Capital One Financial Corporation: 10-K Risk Factor Changes

Climate change risks can manifest as physical or transition risks. Physical risks are the risks from the effects of climate change arising from acute, climate-related events, such as hurricanes, flooding and wildfires, and chronic shifts in climate, such as sea level rise and higher average temperatures. Such events could 50Capital One Financial Corporation (COF) 50Capital One Financial Corporation (COF) 50Capital One Financial Corporation (COF) 50 Table of Contents Table of Contents lead to financial losses or disrupt our operations or those of our customers or third parties on which we rely, including through direct damage to assets and indirect impacts from supply chain disruption and market volatility. Transition risks are the risks resulting from the shift toward a lower-carbon economy arising from the changes in policy, consumer and business sentiment or technologies associated with changes to limit climate change. Transition risks, including changes in consumer preferences and additional regulatory requirements or taxes, could increase our expenses, affect credit performance and impact our strategies or those of our customers. Physical and transition risks could also affect the financial health of certain customers in impacted industries or geographies. In addition, due to divergent views of stakeholders, we are at increased risk that any action, or lack thereof, by us concerning our response to climate change could be perceived negatively by some stakeholders, which could adversely impact our reputation and businesses. Further, there may be increased scrutiny of climate change-related policies, goals and disclosures, which could result in litigation and regulatory investigations and actions. We may incur additional costs and require additional resources as we evolve our strategy, practices and related disclosures with respect to these matters. As climate risk is interconnected with many risk types, we continue to enhance processes to embed evolving climate risk considerations into our existing risk management strategies; however, because the timing and severity of climate change may not be predictable, our risk management strategies may not be effective in mitigating climate risk exposure. Additionally, estimations used in climate reporting and climate-related risk assessments have an increased level of uncertainty due to limited historical trend information and the absence of standardized, reliable and comprehensive greenhouse gas emissions data across the economy, which could cause these risk assessments to vary significantly over time or actual risks to vary from our assessments.

Climate change risks can manifest as physical or transition risks. Physical risks are the risks from the effects of climate change arising from acute, climate-related events, such as, hurricanes, flooding and wildfires, and chronic shifts in climate, such as sea level rise and higher average temperatures. Such events could lead to financial losses or disrupt our operations or those of our customers or third parties on which we rely, including through direct damage to assets and indirect impacts from supply chain disruption and market volatility. Transition risks are the risks resulting from the shift toward a lower-carbon economy arising from the changes in policy, consumer and business sentiment or technologies in regards to limiting climate change. Transition risks, including changes in consumer preferences and additional regulatory requirements or taxes, could increase our expenses, affect credit performance, and impact our strategies or those of our customers. For example, on October 24, 2023, the Federal Banking Agencies jointly issued guidance on climate-related financial risk management for large institutions, which applies to us. For more information on climate-related regulatory developments, see “Item 1. Business—Supervision and Regulation.” Physical and transition risks could also affect the financial health of certain customers in impacted industries or geographies. In addition, we face reputational risk as a result of our policies, practices, disclosures and decisions related to climate change and the environment, or the practices or involvement of our clients or vendors and suppliers, in certain industries or projects associated with causing or exacerbating climate change. In addition, due to divergent views of stakeholders, we are at increased 44Capital One Financial Corporation (COF) 44Capital One Financial Corporation (COF) 44Capital One Financial Corporation (COF) 44 Table of Contents Table of Contents risk that any action, or lack thereof, by us concerning our response to climate change could be perceived negatively by some stakeholders, which could adversely impact our reputation and businesses. Further, there is increased scrutiny of climate change-related policies, goals and disclosures, which could result in litigation and regulatory investigations and actions. We may incur additional costs and require additional resources as we evolve our strategy, practices and related disclosures with respect to these matters. As climate risk is interconnected with many risk types, we continue to enhance processes to embed evolving climate risk considerations into our existing risk management strategies; however, because the timing and severity of climate change may not be predictable, our risk management strategies may not be effective in mitigating climate risk exposure. Additionally, estimations used in climate risk assessments have an increased level of uncertainty due to limited historical trend information and the absence of standardized, reliable and comprehensive greenhouse gas emissions data across the industry, which could cause these risk assessments to vary significantly over time or actual risks to vary from our assessments.

We operate in a highly competitive environment across all of our lines of business, whether in making loans, attracting deposits or in the global payments industry, and we expect competitive conditions to continue to intensify with respect to most of our products, particularly in our card, payment network and consumer banking businesses. We compete on the basis of the rates we pay on deposits and the rates and other terms we charge on the loans we originate or purchase, as well as the quality and range of our customer service, products, innovation and experience, and, with respect to our payment network businesses, the strength, reach, pricing and capabilities of our network offerings to merchants, acquirers and issuers. This competitive environment is a result of changes in technology, product delivery systems and regulation, as well as the emergence of new or significantly larger financial services providers, all of which may affect our customers’ expectations and demands. In addition to offering competitive products and services, we invest in and conduct marketing campaigns to attract and inform customers. If our marketing campaigns are unsuccessful, it may adversely impact our ability to attract new customers and grow our business. Some of our competitors, including new and emerging competitors in the digital and mobile payments space and other financial technology providers and payment networks, are not subject to the same regulatory requirements or scrutiny to which we are subject, which also could place us at a competitive disadvantage, in particular in the development of new technology platforms or the ability to rapidly innovate. We compete with many forms of payments offered by both bank and non-bank providers, including a variety of new and evolving alternative payment mechanisms, systems and products, such as aggregators and web-based and wireless payment platforms or technologies, digital currencies or cryptocurrencies (including stablecoins and tokenized deposits), prepaid systems and payment services targeting users of social networks, communications platforms and online gaming. If we are unable to continue to keep pace with innovation and fail to reflect such technology in our payments offerings, do not effectively market our products and services, are unable to deliver them effectively and securely to our customers or are prohibited from or unwilling to enter emerging areas of competition, our business and results of operations could be adversely affected. Also, our competitors or other third parties may incorporate emerging technologies, such as AI, into their products or services more quickly or more successfully than we do, which could impair our ability to compete effectively. For example, our competitors may be more timely or successful in developing or integrating AI technologies to increase their productivity and reduce their costs or to provide better transaction execution or improved products or services to clients. In addition, government actions or initiatives by the federal and state governmental authorities, including the Federal Banking Agencies, may also provide competitors with increased opportunities to derive competitive advantages and may create new competitors. These actions or initiatives may include more accommodative positions on the processing and approval of traditional bank charters and deposit insurance, expanded access to the banking and payments systems through the approval of competitors, including competitors with novel business models, to hold specialized charters, or more accommodative positions on novel activities performed by banks or non-banks. For example, the Guiding and Establishing National Innovation for U.S. Stablecoins Act of 2025 (GENIUS Act) provides a legal framework for stablecoins to be issued in the United States, which may allow new and existing competitors to compete for funds that may have otherwise been deposited with banks, such as the Bank. Some of our competitors are substantially larger than we are, which may give those competitors advantages, including a more diversified product and customer base, the ability to reach more customers and potential customers, operational efficiencies, broad-based local distribution capabilities, lower-cost funding and larger existing branch networks. Many of our competitors are also focusing on cross-selling their products and developing new products or technologies, which could affect our ability to maintain or grow existing customer relationships or require us to offer lower interest rates or fees on our lending products or higher interest rates on deposits. Competition for loans could result in origination of fewer loans, earning less on our loans or an increase in loans that perform below expectations. We face strong and increasing competition in the direct banking market. Aggressive pricing throughout the industry may adversely affect the retention of existing balances and the cost-efficient acquisition of new deposit funds and may affect our growth and profitability. Customers could also close their online accounts or reduce balances or deposits in favor of products and services offered by competitors for other reasons. These shifts, which could be rapid, could result from general dissatisfaction with our products or services, including concerns over pricing, online security or our reputation. The potential consequences of this competitive environment are exacerbated by the flexibility of direct banking and the financial and technological sophistication of our online customer base. The increased pressure on transaction fees associated with card payments due to competition could create additional risk to growth for both our card issuing businesses and the Global Payment Network. This, in turn, could adversely affect the revenue 41Capital One Financial Corporation (COF) 41Capital One Financial Corporation (COF) 41Capital One Financial Corporation (COF) 41 Table of Contents Table of Contents for our network and card issuing businesses, as well as our ability to attract and retain Network Partners who may seek alternatives from both traditional and non-traditional payment service providers, which may limit our ability to maintain or grow revenues from the Global Payment Network. In addition, competitors’ settlements with merchants and related actions, including pricing pressures and/or surcharging, could negatively impact our business practices. Competitor actions related to the structure of merchant and acquirer fees and merchant and acquirer transaction routing strategies may adversely affect our recently acquired PULSE Network’s business practices, network transaction volume, revenue and prospects for future growth and entry into new product markets. Additionally, in our credit card business, competition for rewards customers may result in higher rewards expenses, or we may fail to attract new customers or retain existing rewards customers due to increasing competition for these consumers. The market for key business partners, especially in the credit card business, is very competitive, and we may not be able to grow or maintain these partner relationships or assure that these relationships will be profitable or valued by our customers. Additionally, partners themselves may face changes in their business, including market factors and ownership changes, that could impact the partnership, or they may make changes to the products and services they offer, which may lower the value of our products, such as the co-branded cards we issue to our customers. We face the risk that we could lose partner relationships, even after we have invested significant resources into acquiring and developing the relationships. The loss of any key business partner could have a negative impact on our results of operations, including lower returns, excess operating expense and excess funding capacity. We depend on our partners to effectively promote our co-brand and private label credit card products and integrate the use of our credit cards into their retail operations. The failure by our partners to effectively promote and support our products, as well as changes they may make in their business models, could adversely affect card usage and our ability to achieve the growth and profitability objectives of our partnerships. In addition, if our partners do not adhere to the terms of our program agreements and standards, or otherwise diminish the value of our brand, we may suffer reputational damage and customers may be less likely to use our products. Some of our competitors have developed, or may develop, substantially greater financial and other resources than we have, may offer richer value propositions or a wider range of programs and services than we offer, or may use more effective advertising, marketing or cross-selling strategies to acquire and retain more customers, capture a greater share of spending and borrowings, attain and develop more attractive co-brand card programs, obtain more favorable terms with merchants and maintain greater merchant acceptance than we have. Competition may also intensify as participants in the payments industry merge or enter into joint ventures or other business combinations that compete with our products and services. We may not be able to compete effectively against these threats or respond or adapt to changes in consumer spending habits as effectively as our competitors. In such a competitive environment, we may lose entire accounts or may lose account balances to competing firms, or we may find it more costly to maintain our existing customer base. Customer attrition from any or all of our lending products, together with any lowering of interest rates or fees that we might implement to retain customers, could reduce our revenues and therefore our earnings. Similarly, unexpected customer attrition from our deposit products, in addition to an increase in rates or services that we may offer to retain deposits, may increase our expenses and therefore reduce our earnings.

We operate in a highly competitive environment across all of our lines of business, whether in making loans, attracting deposits or in the global payments industry, and we expect competitive conditions to continue to intensify with respect to most of our products particularly in our credit card and consumer banking businesses. We compete on the basis of the rates we pay on deposits and the rates and other terms we charge on the loans we originate or purchase, as well as the quality and range of our customer service, products, innovation and experience. This competitive environment is primarily a result of changes in technology, product delivery systems and regulation, as well as the emergence of new or significantly larger financial services providers, all of which may affect our customers’ expectations and demands. In addition to offering competitive products and services, we invest in and conduct marketing campaigns to attract and inform customers. If our marketing campaigns are unsuccessful, it may adversely impact our ability to attract new customers and grow market share. Some of our competitors, including new and emerging competitors in the digital and mobile payments space and other financial technology providers, are not subject to the same regulatory requirements or scrutiny to which we are subject, which also could place us at a competitive disadvantage, in particular in the development of new technology platforms or the ability to rapidly innovate. We compete with many forms of payments offered by both bank and non-bank providers, including a variety of new and evolving alternative payment mechanisms, systems and products, such as aggregators and web-based and wireless payment platforms or technologies, digital or cryptocurrencies, prepaid systems and payment services targeting users of social networks, communications platforms and online gaming. If we are unable to continue to keep pace with innovation, do not effectively market our products and services or are prohibited from or unwilling to enter emerging areas of competition, our business and results of operations could be adversely affected. Also, our competitors or other third parties may incorporate AI into their products or services more quickly or more successfully than we do, which could impair our ability to compete effectively. In addition, government actions or initiatives may also provide competitors with increased opportunities to derive competitive advantages and may create new competitors. For example, the CFPB has released a final rule that will require certain financial institutions, including the Company, to share certain financial information with third parties upon a customer’s request, which could enable those third parties to offer competing financial services to consumers. Some of our competitors are substantially larger than we are, which may give those competitors advantages, including a more diversified product and customer base, the ability to reach more customers and potential customers, operational efficiencies, broad-based local distribution capabilities, lower-cost funding and larger existing branch networks. Many of our competitors are also focusing on cross-selling their products and developing new products or technologies, which could affect our ability to maintain or grow existing customer relationships or require us to offer lower interest rates or fees on our lending products or higher interest rates on deposits. Competition for loans could result in origination of fewer loans, earning less on our loans or an increase in loans that perform below expectations. We operate as an online direct bank in the United States. While direct banking provides a significant opportunity to attract new customers that value greater and more flexible access to banking services at reduced costs, we face strong and increasing competition in the direct banking market. Aggressive pricing throughout the industry may adversely affect the retention of existing balances and the cost-efficient acquisition of new deposit funds and may affect our growth and profitability. Customers could also close their online accounts or reduce balances or deposits in favor of products and services offered by competitors for other reasons. These shifts, which could be rapid, could result from general dissatisfaction with our products or services, including concerns over pricing, online security or our reputation. The potential consequences of this competitive environment are exacerbated by the flexibility of direct banking and the financial and technological sophistication of our online customer base. In our credit card business, competition for rewards customers may result in higher rewards expenses, or we may fail to attract new customers or retain existing rewards customers due to increasing competition for these consumers. As of December 31, 2024, we have a number of large partnerships in our credit card loan portfolio. The market for key business partners, especially in the credit card business, is very competitive, and we may not be able to grow or maintain these partner relationships or assure 38Capital One Financial Corporation (COF) 38Capital One Financial Corporation (COF) 38Capital One Financial Corporation (COF) 38 Table of Contents Table of Contents that these relationships will be profitable or valued by our customers. Additionally, partners themselves may face changes in their business, including market factors and ownership changes, that could impact the partnership or they may make changes to the products and services they offer, which may lower the value of our products, such as the cobranded cards we issue to our customers. We face the risk that we could lose partner relationships, even after we have invested significant resources into acquiring and developing the relationships. The loss of any key business partner could have a negative impact on our results of operations, including lower returns, excess operating expense and excess funding capacity. We depend on our partners to effectively promote our co-brand and private label credit card products and integrate the use of our credit cards into their retail operations. The failure by our partners to effectively promote and support our products as well as changes they may make in their business models could adversely affect card usage and our ability to achieve the growth and profitability objectives of our partnerships. In addition, if our partners do not adhere to the terms of our program agreements and standards, or otherwise diminish the value of our brand, we may suffer reputational damage and customers may be less likely to use our products. Some of our competitors have developed, or may develop, substantially greater financial and other resources than we have, may offer richer value propositions or a wider range of programs and services than we offer, or may use more effective advertising, marketing or cross-selling strategies to acquire and retain more customers, capture a greater share of spending and borrowings, attain and develop more attractive co-brand card programs and maintain greater merchant acceptance than we have. We may not be able to compete effectively against these threats or respond or adapt to changes in consumer spending habits as effectively as our competitors. In such a competitive environment, we may lose entire accounts or may lose account balances to competing firms, or we may find it more costly to maintain our existing customer base. Customer attrition from any or all of our lending products, together with any lowering of interest rates or fees that we might implement to retain customers, could reduce our revenues and therefore our earnings. Similarly, unexpected customer attrition from our deposit products, in addition to an increase in rates or services that we may offer to retain deposits, may increase our expenses and therefore reduce our earnings.

The following is a summary of the Risk Factors disclosure in this Item 1A. This summary does not address all of the risks that we face. Additional discussion of the risks summarized in this risk factor summary, and other risks that we face, can be found below and should be carefully considered, together with other information in this Form 10-K and our other filings with the SEC, before making an investment decision regarding our securities. •We may not be able to successfully integrate our businesses associated with the Transaction, or such integration may be more difficult, time-consuming or costly than expected. •We will continue to incur substantial expenses related to the integration of Discover, and the expenses may be greater than anticipated due to factors, some or all of which may be outside our control. 22Capital One Financial Corporation (COF) 22Capital One Financial Corporation (COF) 22Capital One Financial Corporation (COF) 22 Table of Contents Table of Contents •We may fail to realize all of the anticipated benefits of the Transaction, or those benefits may take longer to realize than expected due to factors that may be outside our control. •The integration of Discover may have an adverse effect on our business and results of operations due to the diversion of a substantial portion of the time and attention of our management team as well as potential employee attrition. •Changes and instability in the macroeconomic environment could disrupt capital markets, reduce consumer and business activity and weaken the labor market, all of which could impact borrowers’ ability to service their debt obligations and adversely impact our financial results. •Fluctuations in interest rates could adversely affect our business, results of operations and financial condition. •We may not be able to maintain adequate sources of funding and liquidity to operate our business. •We may experience increases in delinquencies and credit losses, or we may incorrectly estimate expected losses, which could result in inadequate reserves. •We may not be able to maintain adequate capital or liquidity levels or may become subject to revised capital or liquidity requirements, which could have a negative impact on our financial results and our ability to return capital to our stockholders. •Limitations on our ability to receive dividends from our subsidiaries could affect our liquidity and ability to pay dividends and repurchase our common stock. •A downgrade in our credit ratings could significantly impact our liquidity, funding costs and access to the capital markets. •We face risks related to our operational, technological and organizational infrastructure. •A cyber-attack or other security incident on us or third parties (including their supply chains) with which we conduct business, including an incident that results in the theft, loss, manipulation or misuse of information (including personal information), or the disabling of systems and access to information critical to business operations, may result in increased costs, reductions in revenue, reputational damage, legal exposure and business disruptions. •We face risks resulting from the extensive use of models and data, as well as from our evolving use of AI. •Risks of external fraud exceeding our expectations due to larger, more sophisticated, or more frequent fraud attacks, failure to detect and respond to such attacks and/or the reduced capability to recover losses from those incidents. This could result in increased fraud loss, operational cost, customer dissatisfaction, reputational damage and/or constrained revenue growth for us. •Compliance with new and existing domestic and foreign laws, regulations and regulatory expectations is costly and complex, and any significant changes may adversely affect our business. •Our required compliance with applicable laws and regulations related to privacy, data protection and data security, in addition to compliance with our own privacy policies and contractual obligations to third parties, may increase our costs, reduce our revenue, increase our legal exposure and limit our ability to pursue business opportunities. •Our businesses are subject to the risk of increased litigation, government investigations and regulatory enforcement. •We face intense competition in all of our markets, which could have a material adverse effect on our business and results of operations. •A change in market preference towards other operators of payment networks and alternative payment providers could result in reduced transaction volume, limited merchant acceptance of our cards and limited issuance of cards on our networks by third parties, and in turn may impact our revenue margins. 23Capital One Financial Corporation (COF) 23Capital One Financial Corporation (COF) 23Capital One Financial Corporation (COF) 23 Table of Contents Table of Contents •If we are unsuccessful in creating and maintaining a strong base of network licensees and achieving meaningful global card acceptance, we may be unable to achieve long-term success in our recently acquired international network business. •Our business, financial condition and results of operations may be adversely affected by legislation, regulation and merchants’ efforts to reduce the fees (including the interchange component) charged by credit and debit card networks and acquirers to facilitate card transactions. •A reduction in the number of large merchants that accept cards on our recently acquired Discover Network or PULSE Network or in the rates they pay could materially adversely affect our business, financial condition, results of operations and cash flows. •Defaults or risks from bankruptcies, liquidations, restructurings, consolidations and outages by our network participants may adversely affect our business, financial condition, cash flows and results of operations. •If we are not able to invest successfully in and introduce digital and other technological developments across all our businesses, our financial performance may suffer. •We may fail to realize the anticipated benefits of our mergers, acquisitions and strategic partnerships. •Reputational risk and social factors may impact our results and damage our brand. •If we are not able to protect our intellectual property rights, or we violate third-party intellectual property rights, our revenue and profitability could be negatively affected. •Our risk management strategies may not be fully effective in mitigating our risk exposures in all market environments or against all types of risk. •Our business could be negatively affected if we are unable to attract, develop, retain and motivate key senior leaders and skilled employees. •We face risks from catastrophic events. •Climate change manifesting as physical or transition risks could adversely affect our businesses, operations and customers and result in increased costs. •We face risks from the use of or changes to assumptions or estimates in our financial statements. •The soundness of other financial institutions and other third parties, actual or perceived, could adversely affect us.

The following is a summary of the Risk Factors disclosure in this Item 1A. This summary does not address all of the risks that we face. Additional discussion of the risks summarized in this risk factor summary, and other risks that we face, can be found below and should be carefully considered, together with other information in this Form 10-K and our other filings with the SEC, before making an investment decision regarding our securities. •The consummation of the Transaction is contingent upon the satisfaction of a number of conditions, including regulatory approvals, that may be outside either party’s control and that either party may be unable to satisfy or obtain or which may delay the consummation of the Transaction or result in the imposition of conditions that could reduce the anticipated benefits from the Transaction or cause the parties to abandon the Transaction. •We expect to incur substantial expenses related to the Transaction and to the integration of Discover, and the expenses may be greater than anticipated due to unexpected events. •We may fail to realize all of the anticipated benefits of the Transaction, or those benefits may take longer to realize than expected due to factors that may be outside our control or Discover’s control. We may also encounter significant difficulties in integrating Discover. •Our future results may suffer if we do not effectively manage our expanded operations following the Transaction. •While the Transaction is pending, we will be subject to business uncertainties and contractual restrictions that could adversely affect our business and operations. •Changes and instability in the macroeconomic environment could disrupt capital markets, reduce consumer and business activity, and weaken the labor market, all of which could impact borrowers’ ability to service their debt obligations and adversely impact our financial results. •Fluctuations in interest rates could adversely affect our business, results of operations and financial condition. •We may not be able to maintain adequate sources of funding and liquidity to operate our business. 22Capital One Financial Corporation (COF) 22Capital One Financial Corporation (COF) 22Capital One Financial Corporation (COF) 22 Table of Contents Table of Contents •We may experience increases in delinquencies and credit losses, or we may incorrectly estimate expected losses, which could result in inadequate reserves. •We may not be able to maintain adequate capital or liquidity levels or may become subject to revised capital or liquidity requirements, which could have a negative impact on our financial results and our ability to return capital to our stockholders. •Limitations on our ability to receive dividends from our subsidiaries could affect our liquidity and ability to pay dividends and repurchase our common stock. •A downgrade in our credit ratings could significantly impact our liquidity, funding costs and access to the capital markets. •We face risks related to our operational, technological and organizational infrastructure. •A cyber-attack or other security incident on us or third parties (including their supply chains) with which we conduct business, including an incident that results in the theft, loss, manipulation or misuse of information (including personal information), or the disabling of systems and access to information critical to business operations, may result in increased costs, reductions in revenue, reputational damage, legal exposure and business disruptions. •We face risks resulting from the extensive use of models and data, as well as from our evolving use of AI. •Fraudulent activity associated with our products could cause our fraud losses to increase, the use of our products to decrease and our brands to suffer reputational damage, all of which could have a material adverse effect on our business. •Compliance with new and existing domestic and foreign laws, regulations and regulatory expectations is costly and complex, and any significant changes may adversely affect our business. •Our required compliance with applicable laws and regulations related to privacy, data protection and data security, in addition to compliance with our own privacy policies and contractual obligations to third parties, may increase our costs, reduce our revenue, increase our legal exposure and limit our ability to pursue business opportunities. •Our businesses are subject to the risk of increased litigation, government investigations and regulatory enforcement. •We face intense competition in all of our markets, which could have a material adverse effect on our business and results of operations. •Our business, financial condition and results of operations may be adversely affected by legislation, regulation and merchants’ efforts to reduce the interchange fees charged by credit and debit card networks to facilitate card transactions. •If we are not able to invest successfully in and introduce digital and other technological developments across all our businesses, our financial performance may suffer. •We may fail to realize the anticipated benefits of our mergers, acquisitions and strategic partnerships. •Reputational risk and social factors may impact our results and damage our brand. •If we are not able to protect our intellectual property rights, or we violate third-party intellectual property rights, our revenue and profitability could be negatively affected. •Our risk management strategies may not be fully effective in mitigating our risk exposures in all market environments or against all types of risk. •Our business could be negatively affected if we are unable to attract, develop, retain and motivate key senior leaders and skilled employees. •We face risks from catastrophic events. •Climate change manifesting as physical or transition risks could adversely affect our businesses, operations and customers and result in increased costs. 23Capital One Financial Corporation (COF) 23Capital One Financial Corporation (COF) 23Capital One Financial Corporation (COF) 23 Table of Contents Table of Contents •We face risks from the use of or changes to assumptions or estimates in our financial statements. •The soundness of other financial institutions and other third parties, actual or perceived, could adversely affect us.

We rely on quantitative models and, in some cases, the use of AI. We also rely on our ability to manage and aggregate data in an accurate and timely manner, to assess and manage our various risk exposures, to create estimates and forecasts, and to manage compliance with regulatory capital requirements. In particular, we use models and AI in certain processes and may expand our use of AI in additional processes in the future. Some examples may include determining the pricing of products, identifying potentially fraudulent transactions, grading loans, extending credit, measuring market and interest rate risks, predicting deposit levels or loan losses, assessing capital adequacy, estimating the value of financial instruments and balance sheet items, software development, personalizing customer experiences and other operational functions. We continue to invest in building new capabilities that use new AI technologies, such as generative AI, and we expect our use of these technologies to increase over time. However, there are significant risks involved in using models and AI, and we cannot assure that our use will enhance our businesses or produce only the intended or beneficial results. For example, generative AI has been known to produce false or “hallucinatory” inferences or output. Certain generative AI tools use machine learning and predictive analytics, which can create inaccurate, incomplete or misleading outputs; unexpected results; or errors or inadequacies, any of which may not be easily detectable. In addition, models and AI that are based on historical data sets might not be accurate predictors of future outcomes. The ability of models and AI to appropriately predict future outcomes may degrade over time due to limited historical patterns, extreme or unanticipated market movements, or customer behavior and liquidity, especially during severe market downturns or stress events (e.g., geopolitical or pandemic events). Consequently, our use of models and AI could result in inaccurate forecasts, ineffective risk management practices, inaccurate risk reporting and other negative or unexpected consequences. AI may subject us to new or heightened legal, regulatory, ethical or other challenges, and a negative public opinion of AI could impede the acceptance of AI solutions. If the models or AI solutions that we or a third party create and use or the data inputs, formulas, or algorithms on which such models or AI solutions rely – or if the content, analyses or recommendations that the models or AI solutions produce are (or are perceived to be) deficient, inaccurate, biased, unethical or controversial – we could incur operational inefficiencies, competitive harm, legal liability, or brand or reputational harm. We could also incur other adverse impacts on our businesses and financial results. We may be liable if we were to violate applicable laws and regulations, third-party intellectual property, privacy or other rights, or contracts we have. Further, the use of models and AI solutions within products or services that we use or that are used by our third-party service providers may pose similar risks, and we have limited ability to control the manner in which third-party products are developed or maintained or the manner in which third-party services are provided. The development and implementation of some of these models require us to make difficult, subjective and complex judgments. Our risk reporting and risk management, including our business decisions that are based on information gathered through models and AI, depend on the effectiveness of our models and AI. They also depend on our policies, programs, processes and practices governing how data, models and AI are acquired, validated, stored, protected, processed and analyzed, including our data aggregation and validation procedures, and any issues with the quality or effectiveness of the foregoing could have negative consequences. While we continuously update our policies, programs, processes and risk management practices, many of our data management, modeling, AI, aggregation and implementation processes are manual. They may be subject to human error, data limitations, process delays or system failure. If any of our employees, contractors, third-party service providers or other third parties with which we do business use any third-party AI solutions in connection with our business, it may lead to the inadvertent or unauthorized disclosure or incorporation of our sensitive and confidential information, including personal information, into third-party systems or publicly available or third-party training sets, which may impact our ability to realize the benefit of our intellectual property or other proprietary rights in such information. Failure to manage data effectively and to aggregate data in an accurate and timely manner may limit our ability to manage current and emerging risks; to produce accurate financial, regulatory and operational reporting; and to manage changing business needs. If our Framework is ineffective, we could suffer unexpected losses, which could materially adversely affect our results of operation or financial condition. 36Capital One Financial Corporation (COF) 36Capital One Financial Corporation (COF) 36Capital One Financial Corporation (COF) 36 Table of Contents Table of Contents Any information we provide to the public or to our regulators based on incorrectly designed/implemented models or AI could be inaccurate or misleading. Some of the decisions that our regulators make could be adversely affected if their perception is that the quality of the data, models and AI used to generate the information is insufficient. The regulation of AI is rapidly evolving worldwide as legislators and regulators are increasingly focused on these powerful, emerging technologies. The technologies underlying AI and its uses are subject to a variety of laws and regulations, including intellectual property, privacy, data protection and data security, consumer protection, competition and equal opportunity laws and regulations. They are expected to be subject to increased regulation and new laws or new applications of existing laws and regulations. Various U.S. governmental and regulatory agencies continue to review AI. Several U.S. states and foreign jurisdictions are applying (or are considering applying) their platform moderation, privacy, data protection, and data security laws and regulations to AI. They are also considering general legal frameworks for AI. In particular, several states, including Colorado and California, have passed or are continuing to propose laws and regulations that govern various facets and uses of AI. We may not be able to anticipate how to respond to these rapidly evolving frameworks, and we may need to expend resources to adjust our offerings in certain jurisdictions if the legal frameworks are inconsistent across jurisdictions. Furthermore, because AI technology itself is highly complex and rapidly developing, it is not possible to predict all of the legal, operational, competitive or technological risks that may arise from using AI.

We rely on quantitative models and in some cases the use of AI, as well as our ability to manage and aggregate data in an accurate and timely manner, to assess and manage our various risk exposures, create estimates and forecasts, and manage compliance with regulatory capital requirements. We continue to invest in building new capabilities that employ new AI technologies such as generative AI, and we expect our use of these technologies to increase over time. However, there are significant risks involved in utilizing models and AI and no assurance can be provided that our use will enhance our business or produce only intended or beneficial results. For example, generative AI has been known to produce false or “hallucinatory” inferences or output, and certain generative AI uses machine learning and predictive analytics, which can create inaccurate, incomplete or misleading output, unexpected results, errors or inadequacies, any of which may not be easily detectable. AI may subject us to new or heightened legal, regulatory, ethical, or other challenges; and negative public opinion of AI could impair the acceptance of AI solutions. Accordingly, if the models or AI solutions that we create or use, or if the content, analyses or recommendations that models or AI solutions assist in producing in our products and services, are, or are perceived to be deficient, inaccurate, biased, unethical or controversial, we could incur operational inefficiencies, competitive harm, legal liability, brand or reputational harm, or other adverse impacts on our business and financial results. We also may incur liability through the violation of applicable laws and regulations, third-party intellectual property, privacy or other rights, or contracts to which we are a party. We may use models and AI in processes such as determining the pricing of various products, identifying potentially fraudulent transactions, grading loans and extending credit, measuring interest rate and other market risks, predicting deposit levels or loan losses, assessing capital adequacy, calculating managerial and regulatory capital levels, estimating the value of financial instruments and balance sheet items, and other operational functions. Development and implementation of some of these models, such as the models for credit loss accounting under CECL, require us to make difficult, subjective and complex judgments. Our risk reporting and management, including business decisions based on information incorporating models and the use of AI, depend on the effectiveness of our models and AI and our policies, programs, processes and practices governing how data, models and AI, as applicable, are acquired, validated, stored, protected, processed and analyzed. Any issues with the quality or effectiveness of our data aggregation and validation procedures, as well as the quality and integrity of data inputs, formulas or algorithms, could result in inaccurate forecasts, ineffective risk management practices or inaccurate risk reporting. In addition, models and AI based on historical data sets might not be accurate predictors of future outcomes and their ability to appropriately predict future outcomes may degrade over time due to limited historical patterns, extreme or unanticipated market 34Capital One Financial Corporation (COF) 34Capital One Financial Corporation (COF) 34Capital One Financial Corporation (COF) 34 Table of Contents Table of Contents movements or customer behavior and liquidity, especially during severe market downturns or stress events (e.g., geopolitical or pandemic events). While we continuously update our policies, programs, processes and practices, many of our data management, modeling, AI, aggregation and implementation processes are manual and may be subject to human error, data limitations, process delays or system failure. Failure to manage data effectively and to aggregate data in an accurate and timely manner may limit our ability to manage current and emerging risk, to produce accurate financial, regulatory and operational reporting as well as to manage changing business needs. If our Framework is ineffective, we could suffer unexpected losses which could materially adversely affect our results of operation or financial condition. Also, any information we provide to the public or to our regulators based on incorrectly designed or implemented models or AI could be inaccurate or misleading. Some of the decisions that our regulators make could be affected adversely due to the perception that the quality of the data, models and AI used to generate the relevant information is insufficient. In addition, regulation of AI is rapidly evolving worldwide as legislators and regulators are increasingly focused on these powerful emerging technologies. The technologies underlying AI and its uses are subject to a variety of laws and regulations, including intellectual property, privacy, data protection and data security, consumer protection, competition, and equal opportunity laws, and are expected to be subject to increased regulation and new laws or new applications of existing laws and regulations. AI is the subject of ongoing review by various U.S. governmental and regulatory agencies, and various U.S. states and other foreign jurisdictions are applying, or are considering applying, their platform moderation, privacy, data protection and data security laws and regulations to AI or are considering general legal frameworks for AI. We may not be able to anticipate how to respond to these rapidly evolving frameworks, and we may need to expend resources to adjust our offerings in certain jurisdictions if the legal frameworks are inconsistent across jurisdictions. Furthermore, because AI technology itself is highly complex and rapidly developing, it is not possible to predict all of the legal, operational, competitive or technological risks that may arise relating to the use of AI.

As an issuer of credit and debit cards on four-party networks, the Bank earns interchange fees, which are included in the charges to merchants by their acquirers when customers use our cards. Interchange fees are the amounts established by credit and debit card networks for the purpose of compensating unaffiliated debit and credit card issuers for their role in facilitating card transactions and are a meaningful source of revenue for our credit and debit card businesses. Interchange fees are a revenue source that, for example, covers issuers’ costs associated with credit and debit card payments, funds rewards programs, helps fund anti-fraud measures, management and dispute costs and funds competition and innovation. Interchange fees continue to be the subject of significant and intense global legislative, regulatory and legal focus, and the resulting legislation, regulation and decisions may have a material adverse impact on our overall business, financial condition and results of operations. For cards issued on the Global Payment Network, a three-party network, the Bank earns an issuer rate instead of interchange fees. Legislative and regulatory bodies in a number of countries have sought, or are currently seeking, to reduce interchange fees through legislation, competition-related regulatory proceedings, voluntary agreements, central bank regulation and/or litigation. In the United States, interchange reimbursement rates for credit card transactions are set by credit card networks such as Mastercard and Visa. In the United States, the Federal Reserve’s Regulation II places limits on the interchange fees that issuers may charge, and requires additional routing requirements for, debit cards issued on four-party networks, such as the remaining debit cards issued by the Bank on networks other than the Global Payment Network. In October 2023, the Federal Reserve released a notice of proposed rulemaking to revise Regulation II to further reduce the cap on interchange fees that debit card issuers covered by Regulation II can receive for covered debit card transactions. In August 2025, a North Dakota district court ruled that the Federal Reserve exceeded its statutory authority when it originally promulgated Regulation II in 2011. As a result, the court vacated Regulation II, although the court stayed the vacatur order to allow time for the resolution of an appeal and allowed the Federal Reserve’s 2023 proposed rule to go into effect if it becomes finalized. Conversely, a district court in Kentucky ruled that the Federal Reserve acted in accordance with its statutory authority when it promulgated Regulation II and upheld the regulation. Any changes to Regulation II and the debit interchange regulatory scheme, including as a result of the ultimate resolution of these district court decisions, which remains unknown, may result in lower debit card interchange fees for cards issued on four-party networks. Such lower fees could, in turn, result in market pressures that reduce the discount rate charged for debit cards issued by the Bank on the Global Payment Network. For more information on Regulation II and the Federal Reserve’s 2023 proposed rule, please see “Part I—Item 1. Business—Supervision and Regulation.” State legislatures and regulatory agencies may also seek to enact legislation and regulation to limit fees or discount rates charged by networks. Lowering interchange fees also remains an area of international governmental attention by certain parties. In some jurisdictions, such as Canada and certain countries in Europe, including the U.K., interchange fees and related practices are subject to regulatory activity, including in some cases, imposing caps on permissible interchange fees. Our international card businesses have been impacted by these restrictions. For example, in the U.K., interchange fees are capped for both consumer credit and debit card transactions. In addition, in Canada, Visa and Mastercard payment networks have entered into voluntary agreements with the Department of Finance Canada to maintain an agreed-upon average interchange rate. In addition to this legislative and regulatory activity, merchants are also seeking avenues to reduce interchange fees. Merchants and their trade groups have filed numerous lawsuits against payment card networks and banks that issue cards on those networks, claiming that their practices toward merchants, including interchange fees, violate federal antitrust laws. In 2005, a number of entities filed antitrust lawsuits against Mastercard and Visa and several member banks, including our subsidiaries and us, alleging among other things, that the 44Capital One Financial Corporation (COF) 44Capital One Financial Corporation (COF) 44Capital One Financial Corporation (COF) 44 Table of Contents Table of Contents defendants conspired to fix the level of interchange fees. For additional information about the lawsuits, see “Part II—Item 8. Financial Statements and Supplementary Data—Note 19—Commitments, Contingencies, Guarantees and Others.” . In addition, some major retailers or industry sectors could independently negotiate lower interchange fees with Mastercard and Visa. This, as well as any ultimate resolution on the settlement with Mastercard and Visa, could in turn result in lower interchange fees or discount rates for us when our cardholders undertake purchase transactions with these retailers, either directly with respect to any debit or credit cards issued by the Bank on Mastercard’s and Visa’s networks, or indirectly as a result of market pressures with respect to debit or credit cards issued by the Bank on the Global Payment Network. Merchants also continue to lobby Congress aggressively for legislation that would require additional routing requirements for credit cards that are issued on four-party networks, like Visa or Mastercard, which could create a downward pressure on interchange fees should their efforts be successful. Retailers may continue to bring legal proceedings against us or other credit card and debit card issuers and networks in the future. Beyond pursuing legislation, regulation and litigation, merchants may also promote forms of payment with lower fees, as noted above, or seek to impose surcharges or discounts at the point of sale for use of credit or debit cards. If merchants increasingly impose surcharges or other point of sale pricing strategies in response to transaction fees, card usage and transaction volumes could decline, which could adversely affect our revenues and results of operations. New payment systems, particularly mobile-based payment technologies and digital currencies and cryptocurrencies (including stablecoins), could also gain widespread adoption and lead to issuer transaction fees or the displacement of credit or debit cards as a payment method. The heightened focus by legislative and regulatory bodies on the fees charged by credit and debit card networks, including on prepaid cards, and the ability of certain merchants to successfully pursue litigation, negotiate discounts to interchange fees or discount rates with payment networks or develop alternative payment systems could result in a loss of income from interchange fees. Changes to the terms or implementation of Regulation II or the adoption of other laws and regulations that impose limitations on the fees that can be charged by issuers or networks on debit or credit card transactions or require merchants to be provided an alternative network for transaction routing could have an adverse effect on our business, financial condition and results of operations. For example, if a change in law or regulation results in debit card transactions on three-party networks, such as debit cards issued by the Bank on the Global Payment Network being subject to the Regulation II cap on interchange fees, it could result in the Company not recognizing a significant majority of the network revenue synergies that the Company anticipated to be realized in connection with the Transaction. Additionally, the development of alternative payment systems or exclusivity arrangements among merchants and their debit card networks could result in loss of fee income earned by the Global Payment Network. Any resulting loss in income to us could have a material adverse effect on our business, financial condition and results of operations.

As an issuer of credit and debit cards, we earn interchange fees, which are paid by merchants, when customers use our cards. Interchange fees are the amounts established by credit and debit card networks for the purpose of compensating debit and credit card issuers for their role in facilitating card transactions and are a meaningful source of revenue for our credit and debit card businesses. Interchange fees are a revenue source that, for example, covers the issuer’s costs associated with credit and debit card payments, fund rewards programs, help fund anti-fraud measures, management and dispute costs and fund competition and innovation. Interchange fees continue to be the subject of significant and intense global legislative, regulatory and legal focus, and the resulting legislation, regulation and decisions may have a material adverse impact on our overall business, financial condition and results of operations. Legislative and regulatory bodies in a number of countries have sought, or are currently seeking, to reduce interchange fees through legislation, competition-related regulatory proceedings, voluntary agreements, central bank regulation and/or litigation. In the United States, interchange reimbursement rates for credit card transactions are set by credit card networks such as MasterCard and Visa. In the United States, the Federal Reserve’s Regulation II (Debit Card Interchange Fees and Routing) places limits on the interchange fees that issuers may charge, and requires additional routing requirements for, debit cards issued on networks operated by third parties. On October 25, 2023, the Federal Reserve released a notice of proposed rulemaking to revise Regulation II to further reduce the cap on interchange fees that debit card issuers covered by Regulation II can receive for covered debit card transactions. For more information on these rules, please see “Item 1. Business—Supervision and Regulation.” At the state level, Illinois passed a law prohibiting interchange fees on state taxes and gratuities, which would go into effect July 2025, though it is being challenged in the courts. Lowering interchange fees also remains an area of international governmental attention by certain parties. In some jurisdictions, such as Canada and certain countries in Europe, including the U.K., interchange fees and related practices are subject to regulatory activity, including in some cases, imposing caps on permissible interchange fees. Our international card businesses have been impacted by these restrictions. For example, in the U.K., interchange fees are capped for both credit and debit card transactions. In addition, in Canada, Visa and MasterCard payment networks have entered into voluntary agreements with the Department of Finance Canada to maintain an agreed upon average interchange rate. 39Capital One Financial Corporation (COF) 39Capital One Financial Corporation (COF) 39Capital One Financial Corporation (COF) 39 Table of Contents Table of Contents In addition to this legislative and regulatory activity, merchants are also seeking avenues to reduce interchange fees. Merchants and their trade groups have filed numerous lawsuits against payment card networks and banks that issue cards on those networks, claiming that their practices toward merchants, including interchange fees, violate federal antitrust laws. In 2005, a number of entities filed antitrust lawsuits against MasterCard and Visa and several member banks, including our subsidiaries and us, alleging among other things, that the defendants conspired to fix the level of interchange fees. For additional information about the lawsuits, see “Part II—Item 8. Financial Statements and Supplementary Data—Note 19—Commitments, Contingencies, Guarantees and Others” for further details. Some major retailers or industry sectors could independently negotiate lower interchange fees with MasterCard and Visa, which could, in turn, result in lower interchange fees for us when our cardholders undertake purchase transactions with these retailers. Merchants continue to lobby Congress aggressively for legislation that would require additional routing requirements for credit cards that are issued on four-party networks, like Visa or MasterCard, which could create a downward pressure on interchange fees should their efforts be successful. Retailers may continue to bring legal proceedings against us or other credit card and debit card issuers and networks in the future. Beyond pursuing legislation, regulation and litigation, merchants may also promote forms of payment with lower fees or seek to impose surcharges or discounts at the point of sale for use of credit or debit cards. New payment systems, particularly mobile-based payment technologies, could also gain widespread adoption and lead to issuer transaction fees or the displacement of credit or debit cards as a payment method. The heightened focus by legislative and regulatory bodies on the fees charged by credit and debit card networks, and the ability of certain merchants to successfully pursue litigation, negotiate discounts to interchange fees with payment networks or develop alternative payment systems could result in a loss of income from interchange fees. Any resulting loss in income to us could have a material adverse effect on our business, financial condition and results of operations.

Natural disasters, geopolitical events, supply chain issues and other catastrophic events can have widespread and unpredictable impacts on global society, economic conditions and consumer and business behavior, which may reoccur or occur over an extended duration. These events could harm our employees, business and infrastructure, including our information technology systems and third-party platforms. Our ability to conduct business may be adversely affected by a disruption in the infrastructure that supports our business and the communities where we are located, which are concentrated in the Northern Virginia, New York and Chicago metropolitan areas, Richmond, Virginia, Plano, Texas and the Philippines. This may include a disruption involving damage or loss of access to a physical site, cyber-attacks and other security incidents, terrorist activities, the occurrence or worsening of disease outbreaks or pandemics, natural disasters, extreme weather events, electrical outage, environmental hazards, disruption to technological infrastructure, communications or other services we use, our employees or third parties with whom we conduct business. Our business, financial condition and results of operations may be impacted by any such disruption and our ability to implement corresponding response measures quickly. In addition, if a natural disaster or other catastrophic event occurs in certain regions where our business, customers or assets securing our loans are concentrated, such as the mid-Atlantic, New York, California or Texas metropolitan areas, or in regions where our third-party platforms are located, we could be disproportionately impacted as compared to our competitors. Portions of our business concentrated primarily on serving the global travel industry, including the Diners Club network, could be disproportionately affected by events that are global in nature, including events that impact international conditions, travel restrictions or perceptions about the safety of travel, all of which may result in an indefinite decline in consumer or business travel activity. The impact of such events and other catastrophes on the overall economy and our physical and transition risks may also adversely affect our financial condition and results of operations.

Natural disasters, geopolitical events and other catastrophic events could harm our employees, business and infrastructure, including our information technology systems and third-party platforms. Our ability to conduct business may be adversely affected by a disruption in the infrastructure that supports our business and the communities where we are located, which are concentrated in the Northern Virginia and New York metropolitan areas, Richmond, Virginia and Plano, Texas. This may include a disruption involving damage or loss of access to a physical site, cyber-attacks and other security incidents, terrorist activities, the occurrence or worsening of disease outbreaks or pandemics, natural disasters, extreme weather events, electrical outage, environmental hazards, disruption to technological infrastructure, communications or other services we use, our employees or third parties with whom we conduct business. Our business, financial condition and results of operations may be impacted by any such disruption and our ability to implement corresponding response measures quickly. In addition, if a natural disaster or other catastrophic event occurs in certain regions where our business, customers or assets securing our loans are concentrated, such as the mid-Atlantic, New York, California or Texas metropolitan areas, or in regions where our third-party platforms are located, we could be disproportionately impacted as compared to our competitors. The impact of such events and other catastrophes on the overall economy and our physical and transition risks may also adversely affect our financial condition and results of operations.

39Capital One Financial Corporation (COF) 39Capital One Financial Corporation (COF) 39Capital One Financial Corporation (COF) 39 Table of Contents Table of Contents Our businesses are subject to increased litigation, government investigations and other regulatory enforcement risks as a result of a number of factors and from various sources, including the highly regulated nature of the financial services industry, the focus of state and federal prosecutors on banks and the financial services industry and the structure of the credit card industry. Given the inherent uncertainties involved in litigation, government investigations and regulatory enforcement decisions, and the very large or indeterminate damages sought in some matters asserted against us, there can be significant uncertainty as to the ultimate liability we may incur from these kinds of matters. The finding, or even the assertion, of substantial legal liability against us could have a material adverse effect on our business and financial condition and could cause significant reputational harm to us, which could seriously harm our business. In addition, financial institutions, such as ourselves, face significant regulatory scrutiny, which can lead to public enforcement actions or nonpublic supervisory actions. We and our subsidiaries are subject to comprehensive regulation and periodic examination by, among other regulatory bodies, the Federal Banking Agencies, the SEC, the CFTC and the CFPB. We have been subject to enforcement actions by many of these and other regulators and may continue to be involved in such actions, including governmental inquiries, investigations and enforcement proceedings. In December 2025, the OCC issued a report of preliminary findings of its ongoing supervisory review, in accordance with Executive Order 14331 “Guaranteeing Fair Banking for All Americans,” of the nine largest OCC-regulated banks, including the Bank, to determine whether those banks may have debanked or discriminated against customers or potential customers on the basis of their political or religious beliefs or lawful business activities. In the report, the OCC states that its review is ongoing and, once its supervisory review has concluded, it intends to hold the banks reviewed accountable for any unlawful debanking activities, including by making referrals to the Attorney General. Over the last several years, federal and state regulators have focused on risk management, compliance with anti-money laundering (“AML”) and sanctions laws, privacy, data protection and data security, use of service providers, fair access and lending, unfair or deceptive practices, and other consumer protection issues and new technologies. Regulators have indicated the potential for escalating consequences for banks that do not timely resolve open issues or have repeat issues. Regulatory scrutiny is expected to continue in these areas, including as a result of implementation of the AML Act of 2020. We expect that regulators and governmental enforcement bodies will continue taking public enforcement actions against financial institutions in addition to addressing supervisory concerns through nonpublic supervisory actions or findings, which could involve restrictions on our activities, or our ability to make acquisitions or otherwise expand our business, among other limitations that could adversely affect our business. In addition, a violation of law or regulation by another financial institution is likely to give rise to supervisory review or an investigation by regulators and other governmental agencies of the same or similar practices by us. Furthermore, a single event may give rise to numerous and overlapping investigations and proceedings. These and other initiatives from governmental authorities and officials may subject us to further customer remuneration, judgments, settlements, fines or penalties, or cause us to restructure our operations and activities or to cease offering certain products or services, all of which could harm our reputation or lead to higher operational costs. Litigation, government investigations and other regulatory actions could generally subject us to significant fines, increased expenses, restrictions on our activities, including product offerings, and damage to our reputation and our brand, and could adversely affect our business, financial condition and results of operations. For additional information regarding legal and regulatory proceedings to which we are subject, see “Part II—Item 8. Financial Statements and Supplementary Data—Note 19—Commitments, Contingencies, Guarantees and Others.” As a result of the Transaction, we have assumed the contingencies and liabilities of Discover, for which we have incurred and may continue to incur financial risk, compliance obligations, litigation risk, or reputational risk, including as a result of assuming ongoing litigation disputes, claims, government agency investigations and enforcement actions and other proceedings associated with Discover’s actions prior to the Transaction. For additional information regarding legal and regulatory proceedings in connection with the Transaction, refer to “Part II—Item 8. Financial Statements and Supplementary Data—Note 19—Commitments, Contingencies, Guarantees and Others.” We continue to face significant uncertainty regarding the contingencies and liabilities we have assumed from Discover, and any significant or unanticipated liability we may incur from these matters may adversely impact our business, financial condition and results of operations. 40Capital One Financial Corporation (COF) 40Capital One Financial Corporation (COF) 40Capital One Financial Corporation (COF) 40 Table of Contents Table of Contents

Our businesses are subject to increased litigation, government investigations and other regulatory enforcement risks as a result of a number of factors and from various sources, including the highly regulated nature of the financial services industry, the focus of state and federal prosecutors on banks and the financial services industry and the structure of the credit card industry. Given the inherent uncertainties involved in litigation, government investigations and regulatory enforcement decisions, and the very large or indeterminate damages sought in some matters asserted against us, there can be significant uncertainty as to the ultimate liability we may incur from these kinds of matters. The finding, or even the assertion, of substantial legal liability against us could have a material adverse effect on our business and financial condition and could cause significant reputational harm to us, which could seriously harm our business. For example, the 2019 Cybersecurity Incident has resulted in litigation, consent orders, settlements, government investigations and other regulatory enforcement inquiries. In addition, financial institutions, such as ourselves, face significant regulatory scrutiny, which can lead to public enforcement actions or nonpublic supervisory actions. We and our subsidiaries are subject to comprehensive regulation and periodic examination by, among other regulatory bodies, the Federal Banking Agencies, SEC, CFTC and CFPB. We have been subject to enforcement actions by many of these and other regulators and may continue to be involved in such actions, including governmental inquiries, investigations and enforcement proceedings, including by the OCC, CFPB, Department of Justice, FinCEN and state Attorneys General. For example, on January 14, 2025, the CFPB brought an action in the United States District Court for the Eastern District of Virginia making claims similar to the ongoing previously disclosed savings account litigation. Over the last several years, federal and state regulators have focused on risk management, compliance with anti-money laundering (“AML”) and sanctions laws, privacy, data protection and data security, use of service providers, fair lending, unfair or deceptive practices, and other consumer protection issues and innovative activities, such as those that utilize AI and other new technology. Regulators have indicated the potential for escalating consequences for banks that do not timely resolve open issues or have repeat issues. Regulatory scrutiny is expected to continue in these areas, including as a result of implementation of the AML Act of 2020. We expect that regulators and governmental enforcement bodies will continue taking public enforcement actions against financial institutions in addition to addressing supervisory concerns through nonpublic supervisory actions or findings, which could involve restrictions on our activities, or our ability to make acquisitions or otherwise expand our business, among other limitations that could adversely affect our business. In addition, a violation of law or regulation by another financial institution is likely to give rise to supervisory review or an investigation by regulators and other governmental agencies of the same or similar practices by us. Furthermore, a single event may give rise to numerous and overlapping investigations and proceedings. These and other initiatives from governmental authorities and officials may subject us to further customer remuneration, judgments, settlements, fines or penalties, or cause us to restructure our operations and activities or to cease offering certain products or services, all of which could harm our reputation or lead to higher operational costs. Litigation, government 37Capital One Financial Corporation (COF) 37Capital One Financial Corporation (COF) 37Capital One Financial Corporation (COF) 37 Table of Contents Table of Contents investigations and other regulatory actions could generally subject us to significant fines, increased expenses, restrictions on our activities and damage to our reputation and our brand, and could adversely affect our business, financial condition and results of operations. For additional information regarding legal and regulatory proceedings to which we are subject, see “Part II—Item 8. Financial Statements and Supplementary Data—Note 19—Commitments, Contingencies, Guarantees and Others.”

Financial institutions are subject to extensive and complex capital and liquidity requirements, which are subject to change. These requirements affect our ability to lend, grow deposit balances, make acquisitions and distribute capital. Failure to maintain adequate capital or liquidity levels, whether due to adverse developments in our business or the economy or to changes in the applicable requirements, could subject us to a variety of restrictions and/or remedial actions imposed by our regulators. These include limitations on the ability to pay dividends or repurchase shares and the issuance of a capital directive to increase capital. Such limitations or capital directive could have a material adverse effect on our business and results of operations. For example, changes to applicable capital, liquidity or other regulations, such as the Basel III Finalization Proposal, could result in increased regulatory capital requirements, operating expenses or cost of funding, which could negatively affect our financial results or our ability to distribute capital. We consider various factors in the management of capital, including the impact of both internal and supervisory stress scenarios on our capital levels as determined by our internal modeling and the Federal Reserve’s estimation of losses in supervisory stress scenarios that are used to annually set our stress capital buffer requirement. Although the Federal Reserve has issued the Stress Testing Transparency Proposal, there can be significant differences between our modeling and the Federal Reserve’s projections for a given supervisory stress scenario and between the capital needs suggested by our internal stress scenarios and the supervisory stress scenarios. Therefore, although our estimated capital levels under stress disclosed as part of the stress testing processes may suggest that we have a particular capacity to return capital to stockholders and remain well capitalized under stress, the Federal Reserve’s modeling, our internal modeling of another scenario or other factors related to our capital management process may reflect a lower capacity to return capital to stockholders than that indicated by the projections released in the stress testing processes. This, in turn, could lead to restrictions on our ability to pay dividends and engage in repurchases of our common stock. See “Part I—Item 1. Business—Supervision and Regulation” for additional information. We also consider various factors in the management of liquidity, including maintaining sufficient liquid assets to meet the requirements of several internal and regulatory stress tests. Regulatory liquidity stress testing, regulatory liquidity requirements 30Capital One Financial Corporation (COF) 30Capital One Financial Corporation (COF) 30Capital One Financial Corporation (COF) 30 Table of Contents Table of Contents and internal stress tests may, therefore, require us to take actions to increase our liquid assets or alter our activities or funding sources, which could negatively affect our financial results or our ability to return capital to our stockholders. See “Part I—Item 1. Business—Supervision and Regulation” for additional information. Additionally, growth in our total consolidated assets (including as a result of our acquisition of Discover) or cross-jurisdictional activity could affect the Company’s continued classification as a Category III institution. If the Company were to have $700 billion or more in total consolidated assets or $75 billion or more in cross-jurisdictional activity, each as measured based on the average for the four most recent calendar quarters, the Company and the Bank would become subject to more stringent capital and liquidity regulations as a Category II institution and Category II bank, respectively. For example, if the Company were to become a Category II institution, each of the Company and Bank would become subject to the full LCR requirement, which would multiply its total net cash flows by an outflow adjustment percentage of 100% (rather than 85%), and the full NSFR requirement, which would require it to maintain an available stable funding in an amount at least equal to 100% (rather than 85%) of its required stable funding, as well as required daily (rather than monthly) liquidity reporting. In addition, unlike Category III institutions, Category II institutions are not permitted to exclude AOCI from regulatory capital calculations and are subject to a more stringent capital deductions framework as well as the advanced approaches framework under the current Basel III Capital Rules. Although the Company is currently a Category III institution, we cannot predict with certainty whether or when future growth will result in its exceeding the applicable thresholds for classification as a Category II institution.

Financial institutions are subject to extensive and complex capital and liquidity requirements, which are subject to change. These requirements affect our ability to lend, grow deposit balances, make acquisitions and distribute capital. Failure to maintain adequate capital or liquidity levels, whether due to adverse developments in our business or the economy or to changes in the applicable requirements, could subject us to a variety of restrictions and/or remedial actions imposed by our regulators. These include limitations on the ability to pay dividends or repurchase shares and the issuance of a capital directive to increase capital. Such limitations or capital directive could have a material adverse effect on our business and results of operations. For example, changes to applicable capital, liquidity, or other regulations, such as the changes proposed in the Basel III Finalization Proposal and the LTD Proposal, could result in increased regulatory capital requirements, operating expenses or cost of funding, which could negatively affect our financial results or our ability to distribute capital. We consider various factors in the management of capital, including the impact of both internal and supervisory stress scenarios on our capital levels as determined by our internal modeling and the Federal Reserve’s estimation of losses in supervisory stress 29Capital One Financial Corporation (COF) 29Capital One Financial Corporation (COF) 29Capital One Financial Corporation (COF) 29 Table of Contents Table of Contents scenarios that are used to annually set our stress capital buffer requirement. There can be significant differences between our modeling and the Federal Reserve’s projections for a given supervisory stress scenario and between the capital needs suggested by our internal stress scenarios and the supervisory stress scenarios. Therefore, although our estimated capital levels under stress disclosed as part of the stress testing processes may suggest that we have a particular capacity to return capital to stockholders and remain well capitalized under stress, the Federal Reserve’s modeling, our internal modeling of another scenario or other factors related to our capital management process may reflect a lower capacity to return capital to stockholders than that indicated by the projections released in the stress testing processes. This, in turn, could lead to restrictions on our ability to pay dividends and engage in repurchases of our common stock. See “Item 1. Business—Supervision and Regulation” for additional information. We also consider various factors in the management of liquidity, including maintaining sufficient liquid assets to meet the requirements of several internal and regulatory stress tests. Regulatory liquidity stress testing, regulatory liquidity requirements, and internal stress tests may, therefore, require us to take actions to increase our liquid assets or alter our activities or funding sources, which could negatively affect our financial results or our ability to return capital to our stockholders. See “Item 1. Business—Supervision and Regulation” for additional information.

37Capital One Financial Corporation (COF) 37Capital One Financial Corporation (COF) 37Capital One Financial Corporation (COF) 37 Table of Contents Table of Contents A wide array of laws and regulations, including banking, tax, consumer lending and payment services laws and regulations, apply to our business and these laws can be uncertain and evolving. We and our subsidiaries are also subject to supervision and examination by multiple regulators both in the U.S. and abroad, and the manner in which our regulators interpret applicable laws and regulations may affect how we comply with them. The Company, including Discover’s business acquired in the Transaction, may be subject to increased scrutiny by, and/or may require additional regulatory compliance with, governmental authorities in connection with the Transaction as a result of an increase in the size, scope and complexity of the combined company’s business operations, which may have an adverse effect on our business, financial condition and results of operations. Also, if the Company were to become a Category II institution due to an increase in size or cross-jurisdictional activity, it would become subject to certain additional or enhanced regulatory requirements. See “We may not be able to maintain adequate capital or liquidity levels or may become subject to revised capital or liquidity requirements, which could have a negative impact on our financial results and our ability to return capital to our stockholders.” for additional information. Failure to comply with these laws and regulations and effectively navigate this complex regulatory landscape, even if the failure is inadvertent, results from human error or reflects a difference in interpretation or conflicting legal requirements, could subject us to restrictions on our business activities, fines, criminal sanctions and other penalties and/or damage to our reputation with regulators, our customers or the public. Hiring, training and retaining qualified compliance and legal personnel, and establishing and maintaining risk management and compliance-related systems, infrastructure and processes, is difficult and may lead to increased expenses. These efforts and the associated costs could limit our ability to invest in other business opportunities. In addition, actions, behaviors or practices by us, our employees or representatives that are illegal, unethical or contrary to our core values could harm us, our stockholders or customers or damage the integrity of the financial markets and are subject to regulatory scrutiny across jurisdictions. Violations of law by other financial institutions may also result in increased regulatory scrutiny of our business. Applicable laws and regulations may affect us disproportionately compared to our competitors or in an unforeseen manner. For example, we have a large number of customer accounts in our credit card and auto lending businesses and we have made the strategic choice to originate and service subprime credit card and auto loans, which typically have higher delinquencies and charge-offs than prime customer accounts. As a result, we have significant involvement with credit bureau reporting and the collection and recovery of delinquent and charged-off debt, primarily through customer communications, the filing of litigation against customers in default, the periodic sale of charged off debt and vehicle repossession. These and other consumer lending activities are subject to customer complaints and enhanced legal and regulatory scrutiny from regulators, courts and legislators. Any future changes to or legal liabilities resulting from our business practices in these areas, including our debt collection practices and the fees we charge, whether mandated by regulators, courts, legislators or otherwise, could have a material adverse impact on our financial condition. The legislative, regulatory and supervisory environment is beyond our control, may change rapidly and unpredictably, and may negatively influence our revenue, costs, operations, transaction volumes, earnings, growth, liquidity and capital levels. There have been efforts to impose price controls and other impositions. Such changes, among others, could impact credit availability, affect our ability or willingness to provide certain products or services, necessitate changes to our business practices or materially reduce our revenues. Some laws and regulations may be subject to litigation or other challenges that delay implementation or result in modifications, rescissions or withdrawals, which impacts us. Furthermore, political and policy goals of elected and appointed officials may change over time, which could impact the rulemaking, supervision, examination and enforcement priorities of the Federal Banking Agencies. It is possible that expected changes in law, regulation and policy do not occur or are reversed subsequently, or the regulatory measures that are ultimately enacted deliver significant competitive advantages to financial services that are structured differently or serve different markets than us. For example, there may be future legislation or rulemaking in emerging regulatory areas, such as a more accommodative stance on novel financial services or new technologies, including those related to stablecoins. Adoption of new technologies, such as distributed ledger technologies, tokenization, cloud computing, AI and machine learning technologies, can present challenges in applying and relying on existing compliance systems. Compliance expectations and expenditures have significantly increased over time for us, particularly as regulators have heightened their focus on the adequacy of controls to support business operations. We may have to make additional investments in risk management, compliance and other functions in response to enforcement actions, supervisory expectations and the integration of Discover into our Framework and corporate culture. We may face additional risks, including risks of supervisory and enforcement actions, if we are unable to align Discover’s risk and control culture and environment with the expectations of 38Capital One Financial Corporation (COF) 38Capital One Financial Corporation (COF) 38Capital One Financial Corporation (COF) 38 Table of Contents Table of Contents our regulators. We may become subject to compliance and regulatory risks if new issues, including issues that may be more severe than we anticipated before the closing of the Transaction, are identified as part of the integration of Discover or otherwise relating to Discover’s activities. We may also face compliance and regulatory risks if we introduce new or changed products and services or enter into new business arrangements with third-party service providers, alternative payment providers or other industry participants as a result of the Transaction. Heightened regulatory expectations and increased volume of regulatory changes may generate additional expenses or require significant time and resources to maintain compliance. Certain laws and regulations, and any interpretations and applications with respect thereto, are generally intended to protect consumers, borrowers, depositors, the DIF, the U.S. banking and financial system, and financial markets as a whole, but not stockholders. Our success depends on our ability to maintain compliance with both existing and new laws and regulations. For a description of the material laws and regulations, including those related to the consumer lending business, to which we are subject, see “Part I—Item 1. Business—Supervision and Regulation.”

A wide array of laws and regulations, including banking, tax and consumer lending laws and regulations, apply to every aspect of our business and these laws can be uncertain and evolving. We and our subsidiaries are also subject to supervision and examination by multiple regulators both in the U.S. and abroad, and the manner in which our regulators interpret applicable laws and regulations may affect how we comply with them. Failure to comply with these laws and regulations and effectively navigate this complex regulatory landscape, even if the failure is inadvertent, results from human error or reflects a difference in interpretation or conflicting legal requirements, could subject 35Capital One Financial Corporation (COF) 35Capital One Financial Corporation (COF) 35Capital One Financial Corporation (COF) 35 Table of Contents Table of Contents us to restrictions on our business activities, fines, criminal sanctions and other penalties, and/or damage to our reputation with regulators, our customers or the public. Hiring, training and retaining qualified compliance and legal personnel, and establishing and maintaining risk management and compliance-related systems, infrastructure and processes, is difficult and may lead to increased expenses. These efforts and the associated costs could limit our ability to invest in other business opportunities. In addition, actions, behaviors or practices by us, our employees or representatives that are illegal, unethical or contrary to our core values could harm us, our stockholders or customers or damage the integrity of the financial markets and are subject to regulatory scrutiny across jurisdictions. Violations of law by other financial institutions may also result in increased regulatory scrutiny of our business. Applicable rules and regulations may affect us disproportionately compared to our competitors or in an unforeseen manner. For example, we have a large number of customer accounts in our credit card and auto lending businesses and we have made the strategic choice to originate and service subprime credit card and auto loans, which typically have higher delinquencies and charge-offs than prime customer accounts. As a result, we have significant involvement with credit bureau reporting and the collection and recovery of delinquent and charged-off debt, primarily through customer communications, the filing of litigation against customers in default, the periodic sale of charged-off debt and vehicle repossession. These and other consumer lending activities are subject to customer complaints and enhanced legal and regulatory scrutiny from regulators, courts and legislators. Any future changes to or legal liabilities resulting from our business practices in these areas, including our debt collection practices and the fees we charge, whether mandated by regulators, courts, legislators or otherwise, could have a material adverse impact on our financial condition. The legislative, regulatory and supervisory environment is beyond our control, may change rapidly and unpredictably, and may negatively influence our revenue, costs, earnings, growth, liquidity and capital levels. For example, the CFPB has announced several initiatives related to the amounts and types of fees financial institutions may charge, including a final rule amending Regulation Z that, if it goes into effect as currently issued, would significantly lower the safe harbor amount for past due fees that a large credit card issuer, such as the Bank, can charge on consumer credit card accounts. Such changes could affect our ability or willingness to provide certain products or services, necessitate changes to our business practices, or reduce our revenues. There may also be future rulemaking in emerging regulatory areas, such as climate-related risks and new technologies. Adoption of new technologies, such as distributed ledger technologies, tokenization, cloud computing, AI and machine learning technologies, can present unforeseen challenges in applying and relying on existing compliance systems. In addition, some laws and regulations may be subject to litigation or other challenges that delay or modify their implementation and impact on us. Furthermore, political and policy goals of elected officials may change over time, which could impact the rulemaking, supervision, examination and enforcement priorities of the Federal Banking Agencies. Certain laws and regulations, and any interpretations and applications with respect thereto, are generally intended to protect consumers, borrowers, depositors, the DIF, the U.S. banking and financial system, and financial markets as a whole, but not stockholders. Our success depends on our ability to maintain compliance with both existing and new laws and regulations. For a description of the material laws and regulations, including those related to the consumer lending business, to which we are subject, see “Item 1. Business—Supervision and Regulation.”

Our ability to attract and retain customers is highly dependent upon the perceptions of consumer and commercial borrowers and deposit holders and other external perceptions of our products, services, business practices, workplace culture, compliance practices or our financial health. Capital One’s brands, including Discover, PULSE and Diners Club, are some of our most 47Capital One Financial Corporation (COF) 47Capital One Financial Corporation (COF) 47Capital One Financial Corporation (COF) 47 Table of Contents Table of Contents important assets. Maintaining and enhancing our brands depends largely on our ability to continue to provide high-quality products and services. Adverse perceptions regarding our reputation in the consumer, commercial and funding markets could lead to difficulties in generating, maintaining and financing accounts. In particular, negative public perceptions regarding our reputation, including negative perceptions regarding our ability to maintain the security of our technology systems and protect customer data, could lead to decreases in the levels of deposits that current and potential consumer and commercial customers choose to maintain with us. In addition, we operate across a number of different businesses, and negative publicity with respect to one business could have negative consequences across all of our businesses. Negative perceptions may also significantly increase the costs of attracting and retaining customers, increase susceptibility to litigation and enforcement actions or other adverse effects on our business, results of operations and financial condition. Negative public opinion or damage to our brand could also result from actual or alleged conduct in any number of activities or circumstances, including lending and payment network practices, regulatory compliance, cyber-attacks or other security incidents, accounting issues, corporate governance and sales and marketing, and from actions taken by regulators or other persons in response to such conduct. Such conduct could fall short of our customers’ and the public’s heightened expectations of companies of our size with rigorous privacy, data protection, data security and compliance practices, and could further harm our reputation. We strategically license our trademarks to business partners and network participants, some of whom have contractual obligations to promote and develop our brands. In addition, our co-brand and private label credit card partners or other third parties with whom we have important relationships may take actions over which we have limited control that could negatively impact perceptions about us or the financial services industry. The proliferation of social media and its rapid and broad dissemination of information (or misinformation and disinformation) may increase the likelihood that negative public opinion from any of the actual or alleged events discussed above may trigger a loss of trust or confidence on the part of clients, counterparties, shareholders, investors, debt holders, market analysts or other relevant parties, including regulators, and could impact our reputation and business. In addition, a variety of economic or social factors may cause changes in borrowing activity, including credit card use, payment patterns and the rate of defaults by account holders and borrowers domestically and internationally. These economic and social factors include changes in consumer confidence levels, the public’s perception regarding the banking industry and consumer debt, including credit card use, and changing attitudes about the stigma of bankruptcy. If consumers develop or maintain negative attitudes about incurring debt, or consumption trends decline or if we fail to maintain and enhance our brand, or we incur significant expenses to do so, our reputation and business and financial results could be materially and negatively affected. Environmental, social and corporate governance policies may create competing stakeholder, legislative and regulatory scrutiny that may impact our reputation or operations. As a result, we may not be able to meet the full range of expectations and demands of all our stakeholders. Any failure to meet our stakeholders full range of expectations and demands could result in reputational damage, a loss of customer and investor confidence, increased legal and operational risks and other adverse effects on our results of operations and prospects. For example, as part of our acquisition of Discover, we have committed to a $265 billion Community Benefits Plan (“CBP”) over five years. Failure to adequately deliver on, or material revisions to, this commitment, whether due to financial constraints, operational inefficiencies or external economic factors, may lead to public criticism, which may expose us to significant reputational risks. Also, some stakeholders may object to the scope or nature of the CBP initiative, which could give rise to negative responses by governmental actors (e.g., litigation, retaliatory legislation) or by customers and advocates (e.g., boycotts) that could adversely affect our brand value.

Our ability to attract and retain customers is highly dependent upon the perceptions of consumer and commercial borrowers and deposit holders and other external perceptions of our products, services, trustworthiness, business practices, workplace culture, compliance practices or our financial health. All of Capital One’s brands are one of our most important assets. Maintaining and enhancing our brand depends largely on our ability to continue to provide high-quality products and services. Adverse perceptions regarding our reputation in the consumer, commercial, and funding markets could lead to difficulties in generating, maintaining and financing accounts. In particular, negative public perceptions regarding our reputation, including negative perceptions regarding our ability to maintain the security of our technology systems and protect customer data, could lead to decreases in the levels of deposits that current and potential consumer and commercial customers choose to maintain with us. Negative perceptions may also significantly increase the costs of attracting and retaining customers. In addition, negative perceptions regarding certain industries, partners or clients could also prompt us to cease business activities associated with those entities in order to manage reputational risk. Negative public opinion or damage to our brand could also result from actual or alleged conduct in any number of activities or circumstances, including lending practices, regulatory compliance, cyber-attacks or other security incidents, corporate governance and sales and marketing, and from actions taken by regulators or other persons in response to such conduct. Such conduct could fall short of our customers’ and the public’s heightened expectations of companies of our size with rigorous privacy, data protection, data security and compliance practices, and could further harm our reputation. In addition, our co-brand and private label credit card partners or other third parties with whom we have important relationships may take actions over which we have limited control that could negatively impact perceptions about us or the financial services industry. The proliferation of social media may increase the likelihood that negative public opinion from any of the actual or alleged events discussed above could impact our reputation and business. In addition, a variety of economic or social factors may cause changes in borrowing activity, including credit card use, payment patterns and the rate of defaults by account holders and borrowers domestically and internationally. These economic and social factors include changes in consumer confidence levels, the public’s perception regarding the banking industry and consumer debt, including credit card use, and changing attitudes about the stigma of bankruptcy. If consumers develop or maintain negative attitudes about incurring debt, or consumption trends decline or if we fail to maintain and enhance our brand, or we incur significant expenses to do so, our reputation and business and financial results could be materially and negatively affected. There has also been an increased focus by investor advocacy groups, investment funds and shareholder activists, among others, on topics related to environmental, social and corporate governance policies, and our policies, practices and disclosure in these areas, including those related to climate change. Reputation risk related to corporate policies and practices on environmental, social and corporate governance topics is increasingly complex. Divergent ideological and social views may create competing stakeholder, legislative, and regulatory scrutiny that may impact our reputation or operations. Furthermore, responding to environmental, social and corporate governance considerations and implementing our related goals and initiatives involve risk and uncertainties, require investments and depend in part on third-party performance or data that is outside of our control. There can be no assurance that we will achieve these goals and initiatives or that any such achievements will have the desired results. Our failure or perceived failure to achieve progress in these areas on a timely basis, if at all, or incorrect perception or distortions of our goals and initiatives could impact our reputation and public perceptions of our business.

We have incurred and expect to incur a number of significant non-recurring costs associated with the integration of Discover. There are a large number of processes, policies, procedures, operations, technologies and systems that have been and will continue to be integrated, including purchasing, accounting and finance, payroll, cybersecurity, compliance, treasury management, customer management operations, vendor management, risk management, lines of business, pricing and benefits. While we have assumed that a certain level of costs will be incurred, many of the expenses that we will incur are, by their nature, difficult to estimate accurately. Moreover, there are many factors beyond our control that could affect the total amount or the timing of integration expenses. These expenses could, particularly in the near term, exceed the savings that we expect to achieve from the elimination of duplicative expenses and the realization of economies of scale. These expenses may result in us recording increased expenses as a result of the integration of Discover, and the amount and timing of such charges are uncertain at the present and could exceed initial estimates.

We have incurred and expect to incur a number of significant non-recurring costs associated with the Transaction and the integration of Discover. These costs include legal, financial advisory, accounting, consulting and other advisory fees, severance/employee benefit‐related costs, public company filing fees and other regulatory fees, financial printing and other printing costs and other related costs. In addition, we will incur integration costs following the completion of the Transaction as we integrate Discover’s business with ours, including facilities and systems consolidation costs and employment-related costs. There are a large number of processes, policies, procedures, operations, technologies and systems that may need to be integrated, including purchasing, accounting and finance, payroll, compliance, treasury management, branch operations, vendor management, risk management, lines of business, pricing and benefits. While we have assumed that a certain level of costs will be incurred, there are many factors beyond our control that could affect the total amount or the timing of these expenses. Moreover, many of the expenses that we will incur are, by their nature, difficult to estimate accurately. These expenses could, particularly in the near term, exceed the savings that we expect to 24Capital One Financial Corporation (COF) 24Capital One Financial Corporation (COF) 24Capital One Financial Corporation (COF) 24 Table of Contents Table of Contents achieve from the elimination of duplicative expenses and the realization of economies of scale. These expenses may result in us recording increased expenses as a result of the Transaction or the integration of Discover, and the amount and timing of such charges are uncertain at the present and could exceed initial estimates.

We may fail to realize the anticipated benefits of the Transaction, including, among other things, anticipated revenue and cost synergies, due to factors that may be outside our control. Our ability to continue to grow our business depends upon our ability to successfully hire, train, supervise, retain and manage new employees, obtain financing for our capital needs, expand our systems effectively, control increasing costs, allocate our human resources optimally, maintain clear lines of communication between our operational functions and our finance and accounting functions and manage the pressures on our management and administrative, operational and financial infrastructure. There can be no assurance that we will be able to accurately anticipate and respond to the changing demands we will face as we continue to expand our operations or that we will be able to achieve 25Capital One Financial Corporation (COF) 25Capital One Financial Corporation (COF) 25Capital One Financial Corporation (COF) 25 Table of Contents Table of Contents further growth at all. Additionally, we face risks that any business, technology, service or product we integrate from Discover may significantly under-perform relative to our expectations, and that we may not achieve the benefits we expect, which could, among other things, result in a write-down of goodwill and other intangible assets associated with the Transaction. Other factors include, but are not limited to, changes in laws or regulations or the implementation or interpretation of laws or regulations due to, among other things, changes in government or general economic, marketplace, technological, political, legislative or regulatory conditions. For example, debit card transactions on three-party networks could become subject to the Federal Reserve’s Regulation II (Debit Card Interchange Fees and Routing) requirements, and other changes in laws or regulations or in the interpretation of existing laws or regulations could impose additional limitations on the fees issuers or networks can charge on debit or credit card transactions or require merchants to be provided an alternative network for transaction routing, any of which may have an adverse effect on our business. Other factors that also may impact our ability to achieve the anticipated benefits of the Transaction include the outcome of any legal or regulatory proceedings that may be currently pending or later instituted against us, including those related to the Card Product Misclassification. As a result of the Transaction, we have become the legal successor to Discover and, as a result, have assumed the risks relating to actions that were or may be later instituted against Discover or us relating to Discover’s previous actions, as well as ongoing expenses in defending and resolving these actions, and are subject to reputational and other risks associated with Discover’s previous actions. If we fail to realize the anticipated benefits of the Transaction, or if those benefits take longer to realize than expected, it could have an adverse effect on our business, financial condition and results of operations.

We may fail to realize the anticipated benefits of the proposed Transaction, including, among other things, anticipated revenue and cost synergies, due to factors that may be outside either party’s control. These factors include, but are not limited to, changes in laws or regulations or the implementation or interpretation of laws or regulation due to changes in government or general economic, political, legislative or regulatory conditions. For example, debit card transactions on three-party networks—comprising the cardholder, merchant and network provider—could become subject to the Federal Reserve’s Regulation II limitation on interchange fees or its prohibition on network exclusivity, and other changes in laws or regulation could impose additional limitations on the fees issuers or networks can charge on debit or credit card transactions or require merchants to be provided an alternative network for transaction routing, any of which may have an adverse effect on our business. Other factors that may impact our ability to achieve the anticipated benefits of the proposed Transaction include the outcome of any legal or regulatory proceedings that may be currently pending or later instituted against us (before or after completion of the Transaction) or against Discover, including those related to Discover’s card product misclassification issue. As a result of the Transaction, we will be the legal successor to Discover and as a result we will assume the risks relating to actions that may be currently pending or later instituted against Discover, as well as any ongoing expense in defending and resolving these actions, and may be subject to reputational and other risks associated with Discover’s actions. Both parties have operated and, until the completion of the Transaction, will continue to operate, independently. The success of the Transaction, including anticipated benefits and cost savings, will depend, in part, on our ability to successfully integrate Discover’s operations in a manner that results in various benefits and that does not materially disrupt existing customer relationships or materially decrease revenues due to loss of customers, as well as our ability to successfully integrate Discover into our Framework, compliance systems and corporate culture, which we believe will require extensive investment, including to enhance the risk management function at Discover consistent with our risk management standards and those of regulators, as well as to address remediation obligations under existing and possible future regulatory orders. The costs of these investments may be greater than anticipated and the benefits thereof may take longer than expected to realize. The process of integrating operations could result in a loss of key personnel or cause an interruption of, or loss of momentum in, the activities of one or more of our businesses following the completion of the Transaction. Inconsistencies in standards, controls, procedures and policies between us and Discover could adversely affect us following the completion of the Transaction. The diversion of management’s attention and any delays or difficulties encountered in connection with the Transaction and the integration of Discover’s operations could have an adverse effect on our business, financial condition, operating results and prospects. An inability to realize the full extent of the anticipated benefits of Transaction, as well as any delays encountered in the integration process, could have an adverse effect on our revenues, levels of expenses and operating results following the completion of the Transaction.

We are subject to the risk of fraudulent activity perpetrated by bad actors or by our customers. Our customers may also fall victim to scams in which they authorize bad actors to take account actions on their behalf. The risk of fraud continues to be a persistent inherent risk for the financial services industry. Our risk of fraud continues to increase as third parties that handle confidential consumer information suffer security breaches, we expand our digital banking business and we introduce new products and features (including our acquisition of the Global Payment Network). Credit and debit card fraud, identity theft and electronic-transaction related crimes are prevalent, and perpetrators are growing ever more sophisticated. While we have fraud defenses, authentication tools and various other strategies designed to address such risks, there can be no assurance that losses will not exceed historical levels or our expectations. There are also risks to our ability to recover fraud losses based on potential changes to fraud liability. Additionally, consumer activists and regulators have sought to expand financial institutions’ responsibility to hold customers harmless for transactions that they authorized on their accounts that are the result of scams. Emerging generative AI capabilities, such as synthetic video, images and identity documents may introduce new risks, in the form of identity fraud and scams. Additionally, the growth of agentic commerce, in which autonomous AI agents initiate and execute transactions on behalf of users, may increase fraud losses as well as change circumstances when the merchant or issuer is liable for fraud losses. Legal frameworks governing such autonomous agents remain nascent, with limited direct guidance, and the interplay between laws and regulations relating to, among other things, fraud, payments, privacy, data protection, data security and AI may create uncertainty around compliance obligations and potential liability exposure as more participants (including sellers, fintechs, AI developers and enablers) enter the agentic commerce ecosystem. Our financial condition, the level of our fraud charge-offs and other results of operations could be materially adversely affected if fraudulent activity were to significantly increase. Furthermore, high-profile fraudulent activity could negatively impact our brand and reputation. In addition, significant increases in fraudulent activity could lead to regulatory intervention or other actions (such as mandatory card reissuance) and reputational and financial damage to our brands, which could negatively impact the use of our deposit accounts, cards and networks, any of which could have a material adverse effect on our business.

We are subject to the risk of fraudulent activity associated with merchants, customers and other third parties handling customer information. The risk of fraud continues to be a persistent inherent risk for the financial services industry. Credit and debit card fraud, identity theft and electronic-transaction related crimes are prevalent and perpetrators are growing ever more sophisticated. Emerging generative AI capabilities, such as synthetic voice and conversation generation, introduced an increase in fraud risks, especially in the form of identity fraud. While we have policies and procedures designed to address such risk, there can be no assurance that losses will not occur. Our resources, customer authentication methods and fraud prevention tools may be insufficient to accurately predict, prevent or detect fraud. Consumer activists and regulators have sought to expand financial institutions’ responsibility to hold customers harmless for fraudulent transactions that they authorized on their accounts. Our risk of fraud continues to increase as third parties that handle confidential consumer information suffer security breaches and we expand our digital banking business and introduce new products and features. Our financial condition, the level of our fraud charge-offs and other results of operations could be materially adversely affected if fraudulent activity were to significantly increase. Furthermore, high-profile fraudulent activity could negatively impact our brand and reputation. In addition, significant increases in fraudulent activity could lead to regulatory intervention or other actions (such as mandatory card reissuance) and reputational and financial damage to our brands, which could negatively impact the use of our deposit accounts and cards and which could have a material adverse effect on our business.