Charles Schwab Corporation: 10-K Risk Factor Changes

We rely on external service providers to perform certain key technology, cloud infrastructure, processing, servicing, and support functions. These service providers face technology, operating, business, and economic risks, and any significant failures by them, including the improper use or disclosure of our confidential client, employee, or company information, could cause us to incur losses and could harm our reputation. An interruption in or the cessation of service by any external service provider as a result of systems failures, capacity constraints, financial difficulties, natural disasters, extreme weather, power outage, public health crises, political developments, war, international disputes, or for any other reason, and our inability to make alternative arrangements in a timely manner could disrupt our operations, impact our ability to offer certain products and services, and result in financial losses to us. As a result of both broad-reaching and company-specific technology impacts from our third-party service providers, we have experienced in recent years outages of client websites, mobile applications, and certain corporate technology. During the COVID-19 pandemic, we temporarily lost the services from some of our outsourced service providers which contributed to increased client service response and processing times. Switching to an alternative service provider may require a transition period and result in less efficient operations.

We rely on external service providers to perform certain key technology, cloud infrastructure, processing, servicing, and support functions. These service providers face technology, operating, business, and economic risks, and any significant failures by them, including the improper use or disclosure of our confidential client, employee, or company information, could cause us to incur losses and could harm our reputation. An interruption in or the cessation of service by any external service provider as a result of systems failures, capacity constraints, financial difficulties, natural disasters, extreme weather, power outage, public health crises, political developments, war, international disputes, or for any other reason, and our inability to make alternative arrangements in a timely manner could disrupt our operations, impact our ability to offer certain products and services, and result in financial losses to us. We temporarily lost the services from some of our outsourced service providers during the COVID-19 pandemic which contributed to increased client service response and processing times. Following Russia’s invasion of Ukraine, we had to replace certain vendor resources which added incremental complexity in earlier phases of our TD Ameritrade conversion work. Switching to an alternative service provider may require a transition period and result in less efficient operations.

New legislation, rules, regulations and guidance, or changes in the interpretation or enforcement of existing federal, state, foreign and SRO rules, regulations and guidance, including changes relating to mutual funds, money market funds, standards of conduct with clients, conflicts of interest, regulatory treatment of deposit accounts, CRA, changes in required minimum capital and capital structure, and changes in equity market structure, including rules relating to order routing and order-related revenues, may directly affect our operations and profitability or our specific business lines. In recent years, the SEC has proposed a number of new rules, such as its equity market structure proposals, that would require sweeping changes in industry operations and practices, thereby increasing uncertainty for markets and investors. The U.S. federal banking agencies have recently proposed rules regarding regulatory capital and long-term debt, and compliance with these proposed rules may result in increased costs and reduce our net income. In addition, the FDIC recently proposed amending the brokered deposits framework setting forth its conditions for when broker-dealers, such as CS&Co, that place deposits with depository institutions through brokerage sweep arrangements qualify for the primary purpose exception from the definition of a deposit broker. Our profitability could also be affected by rules and regulations that impact the business and financial communities generally, including changes to the laws governing taxation, electronic commerce, client privacy and security of client data. In addition, the rules and regulations could result in limitations on the lines of business we conduct, modifications to our business practices, more stringent capital and liquidity requirements, increased deposit insurance assessments or additional costs and could limit our ability to return capital to stockholders. These changes may also require us to invest significant management attention and resources to evaluate and make necessary changes to our compliance, risk management, treasury, and operations functions.

New legislation, rules, regulations and guidance, or changes in the interpretation or enforcement of existing federal, state, foreign and SRO rules, regulations and guidance, including changes relating to mutual funds, money market funds, standards of conduct with clients, conflicts of interest, regulatory treatment of deposit accounts, CRA, changes in required minimum capital and capital structure, and changes in equity market structure, including rules relating to order routing and order-related revenues, may directly affect our operations and profitability or our specific business lines. Recently, the SEC has proposed or adopted a number of new rules, and these new or proposed rules involve sweeping changes that could require significant shifts in industry operations and practices, thereby increasing uncertainty for markets and investors. The U.S. federal banking agencies have recently proposed rules regarding regulatory capital and long-term debt, and compliance with these proposed rules may result in increased costs and reduce our net income. In addition, the U.S. Department of Labor recently proposed rules to significantly broaden the definition of “fiduciary” under the Employee Retirement Income Security Act of 1974, which, among other requirements, would subject broker-dealers who provide non-discretionary investment advice to retirement plans to a “best interest” standard. Our profitability could also be affected by rules and regulations that impact the business and financial communities generally, including changes to the laws governing taxation, electronic commerce, client privacy and security of client data. In addition, the rules and regulations could result in limitations on the lines of business we conduct, modifications to our business practices, more stringent capital and liquidity requirements, increased deposit insurance assessments or additional costs and could limit our ability to return capital to stockholders. These changes may also require us to invest significant management attention and resources to evaluate and make necessary changes to our compliance, risk management, treasury, and operations functions.

Concerns regarding the soundness or creditworthiness of other financial institutions can cause substantial disruption within the financial markets and have negative impacts for us and our industry, including reductions in availability of liquidity, higher borrowing costs, and higher costs of capital. Such concerns regarding one or more financial institutions may also advance public concerns regarding Schwab or the financial services industry more broadly, which could harm our reputation and adversely affect our results of operations and financial condition, even if underlying matters impacting other financial institutions are of limited or no direct applicability to us. Financial institutions are interrelated through trading, clearing, or other relationships, and, as a result, concerns about the financial condition of one or more institutions could lead to significant market-wide liquidity and credit problems, losses, or defaults by other institutions. This risk may adversely affect financial intermediaries, such as broker-dealers, banks, clearing houses, securities exchanges, market makers, and others, with which we interact on a daily basis, and therefore, could adversely affect us. Events affecting the financial services industry may also result in potentially adverse changes to laws or regulations governing banks and savings and loan holding companies or result in the imposition of restrictions through supervisory or enforcement activities, including higher capital or liquidity requirements or increased FDIC premiums and special assessments, which could have a material impact on our business. Following the failure of several U.S. banks in 2023, the U.S. federal banking agencies proposed rules that would significantly impact our regulatory capital requirements, including requiring us to include AOCI in regulatory capital, as well as rules that would require minimum levels of eligible long-term debt at CSC and our banking subsidiaries. As a result of heightened regulatory focus on capital requirements, the Company took measures to increase its capital, including revising its long-term operating objective. In addition, the cost of resolving the 2023 bank failures resulted in increased FDIC costs and may prompt the FDIC to further increase its premiums or to issue additional special assessments, which could have a material negative impact on our profitability and our business.

Concerns regarding the soundness or creditworthiness of other financial institutions can cause substantial disruption within the financial markets and have negative impacts for us and our industry, including reductions in availability of liquidity, higher borrowing costs, and higher costs of capital. Such concerns regarding one or more financial institutions may also advance public concerns regarding Schwab or the financial services industry more broadly, which could harm our reputation and adversely affect our results of operations and financial condition, even if underlying matters impacting other financial institutions are of limited or no direct applicability to us. Financial institutions are interrelated through trading, clearing, or other relationships, and, as a result, concerns about the financial condition of one or more institutions could lead to significant market-wide liquidity and credit problems, losses, or defaults by other institutions. This risk may adversely affect financial intermediaries, such as broker-dealers, banks, clearing houses, securities exchanges, market makers, and others, with which we interact on a daily basis, and therefore, could adversely affect us. - 13 - - 13 - - 13 -

The direction and level of interest rates are important factors in our earnings. A decline in interest rates may have a negative impact on our net interest revenue and our bank deposit account fee revenue. The Company’s interest-earning assets include significant holdings of investment securities, which include fixed- and floating-rate debt securities, including substantial holdings of mortgage-backed securities, as well as mortgages. The Company could be adversely affected by a decline in interest rates if the rates that the Company earns on interest-earning assets decline more than the rates that the Company pays on its funding sources, or if prepayment rates increase on the mortgages and mortgage-backed securities that the Company holds. A low interest rate environment may also have a negative impact on our asset management and administration fee revenues when we have to waive a portion of our management fees, as we experienced in 2020 and 2021, for certain Schwab-sponsored money market mutual funds in order to continue providing a positive return to clients. A decline in interest rates may also negatively impact our bank deposit account fee revenue, which is earned primarily pursuant to the 2023 IDA agreement. Though the Company may benefit from a rising interest rate environment, a rise in interest rates may cause our funding costs to increase if market conditions or the competitive environment induces us to raise our interest rates to avoid losing deposits, or replace deposits with higher-cost funding sources without offsetting increases in yields on interest-earning assets, which can reduce the benefit of higher market interest rates to our net interest revenue, as we experienced in recent years. The rapid increases in market interest rates experienced in 2022 and 2023 also contributed to increased unrealized losses on our investment - 12 - - 12 - - 12 -

The direction and level of interest rates are important factors in our earnings. A decline in interest rates may have a negative impact on our net interest revenue and our bank deposit account fee revenue. The Company’s interest-earning assets include significant holdings of investment securities, which include fixed- and floating-rate debt securities, including substantial holdings of mortgage-backed securities, as well as mortgages. The Company could be adversely affected by a decline in interest rates if the rates that the Company earns on interest-earning assets decline more than the rates that the Company pays on its funding sources, or if prepayment rates increase on the mortgages and mortgage-backed securities that the Company holds. A low interest rate environment may also have a negative impact on our asset management and administration fee revenues when we have to waive a portion of our management fees, as we experienced in 2020 and 2021, for certain Schwab-sponsored money market mutual funds in order to continue providing a positive return to clients. A decline in interest rates may also negatively impact our bank deposit account fee revenue, which is earned primarily pursuant to the 2023 IDA agreement. A rise in interest rates may cause our funding costs to increase if market conditions or the competitive environment induces us to raise our interest rates to avoid losing deposits, or replace deposits with higher-cost funding sources without offsetting increases in yields on interest-earning assets, which can reduce the benefit of higher market interest rates to our net interest revenue, as we experienced in 2022 and 2023. The rapid increases in market interest rates recently experienced have also contributed to increased unrealized losses on our investment securities portfolios. Increased unrealized losses on investment securities or other assets on our balance sheet can reduce market or client confidence in us, which could limit our ability to attract new client assets and accounts or result in the transfer of client assets and accounts from the Company. A rise in interest rates may also reduce our bank deposit account fee revenue, as clients may reallocate assets out of bank deposit account balances and into higher-yielding investment alternatives, as we experienced in 2022 and 2023. The 2023 IDA agreement involves certain commitments, including the maintenance of prescribed minimum and maximum IDA balances, that limit our ability to respond to changes in interest rates and may impact our profitability and bank deposit account fee revenue. The bank deposit account fee revenue that we earn related to the IDA agreement may be less than the net interest revenue that we could have earned if the deposit balances were swept to our banking subsidiaries rather than the TD Depository Institutions. When we are permitted to reduce the IDA balances, we can only move the balances to our banking subsidiaries if we have sufficient capital.

We must process, record and monitor a large number of transactions and our operations are highly dependent on the integrity of our technology systems and our ability to make timely enhancements and additions to our systems. System interruptions, errors or downtime can result from a variety of causes, including changes in client use patterns, technological failure, changes to our systems, linkages with third-party systems and power failures and can have a significant impact on our business and operations. Our systems are vulnerable to disruptions from human error, execution errors, errors in models such as those used for asset management, capital planning and management, risk management, stress testing and compliance, employee misconduct, unauthorized trading, external fraud, computer viruses, distributed denial of service attacks, cyber attacks, terrorist attacks, natural disaster, extreme weather, power outage, capacity constraints, software flaws, events impacting key business partners and vendors, and similar events. For example, we and other financial institutions have been the target of various denial of service attacks that have, in certain circumstances, made websites, mobile applications and email unavailable for periods of time. Cloud technologies are critical to the operation of our systems and platforms and our reliance on cloud technologies is growing. We have experienced, and could, in the future, experience cloud service disruptions that lead to delays in accessing data that is important to our businesses. Such disruptions, such as the broad-reaching cloud platform outages that impacted multiple industries in 2024, can and have hindered our clients’ access to our platforms. It could take an extended period of time to restore full functionality to our technology or other operating systems in the event of an unforeseen occurrence, which could affect our ability to process and settle client transactions. Despite our efforts to identify areas of risk, oversee operational areas involving risk, and implement policies and procedures designed to manage these risks, there can be no assurance that we will not suffer unexpected losses, reputational damage or regulatory action due to technology or other operational failures or errors, including those of our vendors or other third parties. While we devote substantial attention and resources to the reliability, capacity and scalability of our systems, we occasionally experience extraordinary trading volumes, which have caused and could cause our computer systems to operate at unacceptably slow speeds or even fail, affecting our ability to process client transactions and potentially resulting in some clients’ orders being executed at prices they did not anticipate. Disruptions in service and slower system response times could result in substantial losses, decreased client satisfaction, reputational damage, and regulatory inquiries. We are also dependent on the integrity and performance of securities exchanges, clearing houses, market makers, dealers, and other intermediaries to which client orders are routed for execution and settlement. System failures and constraints and transaction errors at such intermediaries could result in delays and erroneous or unanticipated execution prices and cancelled orders, cause substantial losses for us and for our clients, and subject us to claims from our clients for damages, and cause reputational harm. We experienced in 2024 technology outages of client websites, mobile applications, and certain corporate technology as a result of technological issues with third-party service providers that we use to support websites and mobile applications used by us and our clients. An internal issue or issues with vendor or industry systems and connectivity could materially impact our operations and ability to service clients, subject us to material losses, and cause reputational harm. Certain events could increase our client service and processing times due to staffing shortages, remote work or the temporary loss of services from outsourced service providers, such as occurred during the COVID-19 pandemic. We consider service quality to be an important part of the client experience and our failure to meet client expectations could result in decreased client satisfaction. We take steps to prevent and detect fraud but the ways that fraudulent activity is attempted is continuously evolving. Although we monitor for new types of fraud, there may be a delay in recognizing the fraud is happening. Besides potential losses, shutting down fraudulent activity often requires a balance with client experience. Instances of fraud might negatively impact our reputation and client confidence in the Company, in addition to any direct losses that might result from such instances. - 15 - - 15 - - 15 -

We must process, record and monitor a large number of transactions and our operations are highly dependent on the integrity of our technology systems and our ability to make timely enhancements and additions to our systems. System interruptions, errors or downtime can result from a variety of causes, including changes in client use patterns, technological failure, changes to our systems, linkages with third-party systems and power failures and can have a significant impact on our business and operations. Our systems are vulnerable to disruptions from human error, execution errors, errors in models such as those used for asset management, capital planning and management, risk management, stress testing and compliance, employee misconduct, unauthorized trading, external fraud, computer viruses, distributed denial of service attacks, cyber attacks, terrorist attacks, natural disaster, extreme weather, power outage, capacity constraints, software flaws, events impacting key business partners and vendors, and similar events. For example, we and other financial institutions have been the target of various denial of service attacks that have, in certain circumstances, made websites, mobile applications and email unavailable for periods of time. Cloud technologies are critical to the operation of our systems and platforms and our reliance on cloud technologies is growing. Cloud service disruptions may lead to delays in accessing data that is important to our businesses and may hinder our clients’ access to our platforms. It could take an extended period of time to restore full functionality to our technology or other operating systems in the event of an unforeseen occurrence, which could affect our ability to process and settle client transactions. Despite our efforts to identify areas of risk, oversee operational areas involving risk, and implement policies and procedures designed to manage these risks, there can be no assurance that we will not suffer unexpected losses, reputational damage or regulatory action due to technology or other operational failures or errors, including those of our vendors or other third parties. While we devote substantial attention and resources to the reliability, capacity and scalability of our systems, we occasionally experience extraordinary trading volumes, which have caused and could cause our computer systems to operate at unacceptably slow speeds or even fail, affecting our ability to process client transactions and potentially resulting in some clients’ orders being executed at prices they did not anticipate. Disruptions in service and slower system response times could result in substantial losses, decreased client satisfaction, reputational damage, and regulatory inquiries. We are also dependent on the integrity and performance of securities exchanges, clearing houses, market makers, dealers, and other intermediaries to which client orders are - 17 - - 17 - - 17 -

CSC, together with its banking, broker-dealer, and FCM/FDM subsidiaries, must meet certain capital and liquidity standards, subject to qualitative judgments by regulators about the adequacy of our capital and our internal assessment of our capital needs. The Uniform Net Capital Rule limits the ability of our broker-dealer subsidiary to transfer capital to CSC and other affiliates. New regulatory capital, liquidity, capital planning, and stress testing requirements may limit or otherwise restrict how we utilize our capital, including paying dividends, stock repurchases, and redemptions, and may require us to increase our capital and/or liquidity or to limit our growth. Failure by either CSC or its banking subsidiaries to meet minimum capital requirements could result in certain mandatory and additional discretionary actions by regulators that, if undertaken, could have a negative impact on us. In addition, failure by CSC or our banking subsidiaries to maintain a sufficient amount of capital to satisfy their stress capital buffer (CSC) or capital conservation buffer (banking subsidiaries) and countercyclical capital buffer requirements would result in restrictions on our ability to make capital distributions and discretionary cash bonus payments to executive officers. Any requirement that we increase our regulatory capital, replace certain capital instruments which presently qualify as Tier 1 Capital, or increase regulatory capital ratios or liquidity, could require us to liquidate assets, deleverage or otherwise change our business and/or investment plans, which may adversely affect our financial results. Issuing additional common stock would dilute the ownership of existing stockholders. CSC is subject to the CCAR process, which requires submission of an annual capital plan, and determination of CSC’s stress capital buffer. The plan must include a description of all planned capital actions, including dividends or stock repurchases, over a nine-quarter planning horizon beginning with the first quarter of the calendar year the capital plan is submitted. CSC’s risk-based capital ratios must exceed the regulatory minimum plus the stress capital buffer. The stress capital buffer could make us subject to progressively more stringent constraints on capital actions if we approach our minimum ratios. This could lead to restrictions on our ability to pay or increase dividends or otherwise return capital to stockholders. If the average of CSC’s total consolidated assets for four consecutive calendar quarters reaches $700 billion, or if the average of cross-jurisdictional activity for four consecutive calendar quarters reaches $75 billion, CSC will become subject to more stringent Category II requirements, including annual stress testing, the advanced approaches framework, and the inability to opt out of including AOCI in regulatory capital calculations. At December 31, 2024, CSC had approximately $480 billion in total assets and cross-jurisdictional activity of approximately $27 billion. See also Part II – Item 7 – Current Regulatory and Other Developments for discussion of regulatory proposals that could, among other things, require the Company to include AOCI in its regulatory capital calculations.

result in certain mandatory and additional discretionary actions by regulators that, if undertaken, could have a negative impact on us. In addition, failure by CSC or our banking subsidiaries to maintain a sufficient amount of capital to satisfy their stress capital buffer (CSC) or capital conservation buffer (banking subsidiaries) and countercyclical capital buffer requirements would result in restrictions on our ability to make capital distributions and discretionary cash bonus payments to executive officers. Any requirement that we increase our regulatory capital, replace certain capital instruments which presently qualify as Tier 1 Capital, or increase regulatory capital ratios or liquidity, could require us to liquidate assets, deleverage or otherwise change our business and/or investment plans, which may adversely affect our financial results. Issuing additional common stock would dilute the ownership of existing stockholders. CSC is subject to the CCAR process, which requires submission of an annual capital plan, and determination of CSC’s stress capital buffer. The plan must include a description of all planned capital actions, including dividends or stock repurchases, over a nine-quarter planning horizon beginning with the first quarter of the calendar year the capital plan is submitted. CSC’s risk-based capital ratios must exceed the regulatory minimum plus the stress capital buffer. The stress capital buffer could make us subject to progressively more stringent constraints on capital actions if we approach our minimum ratios. This could lead to restrictions on our ability to pay or increase dividends or otherwise return capital to stockholders. If the average of CSC’s total consolidated assets for four consecutive calendar quarters reaches $700 billion, or if the average of cross-jurisdictional activity for four consecutive calendar quarters reaches $75 billion, CSC will become subject to more stringent Category II requirements, including annual stress testing, the advanced approaches framework, and the inability to opt out of including AOCI in regulatory capital calculations. At December 31, 2023, CSC had approximately $493 billion in total assets and cross-jurisdictional activity of approximately $25 billion. See also Part II – Item 7 – Current Regulatory and Other Developments for discussion of regulatory proposals that could, among other things, require the Company to include AOCI in its regulatory capital calculations.

We have exposure to credit risk associated with our investments. Those investments are subject to price fluctuations. Loss of value of securities can negatively affect earnings if management determines that such loss of value has resulted from a credit loss. The evaluation of whether a credit loss exists is a matter of judgment, which includes the assessment of multiple factors. If management determines that a security’s decline in fair value is the result of a credit loss, an allowance for credit losses on the security will be recorded and a corresponding loss will be recognized in current earnings. Even if a decline in fair value of a security is not determined to have resulted from a credit loss, if we were ever forced to sell the security sooner than intended prior to maturity due to liquidity needs, we would have to recognize any unrealized losses at that time. Our bank loans primarily consist of First Mortgages, PALs, and HELOCs. Increases in delinquency and default rates, housing and stock price declines, increases in the unemployment rate, and other economic factors, can result in increases in allowances for credit losses and related credit loss expense, as well as write downs on such loans. Heightened credit exposures to specific counterparties or instruments can increase our risk of loss. Examples include: •Large positions in financial instruments collateralized by assets with similar economic characteristics or in securities of a single issuer or industry; •Mortgage loans and HELOCs to banking clients which are secured by properties in the same geographic region; and •Client margins, options or futures, pledged assets, and securities lending activities collateralized by or linked to securities of a single issuer, index, or industry. The Company sponsors a number of proprietary money market mutual funds and other proprietary funds. Although the Company has no obligation to do so, the Company may decide for competitive or other reasons to provide credit, liquidity or other support to our funds in the event of significant declines in valuation of fund holdings or significant redemption activity that exceeds available liquidity. Such support could cause the Company to take significant charges, could reduce the Company’s liquidity and, in certain situations, could, with respect to proprietary funds other than money market mutual funds, result in the Company having to consolidate one or more funds in its financial statements. If the Company were to choose not to provide credit, liquidity or other support in such a situation, the Company could suffer reputational damage and its business could be adversely affected.

Our businesses are subject to the risk that a client, counterparty or issuer will fail to perform its contractual obligations, or that the value of collateral held to secure obligations will prove to be inadequate. While we have policies and procedures designed to manage this risk, the policies and procedures may not be fully effective. Our exposure mainly results from margin lending, clients’ options and futures trading, securities lending, mortgage lending, pledged asset lending, our role as a counterparty in financial contracts and investing activities, and indirectly from the investing activities of certain of the proprietary funds that the Company sponsors. When clients purchase securities on margin, borrow on lines of credit collateralized by securities, or trade options or futures, we are subject to the risk that clients may default on their obligations when the value of the securities and cash in their accounts falls below the amount of clients’ indebtedness. Our margin, options and futures business has materially increased as a result of our TD Ameritrade acquisition, and market liquidity represents an increased risk. Abrupt changes in securities valuations and the failure of clients to meet margin calls could result in substantial losses, especially if there is a lack of liquidity. We have exposure to credit risk associated with our investments. Those investments are subject to price fluctuations. Loss of value of securities can negatively affect earnings if management determines that such loss of value has resulted from a credit loss. The evaluation of whether a credit loss exists is a matter of judgment, which includes the assessment of multiple factors. If management determines that a security’s decline in fair value is the result of a credit loss, an allowance for credit losses on the security will be recorded and a corresponding loss will be recognized in current earnings. Even if a decline in fair value of a security is not determined to have resulted from a credit loss, if we were ever forced to sell the security sooner than intended prior to maturity due to liquidity needs, we would have to recognize any unrealized losses at that time. Our bank loans primarily consist of First Mortgages, PALs, and HELOCs. Increases in delinquency and default rates, housing and stock price declines, increases in the unemployment rate, and other economic factors, can result in increases in allowances for credit losses and related credit loss expense, as well as write downs on such loans. Heightened credit exposures to specific counterparties or instruments can increase our risk of loss. Examples include: •Large positions in financial instruments collateralized by assets with similar economic characteristics or in securities of a single issuer or industry; •Mortgage loans and HELOCs to banking clients which are secured by properties in the same geographic region; and •Client margins, options or futures, pledged assets, and securities lending activities collateralized by or linked to securities of a single issuer, index, or industry. The Company sponsors a number of proprietary money market mutual funds and other proprietary funds. Although the Company has no obligation to do so, the Company may decide for competitive or other reasons to provide credit, liquidity or other support to our funds in the event of significant declines in valuation of fund holdings or significant redemption activity that exceeds available liquidity. Such support could cause the Company to take significant charges, could reduce the Company’s liquidity and, in certain situations, could, with respect to proprietary funds other than money market mutual funds, result in the Company having to consolidate one or more funds in its financial statements. If the Company were to choose not to provide credit, liquidity or other support in such a situation, the Company could suffer reputational damage and its business could be adversely affected.

Litigation and arbitration claims include those brought by our clients and the clients of third-party advisors whose assets are custodied with us. Claims from clients of third-party advisors may allege losses due to investment decisions made by the third-party advisors or the advisors’ misconduct. Litigation claims also include claims from third parties alleging infringement of their intellectual property rights (e.g., patents). Such litigation can require the expenditure of significant company resources. If we were found to have infringed on a third-party patent, or other intellectual property rights, we could incur substantial damages, and in some circumstances could be enjoined from using certain technology, or providing certain products or services. Actions brought against us may result in settlements, awards, injunctions, fines, penalties or other results adverse to us, including reputational harm. Even if we are successful in defending against these actions, the defense of such matters may result in us incurring significant expenses. We may also determine that it is in the Company’s best interests to settle a matter, such as to avoid protracted litigation, even though the Company may have strong defenses. A substantial judgment, settlement, fine, or penalty could be material to our operating results or cash flows for a particular future period, depending on our results for that period. In market downturns and periods of heightened volatility, the volume of legal claims and amount of damages sought in litigation and regulatory proceedings against financial services companies have historically increased.

The financial services industry faces significant litigation and regulatory risks. We are subject to claims and lawsuits in the ordinary course of business, including arbitrations, class actions and other litigation, some of which include claims for substantial or unspecified damages. We are also the subject of inquiries, investigations, and proceedings by regulatory and other governmental agencies. Litigation and arbitration claims include those brought by our clients and the clients of third-party advisors whose assets are custodied with us. Claims from clients of third-party advisors may allege losses due to investment decisions made by the third-party advisors or the advisors’ misconduct. Litigation claims also include claims from third parties alleging infringement of their intellectual property rights (e.g., patents). Such litigation can require the expenditure of significant company resources. If we were found to have infringed on a third-party patent, or other intellectual property rights, we could incur substantial damages, and in some circumstances could be enjoined from using certain technology, or providing certain products or services. Actions brought against us may result in settlements, awards, injunctions, fines, penalties or other results adverse to us, including reputational harm. Even if we are successful in defending against these actions, the defense of such matters may result in us incurring significant expenses. We may also determine that it is in the Company’s best interests to settle a matter, such as to avoid protracted litigation, even though the Company may have strong defenses. A substantial judgment, settlement, fine, or penalty could be material to our operating results or cash flows for a particular future period, depending on our results for that period. In market downturns and periods of heightened volatility, the volume of legal claims and amount of damages sought in litigation and regulatory proceedings against financial services companies have historically increased.

Our business involves the secure processing, storage, and transmission of confidential information about our clients and us. Information security risks for financial institutions are increasing, in part because of the use of the internet and mobile and cloud technologies to conduct financial transactions, and the increased sophistication and activities, including the use of artificial intelligence technologies, of organized crime, activists, hackers and other external parties, including foreign state actors. Our systems and those of other financial institutions, as well as those of our third-party service providers, have been and will continue to be the frequent target of cyber attacks, malicious code, computer viruses, ransomware, and denial of service attacks that could result in unauthorized access, misuse, loss or destruction of data (including confidential client information), account takeovers, unavailability of service or other events. Despite our efforts to ensure the integrity of our systems, we may not be able to anticipate or to implement effective preventive measures against all security breaches of these types, especially because the techniques used change frequently or are not recognized until launched, and because security attacks can originate from a wide variety of sources. Data security breaches may also result from non-technical means, for example, employee misconduct. Given the high volume of transactions that we process, the large number of clients, counterparties and third-party service providers with which we do business, including cloud service providers, and the increasing sophistication of cyber attacks, a cyber attack could occur and persist for an extended period of time before being detected. The extent of a particular cyber attack and the steps we may need to take to investigate the attack may not be immediately clear, and it may take a significant amount of time before an investigation is completed and full and reliable information about the attack is known. During such time we would not necessarily know the extent of the harm or how best to remediate it, and certain errors or actions could be repeated or compounded before they are discovered and remediated, all or any of which would further increase the costs and consequences of a cyber attack. Security breaches, including breaches of our security measures or those of our third-party service providers, could result in a violation of applicable privacy and other laws and could subject us to significant liability or loss that may not be covered by insurance, actions by our regulators, damage to our reputation, or a loss of confidence in our security measures which could harm our business. We may be required to expend significant additional resources to modify our protective measures or to - 14 - - 14 - - 14 -

result in unauthorized access, misuse, loss or destruction of data (including confidential client information), account takeovers, unavailability of service or other events. Despite our efforts to ensure the integrity of our systems, we may not be able to anticipate or to implement effective preventive measures against all security breaches of these types, especially because the techniques used change frequently or are not recognized until launched, and because security attacks can originate from a wide variety of sources. Data security breaches may also result from non-technical means, for example, employee misconduct. Given the high volume of transactions that we process, the large number of clients, counterparties and third-party service providers with which we do business, including cloud service providers, and the increasing sophistication of cyber attacks, a cyber attack could occur and persist for an extended period of time before being detected. The extent of a particular cyber attack and the steps we may need to take to investigate the attack may not be immediately clear, and it may take a significant amount of time before an investigation is completed and full and reliable information about the attack is known. During such time we would not necessarily know the extent of the harm or how best to remediate it, and certain errors or actions could be repeated or compounded before they are discovered and remediated, all or any of which would further increase the costs and consequences of a cyber attack. Security breaches, including breaches of our security measures or those of our third-party service providers or clients, could result in a violation of applicable privacy and other laws and could subject us to significant liability or loss that may not be covered by insurance, actions by our regulators, damage to our reputation, or a loss of confidence in our security measures which could harm our business. We may be required to expend significant additional resources to modify our protective measures or to investigate and remediate vulnerabilities or other exposures. We may also be required to pay ransom to threat actors to restore or prevent dissemination of data. We also face risk related to external fraud involving the misappropriation and use of clients’ user names, passwords or other personal information to gain access to our clients’ financial accounts. This could occur from the compromise of clients’ personal electronic devices or as a result of a data security breach at an unrelated company where clients’ personal information is taken and then made available to fraudsters. Additionally, data exposure can result from a failure to adequately destroy data during system or asset decommissioning, which might result in client or Company information being made available to external parties in error. Such risks have grown in recent years due to the increased sophistication and activities of organized crime and other external parties, including foreign state-sponsored parties. Losses reimbursed to clients under our guarantee against unauthorized account activity could have a negative impact on our business, financial condition and results of operations.

Maintaining adequate liquidity is crucial to our business operations, including transaction settlement, custody requirements, and lending commitments, among other liquidity needs. We meet our liquidity needs primarily from working capital and cash generated by client activity as well as external financing. Fluctuations in client cash or deposit balances, as well as market conditions or changes in regulatory treatment of client deposits, may affect our ability to meet our liquidity needs. While Schwab maintains diversified sources of funding, a reduction in our liquidity position could reduce client confidence in us, which could result in the transfer out of client assets and accounts, or could cause us to fail to satisfy our liquidity requirements, including the LCR. In addition, if our broker-dealer or depository institution subsidiaries fail to meet regulatory capital guidelines, or if a depository institution subsidiary is unable to obtain regulatory approval, when required, to declare a dividend, regulators could limit the subsidiaries’ ability to upstream funds to CSC or limit their operations, which could reduce CSC’s liquidity and adversely affect its ability to repay debt, pay dividends on CSC’s preferred stock and common stock, repurchase its shares, or redeem its preferred stock. In addition, CSC may need to provide additional funding to such subsidiaries. Factors which may adversely affect our liquidity position include CS&Co having temporary liquidity demands due to timing differences between brokerage transaction settlements and the availability of segregated cash balances, fluctuations in cash held in banking or brokerage client accounts, such as the significant client reallocation from sweep cash to higher-yielding investments that we experienced in recent years in response to rapid interest rate increases, a dramatic increase in our lending - 13 - - 13 - - 13 -

Maintaining adequate liquidity is crucial to our business operations, including transaction settlement, custody requirements, and lending commitments, among other liquidity needs. We meet our liquidity needs primarily from working capital and cash generated by client activity as well as external financing. Fluctuations in client cash or deposit balances, as well as market conditions or changes in regulatory treatment of client deposits, may affect our ability to meet our liquidity needs. A reduction in our liquidity position could reduce client confidence in us, which could result in the transfer out of client assets and accounts, or could cause us to fail to satisfy our liquidity requirements, including the LCR. In addition, if our broker-dealer or depository institution subsidiaries fail to meet regulatory capital guidelines, or if a depository institution subsidiary is unable to obtain regulatory approval, when required, to declare a dividend, regulators could limit the subsidiaries’ ability to upstream funds to CSC or limit their operations, which could reduce CSC’s liquidity and adversely affect its ability to repay debt, pay dividends on CSC’s preferred stock and common stock, repurchase its shares, or redeem its preferred stock. In addition, CSC may need to provide additional funding to such subsidiaries. Factors which may adversely affect our liquidity position include CS&Co and TDAC having temporary liquidity demands due to timing differences between brokerage transaction settlements and the availability of segregated cash balances, fluctuations in cash held in banking or brokerage client accounts, such as the significant client reallocation from sweep cash to higher-yielding investments that we experienced in 2022 and 2023 in response to rapid interest rate increases, a dramatic increase in our lending activities (including margin, mortgage-related, and personal lending), increased capital requirements, changes in regulatory guidance or interpretations, other regulatory changes, or a loss of market or client confidence in us resulting in unanticipated withdrawals of client funds. As a member firm of securities and derivatives clearing houses, we are required to deposit cash, stock and/or government securities for margin requirements and to clearing funds. The margin requirements may fluctuate significantly from time to time based upon the nature and size of clients’ trading activity and market volatility, and member firms like us have been required to deposit additional funds. Clearing houses could also require additional funds from member firms if a clearing member defaults on its obligations to the clearing house in an amount larger than its own margin and clearing fund deposits. When available cash is not sufficient for our liquidity needs, we may be required to seek external financing. During periods of disruptions in the credit and capital markets, potential sources of external financing could be reduced, and borrowing costs could increase. Although CSC, CS&Co, and TDAC maintain uncommitted, unsecured bank credit lines and CSC has a commercial paper issuance program, as well as a universal shelf registration statement filed with the SEC which can be used to sell securities, financing may not be available on acceptable terms or at all due to market conditions or disruptions in the credit markets. In addition, a downgrade in the Company’s credit ratings could increase its borrowing costs and limit its access to the capital markets. When short-term interest rates rapidly increase, as they did in 2022 and 2023, client movement of certain cash balances out of our sweep features and into higher-yielding alternatives generally increases. When these outflows outpace excess cash on hand and cash generated by maturities and paydowns on our investment and loan portfolios, as they did in 2022 and 2023, we may need to rely on temporary supplemental funding, such as advances under Federal Home Loan Bank (FHLB) secured credit facilities, borrowings under repurchase agreements with external financial institutions, issuances of brokered certificates of deposit (CDs), or other sources of funding, which have higher costs and could be subject to limitations on availability. In addition, to access new FHLB advances or roll over existing advances, our banking subsidiaries must maintain positive tangible capital, as defined by the Federal Housing Finance Agency. Larger unrealized losses on our available for sale (AFS) portfolio due to higher market interest rates negatively impact our capital position inclusive of AOCI, including our tangible capital. - 14 - - 14 - - 14 -

Factors that may affect trading and the volatility of our stock price include: •Financial results; •Business metrics, such as client cash and net new client assets; •Projections or the failure to meet projections; •Securities analyst coverage, estimates and results versus estimates; •The announcement of new products, services, acquisitions, or dispositions by us or our competitors; •Declaration of dividends and purchases under the Company’s share repurchase program; •Sales of a substantial number of shares by large stockholders; - 19 - - 19 - - 19 -

Our stock price can be volatile. Among the factors that may affect the volatility of our stock price are the following: •Speculation in the investment community or the press about, or actual changes in, our competitive position, organizational structure, executive team, operations, financial condition, financial reporting and results, expense discipline, strategic transactions, the expected benefits from our TD Ameritrade acquisition, or ratings from third parties; •The announcement of new products, services, acquisitions, or dispositions by us or our competitors; •Increases or decreases in revenue or earnings, changes in earnings estimates by the investment community, and variations between estimated financial results and actual financial results; •Business metrics, such as client cash and net new client assets; and •Sales of a substantial number of shares of our common stock by large stockholders. Changes in the stock market generally, or as it concerns our industry, as well as geopolitical, corporate, regulatory, business, and economic factors may also affect our stock price.