American Express Company: 10-K Risk Factor Changes

We offer a broad array of products and services to consumers, small businesses, mid-sized companies and large corporations and thus are very dependent upon the level of consumer and business activity and the demand for payment and financing products. Slow economic growth, economic contraction, persistent inflationary pressures or shifts in broader consumer and business trends can significantly impact customer behaviors, including spending on our cards, the ability and willingness of Card Members to borrow and pay amounts owed to us, demand for fee-based products and services and levels of customers’ deposits with us. Factors such as consumer spending and confidence, household income and housing prices, levels of unemployment and underemployment, business investment and inventory levels, bankruptcies, geopolitical instability, public policy decisions and uncertainty, government spending and debt, international trade relationships, tariffs, interest rates, taxes, inflation and deflation (including the effects of related governmental responses), impacts of new technologies, energy costs and availability of capital and credit all affect the economic environment and, ultimately, our profitability. Additionally, sustained periods of high inflation may, among other things, increase certain of our expenses and erode consumer purchasing power, confidence and spending. An economic downturn or recession may result in higher unemployment and lower household income, consumer spending, corporate earnings and business investment, which may negatively impact spending on our cards and demand for our products, and increase delinquencies and write-off rates. Spending by our premium consumer Card Members, for example, is sensitive to personal discretionary spending levels and tends to decline during general economic downturns. Likewise, spending by small business and corporate clients, which comprised approximately 41 percent of our worldwide billed business during 2025, depends in part on the economic environment and a favorable climate for continued business investment and new business formation. The consequences of negative circumstances impacting us or the economic environment generally can be sudden and severe and can impact customer types and geographies in which we operate in very different ways.

We offer a broad array of products and services to consumers, small businesses, mid-sized companies and large corporations and thus are very dependent upon the level of consumer and business activity and the demand for payment and financing products. Slow economic growth, economic contraction or shifts in broader consumer and business trends significantly impact customer behaviors, including spending on our cards, the ability and willingness of Card Members to borrow and pay amounts owed to us, demand for fee-based products and services and levels of customers’ deposits with us. Factors such as consumer spending and confidence, household income and housing prices, unemployment rates, business investment and inventory levels, bankruptcies, geopolitical instability, public policy decisions, government spending, international trade relationships, tariffs, interest rates, taxes, inflation and deflation (including the effects of related governmental responses), energy costs and availability of capital and credit all affect the economic environment and, ultimately, our profitability. Additionally, sustained periods of high inflation may, among other things, increase certain of our expenses and erode consumer purchasing power, confidence and spending. An economic downturn or recession may result in higher unemployment and lower household income, consumer spending, corporate earnings and business investment, which may negatively impact spending on our cards and demand for our products, and increase delinquencies and write-off rates. Spending by our premium consumer Card Members, for example, is sensitive to personal discretionary spending levels and tends to decline during general economic downturns. Likewise, spending by small business and corporate clients, which comprised approximately 42 percent of our worldwide billed business during 2024, depends in part on the economic environment and a favorable climate for continued business investment and new business formation. The consequences of negative circumstances impacting us or the economic environment generally can be sudden and severe and can impact customer types and geographies in which we operate in very different ways.

Our ability to obtain financing in the capital markets, such as from unsecured term debt issuances and asset securitizations, is dependent on financial market conditions. Disruptions, uncertainty or volatility across the financial markets, as well as adverse developments affecting us, our competitors, the financial industry or the economy generally, could negatively impact market liquidity and limit our access to funding required to operate and grow our business and satisfy cash needs, maturing liabilities and regulatory capital requirements. In some circumstances, our business growth or funding needs may increase unexpectedly and/or we may incur an unattractive cost to raise capital, which could decrease profitability and significantly reduce financial flexibility. Additional factors affecting the extent to which we may securitize loans and receivables in the future include the overall credit quality of our loans and receivables, the costs of securitizing our loans and receivables, the demand for credit card asset-backed securities and the legal, regulatory, accounting or tax rules affecting securitization transactions and asset-backed securities, generally. Our liquidity and cost of funds would also be adversely affected by the occurrence of events that could result in the early 35 35 35 Table of Contents Table of Contents amortization of our existing securitization transactions. For a further discussion of our liquidity and funding needs, see “Consolidated Capital Resources and Liquidity” under “MD&A.”

Our ability to obtain financing in the debt capital markets for unsecured term debt and asset securitizations is dependent on financial market conditions. Disruptions, uncertainty or volatility across the financial markets, as well as adverse developments affecting our competitors and the financial industry generally, could negatively impact market liquidity and limit our access to funding required to operate our business. Such market conditions may also limit our ability to replace, in a timely manner, maturing liabilities, satisfy regulatory capital requirements and access the funding necessary to grow our business. In some circumstances, we may incur an unattractive cost to raise capital, which could decrease profitability and significantly reduce financial flexibility. Additional factors affecting the extent to which we may securitize loans and receivables in the future include the overall credit quality of our loans and receivables, the costs of securitizing our loans and receivables, the demand for credit card asset-backed securities and the legal, regulatory, accounting or tax rules affecting securitization transactions and asset-backed securities, generally. Our liquidity and cost of funds would also be adversely affected by the occurrence of events that could result in the early amortization of our existing securitization transactions. For a further discussion of our liquidity and funding needs, see “Consolidated Capital Resources and Liquidity” under “MD&A.”

Our U.S. bank subsidiary, AENB, accepts deposits and uses the proceeds as a source of funding, with our direct retail deposits becoming a larger proportion of our funding over time. We continue to face strong competition with regard to deposits, and pricing and product changes may adversely affect our ability to attract and retain cost-effective deposit balances. To the extent we offer higher interest rates to attract or maintain deposits, our funding costs will be adversely impacted. Additionally, a decrease in confidence in the soundness of us or in the banking sector more broadly, such as following the occurrence of bank failures, or in the level of insurance available on deposits may cause rapid deposit withdrawals or an unwillingness to maintain deposits with us, which could materially adversely affect us and our ability to fund our business. The use of social media and similar channels has the potential to intensify and accelerate such a decrease in confidence in soundness. Our ability to obtain deposit funding and offer competitive interest rates on deposits is also dependent on AENB’s capital levels. The FDIA’s brokered deposit provisions and related FDIC rules in certain circumstances prohibit banks from accepting or renewing brokered deposits and apply other restrictions, such as a cap on interest rates that can be paid. Additionally, our regulators can adjust applicable capital requirements at any time and have authority to place limitations on our deposit businesses. An inability to attract or maintain deposits in the future could materially adversely affect our ability to fund our business.

Our U.S. bank subsidiary, AENB, accepts deposits and uses the proceeds as a source of funding, with our direct retail deposits becoming a larger proportion of our funding over time. We continue to face strong competition with regard to deposits, and pricing and product changes may adversely affect our ability to attract and retain cost-effective deposit balances. To the extent we offer higher interest rates to attract or maintain deposits, our funding costs will be adversely impacted. Additionally, a decrease in confidence in the soundness of us or in the banking sector more broadly, such as following the occurrence of bank failures, or in the level of insurance available on deposits may cause rapid deposit withdrawals or an unwillingness to maintain deposits with us, 36 36 36 Table of Contents Table of Contents which could materially adversely affect us and our ability to fund our business. The use of social media and similar channels has the potential to intensify and accelerate such a decrease in confidence in soundness. Our ability to obtain deposit funding and offer competitive interest rates on deposits is also dependent on AENB’s capital levels. The FDIA’s brokered deposit provisions and related FDIC rules in certain circumstances prohibit banks from accepting or renewing brokered deposits and apply other restrictions, such as a cap on interest rates that can be paid. Additionally, our regulators can adjust applicable capital requirements at any time and have authority to place limitations on our deposit businesses. An inability to attract or maintain deposits in the future could materially adversely affect our ability to fund our business.

We face heightened and evolving regulatory expectations and scrutiny in the U.S. and globally, which significantly affects our business and requires continual enhancement of our compliance efforts. Supervision efforts and the enforcement of existing laws and regulations impact the scope and profitability of our existing business activities, limit our ability to pursue certain business opportunities and adopt new technologies, compromise our competitive position (particularly where we may be treated differently from our competitors), and affect our relationships with Card Members, partners, merchants, service providers and other third parties. New laws or regulations could similarly affect our business, increase the costs and complexity of doing business, impact what we are able to charge for, or offer in connection with, our products and services, impose conflicting obligations, and require us to change certain of our business practices and invest significant management attention and resources, all of which could adversely affect our results of operations and financial condition. Political developments, including those relating to recent shifts in trade policy and heightened geopolitical tensions, have resulted in and may further result in an increase in the number, complexity and scope of laws and regulations, heightened legislative and regulatory uncertainty, changes to supervisory and enforcement priorities, and increased risk of fragmentation in global financial regulation. In addition, legislators and regulators around the world are aware of each other’s approaches to the regulation of the financial services industry, so a development in one jurisdiction may influence regulatory approaches in another. If we fail to satisfy regulatory requirements and expectations or maintain our financial holding company status or other applicable licenses and charters, our financial condition and results of operations could be adversely affected, and we may be restricted in our ability to take certain capital actions (such as declaring dividends or repurchasing outstanding shares) or engage in certain business activities or acquisitions, which could compromise our competitive position. Additionally, our banking regulators have wide discretion in the examination and the enforcement of applicable banking statutes and regulations and may restrict our ability to engage in certain business activities or acquisitions or require us to maintain more capital. We are currently a Category III firm for purposes of the U.S. federal bank regulatory agencies’ tailoring framework, which subjects us to heightened regulatory expectations and more stringent regulatory requirements. As we continue to grow, these expectations and requirements may further increase, such as if we become a Category II firm, which may increase our compliance costs and adversely affect our business. Legislators and regulators continue to focus on the operation of card networks, including interchange fees paid to card issuers in payment networks such as Visa and Mastercard, network routing practices and the fees merchants are charged to accept cards. While in some cases our business is subject to exemptions related to certain of these regulations, there is no guarantee that such exemptions will continue to be available and even where we are not directly regulated, regulation of bankcard fees significantly negatively impacts the discount revenue derived from our business, including as a result of downward pressure on our discount rate from decreases in competitor pricing in connection with caps on interchange fees. In some cases, regulations also extend, or may extend, to certain aspects of our business, such as network and cobrand arrangements, new products or services we may offer, or the terms of card acceptance for merchants, including terms relating to non-discrimination and honor-all-cards. For example, we have exited our network licensing businesses in the EU and Australia as a result of regulation in those jurisdictions. In addition, 30 30 30 Table of Contents Table of Contents there is uncertainty as to when or how interchange fee caps and other provisions of payments legislation might apply when we work with cobrand partners and agents in the EU. See “Supervision and Regulation — Payments Regulation” under “Business” for more information. Given differing interpretations by regulators and participants in cobrand arrangements, we are subject to regulatory action, penalties and the possibility we will not be able to maintain our existing cobrand and agent relationships in the EU. In addition, a number of federal and state laws to regulate various aspects of network operations are being considered or have passed, including regarding information associated with electronic transactions (such as the use of specific merchant categories codes or limitations on the use of transaction data) and pricing of electronic transactions (such as interchange fees on sales tax or gratuities). Legislators and regulators also continue to focus on consumer protection, including product design and pricing constructs, account management and security, creditworthiness assessments, credit bureau reporting, disclosure rules, marketing, forbearance measures and debt collection practices. This focus has included fees, interest rates and rewards associated with card and banking products, such as recent proposals to cap credit card interest rates. In addition, government agencies are reviewing financial institutions’ policies and practices for providing, maintaining or discontinuing financial products or services to certain clients or potential clients. Any new requirements or increased enforcement of existing requirements could materially and adversely impact our revenue growth and profitability, including, as a result of increased scrutiny of our pricing, underwriting and account management practices; the imposition of fines and customer remediation; higher compliance costs; reputational harm; impacts to our ability to issue cards or extend credit to current and prospective Card Members, appropriately price for the value of our products or work with certain business partners; and changes to our business practices generally. We are subject to significant supervision and regulation with respect to compliance with AML/CFT laws, sanctions regimes and anti-corruption laws in numerous jurisdictions. As regulators increase their focus with respect to these financial crimes laws, new technologies such as digital currencies develop, near real-time money movement solutions are adopted, we introduce new products and geopolitical tensions increase, we face increased costs related to oversight, supervision and potential fines. We have been engaging with our federal regulators in relation to certain aspects of our financial crimes compliance program and we are working to enhance our existing programs, policies and procedures and identify and remediate deficiencies to strengthen our program and address regulatory feedback. From time to time, we identify transactions or accounts relating to certain sanctioned parties that we terminate, block and report to our regulators, as applicable. Errors, failures or delays in complying with financial crimes laws, deficiencies in our related compliance programs or association of our business with money laundering, terrorist financing, tax fraud or other illicit activities or sanctioned persons, entities, governments or countries could give rise to significant supervisory, criminal and civil proceedings and lawsuits, which could result in significant penalties and forfeiture of assets, loss of licenses or restrictions on business activities, or other enforcement actions, and our reputation may suffer due to our customers’ association with certain countries, persons or entities or the existence of any such transactions. Additionally, our financial crimes compliance programs may limit our ability to pursue certain business opportunities or affect our relationships with certain partners, service providers and other third parties. See “Supervision and Regulation” under “Business” for more information about certain laws and regulations to which we are subject and their impact on us.

We face significantly heightened regulatory expectations and scrutiny in the U.S. and globally, which significantly affects our business and requires continual enhancement of our compliance efforts. Supervision efforts and the enforcement of existing laws 30 30 30 Table of Contents Table of Contents and regulations impact the scope and profitability of our existing business activities, limit our ability to pursue certain business opportunities and adopt new technologies, compromise our competitive position, and affect our relationships with Card Members, partners, merchants, service providers and other third parties. New laws or regulations could similarly affect our business, increase the costs and complexity of doing business, impact what we are able to charge for, or offer in connection with, our products and services, impose conflicting obligations, and require us to change certain of our business practices and invest significant management attention and resources, all of which could adversely affect our results of operations and financial condition. Political developments can result in legislative and regulatory uncertainty and changes to supervisory and enforcement priorities. In addition, legislators and regulators around the world are aware of each other’s approaches to the regulation of the financial services industry. Consequently, a development in one country, state or region may influence regulatory approaches in another. If we fail to satisfy regulatory requirements or maintain our financial holding company status, our financial condition and results of operations could be adversely affected, and we may be restricted in our ability to take certain capital actions (such as declaring dividends or repurchasing outstanding shares) or engage in certain business activities or acquisitions, which could compromise our competitive position. Additionally, our banking regulators have wide discretion in the examination and the enforcement of applicable banking statutes and regulations and may restrict our ability to engage in certain business activities or acquisitions or require us to maintain more capital. In 2024, we became a Category III firm for purposes of the U.S. federal bank regulatory agencies’ tailoring framework, resulting in us becoming subject to heightened regulatory expectations and more stringent regulatory requirements. As we continue to grow, these expectations and requirements may further increase, such as if we become a Category II firm, which may increase our compliance costs and adversely affect our business. Legislators and regulators continue to focus on the operation of card networks, including interchange fees paid to card issuers in payment networks such as Visa and Mastercard, network routing practices and the fees merchants are charged to accept cards. While in some cases our business is subject to exemptions related to certain of these regulations, there is no guarantee that such exemptions will continue to be available and even where we are not directly regulated, regulation of bankcard fees significantly negatively impacts the discount revenue derived from our business, including as a result of downward pressure on our discount rate from decreases in competitor pricing in connection with caps on interchange fees. In some cases, regulations also extend, or may extend, to certain aspects of our business, such as network and cobrand arrangements, new products or services we may offer, or the terms of card acceptance for merchants, including terms relating to non-discrimination and honor-all-cards. For example, we have exited our network licensing businesses in the EU and Australia as a result of regulation in those jurisdictions. In addition, there is uncertainty as to when or how interchange fee caps and other provisions of payments legislation might apply when we work with cobrand partners and agents in the EU. See “Supervision and Regulation — Payments Regulation” under “Business” for more information. Given differing interpretations by regulators and participants in cobrand arrangements, we are subject to regulatory action, penalties and the possibility we will not be able to maintain our existing cobrand and agent relationships in the EU. In addition, a number of federal and state laws to regulate various aspects of network operations are being considered or have passed, including regarding information associated with electronic transactions (such as the use of specific merchant categories codes or limitations on the use of transaction data) and pricing of electronic transactions (such as interchange fees on sales tax or gratuities). Legislators and regulators also continue to focus on consumer protection, including product design and pricing constructs, account management and security, credit bureau reporting, disclosure rules, marketing and debt collection practices. This focus has included fees associated with card and banking products, such as a rule issued by the CFPB related to credit card fees for late payments (which is currently stayed); interest rates, such as recent proposals to cap credit card interest rates; rewards programs, such as the recent inquiries by the CFPB and DOT focused on credit card and airline rewards programs; and factors considered by financial institutions in providing services, such as “fair access” laws. Any new requirements or increased enforcement of existing requirements could materially and adversely impact our revenue growth and profitability, including, as a result of increased scrutiny of our pricing, underwriting and account management practices; the imposition of fines and customer remediation; higher compliance costs; reputational harm; restrictions on our ability to issue cards, appropriately price for the value of our products or work with certain business partners; and changes to our business practices generally. We are subject to significant supervision and regulation with respect to compliance with AML/CFT laws, sanctions regimes and anti-corruption laws in numerous jurisdictions. As regulators increase their focus in these areas, new technologies such as digital currencies develop, near real-time money movement solutions are adopted, we introduce new products like checking accounts and geopolitical tensions increase, we face increased costs related to oversight, supervision and potential fines. Our AML/CFT, sanctions and anti-corruption compliance programs have become the subject of heightened scrutiny, and we are working to make enhancements to our existing programs, policies and procedures and to identify and remediate deficiencies. For example, we recently voluntarily reported certain transactions and accounts to OFAC, some of which related to Iran, as described in “Supervision and Regulation — Anti-Money Laundering, Countering the Financing of Terrorism, Economic Sanctions and Anti-Corruption Compliance” under “Business.” Errors, failures or delays in complying with AML/CFT, sanctions and anti-corruption laws, deficiencies in our related compliance programs or association of our business with money laundering, terrorist financing, tax fraud or other illicit activities or sanctioned persons, entities, governments or countries can give rise to significant supervisory, criminal and civil proceedings and lawsuits, which could result in significant penalties and forfeiture of assets, loss of licenses or restrictions on business activities, or other enforcement actions, and our reputation may suffer due to our customers’ association with certain countries, persons or entities or the existence of any such transactions. Additionally, our AML/CFT, sanctions and anti-corruption compliance programs may limit our ability to pursue certain business opportunities or affect our relationships with certain partners, service providers and other third parties. See “Supervision and Regulation” under “Business” for more information about certain laws and regulations to which we are subject and their impact on us. 31 31 31 Table of Contents Table of Contents

In certain countries, such as Australia (where surcharging is currently under reconsideration), Canada (other than in the Province of Quebec) and certain Member States in the EU, and in certain states in the United States, merchants are permitted by law to engage in surcharging, steering or other differential acceptance practices for certain card purchases and certain merchants and merchant organizations continue to push for these practices in other jurisdictions. In jurisdictions where surcharging is not prohibited, we have seen an increase in merchant surcharging on American Express cards, particularly in certain merchant categories, and in some cases, either the surcharge is greater than that applied to cards issued on competing networks or cards issued on competing networks are not surcharged at all (practices that are known as differential surcharging), even though there are many cards issued on competing networks that have an equal or greater cost of acceptance for the merchant. In addition to surcharging, we also encounter merchants that accept our cards, but tell their customers that they prefer to accept another type of payment or otherwise seek to suppress use of our cards or certain of our cards, such as limiting the use of our cards for certain transactions. Our Card Members value the ability to use their cards where and when they want to, and we, therefore, take steps to meet our Card Members’ expectations and to protect the American Express brand by prohibiting discrimination through provisions in our merchant contracts, including non-discrimination and honor-all-cards provisions, subject to local legal requirements. We generally do not prohibit surcharging in our agreements with merchants so long as it is permitted by law and a merchant does not discriminate against American Express cards by engaging in differential surcharging. 25 25 25 Table of Contents Table of Contents American Express cards could become less desirable to consumers and businesses generally due to surcharging, steering or other forms of discrimination, which could result in a decrease in cards-in-force, coverage and transaction volumes, including as a result of related actions we may take to enforce our merchant contractual provisions such as terminating merchant contracts. The impact could vary depending on such factors as: the industry or manner in which a surcharge is levied; how Card Members are surcharged or steered to other card products or payment forms at the point of sale; the ease and speed of implementation for merchants, merchant acquirers, processors, payment facilitators or other merchant service providers, including as a result of new or emerging technologies such as AI and agentic commerce; the size and recurrence of the underlying charges; and whether and to what extent these actions are applied to other forms of payment, including whether it varies depending on the type of card (e.g., credit or debit), product, network, acquirer or issuer. We also increasingly rely on merchant acquirers, processors and payment facilitators to manage certain aspects of our merchant relationships and promote and support the acceptance and usage of our cards, but they may have business interests, strategies or goals that are inconsistent with ours. Discrimination against American Express cards could have a material adverse effect on our business, financial condition and results of operations, particularly where it only or disproportionately impacts credit card usage or card usage generally, our Card Members or our business.

In certain countries, such as Australia, Canada (other than in the Province of Quebec) and certain Member States in the EU, and in certain states in the United States, merchants are permitted by law to engage in surcharging, steering or other differential acceptance practices for certain card purchases and certain merchants and merchant organizations continue to push for these practices in other jurisdictions. In jurisdictions allowing surcharging, we have seen an increase in merchant surcharging on American Express cards, particularly in certain merchant categories, and in some cases, either the surcharge is greater than that applied to Visa and Mastercard cards or Visa and Mastercard cards are not surcharged at all (practices that are known as differential surcharging), even though there are many cards issued on competing networks that have an equal or greater cost of acceptance for the merchant. We also encounter merchants that accept our cards, but tell their customers that they prefer to accept another type of payment or otherwise seek to suppress use of our cards or certain of our cards, such as limiting the use of our cards for certain transactions. Our Card Members value the ability to use their cards where and when they want to, and we, therefore, take steps to meet our Card Members’ expectations and to protect the American Express brand by prohibiting discrimination through provisions in our merchant contracts, including non-discrimination and honor-all-cards provisions, subject to local legal requirements. We have increasingly relied on merchant acquirers, aggregators and processors to manage certain aspects of our merchant relationships. When we work with such third parties, we are dependent on them to promote and support the acceptance and usage of our cards, but they may have business interests, strategies or goals that are inconsistent with ours. Recently introduced products, such as debit cards on the American Express network, could fail to gain market acceptance and American Express cards could become less desirable to consumers and businesses generally due to surcharging, steering or other 26 26 26 Table of Contents Table of Contents forms of discrimination, which could result in a decrease in cards-in-force, coverage and transaction volumes. The impact could vary depending on such factors as: the industry or manner in which a surcharge is levied; how Card Members are surcharged or steered to other card products or payment forms at the point of sale; the ease and speed of implementation for merchants, merchant acquirers, aggregators, processors or other merchant service providers, including as a result of new or emerging technologies; the size and recurrence of the underlying charges; and whether and to what extent these actions are applied to other forms of payment, including whether it varies depending on the type of card (e.g., credit or debit), product, network, acquirer or issuer. Discrimination against American Express cards could have a material adverse effect on our business, financial condition and results of operations, particularly where it only or disproportionately impacts credit card usage or card usage generally, our Card Members or our business.

Geopolitical conditions, terrorist attacks, military conflicts, supply chain issues, natural disasters, severe weather, widespread health emergencies or pandemics, information or cybersecurity incidents (including intrusion into or degradation or unavailability of systems or technology by cyberattacks), operational incidents and other catastrophic events can have a material adverse effect on our business. Political and social conditions, including geopolitical instability (such as from tensions involving China and the United States), fiscal and monetary policies (including developments related to the U.S. federal deficit, debt ceiling, government shutdowns and other budgetary issues), trade wars and tariffs, labor shortages, regional or domestic hostilities, economic sanctions and the prospect or occurrence of more widespread conflicts could also negatively affect our business, operations and partners, consumer and business spending, including travel patterns and business investment, and demand for credit. Pandemics and other health emergencies can have widespread and unpredictable impacts on global society, economic conditions and consumer and business behavior. Because we derive a portion of our revenues from travel-related spending and many of our partners’ businesses relate to travel, our business is sensitive to impacts to travel and tourism, such as health and safety concerns and limitations on travel and mobility. In addition, disruptions in air travel and other forms of travel can result in the payment of claims under travel protection products we offer. We are a multinational company that derives a substantial portion of its revenues from activities outside of the United States and many of our U.S. customers have an international presence or are otherwise affected by global developments. Accordingly, events that impact international relations and geopolitical stability may have a significant impact on our business. For example, several countries have implemented and are considering the further implementation of tariffs, trade barriers or restrictions and other retaliatory international or domestic policies, as well as other measures affecting cross-border commerce, migration and the flow of information. These actions have had and may likely continue to have broad consequences for the global economy and regional and country economies, as well as impacts to global supply chains and negative effects on our customers and partners, which may adversely affect our business. There are multiple ongoing military conflicts around the world and geopolitical tensions may result in additional conflicts or escalate existing conflicts. Such conflicts have led to economic uncertainty and market disruptions. For example, as a result of the Russian invasion of Ukraine, we exited our business operations in Russia and Belarus. Geopolitical conditions may adversely affect macroeconomic conditions and our business in a number of ways, including potential retaliatory action against companies such as us and our clients and partners, further sanctions activity and export controls, heightened regulatory scrutiny, increased inflation, further increases or fluctuations in goods and energy prices, decreases in global travel, further disruptions to the global 22 22 22 Table of Contents Table of Contents supply chain and increased prevalence and sophistication of cyberattacks. If international political instability and geopolitical tensions continue or increase, our business and results of operations could be harmed. Hurricanes, wildfires and other natural disasters have impacted, and may continue to impact, spending and credit performance in the areas affected. Disasters and catastrophic events, and the impact of such events on certain industries or the overall economy, could have a negative effect on our business, results of operations and infrastructure, including our technology and systems and those of our partners and suppliers. Climate-related risks may exacerbate certain of these threats, including the frequency and severity of weather-related events. Card Members in California, Florida, New York, Texas, Georgia and New Jersey account for a significant portion of U.S. consumer and small business billed business and Card Member loans, and our results of operations could be impacted by events or conditions that disproportionately or specifically affect one or more of those states.

Geopolitical conditions, terrorist attacks, military conflicts, supply chain issues, natural disasters, severe weather, widespread health emergencies or pandemics, information or cybersecurity incidents (including intrusion into or degradation or unavailability of systems or technology by cyberattacks), operational incidents and other catastrophic events can have a material adverse effect on our business. Political and social conditions, including geopolitical instability (such as from tensions involving China and the U.S.), fiscal and monetary policies (including developments related to the U.S. federal deficit, debt ceiling, government shutdowns and other budgetary issues), trade wars and tariffs, labor shortages, regional or domestic hostilities, economic sanctions and the prospect or occurrence of more widespread conflicts could also negatively affect our business, operations and partners, consumer and business spending, including travel patterns and business investment, and demand for credit. Pandemics and other health emergencies can have widespread and unpredictable impacts on global society, economic conditions and consumer and business behavior, which may reoccur or occur over an extended duration, such as the macroeconomic and behavioral impacts during the COVID-19 pandemic. Because we derive a portion of our revenues from travel-related spending and many of our partners’ businesses relate to travel, our business is sensitive to impacts to travel and tourism, such as health and safety concerns and limitations on travel and mobility. In addition, disruptions in air travel and other forms of travel can result in the payment of claims under travel protection products we offer. A number of actions are taking place across the globe that impact geopolitical stability. Several countries are considering or have implemented tariffs or other trade barriers or restrictions, as well as other measures affecting cross-border commerce and the flow of information, which could have broad economic consequences, impact global supply chains and negatively affect our business, customers and partners. There are multiple ongoing military conflicts (such as the Russia-Ukraine and Middle East conflicts) and geopolitical tensions may result in additional conflicts or escalate existing conflicts. Following the Russian invasion of Ukraine, we announced that we suspended business operations in Russia and Belarus, and these conflicts have led to economic uncertainty and market disruptions, including the imposition of sanctions and export controls. The broader consequences remain uncertain, but geopolitical conditions may adversely affect macroeconomic conditions and our business in a number of ways, including regional 23 23 23 Table of Contents Table of Contents instability, increased prevalence and sophistication of cyberattacks, potential retaliatory action against companies such as us, further sanctions activity and related regulatory scrutiny, increased inflation, further increases or fluctuations in commodity and energy prices, decreases in global travel and further disruptions to the global supply chain. If international political instability and geopolitical tensions continue or increase, our business and results of operations could be harmed. Hurricanes, wildfires and other natural disasters have impacted, and may continue to impact, spending and credit performance in the areas affected. For example, there can be no assurance as to the ultimate impact of the Los Angeles area wildfires on spending levels and credit performance. Disasters and catastrophic events, and the impact of such events on certain industries or the overall economy, could have a negative effect on our business, results of operations and infrastructure, including our technology and systems. Climate-related risks may exacerbate certain of these threats, including the frequency and severity of weather-related events. Card Members in California, Florida, New York, Texas, Georgia and New Jersey account for a significant portion of U.S. consumer and small business billed business and Card Member loans, and our results of operations could be impacted by events or conditions that disproportionately or specifically affect one or more of those states.

We consider operational risk as the risk to our current or projected financial condition and resilience arising from inadequate or failed processes, human error or adverse external events. Operational risk includes, among others, the risk that error or misconduct could result in a material financial misstatement, a failure to monitor a third party’s compliance with regulatory or legal requirements, a failure to adequately monitor and control access to, or use of, data in our systems we grant to third parties or a failure to satisfy our obligations to our customers with respect to our products and services. For example, as previously disclosed, we have identified issues related to our rewards and benefits programs and have taken actions to remediate the issues and enhance our related procedures and controls. As processes or organizations are changed or become more complex, we grow in size or acquire businesses, new products and services are introduced, such as new lending features, banking products, dining capabilities and digital collectibles, or we become subject to more stringent or complicated regulatory requirements, we may not identify or address new operational risks. Through human error, fraud or malfeasance, conduct risk can result in harm to customers, legal liability, fines, sanctions, customer remediation and brand damage. Although we maintain systems and controls to help mitigate conduct risk, they may not be effective, and misconduct by one or more colleagues or partners, particularly those with access to key systems or information, could have wide-reaching consequences. Compliance risk arises from violations of, or failure to conform or comply with, laws and/or regulations, internal policies and procedures and related practices, or ethical standards. We need to continually update and enhance our control environment to address operational and compliance risks, and our control environment and related systems have in certain instances not sufficiently detected, and may in the future not sufficiently detect, errors or omissions. Operational and compliance failures, deficiencies in our control environment or an inability to maintain high standards of business conduct can expose us to reputational and legal risks as well as fines, civil money penalties or payment of damages and can lead to diminished business opportunities and diminished ability to expand key operations.

We consider operational risk to be the risk of loss due to, among other things, inadequate or failed processes, people or information systems, or impacts from the external environment, including failures to comply with laws and regulations as well as impacts from relationships with third parties. Operational risk includes, among others, the risk that error or misconduct could result in a material financial misstatement, a failure to monitor a third party’s compliance with regulatory or legal requirements, a failure to adequately monitor and control access to, or use of, data in our systems we grant to third parties or a failure to satisfy our obligations to our customers with respect to our products and services (e.g., rewards and benefits). As processes or organizations are changed or become more complex, we grow in size, new products and services are introduced, such as new lending features, banking products, dining capabilities and digital collectibles, or we become subject to more stringent or complicated regulatory requirements, we may not identify or address new operational risks. Through human error, fraud or malfeasance, conduct risk can result in harm to customers, legal liability, fines, sanctions, customer remediation and brand damage. Compliance risk arises from violations of, or failure to conform or comply with, laws, rules, regulations, internal policies and procedures and ethical standards. We need to continually update and enhance our control environment to address operational and compliance risks, and our control environment and related systems have in certain instances not sufficiently detected, and may in the future not sufficiently detect, errors or omissions. Operational and compliance failures, deficiencies in our control environment or an inability to maintain high standards of business conduct can expose us to reputational and legal risks as well as fines, civil money penalties or payment of damages and can lead to diminished business opportunities and diminished ability to expand key operations.

Revenue growth is dependent on increasing consumer and business spending on our cards, growing loan balances and increasing fee revenue. We have been investing in a number of growth initiatives, including to attract new Card Members, retain existing Card Members, grow merchant acceptance and capture a greater share of customers’ total spending and borrowings. We have also introduced complementary products, such as travel and dining platforms, checking accounts, debit cards and expense management tools. There can be no assurance that our investments will continue to be effective, particularly as consumer and business behaviors continue to change and competition in the payments industry remains intense. Increasing spending on our cards also depends on our continued expansion of merchant acceptance of our cards. If we are unable to continue growing merchant acceptance and perceptions of coverage, or if merchants decide to no longer accept American Express cards or more greatly engage in surcharging, steering or other differential acceptance practices, our business could suffer. As the payments industry continues to evolve, we may expand our product and service offerings, which could include offering new payment mechanisms or additional complementary products, or shift the focus of our investments. We may also add customer acquisition channels and form new partnerships or renew current partnerships. Any of these initiatives could have higher costs than our current arrangements, fail to resonate with customers, adversely impact our merchant discount rates and existing product and service offerings or dilute our brand. Another way we invest in customer value is through a range of Card Member rewards and benefits, including our Membership Rewards program. We rely on third parties for certain Membership Rewards redemption options, statement credits, Card Member offers, travel- and dining-related benefits and other rewards and benefits, and we may modify or not be able to continue to offer such rewards and benefits in the future, which could diminish the value of our cards. Many credit card issuers and certain other companies have developed rewards and cobrand programs and other benefits and services that are similar to ours and may be more attractive. An inability to differentiate our products and services could materially adversely affect us. We may not be able to cost-effectively manage and expand Card Member benefits, including containing the growth of marketing, promotion, rewards and Card Member services expenses in the future, and our ability to do so will depend in part on our ability to attract value from partners. In addition, to the extent our products or offers attract customers looking for short-term incentives and fail to incentivize long-term loyalty, costs and Card Member attrition could increase. Any significant change in, or failure by management to reasonably estimate, usage of Card Member services, redemptions of Membership Rewards points and statement credit offers and associated costs could adversely affect our profitability. If our expenses significantly increase beyond our expectations, we may be unable to offset the financial impact by decreasing investments in other areas of the business or operating expenses or increasing revenues such as fee-based revenues, or both, particularly in the current regulatory and competitive environment.

Revenue growth is dependent on increasing consumer and business spending on our cards, growing loan balances and increasing fee revenue. We have been investing in a number of growth initiatives, including to attract new Card Members, retain existing Card Members and capture a greater share of customers’ total spending and borrowings. There can be no assurance that our investments will continue to be effective, particularly as consumer and business behaviors continue to change. In addition, to the extent our products or offers attract customers looking for short-term incentives rather than incentivize long-term loyalty, Card Member attrition and costs could increase. Increasing spending on our cards also depends on our continued expansion of merchant acceptance of our cards. If we are unable to continue growing merchant acceptance and perceptions of coverage, or if merchants decide to no longer accept American Express cards or more greatly engage in surcharging, steering or other differential acceptance practices, our business could suffer. Expanding our product and service offerings, adding customer acquisition channels and forming new partnerships or renewing current partnerships could have higher costs than our current arrangements, fail to resonate with customers, adversely impact our merchant discount rates or dilute our brand. Another way we invest in customer value is through our Membership Rewards program, as well as other Card Member benefits. Any significant change in, or failure by management to reasonably estimate, actual redemptions of Membership Rewards points and associated redemption costs could adversely affect our profitability. We rely on third parties for certain redemption options, Card Member offers and other rewards and benefits, and we may modify or not be able to continue to offer such rewards and benefits in the future, which could diminish the value of the program for our Card Members. In addition, many credit card issuers and certain other companies have instituted rewards and cobrand programs and other benefits and services that are similar to ours and may be more attractive. An inability to differentiate our products and services could materially adversely affect us. We may not be able to cost-effectively manage and expand Card Member benefits, including containing the growth of marketing, promotion, rewards and Card Member services expenses in the future, and our ability to do so will depend in part on our ability to attract value from partners. If such expenses increase beyond our expectations, we will need to find ways to offset the financial impact by increasing other areas of revenues such as fee-based revenues, decreasing operating expenses or other investments in our business, or both. We may not succeed in doing so, particularly in the current competitive and regulatory environment, which has included heightened scrutiny on credit card rewards programs. In addition, increased costs as a result of business and economic conditions may require that we reduce investments in other areas.

Our industry is subject to rapid and significant technological changes. In order to compete in our industry, we need to continue to invest in technology across all areas of our business, including in transaction processing, data management and analytics, AI & ML (including agentic commerce), customer interactions and communications, open banking and alternative payment and financing mechanisms (including related to digital currencies and blockchain technologies), authentication technologies and digital identification, tokenization, real-time settlement and risk management and compliance systems. Incorporating new technologies into our products and services, including developing the appropriate governance and controls consistent with regulatory expectations, requires substantial expenditures and takes considerable time, and may have unintended consequences or ultimately be unsuccessful. We expect that new technologies in the payments industry will continue to emerge, and these new technologies may be superior to, or render obsolete, our existing technology. The process of developing new products and services, enhancing existing products and services and adapting to technological changes and evolving industry standards is complex, costly and uncertain, and any failure by us to accurately anticipate and respond to customers’ changing needs and emerging technological trends could significantly impede our ability to compete effectively. Our competitors may develop, or partner with companies that develop, products, platforms or technologies that become more widely adopted by consumers, merchants or service providers than ours, including as a result of increased involvement by technology companies in the payments industry and our competitors’ greater scale or ability to pursue and adopt new technologies. In addition, we may underestimate the resources needed and overestimate our ability to develop new products and services and customer demand for such products and services, particularly beyond our traditional card products and travel-related services. The use of AI & ML technologies, including generative AI and agentic commerce, has increased rapidly and may be transformative to the payments industry, heightening the risks described herein and others in ways that may be unpredictable and disadvantageous to us. Our and our partners’ use of AI & ML is subject to various and evolving risks, including flaws in models or datasets that may result in biased or inaccurate results, especially as generative AI has been known to produce false or “hallucinatory” inferences or outputs. The use of AI may also result in unintended or unexpected outcomes, present significant ethical challenges and heighten risks related to information security, the infringement of intellectual property rights and exposure of proprietary or personal information. We may also face challenges in our ability to safely deploy AI systems and implement appropriate governance and controls, which may not be as burdensome to our competitors, and which may impair our implementation or impose additional risks. The complexity of these technologies can make it difficult to assess proper operation, reduce error, or understand and explain their outputs. Adverse consequences of AI & ML remain uncertain but could include flaws in the decisions, predictions, outputs or analysis such technologies produce, subjecting us to competitive harm, legal liability, heightened regulatory scrutiny, greater prevalence of surcharging or other negative point-of-sale practices and brand or reputational harm, as well as decreased demand for our products and services or increased costs. Our ability to adopt new technologies may be inhibited by the emergence of industry-wide standards, a changing legislative and regulatory environment, an inability to develop appropriate governance and controls, a lack of internal product and engineering expertise, resistance to change from Card Members, merchants or service providers, lack of appropriate change management processes or the complexity of our systems. In addition, our adoption of new technologies and our introduction of new products and services may increase operational complexity and risk, and expose us to new or enhanced risks, particularly in areas where we have less experience or our existing governance and control systems may be insufficient, which could require us to make substantial expenditures or subject us to legal liability, heightened regulatory scrutiny and brand or reputational harm.

Our industry is subject to rapid and significant technological changes. In order to compete in our industry, we need to continue to invest in technology across all areas of our business, including in transaction processing, data management and analytics, machine learning and artificial intelligence, customer interactions and communications, open banking and alternative payment and financing mechanisms, authentication technologies and digital identification, tokenization, real-time settlement and risk management and compliance systems. Incorporating new technologies into our products and services, including developing the appropriate governance and controls consistent with regulatory expectations, requires substantial expenditures and takes considerable time, and may have unintended consequences or ultimately be unsuccessful. We expect that new technologies in the payments industry will continue to emerge, and these new technologies may be superior to, or render obsolete, our existing technology. The process of developing new products and services, enhancing existing products and services and adapting to technological changes and evolving industry standards is complex, costly and uncertain, and any failure by us to anticipate customers’ changing needs and emerging technological trends accurately could significantly impede our ability to compete effectively. Our competitors may develop products, platforms or technologies that become more widely adopted by consumers, merchants or service providers than ours, including as a result of increased involvement by technology companies in the payments industry and our competitors’ greater scale or ability to pursue and adopt new technologies. In addition, we may underestimate the resources needed and overestimate our ability to develop new products and services, particularly beyond our traditional card products and travel-related services. The use of artificial intelligence and machine learning technologies, including generative artificial intelligence, has increased rapidly with the increasing sophistication and applications of the technology. Our and our partners’ use of artificial intelligence and machine learning is subject to various risks including flaws in models or datasets that may result in biased or inaccurate results, unintended or unexpected outcomes, ethical considerations regarding artificial intelligence, infringement of intellectual property rights, exposure of proprietary or personal information, heightened security risks and the ability to safely deploy and implement governance and controls for artificial intelligence systems. The complexity of these technologies can make it difficult to assess proper operation, reduce error, or understand and explain their outputs. Adverse consequences of artificial intelligence and machine learning remain uncertain but could include flaws in the decisions, predictions, outputs or analysis such technologies produce and subjecting us to competitive harm, legal liability, heightened regulatory scrutiny and brand or reputational harm. Our ability to adopt new technologies may be inhibited by the emergence of industry-wide standards, a changing legislative and regulatory environment, an inability to develop appropriate governance and controls, a lack of internal product and engineering expertise, resistance to change from Card Members, merchants or service providers, lack of appropriate change management processes or the complexity of our systems. In addition, our adoption of new technologies and our introduction of new products and services may increase operational complexity and risk, and expose us to new or enhanced risks, particularly in areas where we have less experience or our existing governance and control systems may be insufficient, which could require us to make substantial expenditures or subject us to legal liability, heightened regulatory scrutiny and brand or reputational harm.

As a financial institution, we are subject to extensive and complex capital and liquidity requirements. Our failure to meet current or future requirements, whether as a result of adverse business developments or changes in the applicable requirements, could compromise our competitive position and result in restrictions imposed by the Federal Reserve, or the OCC with respect to AENB, including limiting our ability to pay dividends, repurchase our capital stock, invest in our business, expand our business or engage in acquisitions. Some elements of the capital and liquidity regimes are not yet final and certain developments could significantly impact the requirements applicable to financial institutions. For example, if the U.S. federal bank regulatory agencies adopt the 2017 Basel Committee standards revisions to the standardized approach for credit risk and operational capital requirements, it could result in significantly higher regulatory capital requirements. In addition, it may be necessary for us to hold additional capital because of an increase in the SCB requirement based on results from a supervisory stress test. Compliance with capital adequacy and liquidity rules requires a material investment of resources and may be affected by unforeseen events impacting our business or general economic conditions. An inability to meet regulatory expectations regarding our compliance with applicable capital adequacy and liquidity rules or supervisory expectations regarding capital and liquidity risk management capabilities and practices may also negatively impact the assessment of us and AENB by federal banking regulators. Additionally, as a Category III firm, we are subject to more stringent capital and liquidity requirements, which may further increase if we grow to become a Category II firm. For more information on capital adequacy requirements, see “Supervision and Regulation — Capital and Liquidity Regulation” under “Business.”

Failure to meet current or future capital or liquidity requirements could compromise our competitive position and could result in restrictions imposed by the Federal Reserve, or the OCC with respect to AENB, including limiting our ability to pay dividends, repurchase our capital stock, invest in our business, expand our business or engage in acquisitions. Some elements of the capital and liquidity regimes are not yet final and certain developments could significantly impact the requirements applicable to financial institutions. For example, in 2023 the U.S. federal bank regulatory agencies proposed capital rules that would result in significantly higher regulatory capital requirements for us and rules that would require us and AENB to issue and/or maintain minimum amounts of eligible long-term debt with specific terms. In addition, it may be necessary for us to hold additional capital because of an increase in the SCB requirement based on results from a supervisory stress test. Compliance with capital adequacy and liquidity rules requires a material investment of resources. An inability to meet regulatory expectations regarding our compliance with applicable capital adequacy and liquidity rules or supervisory expectations regarding capital and liquidity risk management capabilities and practices may also negatively impact the assessment of us and AENB by federal banking regulators. Additionally, we are subject to more stringent capital and liquidity requirements as a result of becoming a Category III firm, which may further increase if we grow to become a Category II firm. For more information on capital adequacy requirements, see “Supervision and Regulation — Capital and Liquidity Regulation” under “Business.” 35 35 35 Table of Contents Table of Contents

We are subject to income and other taxes in the United States and in various foreign jurisdictions. The laws and regulations related to tax matters are extremely complex, require significant judgment and are subject to varying interpretations. Although management believes our positions are reasonable, they are subject to challenge by the Internal Revenue Service in the United States and by tax authorities in other jurisdictions in which we conduct business operations, which could have an adverse impact on our tax liabilities. Refer to Note 19 to the “Consolidated Financial Statements” for information on the U.S. federal income tax audit of transfer pricing arrangements between our U.S. and foreign subsidiaries. We are being challenged in a number of countries regarding our application of value-added taxes (VAT) to certain transactions. While we believe we comply with all applicable VAT and other tax laws, rules and regulations in the relevant jurisdictions, the tax 33 33 33 Table of Contents Table of Contents authorities may determine that we owe additional taxes or apply existing laws and regulations more broadly, which could result in a significant increase in liabilities for taxes and interest in excess of accrued liabilities. Legislative action or inaction in the jurisdictions in which we have operations could increase our effective tax rate. For example, guidelines issued by the Organization for Economic Cooperation and Development introduced a global minimum tax of 15 percent on the global profits of multinational enterprises, such as us. The global minimum tax increased our tax liability in 2025 as it came into effect in various jurisdictions where we operate and we expect the global minimum tax will continue to increase our tax liability in 2026 if it continues to be in effect in its current form. Jurisdictions may also make changes related to the tax treatment of card transactions, such as imposing taxes on Card Member rewards or prohibiting interchange fees on sales tax, which could decrease the value we provide to customers and adversely impact our business.

We are subject to income and other taxes in the United States and in various foreign jurisdictions. The laws and regulations related to tax matters are extremely complex, require significant judgment and are subject to varying interpretations. Although management believes our positions are reasonable, they are subject to challenge by the Internal Revenue Service in the United States and by tax authorities in other jurisdictions in which we conduct business operations, which could have an adverse impact on our tax liabilities. Refer to Note 20 to the “Consolidated Financial Statements” for information on the U.S. federal income tax audit of transfer pricing arrangements between our U.S. and foreign subsidiaries. We are being challenged in a number of countries regarding our application of value-added taxes (VAT) to certain transactions. While we believe we comply with all applicable VAT and other tax laws, rules and regulations in the relevant jurisdictions, the tax authorities may determine that we owe additional taxes or apply existing laws and regulations more broadly, which could result in a significant increase in liabilities for taxes and interest in excess of accrued liabilities. Legislative action or inaction in the countries in which we have operations could increase our effective tax rate. For example, new guidelines issued by the Organization for Economic Cooperation and Development (OECD) will impact how multinational enterprises (MNEs) are taxed on their global profits. In particular, the OECD’s guidelines on a global minimum tax of 15 percent will impact the effective tax rate for many MNEs. Many countries have already implemented these minimum tax guidelines, with effective dates commencing in 2024. We expect that these minimum tax guidelines in their current form would increase our effective tax rate in future years. Furthermore, various provisions of the Tax Cut and Jobs Act will expire in 2025 unless extended. As a result, U.S. Congress may seek to enact significant tax legislation in the new session of Congress, which could result in higher levels of U.S. tax on our global operations, increasing our effective tax rate. Jurisdictions may also make changes related to the tax treatment of card transactions, such as imposing taxes on Card Member rewards or prohibiting interchange fees on sales tax, which could decrease the value we provide to customers and adversely impact our business.

We rely upon our colleagues not only for business success, but also to adhere to our Blue Box Values, which include acting with integrity, promoting a culture of respect and operating with a mindset of controls and risk management. To the extent our colleagues behave in a manner that does not comport with our company’s values, including acting in ways that harm customers, colleagues or others, the consequences to our brand, reputation and compliance and risk management efforts could be severe and could negatively affect our financial condition and results of operations. The market for qualified, highly motivated individuals with a range of perspectives is highly competitive and we may not be able to attract and retain such individuals. Advances in technology such as AI may increase competition for individuals with expertise in key skills and require our colleagues to adapt to new skills and methods of working. The unexpected loss of key personnel or our inability to effectively execute succession planning for such personnel could disrupt our business and have an adverse impact on our future performance. Changes in immigration and work permit laws and regulations or the administration or enforcement of such laws or regulations or other changes in the legal or regulatory environment can also impair our ability to attract and retain qualified personnel, or to employ colleagues in the location(s) of our choice. Our compensation practices are subject to regulatory review and oversight, which could further affect our ability to attract and retain our executive officers and other key personnel. Our inability to attract, develop and retain highly skilled and motivated personnel with a range of perspectives could materially adversely affect our business and our culture.

We rely upon our colleagues not only for business success, but also to act with integrity and promote a culture of respect. To the extent our colleagues behave in a manner that does not comport with our company’s values, the consequences to our brand and reputation could be severe and could negatively affect our financial condition and results of operations. The market for qualified, highly motivated individuals with diverse perspectives is highly competitive and we may not be able to attract and retain such individuals. The unexpected loss of key personnel could disrupt our business and have an adverse impact on our future performance. Changes in immigration and work permit laws and regulations or the administration or enforcement of such laws or regulations or other changes in the legal or regulatory environment can also impair our ability to attract and retain qualified personnel, or to employ colleagues in the location(s) of our choice. Our compensation practices are subject to review and oversight by the Federal Reserve and the compensation practices of AENB are subject to review and oversight by the OCC. This regulatory review and oversight could further affect our ability to attract and retain our executive officers and other key personnel. Our inability to attract, develop and retain highly skilled, motivated and diverse personnel could materially adversely affect our business and our culture.

Legislators and regulators in the United States and other countries in which we operate are increasingly adopting or revising privacy, data protection, data management, resiliency, data transfer, third party oversight, account access, AI & ML and information security and cybersecurity laws, including data localization, authentication and notification laws. As such laws are interpreted and applied (in some cases with significant differences or conflicting requirements across jurisdictions), compliance and technology costs will continue to increase. Additionally, automated decision making and AI & ML technologies, including the adoption of agentic commerce, present novel and complex legal risks, often with limited established guidance and significant uncertainty. New laws and regulations related to these technologies, as well as the application of existing laws and regulations, may restrict or impose burdensome and costly requirements on our ability to use them or impact other aspects of our business, particularly as the legal landscape related to these technologies remains fragmented with potentially inconsistent requirements. Compliance with current or future laws in the aforementioned areas could significantly impact our business operations, including our collection, use, sharing, retention and safeguarding of consumer, partner and/or colleague information and could restrict our ability to fully maximize our integrated payments platform or provide certain products and services or work with certain service providers, which could materially and adversely affect our profitability. Our failure to comply with such laws, including as a result of process breakdowns, human error or technical issues, or to maintain sufficient governance and control structures could result in potentially significant regulatory and/or governmental investigations and/or actions, litigation, fines, sanctions, ongoing regulatory monitoring, customer attrition, decreases in the use or acceptance of our cards and damage to our reputation and our brand. In recent years, there has been increasing regulatory enforcement and litigation activity in the areas of privacy, data protection, data management, AI & ML and information security and cybersecurity in the United States, the EU and various other countries in which we operate and our data protection and governance programs have become the subject of heightened scrutiny. For more information on regulatory and legislative activity in this area, see “Supervision and Regulation — Privacy, Data Protection, Data Management, AI, Resiliency, Information Security and Cybersecurity” under “Business.”

Legislators and regulators in the United States and other countries in which we operate are increasingly adopting or revising privacy, data protection, data management, resiliency, data transfer, third party oversight, account access, artificial intelligence and machine learning and information security and cybersecurity laws, including data localization, authentication and notification laws. As such laws are interpreted and applied (in some cases, with significant differences or conflicting requirements across jurisdictions), compliance and technology costs will continue to increase, particularly in the context of ensuring that adequate privacy, data protection, data management, incident management, resiliency, third party management, data transfer, security controls, account access mechanisms and controls related to artificial intelligence and machine learning are in place. Additionally, new laws and regulations related to automated decision making, artificial intelligence and machine learning as well as the application of existing laws and regulations to these technologies may restrict or impose burdensome and costly requirements on our ability to use them or impact other aspects of our business. Compliance with current or future laws in the aforementioned areas could significantly impact our business operations, including our collection, use, sharing, retention and safeguarding of consumer and/or colleague information and could restrict our ability to fully maximize our integrated payments platform or provide certain products and services or work with certain service providers, which could materially and adversely affect our profitability. Our failure to comply with such laws or to maintain sufficient governance and control structures could result in potentially significant regulatory and/or governmental investigations and/or actions, litigation, fines, sanctions, ongoing regulatory monitoring, customer attrition, decreases in the use or acceptance of our cards and damage to our reputation and our brand. In recent years, there has been increasing regulatory enforcement and litigation activity in the areas of privacy, data protection, data management, artificial intelligence and machine learning and information security and cybersecurity in the United States, the EU and various other countries in which we operate and our data protection and governance programs have become the subject of heightened scrutiny. For more information on regulatory and legislative activity in this area, see “Supervision and Regulation — Privacy, Data Protection, Data Management, Artificial Intelligence, Resiliency, Information Security and Cybersecurity” under “Business.”

We use models and automation throughout our business, including to inform and support decision making, manage risks, estimate financial values and forecast liquidity and funding needs. Although we have a governance framework for model development and independent model validation, the modeling methodology or key assumptions could be erroneous or the models could be misused. In addition, issues with completeness, accuracy and timeliness of data inputs, the quality or effectiveness of our data aggregation and validation procedures, and the quality and integrity of formulas and algorithms, could result in ineffective or inaccurate model outputs and reports. Models based on historical data sets might not be accurate predictors of future outcomes, such as when we lack recent precedent or recent precedent deviates from current circumstances because of changes in customer behavior, the credit or demographic profiles of our Card Members, the geopolitical or macroeconomic environment or otherwise. We periodically review our models, and updates that we make may result in significantly different outputs. Additionally, we increasingly use models that leverage AI, which are subject to additional risks such as biased or inaccurate results or lowered interpretability. The complexity of these models and our limited transparency into the AI may make it difficult to understand certain outputs or identify errors. Certain models, such as models used to estimate reserves for credit losses under Current Expected Credit Loss (CECL) and Membership Rewards liability, require us to make difficult, subjective and complex judgments, and utilize forward-looking information and information provided by third parties over which we have limited oversight or control. If our business decisions, risk management practices or financial estimates and forecasts are based on incorrect or misused models and assumptions or we fail to manage data inputs effectively and to aggregate or analyze data in an accurate and timely manner, our results of operations and financial condition may be materially adversely affected. 32 32 32 Table of Contents Table of Contents

We use models and automation throughout our business, including to inform and support decision making, manage risks and estimate financial values. Although we have a governance framework for model development and independent model validation, the modeling methodology or key assumptions could be erroneous or the models could be misused. In addition, issues with the quality or effectiveness of our data aggregation and validation procedures, as well as the quality and integrity of data inputs, could result in ineffective or inaccurate model outputs and reports. For example, models based on historical data sets might not be accurate predictors of future outcomes, such as because of changes in the credit profile of our Card Members, and they may not be able to predict future outcomes. Additionally, we increasingly use models that leverage artificial intelligence, which are subject to additional risks such as biased or inaccurate results or lowered interpretability. Our models also may not be able to function properly in the current geopolitical and macroeconomic environment given the lack of recent precedent. Certain models, such as models for credit loss accounting under Current Expected Credit Loss (CECL) and Membership Rewards liability, require us to make difficult, subjective and complex judgments, and utilize forward-looking information. If our business decisions or financial estimates are based on incorrect or misused models and assumptions or we fail to manage data inputs effectively and to aggregate or analyze data in an accurate and timely manner, our results of operations and financial condition may be materially adversely affected. 34 34 34 Table of Contents Table of Contents

We had net interest income of approximately $17.4 billion for the year ended December 31, 2025. Changes in interest rates could adversely affect our net interest yield, and consequently our net interest income and results of operations, including if our borrowing costs and the interest we pay on deposits increase at a greater magnitude than the rate of interest we earn on our loans. In addition, interest rate changes or prolonged periods of elevated or depressed rates may affect customer behavior, such as by impacting the balances Card Members carry on their cards or their ability to make payments to us, general spending and economic activity, or the demand for deposit accounts. While we take actions to mitigate interest risk, such as employing hedging strategies and changing the rates we pay on deposits, these actions may not be effective and we may be limited in our ability to maintain the spread between our borrowing costs and our interest income, whether as a result of changes in benchmark rates, regulation, the competitive environment, customer behavior or otherwise. For a further discussion of our interest rate risk, see “Risk Management ― Market Risk Management Process” under “MD&A.”

We had net interest income of approximately $15.5 billion for the year ended December 31, 2024. If the rate of interest we pay on our borrowings increases more or decreases less than the rate of interest we earn on our loans, our net interest yield, and consequently our net interest income, could decrease. We expect the rates we pay on our deposits will change as benchmark interest rates change. For example, the Federal Reserve and other central banks have raised interest rates in response to heightened inflationary pressures. In addition, interest rate changes may affect customer behavior, such as impacting the loan balances Card Members carry on their credit cards or their ability to make payments as higher interest rates lead to higher payment requirements, further impacting our results of operations. For a further discussion of our interest rate risk, see “Risk Management ― Market Risk Management Process” under “MD&A.”