invest significant amounts of cash and equity to attract and retain new employees, and we may never realize returns on these investments. Further, our plans to cap our employee base at approximately 12,000, and any other future plans to restructure our employee base to improve operational efficiencies and operating costs, may adversely affect our ability to retain or attract highly skilled employees.Historically, equity awards have been a key component of our employee compensation, and as a result, any decline in the price of our Class A common stock (directly or relative to the stock price of other companies with which we compete for talent) may adversely impact our ability to retain employees or to attract new employees. Additionally, potential changes in U.S. immigration policy may make it difficult to renew or obtain visas for any highly skilled personnel that we have hired or may hire in the future. If we are not able to add or retain employees effectively, our ability to achieve our strategic objectives will be adversely affected, and our business and growth prospects will be harmed.If we do not continue to improve our operational, financial, and other internal controls and systems to manage growth effectively, our business could be harmed.Our current business and anticipated growth, as well as our entry into new lines of business and our acquisitions, will continue to place significant demands on our management and other resources. In order to manage our growth effectively, we must continue to strengthen our existing infrastructure and operational procedures, enhance our internal controls and reporting systems, and ensure we timely and accurately address issues as they arise.These challenges have increased as we shift to a more distributed workforce. If we are not successful in developing and implementing the right processes and tools to manage our enterprise, our ability to compete successfully and achieve our business objectives could be impaired.These efforts may require substantial financial expenditures, commitments of resources, developments of our processes, and other investments and innovations. As we grow and our business model evolves, we must balance the need for additional controls and systems with the ability to efficiently develop and launch new features for our products and services. However, it is likely that as we grow, we will not be able to launch new features, or respond to customer or market demands as quickly as a smaller, more efficient organization. If we do not successfully manage our growth, our business will suffer. For example, we currently identify a Cash App transacting active as a Cash App account that has at least one financial transaction using any product or service within Cash App during a specified period although certain of these accounts may share an alias identifier with one or more other transacting active accounts (for example, families sharing one alias identifier or one customer with multiple accounts). Examples of transactions include sending or receiving a peer-to-peer payment, transferring money into or out of Cash App, making a purchase using Cash App Card, earning a dividend on a stock investment, paying back a loan, among others. Further, as our business develops, we may revise or cease reporting metrics if we determine that such metrics are no longer appropriate measures of our performance.Many of our key components are procured from a single or limited number of suppliers. Thus, we are at risk of shortage, price increases, tariffs, changes, delay, or discontinuation of key components, which could disrupt and materially and adversely affect our business.Many of the key components used to manufacture our products, such as the custom parts of our magstripe reader, come from limited or single sources of supply. We have in the past experienced, and may in the future experience, component shortages or delays or other problems in product assembly, and the availability of these components or products may be difficult to predict. For example, our manufacturers may experience temporary or permanent disruptions in their manufacturing operations due to equipment breakdowns, labor strikes or shortages, natural disasters, the occurrence of a contagious disease or illness, component or material shortages, cost increases, acquisitions, insolvency, bankruptcy, business shutdowns, trade restrictions, changes in legal or regulatory requirements, or other similar problems.40Additionally, various sources of supply-chain risk, including strikes or shutdowns at delivery ports or loss of or damage to our products while they are in transit or storage, intellectual property theft, losses due to tampering, third-party vendor issues with quality or sourcing control, failure by our suppliers to comply with applicable laws and regulation, potential tariffs or other trade restrictions, or other similar problems could limit or delay the supply of our products or harm our reputation. Any interruption or delay in manufacturing, component supply, any increases in component costs, or the inability to obtain these parts or components from alternate sources at acceptable prices and within a reasonable amount of time, would harm our ability to provide our products to sellers on a timely basis or impact our cost of goods sold. This could harm our relationships with our sellers, prevent us from acquiring new sellers, and materially and adversely affect our business.Some of our hardware devices manufactured in China are subject to 25% tariffs when imported to the United States, while some other hardware devices are subject to tariffs at 7.5%. The impact of any increased or new tariffs or other trade restrictions could have a material and adverse effect on our business, financial condition, and results of future operations.Our services must integrate with a variety of operating systems. If we are unable to ensure that our services or hardware interoperate with such operating systems and devices, our business may be materially and adversely affected. Any changes in these systems that degrade the functionality of our products and services, impose additional costs or requirements on us, or give preferential treatment to competitive services, including their own services, could materially and adversely affect usage of our products and services. In addition, we rely on app marketplaces, such as the Apple App Store and Google Play, to drive downloads of our mobile apps. Apple, Google, or other operators of app marketplaces regularly make changes to their marketplaces, and those changes may make access to our products and services more difficult. In the event that it is difficult for our customers to access and use our products and services, our business may be materially and adversely affected. Furthermore, Apple, Google, or other operators of app marketplaces regularly provide software updates, and such software updates may not operate effectively with our products and services, which may reduce the demand for our products and services, result in dissatisfaction by our customers, and may materially and adversely affect our business.Under TIDAL’s license agreements and relevant statutes, we must pay all required royalties to record labels, music publishers, and other copyright owners in order to stream, distribute, and display content. We may underpay/under-accrue or overpay/over-accrue the royalty amounts payable to record labels, music publishers, and other copyright owners. Failure to accurately pay our royalties may damage our business relationships, our reputation, and adversely affect our business, operating results, and financial condition.41Economic, Financial, and Tax Risks A deterioration of general macroeconomic conditions could materially and adversely affect our business and financial results. Most of the sellers that use our services are small businesses, many of which are in the early stages of their development, and these businesses are often disproportionately adversely affected by economic downturns and may fail at a higher rate than larger or more established businesses. In particular, inflation and economic uncertainty have impacted and may continue to impact consumer spending in general and at these businesses specifically. Small businesses frequently have limited budgets and limited access to capital, and they may choose to allocate their spending to items other than our financial or marketing services, especially in times of economic uncertainty or in recessions. For example, if sellers processing payments with Square receive chargebacks after they cease to operate, we may incur additional losses. We serve sellers across a variety of industry verticals and in an economic downtown, certain verticals, particularly those that may be viewed as discretionary by consumers, may be impacted to a greater degree than others, which may harm our business and financial results.We may experience material and adverse impacts to our business as a result of the uncertainty and volatility in the banking and financial services sectors, deteriorating macroeconomic conditions, including inflation and interest rate increases, availability of credit, bankruptcies or insolvencies of customers, and recession or economic downturn. In addition, customers who utilize our BNPL products and consumer loan products, such as Cash App Borrow, may also be disproportionately adversely affected by economic downturns, which could negatively impact demand for these product offerings or cause loss rates on such products to increase. Such suppliers and third parties may demand pricing accommodations, delay payment, or become insolvent, which could harm our ability to meet end customer demands or collect revenue or otherwise could harm our business. Furthermore, our investment portfolio, which includes U.S. government and corporate securities, is subject to general credit, liquidity, market, and interest rate risks, which may be exacerbated by certain events that affect the global financial markets. If global credit and equity markets decline for extended periods, or if there is a downgrade of the securities within our portfolio, our investment portfolio may be adversely affected and we could determine that our investments have experienced an other-than-temporary decline in fair value, requiring impairment charges that could adversely affect our financial results. In addition, from time to time we have reduced expenses and needed to restructure or reorganize certain portions of our operations in order to align our business with market conditions and our strategies, any of which can result in near term expense and harm to our growth prospects. An economic downturn and our work-from-home practices have caused and may in the future cause us to need less office space than we are contractually committed to leasing. We have, and may continue to, incur losses or recognize impairment charges in connection with any unused office space if we are unable to successfully sublease any unused office space, or if we are unable to successfully terminate any of our leasing commitments.We have funded our operations since inception primarily through debt and equity financings, bank credit facilities, finance lease arrangements, and cash from operations. While we believe that our existing cash and cash equivalents, marketable debt securities, and availability under our line of credit are sufficient to meet our working capital needs and planned capital expenditures, and service our debt, there is no guarantee that this will continue to be true in the future. In the future, we may require additional capital to respond to business opportunities, refinancing needs, business and financial challenges, regulatory surety bond requirements, acquisitions, or unforeseen circumstances and may decide to engage in equity, equity-linked, or debt financings or enter into additional credit facilities for other reasons. We may not be able to secure any such additional financing or refinancing on favorable terms, in a timely manner, or at all. If we are unable to obtain adequate financing or financing on terms satisfactory to us when we require it, our ability to continue to grow or support our business and to respond to business challenges could be significantly limited. We use the Warehouse Facilities to partly fund our BNPL platform. The terms of the Warehouse Facilities contain covenants that may be triggered in certain situations (such as non-repayments on consumer borrowings exceeding certain monetary thresholds or key management resigning), which may negatively impact our ability to obtain additional funding under the Warehouse Facilities.Our credit facility contains affirmative and negative covenants, including customary limitations on the incurrence of certain indebtedness and liens, restrictions on certain intercompany transactions, and limitations on dividends and stock repurchases. Any debt financing obtained by us in the future could also involve restrictive covenants relating to our capital-raising activities and other financial and operational matters, which may make it more difficult for us to operate our business, obtain additional capital, and pursue business opportunities, including potential acquisitions. Our ability to comply with these covenants may be affected by events beyond our control, and breaches of these covenants could result in a default under our existing credit facility or our senior notes and any future financing agreements into which we may enter.If we raise additional funds through further issuances of equity or other securities convertible into equity, including convertible debt securities, our existing stockholders could suffer dilution in their percentage ownership of our company, and any such securities we issue could have rights, preferences, and privileges senior to those of holders of our Class A common stock.Changes by any rating agency to our outlook or credit rating could negatively affect the value of both our debt and equity securities and increase our borrowing costs. If our credit ratings are downgraded or other negative action is taken, our ability to obtain additional financing in the future on favorable terms or at all could be adversely affected.Servicing our Notes may require a significant amount of cash, and we may not have sufficient cash or the ability to raise the funds necessary to settle conversions of the Convertible Notes in cash, repay the Notes at maturity, or repurchase the Notes as required following a fundamental change.0 billion outstanding aggregate principal amount of 2025 Convertible Notes, $575.0 million outstanding aggregate principal amount of 2026 Convertible Notes, $575.0 million outstanding aggregate principal amount of 2027 Convertible Notes, $1.0 billion outstanding aggregate principal amount of 2026 Senior Notes, and $1.0 billion outstanding aggregate principal amount of 2031 Senior Notes. We will reevaluate this policy from time to time as conversion notices are received from holders of the Convertible Notes. If the Notes of any series have not previously been converted or repurchased, we will be required to repay such Notes in cash at maturity. We also may not use the cash proceeds we raised through the issuance of the Notes in an optimally productive and profitable manner. Since inception, our business has generated net losses in most quarters, and we may continue to incur significant losses. As a result, we may not have enough available cash or be able to obtain financing at the time we are required to repurchase or repay the Notes or pay cash with respect to the Convertible Notes being converted.In addition, our ability to repurchase or to pay cash upon conversion or at maturity of the Notes may be limited by law or regulatory authority. A default under the applicable indenture or the fundamental change itself could also lead to a default under our credit facility, our other outstanding indebtedness, or agreements governing our future indebtedness and could have a material adverse effect on our business, results of operations, and financial condition. If the payment of our other outstanding indebtedness or future indebtedness were to be accelerated after any applicable notice or grace periods, we may not have sufficient funds to repay such indebtedness and repurchase the Notes or to pay cash upon conversion of the Convertible Notes or at maturity of the Notes.We are subject to counterparty risk with respect to the convertible note hedge transactions.In connection with the issuance of each series of our Convertible Notes, we entered into convertible note hedge transactions with certain financial institutions, which we refer to as the "option counterparties." The option counterparties are financial institutions or affiliates of financial institutions, and we will be subject to the risk that one or more of such option counterparties may default under the convertible note hedge transactions. Our exposure to the credit risk of the option counterparties will not be secured by any collateral. If any option counterparty becomes subject to insolvency proceedings, we will become an unsecured creditor in those proceedings with a claim equal to our exposure at that time under the convertible note hedge transaction. Our exposure will depend on many factors but, generally, the increase in our exposure will be correlated to the increase in our Class A common stock market price and in the volatility of the market price of our Class A common stock. In addition, upon a default by any option counterparty, we may suffer adverse tax consequences and dilution with respect to our Class A common stock. We can provide no assurance as to the financial stability or viability of any option counterparty.44Our bitcoin investment is subject to volatile market prices.We have made, and may make additional, investments in bitcoin. Bitcoin’s lack of a physical form, its reliance on technology for its creation, existence, and transactional validation, and its decentralization may subject its integrity to the threat of malicious attacks and technological obsolescence. To the extent the market value of our bitcoin investment continues to decrease relative to the purchase prices, our financial condition may be adversely impacted.The manner in which we account for our bitcoin under applicable accounting rules has changed. For example, prior to our adoption of ASU 2023-08, Accounting for and Disclosure of Crypto Assets (“ASU 2023-08”), our bitcoin was accounted for as an indefinite-lived intangible asset and for each reporting period, we were required to evaluate our bitcoin for impairment and record impairment losses if the fair value decreased below the carrying value during the assessed period. Upon adoption of ASU 2023-08, we remeasured our bitcoin investment to its fair value as of January 1, 2023, resulting in an adjustment to our accumulated deficit. We will continue to remeasure our bitcoin investment at the end of each reporting period with changes recognized in our consolidated statements of operations.We are exposed to fluctuations in foreign currency exchange rates.Our exposure to fluctuations in foreign currency exchange rates through our international operations could have a negative impact on our reported results of operations. These and other such hedging activities may not eliminate our exposure to foreign exchange fluctuations. Moreover, the use of hedging instruments may introduce additional risks if we are unable to structure effective hedges with such instruments.We may have exposure to greater-than-anticipated tax liabilities, which may materially and adversely affect our business.We are subject to income taxes and non-income taxes in the United States and other countries in which we transact or conduct business, and such laws and rates vary by jurisdiction. We are subject to review and audit by U.S. federal, state, local, and foreign tax authorities. Such tax authorities may disagree with tax positions we take, and if any such tax authority were to successfully challenge any such position, our financial results and operations could be materially and adversely affected. While we have established reserves based on assumptions and estimates that we believe are reasonably sufficient to cover such eventualities, any adverse outcome of such a review or audit could have an adverse impact on our financial position and results of operations if the reserves prove to be insufficient. Our tax liability could be adversely affected by changes in tax laws, rates, regulations, and administrative practices. For example, various levels of government and international organizations, such as in the United States, the Organisation for Economic Co-operation and Development (“OECD”), and the European Union (“EU”), have increasingly focused on tax reform and any result from this development may create changes to long-standing tax principles, which could adversely affect our effective tax rate. Additionally, under the agreement, new rules have been introduced that will result in the reallocation of certain profits from large multinational companies to market jurisdictions where customers and users are located. On December 12, 2022, the EU Council unanimously agreed to implement Pillar Two, which EU member countries are required to adopt into their respective tax codes by the end of 2023. On July 17, 2023, the OECD published Administrative Guidance regarding certain safe harbor rules that effectively extend certain effective dates to January 1, 2027. Although certain implementation details have yet to be developed and the enactment of these changes has not yet taken effect, these changes may have adverse tax consequences for us. 45On August 16, 2022, the Inflation Reduction Act (“IRA”) was enacted in the United States, which introduced, among provisions, a new minimum corporate income tax on certain large corporations, an excise tax of 1% on certain share repurchases by corporations, and increased funding for the Internal Revenue Service. Although we do not anticipate the new corporate minimum income tax will currently apply to us, changes in our business and any future regulations or other guidance on the interpretation and application of the new corporate minimum tax may result in additional taxes payable by us, which could materially and adversely affect our financial results and operations.Our income tax obligations are based on our corporate operating structure, including the manner in which we develop, value, and use our intellectual property and the scope of our international operations. The tax authorities of the jurisdictions in which we operate may challenge our methodologies for valuing developed technology or intercompany arrangements. Additionally, tax authorities at the international, federal, state, and local levels are currently reviewing the appropriate tax treatment of companies engaged in internet commerce and financial technology and attempting to broaden the classification and definitions of activities subject to taxation. For example, various states may attempt to broaden the definition of internet hosting, data processing, telecommunications, and other services to capture additional types of activities. These developing changes could affect our financial position and results of operations. New taxes could also create significant increases in internal costs necessary to capture data and collect and remit taxes. Proposed or enacted laws regarding tax compliance obligations could require us to make changes to our infrastructure or increase our compliance obligation. Any of these events could have an adverse effect on our business and results of operations. Moreover, an increasing number of states, the U.S. These obligations may deem parties, such as us, to be the legal agent of merchants and therefore may require us to collect and remit taxes on the merchants' behalf and take on additional reporting and record-keeping obligations. For example, the American Rescue Plan Act of 2021 requires businesses that process payments to report payments for goods and services on Form 1099-K when those transactions total more than $600 in a year for a given seller, which reporting requirement applies to Square and Cash App for Business accounts. This new threshold is currently expected to apply to transactions occurring in 2024, subject to any changes implemented by the Internal Revenue Service. Any failure by us to prepare for and to comply with these and similar reporting and record-keeping obligations could result in substantial monetary penalties and other sanctions, adversely impact our ability to do business in certain jurisdictions, and harm our business.The determination of our worldwide provision for income and other tax liabilities is highly complex and requires significant judgment by management, and there are many transactions during the ordinary course of business where the ultimate tax determination is uncertain. Although we believe our estimates are reasonable, the ultimate tax outcome may differ from amounts recorded in our financial statements and may materially affect our financial results in the period or periods for which such determination is made.We have in the past recorded, and may in the future record, significant valuation allowances on our deferred tax assets, which may have a material impact on our results of operations and cause fluctuations in such results.As of December 31, 2023, we had a valuation allowance for deferred tax assets in the United States and in certain other countries. Our net deferred tax assets relate predominantly to the United States federal and state tax jurisdictions. The need for a valuation allowance requires an assessment of both positive and negative evidence when determining whether it is more likely than not that deferred tax assets are recoverable; such assessment is required on a jurisdiction-by-jurisdiction basis. We continue to monitor the likelihood that we will be able to recover our deferred tax assets in the future. Future adjustments in our valuation allowance may be required. The recording of any future increases in our valuation allowance could have a material impact on our reported results, and both the recording and release of the valuation allowance could cause fluctuations in our quarterly and annual results of operations.46Legal, Regulatory, and Compliance RisksOur business is subject to extensive regulation and oversight in a variety of areas, all of which are subject to change and uncertain interpretation.We are subject to a wide variety of local, state, federal, and international laws, regulations, licensing schemes, and industry standards in the United States and in other countries in which we operate. As we expand into new jurisdictions, expand our product offerings in existing jurisdictions, or as laws, regulations, and standards evolve, the number of foreign regulations and regulators, authorities, and governing bodies governing our business will expand as well. As our business and products continue to develop and expand, we may become subject to additional rules, regulations, and industry standards. We may not always be able to accurately predict the scope or applicability of certain regulations to our business, particularly as we expand into new areas of operations, which could have a significant negative effect on our existing business and our ability to pursue future plans. It can be difficult to predict how such laws, regulations, and standards may be applied to our business and the way we conduct our operations, particularly as we introduce new products and services and expand into new jurisdictions.For example, Cash App includes a feature that permits our customers to buy and sell bitcoin. Bitcoin is not widely accepted as legal tender or backed by governments around the world, and it has experienced price volatility, technological glitches, security compromises, and various law enforcement and regulatory interventions. Certain existing laws also prohibit transactions with certain persons and entities, and we have a risk-based program in place to prevent such transactions. As an example, the FinCEN has issued a proposed rule that would require bitcoin providers like us to keep additional records of and file additional reports to FinCEN of certain bitcoin transaction information. There are substantial uncertainties on how these proposed requirements would apply in practice, and we may face substantial compliance costs to operationalize and comply with these requirements should FinCEN finalize this rule as proposed. Further, we might not be able to continue operating the feature in Cash App, at least in current form, or might need to make other changes to our business, our products or our services, which could cause the price of our Class A common stock to decrease. For example, we received inquiries from the SEC and Department of Justice shortly after the publication of a short seller report in March 2023. We believe the inquiries primarily relate to the allegations raised in the short seller report. In addition to fines, penalties for failing to comply with applicable rules and regulations could include significant criminal and civil lawsuits, forfeiture of significant assets, increased licensure requirements, revocation of licenses or other enforcement actions. We have been and may be required to make changes to our business practices or compliance programs as a result of regulatory scrutiny.48Our business is subject to complex and evolving regulations and oversight related to privacy, data protection, and information security.We are subject to laws and regulations relating to the collection, use, retention, privacy, protection, security, and transfer of information, including personal information of our employees and customers. As with the other laws and regulations noted above, these laws and regulations may change or be interpreted and applied differently over time and from jurisdiction to jurisdiction, and it is possible they will be interpreted and applied in ways that will materially and adversely affect our business. For example, the European Union’s General Data Protection Regulation (“GDPR”) and similar legislation in the United Kingdom (“U.K.5 million, as applicable. The GDPR restricts international data transfers from the EU to other jurisdictions unless the rights of the individual data subjects in respect of their personal data is protected by an approved transfer mechanism, or one of a limited number of exceptions applies. The U.K.’s data protection regime contains similar requirements. When transferring personal data from the EU to other jurisdictions, we utilize standard contractual clauses published by the EU Commission (the "SCCs"). On July 16, 2020, the Court of Justice of the European Union (“CJEU”) issued a decision that may impose additional obligations on companies when relying on those SCCs. On July 10, 2023, the European Commission issued its “adequacy decision” for the EU-US Data Privacy Framework, concluding that the DPF ensures U.S. protection of personal data transferred between the countries is comparable to that offered in the EU. These and other developments relating to cross-border data transfer could result in increased costs of compliance and limitations on our customers and us. Additionally, legal or regulatory challenges or other developments relating to cross-border data transfer may serve as a basis for our personal data handling practices, or those of our customers and vendors, to be challenged and may otherwise adversely impact our business, financial condition, and operating results. In the U.K.K. law, with penalties for noncompliance of up to the greater of £17.5 million or four percent of worldwide revenues. The European Commission has issued an adequacy decision under the GDPR and the Law Enforcement Directive, pursuant to which personal data generally may be transferred from the EU to the U.K. without restriction, subject to a four-year “sunset” period, after which the European Commission’s adequacy decision may be renewed. During that period, the European Commission will continue to monitor the legal situation in the U.K. and may intervene at any time with respect to its adequacy decision. The UK’s adequacy determination therefore is subject to future uncertainty and may be subject to modification or revocation in the future. We could be required to make additional changes to the way we conduct our business and transmit data between the U.S., the U.K., the EU, and the rest of the world. Further, in addition to the GDPR, the European Commission has a draft regulation in the approval process that focuses on a person’s right to conduct a private life. The proposed legislation, known as the Regulation of Privacy and Electronic Communications (“ePrivacy Regulation”), would replace the current ePrivacy Directive. If adopted, it would carry broad potential impacts on the use of internet-based services and tracking technologies, such as cookies. We expect to incur additional costs to comply with the requirements of the ePrivacy Regulation as it is finalized for implementation. Additionally, on January 13, 2022, the Austrian data protection regulator published a decision ruling that the collection of personal data and transfer to the U.S. through Google Analytics and other analytics and tracking tools used by website operators violates the GDPR. The Dutch, French and Italian data protection regulators have adopted similar decisions. Other data protection regulators in the EU increasingly are focused on the use of online tracking tools. Any of these changes or other developments with respect to EU data protection law could disrupt our business and otherwise adversely impact our business, financial condition, and operating results. In addition, some countries are considering or have enacted legislation addressing matters such as requirements for local storage and processing of data that could impact our compliance obligations, expose us to liability, and increase the cost and complexity of delivering our services. The CCPA and CPRA impose stringent data privacy and data protection requirements relating to personal information of California residents, and provide for penalties for noncompliance of up to $7,500 per violation. Aspects of the interpretation and enforcement of the CCPA and CPRA remain unclear.S., the EU, and other jurisdictions. For example, several states in the U.S. The U.S. federal government also is contemplating federal privacy legislation. The effects of recently proposed or enacted legislation potentially are far-reaching and may require us to modify our data processing practices and policies and to incur substantial costs and expenses in an effort to comply. Further, variances in these laws and regulations or their interpretations may increase our compliance costs. In particular, with laws and regulations such as the GDPR in the EU and the CCPA, CPRA, and other laws in the U.S. imposing new and relatively burdensome obligations, and with the interpretation and application of these and other laws and regulations subject to evolving and uncertain interpretation and application, we may face challenges in addressing their requirements and making necessary changes to our policies and practices, and we may incur significant costs and expenses in an effort to do so. Any failure, real or perceived, by us to comply with our privacy, data protection, or information security policies, changing consumer expectations, or with any evolving legal or regulatory requirements, industry standards, or contractual obligations could result in claims, demands, and litigation by private parties, investigations and other proceedings by regulatory authorities, and fines, penalties and other liabilities, may harm our reputation and competitive position, and may cause our customers to reduce their use of our products and services, disrupt our supply chain or third-party vendor or developer partnerships, and materially and adversely affect our business.We are subject to risks related to litigation, including intellectual property claims, government investigations or inquiries, and regulatory matters or disputes.We are currently, and may continue to be, subject to claims, lawsuits (including class actions and individual lawsuits), disputes, investigations, subpoenas, inquiries or audits, and other actions or proceedings, including from regulatory bodies and governmental agencies. The number and significance of our legal disputes and inquiries have increased as we have grown larger, as our business has expanded in scope and geographic reach, and as our products and services have increased in complexity, and we expect that we will continue to face additional legal disputes as we continue to grow and expand. We also receive significant media attention, which could result in increased litigation or other legal or regulatory reviews and proceedings. Moreover, legal disputes or government or regulatory inquiries or findings may cause follow-on litigation or regulatory scrutiny by additional parties. These claims, lawsuits, investigations, subpoenas, inquiries, audits and other actions may require significant time and expense even if we are successful in resolving the matter, and the outcomes can be uncertain and unpredictable and may involve material penalties, fines or restrictions on our business. As a result, there is substantial uncertainty regarding the scope and application of many of the laws and regulations to which we are or may be subject, which increases the risk that we will be subject to claims alleging violations of those laws and regulations. The scope, outcome, and impact of claims, lawsuits, government or regulatory investigations, subpoenas, inquiries or audits, and other proceedings to which we are subject cannot be predicted with certainty. Regardless of the outcome, such investigations and legal proceedings can have a material and adverse impact on us due to their costs, diversion of our resources, and other factors. Plaintiffs may seek, and we may become subject to, preliminary or provisional rulings in the course of litigation, including preliminary injunctions requiring us to cease some or all of our operations. We may decide to settle legal disputes on terms that are unfavorable to us. If any litigation to which we are a party is resolved adversely, we may be subject to an unfavorable judgment that we may not choose to appeal or that may not be reversed upon appeal. We have, from time to time, needed to obtain a license to continue existing practices as a result of changes in law or for which we are found to be in violation of a third-party’s rights. We may also need to change, restrict or cease certain practices altogether. If we are required, or choose to enter into, royalty or licensing arrangements, such arrangements may not be available on reasonable terms or at all and may significantly increase our operating costs and expenses. As a result, we may also be required to develop or procure alternative non-infringing technology or discontinue use of technology, and doing so could require significant effort and expense or may not be feasible. In addition, the terms of any settlement or judgment in connection with any legal claims, lawsuits, or proceedings may require us to cease some or all of our operations or to pay substantial amounts to the other party and could materially and adversely affect our business.50As a licensed money transmitter, we are subject to important obligations and restrictions.S. and in the states where this is required, as well as in some non-U.S.K., and Australia. Evaluation of our compliance efforts, as well as the questions of whether and to what extent our products and services are considered money transmission, are matters of regulatory interpretation and could change over time. In the past, we have been subject to fines and other penalties by regulatory authorities due to their interpretations and applications to our business of their respective state money transmission laws. In the future, as a result of the regulations applicable to our business, we could be subject to investigations and resulting liability, including governmental fines, restrictions on our business, or other sanctions, and we could be forced to cease conducting business in certain jurisdictions, be forced to otherwise change our business practices in certain jurisdictions, or be required to obtain additional licenses or regulatory approvals. There can be no assurance that we will be able to obtain any such licenses, and, even if we were able to do so, there could be substantial costs and potential product changes involved in maintaining such licenses, which could have a material and adverse effect on our business.We are subject to a number of regulatory risks in the BNPL space.The regulation of BNPL products is evolving, and it is possible that states or countries pass new or additional regulations or additional and changing legal, regulatory, tax, licensing, and compliance requirements and industry standards that could adversely impact our BNPL products or the way we operate our BNPL platform. In addition, the CFPB recently announced plans to regulate companies offering BNPL products. Increased compliance obligations and regulatory scrutiny may negatively impact our revenue and profitability.Our subsidiary Cash App Investing facilitates transactions in shares and fractionalized shares of publicly-traded stock and exchange-traded funds by users of our Cash App through a third-party clearing and carrying broker, DriveWealth LLC (“DriveWealth”). Cash App Investing is registered with the SEC as a broker-dealer under the Exchange Act and is a member of FINRA. The regulations applicable to broker-dealers cover all aspects of the securities business, including sales practices, use and safekeeping of clients’ funds and securities, capital adequacy, record-keeping, and the conduct and qualification of officers, employees, and independent contractors. As part of the regulatory process, broker-dealers are subject to periodic examinations by their regulators, the purpose of which is to determine compliance with securities laws and regulations, and from time to time may be subject to additional routine and for-cause examinations. It is not uncommon for regulators to assert, upon completion of an examination, that the broker-dealer being examined has violated certain of these rules and regulations. Depending on the nature and extent of the violations, the broker-dealer may be required to pay a fine and/or be subject to other forms of disciplinary and corrective action. Additionally, the adverse publicity arising from the imposition of sanctions could harm our reputation and cause us to lose existing customers or fail to gain new customers.The SEC, FINRA, and state regulators have the authority to bring administrative or judicial proceedings against broker-dealers, whether arising out of examinations or otherwise, for violations of state and federal securities laws. Administrative sanctions can include cease-and-desist orders, censure, fines, and disgorgement and may even result in the suspension or expulsion of the firm from the securities industry. Similar sanctions may be imposed upon officers, directors, representatives, and employees.51Cash App Investing has adopted, and regularly reviews and updates, various policies, controls, and procedures designed for compliance with Cash App Investing’s regulatory obligations. Failure to adhere to these policies and procedures may also result in regulatory sanctions or litigation against us. Cash App Investing also relies on various third parties, including DriveWealth, to provide services, including managing and executing customer orders, and failure of these third parties to adequately perform these services may negatively impact customer experience, product performance, and our reputation and may also result in regulatory sanctions or litigation against us or Cash App Investing. In the event of any regulatory action or scrutiny, we or Cash App Investing could also be required to make changes to our business practices or compliance programs. In addition, any perceived or actual breach of compliance by Cash App Investing with respect to applicable laws, rules, and regulations could have a significant impact on our reputation, could cause us to lose existing customers, prevent us from obtaining new customers, require us to expend significant funds to remedy problems caused by breaches and to avert further breaches, and expose us to legal risk, including litigation against us, and potential liability.Cash App Investing is subject to net capital and other regulatory capital requirements; failure to comply with these rules could harm our business.Our subsidiary Cash App Investing is subject to the net capital requirements of the SEC and FINRA. These requirements typically specify the minimum level of net capital a broker-dealer must maintain and also mandate that a significant part of its assets be kept in relatively liquid form. Failure to maintain the required net capital may subject a firm to limitation of its activities, including suspension or revocation of its registration by the SEC and suspension or expulsion by FINRA, and ultimately may require its liquidation. Currently, Cash App Investing has relatively low net capital requirements, because it does not hold customer funds or securities, but instead facilitates the transmission and delivery of those funds on behalf of customers to DriveWealth or back to the applicable customer. However, a change in the net capital rules, a change in how Cash App Investing handles or holds customer assets, or the imposition of new rules affecting the scope, coverage, calculation, or amount of net capital requirements could have adverse effects. Finally, because Cash App Investing is subject to such net capital requirements, we may be required to inject additional capital into Cash App Investing from time to time and as such, we may have liability and/or our larger business may be affected by any of these outcomes.It is possible that FINRA will require changes to our business practices based on our ownership of Cash App Investing, which could impose additional costs or disrupt our business.In certain cases, FINRA has required unregistered affiliates of broker-dealers to comply with additional regulatory requirements, including, among others, handling all securities or other financial transactions through the affiliated broker-dealer or conforming all marketing and advertising materials to the requirements applicable to broker-dealers. We do not currently believe that these types of requirements apply to any aspect of our business other than the securities transactions facilitated through the Cash App. It is possible that, in the future, FINRA could require us to comply with additional regulations in the conduct of other activities (i.e., beyond the securities transactions made through the Cash App). If that were to occur, it could require significant changes to our business practices. These and other changes would impose significantly greater costs on us and disrupt existing practices in ways that could negatively affect our overarching business and profitability.On March 1, 2021, Square Financial Services received its deposit insurance from the FDIC and charter approval from the Utah Department of Financial Institutions and became operational. The FDIA requires that we serve as a source of financial strength to Square Financial Services. This means that we are required by law to provide financial assistance to Square Financial Services in the event that it experiences financial distress. The regulatory total capital and leverage ratios of Square Financial Services during the first three years of operation may not be less than the levels provided in Square Financial Services’ business plan approved by the FDIC. Thereafter, the regulatory capital ratios must be annually approved by the FDIC, and in no event may Square Financial Services’ leverage ratio be less than twenty percent, as calculated in accordance with FDIC regulations. If Square Financial Services' total capital or leverage ratios fall below the levels required by the FDIC, we will need to provide sufficient capital to Square Financial Services so as to enable it to maintain its required regulatory capital ratios. The FDIC’s approval is also contingent on us maintaining a Capital and Liquidity Maintenance Agreement as well as a Parent Company Agreement. The Capital and Liquidity Maintenance Agreement requires, among other things, that we maintain the leverage ratio of Square Financial Services at a minimum of 20 percent following the first three years of Square Financial Services’ operations; maintain a third-party line of credit for the benefit of Square Financial Services acceptable to the FDIC; purchase any loan from Square Financial Services at the greater of the cost basis or fair market value, if deemed necessary by the FDIC or Square Financial Services; and establish and maintain a reserve deposit of $50 million at an unaffiliated third-party bank that Square Financial Services could draw upon in the event that we fail to provide sufficient funds to maintain Square Financial Services’ capital ratios at the required levels. The Parent Company Agreement requires, among other things, that we consent to the FDIC’s examination of us and our subsidiaries; limit our representation on Square Financial Services’ board of directors to no more than 25 percent; submit a contingency plan to the FDIC that describes likely scenarios of significant financial or operational stress and, if we were unable to serve as a source of financial strength, options for the orderly wind down or sale of Square Financial Services; and engage a third party to review and provide periodic reports concerning the effectiveness of our complaint response system. Jack Dorsey, who is considered our controlling shareholder in this context, also agreed to cause us to perform under these agreements. Should we fail to comply with these obligations, we could be subject to regulatory sanctions. In addition, any failure by Square Financial Services to comply with applicable laws, rules, and regulations could also subject us and Square Financial Services to regulatory sanctions. These sanctions could adversely impact our reputation and our business, require us to expend significant funds for remediation, and expose us to litigation and other potential liability.Square Financial Services is subject to extensive supervision and regulation, including the Dodd-Frank Act and its related regulations, which are subject to change and could involve material costs or affect operations.S. financial regulations and required rule making by U.S. financial regulators including adding a new Section 13 to the Bank Holding Company Act known as the Volcker Rule. The Volcker Rule generally restricts certain banking entities (such as Square Financial Services) from engaging in proprietary trading activities and from having an ownership interest in or sponsoring any private equity funds or hedge funds (or certain other private issuing entities). The current activities of Square Financial Services have not been and are not expected to be materially affected by the Volcker Rule. Nevertheless, we cannot predict whether, or in what form, any other proposed regulations or statutes or changes to implementing regulations will be adopted or the extent to which the business operations of Square Financial Services may be affected by any new regulation or statute. Such changes could subject our business to additional compliance burden, costs, and possibly limit the types of financial services and products we may offer.Square Financial Services is also subject to the requirements in Sections 23A and 23B of the Federal Reserve Act and the Federal Reserve Board’s implementing Regulation W, which regulate loans, extensions of credit, purchases of assets, and certain other transactions between an insured depository institution (such as Square Financial Services) and its affiliates. The statute and regulation require Square Financial Services to impose certain quantitative limits, collateral requirements, and other restrictions on “covered transactions” between Square Financial Services and its affiliates and requires all transactions be on “market terms” and conditions consistent with safe and sound banking practices.53Our intellectual property rights are valuable, and any inability to protect them could reduce the value of our products, services, and brand.Our trade secrets, trademarks, copyrights, patents, and other intellectual property rights are critical to our success. We rely on, and expect to continue to rely on, a combination of confidentiality, invention assignment, and license agreements with our employees, consultants, and third parties with whom we have relationships, as well as trademark, trade dress, domain name, copyright, trade secret, and patent rights, to protect our brand and other intellectual property rights. However, various events outside of our control may pose a threat to our intellectual property rights, as well as to our products and services. Effective protection of intellectual property rights is expensive and difficult to maintain, both in terms of application and maintenance costs, as well as the costs of defending and enforcing those rights. The efforts we have taken to protect our intellectual property rights may not be sufficient or effective. Our intellectual property rights may be infringed, misappropriated, or challenged, which could result in them being narrowed in scope or declared invalid or unenforceable. Similarly, our reliance on unpatented proprietary information and technology, such as trade secrets and confidential information, depends in part on agreements we have in place with employees and third parties that place restrictions on the use and disclosure of this intellectual property. These agreements may be insufficient or may be breached, or we may not enter into sufficient agreements with such individuals in the first instance, in either case potentially resulting in the unauthorized use or disclosure of our trade secrets and other intellectual property, including to our competitors, which could cause us to lose any competitive advantage resulting from this intellectual property. Individuals not subject to invention assignment agreements may make adverse ownership claims to our current and future intellectual property. There can be no assurance that our intellectual property rights will be sufficient to protect against others offering products or services that are substantially similar to ours and that compete with our business.We routinely apply for patents in the U.S. and internationally to protect innovative ideas in our technology, but we may not always be successful in obtaining patent grants from these applications. We also pursue registration of copyrights, trademarks, and domain names in the United States and in certain jurisdictions outside of the United States, but doing so may not always be successful or cost-effective. In general, we may be unable or, in some instances, choose not to obtain legal protection for our intellectual property, and our existing and future intellectual property rights may not provide us with competitive advantages or distinguish our products and services from those of our competitors. The laws of some foreign countries do not protect our intellectual property rights to the same extent as the laws of the United States, and effective intellectual property protection and mechanisms may not be available in those jurisdictions. We may need to expend additional resources to defend our intellectual property in these countries, and the inability to do so could impair our business or adversely affect our international expansion. Our intellectual property rights may be contested, circumvented, or found unenforceable or invalid, and we may not be able to prevent third parties from infringing, diluting, or otherwise violating them. Additionally, our intellectual property rights and other confidential business information are subject to risks of compromise or unauthorized disclosure if our security measures or those of our third-party service providers are unable to prevent cyber-attacks. Furthermore, the growing use of generative AI presents an increased risk of unintentional and/or unauthorized disclosure or use of our intellectual property rights. Significant impairments of our intellectual property rights, and limitations on our ability to assert our intellectual property rights against others, could have a material and adverse effect on our business. It is difficult to predict whether assertions of third-party intellectual property rights or any infringement or misappropriation claims arising from such assertions will substantially harm our business, operating results, and financial condition. If we are forced to defend against any infringement or misappropriation claims, whether they are with or without merit, are settled out of court, or are determined in our favor, we may be required to expend significant time and financial resources on the defense of such claims. Legal and regulatory changes in this area may also present uncertainty and risk.Increased scrutiny from investors, regulators, and other stakeholders relating to environmental, social, and governance issues could result in additional costs for us and may adversely impact our reputation.Investors, regulators, customers, employees and other stakeholders are increasingly focused on environmental, social, and governance (“ESG”) matters. Our ESG strategy is focused on four key areas: driving financial inclusion throughout our ecosystem and in our communities, taking climate action for a more resilient and sustainable future, advancing inclusion and diversity across our distributed workplace, and designing corporate governance to promote trust and long-term value, and we publicly report on certain commitments, initiatives, and goals regarding ESG matters in our annual Corporate Social Responsibility Report, on our website, in our SEC filings, and elsewhere. For example, we are committed to increasing the diversity of our workforce and one of our climate change goals is to have net zero carbon for operations by 2030. The implementation of our ESG commitments, initiatives, and goals may require additional investments, and in certain cases, are reliant on third-party verification and/or performance, and we cannot guarantee that we will make progress on our commitments and initiatives or achieve our goals. If we fail, or are perceived to fail, to make such progress or achievements, or to maintain ESG practices that meet evolving stakeholder expectations, or if we revise any of our ESG commitments, initiatives, or goals, our reputation and our ability to attract and retain employees could be harmed, and we may be negatively perceived by investors or our customers. To the extent that our required or voluntary disclosures about ESG matters increase, we could also be criticized or face claims regarding the accuracy, adequacy, or completeness of such disclosures and our reputation could be negatively impacted, or we could face claims regarding our policies and programs. For example, in October 2023, the California Governor signed into law the Climate-Related Financial Risk Act and the Climate Corporate Data Accountability Act, which significantly expand climate-related disclosure requirements for companies doing business in California, and the SEC has proposed extensive climate disclosures that will apply to all public companies.Our Class B common stock has ten votes per share, and our Class A common stock has one vote per share. Stockholders who hold shares of Class B common stock, including certain of our executive officers, employees, and directors and their affiliates, held approximately 52.14% of the voting power of our combined outstanding capital stock as of December 31, 2023. Because of the ten-to-one voting ratio between our Class B and Class A common stock, the holders of our Class B common stock collectively hold more than a majority of the combined voting power of our common stock, and therefore such holders are able to control all matters submitted to our stockholders for approval. When the shares of our Class B common stock represent less than 5% of the combined voting power of our Class A common stock and Class B common stock, the then-outstanding shares of Class B common stock will automatically convert into shares of Class A common stock.Transfers by holders of Class B common stock will generally result in those shares converting to Class A common stock, subject to limited exceptions. Such conversions of Class B common stock to Class A common stock upon transfer will have the effect, over time, of increasing the relative voting power of those holders of Class B common stock who retain their shares in the long term. If, for example, our Class B stockholders retain shares of Class B common stock constituting as little as 10% of all outstanding shares of our Class A and Class B common stock combined, they will continue to control a majority of the combined voting power of our outstanding capital stock.The market price of our Class A common stock has been and may continue to be subject to wide fluctuations in response to various factors, some of which are beyond our control and may not be related to our operating performance.

In addition, in the past, following periods of volatility in the overall market and the market price of a particular company’s securities, securities class action litigation has often been instituted against these companies. Such litigation, if instituted against us, could result in substantial costs and a diversion of our management’s attention and resources.Our Class A common stock is listed to trade on more than one stock exchange, and this may result in price variations. Dual-listing may result in price variations between the exchanges due to a number of factors. Our Class A common stock is traded in U.S. dollars on the NYSE and our CDIs are traded in Australian Dollars on the ASX. The two exchanges also have differing vacation schedules. Differences in the trading schedules, as well as volatility in the exchange rate of the two currencies, among other factors, may result in different trading prices for our Class A common stock on the two exchanges.In connection with the issuance of each series of our Convertible Notes, we entered into convertible note hedge transactions with the option counterparties. We also entered into warrant transactions with the option counterparties pursuant to which we sold warrants for the purchase of our Class A common stock. The convertible note hedge transactions are expected generally to reduce the potential dilution to our Class A common stock upon any conversion of the Convertible Notes and/or offset any cash payments we are required to make in excess of the principal amount of converted Convertible Notes, as the case may be. The warrant transactions would separately have a dilutive effect to the extent that the market price per share of our Class A common stock exceeds the strike price of any warrants unless, subject to the terms of the warrant transactions, we elect to cash settle the warrants.From time to time, the option counterparties or their respective affiliates may modify their hedge positions by entering into or unwinding various derivative transactions with respect to our Class A common stock and/or purchasing or selling our Class A common stock or other securities of ours in secondary market transactions prior to the maturity of the Convertible Notes. This activity could cause or avoid an increase or a decrease in the market price of our Class A common stock.Anti-takeover provisions contained in our certificate of incorporation, our bylaws, and provisions of Delaware law could impair a takeover attempt.Among other things, our dual-class common stock structure provides our holders of Class B common stock with the ability to significantly influence the outcome of matters requiring stockholder approval, even if they own significantly less than a majority of the shares of our outstanding shares of common stock. Further, our certificate of incorporation and bylaws include provisions (i) creating a classified board of directors whose members serve staggered three-year terms; (ii) authorizing “blank check” preferred stock, which could be issued by our board of directors without stockholder approval and may contain voting, liquidation, dividend, and other rights superior to our common stock; (iii) limiting the ability of our stockholders to call special meetings; (iv) eliminating the ability of our stockholders to act by written consent without a meeting or to remove directors without cause; and (v) requiring advance notice of stockholder proposals for business to be conducted at meetings of our stockholders and for nominations of candidates for election to our board of directors. These provisions, alone or together, could delay or prevent hostile takeovers and changes in control or changes in our management.Any provision of our certificate of incorporation, bylaws, or Delaware law that has the effect of delaying or preventing a change in control could limit the opportunity for our stockholders to receive a premium for their shares of our capital stock and could also affect the price that some investors are willing to pay for our Class A common stock.Our bylaws provide that (1) the Delaware Court of Chancery or another state court or federal court located within the State of Delaware will be the exclusive forum for substantially all disputes between us and our stockholders and (2) the federal district courts of the U.S. will be the exclusive forum for all causes of action arising under the Securities Act, which could limit our stockholders’ ability to choose the judicial forum for disputes with us or our directors, officers, or employees.Our bylaws provide that, unless we consent to the selection of an alternative forum, the Court of Chancery of the State of Delaware (or, if the Court of Chancery of the State of Delaware does not have jurisdiction, another state court in Delaware or federal district court for the District of Delaware) is the exclusive forum for (i) any derivative action or proceeding brought on our behalf; (ii) any action asserting a claim of breach of fiduciary duty owed by any of our directors, officers, or other employees to us or to our stockholders; (iii) any action asserting a claim arising pursuant to the Delaware General Corporation Law, our certificate of incorporation or our bylaws; or (iv) any action asserting a claim governed by the internal affairs doctrine, in all cases subject to the court having jurisdiction over the claims at issue and the indispensable parties. The choice of forum provision will not apply to suits brought to enforce any liability or duty created by the Exchange Act. Accordingly, both state and federal courts have jurisdiction to entertain such claims. To prevent having to litigate claims in multiple jurisdictions and the threat of inconsistent or contrary rulings by different courts, among other considerations, our bylaws also provide that the federal district courts of the United States of America will be the exclusive forum for resolving any complaint asserting a cause of action arising under the Securities Act.Any person or entity purchasing or otherwise acquiring any interest in any of our securities shall be deemed to have notice of and consented to the foregoing bylaw provisions. Although we believe these exclusive forum provisions benefit us by providing increased consistency in the application of Delaware law and federal securities laws in the types of lawsuits to which each applies, the exclusive forum provisions may limit a stockholder’s ability to bring a claim in a judicial forum of its choosing for disputes with us or any of our directors, officers, stockholders, or other employees, which may discourage lawsuits with respect to such claims against us and our current and former directors, officers, stockholders, or other employees. Our stockholders will not be deemed to have waived our compliance with the federal securities laws and the rules and regulations thereunder as a result of our exclusive forum provisions. Further, in the event a court finds either exclusive forum provision contained in our bylaws to be unenforceable or inapplicable in an action, we may incur additional costs associated with resolving such action in other jurisdictions, which could harm our results of operations.58ITEM 1B. UNRESOLVED STAFF COMMENTSNone.ITEM 1C. CYBERSECURITYRisk Management and StrategyWe have a cybersecurity risk management program consisting of policies and procedures for assessing, identifying, and managing material risk from cybersecurity threats, and we have integrated these policies and procedures into our overall risk management systems and processes. Our cybersecurity policies and procedures are based on recognized frameworks established by the National Institute of Standards and Technology, the International Organization for Standardization and other applicable industry standards. We routinely assess material risks from cybersecurity threats and regularly assess and update our cybersecurity risk management program in response to emerging trends and changes in our operations.Our risk management program includes, among other elements:Identification: We aim to proactively identify sources of risk, areas of impact, and relevant events that could give rise to cybersecurity risks, such as changes to our infrastructure, service providers, or personnel. Assessment: We conduct periodic risk assessments to identify cybersecurity threats. We also conduct likelihood and impact assessments with the goal of identifying reasonably foreseeable internal and external risks, the likelihood and potential damage that could result from such risks, and the sufficiency of existing policies, procedures, systems, and safeguards in place to manage such risks. Management: Following our risk assessments, we design and implement reasonable safeguards to address any identified gaps in our existing processes and procedures. Our employees participate in cybersecurity training and awareness upon hire and at least annually thereafter. We engage third parties, including consultants and auditors, to evaluate the effectiveness of our risk management program, control environment, and cybersecurity practices through security audits, penetration testing, and other engagements. We have processes in place to identify, review and evaluate cybersecurity risks associated with our use of third-party service providers. These reviews are conducted at onboarding and periodically throughout the tenure of the service provider based on risk tier rating of each service provider. We believe these processes enable us to evaluate a third-party service provider’s security posture, identify risks that may arise out of our use of the third party’s service, and make decisions regarding acceptable levels of risk and risk mitigation.

For additional information regarding whether any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, have materially affected or are reasonably likely to materially affect our company, including our business strategy, results of operations, or financial condition, please refer to Item 1A, “Risk Factors,” in this annual report on Form 10-K. Board and Management’s Role in Data Privacy and Cybersecurity OversightOur board of directors recognizes the oversight of risk management as one of its primary responsibilities and central to maintaining an effective, risk-aware and accountable organization. While the board of directors maintains ultimate responsibility for the oversight of our data privacy and cybersecurity program and risks, it has delegated certain oversight responsibilities to our audit and risk committee. Our board of directors and audit and risk committee’s principal role is one of oversight, recognizing that management is responsible for the design, implementation, and maintenance of an effective program for protecting against and mitigating data privacy and cybersecurity risks. The audit and risk committee assists the board of directors in enhancing its understanding of data privacy and cybersecurity issues by overseeing our data privacy and information security programs, strategy, policies, standards, architecture, processes, and significant risks, as well as overseeing responses to security and data incidents, as appropriate.59The full board of directors undergoes annual information security and privacy training by our Chief Information Security Officer (“CISO”) and our Chief Privacy Officer (“CPO”), which covers, among other matters, our privacy and cybersecurity programs and risks. Our audit and risk committee receives updates, at least quarterly, from our CISO and CPO on significant data privacy and security risks, including any significant incidents, relevant industry developments, threat vectors and significant risks identified in periodic penetration tests or vulnerability scans. The updates also include significant legal and legislative developments concerning data privacy and security, our approach to complying with applicable law, and significant engagement with regulators concerning data privacy and cybersecurity. Our audit committee provides regular updates to the board of directors on such reports.Our CISO oversees our cybersecurity policies and processes, including those described in “Risk Management and Strategy” above. Our foundational engineering, data security governance, infrastructure security, product security and security operations teams report directly to our CISO and provide regular updates on significant or potentially significant threats and incidents. Additionally, we have an incident response team and an incident response plan that outlines the roles and responsibilities of key personnel, including representatives from information security, compliance, and counsel, that are involved in responding to, remediating and escalating such incidents to the CISO, as appropriate. Our CISO reports directly to our Chief Financial Officer and Chief Operating Officer and indirectly to our audit and risk committee. Our CISO provides updates on significant or potentially significant threats and incidents to our Block Head and leadership team, in addition to the audit and risk committee and our board of directors as appropriate and in accordance with the processes detailed in the prior paragraph.Our CISO and Deputy CISO are primarily responsible for assessing and managing our material risks from cybersecurity threats. Our CISO has served in various roles building and securing enterprise platforms across retail, corporate and investment banking financial services as well as consumer experiences and data at multiple Fortune 500 companies for over 25 years. Our Deputy CISO has over 20 years of experience in information security, including serving as head of cybersecurity and privacy response at a global public company and information security leadership positions with the United States government. Our Deputy CISO holds undergraduate and graduate degrees in computer information systems and computer science with an information security focus and possesses various certifications, including the Information Systems Security Professional (NSTISSI No. 4011) and Information Systems Security Officer (CNSSI No. 4014) certifications..

Recently Filed

Click on a ticker to see risk factors

Ticker *	File Date
NKE	1 day, 5 hours ago
OPTT	1 day, 5 hours ago
ANGO	1 day, 5 hours ago
CTAS	1 day, 8 hours ago
RPM	1 day, 8 hours ago
CNXA	2 days, 3 hours ago
LW	2 days, 8 hours ago
HUDA	3 days, 4 hours ago
AXR	3 days, 5 hours ago
CALM	3 days, 6 hours ago
BUKS	3 days, 6 hours ago
NRAC	4 days, 2 hours ago
RGP	4 days, 6 hours ago
SING	1 week ago
CSBR	1 week ago
DRI	1 week ago
SCHL	1 week ago
GNLN	1 week, 1 day ago
AIR	1 week, 1 day ago
ABTI	1 week, 2 days ago
SHMP	1 week, 2 days ago
BXXY	1 week, 2 days ago
ACRG	1 week, 3 days ago
CARV	1 week, 3 days ago
FOMC	1 week, 3 days ago
KRFG	1 week, 3 days ago
GHMP	1 week, 3 days ago
GWTI	1 week, 3 days ago
VEII	1 week, 3 days ago
ZEST	1 week, 4 days ago
KITL	1 week, 4 days ago
ADMT	1 week, 4 days ago
ATAK	1 week, 4 days ago
BOTY	1 week, 4 days ago
DPLS	1 week, 4 days ago
FDX	1 week, 4 days ago
ECIA	1 week, 4 days ago
ATXG	1 week, 4 days ago
CRMT	1 week, 4 days ago
ELRE	1 week, 4 days ago
CAG	2 weeks, 1 day ago
KALV	2 weeks, 1 day ago
PAYX	2 weeks, 1 day ago
MEI	2 weeks, 1 day ago
BCRD	2 weeks, 1 day ago
FMHS	2 weeks, 2 days ago
ASPA	2 weeks, 2 days ago
STEK	2 weeks, 2 days ago
LEAI	2 weeks, 4 days ago
AIDG	3 weeks ago

OTHER DATASETS

House Trading

Dashboard

Corporate Flights

Dashboard

App Ratings

Dashboard

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - SQ

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing

$SQ Risk Factor changes from 00/02/24/22/2022 to 00/02/22/24/2024

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

Strategies

Alerts

Browse Data

Risk Factors Dashboard

View risk factors by ticker

Search filings by term

Risk Factors - SQ

-New additions in green-Changes in blue-Hover to see similar sentence in last filing

$SQ Risk Factor changes from 00/02/24/22/2022 to 00/02/22/24/2024

Recently Filed

OTHER DATASETS

House Trading

Corporate Flights

App Ratings

TRADE SMARTER

TRADE SMARTER

-New additions in green
-Changes in blue
-Hover to see similar sentence in last filing