Public companies are required to disclose risks that can affect the business and impact the stock. These disclosures are known as “Risk Factors”. Companies disclose these risks in their yearly (Form 10-K), quarterly earnings (Form 10-Q), or “foreign private issuer” reports (Form 20-F). Risk factors show the challenges a company faces. Investors can consider the worst-case scenarios before making an investment. TipRanks’ Risk Analysis categorizes risks based on proprietary classification algorithms and machine learning.
Pagseguro Digital disclosed 66 risk factors in its most recent earnings report. Pagseguro Digital reported the most risks in the “Finance & Corporate” category.
Risk Overview Q4, 2023
Risk Distribution
38% Finance & Corporate
20% Legal & Regulatory
15% Ability to Sell
12% Macro & Political
11% Tech & Innovation
5% Production
Finance & Corporate - Financial and accounting risks. Risks related to the execution of corporate activity and strategy
This chart displays the stock's most recent risk distribution according to category. TipRanks has identified 6 major categories: Finance & corporate, legal & regulatory, macro & political, production, tech & innovation, and ability to sell.
Risk Change Over Time
2020
Q4
S&P500 Average
Sector Average
Risks removed
Risks added
Risks changed
Pagseguro Digital Risk Factors
New Risk (0)
Risk Changed (0)
Risk Removed (0)
No changes from previous report
The chart shows the number of risks a company has disclosed. You can compare this to the sector average or S&P 500 average.
The quarters shown in the chart are according to the calendar year (January to December). Businesses set their own financial calendar, known as a fiscal year. For example, Walmart ends their financial year at the end of January to accommodate the holiday season.
Risk Highlights Q4, 2023
Main Risk Category
Finance & Corporate
With 25 Risks
Finance & Corporate
With 25 Risks
Number of Disclosed Risks
66
+1
From last report
S&P 500 Average: 31
66
+1
From last report
S&P 500 Average: 31
Recent Changes
2Risks added
1Risks removed
6Risks changed
Since Dec 2023
2Risks added
1Risks removed
6Risks changed
Since Dec 2023
Number of Risk Changed
6
+3
From last report
S&P 500 Average: 3
6
+3
From last report
S&P 500 Average: 3
See the risk highlights of Pagseguro Digital in the last period.
Risk Word Cloud
The most common phrases about risk factors from the most recent report. Larger texts indicate more widely used phrases.
Risk Factors Full Breakdown - Total Risks 66
Finance & Corporate
Total Risks: 25/66 (38%)Below Sector Average
Share Price & Shareholder Rights13 | 19.7%
Share Price & Shareholder Rights - Risk 1
As a foreign private issuer, the disclosure requirements that we must comply with and other requirements are different from those applicable to U.S. domestic registrants.
As a foreign private issuer, the disclosure requirements that we must comply with and other requirements are different from those applicable to U.S. domestic registrants. For example, as a foreign private issuer for U.S. purposes, we are not subject to the same disclosure requirements as a domestic U.S. registrant under the Securities Exchange Act of 1934, as amended, or the Exchange Act, including the requirements to prepare and issue quarterly reports on Form 10-Q or to file current reports on Form 8-K upon the occurrence of specified significant events, the proxy rules applicable to domestic U.S. registrants under Section 14 of the Exchange Act or the insider reporting and short-swing profit rules applicable to domestic U.S. registrants under Section 16 of the Exchange Act. In addition, we rely on exemptions from certain U.S. rules which permit us to follow Cayman Islands legal requirements rather than certain of the requirements that are applicable to U.S. domestic registrants.
We follow the Cayman Islands laws and regulations that are applicable to Cayman Islands companies. However, these laws and regulations do not contain any provisions comparable to the U.S. proxy rules, the U.S. rules relating to the filing of reports on Form 10-Q or 8-K or the U.S. rules relating to liability for insiders who profit from trades made in a short period of time, as referred to above.
Furthermore, foreign private issuers are required to file their annual report on Form 20-F within 120 days after the end of each fiscal year, while U.S. domestic issuers that are large, accelerated filers are required to file their annual report on Form 10-K within 60 days after the end of each fiscal year. Foreign private issuers are also exempt from regulation fair disclosure, aimed at preventing issuers from making selective disclosures of material information. As a result of the above, even though we are required to file reports on Form 6-K disclosing the limited information that is material to us and which we make public pursuant to Cayman Islands law, or are required to distribute to shareholders generally, you may not receive information of the same type or amount that is required to be disclosed to shareholders of a U.S. company.
We cannot predict if investors will find our Class A common shares less attractive because we will rely on these exemptions. If some investors find our Class A common shares less attractive as a result, there may be a less active trading market for our Class A common shares and our share price may be more volatile.
Share Price & Shareholder Rights - Risk 2
Judgments of Brazilian courts to enforce our obligations with respect to our Class A common shares may be payable only in reais.
Most of our assets are located in Brazil. If proceedings are brought in the courts of Brazil seeking to enforce our obligations in respect of our Class A common shares, we may not be required to discharge our obligations in a currency other than the real. Under Brazilian exchange control laws, an obligation in Brazil to pay amounts denominated in a currency other than the real may only be satisfied in Brazilian currency at the exchange rate in effect on the date of the Brazilian Superior Court of Justice's enforcement of the obligation. These amounts are then adjusted to reflect exchange rate variations through the effective payment date and, if applicable, eventual default interest. The exchange rate at that time may not afford non-Brazilian investors with full compensation for any claim arising out of or related to our obligations under the Class A common shares.
The judicial recognition process for foreign judgments before the Brazilian Superior Court of Justice may be time consuming and may also give rise to difficulties in enforcing such foreign judgment in Brazil. Accordingly, we cannot assure you that judicial recognition of a foreign judgment would be successful, that the judicial recognition process would be conducted in a timely manner or that a Brazilian court would enforce a judgment of non-Brazilian courts. Furthermore, upon its recognition by the Brazilian Superior Court of Justice, the enforcement of a foreign judgment would be delegated to a lower federal court.
Share Price & Shareholder Rights - Risk 3
United States civil liabilities and certain judgments obtained against us by our shareholders may not be enforceable.
PagSeguro Digital is a Cayman Islands exempted company and substantially all of our assets are located outside of the United States. In addition, all of our current directors and officers are residents of Brazil, and a substantial portion of their assets is located outside of the United States. As a result, it may be difficult to effect service of process within the United States upon these persons. It may also be difficult to enforce in U.S. courts judgments obtained in U.S. courts based on the civil liability provisions of the U.S. federal securities laws against us and those officers and directors.
Further, it is unclear if original actions predicated on civil liabilities based solely upon U.S. federal securities laws are enforceable in courts outside the United States, including in the Cayman Islands and Brazil. Courts of the Cayman Islands may not, in an original action in the Cayman Islands, recognize or enforce judgments of U.S. courts predicated upon the civil liability provisions of the securities laws of the United States or any state of the United States on the grounds that such provisions are penal in nature. Although there is no statutory enforcement in the Cayman Islands of judgments obtained in the United States, courts of the Cayman Islands will recognize a foreign judgment in personam of a court of competent jurisdiction and give a judgment based thereon if such judgment is final, for a liquidated sum, provided it is not in respect of taxes or a fine or penalty, is not inconsistent with a Cayman Islands' judgment in respect of the same matters, and was not obtained in a manner which is contrary to the public policy of the Cayman Islands. In addition, a Cayman Islands court may stay proceedings if concurrent proceedings are being brought elsewhere.
Share Price & Shareholder Rights - Risk 4
Our Memorandum and Articles of Association contain anti-takeover provisions that may discourage a third party from acquiring us and reduce the rights of holders of our Class A common shares.
Our Memorandum and Articles of Association contain certain provisions that could limit the ability of others to acquire our control, including a provision that grants authority to our board of directors to issue new shares in our company from time to time (including common shares and preferred shares) without action by our shareholders. These provisions could have the effect of depriving our shareholders of the opportunity to sell their Class A common shares at a premium over the prevailing market price by discouraging third parties from seeking to obtain our control in a tender offer or similar transactions. See "Item 10. Additional Information-Memorandum and Articles of Association-Anti-Takeover Provisions in our Memorandum and Articles of Association."
Share Price & Shareholder Rights - Risk 5
Our shareholders may face difficulties in protecting their interests because we are a Cayman Islands exempted company.
Our corporate affairs are governed by our Memorandum and Articles of Association, and by Cayman Islands law including, without limitation, the Companies Act and the common law of the Cayman Islands. The rights of our shareholders and the fiduciary responsibilities of our directors under the laws of the Cayman Islands are not as clearly defined as under statutes or judicial precedent in existence in jurisdictions in the United States. Therefore, you may have more difficulty protecting your interests than would shareholders of a corporation incorporated in a jurisdiction in the United States, due to the comparatively less prescriptive nature of Cayman Islands law in this area.
Cayman Islands statutory law in respect of schemes of arrangement does not specifically provide for shareholder appraisal rights in connection with a court sanctioned reorganization (by way of scheme of arrangement). This may make it more difficult for you to assess the value of any consideration you may receive in a merger or consolidation (which is affected by way of scheme of arrangement) or to require that the acquirer gives you additional consideration if you believe the consideration offered is insufficient. However, in respect of a merger or consolidation (which is not affected by way of scheme of arrangement), Cayman Islands statutory law, which permits a merger/consolidation without a court order, provides a mechanism for a dissenting shareholder in a merger or consolidation to require us to apply to the Grand Court of the Cayman Islands for a determination of the fair value of the dissenter's shares if it is not possible for the company and the dissenter to agree on a fair price within the time limits prescribed.
Shareholders of Cayman Islands exempted companies (such as us) have no general rights under Cayman Islands law to inspect corporate records and accounts or to obtain copies of lists of shareholders. Our directors have discretion under our Articles of Association to determine whether, and under what conditions, our corporate records may be inspected by our shareholders, but are not obliged to make them available to our shareholders. This may make it more difficult for you to obtain information needed to establish any facts necessary for a shareholder motion or to solicit proxies from other shareholders in connection with a proxy contest.
Subject to limited exceptions, under Cayman Islands law, a minority shareholder may not bring a derivative action against the board of directors. Class actions are not recognized in the Cayman Islands, but groups of shareholders with identical interests may bring representative proceedings, which are similar.
Share Price & Shareholder Rights - Risk 6
We are a Cayman Islands exempted company with limited liability. The rights of our shareholders may be different from the rights of shareholders governed by the laws of U.S. jurisdictions.
We are a Cayman Islands exempted company with limited liability. Our corporate affairs are governed by our Memorandum and Articles of Association of the Cayman Islands. The rights of shareholders and the responsibilities of members of our board of directors may be different from the rights of shareholders and responsibilities of directors in companies governed by the laws of U.S. jurisdictions. In the performance of its duties, the board of directors of a solvent Cayman Islands exempted company is required to consider the company's interests, which is generally defined with reference to the interests of its shareholders (both present and future) as a whole, which may differ from the interests of one or more of its individual shareholders. See "Item 10. Additional Information-Memorandum and Articles of Association-Principal Differences between Cayman Islands and U.S. Corporate Law."
Furthermore, the Cayman Islands enacted the International Tax Co-operation (Economic Substance) Act (As Revised), or the ESA, in January 2019. We are required to comply with the ESA and related regulations and guidelines. As we are a Cayman Islands company, compliance obligations include assessing its operations to determine the required compliance (if any) with the ESA, filing an annual notification with the Cayman Islands Registrar of Companies disclosing whether we are carrying out any relevant activities within the meaning of the Economic Substance Act and to the extent required under the ESA, the filing of an annual return with the Department of International Tax Co-Operation. Where applicable, we must establish that our operations satisfy the economic substance requirements of the ESA. We are required to monitor our operations to ensure they remain in compliance with all requirements under the ESA. Failure to satisfy these requirements may subject us to penalties under the ESA.
Share Price & Shareholder Rights - Risk 7
Our dual class capital structure means our shares will not be included in certain indices. We cannot predict the impact this may have on our stock price.
In July 2017, S&P Dow Jones, a provider of widely followed stock indices, announced that companies with multiple share classes, such as ours, would not be eligible for inclusion in certain of their indices. As a result, our Class A common shares are not eligible for these stock indices. Many investment funds are precluded from investing in companies that are not included in such indices, and these funds would be unable to purchase our Class A common shares if we were not included in such indices. We cannot assure you that other stock indices will not take a similar approach to S&P Dow Jones in the future. Exclusion from indices could make our Class A common shares less attractive to investors and, as a result, the market price of our Class A common shares could be adversely affected.
Share Price & Shareholder Rights - Risk 8
If securities or industry analysts do not publish research or reports about our business, or publish negative reports about our business, the market price and trading volume of our Class A common shares could decline.
The trading market for our Class A common shares depends in part on the research and reports that securities or industry analysts publish about us or our business. If one or more of the analysts who cover us downgrade our stock or publish inaccurate or unfavorable research about our business, our stock price would likely decline. If one or more of these analysts cease coverage of our company or fail to publish reports on us regularly, demand for our Class A common shares could decline, which might cause the market price and trading volume of our Class A common shares to decline.
Share Price & Shareholder Rights - Risk 9
Our Class A common shares may not be a suitable investment for all investors, as investment in our Class A common shares presents risks and the possibility of financial losses.
The investment in our Class A common shares is subject to risks. Investors who wish to invest in our Class A common shares are thus subject to asset losses, including loss of the entire value of their investment, as well as other risks, including those related to our Class A common shares, the company, the sector in which we operate, our shareholders and the general macroeconomic environment in Brazil and all other countries in the world, among other risks.
Each potential investor in our Class A common shares must therefore determine the suitability of that investment in light of its own circumstances. In particular, each potential investor should:
- have sufficient knowledge and experience to make a meaningful evaluation of our Class A common shares, the merits and risks of investing in our Class A common shares and the information contained in this annual report;- have access to, and knowledge of, appropriate analytical tools to evaluate, in the context of its particular financial situation, an investment in our Class A common shares and the impact our Class A common shares will have on its overall investment portfolio;- have sufficient financial resources and liquidity to bear all of the risks of an investment in our Class A common shares;- understand thoroughly the terms of our Class A common shares and be familiar with the behavior of any relevant indices and financial markets; and - be able to evaluate (either alone or with the help of a financial advisor) possible scenarios for economic, interest rate and other factors that may affect its investment and its ability to bear the applicable risks.
Share Price & Shareholder Rights - Risk 10
Class A common shares eligible for future sale may cause the market price of our Class A common shares to drop significantly.
The market price of our Class A common shares may decline because of sales of a large number of our Class A common shares in the market (including Class A common shares issuable upon conversion of Class B common shares) or the perception that these sales may occur. These sales, or the possibility that these sales may occur, also might make it more difficult for us to sell equity securities in the future at a time and at a price that we deem appropriate.
As of December 31, 2023, we have outstanding 209,148,916 Class A common shares (including treasury shares) and 120,459,508 Class B common shares. All Class B common shares are beneficially owned by UOL. The Class A common shares sold in our October 2019 follow-on offering are freely tradable without restriction or further registration under the U.S. Securities Act of 1933, as amended, or the Securities Act, by persons other than our affiliates within the meaning of Rule 144 of the Securities Act.
Our shareholders or entities controlled by them or their permitted transferees are able to sell their shares in the public market from time to time without registering them, subject to certain limitations on the timing, amount and method of those sales imposed by regulations promulgated by the SEC. If any of our shareholders, the affiliated entities controlled by them or their respective permitted transferees were to sell a large number of their Class A common shares, the market price of our Class A common shares may decline significantly. In addition, the perception in the public markets that sales by them might occur may also cause the trading price of our Class A common shares to decline.
Share Price & Shareholder Rights - Risk 11
We are a holding company and do not have any material assets other than the shares of our subsidiaries.
We are a Cayman Islands exempted company with limited liability. Our material assets are our direct and indirect equity interests in our subsidiaries, particularly PagSeguro Brazil, our Brazilian operating company. We are, therefore, dependent upon payments, dividends and distributions from our subsidiaries for funds to pay our operating and other expenses and to pay future cash dividends or distributions, if any, to holders of our Class A common shares or Class B common shares, and we may have tax costs in connection with any dividend or distribution. Furthermore, exchange rate fluctuations will affect the U.S. dollar value of any distributions our subsidiaries make with respect to our equity interests in those subsidiaries. See "Risks Relating to Brazil-The Brazilian government has exercised, and continues to exercise, significant influence over the Brazilian economy. This involvement as well as Brazil's political and economic conditions could harm us and the price of our Class A common shares," "Risks Relating to Our Class A Common Shares-We have not adopted a dividend policy with respect to future dividends. If we do not declare any dividends in the future, you will have to rely on price appreciation of our Class A common shares in order to achieve a return on your investment." and "Item 10. Additional Information-Memorandum and Articles of Association-Dividends and Capitalization of Profits."
Share Price & Shareholder Rights - Risk 12
Changed
PagSeguro Digital is a foreign private issuer and, as a result, in accordance with the listing requirements of the New York Stock Exchange, or NYSE, we rely on certain home country governance practices from the Cayman Islands, rather than the corporate governance requirements of the NYSE.
We report under the Exchange Act as a non-U.S. company with foreign private issuer status. The NYSE rules provide that foreign private issuers are permitted to follow home country practice in lieu of certain NYSE corporate governance standards. The standards applicable to us are considerably different from the standards applied to U.S. domestic issuers. For instance, we are not required to:
- have a majority of independent members on our board of directors (other than as may result from the requirements for the audit committee member independence under the Exchange Act);- have a minimum of three members on our audit committee;- have a compensation committee or a nominating and corporate governance committee;- have regularly scheduled executive sessions of our board that consist of independent directors only; or - adopt and disclose a code of business conduct and ethics for directors, officers and employees.
As a foreign private issuer, we may follow home country practice from the Cayman Islands in lieu of the above requirements. Therefore, the approach to governance adopted by our board of directors may be different from that of a board of directors consisting of a majority of independent directors, and, as a result, our management oversight may be more limited than if we were subject to all of the NYSE corporate governance standards. Accordingly, you may not have the same protections afforded to shareholders of companies that are not foreign private issuers.
Share Price & Shareholder Rights - Risk 13
Changed
UOL, our largest shareholder, owns 100% of our outstanding Class B common shares, which represent approximately 85.90% of the voting power of our issued share capital, and controls all matters requiring shareholder approval. This concentration of ownership and voting power limits your ability to influence corporate matters.
Our Class B common shares are entitled to 10 votes per share and our Class A common shares are entitled to one vote per share. Our Class B common shares are convertible into an equivalent number of Class A common shares and generally convert into Class A common shares upon transfer subject to limited exceptions. UOL controls our company and holds all of our outstanding Class B common shares, representing 36.79% of our issued share capital. As of March 31, 2024, UOL also held 799,804 of our outstanding Class A common shares. Because of the ten-to-one voting ratio between our Class B common shares and Class A common shares, these Class B common shares give UOL approximately 85.90% of the voting power of our issued share capital. UOL therefore controls the outcome of all decisions at our shareholders' meetings, and is able to elect a majority of the members of our board of directors. It is also able to direct our actions in areas such as business strategy, financing, distributions, acquisitions and dispositions of assets or businesses. UOL's decisions on these matters may be contrary to your expectations or preferences, and it may take actions that could be contrary to your interests. It will be able to prevent any other shareholders, including you, from blocking these actions. For further information regarding shareholdings in our company, see "Item 7. Major Shareholders and Related Party Transactions-Major Shareholders."
If UOL sells or transfers any of its Class B common shares, they will generally convert automatically into Class A common shares, subject to limited exceptions, such as transfers to affiliates, to trustees for the holder or its affiliates and certain transfers to U.S. tax-exempt organizations. The fact that any Class B common shares convert into Class A common shares if UOL sells or transfers them means that UOL will in many situations continue to control a majority of the combined voting power of our outstanding share capital, due to the voting rights of any Class B common shares that it retains. If our Class B common shares at any time represent less than 10% of the combined voting power of our Class A common shares and Class B common shares together, however, the Class B common shares then outstanding will automatically convert into Class A common shares. For a description of the dual class structure, see "Item 10. Additional Information-Memorandum and Articles of Association."
Accounting & Financial Operations4 | 6.1%
Accounting & Financial Operations - Risk 1
Added
If we do not effectively and accurately meet our reporting obligations regarding nonfinancial information, including any climate-related information and ESG reporting that we provide publicly, our results of operations and our business may be adversely affected.
The global financial industry has seen a significant shift towards integrating environmental, social, and governance, or ESG, considerations into business operations, driven by increasing investor and regulatory focus, and we are subject to disclosure controls and procedures, particularly in areas of financial and nonfinancial reporting (including any climate-related and ESG reporting). However, there are still uncertainties regarding the actions required to meet climate, environmental, and social goals that pose a risk to our business, which is compounded by the potential for noncompliance with policies, employee misconduct, or fraud, leading to regulatory sanctions, civil claims, and reputational or financial harm.
The Central Bank has been proactive in this sense, issuing a series of new regulations and standards focusing on the management and governance of social, environmental and climate risks. These regulations apply to financial institutions' products, services and activities, as well as those of their counterparties, controlled entities, suppliers and outsourced service providers. Key regulations include (i) CMN Resolution No. 4,943, which amends CMN Resolution No. 4,606 to better define and manage social, environmental and climate risks, (ii) CMN Resolution No. 4,944, which addresses continuous risk management and amends CMN Resolution No. 4,606, (iii) CMN Resolution No. 4,945, which replaced CMN Resolution No. 4,327 of April 25, 2014, to update the Social and Environmental Responsibility Policy (Política de Responsabilidade Socioambiental), or PRSA, to include climate aspects and reduce the review period from five to three years, (iv) Resolution No. 151, of October 6, 2021, which regulates the remittance information regarding social, environmental and climate risks addressed in CMN Resolution No. 4,557, related to exposures in credit and securities transactions, as well as those of the respective debtors under these transactions, identification, economic sector, risk aggravating and mitigating factors, among others. Additionally, in line with the "Sustainability" pillar of the "Agenda BC#" and following Public Consultations Nos. 82, 85, and 86, new rules were published to improve disclosure and governance related to social, environmental and climate risks. These rules aim to align national regulations with international ESG standards, including the recommendations of the Task Force on Climate-related Financial Disclosures. Notably, Resolution No. 139 mandates the annual publication of the Report on Social, Environmental and Climate Risks and Opportunities (Relatório de Riscos e Oportunidades Sociais, Ambientais e Climáticas, or the GRSAC Report) by financial institutions classified in S1, S2, S3 or S4, detailing social, environmental, and climate risks and opportunities, which must be published annually with the base date of December 31, within a maximum period of 90 days from December 31, and made available on their websites for five years.
The financial sector also faces physical risks from climate change, including extreme weather events like flooding, wildfires and prolonged droughts. Recently, Brazil experienced extreme weather in 2023, understood to be attributed to the El Niño phenomenon, which underscores the importance of integrating climate risks into operational and risk management frameworks. Failure to adequately address these risks could adversely affect our business growth, profitability and financial condition, including disruption to our operations or those of our customers or third parties on which we rely and do business.
On March 6, 2024, the SEC issued its final rule, the SEC Climate Rule, that requires registrants to provide certain climate-related disclosures in their annual reports and registration statements, commencing with annual reports for the year ending December 31, 2025. These disclosures are expected to require significant climate-related information to be provided by U.S. public companies, including us, covering evaluation and disclosure of material climate-related risks and opportunities, GHG emissions inventory, climate-related targets and goals, and the financial impact of physical and transition risks. As a result of the SEC Climate Rule, our legal, accounting and other compliance expenses may increase significantly, and compliance efforts may divert management time and attention. We may also be exposed to legal or regulatory action or claims as a result of these new regulations. On April 4, 2024, the SEC announced that it had voluntarily stayed the SEC Climate Rule pending judicial review. We are not able to predict when or if the SEC Climate Rule will become effective, and we cannot anticipate the impact of the SEC Climate Rule on our business and compliance requirements and disclosure obligations.
Moreover, we are exposed to the risk that our assessment that a product or service we provide, or an investment that we have made, is socially or environmentally responsible, will be challenged by customers, regulators or third parties. There has been increased investor and regulatory focus on ESG-related practices of financial institutions. A growing interest on the part of investors and regulators in ESG factors, and increased demand for, and scrutiny of, ESG-related disclosures by financial institutions, has likewise increased the risk that we could be perceived as, or accused of, making inaccurate or misleading statements regarding the investment strategies of our self-managed investment funds, or of our and our funds' ESG efforts or initiatives, commonly referred to as "greenwashing." Such perceptions or accusations could damage our reputation, result in litigation or regulatory enforcement actions, and adversely affect our business.
Accounting & Financial Operations - Risk 2
If we fail to establish and maintain proper and effective internal controls over financial reporting, our results of operations and our ability to operate our business may be harmed.
We are subject to the Sarbanes-Oxley Act, which requires, among other things, that we establish and maintain effective internal controls over financial reporting and disclosure controls and procedures. Under the SEC's current rules, we have been required to perform system and process evaluation and testing of our internal controls over financial reporting to allow management to assess the effectiveness of our internal controls since 2018. Our testing may reveal deficiencies in our internal controls that are deemed to be material weaknesses or significant deficiencies and render our internal controls over financial reporting ineffective. If we are not able to comply with these requirements in a timely manner, or if we or our management identifies material weaknesses or significant deficiencies in our internal controls over financial reporting that are deemed to be material weaknesses, the market price of our Class A common shares may decline and we may be subject to investigations or sanctions by the SEC, the Financial Industry Regulatory Authority, Inc., or FINRA, or other regulatory authorities. In addition, we may be required to expend significant management time and financial resources to correct any material weaknesses that may be identified or to respond to any regulatory investigations or proceedings.
Accounting & Financial Operations - Risk 3
Our quarterly results of operations and operating metrics may fluctuate and are unpredictable and subject to seasonality, which could result in the price of our Class A common shares being unpredictable or declining.
Our quarterly results of operations may vary significantly and are not necessarily an indication of future performance. These fluctuations may be due to a variety of factors, some of which are outside of our control and may not fully reflect the underlying performance of our business. In addition, we operate in a somewhat seasonal industry, which tends to experience relatively fewer transactions in the first quarters of the year, increased activity as the year-end holiday shopping season initiates, and fewer transactions after the year-end holidays. In addition, businesses operating in Brazil, such as ours, tend to experience relatively fewer transactions during certain international sporting events.
Factors that may cause fluctuations in our quarterly results of operations include our ability to attract and retain customers; the timing, effectiveness and costs of expansion and upgrades of our systems and infrastructure, as well as the success of those expansions and upgrades; the outcomes of legal proceedings and claims; our ability to maintain or increase revenue, gross margins and operating margins; our ability to continue introducing new services and to continue convincing customers to adopt additional offerings; increases in and timing of expenses that we may incur to grow and expand our operations and to remain competitive; period-to-period volatility related to fraud and risk losses; system failures resulting in the inaccessibility of our products and services; changes in the regulatory environment, including with respect to security, privacy or enforcement of laws and regulations by regulators, including fines, orders, or consent decrees; changes in global business or macroeconomic enforcement of laws and regulations by regulators, including fines, orders, or consent decrees; changes in global business conditions; general retail buying patterns; and the other risks described in this annual report. Future fluctuations in quarterly results may mean that our business is less predictable and may harm the trading price of our Class A common shares.
Accounting & Financial Operations - Risk 4
We have not adopted a dividend policy with respect to future dividends. If we do not declare any dividends in the future, you will have to rely on price appreciation of our Class A common shares in order to achieve a return on your investment.
We have not adopted a dividend policy with respect to future dividends. The amount of any distributions will depend on many factors such as our results of operations, financial condition, cash requirements, prospects and other factors deemed relevant by our board of directors or, where applicable, our shareholders. Accordingly, if we do not declare dividends in the future, investors will most likely have to rely on sales of their Class A common shares, which may increase or decrease in value, as the only way to realize cash from their investment. There is no guarantee that the price of our Class A common shares will ever exceed the price that you pay.
Debt & Financing6 | 9.1%
Debt & Financing - Risk 1
We may raise additional capital in the future by issuing equity securities, which may result in a potential dilution of your equity interest.
We may issue additional equity securities to raise capital, make acquisitions, or for a variety of other purposes. Additional issuances of our shares may be made pursuant to the exercise or conversion of convertible debt securities, warrants, stock options or other equity incentive awards such as the LTIP and LTIP-Goals. Any strategic partnership, issuance or placement of shares or securities convertible into or exchangeable for shares may affect the market price of our shares and could result in dilution of your equity interest.
Debt & Financing - Risk 2
The growth of our credit portfolio of transactions through BancoSeguro could increase the default rates in our total portfolio, and the systems and methods of identification, analysis, management and control of risks related to our customer portfolio could be insufficient to prevent losses.
BancoSeguro may expand its credit portfolio of transactions, increasing the origination and approval of new transactions, which could lead to an increase in late payments, default rates and expenses related to provisions, which would negatively affect our results of operations. Changes in interest rates and other variable market indexes could negatively affect our financial results. Our success depends on, among other factors, the balance between the risks and returns. We conduct credit checks on each of our customers to assess their risk profile, but we cannot assure you that our risk management systems will be sufficient to prevent losses from undetected risks in our customer portfolio, which could have a material adverse effect on our results of operations and financial condition.
Debt & Financing - Risk 3
Increases in interest rates may harm our business
Processing consumer transactions made using credit cards, as well as providing early payment of receivables to merchants when consumers make credit card purchases in installments, both make up a significant portion of our activities. In general, when Brazilian interest rates increase, consumers may choose to make fewer purchases using credit cards; and fewer merchants may decide to use our early payment of receivables feature if our overall financing costs require us to increase the discount rate we charge for this feature. Either of these factors could cause our business activity levels to decrease.
Following significant decreases in Brazilian and global interest rates from the start of the COVID-19 pandemic, in March 2021, the Central Bank began increasing the SELIC interest rate, which was 2% p.a. at the beginning of 2021, and reached 13.75% p.a. in December 2022. This increase resulted in a significant reduction in our margin, and in October 2021, we decided to raise the prices we charge our merchants, mainly affecting merchants who were benefiting from promotional prices. Implementing these price increases has been done over a period of time and were intended to offset a portion of the resulting cost increases such that we maintain a rate of customer churn close to our historical levels. Following improved inflation rates observed in Brazil in mid-2023, after remaining steady at 13.75% p.a. between August 2022 and August 2023, the Central Bank reduced the interest rate by 0.50% p.p. in August 2023, followed by four additional reductions of the same magnitude between September 2023 and January 2024. However, market uncertainty remains about the inflation and interest rate levels in Brazil. Any increases in the Brazilian interest rate levels in addition to other factors could lead us to implement further price increases (similar to what we have done in the past), which may cause an adverse effect on our business or financial results.
Debt & Financing - Risk 4
Our failure to manage the assets underlying our customer funds properly could harm our business.
Our ability to manage and account accurately for the assets underlying our customer funds requires a high level of internal controls. As our business continues to grow and we expand our product offerings, we must continue to strengthen our internal controls accordingly. Our success requires significant public confidence in our ability to handle large and growing transaction volumes and amounts of customer funds. Any failure to maintain the necessary controls or to manage the assets underlying our customer funds accurately could severely diminish customer use of our products or result in penalties and fines, which could harm our business.
Debt & Financing - Risk 5
Failure to maintain sufficient working capital could limit our growth and harm our business, financial condition and results of operations. Furthermore, we may offer new financial products and use new technologies that may have a negative impact on our liquidity by increasing our costs and risks associated with government regulation and investment in new technology.
We have significant working capital requirements, primarily driven by payment terms agreed with our merchant clients and the extended payment terms that they offer their customers. In our acquiring business, differences between the date when we pay our merchant clients and the date when we receive payments from card issuers may harm our liquidity and our cash flows. We expect our working capital needs to increase as our total transaction business increases. In order to finance our working capital needs, we have recently been entering into financing arrangements that decrease how long it takes us to collect our accounts receivable, and to increase how long we have to pay our accounts payable. In addition, we also use our full banking license to offer Certificates of Deposit (Certificados de Depósito Bancário), or CDs, through BancoSeguro primarily to fund our credit portfolio. We believe these financing arrangements and BancoSeguro's CDs allow us to gain access to capital faster and more cheaply than we would otherwise be able to. There can be no assurance that these types of financing arrangements will continue to be available to us on acceptable terms, or at all. We may also face liquidity constraints or financial stress in connection with outstanding CDs in the face of adverse macroeconomic conditions and threats to the international financial system, such as those following the Silicon Valley Bank closure and the distressed sale of Credit Suisse to UBS in March 2023. For more information of related risks, see "Risks Relating to our Business and Industry-Our operating results are affected by decreases in consumer discretionary spending. Changes in macroeconomic conditions may reduce the volume and prices of transactions on our payments platforms and harm our growth strategies and business prospects." If we do not have sufficient working capital, we may not be able to pursue our growth strategy, respond to competitive pressures or fund key strategic initiatives, such as the development of our sites, which may harm our business, financial condition and results of operations.
Furthermore, we may offer new financial products under BancoSeguro. The arrival of new financial products could have a variety of consequences for us. New financial products and technologies may increase our costs and risks associated with governmental regulation and investments in new technology. The costs of compliance with regulation and upgrading our infrastructure and technology to provide financial services could be significant. For example, we recently began offering a new service that allows our customers to buy, hold and sell quotas for investment funds in cryptocurrencies, some of which are also managed by third parties. Through our investment platform (the digital asset management platform available and used by our customers), our customers can invest in digital currencies through a new cryptocurrency investment fund. Any failure by us or our partners in maintaining the necessary controls or managing cryptocurrency assets and funds appropriately, including maintaining compliance with applicable regulatory requirements and addressing any cybersecurity considerations, could result in potential losses of cryptocurrencies, reputational harm, regulatory enforcement actions, significant financial losses, result in customers opting to discontinue or reduce their use of our and our partners' products, or result in significant penalties, fines or additional restrictions, which could cause an adverse impact on our business, operating results or financial condition. The significant regulatory uncertainty regarding cryptocurrency assets and cryptocurrency trading platforms, including in Brazilian markets, may restrict, limit or regulate in an excessive or burdensome manner the investments made in cryptocurrency assets or prohibit the use of such assets in the market (including any related transactions in different jurisdictions), which could adversely affect our activities, the manner in which we currently conduct some aspects of our business and, as a result, our financial condition or results of operations. Consequently, we are subject to potential litigation from clients who may experience impacts on their investments in cryptocurrency due to market volatility or as a result of operational failures, including from the uncertain regulatory landscape.
Debt & Financing - Risk 6
Changed
BancoSeguro, PagSeguro Brazil, MOIP and PagInvest may have insufficient capital to meet the capital requirements of the CMN and the Central Bank.
Brazilian financial and payment institutions must comply with the rules of the CMN and the Central Bank on capital adequacy, including minimum capital, which generally follow the Basel III regulatory framework. We cannot guarantee that our affiliates BancoSeguro, PagSeguro Brazil, MOIP and PagInvest, upon increasing their operations, will have sufficient funds or resources available for their respective capitalization in the future, which could result in their inability to meet the capital adequacy requirements of the CMN and the Central Bank.
In addition, non-compliance with capital adequacy requirements may adversely affect the ability of these affiliates to distribute dividends and interest on equity to shareholders and may adversely affect their ability to operate and lend, which could cause these affiliates to sell their respective assets or take other measures that may adversely affect our operating results and financial condition. If any of BancoSeguro, PagSeguro Brazil, MOIP or PagInvest were not able to comply with these capital adequacy requirements, regulators may impose sanctions, including administrative proceedings, fines, disqualification of directors and even withdrawal of authorization, which could have a material adverse effect on our operations and financial condition.
Moreover, in 2022, the Central Bank enacted a set of new rules applicable to payment institutions, increasing the capital and prudential requirements to which we are subject. This framework includes Central Bank Resolutions No. 197/2022, 198/2022, 199/2022, 200/2022, 201/22 and 202/2022, all issued on March 11, 2022. These rules came into force in July 2023, and the new prudential requirements will be enforceable according to their respective implementation calendar, with full implementation taking place in January 2025. We may be subject to more strict prudential requirements as a result of this new regulatory framework.
Under this new regulation, certain Brazilian operating entities in our Group structure composed of BancoSeguro, PagSeguro Brazil, MOIP and PagInvest, will be classified as a Type 3 conglomerate, which is defined as a prudential conglomerate led by a payment institution and integrated by a financial institution or other institution authorized to operate by the Central Bank subject to Law No. 4,595/64. For additional information, see "Item 4.-Regulation-Regulation of the Payment Industry in Brazil-Recent Developments on Regulatory Capital Requirements for Payment Institutions".
If any of BancoSeguro, PagSeguro Brazil, MOIP or PagInvest are not able to comply with the new regulatory capital requirements, the Central Bank may impose sanctions, which could have a significant adverse effect on our operations and financial condition.
Corporate Activity and Growth2 | 3.0%
Corporate Activity and Growth - Risk 1
If we continue to grow, we may not be able to appropriately manage the increased size of our business.
We are currently experiencing a period of significant expansion and anticipate that further expansion will be required to address potential growth in our customer base and market opportunities.
We must constantly add new hardware, update software, enhance and improve our billing and transaction systems, and add and train new engineers and other personnel to accommodate the increased use of our platforms and the new products and features we regularly introduce. This upgrade process is expensive, and the increasing complexity and enhancement of our website and mobile app results in higher costs. Failure to upgrade our technology, features, transaction processing systems, security infrastructure, or network infrastructure and customer channels or interfaces to accommodate increased traffic or transaction volume could harm our business. Adverse consequences could include unanticipated system disruptions, slower response times, degradation in levels of customer support, impaired quality of users' experiences of our services and delays in reporting accurate financial information.
Our revenues depend on prompt and accurate transaction processes. Our failure to grow our transaction-processing capabilities to accommodate the increasing number of transactions that must be billed on our website would harm our business and our ability to collect revenue. Furthermore, we may need to enter into relationships with various strategic partners, websites and other online service providers and other third parties necessary to our business. The increased complexity of managing multiple commercial relationships could lead to execution problems that can affect current and future revenues, and operating margins.
We cannot assure you that our current and planned systems, procedures and controls, personnel and third-party relationships will be adequate to support our future operations. Our failure to manage growth effectively could seriously harm our business, results of operations and financial condition.
Corporate Activity and Growth - Risk 2
We may pursue strategic acquisitions or investments. The failure of an acquisition or investment to produce the anticipated results, or the inability to integrate an acquired company fully, could harm our business.
We may occasionally acquire or invest in complementary companies or businesses. The success of an acquisition or investment will depend on our ability to make accurate assumptions regarding the valuation, operations, growth potential, integration and other factors related to that business. We cannot assure you that our acquisitions or investments will produce the results that we expect at the time we enter into or complete a given transaction. Furthermore, acquisitions may result in difficulties integrating the acquired companies, and may result in the diversion of our capital and our management's attention from other business issues and opportunities. We may not be able to successfully integrate the operations that we acquire, including their personnel, financial systems, distribution or operating procedures. If we fail to integrate acquisitions successfully, our business could suffer. In addition, the expense of integrating any acquired business and their results of operations may negatively impact our operating results.
Legal & Regulatory
Total Risks: 13/66 (20%)Below Sector Average
Regulation7 | 10.6%
Regulation - Risk 1
We are subject to regulatory activity and antitrust litigation under competition laws.
We receive scrutiny from various governmental agencies under competition laws. Other companies or governmental agencies may allege that our actions violate antitrust or competition laws, or otherwise constitute unfair competition. Contractual agreements with buyers, sellers, or other companies could give rise to regulatory action or antitrust investigations or litigation. Also, our unilateral business practices could give rise to regulatory action or antitrust investigations or litigation. Any such claims and investigations, even if they are unfounded, are usually very expensive to defend, involve negative publicity and substantial diversion of management time and effort, and could result in significant judgments against us.
Regulation - Risk 2
We may face restrictions and penalties under the Brazilian Consumer Protection Code in the future.
Brazil has a series of strict consumer protection laws, referred to together as the Consumer Protection Code (Código de Defesa do Consumidor). These laws apply to all companies in Brazil that supply products or services to Brazilian consumers. They include protection against misleading and deceptive advertising, protection against coercive or unfair business practices and protection in the formation and interpretation of contracts, usually in the form of civil liabilities and administrative penalties for violations. These penalties are often levied by the Brazilian Consumer Protection Agencies (Fundação de Proteção e Defesa do Consumidor, or PROCONs), which oversee consumer issues on a district-by-district basis. Companies that operate across Brazil may face penalties from multiple PROCONs, as well as from the National Secretariat for Consumers (Secretaria Nacional do Consumidor, or SENACON). Companies may settle claims made by consumers via PROCONs by paying compensation for violations directly to consumers and through a mechanism that allows them to adjust their conduct, called a conduct adjustment agreement (Termo de Ajustamento de Conduta), or TAC. Brazilian Public Prosecutors may also commence investigations of alleged violations of consumer rights, and the TAC mechanism is also available as a sanction in those proceedings. Companies that violate TACs face potential automatic fines. Brazilian Public Prosecutors may also file public civil actions against companies who violate consumer rights, seeking strict observation of the consumer protection laws and compensation for any damages to consumers.
As of December 31, 2023, we had approximately 15,901 active judicial proceedings and proceedings with PROCONs and small claims courts relating to consumer rights. Most of these proceedings are related to consumer allegations of non-delivery of products by merchants and requests for withdrawal of digital account balances that were blocked by PagSeguro because they were under investigation for fraud or undergoing claim resolution. To the extent consumers file such claims against us in the future, we may be required to pay fines for non-compliance that could have a negative impact on our results of operations.
Regulation - Risk 3
Changed
BancoSeguro's, PagSeguro Brazil's, MOIP's and PagInvest's businesses are highly dependent on the current Brazilian regulatory environment, and changes in regulation may affect our results and the development of our activities.
The Brazilian government has historically implemented or modified regulations that affect Brazilian financial institutions and payment institutions as part of its economic policy implementation. Such regulations are continuously modified by the Brazilian government to control credit availability and to reduce or increase consumption, among other objectives. Some of these controls are temporary in nature and may be modified from time to time in accordance with Brazilian government credit policies. Other controls have been introduced and have either remained stable or were gradually reduced. Such changes may adversely affect the future operations and revenues of BancoSeguro, PagSeguro Brazil, MOIP or PagInvest, and consequently, our overall future operations and revenues.
Regulation - Risk 4
Changed
Internet and AI regulation in Brazil is recent and still limited and several legal issues related to the internet are uncertain.
In 2014, Brazil enacted the Brazilian Civil Rights Framework for the Internet, setting forth principles, guarantees, rights and duties for the use of the internet in Brazil, including provisions about internet service provider liability, internet user privacy and internet neutrality. In May 2016, further regulations were passed in connection with the Brazilian Civil Rights Framework for the Internet. However, unlike in the United States, little case law exists around the Brazilian Civil Rights Framework for the Internet and existing jurisprudence has not been consistent. Furthermore, in 2018, Brazil enacted the LGPD, which became fully effective in 2020. The LGPD governs data owners' rights – such as access to its data, correction of data (if incomplete, incorrect or out of date), erasure of data, with whom the data is shared, among others –, the legal basis that establish in which cases data can be processed, as well as fines and penalties applicable for non-compliant entities. For more information on risks regarding the LGPD, see "We are subject to risks associated with noncompliance with the General Data Protection Law and may be adversely affected by investing in measures to adapt to new laws, the imposition of fines and other types of penalties." As was the case with the Brazilian Civil Rights Framework for the Internet, little case law exists regarding the LGPD since it only came into force in 2020. Legal uncertainty arising from the limited guidance provided by current laws in force allows for different judges or courts to decide very similar claims in different ways and establish contradictory jurisprudence. This legal uncertainty allows for rulings against us and could set adverse precedents, which individually or in the aggregate could seriously harm our business, results of operations and financial condition. In addition, legal uncertainty may harm our customers' perception and use of our service.
Additionally, regulation on artificial intelligence (AI) is rapidly evolving worldwide as legislators and regulators are increasingly focused on these powerful emerging technologies. The technologies underlying AI and its uses are subject to a variety of laws and regulations, including intellectual property, privacy, data protection and information security, consumer protection, competition, and equal opportunity laws, and are expected to be subject to increased regulation and new laws or new applications of existing laws and regulations.
AI regulation was included in the priority list of the Brazilian Senate for this year. The most noteworthy is a bill of law being discussed in the Senate under Bill of Law No. 2.338/23, which seeks to establish general national standards for the development, implementation, and responsible use of AI systems in Brazil, introducing potential compliance requirements, liability standards and certain usage restrictions. If enacted, Bill of Law No. 2.338/23 may impose additional compliance burdens, establish liability frameworks, or mandate specific transparency and accountability measures for our use of AI systems that could directly affect our operations.
In 2023, we began developing different initiatives involving the use of AI, which we believe shall be beneficial to our business for the coming years. These AI initiatives include the development of new features to assist customers in solving issues, such as (i) allowing customers to send a picture of the problem they are having with their card machine and the AI program will make a determination on whether the machine needs to be replaced or not, and (ii) conducting an AI analysis of a customer's service history and data available through open finance portals to offer better services to the customer. Additionally, AI may be used to help develop code, which would accelerate coding and automated testing.
We may not be able to anticipate how to respond to these rapidly evolving laws and regulations. Furthermore, because AI technology itself is highly complex and rapidly developing, it is not possible to predict all of the legal or regulatory risks that may arise relating to the use of AI. If laws and regulations relating to AI are implemented, interpreted or applied in a manner inconsistent with our current practices or policies, such laws and regulations may adversely affect our use of AI and our ability to provide and to improve our services, require additional compliance measures and changes to our operations and processes or result in increased compliance costs and potential increases in civil claims against us, any of which could adversely affect our operating results, financial condition and prospects.
Regulation - Risk 5
Our business is subject to extensive government regulation and oversight and our status under these regulations may change. Violation of or non-compliance with present or future regulations could be costly, expose us to substantial liability and force us to change our business practices, any of which could seriously harm our business and results of operations.
The Central Bank has duly authorized PagSeguro Brazil and Wirecard Brazil Instituição de Pagamento S.A. (formerly Wirecard Brazil S.A.), or MOIP, to operate as payment institutions, and it has authorized BancoSeguro S.A., or BancoSeguro, to operate as a financial institution. Both PagSeguro Brazil and MOIP are licensed by the Central Bank as payment institution issuers of electronic currency and as acquirers. PagSeguro Brazil's authorization to operate under such categories was issued by the Central Bank on October 17, 2018, and, on March 18, 2019, PagSeguro Brazil was authorized by the Central Bank to operate as a payment institution issuer of post-paid instruments (such as credit cards) within third-party payment schemes. Currently, our digital payments activity performed by PagSeguro Brazil and MOIP as payment scheme settlors is exempt from authorization. In March 2023, the Central Bank authorized PagInvest Corretora de Títulos e Valores Mobiliários Ltda., or PagInvest, to operate as a securities broker-dealer (corretora de títulos e valores mobiliários). In October 2023, the Brazilian Securities Commission (Comissão de Valores Mobiliários), or the CVM, also authorized PagInvest to provide custody services. Our investment related activities in the securities market, currently conducted by BancoSeguro through our investment platform, will gradually transition to PagInvest.
Abroad, our activities extend over multiple jurisdictions in Latin America, such as Chile, Colombia, Mexico and Peru, which possess complex regulatory and legal frameworks. As a result of this, we are required to comply with a wide range of laws and regulations in the countries where we operate or do business, including anti-corruption, international sanctions, anti-money laundering, data protection, privacy of personal data, and related laws and regulations. Our governance and compliance processes, which include the review of internal control over financial reporting, may not timely identify or prevent breaches of legal, regulatory, accounting, governance or ethical standards required by these jurisdictions. Our failure to comply with applicable laws and other standards imposed by these jurisdictions in which we operate could subject us to investigations by authorities, litigation, fines, loss of operating licenses, disgorgement of profits, involuntary dissolution and reputational harm.
In addition, early payment of receivables is part of our activities. Law No. 12,865/2013 prohibits payment institutions such as PagSeguro Brazil and MOIP from performing activities that are limited to financial institutions. There is some debate under Brazilian law as to whether providing early payment of receivables to merchants could be characterized as "lending," which is an activity that is limited to financial institutions. Similarly, there is some debate as to whether the discount rates applicable to this early payment feature should be considered as "interest," in which case the limits set by the Brazilian Usury Law would apply to these rates. In this context, the Central Bank Office of Legal Counsel (Procuradoria-Geral do Banco Central) issued a legal opinion in which it concluded that: (i) the advance of payments of trade receivables (credit card installment receivables backed by executed and paid transactions) to merchants relates to the early payment of an obligation and should not be confused with activities of financial institutions; and (ii) discount rates applicable to this prepayment mechanism are subject to the limits set forth in the Brazilian Usury Law. If new laws are enacted or the courts' interpretation of this activity changes, either preventing us from providing early payments of receivables to merchants or limiting the fees we usually charge, our financial performance could be negatively affected. For further information regarding these regulatory matters, see "Item 4. Information on the Company-Regulation-Regulation of the digital payments industry in Brazil."
BancoSeguro is licensed in Brazil as a multi-purpose bank, with commercial and investment banking portfolios. As a financial institution, BancoSeguro is subject to Law No. 4,595/1964 and the rules issued by the National Monetary Council (the Conselho Monetário Nacional, or CMN), and the Central Bank. Brazilian financial institutions are subject to extensive government regulations, including those relating to: (i) minimum capital requirements; (ii) compulsory deposits/reserve requirements; (iii) investment requirements in fixed assets; (iv) lending limits and other credit restrictions; (v) accounting and statistical requirements; (v) price and salary controls; and (vi) tax policy and regulation. Additionally, within the scope of its investment banking portfolio, BancoSeguro, through our investment platform, acts as a distributor of securities (currently, third party investment funds) and as an intermediary in securities markets, and in this regard BancoSeguro is regulated and supervised by the CVM, in accordance with Law No. 6,385/1976 and the rules issued by the CVM and by BSM Supervisão de Mercados (the self-regulatory division of the Brazilian stock exchange, the B3). Brazilian payment institutions and financial institutions have no control over government regulations applicable to their activities. Any changes in such regulations could adversely affect the operations and financial results of BancoSeguro, MOIP, PagSeguro Brazil and PagInvest.
For instance, Law No. 14,690/2023 was published on October 3, 2023 which established a new limit on the interest and financial fees charged on the outstanding balances of credit card invoices in the categories of revolving credit (crédito rotativo) and installment credit (parcelamento de fatura de cartão de crédito). On December 21, 2023, the CMN and the Central Bank regulated, through Resolution No. 5,112 and Resolution No. 365, the limit provided for in Law No. 14,690/2023. Under these new rules, the total amount of interest and financial charges that may be levied on revolving credit or installment credit balances cannot exceed the original amount of the debt financed. This limit applies to all issuers of credit cards and other post-paid payment instruments.
Furthermore, if we are found to be in violation of any current or future regulations, we could be (i) required to pay substantial fines (including per transaction fines) and disgorgement of our profits, (ii) required to change our business practices, or (iii) subjected to resolution regimes such as an intervention by the Central Bank and the out-of-court liquidation. We could also be subject to private lawsuits. Any of these consequences could seriously harm our business and results of operations.
Regulation - Risk 6
We are subject to anticorruption, anti-bribery and anti-money laundering laws and regulations, and any errors, failures, or delays in complying with anticorruption, anti-bribery and anti-money laundering laws and regulations could result in significant criminal, administrative and civil lawsuits, penalties, forfeiture of significant assets, or other enforcement actions, as well as reputational harm.
We are subject to various anticorruption, anti-bribery and anti-money laundering laws and regulations that prohibit, among other things, our involvement in improper payments to certain public officials for the purpose of obtaining advantages or in transferring the proceeds of criminal activities. We have programs designed to comply with new and existing legal and regulatory requirements. However, any errors, failures, or delays in complying with anticorruption, anti-bribery and anti-money laundering laws and regulations could result in significant criminal, administrative and civil lawsuits, penalties, forfeiture of significant assets, or other enforcement actions, as well as reputational harm.
Regulators may increase enforcement of these obligations, which may require us to further revise or expand our compliance program, including the procedures we use to verify the identity of our customers and to monitor our transactions. Regulators regularly re-examine the transaction volume thresholds at which we must obtain and keep applicable records or verify identities of customers and any change in such thresholds could result in greater costs for compliance. Costs associated with fines or enforcement actions, changes in compliance requirements, or limitations on our ability to grow could harm our business and any new requirements or changes to existing requirements could impose significant costs, result in delays to planned product improvements, make it more difficult for new customers to join our network and reduce the attractiveness of our products and services.
Regulation - Risk 7
A failure to comply with export controls or economic sanctions laws and regulations could have a material adverse impact on our results of operations, financial condition and reputation.
We face risks related to compliance with export controls (which can apply to software and technology) and economic sanctions laws and regulations, including those administered by the United Nations, the European Union and the United States, including the U.S. Treasury Department's Office of Foreign Assets Control. Economic sanctions programs, if applicable, would restrict our dealings with certain sanctioned countries, territories, individuals and entities. Export controls restrict the export or transfer of certain goods, technology, and software to certain end-users or locations. Economic sanctions and export controls are complex, frequently changing, and often increase in number, and may impose incremental prohibitions, fines, restrictions on dealings with or involving additional countries, territories, individuals, entities or items or compliance obligations on our dealings in certain countries and territories or involving certain items. We may not be successful in ensuring compliance with limitations or restrictions on business with companies in any sanctioned countries and/or other sanctions targets, and we could potentially become targeted by sanctions as a result of such business even where such business was conducted in compliance with applicable laws and regulations. If we are found to be in violation of applicable sanctions or export controls laws or regulations or to have engaged in sanctionable conduct, we may face criminal or civil fines or other penalties, we may suffer reputational harm and our results of operations and financial condition may be adversely affected.
Additionally, there can be no assurance that our employees, directors, officers, partners or any third parties that we do business with, including, among others, any distributors or suppliers, will not violate sanctions or export controls laws and regulations or engage in sanctionable conduct. We may ultimately be held responsible for any such violation of sanctions or export controls laws and regulations, or sanctionable conduct, by these persons, which could result in criminal or civil fines or other penalties, have a material adverse impact on our results of operations and financial condition and damage our reputation.
Litigation & Legal Liabilities1 | 1.5%
Litigation & Legal Liabilities - Risk 1
Unfavorable outcomes in litigation or our inability to post judicial collateral or provide guarantees in pending legal or administrative proceedings could have a material adverse effect on our business, financial condition and results of operations.
We are defendants in a significant number of judicial proceedings, including indemnity, labor and tax proceedings. As of December 31, 2023, we have recorded R$ 91.5 million in provisions for current civil and labor proceedings and 5.7 million in provisions for non-current proceedings. We have not recorded any provisions with respect to our proceedings in which our chance of loss has been deemed possible. We cannot guarantee that such proceedings will have favorable outcomes for us or that the provisions made will be sufficient to pay any amounts due. Any proceedings that require us to make substantial payments, affect our reputation or otherwise interfere with our business operations could have a material adverse effect on our business, financial condition and operating results.
Additionally, we may not have sufficient funds to post collateral or provide guarantees in judicial or administrative proceedings that claim substantial amounts. Even if we do not post such collateral or provide guarantees, we will be liable for paying any amounts due pursuant to any unfavorable outcomes in legal proceedings. We cannot assure you that, if we cannot make such payments, our assets, including financial assets, will not be attached, or that we will be able to obtain tax good standing certificates, all of which may have a material adverse effect on our business, financial condition and results of operations.
Taxation & Government Incentives2 | 3.0%
Taxation & Government Incentives - Risk 1
Although we do not expect to be a passive foreign investment company, or PFIC, for U.S. federal income tax purposes, there can be no assurance that we will not be a PFIC for any taxable year, which could subject United States investors in our shares to significant adverse U.S. federal income tax consequences.
We do not expect to be a PFIC for the current taxable year or any future year, based on our current business plans. However, whether we are a PFIC will be determined annually based upon the composition and nature of our income, the composition, nature and valuation of our assets (including goodwill), all of which are subject to change, and which may be determined in large part by reference to the market value of our shares, which may be volatile, and our corporate structure and the classification for U.S. federal income tax purposes of our subsidiaries. The determination of whether we are a PFIC will also depend upon the application of complex U.S. federal income tax rules concerning the classification of our assets (including goodwill) and income for this purpose, and the application of these rules is uncertain in some respects. Moreover, the determination of the value of our assets (including goodwill and certain intangible assets) may depend on our market capitalization, and that market capitalization may fluctuate. Accordingly, due to the lack of directly applicable authority regarding the foregoing, there can be no assurance that the IRS will not challenge any determination by us that we are not a PFIC.
If we were classified as a PFIC, special adverse U.S. federal tax rules would generally apply to a United States Holder (as defined in "Item 10. Additional Information-Taxation-U.S. Federal Income Tax Considerations") that holds our Class A common shares. United States Holders are urged to consult their own tax advisors with respect to the potential tax consequences of the PFIC rules to their particular circumstances.
Taxation & Government Incentives - Risk 2
Changes in tax laws, tax incentives, benefits or differing interpretations of tax laws may adversely affect our results of operations.
Changes in tax laws, regulations, related interpretations and tax accounting standards in Brazil, the Cayman Islands or the United States may result in a higher tax rate on our earnings, which may significantly reduce our profits and cash flows from operations. For example, in 2015 the Brazilian government increased the rate of PIS/COFINS tax (which is a social contribution on gross revenues) from 0% to 4.65% on financial income realized by Brazilian companies that are taxed under the non-cumulative regime (which is the tax regime that applies to us). In addition, our results of operations and financial condition may decline if certain tax incentives are not retained or renewed. For example, Brazilian Law No. 11,196 currently grants tax benefits to companies that invest in research and development, provided that some requirements are met, which significantly reduces our annual income tax expense. On the other hand, if taxes applicable to our business increase or any tax benefits are revoked and we cannot alter our cost structure to pass our tax increases on to customers, our financial condition, results of operations and cash flows could be harmed. Our payment processing activities are also subject to a Municipal Tax on Services (Imposto Sobre Serviços), or ISS. Any increases in ISS rates would also harm our profitability.
In addition, Brazilian government authorities at the federal, state and local levels are considering changes in tax laws to cover budgetary shortfalls resulting from the economic downturn in Brazil. If these proposals are enacted they may harm our profitability by increasing our tax burden, increasing our tax compliance costs, or otherwise affecting our financial condition, results of operations and cash flows. Some tax rules related to the collection, ancillary obligations or changes in the applicable tax rates in Brazil may be amended by the authorities without prior notice or a transition period for implementation. We may not always be aware of all such changes that affect our business and we may therefore inadvertently fail to pay the applicable taxes or otherwise comply with tax regulations, which may result in additional tax assessments, penalties and interests for our company. In this sense, we are involved in tax proceedings based on differences of interpretation between us and the Brazilian tax authorities regarding tax laws and regulations. For further information, see "Item 8. Financial Information-Tax and Social Security Proceedings."
At the municipal level, the Brazilian government enacted Supplementary Law No. 157/2016, which imposed changes regarding the taxes applied to services we render. Once these changes are enforced, our taxes will be due in the municipality in which the acquirer of our services is located, rather than in the municipality in which our facilities are located. This obligation took force in January 2018, but its enforcement has been delayed by Direct Unconstitutionality Action No. 5835, or the ADI, filed by taxpayers. The ADI challenges Supplementary Law No. 157/2016's constitutionality before the Brazilian Federal Supreme Court, or STF, arguing that the new legislation would adversely affect companies due to the increased costs and bureaucracy that would come with making ISS tax payments to several municipalities and complying with tax reporting obligations connected therewith. Moreover, the Brazilian government enacted Supplementary Law No. 175/2020, which implemented additional changes to the collection of ISS taxes on certain services, including debit or credit card services, and provided that ISS taxes due for the rendering of these services be paid to the municipality in which the recipient of the service is located. In June 2023, the Brazilian Supreme Court declared the provisions of Supplementary Law 157/2016 and Supplementary Law 175/2020, which required the payment of ISS taxes to the municipality in which the acquirer of the service is located, unconstitutional. As a result, the payment of ISS taxes are due to the municipality in which the service provider's headquarters are located.
The Brazilian government has been studying a substantial tax reform in Brazil which demonstrated significant progress in the year-end 2023, with more expected in 2024. This tax reform includes a proposal to eliminate the current exemption from income tax on dividend payments. Should this change be implemented, it would lead to higher tax liabilities on dividends or distributions made by Brazilian companies, potentially affecting our ability to receive future cash dividends or distributions net of taxes from our subsidiaries. It is not possible to precisely predict if and how potential changes may affect our business, but it is advised that prospective investors consult their tax advisors for reviewing potential impacts associated with these potential changes in the applicable tax law.
On December 20, 2023, the Brazilian Congress passed a tax reform on consumption (Constitutional Amendment Nº 132 - EC 132/2003), which is expected to come into effect within a seven-year transition period starting from 2026. This constitutional amendment aims at simplifying the Brazilian tax framework. It provides for, among other things, (i) the removal of five taxes (except in limited circumstances), including the existing value-added taxes (VAT) known as ICMS, the ISS, the tax on manufactured products, or IPI, PIS and COFINS, and (ii) the creation of two new VATs, namely the State/Municipal Tax on Goods and Services (Imposto sobre Bens e Serviços), or IBS, and the Federal Contribution on Goods and Services (Contribuição sobre Bens e Serviços), or CBS. Tax collection on the new VATs will be implemented by taxing consumption (rather than a tax on production and/or revenue, as in the prior system). According to EC 132/2023, the IBS and CBS will be regulated by a complementary law, which is yet to be drafted and approved. Different IBS and CBS rates may apply to specific goods and services listed in the Brazilian Constitution, with tax reductions included in the amendment that can range from 30%, 60% or 100% (e.g., medicines, agricultural products, education and others). Specific regimes will also be applied to sectors expressly listed in the Brazilian Constitution, with rules that will be regulated by a complementary law (e.g., fuel, financial services and others).
The Brazilian government established 19 working groups with states and municipalities to bring EC 132/2023 into force. They will have 60 days to prepare preliminary bills of complementary law to regulate the constitutional amendment, which then must be submitted for review in up to 180 days. We are still assessing this new tax reform, and we are unable to quantify the expected impact of EC 132/2003 on our financial position and profitability. Furthermore, EC 132/2023 also set a deadline of 90 days for the government to submit a bill of law to the Brazilian Congress proposing an income tax reform, as well as a proposal for a change in payroll taxation. According to the Extraordinary Secretariat for Tax Reform, this deadline technically ended in March 2024. However, there are no sanctions applicable if the government did not meet the deadline. In light of the complexity of the matter, there is no certainty on a timeline for the proposal of those changes.
Finally, there have been recent changes in the Brazilian tax legislation concerning the taxation of Brazilian investment funds, including FIDCs, by means of Law 14,754 of December 12, 2023 (Law 14,754/2003). According to this new legislation, one of these changes imposes that from 2024 onwards, the earnings derived from any investment in closed-end FIDCs shall be subject to a semi-annual tax due on the last business day of May and November, at the rates of 15% (in the case of long-term-FIDCs) or 20% (in the case of short-term FIDCs), irrespective of actual distributions, unless those FIDCs qualify as investment entities (as defined by Law 14,754/2023 and Resolution CMN 5,111/2023). PagSeguro Brazil's FIDC administrator has indicated that its FIDC qualifies as an investment entity according to Law 14,754/2023 and Resolution CMN 5,111/2023, and therefore Law 14,754/2023, should not impact our business.
Furthermore, we are subject to tax laws and regulations that may be interpreted differently by tax authorities, judicial or administrative courts and us. The application of indirect taxes, such as sales and use tax, value-added tax, or VAT, provincial taxes, goods and services tax, business tax and gross receipt tax, to businesses like ours is a complex and evolving issue. Significant judgment is required to evaluate applicable tax obligations. In many cases, the ultimate tax determination is uncertain because it is not clear how existing statutes apply to our business. One or more states, or municipalities, the federal government or other countries may seek to challenge the taxation or procedures applied to our transactions imposing the charge of taxes or additional reporting, record keeping or indirect tax collection obligations on businesses like ours. New taxes could also require us to incur substantial costs to capture data and to collect and remit taxes. If such obligations were imposed, the additional costs associated with tax collection, remittance and audit requirements could have a material adverse effect on our business and financial results.
Environmental / Social3 | 4.5%
Environmental / Social - Risk 1
We are subject to costs and risks associated with increased or changing laws and regulations affecting our business, including those relating to the sale of consumer products. Specifically, developments in data protection and privacy laws could harm our business, financial condition, results, or operations.
We operate in a complex regulatory and legal environment that exposes us to compliance and litigation risks and that could materially affect our results of operations. These laws may change, sometimes significantly, as a result of political, economic or social events. Some of the federal, state or local laws and regulations that affect us include: those relating to consumer products, product liability or consumer protection; those relating to the manner in which we advertise, market or sell products; labor and employment laws, including wage and hour laws; tax laws or interpretations thereof; data protection, privacy and cybersecurity laws and regulations; and securities and exchange laws and regulations. For instance, data protection and privacy laws are developing to consider the changes in cultural and consumer attitudes towards the protection of personal data. There can be no guarantee that we will have sufficient financial resources to comply with any new regulations or successfully compete in the context of a shifting regulatory environment. Any additional privacy laws or regulations could seriously harm our business, financial condition or results of operations.
Environmental / Social - Risk 2
We are subject to risks associated with noncompliance with the General Data Protection Law and may be adversely affected by the imposition of fines and other types of penalties.
In 2018, Law No. 13,709/2018, the General Data Protection Law (Lei Geral de Proteção de Dados), or LGPD, was enacted, as amended by Law No. 13,853/2019, to govern the practices related to the use of personal data, replacing the sparse and sectoral standards that previously regulated rights to data privacy and protection in Brazil. The LGPD became effective on September 18, 2020, but the application of the administrative penalties provided for in the LGPD was postponed to August 1, 2021. By creating a microsystem of rules impacting all sectors of the economy, the LGPD provides a new legal framework to be observed in personal data processing operations. Among other provisions, it establishes the rights of data subjects, the legal bases applicable to the protection of personal data, the requirements for obtaining consent on the use of such data, when applicable, the obligations and requirements relating to security incidents and leaks and data transfers, as well as the authorization for the creation of the ANPD, which is the entity responsible for regulating and supervising the application of the LGPD and other data protection laws as well as imposing sanctions in the event of noncompliance with the legal rules and obligations. On August 26, 2020, the Brazilian government issued Decree No. 10,474/2020, approving the regulatory framework and list of commissioned positions for the ANPD. The decree became effective in November 2020, when ANPD's chief executive officer appointment was published in the Brazilian official federal newspaper.
On February 27, 2023, ANPD issued the dosimetry regulation, which establishes the criteria to be used when any administrative sanctions are applied. Although the regulation still includes some vague definitions (such as what entails large-scale data processing), it clarified the elements ANPD takes into account when analyzing a data related incident, such as recurrence (incidents up to five years apart), good faith, cooperation, transparency, proportionality and the adoption of best practices and governance policies. According to the regulation, any administrative sanction applicable to any violation of the LGPD will depend on: (i) the classification of the infraction as "slight," "medium" or "serious"; and (ii) ANPD's understanding of the proportionality of the sanction in relation to the infraction committed.
We must also provide a secure environment for our users. Investing in technical and administrative maintenance for information security and personal data protection will also be necessary, including to support our corporate governance structure for personal data protection. In addition, under the LGPD, we have a legal duty to maintain a communication channel with data subjects whose data we process, including our users and partners.
Personal data subjects are entitled to the following rights, which we must ensure: (i) to obtain confirmation of existence of personal data processing, (ii) to access their personal data, (iii) to correct all incomplete, inaccurate or outdated personal data, (iv) to carry out portability processes to transfer personal data to another service or product, in accordance with the additional regulations to be set forth by the ANPD, (v) to request the deletion of processed personal data based on consent, or the right to revoke their previously given consent, (vi) to obtain information on government and private-sector entities with whom those responsible for data processing have shared their data, (vii) to be allowed to deny consent to personal data processing and to be advised of the consequences of that denial, and (viii) to request the review of decisions made solely based on automated processing. The LGPD also establishes that the following information must be provided to data subjects, including through privacy notices: (i) the specific purpose of such processing, (ii) processing methods and duration, (iii) the identity of the data controller, (iv) the contact information of the data controller, (v) information with regards to the sharing of personal data with third parties and its purpose, (vi) description of responsibilities, particularly the responsibilities of the processing agents involved, and (vii) we expressly mention the data subjects' rights provided above.
We may be required to indemnify users affected by violations of their rights as data subjects, such as their right to transparency or to obtain information on the processing of their personal data. Should we disclose insufficient information regarding data processing as required by the LGPD, we may also be subject to administrative sanctions imposed by personal data protection, consumer protection or public interest protection agencies and entities, including the ANPD. Noncompliance with any LGPD provisions may lead to the following: (i) individual or class actions being filed seeking damages due to breaches not only of the LGPD, but also of any sparse and industry-specific data protection laws still in force and (ii) the imposition of the penalties set forth by the Consumer Protection Code and the Civil Framework for the Internet by certain consumer protection agencies, as they have been acting in this regard well before the effectiveness of the LGPD, administrative penalties levied by the ANPD, particularly in cases of violations of the LGPD.
If our operations and business model are not in compliance with the LGPD's rules, we may be subject to formal warnings, public sanctions, the deletion of data or the suspension of data processing activities. Furthermore, we may be subject to a fine equal to up to 2% of our gross sales, or the gross sales of our economic group in Brazil, in the preceding fiscal year, excluding taxes, but limited to a total of R$50.0 million per violation. In addition, we may be held liable for individual or collective material moral damages caused by our failure to meet any of the obligations set forth by the LGPD. We may be held legally responsible for paying damages to users harmed by violations of their rights as personal data subjects, such as their rights to transparency, in that they may obtain information regarding the processing of their personal data and other rights set forth in the LGPD.
If we are found to not have sufficiently provided information about the processing of personal data in accordance with the requirements set forth by the LGPD, we may also face administrative sanctions by public entities and regulatory bodies that govern personal data, consumer protection and public interests.
The LGPD and other laws and regulations that may be passed in the future may be interpreted and applied differently over time and from jurisdiction to jurisdiction. It is possible they will be interpreted and applied in ways that will materially and adversely affect our business. Any failure to comply with (i) our privacy policies, (ii) any regulatory requirements or orders, or (iii) other local, state, federal, or international privacy or consumer protection-related laws and regulations could materially and adversely affect our business.
Environmental / Social - Risk 3
Unauthorized disclosure of sensitive or confidential customer information or our failure or the perception by our customers that we failed to comply with privacy laws or properly address privacy concerns could harm our business and standing with our customers.
We collect, store, process, and use certain personal information and other user data in our business. A significant risk associated with e-commerce and communications is the secure transmission of confidential information over public networks. The perception of privacy concerns, whether or not valid, may harm our business and results of operations. We must ensure that all processing, collection, use, storage, dissemination, transfer and disposal of data for which we are responsible comply with relevant data protection and privacy laws. The protection of our customer, employee and company data is critical to us. Currently, a number of our users authorize us to bill their credit card as well as bank and payment accounts directly. We rely on commercially available systems, software, tools and monitoring to provide secure processing, transmission and storage of confidential customer information, such as credit card and other personal information. Despite the security measures, we have in place, our facilities and systems, and those of our third-party service providers, may be vulnerable to security breaches, acts of vandalism, computer viruses, misplaced or lost data, programming or human errors, or other similar events. For example, in 2021, we experienced a cyberattack that targeted our subsidiary MOIP, which was disclosed to the ANPD and considered a closed matter in February 2024. For more information about that incident, see "Our business is subject to cyberattacks and security and privacy breaches." We continue to monitor and review, on an ongoing basis, our information technology systems, policies and security in an effort to avoid or remedy weaknesses, vulnerabilities or deficiencies. For more information, see "Item 4. Information on the Company-Protecting Our Clients-2021 MOIP Cybersecurity Incident."
Any future security breach, or any perceived failure involving the misappropriation, loss or other unauthorized disclosure of confidential information, as well as any failure or perceived failure to comply with laws, policies, legal obligations or industry standards regarding data privacy and protection, whether by us or our vendors, could damage our reputation, expose us to litigation risk and liability, subject us to negative publicity, disrupt our operations and harm our business. Our security measures and remedial actions to address past cyberattacks may fail to prevent future security breaches, which could harm our business and financial results.
Ability to Sell
Total Risks: 10/66 (15%)Below Sector Average
Competition1 | 1.5%
Competition - Risk 1
Increasingly intense competition may harm our business.
We compete in markets characterized by vigorous competition, changing technology, changing customer needs, evolving industry standards and frequent introductions of new products and services. We compete with existing providers of digital payment solutions, in-person payments via POS, free digital accounts, prepaid, debit, credit cards, loans, insurance distribution and acquiring activities. In the online digital payments market, we compete primarily with international online payment services and regional players. In the POS payments market, we compete primarily with international players and regional players. As is the case with the digital payments industry in general, we also compete with other means of payment, both digital and traditional, including cash, checks, Pix (a 24/7 instant payment platform sponsored by the Brazilian government), money orders and electronic bank deposits.
We expect competition to intensify in the future as existing and new competitors introduce new services or enhance existing services. We compete against many companies to attract customers, and some of these companies have greater financial resources and substantially larger bases of customers than we do, which may provide them with significant competitive advantages. These companies may devote greater resources than we do to the development, promotion and sale of products and services, and they may be more effective in introducing innovative products and services that hinder our growth. Competing services tied to established banks and other financial institutions may offer greater liquidity and create greater consumer confidence in the safety and efficiency of their services than PagSeguro. Mergers and acquisitions by or among these companies may lead to even larger competitors with more resources. We also expect new entrants to offer competitive products and services. For example, established banks and other financial institutions currently offer online payments and those, which do not yet provide such services could quickly and easily develop them. Certain merchants have longstanding exclusive, or nearly exclusive, relationships with our competitors to accept payment cards and other services that we offer. These relationships may make it difficult or cost prohibitive for us to conduct material amounts of business with them. If we are unable to differentiate ourselves from and successfully compete with our competitors, our business will suffer serious harm.
We may also face pricing pressures from competitors. Certain competitors are able to offer lower prices to merchants for similar services by cross subsidizing their digital payments services using other services they offer. This competition may mean we need to reduce our pricing, which could reduce our profits. As they grow, merchants may demand more customized and favorable pricing from us, and competitive pressures may require us to agree to this, further reducing our profits. If market conditions require us to increase the discounts or incentives we provide, our business could suffer serious harm.
Demand3 | 4.5%
Demand - Risk 1
Our business could be harmed if we are unable to forecast demand for our products accurately or to manage our product inventory adequately.
With the goal of increasing our transaction business and POS device offerings, we invest broadly in our POS unit technology. Our products, such as the Moderninha and the Minizinha, often require investments with long lead times. An inability to forecast the success of a particular product correctly could harm our business. We must forecast inventory needs and expenses and place orders sufficiently in advance with our third-party suppliers and contract manufacturers based on our estimates of future demand for products. Our ability to forecast demand for our products could be affected by many factors, including an increase or decrease in demand for our products or for our competitors' products, unanticipated changes in general market conditions, and the change in economic conditions.
If we underestimate demand for a particular product, our contract manufacturers and suppliers may not be able to deliver enough product to meet our requirements, and we may experience a shortage of that product available for sale or distribution. The shortage of a popular product could seriously harm our brand, our seller relationships, the acquisition of additional sellers and our total transaction business. If we overestimate demand for a particular product, we may have excess inventory for that product and the excess inventory may become obsolete or out of date. Inventory levels more than demand may lead us to write down or write off the inventory or sell excess inventory at further discounted prices, which could harm our profit and our business.
Demand - Risk 2
Our operating results are affected by decreases in consumer discretionary spending. Changes in macroeconomic conditions may reduce the volume and prices of transactions on our payments platforms and harm our growth strategies and business prospects.
Our operating results are affected by the condition of the economy in Brazil and other countries around the world. Our business and financial performance may be harmed by current and future economic conditions that cause a decline in business and consumer spending, including a reduction in the availability of credit, increased unemployment levels, higher energy and fuel costs, rising interest rates, financial market volatility, and recession.
Furthermore, geopolitical instability arising from conflicts, such as the recent conflict in the Middle East and the ongoing war in Ukraine, and the resulting imposition of sanctions, taxes or tariffs against Russia and its response to such sanctions (including retaliatory acts, such as cyberattacks and sanctions against other countries) could adversely affect the global economy or specific international, regional and domestic markets, including the Brazilian market. Such events could have an adverse effect on our business and financial performance through increased worldwide inflation, greater compliance costs, higher volatility in foreign currency exchange rates, destabilized supply chains and further market disruptions, including from cyberattacks targeting technologies that we rely on or the markets in which we or our customers operate.
The World Bank in its January 2024 World Economic Outlook forecasted 3.1% growth for the world GDP in 2024 and 3.2% in 2025. In this recent study, the World Bank indicated that, "with disinflation and steady growth, the likelihood of a hard landing has receded, and risks to global growth are broadly balanced." This slightly more optimistic short-term forecast compared to what was previously expected last year is due to factors such as the resilience of the United States economy and certain emerging markets, in addition to economic policy measures by the Chinese government. However, uncertainties remain and GDP growth is still expected to be below the historical average due to high interest rates to contain inflation, less fiscal support from governments and low productivity growth. Due to the inherent uncertainty in the Brazilian domestic and the international economy, and the challenges facing existing levels of globalization that connects markets globally, any of the foregoing could adversely affect the financial services sector and, consequently, our business, results of operations and financial condition, and could cause the trading price of our Class A common shares to decline.
Demand - Risk 3
We might not successfully implement strategies to increase adoption of our digital payment methods, which would limit our growth.
Our future profitability will depend, in part, on our ability to successfully implement our strategy to increase adoption of our digital payment methods. We cannot assure you that the market for digital payments will continue to grow or will remain viable. We expect to invest substantial amounts to:
- drive consumer and merchant awareness of digital payments;- encourage consumers and merchants to sign up for and use our digital payment products;- enhance our infrastructure to handle seamless processing of transactions;- continue to develop state of the art, easy-to-use technology;- expand our operations;- increase the number of users who collect and pay digitally; and - grow and diversify our customer base.
Despite these investments, we may fail to implement these programs successfully or to increase substantially the number of customers who pay for our digital payment methods. This would hold back any growth in our revenues and harm our business.
Sales & Marketing4 | 6.1%
Sales & Marketing - Risk 1
We partially rely on card issuers or card schemes to process our transactions. Changes to credit card scheme fees, rules or practices may harm our business.
We partially rely on card issuers or card schemes to process our transactions and must pay a fee for this service. From time to time, card schemes such as MasterCard and Visa may increase the interchange fees that they charge for each transaction using one of their cards. Credit card processors have the right to pass any increases in interchange fees on to us as well as increase their own fees for processing. In addition, card schemes have imposed and may again impose special assessments for transactions that are executed through a "digital wallet," and these fees could particularly affect us and significantly increase our costs. These increased fees increase our operating costs and reduce our profit margins.
We are also required by credit card schemes to comply with their operating rules. The credit card schemes and their member banks set and interpret these rules. The bank accounts offered by those member banks compete with our digital account services. Visa, MasterCard, American Express, Elo or other credit card companies could adopt new operating rules or reinterpret existing rules that we or our processors might find difficult or even impossible to follow. As a result, we could lose our ability to provide our customers the option of using credit cards to fund their payments and our users the option to pay their fees using a credit card. If we were unable to accept credit cards, our business would be seriously harmed.
We could lose the right to accept credit cards or could be required to pay fines if credit card schemes such as MasterCard or Visa determine that users are using our platform to engage in illegal or "high risk" activities, or if users generate a large volume of chargebacks related to fraudulent transactions. Additionally, we may be unable to access financing in the credit and capital markets at reasonable rates to fund our operations and for that reason our profitability and total transaction business could decline significantly.
Sales & Marketing - Risk 2
The e-commerce market in Brazil is developing, and the expansion of our business depends on the continued growth of e-commerce, as well as increased availability, quality and usage of the internet in Brazil.
Our future revenues from digital payments depend substantially on consumers' widespread acceptance and use of the internet to conduct commerce. Rapid growth in the use of the internet (particularly to provide and purchase products and services) is a relatively recent phenomenon in Brazil and we cannot assure you that this rapid growth of acceptance and usage will continue.
Internet penetration in Brazil may never reach the levels seen in more developed countries for reasons that are beyond our control, including the lack of necessary network infrastructure or delayed development of enabling technologies, performance improvements and security measures. The infrastructure for the internet in Brazil may not be able to support continued growth in the number of users, their frequency of use or their bandwidth requirements. Delays in telecommunication and infrastructure development or other technology shortfalls may impede improvements in internet reliability in Brazil. If telecommunications services are not sufficiently available to support the growth of the internet in Brazil, response times could be slower, which would reduce internet usage and harm our services. In addition, even if internet penetration in Brazil increases, this may not lead to growth in e-commerce due to several factors, including lack of confidence by users in online security.
Furthermore, the price of internet access and internet-connected devices, such as personal computers, tablets, mobile phones and other portable devices, may limit our growth, particularly in parts of Brazil with low levels of income. Income levels in Brazil are significantly lower than in the United States and other more developed countries, while prices of both portable devices and internet access in Brazil are higher than in those countries. Income levels in Brazil may decline and device and access prices may increase in the future.
Any of these factors could limit our ability to generate revenues in future.
Sales & Marketing - Risk 3
Failure to deal effectively with fraud, fictitious transactions, bad transactions or negative customer experiences would increase our loss rate and harm our business, and could severely diminish merchant and consumer confidence in and use of our services.
We incur losses and expenses due to claims from consumers that merchants have not performed or that their goods or services do not match the merchant's description. We seek to recover these losses and expenses from the merchant but may not be able to recover them in full when the merchant is unwilling or unable to pay. We also incur losses and expenses from claims that the consumer did not authorize the purchase, from consumer fraud and from erroneous transmissions. In addition, if the losses we incur related to card transactions become excessive, they could potentially result in a loss of our right to accept cards for payment. If we were unable to accept cards, the number of transactions processed through our platform would decrease substantially and our business would be harmed. We are also subject to the risk of fraudulent activity by merchants, consumers of products purchased through our platform, or third parties handling our user information. We take measures to detect and reduce the risk of fraud, but these measures need to be continually improved and may not be effective against new and continually evolving forms of fraud or in connection with new product offerings. If these measures fail, our business could be harmed.
Sales & Marketing - Risk 4
Our financial success is sensitive to the method consumers choose to make payments, since these methods differ in profitability. Our profitability could be harmed if there is an increase in the proportion of our business funded using less profitable methods.
In connection with our acquiring business, we pay transaction fees to card schemes, banks and other intermediaries that vary according to the method chosen by consumers to fund payment transactions. These transaction fees are higher when consumers fund payments using credit cards, and lower when consumers fund payments with debit cards. Transaction fees are nominal when customers fund payment transactions by digital transfer of funds from bank accounts, and we pay no fees when customers fund payment transactions from an existing PagBank account balance. Our financial success is therefore sensitive to changes in the proportion of our business funded by consumers using credit, debit and prepaid cards, which would increase our costs if we were unable to adjust the rates we charge our customers accordingly. Consumers may resist funding payments by digital transfers from bank accounts because of the incentives offered by credit cards, for example, or general concerns about providing bank account information to a third party.
In connection with our issuing business, we earn interchange revenues that vary according to the type of card that we issue to our customers (a credit, debit or prepaid card). These interchange fees are subject to the terms defined by the card schemes, and in certain cases, these fees may also be subject to terms defined by regulators. Thus, our business and financial condition may be negatively affected by the terms of interchange fees established by card schemes and regulators.
As our payments ecosystem, merchant services and banking solutions include both acquiring and issuing business activities, changes in interchange rates that may negatively affect one side of our business may also positively affect the other side of our business. However, we cannot ensure that this correlation will offset a negative overall impact on our business and financial condition because of such variations in interchange rates and payment methods utilization mix.
Brand / Reputation2 | 3.0%
Brand / Reputation - Risk 1
Customer complaints or negative publicity about our customer service could reduce usage of our products and, as a result, our business could suffer.
Customer complaints or negative publicity about our customer service could severely diminish consumer confidence in and use of our products. Breaches of our customers' privacy and our security measures could have the same effect. Measures we sometimes take to combat risks of fraud and breaches of privacy and security, such as freezing customer funds, can damage relations with our customers. These measures heighten the need for prompt and accurate customer service to resolve irregularities. Effective customer service requires significant expenses, which, if not managed properly, could affect our profitability significantly. Any inability by us to manage or train our customer service representatives properly could compromise our ability to handle customer complaints effectively. If we do not handle customer complaints effectively, our reputation may suffer and we may lose our customers' confidence.
Brand / Reputation - Risk 2
Our business depends on a strong and trusted brand, and any failure to maintain, protect and enhance our brand would harm our business.
We have developed a strong and trusted brand, highly linked to the reputation and public image of UOL, our controlling shareholder, which has contributed significantly to the success of our business. Our brand is predicated on the idea that sellers and buyers will trust us and find value in building and growing their businesses with our products and services. Maintaining, protecting and enhancing our brand are critical to expanding our base of sellers, buyers and other third-party partners, as well as increasing engagement with our products and services. This will depend largely on our ability to maintain trust, be a technology leader, and continue to provide high-quality and secure products and services. Any negative publicity about our industry, our company or UOL, our controlling shareholder, the quality and reliability of our products and services, our risk management processes, changes to our products and services, our ability to effectively manage and resolve seller and buyer complaints, our privacy and security practices, litigation, regulatory activity, the experience of sellers and buyers with our products or services, and changes in the public opinion of UOL, could harm our reputation and the confidence in and use of our products and services. Harm to our brand can arise from many sources, including failure by us or our partners to satisfy expectations of service and quality; inadequate protection of sensitive information; compliance failures and claims; litigation and other claims; employee misconduct; and misconduct by our partners, service providers or other counterparties. If we do not successfully maintain a strong and trusted brand, our business could be seriously harmed.
Macro & Political
Total Risks: 8/66 (12%)Above Sector Average
Economy & Political Environment4 | 6.1%
Economy & Political Environment - Risk 1
Inflation and certain measures by the Brazilian government to curb inflation have historically harmed the Brazilian economy and Brazilian capital markets, and high levels of inflation in the future would harm our business and the price of our Class A common shares.
In the past, Brazil has experienced extremely high rates of inflation. Inflation and some of the measures taken by the Brazilian government in an attempt to curb inflation have had significant negative effects on the Brazilian economy generally. Inflation, policies adopted to curb inflationary pressures and uncertainties regarding possible future governmental intervention have contributed to economic uncertainty and heightened volatility in the Brazilian capital markets.
According to the IPCA, Brazilian inflation rate was of 4.50%, as of February 2024 considering the accumulated inflation over the prior 12-month period, and was 5.60%, 5.79% and 10.06% in 2023, 2022 and 2021, respectively. Brazil may experience high levels of inflation in the future and inflationary pressures may lead to the Brazilian government's intervening in the economy and introducing policies that could harm our business and the price of our Class A common shares. In the past, the Brazilian government's interventions included the maintenance of a restrictive monetary policy with high interest rates that restricted credit availability and reduced economic growth, causing volatility in interest rates. For example, the SELIC (Sistema Especial de Liquidação e de Custódia), the Central Bank's overnight rate, as established by the Monetary Policy Committee (Comitê de Política Monetária do Banco Central do Brasil), or COPOM, was 11.75% p.a., 13.75% p.a. and 9.25% p.a. in 2023, 2022 and 2021, respectively. As of March 31, 2024, the SELIC rate was 10.75% p.a. Conversely, Central Bank policies and severe interest rate fluctuations have triggered and may continue to trigger increases in inflation, and, consequently, growth volatility and the need for sudden and significant additional interest rate increases, which could negatively affect us and increase our indebtedness.
Economy & Political Environment - Risk 2
Ongoing political instability may adversely affect our business, results of operations and the trading price of our Class A common shares.
The recent economic instability in Brazil due to uncertainties related to the Mr. Lula da Silva's administration and new governmental fiscal and monetary guidelines has contributed to a decrease in market confidence and an increase in market volatility. The outlines of the proposed new fiscal framework and the tax reform, along with other political and economic developments, may lead to other declines in market confidence, in the Brazilian economy and a crisis in government.
For 2024, the economic outlook continues to face significant uncertainties. After recording a 5.0% growth in GDP in 2021, which was driven by the reopening of the economy after social restrictions imposed by the government were lifted in response to the easing of the effects caused by the COVID-19 pandemic, the Brazilian economy began to show signs of deceleration, especially in the second half of 2022, resulting in a 2.9% growth in GDP in 2022. The Brazilian economy also grew by 2.9% in 2023, and such growth was mainly driven by the agricultural sector. As of January 2024, according to the IMF, Brazil's GDP growth rate for 2024 is estimated to reach 1.7%, since several structural challenges persist, showing that Brazil's growth trajectory is expected to be far below its peers. In addition, the uncertainty in global markets caused by the ongoing war in Ukraine, the recent crisis in the U.S. and Europe banking system and the escalation of the conflict in the Middle East (Gaza and surrounding areas) may contribute to lower rates of global GDP growth.
In addition, various investigations into allegations of money laundering and corruption being conducted by the Office of the Brazilian Federal Prosecutor, including the largest such investigation, known as "Operação Lava Jato," have continued to negatively impact the Brazilian economy and political environment.
Under "Operação Lava Jato" members of the Brazilian government and of the legislative branch, as well as senior officers of large state-owned and private companies, have faced allegations and, in certain cases, convictions, or, also, entering into plea bargains, related to crimes of political corruption, involving alleged bribes by means of kickbacks on contracts granted by the government to several infrastructure, oil and gas and construction companies. The profits of these kickbacks allegedly financed the political campaigns of political parties of the government that were unaccounted for or not publicly disclosed, in addition to alleged personal enrichment of the recipients of the bribes and the favoring of companies in contracts with the Brazilian government. Furthermore, certain of these companies have been investigated, and, in certain cases, being convicted by the competent authorities, such as the CVM, the SEC and the United States Department of Justice. Certain of these companies have chosen to enter into leniency agreements with the competent authorities, when possible. The outcome of these investigations, convictions, plea bargaining and leniency agreements have had an adverse impact on the image and reputation of the implicated companies, political parties and on the general market perception of the Brazilian economy and political environment.
After presidential elections in November 2022, a number of antidemocratic events on January 8, 2023 occurred, including the blockade of highways by truck drivers and the invasion of key governmental buildings in Brasília by demonstrators. The aftermath saw Ibaneis Rocha, the Governor of the Federal District, temporarily removed from office, and former Security Secretary Anderson Torres arrested, both linked to the failure in preventing the invasions. As investigations continued, high-profile operations like the Incúria Operation targeted Federal District authorities for their conduct during the events, leading to preventive detentions. The Brazilian Supreme Federal Court (STF) also began trials against individuals involved, resulting in 20 convictions by October 27, 2023. Furthermore, a parliamentary probe was initiated, culminating in a report recommending the indictment of 61 people, including former president Jair Bolsonaro, for their roles in the January 8 events. Additionally, investigations extended beyond the January 8 incidents, targeting other alleged illegal activities. The Federal Police launched Operation Lucas 12:2 to probe criminal embezzlement and money laundering, involving the illegal sale of goods abroad by individuals leveraging their official positions, with former president Bolsonaro and his wife Michele under scrutiny. STF judge Alexandre de Moraes authorized numerous investigative actions, including the approval of a plea agreement for Mauro Cid, Bolsonaro's former aide, arrested for allegedly falsifying COVID-19 immunization records and participating in illegal sales of goods. We cannot predict the outcome of these investigations or any further related investigations that may be initiated, or whether such an outcome could adversely affect us or the Brazilian economy.
With the end of certain checks and balances on government spending in 2022, a federal budget deficit was expected for 2023. In 2022, the nominal expansion of GDP contributed to an increase in nominal tax revenues as a result of inflation, a return of in person working, record commodity prices and a series of short term measures adopted in Brazil (increase in the social aid program "Auxílio Brasil" anticipation of the 13th salary, availability of R$1,000 from labor security funds (FGTS) and other measures). With the end of such efficiency gains, the Proposed Federal Government's Budget Law (Projeto de Lei Orçamentária Anual) predicted a deficit of around R$60 billion in 2023, but that number was underestimated, considering that the estimated deficit did not reflect certain ongoing subsidies in 2023 (i.e. Auxílio Brasil and readjustments in income tax brackets). In fact, in 2023, Brazil's central government's primary budget deficit reached R$230.5 billion (approximately US$47 billion), marking a significant fiscal downturn that raises questions about the government's objective to achieve a balanced budget in 2024. In addition, government projections for the public debt trends in the next decade are more optimistic when compared to market projections. Actual economic performance is highly dependent on Brazil's GDP growth.
Brazil's Federal Government is expected to run a budget deficit for 2024 and in the years going forward. The proposed budget for 2024 outlines a projected primary deficit of R$13.31 billion (equivalent to 0.12% of the forecasted GDP). The economic assumptions underpinning the proposal anticipate an inflation rate of 3.5% and a GDP growth of 2.3% for 2024, and we cannot predict the impact of the budget deficit on the Brazilian economy. Political and economic instability in 2023 affected consumer confidence in Brazil, and the Getulio Vargas Foundation Confidence Consumer Index fell by 2.4 points in January 2024, the lowest since May 2023, which potentially reflects ongoing concerns regarding the economic outlook.
Additionally, the macroeconomic landscape is currently facing multifaceted challenges, including the war in Ukraine following the Russian invasion in early 2022, unrest in the Middle East (including the armed conflict in Gaza and Israel initiated on October 7, 2023 and the increased tensions between Israel and Iran), lasting setbacks from the COVID-19 pandemic, supply chain interruptions and bottlenecks, soaring energy costs, high inflation, and a significant crisis in the semiconductor and chip industry affecting a broad range of sectors. These issues may continue to affect logistics and supply chains, consequently disrupting the efficiency of our operations and service delivery involving our customers and merchants. The cumulative impact of these situations, along with unforeseen events, could deepen the ongoing global economic slowdown and could therefore negatively affect our business and financial results.
We cannot predict which policies the Brazilian federal government may adopt or change or the effect that any such policies might have on our business or on the Brazilian economy. Any such new policies or changes to current policies may have a material adverse impact on our business, results of operations, financial condition and prospects. Worsening political and economic conditions in Brazil may increase production and supply chain costs and adversely affect our results of operations and financial condition. Uncertainty as to whether the Brazilian government will implement changes in policies or regulations affecting these or other factors in the future may contribute to economic uncertainty in Brazil and to heightened volatility in our business.
Economy & Political Environment - Risk 3
The Brazilian government has exercised, and continues to exercise, significant influence over the Brazilian economy. This involvement as well as Brazil's political and economic conditions could harm us and the price of our Class A common shares.
The Brazilian government frequently exercises significant influence over the Brazilian economy and occasionally makes significant changes in policy and regulations. The Brazilian government's actions to control inflation and other policies and regulations have often involved, among other measures, increases in interest rates, changes in tax policies, price controls, foreign exchange rate controls, currency devaluations, capital controls and limits on imports. We have no control over and cannot predict what measures or policies the Brazilian government may take in the future. We and the market price of our securities may be harmed by changes in Brazilian government policies, as well as general economic factors, including, without limitation:
- growth or downturn of the Brazilian economy;- interest rates and monetary policies;- exchange rates and currency fluctuations;- inflation;- liquidity of the domestic capital and lending markets;- import and export controls;- exchange controls and restrictions on remittances abroad;- modifications to laws and regulations according to political, social and economic interests;- fiscal policy and changes in tax laws;- economic, political and social instability;- labor and social security regulations;- the effects of climate change, including transition risks, physical risks and other risks that could adversely affect us; and - other political, social and economic developments in or affecting Brazil.
In 2023, the Brazilian government began to address two important issues, the tax system reform and the approval of a new fiscal framework, which depending on the content of such reforms and proposals, may affect the macroeconomic prospects of the country. We cannot predict what measures the Brazilian government will take in the face of mounting macroeconomic pressures or otherwise. Uncertainty over whether the Brazilian government will implement changes in policy or regulation affecting these or other factors in the future may affect economic performance and contribute to economic uncertainty in Brazil, which may have an adverse effect on us and our Class A common shares. Recent economic and political instability has led to a negative perception of the Brazilian economy and higher volatility in the Brazilian securities markets, which also may adversely affect us and our Class A common shares.
As of late 2023 and early 2024, significant progress has been made regarding the tax system reform in Brazil. Specifically, Brazil's Federal Senate and the Lower House have approved a constitutional amendment bill for a tax reform involving federal, state, and municipal indirect taxes. This reform aims to introduce a dual VAT system consisting of a Tax on Goods and Services, or IBS, and a Contribution on Goods and Services, or CBS. The IBS is intended to replace the state VAT, or ICMS, and the municipal tax on services, or ISS, while the CBS will substitute the federal PIS/COFINS contributions and the federal excise tax on manufactured products, or IPI. The reform will be implemented over a transitional period of seven years, beginning in 2026. Initially, the CBS and IBS will be introduced at rates of 0.9% and 0.1%, respectively. These rates will gradually increase, with the phasing out of the PIS, COFINS and IPI starting from 2027. By 2029, the ICMS and ISS will be gradually reduced, and the rates for CBS and IBS will continue to increase, with full implementation expected in 2033. These developments indicate a significant overhaul of Brazil's tax system. This reform could potentially affect macroeconomic prospects and economic performance in Brazil, thereby influencing the performance of businesses and securities, including our Class A common shares.
The Brazilian government's policy agenda for 2024 faces numerous uncertainties, encompassing factors such as upcoming municipal elections, the anticipated elections for leadership positions in the Senate and the Lower House in 2025, the dynamics between the executive, legislative and judiciary branches, as well as interactions among major political parties. Additionally, potential alterations in monetary, fiscal and social security policies could impact the Brazilian economy. These factors could lead to economic instability within Brazil and heighten the volatility of securities of Brazilian companies like us.
Recent economic and political uncertainty regarding the monetary policy, a turbulent government transition and the new fiscal framework has led to higher volatility in the Brazilian securities markets, which also may adversely affect us and our Class A common shares. See "Item 5. Operating and Financial Review and Prospects-Principal Factors Affecting Our Financial Condition and Results of Operations -Brazilian political environment and macroeconomic conditions, interest rates, consumer credit and consumer spending."
Economy & Political Environment - Risk 4
Infrastructure and workforce deficiency in Brazil may impact economic growth and have a material adverse effect on us.
Our performance depends on the overall health and growth of the Brazilian economy. Brazilian GDP growth has fluctuated over the past few years, experiencing a contraction of 3.3% in 2016, growth of 1.3% in 2017 and 1.8% in 2018, and growth of 1.2% in 2019. Due to the global economic downturn triggered by the COVID-19 pandemic, the Brazilian economy in 2020 underwent a contraction of 3.3% in GDP. At the end of 2020 and especially during the beginning of 2021, government stimulus packages, credit growth, and the gradual reopening of the retail and services industries allowed the economy to recover, which intensified at the end of 2021, after the successful vaccination campaign against COVID-19, leading to GDP growth of 5.0% in 2021. In 2022, despite a slowdown in the economic recovery, the services sector was primarily responsible for a 2.9% GDP growth. In 2023, despite high inflation and interest rates, and the job market losing momentum, Brazil registered a 2.9% GDP growth, mainly driven by the agricultural sector. As of January 2024, according to the IMF, Brazil's GDP growth rate is expected to be 2.3% for the year 2024. Growth is limited by inadequate infrastructure, including potential energy shortages and deficient transportation, logistics and telecommunication sectors, the lack of a qualified labor force, and the lack of private and public investments in these areas, which limit productivity and efficiency. Any of these factors could lead to labor market volatility and generally impact income, purchasing power and consumption levels, which could limit growth and ultimately have a material adverse effect on us.
International Operations1 | 1.5%
International Operations - Risk 1
Developments and the perceptions of risks in other countries, including other emerging markets, the United States and Europe, may harm the Brazilian economy and the price of Brazilian securities, including the price of our Class A common shares.
The market for securities issued by Brazilian companies is influenced by economic and market conditions in Brazil and, to varying degrees, market conditions in other Latin American and emerging markets, as well as the United States, Europe and other countries. To the extent the conditions of the global markets or economy deteriorate, the business of Brazilian companies may be harmed. The weakness in the global economy has been marked by, among other adverse factors, lower levels of consumer and corporate confidence, decreased business investment and consumer spending, the ongoing war in Ukraine along with the armed conflict in the Middle East and their impact on the global economy and international relations, increased unemployment, reduced income and asset values in many areas, reduction of China's growth rate, currency volatility and limited availability of credit and access to capital. Developments or economic conditions in other emerging market countries have at times significantly affected the availability of credit to Brazilian companies and resulted in considerable outflows of funds from Brazil, decreasing the amount of foreign investments in Brazil.
On March 11, 2020, the World Health Organization, or WHO, declared the outbreak of COVID-19 to be a pandemic, leading government authorities throughout the world to determine the best practices for taking preventive measures and treating infected persons. Consequently, the COVID-19 outbreak resulted in various governments throughout the world imposing restrictions relating to the movement of people in order to contain the spread of the virus, including travel restrictions, social distancing mandates and lockdowns. For more information on risks relating to COVID-19, see "Risks Relating to our Business and Industry-An occurrence of a natural disaster, widespread health epidemic or pandemic or other outbreaks could seriously harm our business and results of operations. Furthermore, the spread of communicable diseases such as the COVID-19 outbreak on a global scale may affect investment sentiment, cause disruptions and result in sporadic volatility in global markets. As a result, the Brazilian economy and outlook may be affected, and consequently, our business and trading price of our common shares could be adversely affected."
Crises and political instability in other emerging market countries, the United States, Europe or other countries, such as the global outbreak of COVID-19, could decrease investor demand for Brazilian securities, such as our Class A common shares. In June 2016, the United Kingdom had a referendum in which the majority voted to leave the European Union and on February 1, 2020, officially left the European Union. We have no control over and cannot predict the effect of the United Kingdom's exit from the European Union nor over whether and to which effect any other member state will decide to exit the European Union in the future. In the United States, increases in economic and political uncertainty and potential increases in interest rates may also create uncertainty in the Brazilian economy. The U.S. presidential and congressional elections are scheduled to take place in November 2024. The relationship between Brazil and the United States can be adversely affected depending on the outcome of the 2024 elections and we have no control over and cannot predict the effect of the administration or policies of the United States after the conclusion of these elections. These developments, including the spread of the COVID-19 pandemic and its economic effects in other countries, the ongoing war in Ukraine that escalated following the Russian invasion in early 2022, as well as potential crises and forms of political instability arising therefrom or any other as of yet unforeseen development, may harm our business and the price of our Class A common shares.
Any further downgrading of Brazil's credit rating could reduce the trading price of our Class A common shares.
We may be harmed by investors' perceptions of risks related to Brazil's sovereign debt credit rating. Rating agencies regularly evaluate Brazil and its sovereign ratings, which are based on a number of factors including macroeconomic trends, fiscal and budgetary conditions, indebtedness metrics and the perspective of changes in any of these factors. In recent years, Brazil had a fluctuating investment grade sovereign debt credit rating issued by the three main U.S.-based credit rating agencies, Standard & Poor's, Moody's, and Fitch.
Standard & Poor's downgraded Brazil's sovereign debt credit rating from BB+ to BB in February 2016 and further reduced it to BB- in January 2018 with a stable outlook. In December 2019, Standard & Poor's reaffirmed the BB- rating, raising the outlook from stable to positive. However, in April 2020, Standard & Poor's downgraded Brazil's public debt rating outlook from positive to stable, citing Brazil's decrease in GDP for 2020 due to the COVID-19 pandemic and Brazil's higher level of spending aimed at fighting COVID-19 and preventing mass layoffs. In November 2021, S&P reaffirmed Brazil's BB- rating, with a stable outlook, based on the assumption that Brazil would be able to stabilize its increase in public debt. In June 2022, S&P reaffirmed Brazil's BB- rating, with a stable outlook. On December 19, 2023, S&P upgraded Brazil's sovereign rating from BB- to BB based on a scenario of fiscal stability, moderate economic growth, high but declining inflation and solid foreign exchange reserves. However, the agency warns of the possibility of a future downgrade if Brazil fails to control its public spending.
In August 2015, Moody placed Brazil's Baa3 sovereign debt credit rating on review and downgraded Brazil's sovereign credit rating in February 2016 to Ba2 with a negative outlook, citing the prospect of further deterioration in Brazil's indebtedness figures amid a recession and challenging political environment. In April 2018, Moody reaffirmed the Ba2 rating but raised the outlook from negative to stable, citing expectations that the winner of the October 2018 presidential elections would pass fiscal reforms. In March 2020, Moody maintained Brazil's stable rating, citing that Brazil's response to COVID-19 mitigated the severe impact on growth but at some fiscal cost and that the deterioration of fiscal and debt metrics was expected to be temporary and limited to 2020 due to the shock of the COVID-19 pandemic. Moody's reaffirmed Brazil's Ba2 stable rating in February 2021. Since then, Moody has maintained this sub-investment grade rating on Brazil's sovereign credit with a stable outlook. In a statement issued in April 2022, the agency characterized the Ba2 rating with a stable outlook as a vote of confidence for recent changes in monetary and fiscal frameworks and mentioned the robust foreign exchange reserves as supporting to country's credit profile.
Fitch downgraded Brazil's sovereign credit rating to BB with a negative outlook in May 2016, citing the country's rapidly expanding budget deficit and worse-than-expected recession, and further downgraded Brazil's sovereign debt credit rating in February 2018 to BB- with a stable outlook. In November 2019, Fitch reaffirmed the BB- rating. In April 2020, Fitch reported that the spread of COVID-19, the drop in commodity prices, tighter external funding conditions and falling domestic financial asset prices will weaken economic growth in Latin America substantially in 2020, compounding downward pressure on sovereign credit profiles in the region. In May 2020, Fitch maintained Brazil's credit rating at BB-, but changed its outlook from stable to negative, citing the deterioration of Brazil's fiscal and economic environment and that both could worsen due to political uncertainties, as well as uncertainties regarding the duration and intensity of the COVID-19 pandemic. In December 2021, Fitch reaffirmed Brazil's BB- ratings with a negative outlook. According to the agency, this outlook reflected downside risks to the economy and public finances, and the debt trajectory in the context of tightened financing conditions and increased doubts about the credibility of the established spending ceiling, which is Brazil's main fiscal anchor, following changes to its calculation to make room for additional social spending. In December 2022, Fitch reaffirmed Brazil's BB- ratings, but changed the outlook to "stable" reflecting an expectation of slower growth and fiscal deterioration but without significant risk to broad economic stability. Fitch now rates Brazil at BB with a stable outlook, with their last upgrade issued on July 26, 2023.
Brazil's sovereign credit rating is currently rated below investment grade by the three main credit rating agencies. Consequently the prices of securities issued by Brazilian companies have been negatively affected. A prolongation or worsening of the current Brazilian recession and continued political uncertainty, among other factors, could lead to further ratings downgrades. Any further downgrade of Brazil's sovereign credit ratings could heighten investors' perception of risk and, as a result, cause the trading price of our Class A common shares to decline.
Natural and Human Disruptions2 | 3.0%
Natural and Human Disruptions - Risk 1
An occurrence of a natural disaster, widespread health epidemic or pandemic or other outbreaks could seriously harm our business and results of operations. Furthermore, the spread of communicable diseases such as the COVID-19 outbreak on a global scale may affect investment sentiment, cause disruptions and result in sporadic volatility in global markets. As a result, the Brazilian economy and outlook may be affected, and consequently, our business and trading price of our common shares could be adversely affected.
Natural disasters, such as fires or floods, the outbreak of a widespread health epidemic, or pandemic such as the outbreak of COVID-19, or other events, such as wars, acts of terrorism, political events, environmental accidents, power shortages or communication interruptions could seriously harm our business. The occurrence of a disaster or similar event could materially disrupt our business and operations. These events could also cause us to close our operating facilities temporarily, which would severely disrupt our operations and seriously harm our business and results of operations. In addition, our net sales could be significantly reduced to the extent that a natural disaster, health epidemic, pandemic or other major event harms the economy of Brazil or any other jurisdictions where we may operate. Our operations could also be severely disrupted if our customers, merchants or other participants were affected by natural disasters, health epidemics or pandemic or other major events.
As a result of the COVID-19 pandemic, we implemented a hybrid remote working arrangement for our employees which could adversely affect our ability to execute our business plans and operations. Should, for example, a natural disaster, power outage, connectivity issue or any other similar event impact our employees' ability to work remotely, it could be difficult or even impossible to maintain our business activities for a substantial period. In addition, remote working may amplify certain risks to our businesses due to increased demand for information technology resources combined with increased risk of "phishing" frauds and other cybersecurity attacks, increased risk of unauthorized dissemination of sensitive personal or confidential information and increased risk of business interruptions.
Even though the World Health Organization has lifted the public health emergency and pandemic status for COVID-19, the aftermath of the pandemic continued to influence the macroeconomic climate in 2023, with potentially lasting effects. The possibility of a COVID-19 resurgence, alongside new variants or other highly infectious diseases, poses a substantial risk to our operational stability, financial health, liquidity and performance outcomes.
Natural and Human Disruptions - Risk 2
Added
Man-made or natural disasters, including extreme weather conditions due to climate change (high temperatures, floods, thunderstorms) or other unexpected events could adversely affect networks, systems, infrastructure and service continuity.
Our operations may be suspended or interrupted for an indeterminate period in case of adverse events that are likely to damage our business infrastructure or Brazilian infrastructure, on which our services depend. These events include natural disasters, storms, cyclones, climate change or other environmental events, and man-made disasters, including fires, explosions and geopolitical disruptions due to civil unrest or health crises (such as the COVID-19 pandemic), or any other unexpected events. Climate change represents systemic risks that, when realized, can result in socio-economic, financial and environmental impacts potentially affecting the fulfillment or implementation of our business and financial strategies and objectives.
When examining the physical risks associated with climate change, the increasing frequency of extreme weather events such as storms, heatwaves and wildfires can lead to significant damage to our infrastructure or Brazil's infrastructure causing failures in our information transmissions or delays in the supply chains we depend on. When severe natural disasters occur frequently, there is a risk that any damage to our infrastructure or the infrastructure we depend on will not be able to be repaired and restored in a timely and cost-effective manner. Our customers and merchants similarly face these risks in their business and operating activities.
From September to November 2023, the South and Southeast regions of Brazil were significantly affected by the adverse effects of climate change. In the Southern region, extreme weather events were caused by an extra-tropical cyclone impacting energy supply in certain regions in Brazil. In the State of São Paulo, part of the Southeast region of Brazil, winds exceeding 100 km/h affected the state's energy supply. The growing likelihood of damage to our infrastructures or the infrastructure we depend on due to extreme natural disasters could have a material adverse impact on our operations. Rising mean temperatures could increase our operating costs mainly due to the increase in refrigeration needs of our equipment or the replacement of equipment that becomes damaged. High temperatures also can affect the transmission of information resulting in failures, write-offs and early retirement or certain equipment and therefore increase the risk of severe disruption.
When considering the transition risks of climate change, an increased cost of energy stands out for having the most substantial financial impact. The financial services and banking sector is not especially dependent on fossil fuels but is very dependent on electricity consumption, so an increase in electricity prices due to a shortage of natural resources or droughts (considering Brazil's reliance on hydroelectric power) could have a significant impact on our energy related operating expenses.
If we are unable to mitigate or prevent any such damage in the event of a natural or man-made disaster and any other unexpected events, the suspension or interruption of our operations could have an adverse effect on the continuity of our operations, our financial results and compliance with applicable regulations.
Capital Markets1 | 1.5%
Capital Markets - Risk 1
Exchange rate instability may have adverse effects on the Brazilian economy, us and the price of our Class A common shares.
The Brazilian currency has been historically volatile and has been devalued frequently over the past three decades. Throughout this period, the Brazilian government has implemented various economic plans and used various exchange rate policies, including sudden devaluations, periodic mini-devaluations (during which the frequency of adjustments has ranged from daily to monthly), exchange controls, dual exchange rate markets and a floating exchange rate system. Although long-term depreciation of the real is generally linked to the rate of inflation in Brazil, depreciation of the real occurring over shorter periods of time has resulted in significant variations in the exchange rate between the real, the U.S. dollar and other currencies.
The real/U.S. dollar exchange rate reported by the Central Bank was R$3.9048 per U.S. dollar on December 31, 2015, and R$3.2591 per U.S. dollar on December 31, 2016, reflecting a 16.4% nominal appreciation of the real against the U.S. dollar. Between the year-end 2016 and the year-end 2017, the real remained relatively stable, depreciating 1.5% against the U.S. dollar in nominal terms. Between year-end 2017 and 2018, the real depreciated greatly, by 16.9%, against the U.S. dollar, primarily as a result of (i) global U.S. dollar appreciation and the pressure on long-term interest rates in the U.S., (ii) an increase in Brazil's risk premium, and (iii) lower interest rates in Brazil, which reduced the volume of foreign currency deposited in Brazil in the "carry trade," as well as uncertainty regarding the results of the Brazilian presidential elections held in October 2018. Between year-end 2018 and 2019, the real depreciated by 4.1% in nominal terms against the U.S. dollar, reaching R$4.0307 per U.S. dollar on December 31, 2019, primarily as a result of uncertainty regarding pension reform in Brazil and tensions in the US-China trade policy.
The real depreciated significantly in 2020, by 28.9%, due to the COVID-19 pandemic, the prospects for a global economic recession and a sharp increase in risk premiums, political crisis and volatility in financial markets. The real/U.S. dollar exchange rate reported by the Central Bank was R$5.1967 per U.S. dollar on December 31, 2020 and R$5.5805 per U.S. dollar on December 31, 2021, corresponding to a devaluation of 7.3% in nominal terms, after reaching record levels close to R$5.7500 per U.S. dollar during different times throughout the year. The real/U.S. dollar exchange rate reported by the Central Bank was R$5.5805 per U.S. dollar on December 31, 2021 and R$5.2177 per U.S. dollar on December 31, 2022, corresponding to a valuation of 6.5%. In early 2023, the exchange rate environment changed as a result of the economic effects of the ongoing war in Ukraine and the negative global supply scenario in addition to the uncertainty surrounding the new Brazilian Federal Government's intended policies and reforms. In addition, the increase in the SELIC interest rate over the prior two years has also contributed to the strong appreciation of the real against the U.S. dollar. The real/U.S. dollar exchange rate reported by the Central Bank was R$5.2177 per U.S. dollar on December 31, 2022, and R$4.8413 per U.S. dollar on December 31, 2023, reflecting appreciation of 7.2%. As of March 31, 2024, the exchange rate was R$4,9956 per U.S. dollar, reflecting depreciation of 3.2% as compared to the 2023 year-end exchange rate. However, there is no guarantee that the Brazilian real will not appreciate further or depreciate again against the U.S. dollar, or against any other currency in the future, as a result of the expected market trends, such as the extreme uncertainty in the international economic environment, the volatility in the capital markets, as well as political, fiscal and electoral uncertainties in Brazil.
A devaluation of the real relative to the U.S. dollar could further exacerbate already intense create inflationary pressures in Brazil and cause the Brazilian government to, among other measures, continue to increase interest rates. Any depreciation of the real may generally restrict access to the international capital markets. It would also reduce the U.S. dollar value of our results. Restrictive macroeconomic policies could reduce the stability of the Brazilian economy and harm our results of operations and profitability. In addition, domestic and international reactions to restrictive economic policies could have a negative impact on the Brazilian economy. These policies and any reactions to them may harm us by curtailing access to foreign financial markets and prompting further government intervention. A devaluation of the real relative to the U.S. dollar may also, as in the context of the current economic slowdown, decrease consumer spending, increase deflationary pressures and reduce economic growth.
On the other hand, an appreciation of the real relative to the U.S. dollar and other foreign currencies may deteriorate the Brazilian foreign exchange current accounts. We and certain of our suppliers purchase goods and services from countries outside Brazil, and thus changes in the value of the U.S. dollar compared to other currencies may affect the costs of goods and services that we purchase. Depending on the circumstances, either devaluation or appreciation of the real relative to the U.S. dollar and other foreign currencies could restrict the growth of the Brazilian economy, as well as our business, results of operations and profitability.
Tech & Innovation
Total Risks: 7/66 (11%)Below Sector Average
Innovation / R&D1 | 1.5%
Innovation / R&D - Risk 1
If we cannot keep pace with rapid technological developments to provide new and innovative products and services, and address the rapidly evolving market for transactions on mobile devices, the use of our products and services and, consequently, our revenues could decline.
Rapid, significant and disruptive technological changes continue to impact the industries in which we operate, including developments in payment card tokenization, mobile payments, social commerce (i.e., e-commerce through social networks), authentication, virtual currencies, distributed ledger or blockchain technologies, near field communication and other proximity or contactless payment methods, virtual reality, machine learning and artificial intelligence.
For instance, mobile devices are increasingly used for e-commerce transactions and payments. A significant and growing portion of our customers access our platforms through mobile devices, including for regular online shopping as well as for in-person transactions. In the year ended December 31, 2023, 83% of our customers accessed our platforms through mobile devices, compared with 81% in the year ended December 31, 2022. We may lose customers if we are not able to continue to meet our customers' mobile and multi-screen experience expectations. Different mobile devices and platforms use a wide variety of technical and other configurations, which increase the challenges involved in providing payments in the mobile environment. In addition, a number of other companies with significant resources and a number of innovative startups have introduced products and services focusing on mobile markets. We cannot guarantee that we will be able to continue to meet customer expectations in the mobile environment or increase our volume of mobile transactions.
We cannot predict the effects of technological changes on our business. In addition to our own initiatives and innovations, we rely in part on third parties for the development of and access to new technologies. We expect that new services and technologies applicable to the industries in which we operate will continue to emerge and may be superior to, or render obsolete, the technologies we currently use in our products and services. Developing and incorporating new technologies into our products and services may require substantial expenditures, take considerable time, and ultimately may not be successful. In addition, our ability to adopt new products and services and develop new technologies may be inhibited by industry-wide standards, payment networks, changes to laws and regulations, resistance to change from consumers or merchants, third-party intellectual property rights, or other factors. Our success will depend on our ability to develop and incorporate new technologies, address the challenges posed by the rapidly evolving market for mobile transactions through our platforms and adapt to technological changes and evolving industry standards; if we are unable to do so in a timely or cost-effective manner, our business could be harmed.
Trade Secrets1 | 1.5%
Trade Secrets - Risk 1
We have only a limited ability to protect our intellectual property rights, which are important to our success.
We believe the protection of our intellectual property, including our trademarks, patents, copyrights, domain names, trade dress, and trade secrets, is critical to our success. We seek to protect our intellectual property rights by relying on applicable laws and regulations, as well as a variety of administrative procedures. We also rely on contractual restrictions to protect our proprietary rights when offering or procuring products and services, including confidentiality agreements with parties with whom we conduct business.
However, contractual arrangements and other steps we have taken to protect our intellectual property may not prevent third parties from infringing or misappropriating our intellectual property or deter independent development of equivalent or superior intellectual property rights by others. Trademark, copyright, patent, domain name, trade dress and trade secret protection are expensive to maintain and may require litigation. Protecting our intellectual property rights and other proprietary rights is expensive and time-consuming and may not be successful in every jurisdiction. Also, we may not be able to discover or determine the extent of any unauthorized use of our proprietary rights. We have licensed certain of our proprietary rights, such as trademarks or copyrighted material, to others in the past, and expect to do so in the future. These licensees may take actions that diminish the value of our proprietary rights or harm our reputation. Any failure to protect or enforce our intellectual property rights adequately, or significant costs incurred in doing so, could materially harm our business.
As the number of products in the software industry increases and the functionalities of these products further overlap, and as we acquire technology through acquisitions or licenses, we may become increasingly subject to infringement claims, including patent, copyright, and trademark infringement claims. We may be required to enter into litigation to determine the validity and scope of the patents or other intellectual property rights of others. The ultimate outcome of any allegation is uncertain and, regardless of the outcome, any such claim, with or without merit, may be time-consuming, result in costly litigation, divert management's time and attention from our business, require us to stop selling, delay shipping, or redesign our products, or require us to pay substantial amounts to satisfy judgments or settle claims or lawsuits or to pay substantial royalty or licensing fees, or to satisfy indemnification obligations that we have with some of our customers. Our failure to obtain necessary license or other rights, or litigation or claims arising out of intellectual property matters, may harm our business.
Cyber Security1 | 1.5%
Cyber Security - Risk 1
Changed
Our business is subject to cyberattacks, in addition to security (including cybersecurity) and privacy breaches.
Our business involves the collection, storage, processing, and transmission of customers' personal data, including financial information. In addition, a significant number of our customers authorize us to bill their payment card or bank accounts directly for all transaction and other fees charged by us. We have built our reputation on the premise that our platform offers customers a secure way to make payments. An increasing number of organizations, including large merchants and businesses, other large technology companies, financial institutions and government institutions, have disclosed breaches of their information security systems, some of which have involved sophisticated and highly targeted attacks, including on portions of their websites or infrastructure.
The techniques used to obtain unauthorized, improper or illegal access to our systems, our data or our customers' data, to disable or degrade service, or to sabotage systems are constantly evolving, may be difficult to detect quickly and often are not recognized until launched against a target. Unauthorized parties may attempt to gain access to our systems or facilities through various means, including, among others, hacking into our systems or those of our customers, partners or vendors, or attempting to fraudulently induce our employees, customers, partners, vendors or other users of our systems into disclosing user names, passwords, payment card information or other sensitive information, which may in turn be used to access our information technology systems. Certain efforts may be supported by significant financial and technological resources, making them even more sophisticated and difficult to detect. Although we have developed systems and processes that are designed to protect our data and customer data and to prevent data loss and other security breaches, and expect to continue to expend significant additional resources to bolster these protections, these security measures cannot provide absolute security. Our information technology and infrastructure may be vulnerable to cyberattacks or security breaches, and third parties may be able to access our customers' personal or proprietary information and card data that are stored on or accessible through those systems. Our security measures may also be breached due to human error, malfeasance, system errors or vulnerabilities, or other irregularities. Any actual or perceived breach of our security could interrupt our operations, result in our systems or services being unavailable, result in improper disclosure of data, materially harm our reputation and brand, result in significant legal and financial exposure, lead to loss of customer confidence in, or decreased use of, our products and services, and adversely affect our business and results of operations. In addition, any breaches of network or data security at our customers, partners or vendors (including data center and cloud computing providers) could have similar negative effects. Actual or perceived vulnerabilities or data breaches may lead to claims against us.
In 2021, we experienced a cyberattack that targeted one of our subsidiaries, Wirecard Brazil Instituição de Pagamento S.A. (formerly Wirecard Brazil S.A.), or MOIP, which we acquired in October 2020. The incident occurred between September 25, 2021 and September 29, 2021, during which the hackers demanded that specified payments be made to prevent the public disclosure or sale of the targeted data that was compromised, which included personal profile information of MOIP customers. At the time of the cyberattack, MOIP had a distinct and separate IT server and operating environment from the rest of our IT platform and systems, and therefore none of our databases, customer information or systems were subject or comprised during the incident, or formed part of the compromised data, beyond those independently within the MOIP IT environment. We promptly followed the requirements of applicable Brazilian law, including the filing of a formal report with the Brazilian Data Protection Authority (Autoridade Nacional de Proteção de Dados Pessoais), or the ANPD, and the Central Bank on October 7, 2021, followed by delivery of further requested information to the ANPD on January 5, 2022 and April 8, 2022. In February 2024, the matter was closed by the ANPD. Our review of the incident did not identify evidence of unauthorized access to sensitive information, such as passwords or credit card details, and our information technology systems (including the MOIP IT environment) were operating normally. For more information, see "Item 4. Information on the Company-Protecting Our Clients-2021 MOIP Cybersecurity Incident."
In addition, under card rules and our contracts with our card processors, if there is a breach of card information that we store, we could be liable to the payment card issuers for their cost of issuing new cards and related expenses. We also expect to spend significant additional resources to protect against security or privacy breaches, and may be required to address problems caused by breaches. Additionally, while we maintain insurance policies, we do not maintain significant insurance policies specifically for cyberattacks and our current insurance policies may not be adequate to reimburse us for losses caused by security breaches, and we may not be able to collect fully, if at all, under these insurance policies.
Since the COVID-19 pandemic, our remote work practices have expanded and, as a result, the risks related to cybersecurity failures in our internal systems have also risen. As such, interruptions or flaws in our information technology systems, such as in our telework systems, accounting calculations and billing, caused by accidents, malfunctions or malicious acts may impact our corporate, commercial or operational activities, which could adversely affect our business and results of operations, as well as our reputation and market reliability.
We believe that the risk of cyberattacks on companies like ours has increased in recent years and could increase even further as a result of the professionalization of cybercriminals, current geopolitical instability related to ongoing global conflicts and retaliatory responses to sanctions, which could adversely affect our ability to maintain or enhance our cybersecurity and data protection measures. Additionally, our operations are at risk of cyberattacks targeting Brazil's critical infrastructure, on which our information technology systems rely. Given that we do not control this infrastructure, our capacity to shield our information technology systems from the fallout of such attacks is limited, potentially impairing our ability to serve our customers effectively.
Cyberattacks have become increasingly sophisticated and diffuse. We keep critical client information in our database, which may be the subject of cyberattacks by individuals seeking unauthorized access to such information for misuse. As such, failures to protect our clients' personal data, as well as nonconformance with the applicable legislation, may give rise to additional costs and adversely affect our image and reputation.
As data privacy and cybersecurity risks for banking organizations and the broader financial system have significantly increased in recent years, data privacy and cybersecurity issues have become the subject of increasing legislative and regulatory focus. A marked increase in scrutiny from the SEC regarding the adequacy of risk disclosures related to cybersecurity and data privacy significantly enhances the likelihood of inquiries into the company's cybersecurity practices and the accuracy of its related disclosures. Preparing for and addressing any such investigations could result in substantial distractions for the company's management and the diversion of essential resources from its core operations. For more information, see "Item 16K. Cybersecurity."
Technology4 | 6.1%
Technology - Risk 1
Our services must integrate with a variety of operating systems and networks, and the hardware that enables merchants to accept payment cards must interoperate with mobile networks offered by telecom operators and third-party mobile devices utilizing those operating systems. If we are unable to ensure that our services or hardware interoperate with such networks, operating systems and devices, our business may be seriously harmed.
We are dependent on the ability of our products and services to integrate with a variety of operating systems and networks, as well as web browsers that we do not control. Any changes in these systems or networks that degrade the functionality of our products and services, impose additional costs or requirements on us, or give preferential treatment to competitive services, including their own services, could seriously harm the levels of usage of our products and services. We also rely on bank platforms to process some of our transactions. If there are any issues with or service interruptions in these bank platforms, users may be unable to have their transactions completed, which would seriously harm our business.
In addition, our hardware interoperates with mobile networks offered by telecom operators and mobile devices developed by third parties. Changes in these networks or in the design of these mobile devices may limit the interoperability of our hardware with such networks and devices and require modifications to our hardware. If we are unable to ensure that our hardware continues to interoperate effectively with such networks and devices, or if doing so is costly, our business may be seriously harmed.
Technology - Risk 2
Interruption or failure of our information technology and communications systems could impair our operations, which could damage our reputation and harm our results of operations.
Our success and ability to process payments and provide high quality customer service depend on the efficient and uninterrupted operation of our computer and information technology systems. Any failure of our computer systems and information technology to operate effectively or to integrate with other systems, performance inadequacy or breach in security may cause interruptions in the availability of our sites, delays in product fulfillment and reduced efficiency of our operations. Any failures, problems or security breaches may mean that fewer customers are willing to purchase the products we offer in the future. Factors that could occur and significantly disrupt our operations include: system failures and outages caused by fire, floods, earthquakes, power loss, telecommunications failures, sabotage, vandalism, terrorist attacks and similar events, software errors, computer viruses, worms, physical or electronic break-ins and similar disruptions from unauthorized tampering with our computer systems and data centers; in addition, security breaches related to the storage and transmission of proprietary information or customer information, such as credit card numbers or other personal information. Also, if too many customers access our sites within a short period of time due to any reason, we have experienced in the past and may in the future experience system interruptions that make our sites unavailable or prevent us from efficiently completing payment transactions, which may reduce the attractiveness of our products and services. We cannot assure you that such events will not occur. While we have backup systems and contingency plans for certain aspects of our operations and business processes, our planning does not account for all possible scenarios.
Specifically, we have entered into IT services agreements with Scala Data Centers S.A., or Scala, and Amazon Web Services, Inc, or AWS, which are focused on IT infrastructure managed services and cloud computing, respectively. Failure by IT services providers to adequately keep our sites operational, including any prolonged or unscheduled service disruption that affects our customers' ability to utilize our sites, could result in the loss of sales and customers and increased costs, which could materially affect our reputation or results of operations. In addition, we rely in part on external IT services providers to advise us of any security breaches. If any of those providers do not provide us with notice on a timely basis, our reputation and results of operations may be harmed. We may not be able to timely replace our external IT services providers, or find a replacement on a cost-efficient basis, in the event of disruptions, failures to provide services or other issues that may harm our business. For more information on our agreement with Digital Services, see "Item 7. Major Shareholders and Related Party Transactions-Related Party Transactions."
Any disruptions or service interruptions that affect our sites could damage our reputation, require us to spend significant capital and other resources and expose us to a risk of loss or litigation and possible liability. Some of our agreements with third-party service providers do not require those providers to indemnify us for losses resulting from any disruption in service. Any of the above disruptions could seriously harm our results of operation.
Technology - Risk 3
We are susceptible to illegal or improper uses of our platform, which could expose us to additional liability and harm our business.
We, like our platforms, are susceptible to potentially illegal or improper uses. These may include illegal online gambling, fraudulent sales of goods or services, illicit sales of prescription medications or controlled substances, software and other intellectual property piracy, money laundering, bank fraud, cyberattacks, child pornography, trafficking, terrorist financing, prohibited sales of alcoholic beverages and tobacco products and online securities fraud. The owners of intellectual property rights or government authorities may seek to bring legal action against us if our platform is used for the sale of infringing items. These claims could result in reputational harm and any resulting liabilities, loss of transaction volume or increased costs could harm our business.
In addition, our services could be subject to unauthorized credit card use, identity theft, employee fraud or other internal security breaches. We may incur significant costs to protect against the threat of information security breaches or to respond to or alleviate problems caused by any breaches. Laws may require us to notify regulators, customers or employees of security breaches and we may be required to reimburse customers or banks for any funds stolen because of any breaches or to provide credit monitoring or identity theft protection in the event of a privacy breach. These requirements, as well as any additional restrictions that may be imposed by credit card companies, could raise our costs significantly and reduce our attractiveness.
In addition to the direct costs of such losses, if they are related to credit card transactions and become excessive they could result in us losing the right to accept credit cards for payment. Since credit cards are the most widely used method for our customers to pay for the products we sell, our business will be harmed if we are unable to accept credit cards.
Technology - Risk 4
Our developer platforms, which are open to merchants and third-party developers, subject us to additional risks.
We provide third-party developers with access to application programming interfaces, software development kits and other tools designed to allow them to produce applications for use, with a particular focus on mobile applications. There can be no assurance that merchants or third-party developers will develop and maintain applications and services on our open platforms on a timely basis or at all. A number of factors could cause them to curtail or stop development for our platforms. In addition, our business is subject to many regulatory restrictions, and violations related to our developer platforms could negatively affect our operations and financial results.
Production
Total Risks: 3/66 (5%)Below Sector Average
Employment / Personnel1 | 1.5%
Employment / Personnel - Risk 1
The loss of any member of our management team and our inability to make up for such loss with a qualified, replacement could harm our business.
Our business depends upon the efforts and skill of our senior management, who has played an important role in shaping our company culture. Our future success depends to a significant extent on the continued service of our senior management team, who are critical to the development and the execution of our business strategies. Any member of our senior management team may leave us to set up or work in businesses that compete with ours. There is no guarantee that the compensation arrangements and non-competition agreements we have entered with our senior management team are sufficiently broad or effective to prevent them from resigning in order to set up or join a competitor, or that the non-competition agreements would be upheld in a court of law. In the event that a number of our senior management members leave our company, we may have difficulty finding suitable replacements, which could seriously harm us.
Our future success also depends on our ability to identify, attract, hire, train, retain, motivate and manage other highly skilled technical, managerial, information technology, marketing, product, risk management and customer service personnel. Competition for these personnel is intense, and we may not be able to successfully attract, hire, train, retain, motivate and manage sufficiently qualified personnel.
Supply Chain2 | 3.0%
Supply Chain - Risk 1
We rely on third parties and UOL, our largest shareholder, in many aspects of our business, which creates additional risk.
We rely on third parties in many aspects of our business, including, among others:
- Networks, banks, payment processors, and payment gateways that link us to the payment card and bank clearing networks to process transactions;- Third parties that provide certain outsourced customer support and product development functions, which are critical to our operations; and - Third parties that provide facilities, infrastructure, components and services, including data center facilities and cloud computing.
The third parties that we rely on to process transactions may fail or refuse to process transactions adequately. Any of the third parties we use may breach their agreements with us, refuse to renew these agreements on commercially reasonable terms, take actions that degrade the functionality of our services, impose additional costs or requirements on us, or give preferential treatment to competing services. Financial or regulatory issues, labor issues, or other problems that prevent these third parties from providing services to us or our customers could harm our business. If our service providers do not perform satisfactorily, our operations could be disrupted, which could result in customer dissatisfaction, damage our reputation, and harm our business.
We rely on UOL, our largest shareholder, and its subsidiaries for several business services, particularly: telecommunications services; infrastructure, corporate, litigation and back-office services. UOL and its subsidiaries also provide us with advertising and media space and resell cloud services to us. For further details of these services, see "Item 7. Major Shareholders and Related Party Transactions-Related Party Transactions."
Supply Chain - Risk 2
Some of the key components of our POS devices are sourced from a limited number of suppliers. We are therefore at risk of shortage, price increases, changes, delay or discontinuation of key components, which could disrupt and harm our business.
Some of the key components used to manufacture our POS devices, such as the chip and pin reader, come from limited sources of supply. In addition, although we are expanding our range of POS devices derived from different providers, we currently rely on one manufacturer to manufacture, test and assemble a significant amount of our POS devices. The agreements for the components used to manufacture our POS devices are entered into directly by the manufacturer of our POS devices and we do not have agreements with these suppliers. In particular, we entered into an Agreement for the Supply of Equipment on June 26, 2014, as amended from time to time, with PAX BR Comércio de Equipamentos de Informática Ltda., or PAX Brazil, Transire Fabricação de Componentes Eletrônicos Ltda., or Transire Brazil, and Net+Phone Telecomunicações Ltda, or Net+Phone, which sets forth the types of POS devices to be sold by PAX Brazil, Transire Brazil and Tec Toy S.A., or Tectoy, to us and the standard terms and conditions governing this supply of POS devices. PAX Brazil, Transire Brazil and Tectoy together serve as our main supplier of POS devices. Consideration payable to PAX Brazil, Transire Brazil and Tectoy under this agreement is determined by the number of POS devices ordered by us. In October 2021, media reports disclosed an investigation by U.S. authorities into the activities of PAX Technology. We do not have direct commercial arrangements with PAX Technology, but rather we purchase the POS device hardware – not software – from local assemblers in Brazil that buy the components from PAX Technology and certain other suppliers. Different from other companies in the sector, we (as an acquirer) develop and install the software on the POS devices that we source from third-party suppliers in order to provide us with greater control over related data and security features of our services using POS devices, and we do not exchange any information regarding our customers, merchants or transactions with other third-party suppliers. However, we understand that the PAX Technology investigation is ongoing, and it ultimately could have an adverse impact on the global market for POS devices and related components, which in turn could have a negative effect on our business, reputation or financial results.
In order to increase the number of suppliers for the POS devices we use, on December 6, 2022, we entered into an equipment supply agreement and started a new commercial relationship with Cal-Comp Indústria e Comércio de Eletrônicos e Informática Ltda., or Cal-Comp Brazil, and Newland Payment Tecnologia do Brasil Ltda., or Newland Brazil. Consideration payable to Cal-Comp Brazil and Newland Brazil under this agreement is determined by the number of POS devices we order on an ongoing basis.
The agreements for the components used to manufacture our POS devices are entered into directly by the manufacturers. We do not engage or participate in the negotiation of these agreements and we do not enter into agreements with the suppliers of our manufacturers. As a result of our reliance on our POS device manufacturers, we are exposed to the risk of shortages and delays in the supply of the components they require to manufacture our POS devices. If our manufacturers cannot find alternative sources of supply, we could be subject to shortages or delivery delays or other issues (such as the delay in the assembly of the POS devices), and as a result our business operations or financial results could be adversely affected.
A number of other supply-chain risks, including strikes or shutdowns, or loss of or damage to our POS devices while in transit or in storage, could limit the supply of our POS devices. Any interruption or delay in component supply, any increases in component costs, or the inability of our manufacturers to obtain the necessary parts or components from alternate supply sources at acceptable prices or in a timely manner (including difficulties in fulfilling obligations in connection with the warranties we provide for our POS devices) could undermine our ability to provide our POS devices or other services to our merchants. This could damage our relationships with our clients, prevent us from acquiring new clients, and adversely effect our reputation in the market, which may cause an adverse affect on our business operations or financial results.
See a full breakdown of risk according to category and subcategory. The list starts with the category with the most risk. Click on subcategories to read relevant extracts from the most recent report.
FAQ
What are “Risk Factors”?
Risk factors are any situations or occurrences that could make investing in a company risky.
The Securities and Exchange Commission (SEC) requires that publicly traded companies disclose their most significant risk factors. This is so that potential investors can consider any risks before they make an investment.
They also offer companies protection, as a company can use risk factors as liability protection. This could happen if a company underperforms and investors take legal action as a result.
It is worth noting that smaller companies, that is those with a public float of under $75 million on the last business day, do not have to include risk factors in their 10-K and 10-Q forms, although some may choose to do so.
How do companies disclose their risk factors?
Publicly traded companies initially disclose their risk factors to the SEC through their S-1 filings as part of the IPO process.
Additionally, companies must provide a complete list of risk factors in their Annual Reports (Form 10-K) or (Form 20-F) for “foreign private issuers”.
Quarterly Reports also include a section on risk factors (Form 10-Q) where companies are only required to update any changes since the previous report.
According to the SEC, risk factors should be reported concisely, logically and in “plain English” so investors can understand them.
How can I use TipRanks risk factors in my stock research?
Use the Risk Factors tab to get data about the risk factors of any company in which you are considering investing.
You can easily see the most significant risks a company is facing. Additionally, you can find out which risk factors a company has added, removed or adjusted since its previous disclosure. You can also see how a company’s risk factors compare to others in its sector.
Without reading company reports or participating in conference calls, you would most likely not have access to this sort of information, which is usually not included in press releases or other public announcements.
A simplified analysis of risk factors is unique to TipRanks.
What are all the risk factor categories?
TipRanks has identified 6 major categories of risk factors and a number of subcategories for each. You can see how these categories are broken down in the list below.
1. Financial & Corporate
Accounting & Financial Operations - risks related to accounting loss, value of intangible assets, financial statements, value of intangible assets, financial reporting, estimates, guidance, company profitability, dividends, fluctuating results.
Share Price & Shareholder Rights – risks related to things that impact share prices and the rights of shareholders, including analyst ratings, major shareholder activity, trade volatility, liquidity of shares, anti-takeover provisions, international listing, dual listing.
Debt & Financing – risks related to debt, funding, financing and interest rates, financial investments.
Corporate Activity and Growth – risks related to restructuring, M&As, joint ventures, execution of corporate strategy, strategic alliances.
2. Legal & Regulatory
Litigation and Legal Liabilities – risks related to litigation/ lawsuits against the company.
Regulation – risks related to compliance, GDPR, and new legislation.
Environmental / Social – risks related to environmental regulation and to data privacy.
Taxation & Government Incentives – risks related to taxation and changes in government incentives.
3. Production
Costs – risks related to costs of production including commodity prices, future contracts, inventory.
Supply Chain – risks related to the company’s suppliers.
Manufacturing – risks related to the company’s manufacturing process including product quality and product recalls.
Human Capital – risks related to recruitment, training and retention of key employees, employee relationships & unions labor disputes, pension, and post retirement benefits, medical, health and welfare benefits, employee misconduct, employee litigation.
4. Technology & Innovation
Innovation / R&D – risks related to innovation and new product development.
Technology – risks related to the company’s reliance on technology.
Cyber Security – risks related to securing the company’s digital assets and from cyber attacks.
Trade Secrets & Patents – risks related to the company’s ability to protect its intellectual property and to infringement claims against the company as well as piracy and unlicensed copying.
5. Ability to Sell
Demand – risks related to the demand of the company’s goods and services including seasonality, reliance on key customers.
Competition – risks related to the company’s competition including substitutes.
Sales & Marketing – risks related to sales, marketing, and distribution channels, pricing, and market penetration.
Brand & Reputation – risks related to the company’s brand and reputation.
6. Macro & Political
Economy & Political Environment – risks related to changes in economic and political conditions.
Natural and Human Disruptions – risks related to catastrophes, floods, storms, terror, earthquakes, coronavirus pandemic/COVID-19.
International Operations – risks related to the global nature of the company.
Capital Markets – risks related to exchange rates and trade, cryptocurrency.