PayPal Holdings's biggest risks in the FY2024 10-K
- PayPal faces intense regulatory oversight across global payments, cryptocurrency, artificial intelligence, anti-money laundering, and antitrust.
- Cybersecurity, fraud mitigation, and heavy reliance on third-party payment networks and bank partners dominate operational risks.
The risks most specific to PayPal Holdings
- CYBERSECURITY AND TECHNOLOGY RISKS
Any cybersecurity incidents, including cyberattacks or data security breaches affecting the information technology or infrastructure of our customers, partners, or vendors (including data center and cloud computing providers) or of companies we acquire, could have similar negative effects
Card network rules and contracts could make us liable for costs when payment processors, customers, or vendors suffer data breaches.
- CYBERSECURITY AND TECHNOLOGY RISKS
If we cannot keep pace with rapid technological developments to provide new and innovative products and services, the use of our products and services and, consequently, our revenues, could decline
Revenues could decline if we fail to keep pace with rapid payment technology changes like real-time payments and blockchain.
- LEGAL, REGULATORY AND COMPLIANCE RISKS
Cryptocurrency Regulation and Related Risks
Our customer cryptocurrency offerings subject us to strict regulation by the New York State Department of Financial Services.
- BUSINESS AND OPERATIONS RISKS
Changes to payment card networks or bank fees, rules, or practices could harm our business
Payment card networks can increase fees and assessments for transactions, which could harm our business.
- BUSINESS AND OPERATIONS RISKS
Changes in how consumers fund their PayPal transactions could harm our business
Higher transaction fees occur when consumers fund payments with credit cards rather than bank transfers or balances.
- BUSINESS AND OPERATIONS RISKS
Our credit products expose us to additional risks
We offer credit products to consumers and merchants in the U.S. and internationally, exposing us to credit management risks.
- BUSINESS AND OPERATIONS RISKS
Any factors that reduce cross-border trade or make such trade more difficult could harm our business
Cross-border trade, which provides higher revenues and profits, is vulnerable to any factors that make international trade difficult.
- BUSINESS AND OPERATIONS RISKS
Failure to deal effectively with fraud, abusive behaviors, bad transactions, and negative customer experiences may increase our loss rate and could negatively impact our business and severely diminish merchant and consumer confidence in and use of our services
Fraudsters using stolen identities or synthetic accounts can increase our loss rate and diminish merchant confidence.
- BUSINESS AND OPERATIONS RISKS
If we are unable, or perceived as unable, to effectively manage customer funds, our business could be harmed
We hold substantial customer balances and must strictly comply with regulatory requirements regarding customer funds.
- BUSINESS AND OPERATIONS RISKS
materially and adversely affect our effective tax rate, net income, and cash flows
OECD implementation of a global minimum tax rate of 15% under Pillar Two may impact our effective tax rate.
All 35 risk factors
Headings as the filing states them, in filing order.
CYBERSECURITY AND TECHNOLOGY RISKS
- 01Cyberattacks and security vulnerabilities could result in serious harm to our reputation, business, and financial condition
- 02Any cybersecurity incidents, including cyberattacks or data security breaches affecting the information technology or infrastructure of our customers, partners, or vendors (including data center and cloud computing providers) or of companies we acquire, could have similar negative effects
- 03Business interruptions or systems failures may impair the availability of our websites, applications, products or services, or otherwise harm our business
- 04If we cannot keep pace with rapid technological developments to provide new and innovative products and services, the use of our products and services and, consequently, our revenues, could decline
- 05compliance obligations; and in-store, digital, and social commerce
LEGAL, REGULATORY AND COMPLIANCE RISKS
- 06Our business is subject to extensive government regulation and oversight. Our failure to comply with extensive, complex, overlapping, and frequently changing rules, regulations, and legal interpretations could materially harm our business
- 07Cryptocurrency Regulation and Related Risks
- 08Anti-Money Laundering and Counter-Terrorist Financing; Economic and Trade Sanctions
- 09Privacy and Protection of Customer Data
- 10Artificial Intelligence (AI)
- 11We are subject to regulatory scrutiny and may be subject to legal proceedings under antitrust and competition laws
- 12We are regularly subject to general litigation, regulatory scrutiny, and government inquiries
- 13Third parties may allege that we are infringing their patents and other intellectual property rights
- 14We may be unable to protect or enforce our intellectual property
BUSINESS AND OPERATIONS RISKS
- 15We face substantial and increasingly intense competition worldwide in the global payments industry
- 16Changes to payment card networks or bank fees, rules, or practices could harm our business
- 17Changes in how consumers fund their PayPal transactions could harm our business
- 18Our credit products expose us to additional risks
- 19We rely on third parties in many aspects of our business, which creates additional risk
- 20Any factors that reduce cross-border trade or make such trade more difficult could harm our business
- 21Failure to deal effectively with fraud, abusive behaviors, bad transactions, and negative customer experiences may increase our loss rate and could negatively impact our business and severely diminish merchant and consumer confidence in and use of our services
- 22Use of our payments services for illegal activities or improper purposes could harm our business
- 23We expect to continue to consider and evaluate a wide array of potential strategic transactions as part of our overall business
- 24Our international operations subject us to increased risks, which could harm our business
- 25Global and regional economic conditions could harm our business
- 26If our reputation or our brands are damaged, our business and operating results may be harmed
- 27Real or perceived inaccuracies in our key metrics may harm our reputation and negatively affect our business
- 28Environmental, social and governance (“ESG”) issues may have an adverse effect on our business, financial condition and results of operations and damage our reputation
- 29If one or more of our counterparty financial institutions default on their financial or performance obligations to us or fail,we may incur significant losses
- 30If we are unable, or perceived as unable, to effectively manage customer funds, our business could be harmed
- 31There are risks associated with our indebtedness
- 32Changes in tax laws, exposure to unanticipated additional tax liabilities, or implementation of reporting or record-keeping obligations could have a material adverse effect on our business
- 33materially and adversely affect our effective tax rate, net income, and cash flows
- 34We may be unable to attract, retain, and develop the highly skilled employees we need to support our business
- 35We are subject to risks associated with information disseminated through our products and services
Other PayPal Holdings 10-Ks
- FY2025 10-K risk factors35 risks3 new3 dropped20 reworded
PayPal added new disclosures concerning strategic transactions, ESG expectations, and its recently initiated cash dividend program.
Filed Feb 03, 2026
About this page
The headings are the filing's own. The one-line readings and the overview are automated and can be wrong: read Item 1A of the 10-K for the exact wording.