Western Union (WU) Risk Factors

Rules and regulations implemented under the Dodd-Frank Act have made and continue to make significant structural reforms and new substantive regulation across the financial services industry. In addition, the Dodd-Frank Act created the CFPB, which implements, examines compliance with, and enforces federal consumer protection laws governing financial products and services, including money transfer services. The CFPB has created additional regulatory obligations for us and has the authority to further define participants in markets for consumer financial products and services and examine and supervise us and our larger competitors, including for matters related to unfair, deceptive, or abusive acts and practices ("UDAAP"), the Electronic Funds Transfer Act ("EFTA"), and Regulation E. The CFPB's regulations implementing the remittance provisions of the Dodd-Frank Act have affected our business in a variety of areas. These include: (i) a requirement to provide consumers sending funds internationally from the United States enhanced, written, pre-transaction disclosures and transaction receipts, including the disclosure of fees, foreign exchange rates and taxes, (ii) an obligation to resolve various errors, including certain errors that may be outside our control, and (iii) an obligation at a consumer's request to cancel transactions that have not been completed. These requirements have changed the way we operate our business and along with other potential changes under CFPB regulations could adversely affect our operations and financial results. In addition, the Dodd-Frank Act and interpretations and actions by the CFPB have had, and could continue to have a significant impact on us by, for example, requiring us to limit or change our business practices, limiting our ability to pursue business opportunities, requiring us to invest valuable management time and resources in compliance efforts, imposing additional costs on us, delaying our ability to respond to marketplace changes, requiring us to alter our products and services in a manner that would make them less attractive to consumers and impair our ability to offer them profitably, or requiring us to make other changes that could adversely affect our business. In addition, these regulations impose responsibility on us for any related compliance failures of our agents. The CFPB has broad authority to enforce consumer protection laws. The CFPB has a large staff and budget, which is not subject to Congressional appropriation, and has broad authority with respect to our money transfer service and related business. It is authorized to collect fines and provide consumer restitution in the event of violations, engage in consumer financial education, track and solicit consumer complaints, request data, and promote the availability of financial services to underserved consumers and communities. In addition, the CFPB may adopt other regulations governing consumer financial services, including regulations defining UDAAP, and new model disclosures. The CFPB's authority to change regulations adopted in the past by other regulators, or to rescind or ignore past regulatory guidance, could increase our compliance costs and litigation exposure. In addition, attorneys general of the various states of the United States also have authority to enforce the consumer protection provisions of the Dodd-Frank Act in their respective jurisdictions. We have been and continue to be subject to examination by the CFPB, which defines "larger participants of a market for other consumer financial products or services" as including companies, such as Western Union, that make at least one million aggregate annual international money transfers. The CFPB has the authority to examine and supervise us and our larger competitors, which will involve providing reports to the CFPB. The CFPB has used information gained in examinations as the basis for enforcement actions resulting in settlements involving monetary penalties and other remedies. The effect of the Dodd-Frank Act, the EFTA, Regulation E, and the CFPB on our business and operations has been and will continue to be significant, and the application of the associated implementing regulations to our business may differ from the application to certain of our competitors, including banks. Various jurisdictions in the United States and outside the United States similarly have consumer protection laws and regulations, and numerous governmental agencies are tasked with enforcing those laws and regulations. Consumer protection principles continue to evolve globally, and new or enhanced consumer protection laws and regulations may be adopted that impact our business, such as the FCA's 2023 principles-based Consumer Duty in the UK that sets higher and clearer standards of consumer protection across financial services and requires firms to put their customers' needs first. Governmental agencies tasked with enforcing consumer protection laws or regulations are communicating more frequently and coordinating their efforts to protect consumers. For instance, the International Consumer Protection and Enforcement Network ("ICPEN") is an organization composed of consumer protection authorities from over 70 countries that provides a forum for developing and maintaining regular contact between consumer protection agencies and focusing on consumer protection concerns. By encouraging cooperation between agencies, ICPEN aims to enable its members to have a greater impact with their consumer protection laws and regulations. As the scope of consumer protection laws and regulations change, we may experience increased costs to comply and other adverse effects to our business. Rules adopted under the Dodd-Frank Act by the CFTC, as well as the provisions of the EMIR and its technical standards, which are directly applicable in the member states of the EU, have subjected certain foreign exchange hedging transactions, including certain intercompany hedging transactions and certain of the corporate interest rate hedging transactions we may enter into in the future, to reporting, recordkeeping, and other requirements. Following Brexit, EMIR and the MiFID II have been retained as UK law pursuant to the European Union (Withdrawal) Act 2018 UK. Additionally, certain of the corporate interest rate hedging transactions and foreign exchange derivatives transactions we may enter into in the future may be subject to centralized clearing requirements or may be subject to margin requirements in the United States, the EU, and the UK. Other jurisdictions outside of the United States, the EU, and the UK, have implemented, are implementing, or may implement regulations similar to those described above. Derivatives regulations have added costs to our business, and any additional requirements, such as future registration requirements and increased regulation of derivatives contracts, will likely result in additional costs or impact the way we conduct any hedging activities.

Our agents and their subagents are subject to a variety of regulatory requirements, which differ from jurisdiction to jurisdiction, are subject to change, and continue to increase. Material changes in the regulatory requirements for offering money transfer services, including with respect to anti-money laundering requirements, sanctions, fraud prevention, licensing requirements, consumer protection, customer due diligence, agent registration, or increased requirements to monitor our agents or their subagents in a jurisdiction important to our business have meant and could continue to mean increased costs and/or operational demands on our agents and their subagents, which have resulted and could continue to result in their attrition, a decrease in the number of locations at which money transfer services are offered, an increase in the commissions paid to agents and their subagents to compensate for their increased costs, and other negative consequences. For example, in recent months, the Federal Reserve Bank of New York has announced actions that banned several Iraqi banks, some of whom were our agents, from conducting U.S. dollar transactions. As a result, since those actions, our business has been, and may continue to be, adversely impacted. We rely on our agents' technology systems and/or processes to obtain transaction data. If an agent or its subagent experiences a breach of its systems, if there is a significant disruption to the technology systems of an agent or its subagent, if an agent or its subagent does not maintain the appropriate controls over their systems, or if we are unable to demonstrate adequate oversight of an agent's or subagent's handling of those matters, we may experience reputational and other harm which could result in losses to the Company. Our regulatory status and the regulatory status of our agents and their subagents could affect our and their ability to offer our services. For example, we and our agents and their subagents rely on bank accounts to provide our Consumer Money Transfer and payment services. We and our agents and their subagents are considered Money Service Businesses ("MSBs") under the BSA. Many banks view MSBs as a class of higher risk customers for purposes of their anti-money laundering programs. We and some of our agents and their subagents have had, and in the future may have, difficulty establishing or maintaining banking relationships due to the banks' policies. If we or a significant number of our agents or their subagents are unable to maintain existing or establish new banking relationships under terms acceptable to us or our agents or consistent with those currently in place, or if we or these agents face higher fees to maintain or establish new bank accounts, our ability and the ability of our agents and their subagents to continue to offer our services may be adversely impacted, which would have an adverse effect on our business, financial condition, results of operations, and cash flows. The types of enterprises that are legally authorized to act as our agents and their subagents vary significantly from one country to another. Changes in the laws affecting the kinds of entities that are permitted to act as money transfer agents or their subagents (such as changes in requirements for capitalization or ownership) could adversely affect our ability to distribute our services and the cost of providing such services, both by us and our agents and their subagents. For example, a requirement that a money transfer provider be a bank or other highly regulated financial entity could increase significantly the cost of providing our services in many countries where that requirement does not exist today or could prevent us from offering our services in an affected country. Further, any changes in law that would require us to provide money transfer services directly to consumers as opposed to through an agent network (which would effectively change our business model) or that would prohibit or impede the use of subagents could significantly adversely impact our ability to provide our services, and/or the cost of our services, in the relevant jurisdiction. Changes mandated by laws which make Western Union responsible for acts of its agents and their subagents while they are providing the Western Union money transfer service increase our risk of regulatory liability and our costs to monitor our agents' or their subagents' performance. Although most of our Vigo and Orlandi Valuta branded agents also offer money transfer services of our competitors, many of our Western Union branded agents have agreed to offer only our money transfer services. While we expect to continue signing certain agents under exclusive arrangements and believe that these agreements are valid and enforceable, changes in laws regulating competition or in the interpretation of those laws could undermine our ability to enforce them in the future. Various jurisdictions continue to increase their focus on the potential impact of agent agreements on competition. In addition, over the past several years, several countries in Eastern Europe, the Commonwealth of Independent States, Africa, and Asia have promulgated laws or regulations, or authorities in these countries have issued orders, which effectively prohibit payment service providers, such as money transfer companies, from agreeing to exclusive arrangements with agents in those countries. Certain institutions, non-governmental organizations and others are actively advocating against exclusive arrangements in money transfer agent agreements. Advocates for laws prohibiting or limiting exclusive agreements continue to push for enactment of similar laws in other jurisdictions.

The evolving regulatory environment, including increased fees or taxes, regulatory initiatives (and increases in regulatory authority, oversight, and enforcement), changes in laws and regulations or their interpretation, industry practices and standards imposed by state, federal, or foreign governments, and expectations regarding our compliance efforts, is impacting the manner in which we operate our business, may change the competitive landscape, and is expected to continue to adversely affect our financial results. Existing, new, and proposed legislation relating to financial services providers and consumer protection in various jurisdictions around the world has affected and may continue to affect the manner in which we provide our services; see risk factor "The Dodd-Frank Act, the Electronic Funds Transfer Act and Regulation E, as well as the regulations required by these Acts and the actions of the Consumer Financial Protection Bureau and similar legislation and regulations enacted by other government authorities, could adversely affect us and the scope of our activities and could adversely affect our financial condition, results of operations, and cash flows." Recently proposed and enacted legislation related to financial services providers and consumer protection in various jurisdictions around the world and at the federal and state level in the United States has subjected and may continue to subject us to additional regulatory oversight, mandate additional consumer disclosures and remedies, including refunds to consumers, or otherwise impact the manner in which we provide our services. If governments implement new laws or regulations that limit our right to set fees and/or foreign exchange spreads, then our business, financial condition, results of operations, and cash flows could be adversely affected. In addition, changes in regulatory expectations, interpretations, or practices could increase the risk of regulatory enforcement actions, fines, and penalties. For example, in early 2017, we entered into the Joint Settlement Agreements, and in early 2018, we agreed to the NYDFS Consent Order. In addition, U.S. policy makers have sought and may continue to seek heightened customer due diligence requirements on, or restrict, remittances from the United States to Mexico or other jurisdictions. For example, government sanctions imposed in February 2022 with respect to Russia and Ukraine impacted our ability to offer services in the region and we voluntarily suspended our operations in Russia and Belarus in March 2022. Policy makers have also discussed potential legislation to add taxes to remittances from the United States to Mexico and/or other countries. Further, one state has passed a law imposing a fee on certain money transfer transactions, and certain other states have proposed similar legislation. Several foreign countries have enacted or proposed rules imposing taxes or fees on certain money transfer transactions, as well. The approach of policy makers and the ongoing budget shortfalls in many jurisdictions, combined with future federal action or inaction on immigration reform, may lead other states or localities to impose similar taxes or fees or other requirements or restrictions. Foreign countries in similar circumstances have invoked and could continue to invoke the imposition of sales, service, or similar taxes, or other requirements or restrictions, on money transfer services. A tax, fee, or other requirement or restriction exclusively on money transfer service providers like Western Union could put us at a competitive disadvantage to other means of remittance which are not subject to the same taxes, fees, requirements, or restrictions. Other examples of changes to our financial environment include the possibility of regulatory initiatives that focus on lowering international remittance costs. Such initiatives may have a material adverse impact on our business, financial condition, results of operations, and cash flows. Regulators around the world look at each other's approaches to the regulation of the payments and other industries. Consequently, a development in any one country, state, or region may influence regulatory approaches in other countries, states, or regions. Similarly, new laws and regulations in a country, state, or region involving one service may cause lawmakers there to extend the regulations to another service. As a result, the risks created by any one new law or regulation are magnified by the potential they may be replicated, affecting our business in another place or involving another service. Conversely, if widely varying regulations come into existence worldwide, we may have difficulty adjusting our services, fees, foreign exchange spreads and other important aspects of our business, with the same effect. Further, political changes and trends such as populism, economic nationalism, protectionism, and negative sentiment towards multinational companies could result in laws or regulations that adversely impact our ability to conduct business in certain jurisdictions. Any of these eventualities could materially and adversely affect our business, financial condition, results of operations, and cash flows.

Our services are subject to increasingly strict legal and regulatory requirements, including those related to detecting and preventing money laundering, countering terrorist financing, fraud, drug trafficking, human trafficking, and other illicit activity, and administering economic and trade sanctions. The interpretation of those requirements by judges, regulatory bodies and enforcement agencies may change quickly and with little notice. Additionally, these requirements or their interpretations in one jurisdiction may conflict with those of another jurisdiction. As United States federal and state as well as foreign legislative and regulatory scrutiny and enforcement action in these areas increase, we expect that our costs of complying with these requirements could continue to increase, perhaps substantially, and may make it more difficult or less desirable for consumers and others to use our services or for us to contract with certain intermediaries, either of which would have an adverse effect on our revenue and operating income. For many years we have made significant additional investments in our compliance programs based on the rapidly evolving and increasingly complex global regulatory and enforcement environment and our internal reviews. These additional investments relate to enhancing our compliance capabilities, including our consumer protection efforts. Failure by Western Union, our agents or their subagents (agents and subagents are third parties, over whom Western Union has limited legal and practical control), and certain of our service providers to comply with any of these requirements or their interpretation could result in regulatory action, the suspension or revocation of a license or registration required to provide money transfer or payment services, the limitation, suspension or termination of services, changes to our business model, loss of consumer confidence, private class action litigation, the seizure of our assets, and/or the imposition of civil and criminal penalties, including fines and restrictions on our ability to offer services. We are subject to regulations imposed by the Foreign Corrupt Practices Act (the "FCPA") in the United States and similar laws in other countries, such as the Bribery Act in the UK, which generally prohibit companies and those acting on their behalf from making improper payments to foreign government officials for the purpose of obtaining or retaining business. Some of these laws, such as the Bribery Act, also prohibit improper payments between commercial enterprises. Because our services are offered in virtually every country of the world, we face significant risks associated with our obligations under the FCPA, the Bribery Act, and other national anti-corruption laws. Any determination that we have violated these laws could have an adverse effect on our business, financial condition, results of operations, and cash flows. Our United States business is subject to reporting, recordkeeping and anti-money laundering provisions of the BSA and to regulatory oversight and enforcement by FinCEN. We have subsidiaries in Brazil and Austria that are subject to banking regulations. Our Austrian banking subsidiary is also subject to regulation, examination, and supervision by the NYDFS. We also operate through a small number of licensed payment institutions in the EU. Under the EU Payment Services Directives, as amended (together "PSD"), and the EU Anti-Money Laundering Directives as amended, our operating companies that are licensed in the EU have increasingly become directly subject to reporting, recordkeeping, and anti-money laundering regulations, and agent oversight and monitoring requirements, as well as broader supervision by EU member states. Our Canadian business is subject to the recently issued Retail Payment Activities Act, which will require registration of our operations and our ongoing compliance with risk management, funds safeguarding, recordkeeping, and reporting regulations. Additionally, the financial penalties associated with the failure to comply with anti-money laundering laws have increased in recent regulation, including the EU Anti-Money Laundering Directives. These laws and proposed new related financial services laws have increased and will continue to increase our costs and competition in some or all of our areas of service. Legislation that has been enacted or proposed in other jurisdictions could have similar effects. The remittance industry, including Western Union, remains under scrutiny from government regulators and others in connection with its ability to prevent its services from being abused by people seeking to defraud others. For example, in early 2017, we entered into the Joint Settlement Agreements with the United States Department of Justice ("DOJ"), certain United States Attorney's Offices, the FTC, FinCEN, and various state attorneys general to resolve the respective investigations of those agencies, and in early 2018, we agreed to the NYDFS Consent Order. The ingenuity of criminal fraudsters, combined with the potential susceptibility to fraud by consumers, make the prevention of consumer fraud a significant and challenging problem. Our failure to continue to help prevent such frauds and increased costs related to the implementation of enhanced anti-fraud measures, or a change in fraud prevention laws or their interpretation or the manner in which they are enforced has had, and could in the future have, an adverse effect on our business, financial condition, results of operations, and cash flows. Further, any determination that our agents or their subagents have violated laws and regulations could seriously damage our reputation and brands, resulting in diminished revenue and profit and increased operating costs. In some cases, we could be liable for the failure of our agents or their subagents to comply with laws which also could have an adverse effect on our business, financial condition, results of operations, and cash flows. In many jurisdictions where Western Union is licensed to offer money transfer services, the license holder is responsible for ensuring the agent's or their subagent's compliance with the rules that govern the money transfer service. For example, in the EU, Western Union is responsible for the compliance of our agents when they are acting on behalf of Western Union Payment Services Ireland Limited, which is regulated by the Central Bank of Ireland. Thus, the risk of adverse regulatory action against Western Union because of actions by our agents or their subagents and the costs to monitor our agents or their subagents in those areas has increased. The regulations implementing the remittance provisions of the Dodd-Frank Act also impose responsibility on us for any related compliance failures of our agents. The requirements under PSD, the Dodd-Frank Act, and similar legislation enacted or proposed in other countries have resulted and will likely continue to result in increased compliance costs, and in the event we or our agents or their subagents are unable to comply, could have an adverse impact on our business, financial condition, results of operations, and cash flows. Additional countries may adopt similar legislation. We also have a payment institution to conduct money remittance in the United Kingdom ("UK"), which was authorized by the FCA in April 2019 and presently offers retail money transfer services via UK agents and our UK Branded Digital services. As a result of Brexit, including under the terms of any new regulatory authorizations we have and may obtain, we could be required to comply with differing regulatory requirements in the UK as a result of divergence from established EU regulation. This could make it more costly for us to provide our services. We continue to monitor developments in this area, particularly for instance those forthcoming under the recently enacted Financial Services and Markets Bill Act 2022-23, which is going through UK Parliamentary scrutiny, and is expected to be passed in 2023. The Bill aims to recast the UK regulatory framework post-Brexit and will give the UK Government the power to repeal retained EU financial services legislation and create new regulator rule-making powers in areas currently covered by retained EU law, with the objective of promoting the growth and international competitiveness of the UK economy.

Our regulators expect us to possess sufficient financial soundness and strength to adequately support our regulated subsidiaries. We have substantial indebtedness and other obligations, including those related to the tax imposed on certain of our previously undistributed foreign earnings pursuant to the Tax Act, which could make it more difficult to meet these requirements or any additional requirements. In addition, as a global provider of payment services and in light of the changing regulatory environment in various jurisdictions, we could become subject to new capital requirements introduced or imposed by our regulators that could require us to raise capital immediately or retain earnings over a period of time. Our regulators also impose restrictions on our ability to use cash generated by our regulated subsidiaries such as those related to minimum qualifying investments, net worth requirements, and restrictions on transferring assets outside of the countries where those assets are located. For instance, our regulators specify the amount and composition of eligible assets that certain of our subsidiaries must hold in order to satisfy our outstanding settlement obligations. These regulators could further restrict the type of instruments that qualify as permissible investments or require our regulated subsidiaries to maintain higher levels of eligible assets. Further, some jurisdictions use tangible net worth and other financial strength guidelines to evaluate financial position. If our regulated subsidiaries do not abide by these guidelines, they may be subject to heightened review by these jurisdictions, and the jurisdictions may be more likely to impose new formal financial strength requirements. Additional financial strength requirements imposed on our regulated subsidiaries or significant changes in the regulatory environment for money transfer providers could impact our primary source of liquidity. Any change or increase in these regulatory requirements or guidelines could have a material adverse effect on our business, financial condition, and results of operations.