American Express Company: 10-K Risk Factor Changes

2024 vs 2023  ·  SEC EDGAR  ·  2026-10-16
Other years: 2026 vs 2025 · 2025 vs 2024
⚠ AI Risk Brief Interpretation layer — deterministic data below

American Express strengthened risk disclosures around AI, data regulation, and technology competition amid evolving compliance requirements.

Direction ↑ More concerning
✓ Deterministic extraction — no AI-generated data

Classification is based on semantic text similarity scoring and may include approximations. “No match” means no high-confidence textual match was found — not necessarily that a section was removed.

0
New Risks
0
Removed
9
Modified
24
Unchanged
🟡 Modified Disclosure change6/10

Our business is subject to evolving and comprehensive government regulation and supervision, which could materially adversely affect our results of operations and financial condition.

high match confidence

Sentence-level differences:

  • Reworded sentence: "We are subject to evolving and comprehensive government regulation and supervision in jurisdictions around the world, which significantly affects our business and requires continual enhancement of our compliance efforts."
  • Reworded sentence: "New laws or regulations could similarly affect our business, increase the costs and complexity of doing business, impact what we are able to charge for, or offer in connection with, our products and services, impose conflicting obligations, and require us to change certain of our business practices and invest significant management attention and resources, all of which could adversely affect our results of operations and financial condition."
  • Removed sentence: "In preparation for the completion of Brexit, numerous EU laws and regulations were separately adopted into UK domestic legislation in order to ensure continuity."
  • Removed sentence: "However, the UK plans to evaluate the extent to which these EU-legacy laws and regulations should change going forward and has already indicated some areas where it may take a different approach from the EU."
  • Removed sentence: "To the extent that different regulatory systems impose overlapping or inconsistent requirements on the conduct of our business, we face complexity and additional costs in our compliance efforts, as well as potential regulatory enforcement actions and penalties."

Current (2024):

View prior text (2023)

We are subject to comprehensive government regulation and supervision in jurisdictions around the world, which significantly affects our business and requires continual enhancement of our compliance efforts. Supervision efforts and the enforcement of existing laws and regulations impact the scope and profitability of our existing business activities, limit our ability to pursue certain business opportunities and adopt new technologies, compromise our competitive position, and affect our relationships with Card Members, partners, merchants, service providers and other third parties. New laws or regulations could similarly affect our business, increase our costs of doing business, impact what we are able to charge for, or offer in connection with, our products and services, impose conflicting obligations, and require us to change certain of our business practices and invest significant management attention and resources, all of which could adversely affect our results of operations and financial condition. Legislators and regulators around the world are aware of each other’s approaches to the regulation of the financial services industry. Consequently, a development in one country, state or region may influence regulatory approaches in another.

In preparation for the completion of Brexit, numerous EU laws and regulations were separately adopted into UK domestic legislation in order to ensure continuity. However, the UK plans to evaluate the extent to which these EU-legacy laws and regulations should change going forward and has already indicated some areas where it may take a different approach from the EU. To the extent that different regulatory systems impose overlapping or inconsistent requirements on the conduct of our business, we face complexity and additional costs in our compliance efforts, as well as potential regulatory enforcement actions and penalties.

If we fail to satisfy regulatory requirements or maintain our financial holding company status, our financial condition and results of operations could be adversely affected, and we may be restricted in our ability to take certain capital actions (such as declaring dividends or repurchasing outstanding shares) or engage in certain business activities or acquisitions, which could compromise our competitive position. Additionally, our banking regulators have wide discretion in the examination and the enforcement of applicable banking statutes and regulations and may restrict our ability to engage in certain business activities or acquisitions or require us to maintain more capital.

Legislators and regulators continue to focus on the operation of card networks, including interchange fees paid to card issuers in payment networks such as Visa and Mastercard, network routing practices and the fees merchants are charged to accept cards. Even where we are not directly regulated, regulation of bankcard fees significantly negatively impacts the discount revenue derived from our business, including as a result of downward pressure on our discount rate from decreases in competitor pricing in connection with caps on interchange fees. In some cases, regulations also extend, or may extend, to certain aspects of our business, such as network and cobrand arrangements, new products or services we may offer, or the terms of card acceptance for merchants, including terms relating to non-discrimination and honor-all-cards. For example, we have exited our network businesses in the EU and Australia as a result of regulation in those jurisdictions. In addition, there is uncertainty as to when or how interchange fee caps and other provisions of payments legislation might apply when we work with cobrand partners and agents in the EU. In a ruling issued on February 7, 2018, the EU Court of Justice confirmed the validity of the application of the fee caps and other provisions in circumstances where three-party networks issue cards with a cobrand partner or through an agent, although the ruling provided only limited guidance as to when or how the provisions might apply in such circumstances and remains subject to differing interpretations by regulators and participants in cobrand arrangements. As a result, we are subject to regulatory action, penalties and the possibility we will not be able to maintain our existing cobrand and agent relationships in the EU.

We are subject to certain provisions of the Bank Secrecy Act, as amended by the Patriot Act and the AMLA, with regard to maintaining effective AML/CFT programs. Similar AML/CFT requirements apply under the laws of most jurisdictions where we operate. As regulators increase their focus in this area, new technologies such as digital currencies develop and we introduce new products like checking accounts, we face increased costs related to oversight, supervision and potential fines. Our AML/CFT programs have become the subject of heightened scrutiny in some countries, including certain Member States in the EU. Any errors, failures or delays in complying with AML/CFT laws, perceived deficiencies in our AML/CFT programs or association of our business with money laundering, terrorist financing, tax fraud or other illicit activities can give rise to significant supervisory, criminal and civil proceedings and lawsuits, which could result in significant penalties and forfeiture of assets, loss of licenses or restrictions on business activities, or other enforcement actions, and our reputation may suffer due to our customers’ association with certain countries, persons or entities or the existence of any such transactions.

Various regulatory agencies and legislatures are also considering regulations and legislation covering identity theft, account management guidelines, credit bureau reporting, disclosure rules, security and marketing that would impact us directly, in part due to increased scrutiny of our underwriting and account management standards. Any new requirements may restrict our ability to issue cards or partner with other financial institutions, which could adversely affect our revenue growth.

See “Supervision and Regulation” for more information about certain laws and regulations to which we are subject and their impact on us.

🟡 Modified If we are not able to successfully invest in, and compete with respect to, technological developments and new products and services across all our businesses, our revenue and profitability could be materially adversely affected. 🔒
🟡 Modified Regulation in the areas of privacy, data protection, data governance, resiliency, data transfer, third party oversight, account access, artificial intelligence and machine learning and information security and cybersecurity could increase our costs and affect or limit our business opportunities and how we collect and/or use personal information. 🔒
🟡 Modified We may not be successful in realizing the benefits associated with our acquisitions, strategic alliances, joint ventures and investment activity, and our business and reputation could be materially adversely affected. 🔒

And 5 more changes in the full comparison.

8 changes in this historical filing

The complete historical comparison (2024 vs 2023) is available on the Pro plan.

Get Pro access Already a Pro subscriber? View full diff →