Corpay Inc (CPAY) Risk Analysis

We are, or may from time to time be, subject to claims in the ordinary course of our operations, including individual and class action lawsuits, arbitration proceedings, government and regulatory investigations, inquiries, actions or requests, and other proceedings alleging violations of laws, rules, and regulations with respect to competition, antitrust, intellectual property, privacy, data protection, information security, anti-money laundering, counter-terrorist financing, sanctions, anti-bribery, anti-corruption, consumer protection (including unfair, deceptive, or abusive acts or practices), fraud, accessibility, securities, tax, labor and employment, commercial disputes, product liability, use of our services for illegal purposes and other matters. The number and significance of these disputes and inquiries is expected to continue to increase as our products, services, and business expand in complexity, scale, scope, and geographic reach, including through acquisitions of businesses and technology. Responding to proceedings may be difficult and expensive, and we may not prevail. In some proceedings, the claimant seeks damages as well as other relief, which, if granted, would require expenditures on our part or changes in how we conduct business. There can be no certainty that we will not ultimately incur charges in excess of presently established or future financial accruals or insurance coverage, or that we will prevail with respect to such proceedings. Regardless of whether we prevail or not, such proceedings could have a material adverse effect on our business, reputation, financial condition and results of operations. Further, these types of matters could divert our management's attention and other resources away from our business. In addition, from time to time, we have had, and expect to continue to receive, inquiries from regulatory bodies and administrative agencies relating to the operation of our business. Any potential claims or any such inquiries or potential claims have resulted in, and may continue to result in, various audits, reviews and investigations, which can be time consuming and expensive. These types of inquiries, audits, reviews, and investigations could result in the institution of administrative or civil proceedings, sanctions and the payment of fines and penalties, various forms of injunctive relief and redress, changes in personnel, and increased review and scrutiny by customers, regulatory authorities, the media and others, which could be significant and could have a material adverse effect on our business, reputation, financial condition and results of operations. As described in the Legal Proceedings section below, we are required to comply with an Order issued by the U.S. District Court for the Northern District of Georgia on June 8, 2023 (the "FTC Order"). The FTC Order requires us, among other things, to comply with certain advertising, contracting, record maintenance, and reporting requirements for the U.S. Fleet business. Material failures to comply with the obligations under the FTC Order may subject us to enforcement proceedings, which could result in significant fines, penalties or liabilities that may impact our financial performance.

The market for our solutions is highly competitive, and competition could intensify in the future. Our competitors vary in size and in the scope and breadth of the products and services they offer. Our primary competitors in the North American Fuel solutions are small regional and large independent fleet card providers, major oil companies and petroleum marketers that issue their own fleet cards, and major financial services companies that provide card services to major oil companies and petroleum marketers. Corporate Payments solutions faces a variety of competitors, some of which have greater financial resources, name recognition and scope and breadth of products and services. Competitors in the Lodging solutions include travel agencies, online lodging discounters, internal corporate procurement and travel resources, and independent services companies. Our primary competitors in Europe, Australia and New Zealand are independent fleet card providers, major oil companies and petroleum marketers that issue branded fleet cards, and providers of card outsourcing services to major oil companies and petroleum marketers. Our primary competitors in Latin America are independent providers of fleet cards and vouchers for food, fuel, tolls, and transportation and major oil companies and providers of card outsourcing services to major oil companies and petroleum marketers who offer commercial fleet cards. The most significant competitive factors in our business are the breadth of product and service features, network acceptance size, customer service, payment terms, account management, and price. We may experience competitive disadvantages with respect to any of these factors from time to time as potential customers prioritize or value these competitive factors differently. As a result, a specific offering of our features, networks and pricing may serve as a competitive advantage with respect to one customer and a disadvantage for another based on the customers' preferences. Some of our existing and potential competitors have longer operating histories, greater brand name recognition, larger customer bases, more extensive customer relationships or greater financial and technical resources than we do. In addition, our larger competitors may also have greater resources than we do to devote to the promotion and sale of their products and services and to pursue acquisitions. Many of our competitors provide additional and unrelated products and services to customers, such as treasury management, commercial lending and credit card processing, which allow them to bundle their products and services together and present them to existing customers with whom they have established relationships, sometimes at a discount. If price competition continues to intensify, we may have to increase the incentives that we offer to our customers, decrease the prices of our solutions or lose customers, each of which could adversely affect our operating results. In Vehicle Payments solutions, major oil companies, petroleum marketers and large financial institutions may choose to integrate fuel card services as a complement to their existing or complementary card products and services to adapt more quickly to new or emerging technologies, such as EVs, and changing opportunities, standards or customer requirements. To the extent that our competitors are regarded as leaders in specific categories, they may have an advantage over us as we attempt to further penetrate these categories. Future mergers or consolidations among competitors, or acquisitions of our competitors by large companies may present competitive challenges to our business if their fuel card products and services are effectively integrated and bundled into lower cost sales packages with other widely utilized non-fuel card related products and services. Overall, increased competition in our markets could result in intensified pricing pressure, reduced profit margins, increased sales and marketing expenses and a failure to increase, or a loss of, market share. We may not be able to maintain or improve our competitive position against our current or future competitors, which could adversely affect our business, operating results and financial condition.

Our Vehicle Payments solutions are typically subject to seasonal fluctuations in revenues and profit, which are impacted during the first and fourth quarter each year by the weather, holidays in the U.S., and lower business levels in Brazil due to summer break and the Carnival celebration. Our Gift solutions are typically subject to seasonal fluctuations in revenues as a result of consumer spending patterns. Historically, Gift revenues have been strongest in the third and fourth quarters and weakest in the first and second quarters, as the retail industry has its highest level of activity during and leading up to the Christmas holiday season.

We believe that maintaining and enhancing our brands is critical to our customer relationships, and our ability to obtain partners and retain employees. The successful promotion of our brands will depend upon our marketing and public relations efforts, our ability to continue to offer high-quality products and services and our ability to successfully differentiate our solutions from those of our competitors. In addition, future extension of our brands to add new products or services different from our current offerings may dilute our brands, particularly if we fail to maintain our quality standards in these new areas. The promotion of our brands will require us to make substantial expenditures, and we anticipate that the expenditures will increase as our markets become more competitive and we expand into new markets. Even if these activities increase our revenues, this revenue may not offset the expenses we incur. There can be no assurance that our brand promotion activities will be successful.

The markets for our solutions are highly competitive and characterized by rapid technological change, frequent introduction of new products and services, evolving industry standards and evolving customer needs. We must respond to the technological advances offered by our competitors, including the use of artificial intelligence, and the requirements of regulators and our customers and partners, in order to maintain and improve upon our competitive position and fulfill contractual obligations. We may be unsuccessful in expanding our technological capabilities and developing, marketing, selling or encouraging adoption of new products and services that meet these changing demands, which could jeopardize our competitive position. Similarly, if new technologies are developed that displace our traditional payment card as payment mechanisms for purchase transactions by businesses, we may be unsuccessful in adequately responding to customer practices and our transaction volume may decline. In addition, we regularly engage in significant efforts to upgrade our products, services and underlying technology, which may or may not be successful in achieving broad acceptance or their intended purposes. The solutions we deliver are designed to process complex transactions and provide reports and other information on those transactions, all at high volumes and processing speeds. Any failure to deliver an effective and secure product or service or any performance issue that arises with a new product or service could result in significant processing or reporting errors or other losses. We may rely on third parties to develop or co-develop our solutions or to incorporate our solutions into broader platforms for the commercial payments industry. We may not be able to enter into such relationships on attractive terms, or at all, and these relationships may not be successful. In addition, partners, some of whom may be our competitors or potential competitors, may choose to develop competing solutions on their own or with third parties. In order to remain competitive, we are continually involved in a number of projects, including the development of new platforms, mobile payment applications, e-commerce services and other new offerings emerging in the payments technology industry, including with respect to EVs. These projects carry the risks associated with any development effort, including cost overruns, delays in delivery and performance problems. Any delay in the delivery of new services or the failure to differentiate our services could render our services less desirable to customers, or possibly even obsolete.

We electronically receive, process, store and transmit data and sensitive information about our customers and merchants, including bank account information, social security numbers, expense data, and credit card, debit card and checking account numbers. We endeavor to keep this information confidential; however, our websites, networks, information systems, services and technologies may be targeted for sabotage, disruption or misappropriation. The uninterrupted operation of our information systems and our ability to maintain the confidentiality of the customer and consumer information that resides on our systems are critical to the successful operation of our business. Unauthorized access to our networks and computer systems could result in the theft or publication of confidential information or the deletion or modification of records or could otherwise cause interruptions in our service and operations. Other than a previously disclosed unauthorized access incident during the second quarter of 2018, we are not aware of any material breach of our or our associated third parties' computer systems, although we and others in our industry are regularly the subject of attempts by bad actors to gain unauthorized access to these computer systems and data or to obtain, change or destroy confidential data (including personal consumer information of individuals) through a variety of means. Because techniques used to sabotage or obtain unauthorized access to our systems and the data we collect change frequently and may not be recognized until launched against a target, especially considering heightened threats and risks associated with artificial intelligence, we may be unable to anticipate these techniques or to implement adequate preventative measures. An incident may not be detected until well after it occurs and the severity and potential impact may not be fully known for a substantial period of time after it has been discovered. Our ability to address incidents may also depend on the timing and nature of assistance that may be provided from relevant governmental or law enforcement agencies. Threats to our systems and our associated third parties' systems can derive from human error, fraud or malice on the part of employees or third parties, or may result from accidental technological failure. Computer viruses can be distributed and could infiltrate our systems or those of our associated third parties. In addition, denial of service or other attacks could be launched against us for a variety of purposes, including to interfere with our services or create a diversion for other malicious activities. Although we believe we have sufficient controls in place to prevent disruption and misappropriation and to respond to such attacks, any inability to prevent security breaches could have a negative impact on our reputation, expose us to liability, decrease market acceptance of electronic transactions and cause our present and potential clients to choose another service provider. In addition, the risk of cyber-attacks has increased in connection with the military conflicts between Russia and Ukraine, as well as within the Middle East, and the resulting geopolitical conflicts. In light of those and other geopolitical events, nation-state actors or their supporters may launch retaliatory cyber-attacks, and may attempt to cause supply chain and other third-party service provider disruptions, or take other geopolitically motivated retaliatory actions that may disrupt our business operations, result in data compromise, or both. Nation-state actors have in the past carried out, and may in the future carry out, cyber-attacks to achieve their aims and goals, which may include espionage, information operations, monetary gain, ransomware, disruption, and destruction. In February 2022, the U.S. Cybersecurity and Infrastructure Security Agency issued a warning for American organizations noting the potential for Russia's cyber-attacks on Ukrainian government and critical infrastructure organizations to impact organizations both within and beyond the U.S., particularly in the wake of sanctions imposed by the U.S. and its allies. These circumstances increase the likelihood of cyber-attacks and/or security breaches. We could also be subject to liability for claims relating to misuse of personal information, such as unauthorized marketing purposes and violation of data privacy laws. For example, we are subject to a variety of U.S. and international statutes, regulations, and rulings relevant to the direct email marketing and text-messaging industries. While we believe we are in compliance with the relevant laws and regulations, if we were ever found to be in violation, our business, financial condition, operating results and cash flows could be materially adversely affected. We cannot provide assurance that the contractual requirements related to security and privacy that we impose on our service providers who have access to customer and consumer data will be followed or will be adequate to prevent the unauthorized use or disclosure of data. In addition, we have agreed in certain agreements to take certain protective measures to ensure the confidentiality of customer data. The costs of systems and procedures associated with such protective measures, as well as the cost of deploying additional personnel, training our employees and hiring outside experts, may increase and could adversely affect our ability to compete effectively. Any failure to adequately enforce or provide these protective measures could result in liability, protracted and costly litigation, governmental and card network intervention and fines, remediation costs, and with respect to misuse of personal information of our customers, lost revenue and reputational harm. While we maintain insurance covering certain security and privacy damages and claim expenses above a certain financial retention level, we may not carry insurance or maintain coverage sufficient to compensate for all liability and such insurance may not be available for renewal on acceptable terms or at all, and in any event, insurance coverage would not address the reputational damage that could result from a security incident. In addition, under payment network rules, regulatory requirements, and related obligations, we may be responsible for the acts or failures to act of certain third parties, such as third-party service providers, vendors, partners and others, which we refer to collectively as associated participants. The failure of our associated participants to safeguard cardholder data and other information in accordance with such rules, requirements and obligations could result in significant fines and sanctions and could harm our reputation and deter existing and prospective customers from using our services. We cannot assure you that there are written agreements in place with every associated participant or that such written agreements will ensure the adequate safeguarding of such data or information or allow us to seek reimbursement from associated participants. Any such unauthorized use or disclosure of data or information also could result in litigation that could result in a material adverse effect on our business, financial condition and results of operations.

Our success depends, in part, on our executive officers and other key personnel. Our senior management team has significant industry experience and would be difficult to replace. The market for qualified individuals is competitive, especially in certain fields, including information technology, and we may not be able to attract and retain qualified personnel or candidates to replace or succeed members of our senior management team or other key personnel. The loss of key personnel could materially adversely affect our business.

The success and growth of our solutions depend on the wide acceptability of such cards when our customers need to use them. As a result, the success of these solutions is in part dependent on our ability to maintain relationships with major oil companies, petroleum marketers, closed-loop fuel and lodging merchants, truck stop operators, airlines, sales channels, and other channels and partnerships (each of whom we refer to as our "partners") and to enter into additional relationships or expand existing arrangements to increase the acceptability of our payment solutions. These relationships vary in length and may be renegotiated at the end of their respective terms. Due to the highly competitive, and at times exclusive, nature of these relationships, we often must participate in a competitive bidding process to establish or continue the relationships. Such bidding processes may focus on a limited number of factors, including pricing, which may affect our ability to effectively compete for these relationships. If the various partners with whom we maintain relationships experience bankruptcy, financial distress, or otherwise are forced to contract their operations, our solutions could be adversely impacted. Similarly, because some of our solutions are independently marketed, certain other adverse events outside our control, like those companies' failure to maintain their brands or a decrease in the size of their branded networks may adversely affect our ability to grow our revenue. The loss of, failure to continue or failure to establish new relationships, or the weakness or decrease in size of companies with whom we maintain relationships, could adversely affect our ability to serve our customers and adversely affect our solutions and operating results.

We have foreign operations in, or provide services for customers in more than 150 countries throughout North America, South America, Europe, Africa, Oceania and Asia. We also expect to seek to expand our operations into various additional countries in Asia, Europe and Latin America as part of our growth strategy. Some of the countries where we operate, and other countries where we will seek to operate, such as Brazil and Mexico, have undergone significant political, economic and social change in recent years, and the risk of unforeseen changes in these countries may be greater than in the U.S. In addition, changes in laws or regulations, including with respect to payment service providers, taxation, information technology, data transmission and the internet, revenues from non-U.S. operations or in the interpretation of existing laws or regulations, whether caused by a change in government or otherwise, could materially adversely affect our business, operating results and financial condition. The current military conflicts between Russia and Ukraine, as well as within the Middle East, are creating substantial uncertainty about the global economy in the future. Although the length, impact and outcome of the ongoing military conflicts between Russia and Ukraine and within the Middle East are highly unpredictable, these conflicts could lead to significant market and other disruptions. We have recently exited the Russia market via the disposition of our Russia business, which closed in the third quarter of 2023. Additionally, we do not have operations in Israel or Gaza. We cannot predict how and the extent to which these conflicts will affect our customers, operations or business partners or the demand for our products and our global business. We are actively monitoring the situations and assessing the impact on our business. The extent, severity, duration and outcome of the military conflicts, sanctions and resulting market disruptions could be significant and could potentially have substantial impact on the global economy and our business for an unknown period of time. In response to the Russian invasion of Ukraine, the U.S., the European Union, the U.K. and other governments have imposed sanctions and other restrictive measures. Such sanctions, and other measures, as well as countersanctions or other responses from Russia or other countries have adversely affected, and will adversely affect, the global economy and financial markets and could adversely affect our business, financial condition and results of operations or otherwise aggravate the other risk factors that we identify herein. We cannot predict the scope of future developments in sanctions, punitive actions or macroeconomic factors arising from these conflicts. These measures are complex and still evolving. Our efforts to comply with such measures may be costly and time consuming and will divert the attention of management. Any alleged or actual failure to comply with these measures may subject us to government scrutiny, civil or criminal proceedings, sanctions, and other liabilities, which may have a material and adverse effect on our business, financial condition, and results of operations. Depending on the actions we take or are required to take, the ongoing conflicts could also result in loss of cash, assets or impairment charges. Additionally, we may also face negative publicity and reputational risk based on the actions we take or are required to take as a result of these conflicts, which could damage our brand image or corporate reputation. The extent of the impact of these tragic events on our business remains uncertain and will continue to depend on numerous evolving factors that we are not able to accurately predict, including the extent, severity, duration and outcome of these conflicts. We are actively monitoring the situations and assessing the impact on our business, and are continuing to refine our business continuity plan, which includes crisis response materials designed to mitigate the impact of disruptions to our business. Further, there can be no assurance that our plan will successfully mitigate all disruptions. To date we have not experienced any material interruptions in our infrastructure, technology systems or networks needed to support our operations. The extent, severity, duration and outcome of these military conflicts, sanctions and resulting market disruptions could be significant and could potentially have substantial impact on the global economy and our business for an unknown period of time. In addition, conducting and expanding our international operations subjects us to other political, economic, technological, operational and regulatory risks and difficulties that we do not generally face in the U.S. These risks and difficulties could negatively affect our international operations and, consequently, our operating results. Further, operating in international markets requires significant management attention and financial resources. We cannot be certain that the investment and additional resources required to establish, acquire or integrate operations in other countries will produce desired levels of revenue or profitability.

As a result of our foreign operations, we are subject to risks related to changes in currency rates for revenue generated in currencies other than the U.S. dollar. For the year ended December 31, 2023, approximately 43% of our revenue was denominated in currencies other than the U.S. dollar (primarily, British pound, Brazilian real, Canadian dollar, Russian ruble, Mexican peso, Czech koruna, euro, Australian dollar and New Zealand dollar). Revenue and profit generated by international operations may increase or decrease compared to prior periods as a result of changes in foreign currency exchange rates. Resulting exchange gains and losses are included in our net income. In addition, a majority of the revenue from our international payments provider business is from exchanges of currency at spot rates, which enable customers to make cross-currency payments. This solution also writes foreign currency forward and option contracts for our customers. The duration of these derivative contracts at inception is generally less than one year. The credit risk associated with our derivative contracts increases when foreign currency exchange rates move against our customers, possibly impacting their ability to honor their obligations to deliver currency to us or to maintain appropriate collateral with us. Additionally, from time to time, we have and expect to continue to enter into cross-currency swap agreements with financial institutions to hedge against the effect of variability in the U.S. dollar to foreign exchange rates. The swap agreements require an exchange of the notional amounts between us and the counterparties upon expiration or earlier termination of the agreements. If, at the expiration or earlier termination of the swap agreements, the U.S. dollar to applicable foreign exchange rate has declined from the rate in effect on the execution date, we are required to pay the counterparties an amount equal to the excess of the U.S. dollar value over the respective foreign currency principal amount. In the event of a significant decline in the applicable exchange rate, our payment obligations to the counterparties could have a material adverse effect on our cash flows. Furthermore, we are subject to exchange control regulations that restrict or prohibit the conversion of more than a specified amount of our foreign currencies into U.S. dollars, and, as we continue to expand, we may become subject to further exchange control regulations that limit our ability to freely utilize and transfer currency in and out of particular jurisdictions. These restrictions may make it more difficult to effectively utilize the cash generated by our operations and may adversely affect our financial condition.