Visa Inc.: 10-K Risk Factor Changes

We rely in part on merchants and their relationships with our clients or their agents to maintain and expand the use and acceptance of Visa products. Certain merchants and merchant-affiliated groups have been exerting their influence in the global payments system in certain jurisdictions, such as the U.S., Canada and Europe, to attempt to lower acceptance costs paid by merchants to acquirers or their agents to accept payment products or services, by lobbying for new legislation, seeking regulatory intervention, filing lawsuits and in some cases, surcharging or refusing to accept Visa products. If they are successful in their efforts, we may face increased compliance and litigation expenses, issuers may decrease their issuance of our products, and consumer usage of our products could be adversely impacted. For example, in the U.S., certain stakeholders have raised concerns regarding how payment security standards and rules may impact debit routing choice and the cost of payment card acceptance. In addition to ongoing litigation related to the U.S. migration to EMV-capable cards and point-of-sale terminals, U.S. merchant-affiliated groups and processors have expressed concerns regarding the EMV certification process and some policymakers have expressed concerns about the roles of industry bodies such as EMVCo and the Payment Card Industry Security Standards Council in the development of payment card standards. Additionally, many merchants have advocated for lower acceptance costs in the form of reduced interchange rates, which could result in some issuers eliminating or reducing their promotion or use of Visa’s products and services, eliminating or reducing cardholder benefits such as rewards programs, or charging account holders increased or new fees for using Visa-branded products, all of which could negatively impact Visa’s transaction volumes and related revenues. Finally, some merchants and processors have advocated for changes to industry practices and Visa acceptance requirements at the point of sale, including the ability for merchants to accept only certain types of Visa products, to mandate only PIN authenticated transactions, to differentiate or steer among Visa product types issued by different financial institutions, and to impose surcharges on customers presenting Visa products as their form of payment. If successful, these efforts could adversely impact consumers’ usage of our products and decrease our overall transaction volumes and fee revenues, lead to regulatory enforcement and/or litigation that increases our compliance and litigation expenses, and ultimately harm our business.

We rely in part on merchants and their relationships with our clients to maintain and expand the use and acceptance of Visa products. Certain merchants and merchant-affiliated groups have been exerting their influence in the global payments system in certain jurisdictions, such as the U.S., Canada and Europe, to attempt to lower their acceptance costs by lobbying for new legislation, seeking regulatory intervention, filing lawsuits and in some cases, surcharging or refusing to accept Visa products. If they are successful in their efforts, we may face increased 23 23 23 Table of Contents Table of Contents compliance and litigation expenses, issuers may decrease their issuance of our products, and consumer usage of our products could be adversely impacted. For example, in the U.S., certain stakeholders have raised concerns regarding how payment security standards and rules may impact debit routing choice and the cost of payment card acceptance. In addition to ongoing litigation related to the U.S. migration to EMV-capable cards and point-of-sale terminals, U.S. merchant-affiliated groups and processors have expressed concerns regarding the EMV certification process and some policymakers have expressed concerns about the roles of industry bodies such as EMVCo and the Payment Card Industry Security Standards Council in the development of payment card standards. Additionally, some merchants and processors have advocated for changes to industry practices and Visa acceptance requirements at the point of sale, including the ability for merchants to accept only certain types of Visa products, to mandate only PIN authenticated transactions, to differentiate or steer among Visa product types issued by different financial institutions, and to impose surcharges on customers presenting Visa products as their form of payment. If successful, these efforts could adversely impact consumers’ usage of our products, lead to regulatory enforcement and/or litigation, increase our compliance and litigation expenses, and harm our business.

More than half of our net revenues are earned outside the U.S. International cross-border transaction revenues represent a significant part of our revenue and are an important part of our growth strategy. Our revenues are dependent on the volume and number of payment transactions made by consumers, governments, and businesses whose spending patterns may be affected by economic, political, market, health and social events or conditions. Adverse macroeconomic conditions within the U.S. or internationally, including but not limited to recessions, inflation, rising interest rates, high unemployment, currency fluctuations, actual or anticipated large-scale defaults or failures, rising energy prices, or a slowdown of global trade, and reduced consumer, small business, government, and corporate spending, have a direct impact on our volumes, transactions and revenues. Furthermore, in efforts to deal with adverse macroeconomic conditions, governments may introduce new or additional initiatives or requests to reduce or eliminate payment fees or other costs. In an overall soft global economy, such pricing measures could result in additional financial pressures on our business. In addition, outbreaks of illnesses, pandemics like COVID-19, or other local or global health issues, political uncertainties, international hostilities, armed conflicts, wars, civil unrest, climate-related events, including the increasing frequency of extreme weather events, impacts to the power grid, and natural disasters have to varying degrees negatively impacted our operations, clients, third-party suppliers, activities, and cross-border travel and spend. Although the World Health Organization and the federal government declared an end to COVID-19 as a global and national health emergency, respectively, risks related to COVID-19 have adversely affected and may continue to adversely affect our business, results of operations, cash flows and financial condition. The ongoing effects of the COVID-19 pandemic remain difficult to predict due to numerous uncertainties, including the resumption of international travel, and the indirect impact of the pandemic on global economic activity. In addition, a number of countries took steps during the pandemic to temporarily cap interchange or other fees on electronic payments as part of their COVID-19 economic relief measures. While most have been rescinded or have expired, it 26 26 26 Table of Contents Table of Contents is possible that proponents of interchange and/or MDR regulation may try to position government intervention as necessary to support potential future economic relief initiatives. Geopolitical trends towards nationalism, protectionism, and restrictive visa requirements, as well as continued activity and uncertainty around economic sanctions, tariffs or trade restrictions also limit the expansion of our business in certain regions and have resulted in us suspending our operations in other regions. During fiscal 2022, economic sanctions were imposed on Russia by the U.S., European Union, United Kingdom and other jurisdictions and authorities, impacting Visa and its clients. In March 2022, we suspended our operations in Russia and as a result, are no longer generating revenue from domestic and cross-border activities related to Russia. For fiscal 2022 and 2021, total net revenues from Russia, including revenues driven by domestic as well as cross-border activities, were approximately 2% and 4% of our consolidated net revenues, respectively. The war in Ukraine and any further actions by, or in response to such actions by, Russia or its allies could have lasting impacts on Ukraine as well as other regional and global economies, any or all of which could adversely affect our business. A decline in economic, political, market, health and social conditions could impact our clients as well, and their decisions could reduce the number of cards, accounts, and credit lines of their account holders, and impact overall consumption by consumers and businesses, which would ultimately impact our revenues. Our clients may implement cost-reduction initiatives that reduce or eliminate marketing budgets, and decrease spending on optional or enhanced value added services from us. Any events or conditions that impair the functioning of the financial markets, tighten the credit market, or lead to a downgrade of our current credit rating could increase our future borrowing costs and impair our ability to access the capital and credit markets on favorable terms, which could affect our liquidity and capital resources, or significantly increase our cost of capital. Finally, as governments, investors and other stakeholders face additional pressures to accelerate actions to address climate change and other environmental, governance and social topics, governments are implementing regulations and investors and other stakeholders are imposing new expectations or focusing investments in ways that may cause significant shifts in disclosure, commerce and consumption behaviors that may have negative impacts on our business. As a result of any of these factors, any decline in cross-border travel and spend would impact our cross-border volumes, the number of cross-border transactions we process and our currency exchange activities, which in turn would reduce our international transaction revenues.

More than half of our net revenues are earned outside the U.S. International cross-border transaction revenues represent a significant part of our revenue and are an important part of our growth strategy. Our revenues are dependent on the volume and number of payment transactions made by consumers, governments, and businesses whose spending patterns may be affected by economic, political, market, health and social events or conditions. Adverse macroeconomic conditions within the U.S. or internationally, including but not limited to recessions, inflation, rising interest rates, high unemployment, currency fluctuations, actual or anticipated large-scale defaults or failures, rising energy prices, or a slowdown of global trade, and reduced consumer, small business, government, and corporate spending, have a direct impact on our volumes, transactions and revenues. Furthermore, in efforts to deal with adverse macroeconomic conditions, governments may introduce new or additional initiatives or requests to reduce or eliminate payment fees or other costs. In an overall soft global economy, such pricing measures could result in additional financial pressures on our business. In addition, outbreaks of illnesses, pandemics like COVID-19, or other local or global health issues, political uncertainties, international hostilities, armed conflict, war (such as the ongoing war in Ukraine), civil unrest, climate-related events, including the increasing frequency of extreme weather events, impacts to the power grid, and natural disasters have to varying degrees negatively impacted our operations, clients, third-party suppliers, activities, and cross-border travel and spend. The ongoing effects of the COVID-19 pandemic remain difficult to predict due to numerous uncertainties, including the transmissibility and severity of new variants of the virus; the uptake and effectiveness of actions that are taken by governments, businesses or individuals in response to the pandemic; the impact of the reopening of borders and resumption of international travel; the indirect impact of the pandemic on global economic activity; and the impact on our employees and our operations, the business of our clients, suppliers and business partners. In addition, a number of countries took steps during the pandemic to temporarily cap interchange or other fees on electronic payments as part of their COVID-19 economic relief measures. While most have been rescinded or have expired, it is possible that proponents of interchange and/or MDR regulation may try to position government intervention as necessary to support potential future economic relief initiatives. Geopolitical trends towards nationalism, protectionism, and restrictive visa requirements, as well as continued activity and uncertainty around economic sanctions, tariffs or trade restrictions also limit the expansion of our business in certain regions and have resulted in us suspending our operations in other regions. As a result of U.S. and European sanctions against Russia, we suspended our operations in Russia in March 2022 and are no longer generating revenue from domestic and cross-border activities related to Russia. For fiscal 2022 and fiscal 2021, total net revenues from Russia, including revenues driven by domestic as well as cross-border activities, were approximately 2% and 4% of our consolidated net revenues, respectively. All transactions initiated with Visa cards issued by financial institutions outside Russia no longer work within Russia, and all transactions on cards issued by financial institutions in Russia may be processed on a domestic network, unrelated to Visa, and no longer work outside the country. The war in Ukraine and any further actions by, or in response to such actions by, Russia or its allies could have lasting impacts on Ukraine as well as other regional and global economies, any or all of which could adversely affect our business. A decline in economic, political, market, health and social conditions could impact our clients as well, and their decisions could reduce the number of cards, accounts, and credit lines of their account holders, which would ultimately impact our revenues. Our clients may implement cost-reduction initiatives that reduce or eliminate marketing budgets, and decrease spending on optional or enhanced value added services from us. Any events or conditions that impair the functioning of the financial markets, tighten the credit market, or lead to a downgrade of our current credit rating could increase our future borrowing costs and impair our ability to access the capital and credit markets on favorable terms, which could affect our liquidity and capital resources, or significantly increase our cost of capital. Finally, as governments, investors and other stakeholders face additional pressures to accelerate actions to address climate change and other environmental, governance and social topics, governments are implementing regulations and investors and other stakeholders are imposing new expectations or focusing investments in ways that may cause significant shifts in disclosure, commerce and consumption behaviors that may have negative impacts on our business. As a result of any of these factors, any decline in cross-border travel and spend would 25 25 25 Table of Contents Table of Contents impact our cross-border volumes, the number of cross-border transactions we process and our currency exchange activities, which in turn would reduce our international transaction revenues.

Our business relies on the movement of data across national borders. Legal requirements relating to the collection, storage, handling, use, disclosure, transfer and security of personal data continue to evolve, and we are subject to an increasing number of privacy and data protection requirements around the world. For example, our ongoing efforts to comply with complex U.S. state privacy and data protection regulations, and emerging international privacy and data protection laws, may increase the complexity of our compliance operations, entail substantial expenses, divert resources from other initiatives and projects, and limit the services we are able to offer. 21 21 21 Table of Contents Table of Contents Additionally, privacy laws in other regions, such as China’s Personal Information Protection Law and India’s Personal Data Protection Act, have extraterritorial application and include restrictions on processing sensitive data, extensive notification requirements, and substantial compliance and audit obligations. The global proliferation of new privacy and data protection laws may lead to inconsistent and conflicting requirements, which create an uncertain regulatory environment. Noncompliance could also result in regulatory penalties and significant legal liability. Enforcement actions and investigations by regulatory authorities into companies related to data security incidents and privacy violations are generally increasing. In Europe, data protection authorities continue to apply and enforce the General Data Protection (GDPR), imposing record setting fines. We are also subject to a variety of laws and regulations governing the development, use, and deployment of AI technologies. These laws and regulations are still evolving, and there is no single global regulatory framework for AI. The market is still assessing how regulators may apply existing consumer protection and other laws in the context of AI. There is thus uncertainty on what new laws will look like and how existing laws will apply to our development, use, and deployment of AI. In the midst of this uncertainty, we may face challenges due to the complexity and rapidly changing nature of AI technology and applicable laws. Our use of AI and machine learning is subject to various risks at each stage of use. In the context of AI development, risks relate to intellectual property considerations, the use of personal information, and flaws in algorithms or datasets used for training. In the context of use and deployment, risks include ethical considerations regarding the outputs, and our ability to safely deploy AI throughout the organization. Our development and implementation of governance frameworks for our AI and machine learning systems may not be successful in mitigating all of these emerging risks.

Our business relies on the processing of data in many jurisdictions and the movement of data across national borders. Legal requirements relating to the collection, storage, handling, use, disclosure, transfer and security of personal data continue to evolve, and regulatory scrutiny in this area is increasing around the world. For example, in Europe, data protection authorities have been increasingly ruling on cross-border data transfers in the wake of the July 2020 decision from the Court of Justice of the European Union known as Schrems II. Significant uncertainty exists as privacy and data protection laws that are interpreted and applied differently from country to country may have extra-territorial effects, and could create inconsistent or conflicting requirements. Although we have a global data privacy program that addresses the requirements applicable to our international business, our ongoing efforts to comply with U.S. state privacy and cybersecurity regulations, as well as rapidly emerging international privacy and data protection laws may increase the complexity of our compliance operations, entail substantial expenses, divert resources from other initiatives and projects, and could limit the services we are able to offer. Furthermore, inconsistent local and regional regulations restricting location, movement, collection, use and management of data may limit our ability to innovate or compete in certain jurisdictions. For example, China adopted its first comprehensive privacy law, the Personal Information Protection Law (PIPL). Although certain details of PIPL are beginning to be clarified by the issuance of further regulatory clarification or guidance, Visa could be impacted more significantly if our license is approved and we begin processing domestic card transactions in China. Lastly, enforcement actions and investigations by regulatory authorities related to data security incidents and privacy violations continue to increase. The enactment of more restrictive laws, rules, regulations, or future 20 20 20 Table of Contents Table of Contents enforcement actions or investigations could impact us through increased costs or restrictions on our business, and noncompliance could result in regulatory penalties and significant legal liability.