MA/Filings/10-K Diff

MA 10-K diff: FY 2024-12-31 → FY 2025-12-31

Paragraph-level diff of Risk Factors (Item 1A) and Management's Discussion & Analysis (Item 7).

Item 1A · Risk Factors

+49 paragraphs56 paragraphs ~49 changed

FY 2024-12-31 (earlier)

ITEM 1A. RISK FACTORS Item 1A. Risk factors RISK HIGHLIGHTS Legal and Regulatory Business and Operations Payments Industry Regulation Competition and Technology Brand, Reputational Impact and Environmental, Social and Governance Preferential or Protective Government Actions Information Security and Operational Resilience Talent and CulturePrivacy, Data Protection, AI and Information SecurityStakeholder Relationships Acquisitions and Strategic Investments Other Regulation Global Economic and Political Environment Settlement and Third-Party Obligations Litigation Class A Common Stock and Governance Structure Legal and Regulatory Payments Industry Regulation Global regulatory and legislative activity related to the payments industry may have a material adverse impact on our overall business and results of operations. Central banks and similar regulatory bodies have increasingly established or further expanded their authority over certain aspects of payments systems such as ours, including obligations or restrictions with respect to the types of products and services that we may offer, the countries in which our products and services may be used, the way we structure and operate our business and the types of consumers and merchants who can obtain or accept our products or services. Similarly, jurisdictions that regulate a particular product may consider extending their jurisdiction to other products. For example, debit regulations could lead to regulation of credit products. Moreover, several jurisdictions are demonstrating increased interest about the network fees we charge to our customers (in some cases as part of broader market reviews of retail payments), which could in the future lead to regulation relating to our network fees. In several jurisdictions, we have been designated as a “systemically important payment system”, with other regulators considering similar designations. This type of regulation and oversight is related to switching activities, and includes policies, procedures and requirements related to risk management, collateral, participant default, timely switching of financial transactions, and capital and financial resources. Parts of our business have also been deemed as a “specified service provider” or considered “critical infrastructure”. The impact to our business created by any new law, regulation or designation is magnified by the potential it has to be replicated in, or conflict with, other jurisdictions, or involve other products within any particular jurisdiction. Our strategic expansion of our products and services has also created the need for us to obtain new types and increasing numbers of regulatory licenses, resulting in increased supervision and additional compliance burdens distinct from those imposed on our payment network activities. For example, certain of our subsidiaries maintain money transfer licenses that typically impose supervisory and examination requirements, as well as capital, safeguarding, risk management and other business obligations. Increased regulation and oversight of payments systems, as well as increased exposure to regulation resulting from changes to our products and services, have resulted and may continue to result in significant compliance and governance burdens or otherwise increase our costs. As a result, customers could be less willing to participate in our payments system and/or use our other products or services, reduce the benefits offered in connection with the use of our products (making our products less desirable to consumers), reduce the volume of domestic and cross-border transactions or other operational metrics, disintermediate us, impact our profitability and/or limit our ability to innovate or offer differentiated products and services, all of which could materially and adversely impact our financial performance. In addition, any regulation that is enacted related to the type and level of network fees we charge our customers could also materially and adversely impact our results of operations. Regulators could also require us to obtain prior approval for changes to our system rules, procedures or operations, or could require customization with regard to suchMASTERCARD 2024 FORM 10-K 25PART I ITEM 1A. RISK FACTORS changes, which could negatively impact us. Moreover, failure to comply with the laws and regulations to which we are subject could result in fines, sanctions, civil damages or other penalties, which could materially and adversely affect our overall business and results of operations, as well as have an impact on our brand and reputation. Increased activity with respect to interchange rates could have an adverse impact on our business. Interchange rates are a significant component of the costs that merchants pay in connection with the acceptance of products associated with our payment network. Although we do not earn revenues from interchange, interchange rates can impact the volume of transactions we see on our payment products. If interchange rates are too high, merchants may stop accepting our products or route transactions away from our network. If interchange rates are too low, issuers may stop promoting our products and services, eliminate or reduce loyalty rewards programs or other account holder benefits (e.g., free checking or low interest rates on balances), or charge fees to account holders (e.g., annual fees or late payment fees).Governments and merchant groups in a number of countries have implemented or are seeking interchange rate reductions through legislation, regulation and litigation. See “Business - Government Regulation” in Part I, Item 1 and Note 21 (Legal and Regulatory Proceedings) to the consolidated financial statements included in Part II, Item 8 for more details.If issuers cannot collect or we are required to reduce interchange rates, issuers may be less willing to participate in our four-party payments system. Alternatively, they may reduce the benefits associated with our products, choose to charge higher fees to consumers to attempt to recoup a portion of the costs incurred for their services, or seek a fee reduction from us to decrease the expense of their payment programs (particularly if regulation has a disproportionate impact on us as compared to our competitors in terms of the fees we can charge). These and other impacts could make our products less desirable to consumers, limit our ability to innovate or offer differentiated products, and/or make proprietary three-party networks or other forms of payment more attractive, ultimately reducing the volume of transactions over our network and our profitability. We are devoting substantial resources to defending our right to establish interchange rates in regulatory proceedings, litigation and legislative activity. The potential outcome of any of these activities could have a more positive or negative impact on us relative to our competitors. If we are ultimately unsuccessful in defending our ability to establish interchange rates, any resulting legislation, regulation and/or litigation may have a material adverse impact on our overall business and results of operations. In addition, regulatory proceedings and litigation could result (and in some cases has resulted) in us being fined and/or having to pay civil damages, the amount of which could be material. Limitations on our ability to restrict merchant surcharging could materially and adversely impact our results of operations. We have historically implemented policies, referred to as no-surcharge rules, in certain jurisdictions, including the U.S. and Canada, that prohibit merchants from charging higher prices to consumers who pay using our products instead of other means. Authorities in several jurisdictions have acted to end or limit the application of these no-surcharge rules (or indicated interest in doing so). Additionally, our no-surcharge rules now permit U.S. and Canadian merchants to surcharge credit cards (subject to certain limitations). If, over time, an increased number of merchants choose to surcharge as permitted, this could result in consumers viewing our products less favorably and/or using alternative means of payment. These responses could result in a decrease in our overall transaction volumes, which in turn could materially and adversely impact our results of operations. Preferential or Protective Government Actions Preferential or protective government actions related to domestic payment services could adversely affect our ability to maintain or increase our revenues. Governments in some countries have acted, or in the future may act, to provide resources, preferential treatment or other protection to selected national or domestic payment and switching providers, or have created, or may in the future create, their own national provider. These actions may displace us from, prevent us from entering into, or substantially restrict us from participating in, particular geographies, and may prevent us from competing effectively against those providers. For example: • Governments in some countries have implemented, or may implement, regulatory requirements that mandate switching of domestic payments either entirely in that country or by only domestic companies. • Some jurisdictions have implemented, or are considering implementing, requirements to collect, store and/or process data within their borders, as well as prohibitions on the transfer of data abroad, leading to technological and operational implications as well as increased compliance burdens and other costs.• Geopolitical events and any resulting OFAC sanctions, adverse trade policies, enforcement of U.S. laws related to countering the financing of terrorism, economic sanctions and anti-corruption, or other types of government actions could lead affected or other jurisdictions to take actions in response that could adversely affect our business. Moreover, because of various concerns 26 MASTERCARD 2024 FORM 10-KPART I ITEM 1A. RISK FACTORSjurisdictions may have with respect to our business, including our decision to suspend business operations in Russia, such jurisdictions may decide to begin to or increase their focus on growing local payment networks and other solutions.• Regional groups of countries are considering, or may consider, efforts to restrict our switching of regional transactions. • Governments have been increasingly creating and expanding local payments structures, which are increasingly being considered as alternatives to traditional domestic payment solutions and schemes such as ours. Such developments prevent us from utilizing our global switching capabilities for domestic or regional customers. In addition, to the extent a jurisdiction determines us not to be in compliance with regulatory requirements (including those related to data localization), we have been, and may again in the future be, subject to resource and time pressures in order to come back into compliance. Our inability to effect change in, or work with, these jurisdictions could adversely affect our ability to maintain or increase our revenues and extend our global brand. Additionally, some jurisdictions have implemented, or may implement, foreign ownership restrictions, which could potentially have the effect of forcing or inducing the transfer of our technology and proprietary information as a condition of access to their markets. Such restrictions could adversely impact our ability to compete in these markets.Privacy, Data Protection, AI and Information SecurityRegulation and enforcement of privacy, data, AI, information security and the digital economy could increase our costs and lead to legal claims and fines, as well as negatively impact our growth and reputation.We are subject to increasingly complex, fragmented and divergent laws and regulations related to privacy and data protection, data use and governance, AI and information security in the jurisdictions in which we do business. While policymakers around the globe often look to the EU and the GDPR when adopting new or updated privacy and data protection laws, divergences have occurred and continue to occur. As a result, new or updated privacy and data protection and information security laws and regulations have led, and may continue to lead, to similar, stricter or at times conflicting requirements, creating an uncertain regulatory environment. For example, some jurisdictions have implemented or are otherwise considering requirements to collect, store and/or process data within their borders, as well as prohibitions on the transfer of data abroad, leading to technological and operational implications. Other jurisdictions have adopted or are otherwise considering adopting sector-specific regulations for the payments industry and other industries in which we participate, including forced data sharing requirements or additional verification requirements. In addition, laws and regulations on AI, data governance and credit decisioning may overlap or conflict with, or diverge from, general privacy rules. Overall, these myriad laws and regulations may require us to modify or limit our data processing practices and policies, incur substantial compliance-related costs and expenses, and otherwise suffer adverse impacts on our business. Failure to comply with any of these laws, regulations and requirements (including as a result of conflicting regulations) could result in fines, sanctions or other enforcement actions or penalties, which could materially and adversely affect our results of operations and overall business, as well as have an impact on our reputation. As a user and deployer of AI technology, we are also subject to increasing and evolving laws and regulations related to AI governance, including the EU AI Act, and new applications of existing laws and regulations to AI. How our use and deployment of AI will be regulated is still developing as policymakers around the world consider how to regulate AI, and uncertainty remains as to how AI technology will continue to advance. In addition, the use of AI creates or amplifies risks that are challenging to fully prevent or mitigate. In particular, AI algorithms may generate inaccurate, unintended, unfair, biased or discriminatory outcomes (which may not be easily detectable or explainable) and may inadvertently disclose confidential information and/or breach intellectual property, privacy or other rights. Our implementation of robust AI governance and risk management frameworks aimed at complying with emerging laws and regulations may not be sufficient protection against these emerging risks. Further, as we acquire new companies and develop integrated and personalized products and services to meet the needs of a changing marketplace, we have expanded and may further expand our data profile through additional data types and sources, across multiple channels, and involving new partners. This expansion has amplified and may continue to amplify the impact of these various laws and regulations on our business or subject us to new laws and regulations. For example, our acquisition of Recorded Future, a global threat intelligence company, increases our exposure to certain laws and regulations, including global cybercrime and other laws and regulations in various jurisdictions. As a result, we are required to constantly monitor our data practices and potentially change them when necessary or appropriate. We also need to provide increased care in our data management, governance and quality practices, particularly as it relates to the use of data in products leveraging AI. New requirements and rules, or changing interpretations of existing requirements in these areas, or the development of new regulatory schemes related to the digital economy in general, may also increase our costs and/or restrict our ability to leverage data or use AI for innovation. This could impact the products and services we offer and other aspects of our business, such as fraud monitoring, the need for improved data management, governance and quality practices, the development of information-based products and solutions, and technology operations. In addition, these requirements may increase the costs to our customers of MASTERCARD 2024 FORM 10-K 27PART I ITEM 1A. RISK FACTORSissuing payment products or using information products, which may, in turn, decrease the number of our products that they offer. While we intend to comply with all regulatory requirements, innovate responsibly and deploy Privacy by Design, Data by Design and AI Governance approaches to all of our product development, the speed and pace of changes in laws (as well as stakeholder interests) may not allow us to meet rapidly evolving regulatory and stakeholder expectations. Any of these developments could materially and adversely affect our overall business and results of operations.Other Regulation Regulations that directly or indirectly apply to Mastercard as a result of our participation in the global payments industry may materially and adversely affect our overall business and results of operations. We are subject to regulations that affect the payments industry in the many jurisdictions in which our products and services are used. Many of our customers are also subject to regulations applicable to banks and other financial institutions that, at times, consequently affect us. Such regulation has increased significantly in the last several years (as described in “Business - Government Regulation” in Part I, Item 1). Examples include: • Anti-Money Laundering, Countering the Financing of Terrorism, Economic Sanctions and Anti-Corruption . We are subject to AML and CFT laws and regulations globally. Economic sanctions programs administered by OFAC restrict financial transactions and other dealings with certain countries and geographies, and persons and entities. We are also subject to anti-corruption laws and regulations globally, which, among other things, generally prohibit giving or offering payments or anything of value for the purpose of improperly influencing a business decision or to gain an unfair business advantage. • Account-based Payments Systems . In the U.K., aspects of our Vocalink business are subject to the U.K. payment system oversight regime and are directly overseen by the Bank of England.• Issuer and Acquirer Practices Legislation and Regulation. Certain regulations that impact our issuers and acquirers may impact various aspects of our business. For example, strong authentication requirements within the EU’s Payment Services Directive in the EEA could increase the number of transactions consumers abandon if we are unable to secure a frictionless authentication experience under these standards. Such an increase could adversely impact our volumes or other operational metrics.Increased regulatory focus on us has resulted and may continue to result in significant compliance and governance burdens or otherwise increase our costs. Similarly, increased regulatory focus on our customers and other stakeholders may cause them to reduce the volume of transactions processed through our systems, or may otherwise impact the competitiveness of our products. Actions by regulators could influence other organizations around the world to enact or consider adopting similar measures, amplifying any potential compliance burden. Additionally, our compliance with new economic sanctions and related laws with respect to particular jurisdictions or customers could result in a loss of business, which could be significant. Moreover, while our risk-based compliance program obligates issuers and acquirers to comply with U.S., EU and local sanctions programs (among other obligations), the failure of those issuers and acquirers to identify potential non-compliance issues either during or after their customer onboarding processes could ultimately impact our compliance with economic sanctions and related laws. Finally, failure to comply with the laws and regulations discussed above to which we are subject could result in fines, sanctions or other penalties. In particular, a violation and subsequent judgment or settlement against us, or those with whom we may be associated, under economic sanctions and AML, CFT, and anti-corruption laws could subject us to substantial monetary penalties, damages, and/or have a significant reputational impact. Each instance may individually or collectively materially and adversely affect our financial performance and/or our overall business and results of operations, as well as have an impact on our reputation. We could be subject to adverse changes in tax laws, regulations and interpretations or challenges to our tax positions. We are subject to tax laws and regulations of the U.S. federal, state and local governments as well as various non-U.S. jurisdictions. Current and potential future changes in existing tax laws, including regulatory guidance, are continuously being considered and have been or may be enacted (such as guidelines issued by the Organization for Economic Co-operation and Development (OECD) which impact how multinational enterprises are taxed on their global profits). These changes have and in the future may continue to have an impact on our effective income tax rate and tax payments. Similarly, changes in tax laws and regulations that impact our customers and counterparties, or the economy generally, have impacted and may continue to impact us. In addition, tax laws and regulations are complex and subject to varying interpretations, and any significant failure to comply with applicable tax laws and regulations in all relevant jurisdictions could give rise to substantial penalties and liabilities. Jurisdictions around the globe have also increased tax-related audits, which require time and resources to resolve.Any changes in enacted tax laws, rules, regulatory or judicial interpretations or guidance; any adverse outcome in connection with tax audits in any jurisdiction; or any changes in the pronouncements relating to accounting for income taxes could materially and adversely impact our effective income tax rate, tax payments, financial condition and results of operations. 28 MASTERCARD 2024 FORM 10-KPART I ITEM 1A. RISK FACTORSLitigation Liabilities or business limitations resulting from litigation could materially and adversely affect our results of operations.We are a defendant in a number of civil litigations and regulatory proceedings and investigations, including among others, those alleging violations of competition and antitrust law and those involving intellectual property claims (as described in Note 21 (Legal and Regulatory Proceedings) to the consolidated financial statements included in Part II, Item 8). In the event we are found liable in any material litigations or proceedings (particularly in a large class-action lawsuit or on the basis of an antitrust claim entitling the plaintiff to treble damages or under which we were jointly and severally liable), we could be subject to significant damages, which could have a material adverse impact on our overall business and results of operations. Certain limitations have been placed on our business because of litigation and litigation settlements, such as changes to our no-surcharge rule in the U.S. and Canada. Any future limitations resulting from the outcomes of any litigation or regulatory proceeding, including any changes to our rules or business practices, could impact our relationships with our customers, including reducing the volume of business that we do with them, which may materially and adversely affect our overall business and results of operations.Business and Operations Competition and Technology Substantial and intense competition worldwide in the global payments industry may materially and adversely affect our overall business and results of operations. The global payments industry is highly competitive. Our payment programs compete against competitors both within and outside of the global payments industry and compete in all payment categories, including paper-based payments and all forms of electronic payments. We compete against general purpose payments networks, debit and local networks, ACH and real-time account-based payments systems, digital wallets and other fintechs (focused on online activity across various channels and processing payments using in-house capabilities), digital public infrastructure and other government-backed solutions and digital currencies. We also face competition from companies that provide alternatives to our services and other solutions. Our traditional competitors may have substantially greater financial and other resources than we have, may offer a wider range of programs, services, and payment capabilities than we offer or may use more effective advertising and marketing strategies to achieve broader brand recognition and merchant acceptance than we have. They may also introduce their own innovative programs, services and capabilities that adversely impact our growth. Certain of our competitors to our payment network operate three-party payments systems with direct connections to both merchants and consumers, potentially providing competitive advantages. If we continue to attract more regulatory scrutiny than these competitors because we operate a four-party system, or we are regulated because of the system we operate in a way in which our competitors are not, we could lose business to these competitors. See “Business - Competition” in Part I, Item 1. Certain of our competitors have developed alternative, e-commerce and/or mobile device payments systems, as well as physical store locations. A number of these competitors rely principally on technology to support their services that provides cost advantages, and as a result may benefit from lower costs than we do. Many of these competitors are also able to use existing payment networks without being subject to many of the associated costs. Moreover, these competitors also occupy various roles in the payments ecosystem that enable them to influence payment choice of other participants. With respect to government-backed solutions, including those involving DPI, government participation in structures could prevent us from entering into, or substantially restrict us from participating in, particular geographies. Any of these factors could put us at a competitive disadvantage. Our ability to compete may also be affected by regulatory and legislative initiatives, as well as the outcomes of litigation, competition-related regulatory proceedings and both central bank and legislative activity. If we are not able to differentiate ourselves from our competitors, drive value for our customers and/or effectively align our resources with our goals and objectives, we may not be able to compete effectively against these threats. Our failure to compete effectively against any of the foregoing threats could materially and adversely affect our overall business and results of operations.Disintermediation from stakeholders both within and outside of the payments value chain could harm our business. As the payments industry continues to develop and change, we face disintermediation and related risks, including the following: • Parties that process our transactions in certain countries (such as merchants and third-party payment processors) may try to eliminate our position as an intermediary in the payment process by switching transactions directly with issuers or processing transactions directly between issuers and acquirers.MASTERCARD 2024 FORM 10-K 29 PART I ITEM 1A. RISK FACTORS • Payments industry participants may develop their own products and services to support our switched transaction and payments offerings, forcing us to change our pricing or practices for our own offerings in order to compete. In addition, governments may promote their own national or international payments platforms, potentially putting us at a competitive disadvantage in those markets, or requiring us to compete differently. Moreover, as central banks experiment with CBDCs, policies and design considerations that governments adopt could impact the extent of our role in facilitating CBDC-based payment transactions, potentially impacting the transactions that we may process over our network.• Payments industry participants continue to invest in and develop alternative capabilities, such as account-based payments, which could facilitate P2M transactions that compete with both our payment network and our additional payments capabilities. • Fintechs and technology companies could develop platforms or networks that disintermediate us from digital payments as well as develop products or services that compete with our customers and could diminish demand for our products and services. In addition, we face a heightened risk that data we share with these companies as part of our products and services could be used in a way that could put us at a competitive disadvantage. • Payments industry participants may merge, create joint ventures or form other business combinations that may strengthen their existing business services, leverage other business models to create a competitive edge over us or create new payment products and services that compete with our products and services. • Regulation may disintermediate issuers by enabling third-party providers opportunities to route payment transactions toward their own forms of payment by offering account information or payment initiation services directly to our product users. Such regulation may also provide these processors with the opportunity to commoditize the data that are included in the transactions they are servicing. Disintermediation of our customers’ business could diminish demand for our products and services. Our failure to compete effectively against any of the foregoing competitive threats could materially and adversely affect our overall business and results of operations. Continued intense pricing pressure may materially and adversely affect our overall business and results of operations.In order to increase transaction volumes, enter new markets and expand our products and services, we seek to enter into business agreements with customers through which we offer incentives, pricing discounts and other support that promote our products. In order to stay competitive, we may have to increase the amount of these incentives and pricing discounts so as to meet customer demand for better pricing arrangements and greater rebates and incentives. As a result, we may not be able to grow our volume and/or services enough to compensate for the additional costs related to these increased incentives and pricing discounts. In addition, increased pressure on prices increases the importance of cost containment and productivity initiatives in areas other than those relating to customer incentives.In the future, we may not be able to enter into agreements with our customers if they require terms that we are unable or unwilling to offer, and we may be required to modify existing agreements in order to maintain relationships and compete with others in the industry. Some of our competitors are larger with greater financial resources and accordingly may be able to charge lower prices. In addition, to the extent that we offer discounts or incentives under such agreements, we will need to further increase transaction volumes or the amount of services provided in order to benefit from such agreements and to increase revenue and profit, and we may not be successful in doing so, particularly in the current regulatory environment. Our customers also may implement cost reduction initiatives that reduce or eliminate payment product marketing or increase requests for greater incentives or greater cost stability. In addition to decisions made by competitors and customers, we also face pressure from pricing regulation and litigation. Additionally, we face pricing pressure related to real-time account-based payment schemes. These pressures impact both domestic pricing (such as the increased use of schemes that offer increasingly lower or subsidized P2M pricing) and cross-border pricing (including from both competing schemes and global initiatives to lower the cost of cross-border payments to end users). Any of these factors could have a material adverse impact on our overall business and results of operations.Rapid and significant technological developments and changes could negatively impact our overall business and results of operations or limit our future growth. The payments industry is subject to rapid and significant technological changes, including new technologies and changes to existing technologies (such as cryptocurrency and blockchain, AI, machine learning, privacy enhancement and cybersecurity). These changes could result in new technologies that may be superior to, or render obsolete, the technologies we currently use in our programs and services. They may also result in new and innovative payment methods, products and services. Additionally, there are a number of factors relating to technology change that could impact us. These include: the inability of third parties on which we rely for the development of and access to new technologies to keep pace with technological changes; potential action from third-party patent holders, including notices or inquiries threatening litigation against us or our customers for alleged 30 MASTERCARD 2024 FORM 10-KPART I ITEM 1A. RISK FACTORSpatent infringement or demanding significant license fees; the scope of, as well as customer and merchant resistance to, industry-wide solutions and standards (such as those related to tokenization or other safety and security technologies); any difficulty we may experience in attracting and retaining employees with technology expertise; and the need to invest resources for new technologies, which could lead to further additional expenses. Any of these developments could impact our ability to develop and adopt new technologies, as well as improve and keep pace with current technologies and reflect such technology in our payments offerings.Moreover, regulatory or government requirements could continue to require us to host and deliver certain products and services on-soil in certain markets. As a result, we may need to alter our technology and delivery model, potentially resulting in additional expenses and/or other operational impacts. Our future success will depend, in part, on our ability to anticipate, develop or adapt to technological changes and evolving industry standards. If we fail to sufficiently develop and adopt new technologies, or improve and keep pace with current technologies and reflect such technology in our payments offerings, our payments offerings could be negatively impacted and/or we could be put at a competitive disadvantage. This could impact our ability to compete with new technologies and products, as well as encourage customers that use our technology to enhance and deliver their payment-related products and services (including fintechs and technology companies) to use their own technology to compete against us. These developments could lead to a decline in the use of our technology, products and services, which could have a material adverse impact on our overall business and results of operations. Operating a real-time account-based payments network presents risks that could materially affect our business. U.K. regulators have designated Vocalink, our real-time account-based payments network platform, to be a “specified service provider” and regulators in other countries may in the future expand their regulatory oversight of real-time account-based payments systems in similar ways. Any prolonged service outage on this network could result in quickly escalating impacts, including potential intervention by the Bank of England and significant reputational risk to Vocalink and us. For a discussion of related regulatory risks, see our risk factor in “Risk Factors - Payments Industry Regulation” in this Part I, Item 1A. Furthermore, the complexity of this payment technology requires careful management to address information security vulnerabilities that are different from those faced on our payment network. Operational difficulties, such as the temporary unavailability of our services or products, or information security breaches on our real-time account-based payments network could cause a loss of business for these products and services, result in potential liability for us and adversely affect our reputation. Working with new customers and end users as we continue to expand our products and services can present operational and onboarding challenges, be costly and result in reputational damage if the new products or services do not perform as intended. The payments markets in which we compete are characterized by rapid technological change, new product introductions, evolving industry standards and changing customer and consumer needs. In order to remain competitive and meet the needs of the payments markets, we are continually involved in developing and implementing complex multi-rail solutions and diversifying our products and services. These efforts carry the risks associated with any diversification initiative, including cost overruns, delays in delivery and performance problems. These projects also carry risks associated with working with different types of customers (such as corporations that are not financial institutions, non-governmental organizations (NGOs) and new end users). These differences may present new operational challenges, such as enhanced infrastructure and monitoring for less regulated customers. Our failure to effectively design and deliver these products and services could make our other offerings less desirable to these customers, or put us at a competitive disadvantage. In addition, if there is a delay in the implementation of our products or services (which could include compliance obligations, such as AML and CFT, and licensing requirements for applicable products and services), if our products or services do not perform as anticipated, or we are unable to otherwise adequately anticipate risks related to new types of customers, we could face additional regulatory scrutiny, fines, sanctions or other penalties, which could materially and adversely affect our overall business and results of operations, as well as negatively impact our brand and reputation.Information Security and Operational Resilience Information security incidents or account data compromise events could disrupt our business, damage our reputation, increase our costs and cause losses. Information security risks for payments and technology companies such as ours have significantly increased in recent years in part because of the proliferation of new technologies, the use of the Internet and telecommunications technologies to conduct financial transactions, and the increased sophistication and activities of organized crime, hackers, “hacktivists”, terrorists, nation-states, state-sponsored actors and other external parties. These threats may derive from fraud or malice on the part of our employees or third parties, or may result from human error, software bugs, server malfunctions, software or hardware failure or other technological failure. These threats include cyber-attacks such as computer viruses, denial-of-service attacks, malicious code (including ransomware), social-engineering attacks (including phishing attacks) or information security breaches and could lead to the misappropriation or loss of consumer account and other information and identity theft. These types of threats have risen MASTERCARD 2024 FORM 10-K 31PART I ITEM 1A. RISK FACTORSsignificantly due to a significant portion of our workforce working in a hybrid environment. These threats also may be further enhanced in frequency or effectiveness through threat actors’ use of AI. Our operations rely on the secure transmission, storage and other processing of confidential, proprietary, sensitive and personal information and technology in our computer systems and networks, as well as the systems of our third-party providers. Our customers and other parties in the payments value chain, as well as account holders, rely on our digital technologies, computer systems, software and networks to conduct their operations. In addition, to access our products and services, our customers and account holders increasingly use personal smartphones, tablet PCs and other mobile devices that may be beyond our control. We, like other financial technology organizations, routinely are subject to cyber-threats and our technologies, systems and networks, as well as the systems of our third-party providers, have been subject to attempted cyber-attacks. Because of our position in the payments value chain, we believe that we are likely to continue to be a target of such threats and attacks. Geopolitical events and resulting government activity could also lead to information security threats and attacks by affected or sympathizing jurisdictions or other actors, which could put our information and assets at risk, as well as result in network disruption.To date, we have not experienced any material impact relating to cyber-attacks or other information security breaches. However, future attacks or breaches could lead to security breaches of the networks, systems (including third-party provider systems) or devices that our customers use to access our products and services, which in turn could result in the unauthorized disclosure, release, gathering, monitoring, misuse, loss or destruction of confidential, proprietary, sensitive and personal information (including account data information) or data security compromises. Such attacks or breaches could also cause service interruptions, malfunctions or other failures in the physical infrastructure, networks or operations systems that support our business and customers (such as the lack of availability of our services), as well as the operations of our customers or other third parties. In addition, they could lead to damage to our reputation with our customers, other stakeholders and the broader payments ecosystem, additional costs to us (such as repairing systems, adding new personnel or protection technologies or compliance costs), regulatory penalties, financial losses to both us and our customers and partners and the loss of customers and business opportunities. These consequences could be further pronounced in jurisdictions in which we are deemed critical national infrastructure. If such attacks are not detected immediately, or disclosed as required by law, their effect could be compounded. In addition to information security risks for our systems and networks, we also routinely encounter account data compromise events involving merchants and third-party payment processors that process, store or transmit payment transaction data, which affect millions of Mastercard, Visa, Discover, American Express and other types of account holders. Further events of this type may subject us to reputational damage and/or lawsuits involving payment products carrying our brands. Damage to our reputation or brands resulting from an account data breach of our systems and networks or those of our customers, merchants and other third parties could decrease the use and acceptance of our products and services. Such events could also slow or reverse the trend toward electronic payments. In addition to reputational concerns, the cumulative impact of multiple account data compromise events could increase the impact of the fraud resulting from such events by, among other things, making it more difficult to identify consumers. Moreover, while most of the lawsuits resulting from account data breaches do not involve direct claims against us and while we have releases from many issuers and acquirers, we could still face damage claims, which, if upheld, could materially and adversely affect our results of operations. While we offer security solutions that are designed to prevent, detect and respond to fraud and cyber-attacks, there can be no assurance that such security solutions will perform as expected or address all possible security threats. Real or perceived defects, failures, errors or vulnerabilities in our security solutions could adversely impact our reputation, customer confidence in our solutions and our business and may subject us to litigation, governmental audits and investigation or other liabilities. Such events could have a material adverse impact on our transaction volumes, results of operations and prospects for future growth, or increase our costs by leading to additional regulatory burdens being imposed on us.In addition, companies have generally experienced in recent years an increase in fraudulent activity and cyber-attacks. Criminals are using increasingly sophisticated methods to capture consumer personal information to engage in illegal activities such as counterfeiting or other fraud and may see their effectiveness enhanced by the use of AI. As outsourcing and specialization become common in the payments industry, there are more third parties involved in processing transactions using our payment products. We continue to take measures to make card and digital payments more secure. However, increased fraud levels and cyber-attacks involving our products, services and/or network, or misconduct or negligence by third parties switching or otherwise servicing our products and services could damage our reputation and reduce the use and acceptance of our products and services and/or increase our compliance costs. Further, such occurrences have resulted in and could further result in legislative or regulatory intervention, which could lead to enhanced security requirements and liabilities. See “Risk Factors - Privacy, Data Protection, AI and Information Security Compliance” in this Part I, Item 1A for more detail concerning related legal risks and obligations. Despite various mitigation efforts that we undertake, there can be no assurance that we, or third parties with which we work, will not suffer material breaches and resulting losses in the future. While we maintain insurance coverage, such coverage may not be adequate to protect us from such losses as well as any liabilities or damages with respect to claims alleging compromises of our confidential, proprietary, sensitive or personal information or our technologies, systems or networks. In addition, we cannot be sure 32 MASTERCARD 2024 FORM 10-KPART I ITEM 1A. RISK FACTORSthat our existing insurance coverage will continue to be available on acceptable terms or at all, or that our insurers will not deny coverage as to any future claim. Our risk and exposure to these matters remain heightened due to, among other things, the evolving nature of these threats, our prominent role in the global payments ecosystem, our continued implementation of our strategic priorities, our extensive use of third-party vendors and potential vulnerabilities from previous and future acquisitions, strategic investments or related opportunities. As a result, we remain focused on the continued development and enhancement of our controls, processes and practices designed to protect our computer systems, software, data and networks from attack, damage or unauthorized access. As cyber-threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities. Any of the risks described above could materially adversely affect our overall business and results of operations.Service disruptions that cause us to be unable to process transactions or service our customers could reduce our operational resilience and materially affect our overall business and results of operations.Our transaction switching systems and other offerings may experience interruptions as a result of technology malfunctions, supply-chain attacks, fire, floods, earthquakes, weather events, power outages, telecommunications disruptions, terrorism, workplace violence, accidents or other catastrophic events (including those related to climate change). We have experienced in limited instances, and may continue to experience, some types of these interruptions. Our visibility in the global payments industry may also put us at greater risk of attack by terrorists, activists, or hackers who intend to disrupt our facilities, networks and/or systems. Inadequate infrastructure in lesser-developed markets could also result in service disruptions, which could impact our ability to do business in those markets. Additionally, we rely on third-party service providers for the timely transmission of information across our global data network. If one of our service providers fails to provide the communications capacity or services we require, as a result of natural disaster, operational disruptions, terrorism, hacking or any other reason, the failure could interrupt our services. Although we maintain an enterprise resiliency program to analyze risk, assess potential impacts, and develop effective response strategies, we cannot ensure that our business would be immune to these risks. Due to the intrinsic importance of our switching systems to our business, any interruption or degradation could adversely affect the perception of the reliability of products carrying our brands and materially adversely affect our overall business and our results of operations.Stakeholder Relationships Losing a significant portion of business from one or more of our largest customers could lead to significant revenue decreases in the longer term, which could have a material adverse impact on our business and our results of operations. Many of our customer relationships are not exclusive. Our customers can reassess their future commitments to us subject to the terms of our contracts, and they separately may develop their own services that compete with ours. Our business agreements with these customers may not ultimately reduce the risk (inherent in our business) that customers may terminate their relationships with us in favor of relationships with our competitors, or for other reasons, or might not meet their contractual obligations to us. In addition, a significant portion of our revenue is concentrated among our five largest customers. Loss of business from any of our large customers could have a material adverse impact on our overall business and results of operations.Exclusive/near exclusive relationships certain customers have with our competitors may have a material adverse impact on our business. While we have exclusive, or nearly-exclusive, relationships with certain of our customers to issue payment products, other customers have similar exclusive, or nearly-exclusive, relationships with our competitors. These relationships may make it difficult or cost-prohibitive for us to do significant amounts of business with these customers to increase our revenues. In addition, these customers may be more successful and may grow faster than the customers that primarily issue our payment products, which could put us at a competitive disadvantage. Furthermore, we earn substantial revenue from customers with nearly-exclusive relationships with our competitors. Such relationships could provide advantages to the customers to shift business from us to the competitors with which they are principally aligned. A significant loss of our existing revenue or transaction volumes from these customers could have a material adverse impact on our business. Consolidation amongst our customers could materially and adversely affect our overall business and results of operations.The industries in which our customers participate have undergone substantial, accelerated consolidation in the past. These consolidations have included customers with a substantial Mastercard portfolio being acquired by institutions with a strong relationship with a competitor. Potential future consolidation could occur as a result of bank failures, similar to those that occurred in the U.S. in recent years. If significant consolidation among customers were to continue, it could result in the substantial loss of business for us, which could have a material adverse impact on our business and prospects. In addition, one or more of our customers could seek to merge with, or acquire, one of our competitors, and any such transaction could also have a material adverse impact on our overall business. Consolidation could also produce a smaller number of large customers, which could increase their MASTERCARD 2024 FORM 10-K 33 PART I ITEM 1A. RISK FACTORS bargaining power and lead to lower prices and/or more favorable terms for our customers. These developments could materially and adversely affect our results of operations.Our business significantly depends on the continued success and competitiveness of our issuing and acquiring customers and, in many jurisdictions, their ability to effectively manage or help manage our brands. While we work directly with many stakeholders in the payments system (including merchants, governments, fintechs and large digital companies and other technology companies), we are, and will continue to be, significantly dependent on our relationships with our issuers and acquirers and their respective relationships with account holders and merchants to support our programs and services. Furthermore, we depend on our issuing partners and acquirers to continue to innovate to maintain competitiveness in the market. We do not issue cards or other payment devices, extend credit to account holders or determine the interest rates or other fees charged to account holders. Each issuer determines these and most other competitive payment program features. In addition, we do not establish the discount rate that merchants are charged for acceptance, which is the responsibility of our acquiring customers. As a result, our business significantly depends on the continued success and competitiveness of our issuing and acquiring customers and the strength of our relationships with them. In turn, our customers’ success depends on a variety of factors over which we have little or no influence, including economic conditions in global financial markets or their disintermediation by competitors or emerging technologies, as well as regulation. If our customers become financially unstable, we may lose revenue or we may be exposed to settlement risk. See “Risk Factors - Settlement and Third-Party Obligations” in this Part I, Item 1A with respect to how we guarantee certain third-party obligations.With the exception of the U.S. and a select number of other jurisdictions, most in-country (as opposed to cross-border) transactions conducted using cards with our brands are switched by our customers or other processors. Because we do not provide domestic switching services in these countries or have direct relationships with account holders, we depend on our close working relationships with our customers to effectively manage our brands, and the perception of our payments system, among consumers in these countries. We also rely on these customers to help manage our brands and perception among regulators and merchants in these countries, alongside our own relationships with them. From time to time, our customers may take actions that we do not believe to be in the best interests of our payments system overall, which may materially and adversely impact our business.Merchants’ continued focus on acceptance costs may lead to additional litigation and regulatory proceedings and/or increase our incentive program costs, which could materially and adversely affect our profitability. Merchants are important constituents in our payments system. We rely on both our relationships with them, as well as their relationships with our issuer and acquirer customers, to continue to expand the acceptance of our products and services. We also work with merchants to help them enable new sales channels, create better purchase experiences, improve efficiencies, increase revenues and fight fraud. In the retail industry, we believe a set of larger merchants with increasingly global scope and influence are having a significant impact on all participants in the global payments industry, including Mastercard. Some large merchants have supported the legal, regulatory and legislative challenges to interchange fees that Mastercard has been defending, including the U.S. merchant litigations. Some merchants are increasingly asking regulators to review and potentially regulate our own network fees, in addition to interchange. See “Risk Factors – Payments Industry Regulation” in this Part I, Item 1A. The continued focus of merchants on the costs of accepting various forms of payment (including digital) may lead to additional litigation and regulatory proceedings.Certain larger merchants are also able to negotiate incentives from us and pricing concessions from our issuer and acquirer customers as a condition of accepting our products. We also make payments to certain merchants to incentivize them to create co-branded payment programs with us. As merchants consolidate and become even larger, we may have to increase the amount of incentives that we provide to certain merchants, which could materially and adversely affect our results of operations. Competitive and regulatory pressures on pricing could make it difficult to offset the costs of these incentives. Additionally, if the rate of merchant acceptance growth slows, our business could suffer. Our work with governments exposes us to risks that could have a material impact on our business and results of operations.As we increase our work with national, state and local governments, both indirectly through financial institutions and with them directly as our customers, we may face various risks inherent in associating or contracting directly with governments. These risks include, but are not limited to, the following:• Governmental entities typically fund projects through appropriated monies. Changes in governmental priorities or other political developments, including disruptions in governmental operations, could impact approved funding and result in scope changes or termination of the arrangements or contracts we or financial institutions enter into with respect to our products and services.• Our work with governments is heavily regulated, subjecting us to additional potential exposure under U.S. and international anti-corruption laws (including the U.S. Foreign Corrupt Practices Act and the U.K. Bribery Act), as well as compliance with various procurement and other laws, regulations, standards and contract terms. Any violation and subsequent judgment or settlement related to the above could subject us to substantial monetary penalties and damages and have a significant reputational impact. 34 MASTERCARD 2024 FORM 10-K PART I ITEM 1A. RISK FACTORS Moreover, as a government contractor, we are subject to a government’s right to conduct audits and investigations into both our contract performance and our compliance with applicable laws, regulations and contract terms. Any adverse finding could subject us to civil or criminal penalties, sanctions, or suspension or disbarment. • Working or contracting with governments, either directly or via our financial institution customers, can subject us to heightened reputational risks, including extensive scrutiny and publicity, as well as a potential association with the policies of those governments. Any negative publicity or negative association with a government entity, regardless of its accuracy, may adversely affect our reputation. In addition, threat intelligence gathering services provided to governments through our acquisition of Recorded Future could negatively impact how we are viewed by other jurisdictions.Any of the above issues could have a material or adverse impact to our overall business and/or results of operations. Global Economic and Political Environment Global economic, political, financial and societal events or conditions could result in a material and adverse impact on our overall business and results of operations. Adverse economic trends. Adverse economic trends in key countries in which we operate may adversely affect our financial performance. Such impact may include, but is not limited to, the following: • Customers mitigating their economic exposure by limiting the issuance of new Mastercard products and requesting greater incentive or greater cost stability from us • Consumers and businesses reducing spending, which could impact domestic and cross-border spend • Debt limit and budgetary discussions in the U.S. have affected, and could further affect, the U.S. credit rating, impacting consumer confidence and spending• Government intervention (including the effect of laws, regulations and/or government investments on or in our financial institution customers), as well as uncertainty due to changing political regimes in executive, legislative and/or judicial branches of government, that may have potential negative effects on our business and our relationships with customers or otherwise alter their strategic direction away from our products • Tightening of credit availability that could impact the ability of participating financial institutions to lend to us under the terms of our credit facility Cross-border transactions. We switch substantially all cross-border transactions using Mastercard, Maestro and Cirrus-branded cards and generate a significant amount of revenue from cross-border volume fees and fees related to switched transactions. Revenue from switching cross-border and currency conversion transactions for our customers fluctuates with the levels and destinations of cross-border travel and our customers’ need for transactions to be converted into their base currency. Cross-border activity has been, and may continue to be, adversely affected by world geopolitical, economic, health, weather and other conditions. These include or have included:• Global pandemics (and related post-pandemic global economic impacts) and potential separate outbreaks of flu, viruses and other diseases (any of which could result in future epidemics or pandemics) • Current and potential future geopolitical conflicts, as well as expansion into regional or global conflicts, and the resulting impacts to our business • The threat of terrorism and major environmental and extreme weather events (including those related to climate change) The impact of and uncertainty that could result from any of these events or factors could ultimately decrease cross-border activity. Additionally, any regulation of interregional interchange fees could also negatively impact our cross-border activity (for example, the targets announced by the G20 Financial Stability Board related to cross-border payments). In each case, decreased cross-border activity could decrease the revenue we receive. Russia’s invasion of Ukraine. In addition to the cross-border impacts described above, our compliance with sanctions and our decision to suspend our business operations in Russia has led, and could further lead, to other legal ramifications and operational challenges, including fines, the nationalization of our subsidiary and any resulting impacts, and/or lawsuits. Standards. Our operations as a global payments network rely in part on global interoperable standards to help facilitate payments. To the extent geopolitical events or government intervention result in jurisdictions no longer participating in the creation or adoption of these standards, or the creation of competing standards, our products and services could be negatively impacted. Any of these developments potentially could have a material adverse impact on our overall business and results of operations.MASTERCARD 2024 FORM 10-K 35 PART I ITEM 1A. RISK FACTORSAdverse currency fluctuations and foreign exchange controls could negatively impact our results of operations.During 2024, approximately 70% of our revenue was generated from activities outside the U.S., which could be transacted in a non-functional currency. Impacts from currency fluctuations are included in our net income. Our risk management activities provide protection with respect to adverse changes in the value of only a limited number of currencies and are based on estimates of exposures to these currencies.In addition, the revenue we generate in entities with non-U.S. dollar functional currencies is subject to unpredictable currency fluctuations, including where the values of other currencies change relative to the U.S. dollar. If the U.S. dollar strengthens compared to currencies in which we generate revenue, this revenue may be translated at a materially lower amount than expected. Furthermore, we may become subject to exchange control regulations that might restrict or prohibit the conversion into U.S. dollars of our other revenue currencies and financial assets. The occurrence of currency fluctuations or exchange controls could have a material adverse impact on our results of operations. Brand, Reputational Impact and Environmental, Social and Governance Negative brand perception may materially and adversely affect our overall business. Our brands and their attributes are key assets of our business. The ability to attract consumers to our branded products and retain them depends upon the external perception of us and our industry:• Our business may be affected by actions taken by our customers, merchants or other organizations that impact the perception of our brands or the payments industry in general. From time to time, our customers may take actions that we do not believe to be in the best interests of our brands, such as creditor practices that may be viewed as “predatory”. Moreover, adverse developments with respect to our industry or the industries of our customers or other companies and organizations that use our products and services (including certain legally permissible but high-risk merchant categories, such as adult content, firearms, alcohol and tobacco) may also, by association, impair our reputation, or result in greater public, regulatory or legislative scrutiny, as well as potential litigation. We may also face similar scrutiny to the extent that we are unable to detect and/or prevent illegal activities using our payment products or otherwise occurring over our network.• Under some circumstances, our use of social media, or the use of social media by others as a channel for criticism or other purposes, could also cause rapid, widespread reputational harm to our brands by disseminating rapidly and globally actual or perceived damaging information about us, our products or merchants or other end users who utilize our products. • We are headquartered in the U.S. As such, a negative perception of the U.S. could impact the perception of our company, which could adversely affect our business. Any of the above issues could have a material and adverse effect on our overall business.Lack of visibility of our brand in our products and services, or in the products and services of our partners who use our technology, may materially and adversely affect our business. As more players enter the global payments ecosystem, the layers between our brand and consumers and merchants increase. We often partner with other consumer brands on payment solutions, including large digital companies and other technology companies who are our customers and use our networks to build their own acceptance brands. In some cases, our brand may not be featured in the payment solution or may be secondary to other brands. Additionally, as part of our relationships with some issuers, our payment brand is only included on the back of the card. As a result, our brand may either be invisible to consumers or may not be the primary brand with which consumers associate the payment experience. This brand invisibility, or any consumer confusion as to our role in the consumer payment experience, could decrease the value of our brand, which could adversely affect our business. Environmental, social and governance matters and related stakeholder reaction may impact our reputation, increase legal exposure and/or have other business impacts, which could adversely affect our overall business and/or results of operations.Our brand and reputation are associated with the ways in which we impact environmental, social and governance matters. These matters include initiatives to reduce greenhouse gas emissions, help everyone participate equitably in the digital economy and create a workplace that provides equal opportunities for all of our employees. Consumers, investors, employees and other stakeholders are increasingly focused on these impacts. To the extent any of our disclosures, public statements and metrics about these matters are subsequently viewed as inaccurate, or we are unable to execute on these initiatives, we may be viewed negatively by stakeholders concerned about these matters. Moreover, in recent years, we have received negative feedback from stakeholders on the adequacy of our environmental, social and governance initiatives. We have also increasingly been receiving negative feedback from anti-environmental, social and governance stakeholders in opposition to such initiatives. Stakeholders from both 36 MASTERCARD 2024 FORM 10-K PART I ITEM 1A. RISK FACTORS sides of this issue may continue to view us negatively and take public action against us to the extent that we do not satisfy their conflicting views or expectations.In addition, various jurisdictions are increasingly adopting or considering laws, regulations and oversight expectations that have or would impact us pertaining to environmental, social and governance matters, including required corporate reporting and disclosures. These requirements have resulted in, and are likely to continue to result in, increased compliance costs for our business and supply chain, which may increase our operating costs. Moreover, as governments, investors and other stakeholders face pressure to address climate change and other environmental, social and governance matters, these stakeholders may express new expectations and focus investments in ways that could cause significant shifts in commerce and consumption behaviors. The impact of and uncertainty that could result from such shifts could ultimately impact our business. Any of the above issues could have a material or adverse impact to our overall business and/or results of operations. Talent and Culture We may not be able to attract and retain a highly qualified workforce, or maintain our corporate culture, which could harm our overall business and results of operations.Our performance largely depends on the skills, capabilities and motivation of our employees (including our people leaders), as well as the environment we create for them to enable them to perform their jobs effectively. The market for specialized skill-sets remains highly competitive, particularly in technology and other areas that are important to the growth of our business. To the extent we are unable to differentiate our value proposition in the market, effectively develop leaders and build robust succession pipelines, it could impact our ability to deliver for our customers. Failure to attract, hire, develop, motivate and retain highly qualified employee talent could leave us vulnerable to not anticipating or identifying emerging customer or market opportunities. In addition, escalations in global conflict and a rise in mental health needs are also impacting the well-being of our people. To the extent we are unable to communicate effectively on these issues and provide support to our employees, we could experience a significant impact on our business, reputation and culture. Further, changes in and enforcement of immigration and work permit laws and visa regulations have made it difficult for employees to work in, or transfer among, jurisdictions where we operate, potentially impairing our ability to attract and retain talent. We also face increasing regulation with respect to new pay and benefits transparency requirements, which could subject us to liability or reputational harm if we do not adhere to these requirements in a timely manner. As our workforce composition continues to change, our employees may have different expectations with respect to flexibility and well-being support, and may have different career motivations (such as pursuing project-based work or other gig opportunities, as opposed to linear career paths). Additionally, employees may require different levels of support as to re-skilling and upskilling in order to adapt to advancements in our industry and changes in technology. Further, certain current and prospective employees may have expectations as to positions we take on environmental, social and governance matters. To the extent we are unable to effectively meet and/or balance these different expectations, motivations and needs, we could experience a negative impact to the quality of our corporate culture, the productivity of our workforce, our ability to innovate and our ability to attract and retain talent.We rely on our people leaders to display integrity and decency, as role models for the Mastercard Way. To the extent our leaders behave in a manner that is not consistent with these values, we could experience significant impact to our brand and reputation, as well as to our corporate culture. Any one or more of the above could harm our overall business and results of operations. Acquisitions and Strategic Investments Our efforts to enter into acquisitions, strategic investments or new businesses could be impacted or prevented by regulatory scrutiny and could otherwise result in issues that could disrupt our business and harm our results of operations or reputation. We continue to evaluate our strategic acquisitions of, and investments in, complementary businesses, products or technologies. As we do so, we face increasing regulatory scrutiny with respect to antitrust, national security and other considerations that could impact these efforts. We also face competition for acquisition targets due to the nature of the market for technology companies. As a result, we could be prevented from successfully completing such acquisitions in the future. If we are not successful in these efforts, we could lose strategic opportunities that are dependent, in part, on inorganic growth.To the extent we do make these acquisitions, we may not be able to successfully partner with or integrate them, despite original intentions and focused efforts. Such an integration also may divert management’s time and resources from our core business and disrupt our operations. Moreover, we have spent, and may continue to spend, time and money on acquisitions or projects that do MASTERCARD 2024 FORM 10-K 37 PART I ITEM 1A. RISK FACTORS not sufficiently meet our expectations (either strategically or financially), which has resulted (and may in the future result) in divesting from or otherwise exiting these investments or businesses. Additionally, to the extent we pay the purchase price of any acquisition in cash, it would reduce our cash reserves available to us for other uses, and to the extent the purchase price is paid with our stock, it could be dilutive to our stockholders. Furthermore, we have inherited and may in the future inherit litigation risk which has or may increase our post-acquisition costs of operations and/or impact our ability to successfully finance that business.Any acquisition, investment or entry into a new business could subject us to new regulations or legal requirements, both directly as a result of the new business as well as in the other existing parts of our business, with which we would need to comply. This compliance could increase our costs, and we could be subject to liability or reputational harm to the extent we cannot meet any such compliance requirements. Additionally, targets that we acquire have had, and may in the future have, data practices that do not initially conform to our privacy, data protection and information security standards and data governance model, which could lead to regulatory scrutiny and reputational harm. These targets also have resulted in, and may in the future lead to, information security vulnerabilities for us. Settlement and Third-Party Obligations Our role as guarantor, as well as other contractual obligations and discretionary actions, expose us to risk of loss or illiquidity.We are a guarantor of certain third-party obligations, including those of certain of our customers and service providers. In this capacity, we are exposed to credit and liquidity risks. We may incur significant losses in connection with transaction settlements if a customer fails to fund its daily settlement obligations due to technical problems, liquidity shortfalls, insolvency or other reasons. The occurrence of bank failures, such as those seen in recent years in the U.S., could increase the potential for such losses. Concurrent settlement failures of more than one of our larger customers or of several smaller customers either on a given day or over a condensed period of time may exceed our available resources. In addition, as we are subject to increased regulation across the globe, jurisdictions could require us to extend our guarantee to additional obligations, which could have an impact on our cost of operations.Certain non-guaranteed transactions, as well as chargebacks to acquirers in the event of acquirer default, could result in elevated brand risk and the potential for financial loss. We have significant contractual indemnification obligations with certain customers, which could be triggered depending on the circumstances. Any of the above issues or events could have a material or adverse impact to our overall business and/or results of operations.Class A Common Stock and Governance Structure Provisions in our organizational documents and Delaware law could be considered anti-takeover provisions and have an impact on change-in-control. Provisions contained in our amended and restated certificate of incorporation and bylaws and Delaware law could be considered anti-takeover provisions, including provisions that could delay or prevent entirely a merger or acquisition that our stockholders consider favorable. These provisions may also discourage acquisition proposals or have the effect of delaying or preventing entirely a change in control, which could harm our stock price. For example, subject to limited exceptions, our amended and restated certificate of incorporation prohibits any person from beneficially owning more than 15% of any of the Class A common stock or any other class or series of our stock with general voting power, or more than 15% of our total voting power. In addition: • our stockholders are not entitled to the right to cumulate votes in the election of directors • our stockholders are not entitled to act by written consent • any representative of a Mastercard or Mastercard Foundation competitor is disqualified from service on our board of directors Mastercard Foundation’s substantial stock ownership, and restrictions on its sales, may impact corporate actions or acquisition proposals favorable to, or favored by, the other public stockholders.As of December 31, 2024, Mastercard Foundation owned shares of Class A common stock representing approximately 9.4% of our general voting power. Historically, Mastercard Foundation had been restricted from selling or otherwise transferring its shares of Class A common stock prior to May 1, 2027, except to the extent necessary to satisfy its charitable disbursement requirements, for which purpose earlier sales were permitted and had occurred. In July 2023, pursuant to an application in consultation with Mastercard, Mastercard Foundation received court approval to advance that date to January 1, 2024. As a result, Mastercard Foundation is now permitted to sell all or part of its remaining shares, subject to certain conditions. In March 2024, Mastercard Foundation began selling shares pursuant to an orderly and structured plan to diversify its Mastercard shares over a seven-year 38 MASTERCARD 2024 FORM 10-K PART I ITEM 1A. RISK FACTORS period, while committing to remain a long-term Mastercard stockholder and retaining a significant holding of Mastercard shares in its portfolio. The directors of Mastercard Foundation are required to be independent of us and our customers. The ownership of Class A common stock by Mastercard Foundation, together with the seven-year diversification plan, could discourage or make more difficult acquisition proposals favored by other holders of the Class A common stock. In addition, because Mastercard Foundation intends to sell its shares over an extended period of time, it may not have the same interest in short or medium-term movements in our stock price as, or incentive to approve a corporate action that may be favorable to, our other stockholders.

FY 2025-12-31 (later)

ITEM 1A. RISK FACTORS Item 1A. Risk factors RISK HIGHLIGHTS Legal and Regulatory Business and Operations Payments Industry Regulation Competition and Technology Brand, Reputational Impact and Environmental, Social and Governance Preferential or Protective Government Actions Information Security and Operational Resilience Talent and CulturePrivacy, Data, AI and Information SecurityStakeholder Relationships Acquisitions and Strategic Investments Other Regulation Global Economic and Political Environment Settlement and Third-Party Obligations Litigation Class A Common Stock and Governance Structure Legal and Regulatory Payments Industry Regulation Global regulatory and legislative activity related to the payments industry may have a material adverse impact on our overall business and results of operations. Central banks and similar regulatory bodies have increasingly established or further expanded their authority over certain aspects of payments systems such as ours, including obligations or restrictions with respect to the types of products and services that we may offer, the countries in which our products and services may be used, the way we structure and operate our business and the types of consumers and merchants who can obtain or accept our products or services. Similarly, jurisdictions that regulate a particular product may consider extending their jurisdiction to other products. For example, debit regulations could lead to regulation of credit products. Moreover, several jurisdictions are demonstrating increased interest about the network fees we charge to our customers (in some cases as part of broader market reviews of retail payments), which could in the future lead to regulation relating to our network fees. In several jurisdictions, we have been designated as a “systemically important payment system”, with other regulators considering similar designations. This type of regulation and oversight is related to switching activities, and includes policies, procedures and requirements related to risk management, collateral, participant default, timely switching of financial transactions, and capital and financial resources. Parts of our business have also been deemed as a “specified service provider” or considered “critical infrastructure”. The impact to our business created by any new law, regulation or designation is magnified by the potential it has to be replicated in, or conflict with, other jurisdictions, or involve other products within any particular jurisdiction. Our strategic expansion of our products and services has also created the need for us to obtain new types and increasing numbers of regulatory licenses, resulting in increased supervision and additional compliance burdens distinct from those imposed on our payment network activities. For example, certain of our subsidiaries maintain money transfer licenses that typically impose supervisory and examination requirements, as well as capital, safeguarding, risk management and other business obligations. Increased regulation and oversight of payments systems, as well as increased exposure to regulation resulting from changes to our products and services, have resulted and may continue to result in significant compliance and governance burdens or otherwise increase our costs. As a result, customers could be less willing to participate in our payments system and/or use our other products or services, reduce the benefits offered in connection with the use of our products (making our products less desirable to consumers), reduce the volume of domestic and cross-border transactions or other operational metrics, disintermediate us, impact our profitability and/or limit our ability to innovate or offer differentiated products and services, all of which could materially and adversely impact our financial performance. In addition, any regulation that is enacted related to the type and level of network fees we charge our customers could also materially and adversely impact our results of operations. Regulators could also require us to obtain prior approval for changes to our system rules, procedures or operations, or could require customization with regard to suchMASTERCARD 2025 FORM 10-K 27PART I ITEM 1A. RISK FACTORS changes, which could negatively impact us. Moreover, failure to comply with the laws and regulations to which we are subject could result in fines, sanctions, civil damages or other penalties, which could materially and adversely affect our overall business and results of operations, as well as have an impact on our brand and reputation. Increased activity with respect to interchange rates could have an adverse impact on our business. Interchange rates are a significant component of the costs that merchants pay in connection with the acceptance of products associated with our payment network. Although we do not earn revenues from interchange, interchange rates can impact the volume of transactions we see on our payment products. If interchange rates are too high, merchants may stop accepting our products or route transactions away from our network. If interchange rates are too low, issuers may stop promoting our products and services, eliminate or reduce loyalty rewards programs or other account holder benefits (e.g., free checking or low interest rates on balances), or charge fees to account holders (e.g., annual fees or late payment fees).Governments and merchant groups in a number of countries have implemented or are seeking interchange rate reductions through legislation, regulation and litigation. See “Business - Government Regulation” in Part I, Item 1 and Note 19 (Legal and Regulatory Proceedings) to the consolidated financial statements included in Part II, Item 8 for more details.If issuers cannot collect or we are required to reduce interchange rates, issuers may be less willing to participate in our four-party payments system. Alternatively, they may reduce the benefits associated with our products, choose to charge higher fees to consumers to attempt to recoup a portion of the costs incurred for their services, or seek a fee reduction from us to decrease the expense of their payment programs (particularly if regulation has a disproportionate impact on us as compared to our competitors in terms of the fees we can charge). These and other impacts could make our products less desirable to consumers, limit our ability to innovate or offer differentiated products, and/or make proprietary three-party networks or other forms of payment more attractive, ultimately reducing the volume of transactions over our network and our profitability. We are devoting substantial resources to defending our right to establish interchange rates in regulatory proceedings, litigation and legislative activity. The potential outcome of any of these activities could have a more positive or negative impact on us relative to our competitors. If we are ultimately unsuccessful in defending our ability to establish interchange rates, any resulting legislation, regulation and/or litigation may have a material adverse impact on our overall business and results of operations. In addition, regulatory proceedings and litigation could result (and in some cases has resulted) in us being fined and/or having to pay civil damages, the amount of which could be material. Limitations on our ability to restrict merchant surcharging could materially and adversely impact our results of operations. We have historically implemented policies, referred to as no-surcharge rules, in certain jurisdictions, including the U.S. and Canada, that prohibit merchants from charging higher prices to consumers who pay using our products instead of other means. Authorities in several jurisdictions have acted to end or limit the application of these no-surcharge rules (or indicated interest in doing so). Additionally, our no-surcharge rules now permit U.S. and Canadian merchants to surcharge credit cards (subject to certain limitations). If, over time, an increased number of merchants choose to surcharge as permitted, this could result in consumers viewing our products less favorably and/or using alternative means of payment. These responses could result in a decrease in our overall transaction volumes, which in turn could materially and adversely impact our results of operations. Preferential or Protective Government Actions Preferential or protective government actions related to domestic payment services could adversely affect our ability to maintain or increase our revenues. Governments in some countries have acted, or in the future may act, to provide resources, preferential treatment or other protection to selected national or domestic payment and switching providers, or have created, or may in the future create, their own national provider. These actions may displace us from, prevent us from entering into, or substantially restrict us from participating in, particular geographies, and may prevent us from competing effectively against those providers. For example: • Governments in some countries have implemented, or may implement, regulatory requirements that mandate switching of domestic payments either entirely in that country or by only domestic companies. • Some jurisdictions have implemented, or are considering implementing, requirements to collect, store and/or process data within their borders, as well as prohibitions on the transfer of data abroad, leading to technological and operational implications as well as increased compliance burdens and other costs.• Geopolitical events and any resulting OFAC sanctions, adverse trade policies, enforcement of U.S. laws related to countering the financing of terrorism, economic sanctions and anti-corruption, or other types of government actions could lead affected or other jurisdictions to take actions in response that could adversely affect our business. Moreover, because of various concerns jurisdictions may have with respect to our business, including any decisions we may make relating to entering or exiting a 28 MASTERCARD 2025 FORM 10-KPART I ITEM 1A. RISK FACTORSparticular market, such jurisdictions may decide to begin to or increase their focus on growing local payment networks and other solutions.• Regional groups of countries are considering, or may consider, efforts to restrict our switching of regional transactions. • Governments have been increasingly creating and expanding local payments structures, which are increasingly being considered as alternatives to traditional domestic payment solutions and schemes such as ours. Such developments prevent us from utilizing our global switching capabilities for domestic or regional customers. In addition, to the extent a jurisdiction determines us not to be in compliance with regulatory requirements (including those related to data localization), we have been, and may again in the future be, subject to resource and time pressures in order to come back into compliance. Our inability to effect change in, or work with, these jurisdictions could adversely affect our ability to maintain or increase our revenues and extend our global brand. Additionally, some jurisdictions have implemented, or may implement, foreign ownership restrictions, which could potentially have the effect of forcing or inducing the transfer of our technology and proprietary information as a condition of access to their markets. Such restrictions could adversely impact our ability to compete in these markets.Privacy, Data, AI and Information SecurityRegulation and enforcement of privacy, data, AI, information security and the digital economy could increase our costs and lead to legal claims and fines, as well as negatively impact our growth and reputation.We are subject to increasingly complex, fragmented, overlapping and/or divergent laws and regulations related to privacy and data protection, data use and governance, AI and information security (including with respect to cybersecurity and cyber-risk) in the jurisdictions in which we do business. New or updated laws and regulations have led, and may continue to lead, to similar, stricter or at times conflicting requirements, creating an uncertain regulatory environment. For example, some jurisdictions have implemented or are otherwise considering requirements to collect, store and/or process data within their borders, as well as prohibitions on the transfer of and access to data abroad, leading to technological and operational implications. Other jurisdictions have adopted or are otherwise considering adopting sector-specific regulations for the payments industry and other industries in which we participate, including forced data sharing requirements or additional verification requirements. With respect to information security, any single breach could require parallel notifications to data protection authorities, cyber authorities and/or law-enforcement, often requiring different thresholds, reporting deadlines and formats. In addition, laws and regulations on AI, data governance and credit decisioning may overlap or conflict with, or diverge from, general privacy rules. Overall, these myriad laws and regulations may require us to modify or limit our data processing practices and policies, incur substantial compliance-related costs and expenses, and otherwise suffer adverse impacts on our business. Failure to comply with any of these laws, regulations and requirements (including as a result of conflicting regulations) could result in fines, sanctions or other enforcement actions or penalties (both civil and criminal), which could materially and adversely affect our results of operations and overall business, as well as have an impact on our reputation. As a user and deployer of AI technology, we are also subject to increasing and evolving laws and regulations related to AI governance, including the EU AI Act, and new applications of existing laws and regulations to AI. How our use and deployment of AI will be regulated is still developing as policymakers around the world consider how to regulate AI, and uncertainty remains as to how AI technology or its application (such as in agentic commerce) will continue to advance. In addition, the use of AI creates or amplifies risks that are challenging to fully prevent or mitigate. In particular, AI algorithms may generate inaccurate, unintended, unfair, biased or discriminatory outcomes (which may not be easily detectable or explainable) and may inadvertently disclose confidential information and/or breach intellectual property, privacy or other rights. Our implementation of robust AI governance and risk management frameworks, designed to ensure our responsible use of AI and help us to comply with emerging laws and regulations, may not be sufficient protection against these emerging risks. Further, as we acquire new companies and develop integrated and personalized products and services to meet the needs of a changing marketplace, we have expanded and may further expand our data profile through additional data types and sources, across multiple channels, and involving new partners. This expansion has amplified and may continue to amplify the impact of these various laws and regulations on our business or subject us to new laws and regulations. For example, as a provider of global threat intelligence services through Recorded Future, we are subject to increased exposure to certain laws and regulations, including global cybercrime and other laws and regulations in various jurisdictions. As a result, we are required to constantly monitor our data practices and potentially change them when necessary or appropriate. We also need to provide increased care in our data management, governance, quality and accuracy practices, particularly as it relates to the use of data in products leveraging AI. New requirements and rules, or changing interpretations of existing requirements in these areas, or the development of new regulatory schemes related to the digital economy in general, may also increase our costs and/or restrict our ability to leverage data or use AI for innovation. This could impact the products and services we offer and other aspects of our business, such as fraud MASTERCARD 2025 FORM 10-K 29PART I ITEM 1A. RISK FACTORSmonitoring, the need for improved data management, governance, quality and accuracy practices, the development of information-based products and solutions, and technology operations. In addition, these requirements may increase the costs to our customers of issuing payment products or using information products, which may, in turn, decrease the number of our products that they offer. While we intend to comply with all regulatory requirements, innovate responsibly and deploy Privacy by Design, Data by Design and AI Governance approaches to all of our product development, the speed and pace of changes in laws (as well as stakeholder interests) may not allow us to meet rapidly evolving regulatory and stakeholder expectations. Any of these developments could materially and adversely affect our overall business and results of operations.Other Regulation Regulations that directly or indirectly apply to Mastercard as a result of our participation in the global payments industry may materially and adversely affect our overall business and results of operations. We are subject to regulations that affect the payments industry in the many jurisdictions in which our products and services are used. Many of our customers are also subject to regulations applicable to banks and other financial institutions that, at times, consequently affect us. Such regulation has increased significantly in the last several years (as described in “Business - Government Regulation” in Part I, Item 1). Examples include: • Anti-Money Laundering, Countering the Financing of Terrorism, Economic Sanctions and Anti-Corruption . We are subject to AML and CFT laws and regulations globally. Economic sanctions programs administered by OFAC restrict financial transactions and other dealings with certain countries and geographies, and persons and entities. We are also subject to anti-corruption laws and regulations globally, which, among other things, generally prohibit giving or offering payments or anything of value for the purpose of improperly influencing a business decision or to gain an unfair business advantage. • Account-based Payments Systems . In the U.K., aspects of our Vocalink business are subject to the U.K. payment system oversight regime and are directly overseen by the Bank of England.• Issuer and Acquirer Practices Legislation and Regulation. Certain regulations or legislation that do or could impact our issuers and acquirers (such as caps on issuer interest rates) may impact various aspects of our business. Additionally, strong authentication requirements within the EU’s Payment Services Directive in the EEA could increase the number of transactions consumers abandon if we are unable to secure a frictionless authentication experience under these standards. Such an increase could adversely impact our volumes or other operational metrics.Increased regulatory focus on us has resulted and may continue to result in significant compliance and governance burdens or otherwise increase our costs. Similarly, increased regulatory focus on our customers and other stakeholders may cause them to reduce the volume of transactions processed through our systems, or may otherwise impact the competitiveness of our products. Actions by regulators could influence other organizations around the world to enact or consider adopting similar measures, amplifying any potential compliance burden. Additionally, our compliance with new economic sanctions and related laws with respect to particular jurisdictions or customers could result in a loss of business, which could be significant. Moreover, while our risk-based compliance program obligates issuers and acquirers to comply with U.S., EU and local sanctions programs (among other obligations), the failure of those issuers and acquirers to identify potential non-compliance issues either during or after their customer onboarding processes could ultimately impact our compliance with economic sanctions and related laws. Finally, failure to comply with the laws and regulations discussed above to which we are subject could result in fines, sanctions or other penalties. In particular, a violation and subsequent judgment or settlement against us, or those with whom we may be associated, under economic sanctions and AML, CFT, and anti-corruption laws could subject us to substantial monetary penalties, damages, and/or have a significant reputational impact. Each instance may individually or collectively materially and adversely affect our financial performance and/or our overall business and results of operations, as well as have an impact on our reputation. We could be subject to adverse changes in tax laws, regulations and interpretations or challenges to our tax positions. We are subject to tax laws and regulations of the U.S. federal, state and local governments as well as various non-U.S. jurisdictions. Current and potential future changes in existing tax laws, including regulatory guidance, are continuously being considered and have been or may be enacted (such as guidelines issued by the Organization for Economic Co-operation and Development (OECD) which impact how multinational enterprises are taxed on their global profits). These changes have and in the future may continue to have an impact on our effective income tax rate and tax payments. Similarly, changes in tax laws and regulations that impact our customers and counterparties, or the economy generally, have impacted and may continue to impact us. In addition, tax laws and regulations are complex and subject to varying interpretations, and any significant failure to comply with applicable tax laws and regulations in all relevant jurisdictions could give rise to substantial penalties and liabilities. Jurisdictions around the globe have also increased tax-related audits, which require time and resources to resolve.30 MASTERCARD 2025 FORM 10-KPART I ITEM 1A. RISK FACTORSAny changes in enacted tax laws, rules, regulatory or judicial interpretations or guidance; any adverse outcome in connection with tax audits in any jurisdiction; or any changes in the pronouncements relating to accounting for income taxes could materially and adversely impact our effective income tax rate, tax payments, financial condition and results of operations.Litigation Liabilities or business limitations resulting from litigation could materially and adversely affect our results of operations.We are a defendant in a number of civil litigations and regulatory proceedings and investigations, including among others, those alleging violations of competition and antitrust law and those involving intellectual property claims (as described in Note 19 (Legal and Regulatory Proceedings) to the consolidated financial statements included in Part II, Item 8). In the event we are found liable in any material litigations or proceedings (particularly in a large class-action lawsuit or on the basis of an antitrust claim entitling the plaintiff to treble damages or under which we were jointly and severally liable), we could be subject to significant damages, which could have a material adverse impact on our overall business and results of operations. Certain limitations have been placed on our business because of litigation and litigation settlements, such as changes to our no-surcharge rule in the U.S. and Canada. Any future limitations resulting from the outcomes of any litigation and litigation settlements (such as the Rules Relief Class settlement as described in Note 19 (Legal and Regulatory Proceedings) to the consolidated financial statements included in Part II, Item 8) or regulatory proceeding, including any changes to our rules or business practices, could impact our relationships with our customers, including reducing the volume of business that we do with them, which may materially and adversely affect our overall business and results of operations.Business and Operations Competition and Technology Substantial and intense competition worldwide in the global payments industry may materially and adversely affect our overall business and results of operations. The global payments industry is highly competitive. Our payment programs compete against competitors both within and outside of the global payments industry and compete in all payment categories, including paper-based payments and all forms of electronic payments. We compete against general purpose payments networks, debit and local networks, ACH and real-time account-based payments systems, digital wallets and other fintechs (focused on online activity across various channels and processing payments using in-house capabilities), digital public infrastructure and other government-backed solutions and digital currencies. We also face competition from companies that provide alternatives to our services and other solutions. Our traditional competitors may have substantially greater financial and other resources than we have, may offer a wider range of programs, services, and payment capabilities than we offer or may use more effective advertising and marketing strategies to achieve broader brand recognition and merchant acceptance than we have. They may also introduce their own innovative programs, services and capabilities that adversely impact our growth. Certain of our competitors to our payment network operate three-party payments systems with direct connections to both merchants and consumers, potentially providing competitive advantages. If we continue to attract more regulatory scrutiny than these competitors because we operate a four-party system, or we are regulated because of the system we operate in a way in which our competitors are not, we could lose business to these competitors. See “Business - Competition” in Part I, Item 1. Certain of our competitors have developed alternative, e-commerce and/or mobile device payments systems, as well as physical store locations. A number of these competitors rely principally on technology to support their services that provides cost advantages, and as a result may benefit from lower costs than we do. Many of these competitors are also able to use existing payment networks without being subject to many of the associated costs. Moreover, these competitors also occupy various roles in the payments ecosystem that enable them to influence payment choice of other participants. With respect to government-backed solutions, including those involving DPI, government participation in structures could prevent us from entering into, or substantially restrict us from participating in, particular geographies. Any of these factors could put us at a competitive disadvantage. Our ability to compete may also be affected by regulatory and legislative initiatives, as well as the outcomes of litigation, competition-related regulatory proceedings and both central bank and legislative activity. If we are not able to differentiate ourselves from our competitors, drive value for our customers and/or effectively align our resources with our goals and objectives, we may not be able to compete effectively against these threats. Our failure to compete effectively against any of the foregoing threats could materially and adversely affect our overall business and results of operations.MASTERCARD 2025 FORM 10-K 31 PART I ITEM 1A. RISK FACTORSDisintermediation from stakeholders both within and outside of the payments value chain could harm our business. As the payments industry continues to develop and change, we face disintermediation and related risks, including the following: • Parties that process our transactions in certain countries (such as merchants and third-party payment processors) may try to eliminate our position as an intermediary in the payment process by switching transactions directly with issuers or processing transactions directly between issuers and acquirers.• Payments industry participants may develop their own products and services to support our switched transaction and payments offerings, forcing us to change our pricing or practices for our own offerings in order to compete. Participants may also withhold rights to data we use to power our solutions in order to support their own potential future solutions, potentially impacting the effectiveness of our solutions. In addition, governments may promote their own national or international payments platforms, potentially putting us at a competitive disadvantage in those markets, or requiring us to compete differently. Moreover, as central banks experiment with CBDCs, policies and design considerations that governments adopt could impact the extent of our role in facilitating CBDC-based payment transactions, potentially impacting the transactions that we may process over our network.• Payments industry participants continue to invest in and develop alternative capabilities, such as account-based payments, which could facilitate P2M transactions that compete with both our payment network and our additional payments capabilities. • Fintechs and technology companies could develop platforms or networks that disintermediate us from digital payments as well as develop products or services that compete with our customers and could diminish demand for our products and services. In addition, we face a heightened risk that data we share with these companies as part of our products and services could be used in a way that could put us at a competitive disadvantage. • Payments industry participants may merge, create joint ventures or form other business combinations that may strengthen their existing business services, leverage other business models to create a competitive edge over us or create new payment products and services that compete with our products and services. • Regulation may disintermediate issuers by enabling third-party providers opportunities to route payment transactions toward their own forms of payment by offering account information or payment initiation services directly to our product users. Such regulation may also provide these processors with the opportunity to commoditize the data that are included in the transactions they are servicing. Disintermediation of our customers’ business could diminish demand for our products and services. Our failure to compete effectively against any of the foregoing competitive threats could materially and adversely affect our overall business and results of operations. Continued intense pricing pressure may materially and adversely affect our overall business and results of operations.In order to increase transaction volumes, enter new markets and expand our products and services, we seek to enter into business agreements with customers through which we offer incentives, pricing discounts and other support that promote our products. In order to stay competitive, we may have to increase the amount of these incentives and pricing discounts so as to meet customer demand for better pricing arrangements and greater rebates and incentives. As a result, we may not be able to grow our volume and/or services to the extent necessary to compensate for the additional costs related to these increased incentives and pricing discounts. In addition, increased pressure on prices increases the importance of cost containment and productivity initiatives in areas other than those relating to customer incentives.In the future, we may not be able to enter into agreements with our customers if they require terms that we are unable or unwilling to offer, and we may be required to modify existing agreements in order to maintain relationships and compete with others in the industry. Some of our competitors are larger with greater financial resources and accordingly may be able to charge lower prices. In addition, to the extent that we offer discounts or incentives under such agreements, we will need to further increase transaction volumes or the amount of services provided in order to benefit from such agreements and to increase revenue and profit, and we may not be successful in doing so, particularly in the current regulatory environment. Our customers also may implement cost reduction initiatives that reduce or eliminate payment product marketing or increase requests for greater incentives or greater cost stability. In addition to decisions made by competitors and customers, we also face pressure from pricing regulation and litigation. Additionally, we face pricing pressure related to real-time account-based payment schemes. These pressures impact both domestic pricing (such as the increased use of schemes that offer increasingly lower or subsidized P2M pricing) and cross-border pricing (including from both competing schemes and global initiatives to lower the cost of cross-border payments to end users). Any of these factors could have a material adverse impact on our overall business and results of operations.32 MASTERCARD 2025 FORM 10-KPART I ITEM 1A. RISK FACTORSRapid and significant technological developments and changes could negatively impact our overall business and results of operations or limit our future growth. The payments industry is subject to rapid and significant technological changes, including new technologies and changes to existing technologies (such as digital assets and blockchain, AI, machine learning, privacy enhancement and cybersecurity). These changes could result in new technologies that may be superior to, or render obsolete, the technologies we currently use in our programs and services. They may also result in new and innovative payment methods, products and services. Additionally, there are a number of factors relating to technology change that could impact us. These include: the inability of third parties on which we rely for the development of and access to new technologies to keep pace with technological changes (including with regard to AI); potential action from third-party patent holders, including notices or inquiries threatening litigation against us or our customers for alleged patent infringement or demanding significant license fees; the scope of, as well as customer and merchant resistance to, industry-wide solutions and standards (such as those related to tokenization or other security technologies); any difficulty we may experience in attracting and retaining employees with technology expertise; and the need to invest resources for new technologies, which could lead to further additional expenses. Any of these developments could impact our ability to develop and adopt new technologies, as well as improve and keep pace with current technologies and reflect such technology in our payments offerings.Moreover, regulatory or government requirements could continue to require us to host and deliver certain products and services on-soil in certain markets. As a result, we may need to alter our technology and delivery model, potentially resulting in additional expenses and/or other operational impacts. Our future success will depend, in part, on our ability to anticipate, develop or adapt to technological changes and evolving industry standards. If we fail to sufficiently develop and adopt new technologies, or improve and keep pace with current technologies and reflect such technology in our payments offerings, our payments offerings could be negatively impacted and/or we could be put at a competitive disadvantage. This could impact our ability to compete with new technologies and products, as well as encourage customers that use our technology to enhance and deliver their payment-related products and services (including fintechs and technology companies) to use their own technology to compete against us. These developments could lead to a decline in the use of our technology, products and services, which could have a material adverse impact on our overall business and results of operations. Operating a real-time account-based payments network presents risks that could materially affect our business. U.K. regulators have designated Vocalink, our real-time account-based payments network platform, to be a “specified service provider” and regulators in other countries may in the future expand their regulatory oversight of real-time account-based payments systems in similar ways. Any prolonged service outage on this network could result in quickly escalating impacts, including potential intervention by the Bank of England and significant reputational risk to Vocalink and us. For a discussion of related regulatory risks, see our risk factor in “Risk Factors - Payments Industry Regulation” in this Part I, Item 1A. Furthermore, the complexity of this payment technology requires careful management to address information security vulnerabilities that are different from those faced on our payment network. Operational difficulties, such as the temporary unavailability of our services or products, or information security breaches on our real-time account-based payments network could cause a loss of business for these products and services, result in potential liability for us and adversely affect our reputation. Working with new customers and end users as we continue to expand our products and services can present operational and onboarding challenges, be costly and result in reputational damage if the new products or services do not perform as intended. The payments markets in which we compete are characterized by rapid technological change, new product introductions, evolving industry standards and changing customer and consumer needs. In order to remain competitive and meet the needs of the payments markets, we are continually involved in developing and implementing complex multi-rail solutions and diversifying our products and services. These efforts carry the risks associated with any diversification initiative, including cost overruns, delays in delivery and performance problems. These projects also carry risks associated with working with different types of customers (such as corporations that are not financial institutions, non-governmental organizations (NGOs) and new end users). These differences may present new operational challenges, such as enhanced infrastructure and monitoring for less regulated customers. Our failure to effectively design and deliver these products and services could make our other offerings less desirable to these customers, or put us at a competitive disadvantage. In addition, if there is a delay in the implementation of our products or services (which could include compliance obligations, such as AML and CFT, and licensing requirements for applicable products and services), if our products or services do not perform as anticipated, or we are unable to otherwise adequately anticipate risks related to new types of customers, we could face additional regulatory scrutiny, fines, sanctions or other penalties, which could materially and adversely affect our overall business and results of operations, as well as negatively impact our brand and reputation.MASTERCARD 2025 FORM 10-K 33PART I ITEM 1A. RISK FACTORSInformation Security and Operational Resilience Information security incidents or account data compromise events could disrupt our business, damage our reputation, increase our costs and cause losses. Information security risks for payments and technology companies such as ours have significantly increased in recent years in part because of the proliferation of new technologies (including AI), the use of the Internet and telecommunications technologies to conduct financial transactions, and the increased sophistication and activities of organized crime, hackers, “hacktivists”, terrorists, nation-states, state-sponsored actors and other external parties. These threats may derive from fraud or malice on the part of our employees or third parties, or may result from human error, software bugs, server malfunctions, software or hardware failure or other technological failure. These threats include cyber-attacks such as computer viruses, denial-of-service attacks, malicious code (including ransomware), social-engineering attacks (including phishing attacks) or information security breaches and could lead to the misappropriation or loss of consumer account and other information and identity theft. These types of threats have risen significantly due to a significant portion of our workforce working in a hybrid environment. The widespread use of AI, and its increasing capabilities, is enhancing the frequency and effectiveness of threat actors. Our operations rely on the secure transmission, storage and other processing of confidential, proprietary, sensitive and personal information and technology in our computer systems and networks, as well as the systems of our third-party providers. Our customers and other parties in the payments value chain, as well as account holders, rely on our digital technologies, computer systems, software and networks to conduct their operations. In addition, to access our products and services, our customers and account holders increasingly use personal smartphones, tablet PCs and other mobile devices that may be beyond our control. We, like other financial technology organizations, routinely are subject to cyber-threats and our technologies, systems and networks, as well as the systems of our third-party providers, have been subject to attempted cyber-attacks. Because of our position in the payments value chain, we believe that we are likely to continue to be a target of such threats and attacks. Geopolitical events and resulting government activity could also lead to information security threats and attacks by affected or sympathizing jurisdictions or other actors, which could put our information and assets at risk, as well as result in network disruption. In addition, the current or future listing of Recorded Future as an “undesirable” or “unreliable” entity by certain jurisdictions could further increase our risks in this area.To date, we have not experienced any material impact relating to cyber-attacks or other information security breaches. However, future attacks or breaches could lead to security breaches of the networks, systems (including third-party provider systems) or devices that our customers use to access our products and services, which in turn could result in the unauthorized disclosure, release, gathering, monitoring, misuse, loss or destruction of confidential, proprietary, sensitive and personal information (including account data information) or data security compromises. Such attacks or breaches could also cause service interruptions, malfunctions or other failures in the physical infrastructure, networks or operations systems that support our business and customers (such as the lack of availability of our services), as well as the operations of our customers or other third parties. In addition, they could lead to damage to our reputation with our customers, other stakeholders and the broader payments ecosystem, additional costs to us (such as repairing systems, adding new personnel or protection technologies or compliance costs), regulatory penalties, financial losses to both us and our customers and partners and the loss of customers and business opportunities. These consequences could be further pronounced in jurisdictions in which we are deemed critical national infrastructure. If such attacks are not detected immediately, or disclosed as required by law, their effect could be compounded. In addition to information security risks for our systems and networks, we also routinely encounter account data compromise events involving merchants and third-party payment processors that process, store or transmit payment transaction data, which affect millions of Mastercard, Visa, Discover, American Express and other types of account holders. Further events of this type may subject us to reputational damage and/or lawsuits involving payment products carrying our brands. Damage to our reputation or brands resulting from an account data breach of our systems and networks or those of our customers, merchants and other third parties could decrease the use and acceptance of our products and services. Such events could also slow or reverse the trend toward electronic payments. In addition to reputational concerns, the cumulative impact of multiple account data compromise events could increase the impact of the fraud resulting from such events by, among other things, making it more difficult to identify consumers. Moreover, while most of the lawsuits resulting from account data breaches do not involve direct claims against us and while we have releases from many issuers and acquirers, we could still face damage claims, which, if upheld, could materially and adversely affect our results of operations. While we offer security solutions that are designed to prevent, detect and respond to fraud and cyber-attacks, there can be no assurance that such security solutions will perform as expected or address all possible security threats. Real or perceived defects, failures, errors or vulnerabilities in our security solutions could adversely impact our reputation, customer confidence in our solutions and our business and may subject us to litigation, governmental audits and investigation or other liabilities. Such events could have a material adverse impact on our transaction volumes, results of operations and prospects for future growth, or increase our costs by leading to additional regulatory burdens being imposed on us.34 MASTERCARD 2025 FORM 10-KPART I ITEM 1A. RISK FACTORSIn addition, companies have generally experienced in recent years an increase in fraudulent activity and cyber-attacks, which has been further exacerbated by the increased use of AI. Criminals are using increasingly sophisticated methods to capture consumer personal information to engage in illegal activities such as counterfeiting or other fraud and may see their effectiveness enhanced by the use of AI. As outsourcing and specialization become common in the payments industry, there are more third parties involved in processing transactions using our payment products. We continue to take measures to make card and digital payments more secure. However, increased fraud levels and cyber-attacks involving our products, services and/or network, or misconduct or negligence by third parties switching or otherwise servicing our products and services could damage our reputation and reduce the use and acceptance of our products and services and/or increase our compliance costs. Further, such occurrences have resulted in and could further result in legislative or regulatory intervention, which could lead to enhanced security requirements and liabilities. See “Risk Factors - Privacy, Data, AI and Information Security” in this Part I, Item 1A for more detail concerning related legal risks and obligations. Despite various mitigation efforts that we undertake, there can be no assurance that we, or third parties with which we work, will not suffer material breaches and resulting losses in the future. While we maintain insurance coverage, such coverage may not be adequate to protect us from such losses as well as any liabilities or damages with respect to claims alleging compromises of our confidential, proprietary, sensitive or personal information or our technologies, systems or networks. In addition, we cannot be sure that our existing insurance coverage will continue to be available on acceptable terms or at all, or that our insurers will not deny coverage as to any future claim. Our risk and exposure to these matters remain heightened due to, among other things, the evolving nature of these threats, our prominent role in the global payments ecosystem, our continued implementation of our strategic priorities, our extensive use of third-party vendors and potential vulnerabilities from previous and future acquisitions, strategic investments or related opportunities. As a result, we remain focused on the continued development and enhancement of our controls, processes and practices designed to protect our computer systems, software, data and networks from attack, damage or unauthorized access. As cyber-threats continue to evolve, we may be required to expend significant additional resources to continue to modify or enhance our protective measures or to investigate and remediate any information security vulnerabilities. Any of the risks described above could materially adversely affect our overall business and results of operations.Service disruptions that cause us to be unable to process transactions or service our customers could reduce our operational resilience and materially affect our overall business and results of operations.Our transaction switching systems and other offerings may experience interruptions as a result of technology malfunctions, network degradation, updates and migrations to new technology and platforms, supply-chain attacks, fire, floods, earthquakes, weather events, power outages, telecommunications disruptions, terrorism, workplace violence, accidents or other catastrophic events (including those related to climate change). We have experienced in limited instances, and may continue to experience, some types of these interruptions. Our visibility in the global payments industry may also put us at greater risk of attack by terrorists, activists, or hackers who intend to disrupt our facilities, networks and/or systems. Inadequate infrastructure in lesser-developed markets could also result in service disruptions, which could impact our ability to do business in those markets. Additionally, we rely on third-party service providers for the timely transmission of information across our global data network. If one of our service providers fails to provide the communications capacity or services we require, as a result of natural disasters, operational disruptions, cybersecurity-related disruptions or failures, terrorism, hacking or any other reason, the failure could interrupt our services. Although we maintain an enterprise resiliency program to analyze risk, assess potential impacts, and develop effective response strategies, we cannot ensure that our business would be immune to these risks. Due to the intrinsic importance of our switching systems to our business, any interruption or degradation could adversely affect the perception of the reliability of products carrying our brands and materially adversely affect our overall business and our results of operations.Stakeholder Relationships Losing a significant portion of business from one or more of our largest customers could lead to significant revenue decreases in the longer term, which could have a material adverse impact on our business and our results of operations. Many of our customer relationships are not exclusive. Our customers can reassess their future commitments to us subject to the terms of our contracts, and they separately may develop their own services that compete with ours. Our business agreements with these customers may not ultimately reduce the risk (inherent in our business) that customers may terminate their relationships with us in favor of relationships with our competitors, or for other reasons, or might not meet their contractual obligations to us. In addition, a significant portion of our revenue is concentrated among our five largest customers. Loss of business from any of our large customers could have a material adverse impact on our overall business and results of operations.MASTERCARD 2025 FORM 10-K 35 PART I ITEM 1A. RISK FACTORSExclusive/near exclusive relationships certain customers have with our competitors may have a material adverse impact on our business. While we have exclusive, or nearly-exclusive, relationships with certain of our customers to issue payment products, other customers have similar exclusive, or nearly-exclusive, relationships with our competitors. These relationships may make it difficult or cost-prohibitive for us to do significant amounts of business with these customers to increase our revenues. In addition, these customers may be more successful and may grow faster than the customers that primarily issue our payment products, which could put us at a competitive disadvantage. Furthermore, we earn substantial revenue from customers with nearly-exclusive relationships with our competitors. Such relationships could provide advantages to the customers to shift business from us to the competitors with which they are principally aligned. A significant loss of our existing revenue or transaction volumes from these customers could have a material adverse impact on our business. Consolidation amongst our customers could materially and adversely affect our overall business and results of operations.The industries in which our customers participate have undergone substantial, accelerated consolidation in the past. These consolidations have included customers with a substantial Mastercard portfolio being acquired by institutions with a strong relationship with a competitor. Potential future consolidation could occur as a result of bank failures, similar to those that occurred in recent years. If significant consolidation among customers were to continue, it could result in the substantial loss of business for us, which could have a material adverse impact on our business and prospects. In addition, one or more of our customers could seek to merge with, or acquire, one of our competitors, and any such transaction could also have a material adverse impact on our overall business. Consolidation could also produce a smaller number of large customers, which could increase their bargaining power and lead to lower prices and/or more favorable terms for our customers. These developments could materially and adversely affect our results of operations.Our business significantly depends on the continued success and competitiveness of our issuing and acquiring customers and, in many jurisdictions, their ability to effectively manage or help manage our brands. While we work directly with many stakeholders in the payments system (including merchants, governments, fintechs and large digital companies and other technology companies), we are, and will continue to be, significantly dependent on our relationships with our issuers and acquirers and their respective relationships with account holders and merchants to support our programs and services. Furthermore, we depend on our issuing partners and acquirers to continue to innovate to maintain competitiveness in the market. We do not issue cards or other payment devices, extend credit to account holders or determine the interest rates or other fees charged to account holders. Each issuer determines these and most other competitive payment program features. In addition, we do not establish the discount rate that merchants are charged for acceptance, which is the responsibility of our acquiring customers. As a result, our business significantly depends on the continued success and competitiveness of our issuing and acquiring customers and the strength of our relationships with them. In turn, our customers’ success depends on a variety of factors over which we have little or no influence, including economic conditions in global financial markets or their disintermediation by competitors or emerging technologies, as well as regulation. If our customers become financially unstable, we may lose revenue or we may be exposed to settlement risk. See “Risk Factors - Settlement and Third-Party Obligations” in this Part I, Item 1A with respect to how we guarantee certain third-party obligations.We switch a high percentage of domestic (or in-country) transactions conducted using cards with our brands. However, there are several jurisdictions in which domestic transactions are switched by our customers or other processors. Because we do not provide domestic switching services in these countries or have direct relationships with account holders, we depend on our close working relationships with our customers to effectively manage our brands, and the perception of our payments system, among consumers in these countries. We also rely on these customers to help manage our brands and perception among regulators and merchants in these countries, alongside our own relationships with them. From time to time, our customers may take actions that we do not believe to be in the best interests of our payments system overall, which may materially and adversely impact our business.Merchants’ continued focus on acceptance costs may lead to additional litigation and regulatory proceedings and/or increase our incentive program costs, which could materially and adversely affect our profitability. Merchants are important constituents in our payments system. We rely on both our relationships with them, as well as their relationships with our issuer and acquirer customers, to continue to expand the acceptance of our products and services. We also work with merchants to help them enable new sales channels, create better purchase experiences, improve efficiencies, increase revenues and fight fraud. In the retail industry, we believe a set of larger merchants with increasingly global scope and influence are having a significant impact on all participants in the global payments industry, including Mastercard. Some large merchants have supported the legal, regulatory and legislative challenges to interchange fees that Mastercard has been defending, including the U.S. merchant litigations. Some merchants are increasingly asking regulators to review and potentially regulate our own network fees, in addition to interchange. See “Risk Factors – Payments Industry Regulation” in this Part I, Item 1A. The continued focus of merchants on the costs of accepting various forms of payment (including digital) may lead to additional litigation and regulatory proceedings.36 MASTERCARD 2025 FORM 10-K PART I ITEM 1A. RISK FACTORSCertain larger merchants are also able to negotiate incentives from us and pricing concessions from our issuer and acquirer customers as a condition of accepting our products. We also make payments to certain merchants to incentivize them to create co-branded payment programs with us. As merchants consolidate and become even larger, we may have to increase the amount of incentives that we provide to certain merchants, which could materially and adversely affect our results of operations. Competitive and regulatory pressures on pricing could make it difficult to offset the costs of these incentives. Additionally, if the rate of merchant acceptance growth slows, our business could suffer. Our work with governments exposes us to risks that could have a material impact on our business and results of operations.As we increase our work with national, state and local governments (both indirectly through financial institutions, system integrators and other third party partners and with them directly as our customers), we may face various risks inherent in associating or contracting directly with governments. These risks include, but are not limited to, the following:• Governmental entities typically fund projects through appropriated monies. Changes in governmental priorities or other political developments, including disruptions in governmental operations, could impact approved funding and result in scope changes or termination of the arrangements or contracts we or financial institutions enter into with respect to our products and services.• Our work with governments is heavily regulated, subjecting us to additional potential exposure under U.S. and international anti-corruption laws (including the U.S. Foreign Corrupt Practices Act and the U.K. Bribery Act), as well as compliance with various procurement and other laws, regulations, standards and contract terms. Any violation and subsequent judgment or settlement related to the above could subject us to substantial monetary penalties and damages and have a significant reputational impact. Moreover, as a government contractor, we are subject to a government’s right to conduct audits and investigations into both our contract performance and our compliance with applicable laws, regulations and contract terms. Any adverse finding could subject us to civil or criminal penalties, sanctions, or suspension or disbarment. • Working or contracting with governments (either directly or via our financial institution customers, system integrators or other third party partners) can subject us to heightened reputational risks, including extensive scrutiny and publicity, as well as a potential association with the policies of those governments. Any negative publicity or negative association with a government entity, regardless of its accuracy, may adversely affect our reputation. In addition, threat intelligence gathering services provided to governments through our acquisition of Recorded Future could negatively impact how we are viewed by other jurisdictions.Any of the above issues could have a material or adverse impact to our overall business and/or results of operations. Global Economic and Political Environment Global economic, political, financial and societal events or conditions could result in a material and adverse impact on our overall business and results of operations. Adverse economic trends. Adverse economic trends in key countries in which we operate may adversely affect our financial performance. Such impact may include, but is not limited to, the following: • Customers mitigating their economic exposure by limiting the issuance of new Mastercard products and requesting greater incentive or greater cost stability from us • Consumers and businesses reducing spending, which could impact domestic and cross-border spend • Debt limit and budgetary discussions in the U.S. have affected, and could further affect, the U.S. credit rating, impacting consumer confidence and spending• Uncertain global trade policies and related government actions (including those related to tariffs), which could have an adverse impact on our business (including with respect to consumer and business spending) and relationships with stakeholders• Government intervention (including the effect of laws, regulations and/or government investments on or in our financial institution customers), as well as uncertainty due to changing political regimes in executive, legislative and/or judicial branches of government, that may have potential negative effects on our business and our relationships with customers or otherwise alter their strategic direction away from our products • Tightening of credit availability that could impact the ability of participating financial institutions to lend to us under the terms of our credit facility Cross-border transactions. We switch substantially all cross-border transactions using Mastercard, Maestro and Cirrus-branded cards and generate a significant amount of revenue from cross-border volume fees and fees related to switched transactions. Revenue from switching cross-border and currency conversion transactions for our customers fluctuates with the levels and destinations of cross-border travel and our customers’ need for transactions to be converted into their base currency. Cross-border activity has been, and may continue to be, adversely affected by world geopolitical, economic, health, weather and other conditions. These include or have included:MASTERCARD 2025 FORM 10-K 37 PART I ITEM 1A. RISK FACTORS• Global pandemics (and related post-pandemic global economic impacts) and potential separate outbreaks of flu, viruses and other diseases (any of which could result in future epidemics or pandemics) • Current and potential future geopolitical conflicts, as well as expansion into regional or global conflicts, and the resulting impacts to our business • The threat of terrorism and major environmental and extreme weather events (including those related to climate change) The impact of and uncertainty that could result from any of these events or factors could ultimately decrease cross-border activity. Additionally, any regulation of interregional interchange fees could also negatively impact our cross-border activity (for example, the targets announced by the G20 Financial Stability Board related to cross-border payments). In each case, decreased cross-border activity could decrease the revenue we receive. Russia’s invasion of Ukraine. In addition to the cross-border impacts described above, our compliance with sanctions and our decision to suspend our business operations in Russia has led, and could further lead, to other legal ramifications and operational challenges, including fines, the nationalization of our subsidiary and any resulting impacts, and/or lawsuits. Standards. Our operations as a global payments network rely in part on global interoperable standards to help facilitate payments. To the extent geopolitical events or government intervention result in jurisdictions no longer participating in the creation or adoption of these standards, or the creation of competing standards, our products and services could be negatively impacted. Any of these developments potentially could have a material adverse impact on our overall business and results of operations.Adverse currency fluctuations and foreign exchange controls could negatively impact our results of operations.During 2025, approximately 71% of our revenue was generated from activities outside the U.S., which could be transacted in a non-functional currency. Impacts from currency fluctuations are included in our net income. Our risk management activities provide protection with respect to adverse changes in the value of only a limited number of currencies and are based on estimates of exposures to these currencies.In addition, the revenue we generate in entities with non-U.S. dollar functional currencies is subject to unpredictable currency fluctuations, including where the values of other currencies change relative to the U.S. dollar. If the U.S. dollar strengthens compared to currencies in which we generate revenue, this revenue may be translated at a materially lower amount than expected. Furthermore, we may become subject to exchange control regulations that might restrict or prohibit the conversion into U.S. dollars of our other revenue currencies and financial assets. The occurrence of currency fluctuations or exchange controls could have a material adverse impact on our results of operations. Brand, Reputational Impact and Environmental, Social and Governance Negative brand perception may materially and adversely affect our overall business. Our brands and their attributes are key assets of our business. The ability to attract consumers to our branded products and retain them depends upon the external perception of us and our industry:• Our business may be affected by actions taken by our customers, merchants or other organizations that impact the perception of our brands or the payments industry in general. From time to time, our customers may take actions that we do not believe to be in the best interests of our brands, such as creditor practices that may be viewed as “predatory”. Moreover, adverse developments with respect to our industry or the industries of our customers or other companies and organizations that use our products and services (including certain legally permissible but high-risk merchant categories, such as adult content, firearms, alcohol and tobacco) may also, by association, impair our reputation, or result in greater public, regulatory or legislative scrutiny, as well as potential litigation. Additionally, we or our customers could take (or be perceived to take) actions related to these industries, which could be viewed negatively and result in threats or other retaliatory actions. We may also face similar scrutiny to the extent that we are unable to detect and/or prevent illegal activities using our payment products or otherwise occurring over our network.• Under some circumstances, our use of social media, or the use of social media by others as a channel for criticism or other purposes, could also cause rapid, widespread reputational harm to our brands by disseminating rapidly and globally actual or perceived damaging information about us, our products or merchants or other end users who utilize our products. • We are headquartered in the U.S. As such, a negative perception of the U.S. could impact the perception of our company, which could adversely affect our business. Any of the above issues could have a material and adverse effect on our overall business.38 MASTERCARD 2025 FORM 10-K PART I ITEM 1A. RISK FACTORSLack of visibility of our brand in our products and services, or in the products and services of our partners who use our technology, may materially and adversely affect our business. As more players enter the global payments ecosystem, the layers between our brand and consumers and merchants increase. We often partner with other consumer brands on payment solutions, including large digital companies and other technology companies who are our customers and use our networks to build their own acceptance brands. In some cases, our brand may not be featured in the payment solution or may be secondary to other brands. Additionally, as part of our relationships with some issuers, our payment brand is only included on the back of the card. As a result, our brand may either be invisible to consumers or may not be the primary brand with which consumers associate the payment experience. This brand invisibility, or any consumer confusion as to our role in the consumer payment experience, could decrease the value of our brand, which could adversely affect our business. Environmental, social and governance matters and related stakeholder reaction may impact our reputation, increase legal exposure and/or have other business impacts, which could adversely affect our overall business and/or results of operations.Our brand and reputation are associated with the ways in which we impact environmental, social and governance matters. These matters include initiatives to reduce greenhouse gas emissions, help everyone participate in the digital economy and create a workplace where everyone has the opportunity to succeed. Consumers, investors, employees and other stakeholders are increasingly focused on these impacts. To the extent any of our disclosures, public statements and metrics about these matters are subsequently viewed as inaccurate or unlawful, or we are unable to execute on these initiatives, we may be viewed negatively by stakeholders concerned about these matters. Moreover, in recent years, we have received negative feedback from stakeholders on the adequacy of our environmental, social and governance initiatives. We have also increasingly been receiving negative feedback from anti-environmental, social and governance stakeholders in opposition to such initiatives. Stakeholders from both sides of this issue may continue to view us negatively and take public action against us to the extent that we do not satisfy their conflicting views or expectations.In addition, various jurisdictions are increasingly adopting or considering laws, regulations and oversight expectations that have or would impact us pertaining to environmental, social and governance matters, including required corporate reporting and disclosures. These requirements have resulted in, and are likely to continue to result in, increased compliance costs for our business and supply chain, which may increase our operating costs. Moreover, as governments, investors and other stakeholders face pressure to address climate change and other environmental, social and governance matters, these stakeholders may express new expectations and focus investments in ways that could cause significant shifts in commerce and consumption behaviors. The impact of and uncertainty that could result from such shifts could ultimately impact our business. Any of the above issues could have a material or adverse impact to our overall business and/or results of operations. Talent and Culture We may not be able to attract and retain a highly qualified workforce, or maintain our corporate culture, which could harm our overall business and results of operations.Our performance largely depends on the skills, capabilities and motivation of our employees (including our people leaders), as well as the environment we create for them to enable them to perform their jobs effectively. The market for specialized skill-sets remains highly competitive, particularly in emerging technologies. To the extent we are unable to differentiate our value proposition in the market, effectively develop leaders and build robust succession pipelines, it could impact our ability to deliver for our customers. Failure to attract, hire, develop, motivate and retain highly qualified talent could leave us vulnerable to not identifying and/or acting on emerging customer or market opportunities. In addition, broader trends such as escalations in global conflict and a rise in mental health needs are impacting the well-being of our people. To the extent we are unable to communicate effectively on these issues and provide support to our employees, we could experience a significant impact on our business, reputation and culture. Further, changes in and enforcement of immigration and work permit laws and visa regulations have made it difficult for employees to work in, or transfer among, jurisdictions where we operate, potentially impairing our ability to attract and retain talent. We also face increasing regulation with respect to new pay and benefits transparency requirements, which could subject us to liability or reputational harm if we do not adhere to these requirements in a timely manner. As our workforce composition continues to change, our employees may have different expectations with respect to flexibility and well-being support. Additionally, employees may require different levels of support as to re-skilling and upskilling in order to adapt to advancements in our industry and changes in technology. Further, certain current and prospective employees may have expectations as to positions we take on environmental, social and governance matters. To the extent we are unable to effectively meet and/or balance these different expectations and needs, we could experience a negative impact to the quality of our corporate culture, the productivity of our workforce and our ability to attract and retain talent. MASTERCARD 2025 FORM 10-K 39 PART I ITEM 1A. RISK FACTORSWe rely on our people leaders to display integrity and decency, as role models for the Mastercard Way. To the extent our leaders behave in a manner that is not consistent with these values, we could experience significant impact to our brand and reputation, as well as to our corporate culture. Any one or more of the above could harm our overall business and results of operations. Acquisitions and Strategic Investments Our efforts to enter into acquisitions, strategic investments or new businesses could be impacted or prevented by regulatory scrutiny and could otherwise result in issues that could disrupt our business and harm our results of operations or reputation. We continue to evaluate our strategic acquisitions of, and investments in, complementary businesses, products or technologies. As we do so, we face increasing regulatory scrutiny with respect to antitrust, national security and other considerations that could impact these efforts. We also face competition for acquisition targets due to the nature of the market for technology companies. As a result, we could be prevented from successfully completing such acquisitions in the future. If we are not successful in these efforts, we could lose strategic opportunities that are dependent, in part, on inorganic growth.To the extent we do make these acquisitions, we may not be able to successfully partner with or integrate them, despite original intentions and focused efforts. Such an integration also may divert management’s time and resources from our core business and disrupt our operations. Moreover, we have spent, and may continue to spend, time and money on acquisitions or projects that do not sufficiently meet our expectations (either strategically or financially), which has resulted (and may in the future result) in divesting from or otherwise exiting these investments or businesses. Additionally, to the extent we pay the purchase price of any acquisition in cash, it would reduce our cash reserves available to us for other uses, and to the extent the purchase price is paid with our stock, it could be dilutive to our stockholders. Furthermore, we have inherited and may in the future inherit litigation risk which has or may increase our post-acquisition costs of operations.Any acquisition, investment or entry into a new business could subject us to new regulations or legal requirements, both directly as a result of the new business as well as in the other existing parts of our business, with which we would need to comply. This compliance could increase our costs, and we could be subject to liability or reputational harm to the extent we cannot meet any such compliance requirements. Additionally, targets that we acquire have had, and may in the future have, data practices that do not initially conform to our privacy, data protection and information security standards and data governance model, which could lead to regulatory scrutiny and reputational harm. These targets also have resulted in, and may in the future lead to, information security vulnerabilities for us. Settlement and Third-Party Obligations Our role as guarantor, as well as other contractual obligations and discretionary actions, expose us to risk of loss or illiquidity.We are a guarantor of certain third-party obligations, including those of certain of our customers and service providers. In this capacity, we are exposed to credit and liquidity risks. We may incur significant losses in connection with transaction settlements if a customer fails to fund its daily settlement obligations due to technical problems, liquidity shortfalls, insolvency or other reasons. The occurrence of bank failures, such as those seen in recent years, could increase the potential for such losses. Concurrent settlement failures of more than one of our larger customers or of several smaller customers either on a given day or over a condensed period of time may exceed our available resources. In addition, Brazil recently enacted regulation requiring PSOs in Brazil (including Mastercard and Visa) to extend their responsibility for the financial and settlement integrity of payments to merchants. As we continue to be subject to increased regulation across the globe, more jurisdictions may enact similar approaches from time to time. Any such changes could increase complexity and may impact our cost of operations and financial condition.Certain non-guaranteed transactions, as well as chargebacks to acquirers in the event of acquirer default, could result in elevated brand risk and the potential for financial loss. We have significant contractual indemnification obligations with certain customers, which could be triggered depending on the circumstances. Any of the above issues or events could have a material or adverse impact to our overall business and/or results of operations.40 MASTERCARD 2025 FORM 10-K PART I ITEM 1A. RISK FACTORSClass A Common Stock and Governance Structure Provisions in our organizational documents and Delaware law could be considered anti-takeover provisions and have an impact on change-in-control. Provisions contained in our amended and restated certificate of incorporation and bylaws and Delaware law could be considered anti-takeover provisions, including provisions that could delay or prevent entirely a merger or acquisition that our stockholders consider favorable. These provisions may also discourage acquisition proposals or have the effect of delaying or preventing entirely a change in control, which could harm our stock price. For example, subject to limited exceptions, our amended and restated certificate of incorporation prohibits any person from beneficially owning more than 15% of any of the Class A common stock or any other class or series of our stock with general voting power, or more than 15% of our total voting power. In addition: • our stockholders are not entitled to the right to cumulate votes in the election of directors • our stockholders are not entitled to act by written consent • any representative of a Mastercard or Mastercard Foundation competitor is disqualified from service on our board of directors Mastercard Foundation’s substantial stock ownership, and restrictions on its sales, may impact corporate actions or acquisition proposals favorable to, or favored by, the other public stockholders.Mastercard Foundation owns shares of our Class A common stock representing greater than 5% of our general voting power. Historically, Mastercard Foundation had been restricted from selling or otherwise transferring its shares of Class A common stock prior to May 1, 2027, except to the extent necessary to satisfy its charitable disbursement requirements, for which purpose earlier sales were permitted and had occurred. In July 2023, pursuant to an application in consultation with Mastercard, Mastercard Foundation received court approval to advance that date to January 1, 2024. As a result, Mastercard Foundation is now permitted to sell all or part of its remaining shares, subject to certain conditions. In March 2024, Mastercard Foundation began selling shares pursuant to an orderly and structured plan to diversify its Mastercard shares over a seven-year period, while committing to remain a long-term Mastercard stockholder and retaining a significant holding of Mastercard shares in its portfolio. The directors of Mastercard Foundation are required to be independent of us and our customers. The ownership of Class A common stock by Mastercard Foundation, together with the seven-year diversification plan, could discourage or make more difficult acquisition proposals favored by other holders of the Class A common stock. In addition, because Mastercard Foundation intends to sell its shares over an extended period of time, it may not have the same interest in short or medium-term movements in our stock price as, or incentive to approve a corporate action that may be favorable to, our other stockholders.

Item 7 · Management's Discussion & Analysis

+196 paragraphs198 paragraphs ~196 changed

FY 2024-12-31 (earlier)

ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS Item 7. Management’s discussion and analysis of financial condition and results of operationsThe following discussion should be read in conjunction with the consolidated financial statements and notes of Mastercard Incorporated and its consolidated subsidiaries, including Mastercard International Incorporated (together, “Mastercard” or the “Company”), included elsewhere in this Report. Percentage changes provided throughout “Management’s Discussion and Analysis of Financial Condition and Results of Operations” were calculated on amounts rounded to the nearest thousand. For discussion related to the results of operations for the year ended December 31, 2023 compared to the year ended December 31, 2022, please see Part II, Item 7 of our Annual Report on Form 10-K for the year ended December 31, 2023.Business OverviewMastercard is a technology company in the global payments industry. We connect consumers, financial institutions, merchants, governments, digital partners, businesses and other organizations worldwide by enabling electronic payments and making those payment transactions secure, simple, smart and accessible. We make payments easier and more efficient by providing a wide range of payment solutions and services using our family of well-known and trusted brands, including Mastercard®, Maestro® and Cirrus®. We operate a payments network that provides choice and flexibility for consumers, merchants and our customers. Through our unique and proprietary global payments network, we switch (authorize, clear and settle) payment transactions. We have additional payments capabilities that include automated clearing house (“ACH”) transactions (both batch and real-time account-based payments). Using these capabilities, we offer consumer and commercial payment products, capture new payment flows and provide services and solutions. These services and solutions include, among others, security solutions, consumer acquisition and engagement services, and business and market insights, all of which draw on our principled and responsible use of secure data. Our capabilities strengthen, reinforce and complement each other and are fundamentally interdependent. For our global payments network, our franchise model sets the standards and ground-rules that balance value and risk across all stakeholders and allows for interoperability among them. We employ a multi-layered approach to help protect the global payments ecosystem in which we operate. Mastercard is not a financial institution. We do not issue cards, extend credit, determine or receive revenue from interest rates or other fees charged to account holders by issuers (the account holders’ financial institutions), or establish the rates charged by acquirers (the merchants’ financial institutions) in connection with merchants’ acceptance of our products. In most cases, account holder relationships belong to, and are managed by, our customers.Financial Results Overview The following table provides a summary of our key GAAP operating results, as reported:Years ended December 31, 2024Increase/ (Decrease)2023Increase/ (Decrease)2024 2023 2022(in millions, except percentages and per share data)Net revenue $ 28,167 $ 25,098 $ 22,237 12% 13% Operating expenses $ 12,585 $ 11,090 $ 9,973 13% 11% Operating income $ 15,582 $ 14,008 $ 12,264 11% 14% Operating margin 55.3 % 55.8 % 55.2 % (0.5) ppt 0.7 ppt Income tax expense $ 2,380 $ 2,444 $ 1,802 (3)% 36% Effective income tax rate 15.6 % 17.9 % 15.4 % (2.3) ppt 2.6 ppt Net income $ 12,874 $ 11,195 $ 9,930 15% 13% Diluted earnings per share $ 13.89 $ 11.83 $ 10.22 17% 16% Diluted weighted-average shares outstanding 927 946 971 (2)% (3)%Note: Table may not sum due to rounding.MASTERCARD 2024 FORM 10-K 46PART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONSThe following table provides a summary of our key non-GAAP operating results 1 , adjusted to exclude the impact of gains and losses on our equity investments, Special Items (which represent litigation judgments and settlements and certain one-time items) and the related tax impacts on our non-GAAP adjustments. In addition, we have presented growth rates, adjusted for the impact of currency: Years ended December 31, 2024Increase/(Decrease)2023Increase/(Decrease)2024 2023 2022 As adjusted Currency-neutral As adjusted Currency-neutral ($ in millions, except per share data) Adjusted net revenue 2 $ 28,167 $ 25,098 $ 22,200 12% 13% 13% 13% Adjusted operating expenses $ 11,714 $ 10,551 $ 9,549 11% 11% 10% 11% Adjusted operating margin 58.4 % 58.0 % 57.0 % 0.4 ppt 0.7 ppt 1.0 ppt 0.9 ppt Adjusted effective income tax rate 16.2 % 18.5 % 15.7 % (2.3) ppt (2.2) ppt 2.8 ppt 2.7 ppt Adjusted net income $ 13,541 $ 11,607 $ 10,342 17% 18% 12% 12% Adjusted diluted earnings per share $ 14.60 $ 12.26 $ 10.65 19% 21% 15% 15%Note: Table may not sum due to rounding. 1 See “Non-GAAP Financial Information” for further information on our non-GAAP adjustments and the reconciliation to GAAP reported amounts.2 For the years ended December 31, 2024 and 2023, the amounts presented are GAAP reported amounts, not adjusted. Key highlights for 2024 as compared to 2023 were as follows:Net revenueGAAP Non-GAAP (currency-neutral) Both the as-reported and currency-neutral net revenue increase was attributable to growth in our payment network and value-added services and solutions. up 12% up 13%Operating expenses Adjusted operating expensesGAAP Non-GAAP (currency-neutral) The as-reported operating expenses increase was primarily due to higher general and administrative expenses and litigation provisions. The as-adjusted operating expenses increase was primarily due to higher general and administrative expenses. up 13% up 11%Effective income tax rate Adjusted effective income tax rateGAAP Non-GAAP Both the as-reported and as-adjusted effective income tax rates were lower than the prior year rates primarily due to the establishment of a valuation allowance in 2023, partially offset by our ability in 2023 to claim more U.S. foreign tax credits generated in 2022 and 2023. Additionally, a change in our geographic mix of earnings in 2024 contributed to the lower effective income tax rate compared to the prior year. 15.6% 16.2% down 2.3 ppt down 2.3 ppt Other 2024 financial highlights were as follows: • We generated net cash flows from operations of $14.8 billion. • We completed the acquisitions of businesses for total consideration of $2.8 billion. • We repurchased 23.0 million shares of our common stock for $11.0 billion and paid dividends of $2.4 billion. • We completed debt offerings for an aggregate principal amount of $4.0 billion. 47 MASTERCARD 2024 FORM 10-KPART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS Non-GAAP Financial InformationNon-GAAP financial information is defined as a numerical measure of a company’s performance that excludes or includes amounts so as to be different than the most comparable measure calculated and presented in accordance with accounting principles generally accepted in the United States (“GAAP”). As described more fully below, our non-GAAP financial measures exclude the impact of gains and losses on our equity investments, which includes mark-to-market fair value adjustments, impairments and gains and losses upon disposition, as well as the related tax impacts. Our non-GAAP financial measures also exclude the impact of special items, where applicable, which represent litigation judgments and settlements and certain one-time items, as well as the related tax impacts (“Special Items”). We also present growth rates adjusted for the impact of currency, which is a non-GAAP financial measure. We believe that the non-GAAP financial measures presented facilitate an understanding of our operating performance and provide a meaningful comparison of our results between periods. We use non-GAAP financial measures to, among other things, evaluate our ongoing operations in relation to historical results, for internal planning and forecasting purposes and in the calculation of performance-based compensation. We excluded these items because management evaluates the underlying operations and performance of the Company separately from these recurring and nonrecurring items. Net revenue, operating expenses, operating margin, other income (expense), effective income tax rate, net income and diluted earnings per share adjusted for the impact of gains and losses on our equity investments, Special Items and/or the impact of currency should not be relied upon as substitutes for measures calculated in accordance with GAAP.Our non-GAAP financial measures for the comparable periods exclude the impact of the following: Gains and Losses on Equity Investments• During 2024, 2023 and 2022, we recorded net pre-tax losses of $29 million ($25 million after tax, or $0.03 per diluted share), $61 million ($36 million after tax, or $0.04 per diluted share) and $145 million ($126 million after tax, or $0.13 per diluted share), respectively. These net losses were primarily related to unrealized fair market value adjustments on marketable and nonmarketable equity securities.Special Items Litigation provisions• During 2024, we recorded pre-tax charges of $680 million ($495 million after tax, or $0.53 per diluted share), primarily as a result of a legal provision associated with the U.K. consumer class action settlement, settlements with a number of U.K. merchants and a change in estimate related to the claims of merchants who opted out of the U.S. merchant class litigation. • During 2023, we recorded pre-tax charges of $539 million ($376 million after tax, or $0.40 per diluted share), primarily as a result of changes in the estimate related to the claims of merchants who opted out of the U.S. merchant class litigation and settlements with a number of U.K. and Pan-European merchants.• During 2022, we recorded pre-tax charges of $356 million ($263 million after tax, or $0.27 per diluted share), primarily as a result of settlements (both final and agreements in principle) with a number of U.K. merchants and a change in estimate related to the claims of merchants who opted out of the U.S. merchant class litigation.Restructuring charge• During 2024, we recorded a restructuring charge of $190 million ($147 million after tax, or $0.16 per diluted share). The restructuring action is intended to streamline our organization, delivering efficiencies to enable reinvestment in our business to support the realization of our long-term growth opportunities. Russia-related impacts • During 2022, we recorded a net pre-tax charge of $30 million ($24 million after tax, or $0.02 per diluted share), directly related to imposed sanctions and the suspension of our business operations in Russia. The net charge was comprised of general and administrative expenses of $67 million, primarily related to incremental employee-related costs and reserves on uncollectible balances with certain sanctioned customers. This charge was offset by net benefits of $37 million in net revenue, primarily related to a reduction in payment network rebates and incentives liabilities as a result of lower estimates of customer performance for certain customer business agreements due to the suspension of our business operations in Russia. See Note 7 (Investments) and Note 21 (Legal and Regulatory Proceedings) to the consolidated financial statements included in Part II, Item 8 of this Report for further discussion related to certain of the items discussed above. MASTERCARD 2024 FORM 10-K 48PART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS Currency-neutral Growth RatesCurrency-neutral growth rates are calculated by remeasuring the prior period’s results using the current period’s exchange rates for both the translational and transactional impacts on operating results and are non-GAAP financial measures. The impact of currency translation represents the effect of translating operating results where the functional currency is different from our U.S. dollar reporting currency. The impact of the transactional currency represents the effect of converting revenue and expenses occurring in a currency other than the functional currency of the entity. The impact of the related realized gains and losses resulting from our foreign exchange derivative contracts designated as cash flow hedging instruments (specifically those that manage the impact of foreign currency variability on anticipated revenues and expenses) is recognized in the respective financial statement line item on the statements of operations when the underlying forecasted transactions impact earnings. The translational and transactional impact of currency and the related impact of our foreign exchange derivative contracts designated as cash flow hedging instruments as specified in the preceding paragraph (collectively the “Currency Impact”) has been excluded from our currency-neutral growth rates and has been identified in the “Non-GAAP Reconciliations” tables below and our “Drivers of Change” tables. See “Foreign Currency - Currency Impact” for further information on our currency impacts and “Financial Results - Net Revenue” and “Financial Results - Operating Expenses” for our “Drivers of Change” tables.Non-GAAP Reconciliations The following tables reconcile our reported financial measures calculated in accordance with GAAP to the respective adjusted non-GAAP financial measures:Year ended December 31, 2024 Net revenue Operating expensesOperating margin Other income (expense) Effective income tax rate Net income Diluted earnings per share ($ in millions, except per share data)Reported - GAAP $ 28,167 $ 12,585 55.3 % $ (328) 15.6 % $ 12,874 $ 13.89 (Gains) losses on equity investments ** ** ** 29 — % 25 0.03 Litigation provisions ** (680) 2.4 % ** 0.5 % 495 0.53 Restructuring charge ** (190) 0.7 % ** 0.1 % 147 0.16 Adjusted - Non-GAAP $ 28,167 $ 11,714 58.4 % $ (300) 16.2 % $ 13,541 $ 14.60 Year ended December 31, 2023 Net revenue Operating expenses Operating margin Otherincome (expense) Effective income tax rate Net income Diluted earnings per share ($ in millions, except per share data)Reported - GAAP $ 25,098 $ 11,090 55.8 % $ (369) 17.9 % $ 11,195 $ 11.83 (Gains) losses on equity investments ** ** ** 61 0.1 % 36 0.04 Litigation provisions ** (539) 2.1 % ** 0.5 % 376 0.40 Adjusted - Non-GAAP $ 25,098 $ 10,551 58.0 % $ (308) 18.5 % $ 11,607 $ 12.26 Year ended December 31, 2022 Net revenue Operating expenses Operating margin Otherincome (expense) Effective income tax rate Net income Diluted earnings per share ($ in millions, except per share data)Reported - GAAP $ 22,237 $ 9,973 55.2 % $ (532) 15.4 % $ 9,930 10.22 (Gains) losses on equity investments ** ** ** 145 — % 126 0.13 Litigation provisions ** (356) 1.6 % ** 0.3 % 263 0.27 Russia-related impacts (37) (67) 0.2 % ** — % 24 0.02 Adjusted - Non-GAAP $ 22,200 $ 9,549 57.0 % $ (387) 15.7 % $ 10,342 $ 10.65Note: Tables may not sum due to rounding. ** Not applicable.49 MASTERCARD 2024 FORM 10-KPART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS The following tables represent the reconciliation of our growth rates reported under GAAP to our non-GAAP growth rates:Year Ended December 31, 2024 as compared to the Year Ended December 31, 2023Increase/(Decrease)Net revenue Operating expenses Operating margin Effective income tax rate Net income Diluted earnings per share Reported - GAAP 12 % 13 % (0.5) ppt (2.3) ppt 15 % 17 % (Gains) losses on equity investments ** ** ** (0.1) ppt — % — % Litigation provisions ** (1) % 0.3 ppt — ppt 1 % 1 %Restructuring charge** (2) % 0.7 ppt 0.1 ppt 1 % 1 % Adjusted - Non-GAAP 12 % 11 % 0.4 ppt (2.3) ppt 17 % 19 %Currency Impact1 % — % 0.3 ppt 0.1 ppt 1 % 1 % Adjusted - Non-GAAP - currency-neutral 13 % 11 % 0.7 ppt (2.2) ppt 18 % 21 % Year Ended December 31, 2023 as compared to the Year Ended December 31, 2022Increase/(Decrease)Net revenue Operating expenses Operating margin Effective income tax rate Net income Diluted earnings per share Reported - GAAP 13 % 11 % 0.7 ppt 2.6 ppt 13 % 16 % (Gains) losses on equity investments ** ** ** 0.1 ppt (1) % (1) % Litigation provisions ** (1) % 0.5 ppt 0.1 ppt 1 % 1 % Russia-related impacts — % 1 % (0.1) ppt — ppt — % — % Adjusted - Non-GAAP 13 % 10 % 1.0 ppt 2.8 ppt 12 % 15 %Currency Impact— % — % (0.1) ppt (0.1) ppt — % — % Adjusted - Non-GAAP - currency-neutral 13 % 11 % 0.9 ppt 2.7 ppt 12 % 15 %Note: Tables may not sum due to rounding. ** Not applicable. Key Metrics and Drivers In addition to the financial measures described above in “Financial Results Overview”, we review the following metrics to evaluate and identify trends in our business, measure our performance, prepare financial projections and make strategic decisions. We believe that the key metrics presented facilitate an understanding of our operating and financial performance and provide a meaningful comparison of our results between periods. Operating Margin measures how much profit we make on each dollar of sales after our operating costs but before other income (expense) and income tax expense. Operating margin is calculated by dividing our operating income by net revenue. Key Drivers Gross Dollar Volume (“GDV”) 1 measures dollar volume of activity, including both domestic and cross-border volume, on cards carrying our brands during the period, on a local currency basis and U.S. dollar-converted basis. GDV represents purchase volume plus cash volume; “purchase volume” means the aggregate dollar amount of purchases made with Mastercard-branded cards for the relevant period; and “cash volume” means the aggregate dollar amount of cash disbursements and includes the impact of balance transfers and convenience checks obtained with Mastercard-branded cards for the relevant period. Information denominated in U.S. dollars relating to GDV is calculated by applying an established U.S. dollar/local currency exchange rate for each local currency in which our volumes are reported. These exchange rates are calculated on a quarterly basis using the average exchange rate for each quarter. We report period-over-period rates of change in purchase volume and cash volume on the basis of local currency information, in order to eliminate the impact of changes in the value of currencies against the U.S. dollar in calculating such rates of change.Cross-border Volume Growth measures the growth of cross-border dollar volume during the period, on a local currency basis and U.S. dollar-converted basis, for all Mastercard-branded programs. MASTERCARD 2024 FORM 10-K 50PART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONSSwitched Transactions measures the number of transactions switched by Mastercard, which is defined as the number of transactions initiated and switched through our network during the period.1 Data used in the calculation of GDV is provided by Mastercard customers and is subject to verification by Mastercard and partial cross-checking against information provided by Mastercard’s transaction switching systems. All data is subject to revision and amendment by Mastercard or Mastercard’s customers.The following tables provide a summary of the growth trends in our key drivers. For the Years Ended December 31,2024 2023Increase/(Decrease) USD Local USD Local Mastercard-branded GDV growth 18% 11% 11% 12% United States 7% 7% 6% 6% Worldwide less United States 9% 12% 13% 15%Cross-border volume growth 117% 18% 25% 24%For the Years Ended December 31,2024 2023Increase/(Decrease)Switched transactions growth 11% 14%1 Excludes volume generated by Maestro and Cirrus cards. Key Metrics related to the Payment Network Assessments represent agreed upon standard pricing provided to our customers based on various forms of payment-related activity. Assessments are used internally by management to monitor operating performance as it allows for comparability and provides visibility into cardholder trends. Assessments do not represent our net revenue. The following provides additional information on our key metrics related to the payment network: • Domestic assessments are charges based on activity related to cards that carry the Company’s brands where the merchant country and the country of issuance are the same. These assessments are primarily driven by the domestic dollar volume of activity (e.g., domestic purchase volume, domestic cash volume) or the number of cards issued. • Cross-border assessments are charges based on activity related to cards that carry the Company’s brands where the merchant country and the country of issuance are different. These assessments are primarily driven by the cross-border dollar volume of activity (e.g., cross-border purchase volume, cross-border cash volume). • Transaction processing assessments are charges primarily driven by the number of switched transactions on our payment network. Switching activities include: ◦ Authorization, the process by which a transaction is routed to the issuer for approval ◦ Clearing, the determination and exchange of financial transaction information between issuers and acquirers after a transaction has been successfully conducted at the point of interaction ◦ Settlement, which facilitates the determination and exchange of funds between parties These assessments can also include connectivity services and network access, which are based on the volume of data transmitted and the number of authorization and settlement messages. • Other network assessments are charges for licensing, implementation and other franchise fees.51 MASTERCARD 2024 FORM 10-KPART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS The following table provides a summary of our key metrics related to the payment network.Years ended December 31, 2024 2023Increase/(Decrease) Increase/(Decrease)2024 2023 2022 As reportedCurrency-neutral As reported Currency-neutral ($ in millions)Domestic assessments $ 10,245 $ 9,566 $ 8,794 7% 9% 9% 9% Cross-border assessments 10,181 8,409 6,597 21% 22% 27% 28% Transaction processing assessments 13,602 12,067 10,646 13% 14% 13% 13% Other network assessments 936 963 766 (3)% (3)% 26% 26%Foreign Currency Currency Impact Our primary functional currencies are the U.S. dollar, euro, British pound and the Brazilian real. Our overall operating results are impacted by currency translation, which represents the effect of translating operating results where the functional currency is different than our U.S. dollar reporting currency.Our operating results are also impacted by transactional currency. The impact of the transactional currency represents the effect of converting revenue and expense transactions occurring in a currency other than the functional currency. Changes in currency exchange rates directly impact the calculation of gross dollar volume (“GDV”), which is used in the calculation of our key metrics related to domestic assessments and cross-border assessments as well as certain volume-related rebates and incentives. GDV is calculated based on local currency spending volume converted to U.S. dollars and euros using average exchange rates for the period. As a result, our key metrics related to domestic assessments and cross-border assessments as well as certain volume-related rebates and incentives are impacted by the strengthening or weakening of the U.S. dollar and euro versus local currencies. For example, our billing in Australia is in the U.S. dollar, however, consumer spend in Australia is in the Australian dollar. The transactional currency impact of converting Australian dollars to our U.S. dollar billing currency will have an impact on the revenue generated. The strengthening or weakening of the U.S. dollar is evident when GDV growth on a U.S. dollar-converted basis is compared to GDV growth on a local currency basis. In 2024, GDV on a U.S. dollar-converted basis increased 8.1%, while GDV on a local currency basis increased 10.5% versus 2023. In 2023, GDV on a U.S. dollar-converted basis increased 10.6%, while GDV on a local currency basis increased 12.2% versus 2022. Further, the impact from transactional currency occurs in our key metrics related to transaction processing assessments and other network assessments as well as value-added services and solutions revenue and operating expenses when the transacting currency of these items is different than the functional currency of the entity. To manage the impact of foreign currency variability on anticipated revenues and expenses, we may enter into foreign exchange derivative contracts and designate such derivatives as hedging instruments in a cash flow hedging relationship as discussed further in Note 23 (Derivative and Hedging Instruments) to the consolidated financial statements included in Part II, Item 8.Foreign Exchange ActivityWe incur foreign currency gains and losses from remeasuring monetary assets and liabilities, including settlement assets and obligations, that are denominated in a currency other than the functional currency of the entity. To manage this foreign exchange risk, we may enter into foreign exchange derivative contracts to economically hedge the foreign currency exposure of our nonfunctional currency monetary assets and liabilities. The gains or losses resulting from the changes in fair value of these contracts are intended to reduce the potential effect of the underlying hedged exposure and are recorded net within general and administrative expenses on the consolidated statements of operations. The impact of this foreign exchange activity, including with the related hedging activities, has not been eliminated in our currency-neutral results. Our foreign exchange risk management activities are discussed further in Note 23 (Derivative and Hedging Instruments) to the consolidated financial statements included in Part II, Item 8. MASTERCARD 2024 FORM 10-K 52PART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS Financial Results Net Revenue The components of net revenue were as follows:For the Years Ended December 31, Increase (Decrease) 2024 2023 2022 2024 2023($ in millions)Payment network $ 17,335 $ 15,824 $ 14,358 10% 10% Value-added services and solutions 10,832 9,274 7,879 17% 18% Total net revenue 28,167 25,098 22,237 12% 13% Special Items 1 — — (37) —% ** Adjusted net revenue $ 28,167 $ 25,098 $ 22,200 12% 13% Note: Table may not sum due to rounding. ** Not meaningful. 1 See “Non-GAAP Financial Information” for further information on our non-GAAP adjustments and the reconciliation to GAAP reported amounts. Net revenue increased 12%, or 13% on a currency-neutral basis, in 2024 versus the prior year. The increase in net revenue was attributable to growth in our payment network and value-added services and solutions. Net revenue from our payment network increased 10%, or 11% on a currency-neutral basis, in 2024 versus the prior year. The increase was primarily driven by growth in domestic and cross-border dollar volumes and an increase in the number of switched transactions, reflecting growth trends across all of our key drivers. Net revenue from our payment network includes $17,629 million of rebates and incentives provided to customers, which increased 16%, or 18% on a currency-neutral basis, in 2024 versus the prior year, primarily due to an increase in our key drivers as well as new and renewed deals. Net revenue from our value-added services and solutions increased 17%, on both an as-reported and currency-neutral basis, in 2024 versus the prior year. The increase was driven primarily by (1) growth in our underlying key drivers, (2) our consumer acquisition and engagement and business and market insight services, (3) our security and digital and authentication solutions and (4) pricing.See Note 3 (Revenue) to the consolidated financial statements included in Part II, Item 8 for a further discussion of how we recognize revenue. Drivers of Change The following table summarizes the drivers of change in net revenue: For the Years Ended December 31, Operational Acquisitions CurrencyImpact 1, 2 Special Items 2Total2024 2023 2024 2023 2024 2023 2024 2023 2024 2023 Payment network 11% 11% ** —% (1)% —% ** — % 10 % 10 % Value-added services and solutions 17% 16% —% —% (1)% 1% ** ** 17 % 18 % Net revenue 13% 13% —% —% (1)% —% ** — % 12 % 13 %Note: Table may not sum due to rounding. ** Not applicable.1 Includes the translational and transactional impact of currency and the related impact of our foreign exchange derivative contracts designated as cash flow hedging instruments. 2 See “Non-GAAP Financial Information” for further information on our non-GAAP adjustments and the reconciliation to GAAP reported amounts. No individual country, other than the United States, generated more than 10% of net revenue in any such period. A significant portion of our net revenue is concentrated among our five largest customers. In 2024, the net revenue from these customers was approximately $6.3 billion, or 22%, of total net revenue. The loss of any of these customers or their significant card programs could adversely impact our revenue. 53 MASTERCARD 2024 FORM 10-KPART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS Operating ExpensesOperating expenses increased 13% in 2024 versus the prior year. Adjusted operating expenses increased 11%, on both an as-adjusted and currency-neutral basis, versus the prior year.The components of operating expenses were as follows:For the Years Ended December 31, Increase (Decrease) 2024 2023 2022 2024 2023($ in millions)General and administrative $ 10,193 $ 8,927 $ 8,078 14 % 11 % Advertising and marketing 815 825 789 (1) % 5 % Depreciation and amortization 897 799 750 12 % 7 % Provision for litigation 680 539 356 26 % 51 % Total operating expenses 12,585 11,090 9,973 13 % 11 %Special Items 1(870) (539) (423) ** **Adjusted total operating expenses 1$ 11,714 $ 10,551 $ 9,549 11 % 10 %Note: Table may not sum due to rounding. ** Not meaningful. 1 See “Non-GAAP Financial Information” for further information on our non-GAAP adjustments and the reconciliation to GAAP reported amounts. Drivers of Change The following table summarizes the drivers of change in operating expenses: For the Years Ended December 31, Operational Acquisitions Currency Impact 1, 2 Special Items 2 Total2024 2023 2024 2023 2024 2023 2024 2023 2024 2023 General and administrative 12% 11 % 1 % 1 % — % — % 2 % (1) % 14 % 11 % Advertising and marketing —% 4 % — % — % (1) % — % ** ** (1) % 5 % Depreciation and amortization 12% 5 % — % 1 % — % — % ** ** 12 % 7 %Provision for litigation** ** ** ** ** ** 26 % 51 % 26 % 51 % Total operating expenses 11% 10 % — % 1 % — % — % 2 % 1 % 13 % 11 %Note: Table may not sum due to rounding. ** Not applicable. 1 Represents the translational and transactional impact of currency. 2 See “Non-GAAP Financial Information” for further information on our non-GAAP adjustments and the reconciliation to GAAP reported amounts. General and AdministrativeGeneral and administrative expenses increased 14%, on both an as-reported and currency-neutral basis, in 2024 versus the prior year. Current year results include an increase of 2 percentage points from a restructuring charge of $190 million and 1 percentage point from acquisitions. The remaining increase was primarily due to higher personnel and data processing costs to support the continued investment in our strategic initiatives across payments and value-added services and solutions, as well as fulfillment costs to provide marketing services. MASTERCARD 2024 FORM 10-K 54PART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS The components of general and administrative expenses were as follows:For the Years Ended December 31, Increase (Decrease) 2024 2023 2022 2024 2023($ in millions) Personnel$ 6,673 $ 6,022 $ 5,263 11% 14% Professional fees 549 495 480 11% 3% Data processing and telecommunications 1,119 1,008 926 11% 9%Foreign exchange activity 165 83 102 (22)% (19)%Other1,787 1,319 1,307 35% 1% Total general and administrative expenses $ 10,193 $ 8,927 $ 8,078 14% 11%Note: Table may not sum due to rounding.1 Foreign exchange activity includes the impact of remeasurement of assets and liabilities denominated in foreign currencies net of the impact of gains and losses on foreign exchange derivative contracts. See Note 23 (Derivative and Hedging Instruments) to the consolidated financial statements included in Part II, Item 8 for further discussion.Advertising and MarketingAdvertising and marketing expenses decreased 1%, on both an as-reported and a currency-neutral basis, in 2024 versus the prior year.Depreciation and AmortizationDepreciation and amortization expenses increased 12%, on both an as-reported and a currency-neutral basis, in 2024 versus the prior year, primarily due to increased software capitalization driven by the continued growth of and investment in our business.Provision for LitigationIn 2024, we recorded charges of $680 million, primarily as a result of a legal provision associated with the U.K. consumer class action settlement, settlements with a number of U.K. merchants and a change in estimate related to the claims of merchants who opted out of the U.S. merchant class litigation. In 2023, we recorded charges of $539 million, primarily as a result of changes in the estimate related to the claims of merchants who opted out of the U.S. merchant class litigation and settlements with a number of U.K. and Pan-European merchants. In 2022, we recorded charges of $356 million, primarily as a result of settlements (both final and agreements in principle) with a number of U.K. merchants and a change in estimate related to the claims of merchants who opted out of the U.S. merchant class litigation. See Note 21 (Legal and Regulatory Proceedings) to the consolidated financial statements included in Part II, Item 8 for further discussion.Other Income (Expense) The components of total other income (expense) were as follows:For the Years Ended December 31, Increase (Decrease) 2024 2023 2022 2024 2023(in millions)Investment income $ 327 $ 274 $ 61 $ 53 $ 213 Gains (losses) on equity investments, net (29) (61) (145) 32 84 Interest expense (646) (575) (471) (71) (104) Other income (expense), net 20 (7) 23 27 (30) Total other income (expense) (328) (369) (532) 41 163 (Gains) losses on equity investments 1 29 61 145 (32) (84) Adjusted total other income (expense) 1 $ (300) $ (308) $ (387) $ 9 $ 79Note: Table may not sum due to rounding.1 See “Non-GAAP Financial Information” for further information on our non-GAAP adjustments and the reconciliation to GAAP reported amounts. 55 MASTERCARD 2024 FORM 10-K PART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONSIncome TaxesThe effective income tax rates for the years ended December 31, 2024 and 2023 were 15.6% and 17.9%, respectively. The adjusted effective income tax rates for the years ended December 31, 2024 and 2023 were 16.2% and 18.5%, respectively. Both the as-reported and as-adjusted effective income tax rates were lower in 2024, primarily due to a discrete tax expense in 2023 related to changes in the valuation allowance associated with the U.S. foreign tax credits deferred tax asset. In 2023, the treatment of foreign taxes paid under the U.S. tax regulations published in 2022 changed due to the foreign tax legislation enacted in Brazil and Notice 2023-55 (the “Notice”) released by the U.S. Department of Treasury. Therefore, we recognized a total $327 million discrete tax expense in 2023 to establish the valuation allowance. This discrete tax expense was partially offset by our ability to claim more U.S. foreign tax credits generated in 2022 and 2023 due to the Notice. Additionally, a change in our geographic mix of earnings in 2024 contributed to the lower effective income tax rates compared to the prior year. The Organization for Economic Co-operation and Development (“OECD”) Pillar 2 guidelines published to date include transition and safe harbor rules around the implementation of the 15% global minimum tax (the “Pillar 2 Rules”). In 2024, we did not experience a material impact as a result of Pillar 2 Rules. However, in 2025, we expect the Pillar 2 Rules will primarily offset the reduction to our effective income tax rate resulting from our incentive grant received from the Singapore Ministry of Finance. For the year ended December 31, 2024, this incentive grant reduced our effective income tax rate by approximately 4%. We are continuously monitoring developments and evaluating the impacts these new rules may have on our future effective income tax rate, tax payments, financial condition and results of operations. See Note 20 (Income Taxes) to the consolidated financial statements included in Part II, Item 8 for further discussion.Liquidity and Capital ResourcesWe rely on existing liquidity, cash generated from operations and access to capital to fund our global operations, credit and settlement exposure, capital expenditures, investments in our business and current and potential obligations. The following table summarizes the cash, cash equivalents, investments and credit available to us at December 31: 2024 2023(in billions) Cash, cash equivalents and investments 1$ 8.8 $ 9.2 Unused line of credit $ 8.0 $ 8.0 1 Investments include available-for-sale securities and held-to-maturity securities. This amount excludes restricted cash and restricted cash equivalents of $2.4 billion and $1.9 billion at December 31, 2024 and 2023, respectively. We believe that our existing cash, cash equivalents and investment securities balances, our cash flow generating capabilities, and our access to capital resources are sufficient to satisfy our future operating cash needs, capital asset purchases, outstanding commitments and other liquidity requirements associated with our existing operations and potential obligations which include litigation provisions and credit and settlement exposure. Our liquidity and access to capital could be negatively impacted by global credit market conditions. We guarantee the settlement of many of the transactions between our customers. Historically, payments under these guarantees have not been significant; however, historical trends may not be indicative of potential future losses. The risk of loss on these guarantees is specific to individual customers, but may also be driven by regional or global economic and market conditions, including, but not limited to the health of the financial institutions in a country or region. See Note 22 (Settlement and Other Risk Management) to the consolidated financial statements in Part II, Item 8 for a description of these guarantees. Our liquidity and access to capital could also be negatively impacted by the outcome of any of the legal or regulatory proceedings to which we are a party. For additional discussion of these and other risks facing our business, see Part I, Item 1A - Risk Factors - Legal and Regulatory Risks and Note 21 (Legal and Regulatory Proceedings) to the consolidated financial statements included in Part II, Item 8. MASTERCARD 2024 FORM 10-K 56PART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONSCash Flows The table below shows a summary of the cash flows from operating, investing and financing activities: For the Years Ended December 31,2024 2023 2022(in millions)Net cash provided by operating activities $ 14,780 $ 11,980 $ 11,195 Net cash used in investing activities $ (3,402) $ (1,351) $ (1,470) Net cash used in financing activities $ (10,836) $ (9,488) $ (10,328) Net cash provided by operating activities increased $2.8 billion in 2024 versus the prior year, primarily due to higher net income after adjusting for non-cash items, an increase in billing collections, and less cash paid for litigation settlement, partially offset by a decrease in restricted security deposits received from customers. Net cash used in investing activities increased $2.1 billion in 2024 versus the prior year, primarily due to cash paid for business acquisitions in the current year, partially offset by a net decrease in purchases of investments in time deposits. Net cash used in financing activities increased $1.3 billion in 2024 versus the prior year, primarily due to higher cash paid for repurchases of our Class A common stock, dividends, and repayments of debt, partially offset by an increase in cash proceeds received from debt issuances.Debt and Credit AvailabilityIn April 2024, $1 billion of principal related to the 2014 USD Notes matured and was paid. In July 2024, INR28.1 billion ($336 million as of payment date) of principal related to the 2023 INR Term Loan matured and was paid. During 2024, we issued a total of $4 billion of debt, as follows: • In May 2024, we issued $1 billion principal amount of notes due May 2034 • In September 2024, we issued $750 million principal amount of notes due January 2028, $1,150 million principal amount of notes due January 2032 and $1,100 million principal amount of notes due January 2035 The issuances in 2024 are collectively referred to as the “2024 USD Notes”. The net proceeds from the issuance of the 2024 USD Notes, after deducting the original issue discount, underwriting discount and offering expenses, were $3.96 billion. Our total debt outstanding was $18.2 billion at December 31, 2024, with the earliest maturity of $750 million of principal occurring in March 2025. As of December 31, 2024, we have a commercial paper program (the “Commercial Paper Program”), under which we are authorized to issue up to $8 billion in outstanding notes, with maturities up to 397 days from the date of issuance. In conjunction with the Commercial Paper Program, we have a committed unsecured $8 billion revolving credit facility (the “Credit Facility”) that expires in November 2029. Borrowings under the Commercial Paper Program and the Credit Facility are to be used to provide liquidity for general corporate purposes, including providing liquidity in the event of one or more settlement failures by our customers. In addition, we may borrow and repay amounts under these facilities for business continuity purposes. We had no borrowings outstanding under the Commercial Paper Program or the Credit Facility at December 31, 2024. See Note 15 (Debt) to the consolidated financial statements included in Part II, Item 8 for further discussion on our debt, the Commercial Paper Program and the Credit Facility.Dividends and Share Repurchases We have historically paid quarterly dividends on our outstanding Class A common stock and Class B common stock. Subject to legally available funds, we intend to continue to pay a quarterly cash dividend. The declaration and payment of future dividends is at the sole discretion of our Board of Directors after taking into account various factors, including our financial condition, operating results, available cash and current and anticipated cash needs.57 MASTERCARD 2024 FORM 10-KPART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS The following table summarizes the annual total and per share dividends paid in the years reflected: For the Years Ended December 31,2024 2023 2022(in millions, except per share data)Cash dividend, per share $ 2.64 $ 2.28 $ 1.96 Cash dividends paid $ 2,448 $ 2,158 $ 1,903 On December 17, 2024, our Board of Directors declared a quarterly cash dividend of $0.76 per share paid on February 7, 2025 to holders of record as of January 9, 2025 of our Class A common stock and Class B common stock. The aggregate amount of this dividend was $694 million. On February 10, 2025, our Board of Directors declared a quarterly cash dividend of $0.76 per share payable on May 9, 2025 to holders of record as of April 9, 2025 of our Class A common stock and Class B common stock. The aggregate amount of this dividend is estimated to be $693 million. Repurchased shares of our common stock are considered treasury stock. In December 2024 and 2023, our Board of Directors approved share repurchase programs of our Class A common stock authorizing us to repurchase up to $12.0 billion and $11.0 billion, respectively. The program approved in 2024 will become effective after the completion of the program approved in 2023. The timing and actual number of additional shares repurchased will depend on a variety of factors, including cash requirements to meet the operating needs of the business, legal requirements, as well as the share price and economic and market conditions. The following table summarizes our share repurchase authorizations and repurchase activity of our Class A common stock for the year ended December 31, 2024, unless otherwise noted:(in millions, except per share data)Remaining authorization at December 31, 2023 $ 14,142 Dollar-value of shares repurchased in 2024 $ 10,954Remaining authorization at December 31, 2024 $ 15,188Shares repurchased in 2024 23.0 Average price paid per share in 2024 $ 475.35 Dollar-value of shares repurchased in 2025 (through February 7, 2025) $ 959Note: Table may not sum due to rounding.See Note 16 (Stockholders' Equity) to the consolidated financial statements included in Part II, Item 8 for further discussion.Critical Accounting Estimates The application of GAAP requires us to make estimates and assumptions about certain items and future events that directly affect our reported financial condition. Our significant accounting policies, including recent accounting pronouncements, are described in Note 1 (Summary of Significant Accounting Policies) to the consolidated financial statements included in Part II, Item 8. Revenue Recognition - Rebates and Incentives We enter into business agreements with certain customers that provide for rebates and incentives when customers meet certain volume thresholds or other incentives tied to customer performance. We consider various factors in estimating customer performance, including forecasted transactions, card issuance and card conversion volumes, expected payments and historical experience with that customer. Rebates and incentives are recorded within net revenue based on these estimates primarily when volume- and transaction- based revenues are recognized over the contractual term. Differences between actual results and our estimates are adjusted in the period the customer reports actual performance. If our customers’ actual performance is not consistent with our estimates of their performance, net revenue may be materially different.MASTERCARD 2024 FORM 10-K 58PART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS Loss Contingencies We are currently involved in various claims and legal proceedings. We regularly review the status of each significant matter and assess its potential financial exposure. If the potential loss from any claim or legal proceeding is considered probable and the amount can be reasonably estimated, we accrue a liability for the estimated loss. Significant judgment is required in both the determination of probability and whether an exposure is reasonably estimable. Our judgments are subjective based on the status of the legal or regulatory proceedings, the merits of our defenses and consultation with in-house and outside legal counsel. Because of uncertainties related to these matters, accruals are based only on the best information available at the time. As additional information becomes available, we reassess the potential liability related to pending claims and litigation and may revise our estimates. Due to the inherent uncertainties of the legal and regulatory process in the multiple jurisdictions in which we operate, our judgments may be materially different than the actual outcomes. Income Taxes In calculating our effective income tax rate, estimates are required regarding the timing and amount of taxable and deductible items which will adjust the pretax income earned in various tax jurisdictions. Through our interpretation of local tax regulations, adjustments to pretax income for income earned in various tax jurisdictions are reflected within various tax filings. Although we believe that our estimates and judgments discussed herein are reasonable, actual results may be materially different than the estimated amounts. We record a valuation allowance to reduce our deferred tax assets to the amount that is more likely than not to be realized. Significant judgment is required in determining the valuation allowance. In assessing the need for a valuation allowance, we consider all sources of taxable income, including projected future taxable income, reversing taxable temporary differences and ongoing tax planning strategies. If it is determined that we are able to realize deferred tax assets in excess of the net carrying value or to the extent we are unable to realize a deferred tax asset, we would adjust the valuation allowance in the period in which such a determination is made, with a corresponding increase or decrease to earnings. We record tax liabilities for uncertain tax positions taken, or expected to be taken, which may not be sustained or may only be partially sustained, upon examination by the relevant taxing authorities. We consider all relevant facts and current authorities in the tax law in assessing whether any benefit resulting from an uncertain tax position is more likely than not to be sustained and, if so, how current law impacts the amount reflected within these financial statements. If upon examination, we realize a tax benefit which is not fully sustained or is more favorably sustained, this would generally increase earnings in the period. In certain situations, we will have offsetting tax credits or taxes in other jurisdictions. Business Combinations We account for our business combinations using the acquisition method of accounting. The acquisition purchase price, including contingent consideration, if any, is allocated to the underlying identified, tangible and intangible assets, liabilities assumed and any non-controlling interest in the acquiree, based on their respective estimated fair values on the acquisition date. Any excess of purchase price over the fair value of net assets acquired, including identifiable intangible assets, is recorded as goodwill. The amounts and useful lives assigned to acquisition-related tangible and intangible assets impact the amount and timing of future amortization expense. We use various valuation techniques to determine fair value, primarily discounted cash flows analysis, relief-from-royalty and multi-period excess earnings for estimating the value of intangible assets. These valuation techniques include comparable company multiples, discount rates, growth projections and other assumptions of future business conditions. Determining the fair value of assets acquired, liabilities assumed, any non-controlling interest in the acquiree and the expected useful lives, requires management’s judgment. The significance of management’s estimates and assumptions is relative to the size of the acquisition. Our estimates are based upon assumptions believed to be reasonable, but which are inherently uncertain and unpredictable.59 MASTERCARD 2024 FORM 10-KPART II

FY 2025-12-31 (later)

ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS Item 7. Management’s discussion and analysis of financial condition and results of operationsThe following discussion should be read in conjunction with the consolidated financial statements and notes of Mastercard Incorporated and its consolidated subsidiaries, including Mastercard International Incorporated (together, “Mastercard” or the “Company”), included elsewhere in this Report. Percentage changes provided throughout “Management’s Discussion and Analysis of Financial Condition and Results of Operations” were calculated on amounts rounded to the nearest thousand. For discussion related to the results of operations for the year ended December 31, 2024 compared to the year ended December 31, 2023, please see Part II, Item 7 of our Annual Report on Form 10-K for the year ended December 31, 2024.Business OverviewMastercard is a technology company in the global payments industry. We connect consumers, financial institutions, merchants, governments, digital partners, businesses and other organizations worldwide by enabling electronic payments and making those payment transactions secure, simple, smart and accessible. We make payments easier and more efficient by providing a wide range of payment solutions and services using our family of well-known and trusted brands, including our primary brand Mastercard®, as well as our Maestro® and Cirrus® brands. We operate a payments network that provides choice and flexibility for consumers, merchants and our customers. Through our unique and proprietary global payments network, we switch (authorize, clear and settle) payment transactions. We have additional payments capabilities that include automated clearing house (“ACH”) transactions (both batch and real-time account-based payments). Using these capabilities, we offer consumer and commercial payment products, capture new payment flows and provide services and solutions. These services and solutions include, among others, security solutions, consumer acquisition and engagement services, business and market insights, digital and authentication, processing and gateway and other solutions, all of which draw on our principled and responsible use of secure data. Our capabilities strengthen, reinforce and complement each other and are fundamentally interdependent. For our global payments network, our franchise model sets the standards and ground-rules that balance value and risk across (and allow for interoperability among) all stakeholders. We employ a multi-layered approach to help protect the global payments ecosystem in which we operate. Mastercard is not a financial institution. We do not issue cards, extend credit, determine or receive revenue from interest rates or other fees charged to account holders by issuers (the account holders’ financial institutions), nor do we establish the rates charged by acquirers (the merchants’ financial institutions) in connection with merchants’ acceptance of our products. In most cases, account holder relationships belong to, and are managed by, our customers.Financial Results Overview The following table provides a summary of our key GAAP operating results, as reported:Years ended December 31, 2025Increase/ (Decrease)2024Increase/ (Decrease)2025 2024 2023(in millions, except percentages and per share data)Net revenue $ 32,791 $ 28,167 $ 25,098 16% 12% Operating expenses $ 13,894 $ 12,585 $ 11,090 10% 13% Operating income $ 18,897 $ 15,582 $ 14,008 21% 11% Operating margin 57.6 % 55.3 % 55.8 % 2.3 ppt (0.5) ppt Income tax expense $ 3,610 $ 2,380 $ 2,444 52% (3)% Effective income tax rate 19.4 % 15.6 % 17.9 % 3.8 ppt (2.3) ppt Net income $ 14,968 $ 12,874 $ 11,195 16% 15% Diluted earnings per share $ 16.52 $ 13.89 $ 11.83 19% 17% Diluted weighted-average shares outstanding 906 927 946 (2)% (2)%Note: Table may not sum due to rounding.49 MASTERCARD 2025 FORM 10-KPART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONSThe following table provides a summary of our key non-GAAP operating results 1 , adjusted to exclude the impact of gains and losses on our equity investments, Special Items (which represent litigation judgments and settlements and certain one-time items) and the related tax impacts on our non-GAAP adjustments. In addition, we have presented growth rates adjusted for the impact of currency: Years ended December 31, 2025Increase/(Decrease)2024Increase/(Decrease)2025 2024 2023 As adjusted Currency-neutral As adjusted Currency-neutral (in millions, except percentages and per share data) Net revenue $ 32,791 $ 28,167 $ 25,098 16% 15% 12% 13% Adjusted operating expenses $ 13,389 $ 11,714 $ 10,551 14% 14% 11% 11% Adjusted operating margin 59.2 % 58.4 % 58.0 % 0.8 ppt 0.7 ppt 0.4 ppt 0.7 ppt Adjusted effective income tax rate 19.6 % 16.2 % 18.5 % 3.4 ppt 3.4 ppt (2.3) ppt (2.2) ppt Adjusted net income $ 15,415 $ 13,541 $ 11,607 14% 13% 17% 18% Adjusted diluted earnings per share $ 17.01 $ 14.60 $ 12.26 17% 15% 19% 21%Note: Table may not sum due to rounding. 1 See “Non-GAAP Financial Information” for further information on our non-GAAP adjustments and the reconciliation to GAAP reported amounts.Key highlights for 2025 as compared to 2024 were as follows:Net revenueGAAP Non-GAAP (currency-neutral) Both the as-reported and currency-neutral net revenue increases were attributable to growth in our payment network and value-added services and solutions. up 16% up 15%Operating expenses Adjusted operating expensesGAAP Non-GAAP (currency-neutral) Both the as-reported and as-adjusted operating expenses increases were primarily due to higher general and administrative expenses. up 10% up 14%Effective income tax rate Adjusted effective income tax rateGAAP Non-GAAP Both the as-reported and as-adjusted effective income tax rates were higher versus the comparable period in 2024, primarily due to a change in the net tax effect of our Singapore operations, which includes the 15% global minimum tax rate (Pillar 2 Rules) that took effect in 2025. Additionally, a change in our geographic mix of earnings contributed to the higher effective income tax rates, partially offset by net discrete tax benefits. 19.4% 19.6% up 3.8 ppt up 3.4 ppt Other 2025 financial highlights were as follows: • We generated net cash flows from operations of $17.6 billion. • We repurchased 21.1 million shares of our common stock fo r $11.7 billion and paid dividends of $2.8 billion . • We completed a debt offering in February 2025 for an aggregate principal amount of $1.25 billion. MASTERCARD 2025 FORM 10-K 50PART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS Non-GAAP Financial InformationNon-GAAP financial information is defined as a numerical measure of a company’s performance that excludes or includes amounts so as to be different than the most comparable measure calculated and presented in accordance with accounting principles generally accepted in the United States (“GAAP”). As described more fully below, our non-GAAP financial measures exclude, where applicable, the impact of gains and losses on our equity investments, which includes mark-to-market fair value adjustments, impairments and gains and losses upon disposition, as well as the related tax impacts. Our non-GAAP financial measures also exclude, where applicable, the impact of special items, which represent litigation judgments and settlements and/or certain one-time items, as well as the related tax impacts (“Special Items”). We also present growth rates adjusted for the impact of currency, which is a non-GAAP financial measure. We believe that the non-GAAP financial measures presented facilitate an understanding of our operating performance and provide a meaningful comparison of our results between periods. We use non-GAAP financial measures to evaluate our ongoing operations in relation to historical results, for internal planning and forecasting purposes and in the calculation of performance-based compensation, among other things. We excluded these items because management evaluates the underlying operations and performance of the Company separately from these recurring and nonrecurring items. Operating expenses, operating margin, other income (expense), effective income tax rate, net income and diluted earnings per share, each as adjusted for the impact of gains and losses on our equity investments, Special Items and/or the impact of currency, should not be relied upon as substitutes for measures calculated in accordance with GAAP.Our non-GAAP financial measures for the comparable periods exclude the impact of the following: Gains and Losses on Equity Investments• During 2025, 2024 and 2023, we recorded net pre-tax losses of $88 million ($90 million after tax, or $0.10 per diluted share), $29 million ($25 million after tax, or $0.03 per diluted share) and $61 million ($36 million after tax, or $0.04 per diluted share), respectively. These net losses were primarily related to unrealized fair market value adjustments on marketable and nonmarketable equity securities.Special Items Litigation provisions• During 2025, we recorded pre-tax charges of $504 million ($357 million after tax, or $0.39 per diluted share), primarily as a result of a change in estimate related to the claims of merchants who opted out of the U.S. merchant class litigation, a legal provision associated with the U.S. liability shift litigation and a legal provision associated with the ATM non-discrimination rule surcharge complaints.• During 2024, we recorded pre-tax charges of $680 million ($495 million after tax, or $0.53 per diluted share), primarily as a result of a legal provision associated with the U.K. consumer class action settlement, settlements with a number of U.K. merchants and a change in estimate related to the claims of merchants who opted out of the U.S. merchant class litigation. • During 2023, we recorded pre-tax charges of $539 million ($376 million after tax, or $0.40 per diluted share), primarily as a result of changes in the estimate related to the claims of merchants who opted out of the U.S. merchant class litigation and settlements with a number of U.K. and Pan-European merchants.Restructuring charge• During 2024, we recorded a restructuring charge of $190 million ($147 million after tax, or $0.16 per diluted share). The restructuring action was intended to streamline our organization, delivering efficiencies to enable reinvestment in our business to support the realization of our long-term growth opportunities. See Note 5 (Investments) and Note 19 (Legal and Regulatory Proceedings) to the consolidated financial statements included in Part II, Item 8 of this Report for further discussion related to certain of the items discussed above. 51 MASTERCARD 2025 FORM 10-KPART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS Currency-neutral Growth RatesCurrency-neutral growth rates are non-GAAP financial measures and are calculated by remeasuring the prior period’s results using the current period’s exchange rates for both the translational and transactional impacts on operating results. The impact of currency translation represents the effect of translating operating results where the functional currency is different from our U.S. dollar reporting currency. The impact of the transactional currency represents the effect of converting revenue and expenses occurring in a currency other than the functional currency of the entity. The impact of the related realized gains and losses resulting from our foreign exchange derivative contracts designated as cash flow hedging instruments (specifically those that manage the impact of foreign currency variability on anticipated revenues and expenses) is recognized in the respective financial statement line item on the consolidated statements of operations when the underlying forecasted transactions impact earnings. The translational and transactional impact of currency and the related impact of our foreign exchange derivative contracts designated as cash flow hedging instruments as specified in the preceding paragraph (collectively, the “Currency Impact”) has been excluded from our currency-neutral growth rates and has been identified in the “Non-GAAP Reconciliations” tables below and our “Drivers of Change” tables. See “Foreign Currency - Currency Impact” for further information on our currency impacts and “Financial Results - Net Revenue” and “Financial Results - Operating Expenses” for our “Drivers of Change” tables.Non-GAAP Reconciliations The following tables reconcile our reported financial measures calculated in accordance with GAAP to the respective adjusted non-GAAP financial measures:Year ended December 31, 2025 Operating expensesOperating margin Other income (expense) Effective income tax rate Net income Diluted earnings per share ($ in millions, except per share data)Reported - GAAP $ 13,894 57.6 % $ (319) 19.4 % $ 14,968 $ 16.52 (Gains) losses on equity investments ** ** 88 (0.1) % 90 0.10 Litigation provisions (504) 1.5 % ** 0.3 % 357 0.39 Adjusted - Non-GAAP $ 13,389 59.2 % $ (232) 19.6 % $ 15,415 $ 17.01 Year ended December 31, 2024 Operating expenses Operating margin Otherincome (expense) Effective income tax rate Net income Diluted earnings per share ($ in millions, except per share data)Reported - GAAP $ 12,585 55.3 % $ (328) 15.6 % $ 12,874 $ 13.89 (Gains) losses on equity investments ** ** 29 — % 25 0.03 Litigation provisions (680) 2.4 % ** 0.5 % 495 0.53 Restructuring charge (190) 0.7 % ** 0.1 % 147 0.16 Adjusted - Non-GAAP $ 11,714 58.4 % $ (300) 16.2 % $ 13,541 $ 14.60 Year ended December 31, 2023 Operating expenses Operating margin Otherincome (expense) Effective income tax rate Net income Diluted earnings per share ($ in millions, except per share data)Reported - GAAP $ 11,090 55.8 % $ (369) 17.9 % $ 11,195 11.83 (Gains) losses on equity investments ** ** 61 0.1 % 36 0.04 Litigation provisions (539) 2.1 % ** 0.5 % 376 0.40 Adjusted - Non-GAAP $ 10,551 58.0 % $ (308) 18.5 % $ 11,607 $ 12.26Note: Tables may not sum due to rounding. ** Not applicable.MASTERCARD 2025 FORM 10-K 52PART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS The following tables represent the reconciliation of our growth rates reported under GAAP to our non-GAAP growth rates:Year Ended December 31, 2025 as compared to the Year Ended December 31, 2024Increase/(Decrease)Operating expenses Operating margin Effective income tax rate Net income Diluted earnings per share Reported - GAAP 10 % 2.3 ppt 3.8 ppt 16 % 19 % (Gains) losses on equity investments ** ** (0.1) ppt — % — % Litigation provisions 2 % (0.9) ppt (0.2) ppt (2) % (2) %Restructuring charge2 % (0.7) ppt (0.1) ppt (1) % (1) % Adjusted - Non-GAAP 14 % 0.8 ppt 3.4 ppt 14 % 17 %Currency Impact(1) % (0.1) ppt (0.1) ppt (1) % (1) % Adjusted - Non-GAAP - currency-neutral 14 % 0.7 ppt 3.4 ppt 13 % 15 % Year Ended December 31, 2024 as compared to the Year Ended December 31, 2023Increase/(Decrease)Operating expenses Operating margin Effective income tax rate Net income Diluted earnings per share Reported - GAAP 13 % (0.5) ppt (2.3) ppt 15 % 17 % (Gains) losses on equity investments ** ** (0.1) ppt — % — % Litigation provisions (1) % 0.3 ppt — ppt 1 % 1 % Restructuring charge (2) % 0.7 ppt 0.1 ppt 1 % 1 % Adjusted - Non-GAAP 11 % 0.4 ppt (2.3) ppt 17 % 19 %Currency Impact— % 0.3 ppt 0.1 ppt 1 % 1 % Adjusted - Non-GAAP - currency-neutral 11 % 0.7 ppt (2.2) ppt 18 % 21 %Note: Tables may not sum due to rounding. ** Not applicable. Key Metrics and Drivers In addition to the financial measures described above in “Financial Results Overview”, we review the following metrics to evaluate and identify trends in our business, measure our performance, prepare financial projections and make strategic decisions. We believe that the key metrics presented facilitate an understanding of our operating and financial performance and provide a meaningful comparison of our results between periods. Operating Margin measures how much profit we make on each dollar of sales after our operating costs but before other income (expense) and income tax expense. Operating margin is calculated by dividing our operating income by net revenue. Key Drivers Gross Dollar Volume (“GDV”) 1 measures dollar volume of activity, including both domestic and cross-border volume, on cards carrying our brands during the period, on a local currency basis and U.S. dollar-converted basis. GDV represents purchase volume plus cash volume; “purchase volume” means the aggregate dollar amount of purchases made with Mastercard-branded cards for the relevant period; and “cash volume” means the aggregate dollar amount of cash disbursements and includes the impact of balance transfers and convenience checks obtained with Mastercard-branded cards for the relevant period. Information denominated in U.S. dollars relating to GDV is calculated by applying an established U.S. dollar/local currency exchange rate for each local currency in which our volumes are reported. These exchange rates are calculated on a quarterly basis using the average exchange rate for each quarter. We report period-over-period rates of change in purchase volume and cash volume on the basis of local currency information, in order to eliminate the impact of changes in the value of currencies against the U.S. dollar in calculating such rates of change.1 Data used in the calculation of GDV is provided by Mastercard customers and is subject to verification by Mastercard and partial cross-checking against information provided by Mastercard’s transaction switching systems. All data is subject to revision and amendment by Mastercard or Mastercard’s customers. 53 MASTERCARD 2025 FORM 10-KPART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONSCross-border Volume Growth measures the growth of cross-border dollar volume during the period, on a local currency basis and U.S. dollar-converted basis, for all Mastercard-branded programs.Switched Transactions measures the number of transactions switched by Mastercard, which is defined as the number of transactions initiated and switched through our network during the period.The following tables provide a summary of the growth trends in our key drivers. For the Years Ended December 31,2025 2024Increase/(Decrease) USD Local USD Local Mastercard-branded GDV growth 19% 9% 8% 11% United States 6% 6% 7% 7% Worldwide less United States 10% 10% 9% 12%Cross-border volume growth 118% 15% 17% 18%For the Years Ended December 31,2025 2024Increase/(Decrease)Switched transactions growth 10% 11%1 Excludes volume generated by Maestro and Cirrus cards. Key Metrics related to the Payment Network Assessments represent agreed upon standard pricing provided to our customers based on various forms of payment-related activity. Assessments are used internally by management to monitor operating performance as it allows for comparability and provides visibility into cardholder trends. Assessments do not represent our net revenue. The following provides additional information on our key metrics related to the payment network: • Domestic assessments are charges based on activity related to cards that carry the Company’s brands where the merchant country and the country of issuance are the same. These assessments are primarily driven by the domestic dollar volume of activity (e.g., domestic purchase volume, domestic cash volume) or the number of cards issued. • Cross-border assessments are charges based on activity related to cards that carry the Company’s brands where the merchant country and the country of issuance are different. These assessments are primarily driven by the cross-border dollar volume of activity (e.g., cross-border purchase volume, cross-border cash volume). • Transaction processing assessments are charges primarily driven by the number of switched transactions on our payment network. Switching activities include: ◦ Authorization, the process by which a transaction is routed to the issuer for approval ◦ Clearing, the determination and exchange of financial transaction information between issuers and acquirers after a transaction has been successfully conducted at the point of interaction ◦ Settlement, which facilitates the determination and exchange of funds between parties These assessments can also include connectivity services and network access, which are based on the volume of data transmitted and the number of authorization and settlement messages. • Other network assessments are charges for licensing, implementation and other franchise fees.MASTERCARD 2025 FORM 10-K 54PART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS The following table provides a summary of our key metrics related to the payment network.Years ended December 31, 2025 2024Increase/(Decrease) Increase/(Decrease)2025 2024 2023 As reportedCurrency-neutral As reported Currency-neutral ($ in millions)Domestic assessments $ 11,029 $ 10,245 $ 9,566 8% 8% 7% 9% Cross-border assessments 12,021 10,181 8,409 18% 17% 21% 22% Transaction processing assessments 15,930 13,602 12,067 17% 16% 13% 14% Other network assessments 1,018 936 963 9% 8% (3)% (3)%Foreign Currency Currency Impact Our primary functional currencies are the U.S. dollar, euro, British pound and the Brazilian real. Our overall operating results are impacted by currency translation, which represents the effect of translating operating results where the functional currency is different than our U.S. dollar reporting currency.Our operating results are also impacted by transactional currency. The impact of the transactional currency represents the effect of converting revenue and expense transactions occurring in a currency other than the functional currency. Changes in currency exchange rates directly impact the calculation of GDV, which is used in the calculation of our key metrics related to domestic assessments and cross-border assessments as well as certain volume-related rebates and incentives. GDV is calculated based on local currency spending volume converted to U.S. dollars and euros using average exchange rates for the period. As a result, our key metrics related to domestic assessments and cross-border assessments as well as certain volume-related rebates and incentives are impacted by the strengthening or weakening of the U.S. dollar and euro versus local currencies. For example, our billing in Australia is in the U.S. dollar, however, consumer spend in Australia is in the Australian dollar. The transactional currency impact of converting Australian dollars to our U.S. dollar billing currency will have an impact on the revenue generated. The strengthening or weakening of the U.S. dollar is evident when GDV growth on a U.S. dollar-converted basis is compared to GDV growth on a local currency basis. In 2025, GDV on a U.S. dollar-converted basis increased 8.7%, while GDV on a local currency basis increased 8.6% versus 2024. In 2024, GDV on a U.S. dollar-converted basis increased 8.1%, while GDV on a local currency basis increased 10.7% versus 2023. Further, the impact from transactional currency occurs in our key metrics related to transaction processing assessments and other network assessments as well as value-added services and solutions revenue and operating expenses when the transacting currency of these items is different than the functional currency of the entity. To manage the impact of foreign currency variability on anticipated revenues and expenses, we may enter into foreign exchange derivative contracts and designate such derivatives as hedging instruments in a cash flow hedging relationship as discussed further in Note 21 (Derivative and Hedging Instruments) to the consolidated financial statements included in Part II, Item 8.Foreign Exchange ActivityWe incur foreign currency gains and losses from remeasuring monetary assets and liabilities that are denominated in a currency other than the functional currency of the entity. To manage this foreign exchange risk, we may enter into foreign exchange derivative contracts to economically hedge the foreign currency exposure of our nonfunctional currency monetary assets and liabilities. The gains or losses resulting from the changes in fair value of these contracts are intended to reduce the potential effect of the underlying hedged exposure and are recorded net within general and administrative expenses on the consolidated statements of operations. The impact of this foreign exchange activity, including with the related hedging activities, has not been eliminated in our currency-neutral results. Our foreign exchange risk management activities are discussed further in Note 21 (Derivative and Hedging Instruments) to the consolidated financial statements included in Part II, Item 8. 55 MASTERCARD 2025 FORM 10-KPART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS Financial Results Net Revenue The components of net revenue were as follows:For the Years Ended December 31, Increase/(Decrease) 2025 2024 2023 2025 2024($ in millions)Payment network $ 19,476 $ 17,335 $ 15,824 12% 10% Value-added services and solutions 13,315 10,832 9,274 23% 17% Total net revenue $ 32,791 $ 28,167 $ 25,098 16% 12% Net revenue increased 16%, or 15% on a currency-neutral basis, in 2025 versus the prior year, which included a 1 percentage point increase from acquisitions completed in 2024 (“Acquisitions”). The remaining increase in net revenue was attributable to organic growth in our payment network and value-added services and solutions. Net revenue from our payment network increased 12%, on both an as-reported and currency-neutral basis, in 2025 versus the prior year. The increase was primarily driven by growth in domestic and cross-border dollar volumes and an increase in the number of switched transactions, reflecting growth trends across all of our key drivers. Net revenue from our payment network included $20,522 million of rebates and incentives provided to customers, which increased 16%, on both an as-reported and currency-neutral basis, in 2025 versus the prior year, primarily due to an increase in our key drivers as well as new and renewed deals. Net revenue from our value-added services and solutions increased 23%, or 21% on a currency-neutral basis, in 2025 versus the prior year, which included a 3 percentage point increase from Acquisitions. The remaining increase was driven primarily by (1) growth in our underlying key drivers, (2) our security and digital and authentication solutions, and consumer acquisition and engagement services, (3) pricing and (4) our business and market insights.See Note 3 (Revenue) to the consolidated financial statements included in Part II, Item 8 for a further discussion of how we recognize revenue. Drivers of Change The following table summarizes the drivers of change in net revenue: For the Years Ended December 31, Operational Acquisitions CurrencyImpact 1Total2025 2024 2025 2024 2025 2024 2025 2024 Payment network 12% 11% ** ** 1% (1)% 12 % 10 % Value-added services and solutions 18% 17% 3% —% 2% (1)% 23 % 17 % Net revenue 14% 13% 1% —% 1% (1)% 16 % 12 %Note: Table may not sum due to rounding. ** Not applicable.1 Includes the translational and transactional impact of currency and the related impact of our foreign exchange derivative contracts designated as cash flow hedging instruments. See “Non-GAAP Financial Information - Currency-neutral Growth Rates” for further information on our currency impact non-GAAP adjustment. No individual country, other than the United States, g enerated more than 10% of net revenue in any such period. A significant portion of our net revenue is concentrated among our five largest customers. In 2025, the net revenue from these customers was approximately $6.9 billion, or 21%, of total net revenue. The loss of any of these customers or their significant card programs could adversely impact our revenue. MASTERCARD 2025 FORM 10-K 56PART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS Operating ExpensesOperating expenses increased 10% in 2025 versus the prior year. Adjusted operating expenses increased 14%, on both an as-adjusted and currency-neutral basis, versus the prior year.The components of operating expenses were as follows:For the Years Ended December 31, Increase/(Decrease) 2025 2024 2023 2025 2024($ in millions)General and administrative $ 11,318 $ 10,193 $ 8,927 11 % 14 % Advertising and marketing 929 815 825 14 % (1) % Depreciation and amortization 1,143 897 799 27 % 12 % Provision for litigation 504 680 539 (26) % 26 % Total operating expenses 13,894 12,585 11,090 10 % 13 %Special Items 1(504) (870) (539) ** **Adjusted total operating expenses 1$ 13,389 $ 11,714 $ 10,551 14 % 11 %Note: Table may not sum due to rounding. ** Not meaningful. 1 See “Non-GAAP Financial Information” for further information on our non-GAAP adjustments and the reconciliation to GAAP reported amounts. Drivers of Change The following table summarizes the drivers of change in operating expenses: For the Years Ended December 31, Operational Acquisitions Currency Impact 1, 2 Special Items 2 Total2025 2024 2025 2024 2025 2024 2025 2024 2025 2024 General and administrative 9% 12 % 4 % 1 % 1 % — % (2) % 2 % 11 % 14 % Advertising and marketing 7% — % 5 % — % 2 % (1) % ** ** 14 % (1) % Depreciation and amortization 13% 12 % 13 % — % 1 % — % ** ** 27 % 12 %Provision for litigation** ** ** ** ** ** (26) % 26 % (26) % 26 % Total operating expenses 9% 11 % 4 % — % 1 % — % (4) % 2 % 10 % 13 %Note: Table may not sum due to rounding. ** Not applicable. 1 Represents the translational and transactional impact of currency. 2 See “Non-GAAP Financial Information” for further information on our non-GAAP adjustments and the reconciliation to GAAP reported amounts. General and AdministrativeGeneral and administrative expenses increased 11%, on both an as-reported and currency-neutral basis, in 2025 versus the prior year, which included a 4 percentage point increase from Acquisitions and a 2 percentage point decrease from Special Items. The remaining increase was primarily due to higher personnel costs to support the continued investment in our strategic initiatives across payments and value-added services and solutions, as well as fulfillment costs to provide marketing and consulting services. This increase was partially offset by a 2 percentage point decrease related to various new multi-year government grants that we received in 2025 with respect to investments in select jurisdictions. 57 MASTERCARD 2025 FORM 10-KPART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS The components of general and administrative expenses were as follows:For the Years Ended December 31, Increase/(Decrease) 2025 2024 2023 2025 2024($ in millions) Personnel$ 7,251 $ 6,673 $ 6,022 9% 11% Professional fees 537 549 495 (2)% 11% Data processing and telecommunications 1,272 1,119 1,008 14% 11%Foreign exchange activity 1113 65 83 74% (22)%Other2,145 1,787 1,319 20% 35% Total general and administrative expenses $ 11,318 $ 10,193 $ 8,927 11% 14%Note: Table may not sum due to rounding.1 Foreign exchange activity includes the impact of remeasurement of assets and liabilities denominated in foreign currencies net of the impact of gains and losses on foreign exchange derivative contracts. See Note 21 (Derivative and Hedging Instruments) to the consolidated financial statements included in Part II, Item 8 for further discussion.Advertising and MarketingAdvertising and marketing expenses increased 14%, or 12% on a currency-neutral basis, in 2025 versus the prior year, which included a 5 percentage point increase from Acquisitions. The remaining increase was primarily due to an increase in spending on sponsorships and marketing campaigns.Depreciation and AmortizationDepreciation and amortization expenses increased 27%, or 26% on a currency-neutral basis, in 2025 versus the prior year, which included a 13 percentage point increase from Acquisitions. The remaining increase was primarily due to higher capitalized software amortization, which is in line with the increase in capitalized software driven by the continued growth of our business.Provision for LitigationIn 2025, we recorded charges of $504 million, primarily as a result of a change in estimate related to the claims of merchants who opted out of the U.S. merchant class litigation, a legal provision associated with the U.S. liability shift litigation and a legal provision associated with the ATM non-discrimination rule surcharge complaints. In 2024, we recorded charges of $680 million, primarily as a result of a legal provision associated with the U.K. consumer class action settlement, settlements with a number of U.K. merchants and a change in estimate related to the claims of merchants who opted out of the U.S. merchant class litigation. In 2023, we recorded charges of $539 million, primarily as a result of changes in the estimate related to the claims of merchants who opted out of the U.S. merchant class litigation and settlements with a number of U.K. and Pan-European merchants. See Note 19 (Legal and Regulatory Proceedings) to the consolidated financial statements included in Part II, Item 8 for further discussion. MASTERCARD 2025 FORM 10-K 58 PART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONSOther Income (Expense) The components of total other income (expense) were as follows:For the Years Ended December 31, Favorable/(Unfavorable) 2025 2024 2023 2025 2024(in millions)Investment income $ 325 $ 327 $ 274 $ (2) $ 53 Gains (losses) on equity investments, net (88) (29) (61) (59) 32 Interest expense (722) (646) (575) (76) (71) Other income (expense), net 1 166 20 (7) 146 27 Total other income (expense) (319) (328) (369) 9 41 (Gains) losses on equity investments, net 2 88 29 61 59 (32) Adjusted total other income (expense) 2 $ (232) $ (300) $ (308) $ 68 $ 9Note: Table may not sum due to rounding.1 Other income (expense), net increased in 2025 versus the prior year, primarily driven by approximately $135 million recognized related to government grants. 2 See “Non-GAAP Financial Information” for further information on our non-GAAP adjustments and the reconciliation to GAAP reported amounts.Income TaxesThe effective income tax rates for the years ended December 31, 2025 and 2024 were 19.4% and 15.6%, respectively. The adjusted effective income tax rates for the years ended December 31, 2025 and 2024 were 19.6% and 16.2%, respectively. Both the as-reported and as-adjusted effective income tax rates were higher versus 2024, primarily due to a change in the net tax effect of our Singapore operations, which includes the Pillar 2 Rules that took effect in 2025. Additionally, a change in our geographic mix of earnings contributed to the higher effective income tax rates, partially offset by net discrete tax benefits. See Note 18 (Income Taxes) to the consolidated financial statements included in Part II, Item 8 for further discussion. In July 2025, the U.S. enacted the One Big Beautiful Bill Act (OBBBA). While we continue to analyze the impacts of the OBBBA, at this time it is not expected to have a material impact on our financial statements.Liquidity and Capital ResourcesWe rely on existing liquidity (our cash, cash equivalents and investments), cash generated from operations and access to capital to fund our global operations, credit and settlement exposure, capital expenditures, investments in our business and current and potential obligations. The following table summarizes the cash, cash equivalents, investments and credit available to us at December 31: 2025 2024(in billions) Cash, cash equivalents and investments 1$ 10.9 $ 8.8 Unused line of credit 8.0 8.0 1 Investments include available-for-sale securities and held-to-maturity securities. This amount excludes restricted cash and restricted cash equivalents of $2.7 billion and $2.4 billion at December 31, 2025 and 2024, respectively. We believe that our existing liquidity, our cash flow generating capabilities, and our access to capital resources are sufficient to satisfy our future operating cash needs, capital asset purchases, outstanding commitments and other liquidity requirements associated with our existing operations and potential obligations which include litigation provisions and credit and settlement exposure. Our liquidity and access to capital could be negatively impacted by global credit market conditions. We guarantee the settlement of many of the transactions between our customers. Historically, payments under these guarantees have not been significant; however, historical trends may not be indicative of potential future losses. The risk of loss on these guarantees is specific to individual customers, but may also be driven by regional or global economic and market conditions, including, but not limited to the 59 MASTERCARD 2025 FORM 10-KPART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONShealth of the financial institutions in a country or region. See Note 20 (Settlement and Other Risk Management) to the consolidated financial statements in Part II, Item 8 for a description of these guarantees. Our liquidity and access to capital could also be negatively impacted by the outcome of any of the legal or regulatory proceedings to which we are a party. For additional discussion of these and other risks facing our business, see Part I, Item 1A - Risk Factors - Legal and Regulatory Risks and Note 19 (Legal and Regulatory Proceedings) to the consolidated financial statements included in Part II, Item 8.Cash Flows The table below shows a summary of the cash flows from operating, investing and financing activities: For the Years Ended December 31,2025 2024 2023(in millions)Net cash provided by operating activities $ 17,648 $ 14,780 $ 11,980 Net cash used in investing activities (1,362) (3,402) (1,351) Net cash used in financing activities (14,179) (10,836) (9,488) Net cash provided by operating activities increased $2.9 billion in 2025 versus the prior year, primarily due to higher net income after adjusting for non-cash items. Net cash used in investing activities decreased $2.0 billion in 2025 versus the prior year, primarily due to less cash paid for business acquisitions and lower purchases of investment securities, partially offset by lower proceeds from maturities and sales of investment securities. Net cash used in financing activities increased $3.3 billion in 2025 versus the prior year, primarily due to lower proceeds from debt and higher cash paid for repurchases of our Class A common stock and dividends, partially offset by higher repayments of debt in the prior year.Debt and Credit AvailabilityIn February 2025, we issued $300 million principal amount of Floating Rate Notes due March 2028, $450 million principal amount of 4.550% notes due March 2028 and $500 million principal amount of 4.950% notes due March 2032 (collectively, the “2025 USD Notes”). The net proceeds from the issuance of the 2025 USD Notes, after deducting the original issue discount, underwriting discount and offering expenses, were $1.242 billion. In March 2025, $750 million of principal related to the 2019 USD Notes matured and was paid. Our total debt outstanding at December 31, 2025 was $19.0 billion, with the earliest maturity of $750 million of principal occurring in November 2026. As of December 31, 2025, we have a commercial paper program (the “Commercial Paper Program”), under which we are authorized to issue up to $8 billion in outstanding notes, with maturities up to 397 days from the date of issuance. In conjunction with the Commercial Paper Program, we have a committed unsecured $8 billion revolving credit facility (the “Credit Facility”) that was amended and extended in 2025 and now expires in November 2030. Borrowings under the Commercial Paper Program and the Credit Facility are to be used to provide liquidity for general corporate purposes, including providing liquidity in the event of one or more settlement failures by our customers. In addition, we may borrow and repay amounts under these facilities for business continuity purposes. We had no borrowings outstanding under the Commercial Paper Program or the Credit Facility at December 31, 2025. See Note 13 (Debt) to the consolidated financial statements included in Part II, Item 8 for further discussion on our debt, the Commercial Paper Program and the Credit Facility.Dividends and Share Repurchases We have historically paid quarterly dividends on our outstanding Class A common stock and Class B common stock. Subject to legally available funds, we intend to continue to pay a quarterly cash dividend. The declaration and payment of future dividends is at the sole discretion of our Board of Directors after taking into account various factors, including our financial condition, operating results, available cash and current and anticipated cash needs.MASTERCARD 2025 FORM 10-K 60PART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS The following table summarizes the annual total and per share dividends paid in the years reflected: For the Years Ended December 31,2025 2024 2023(in millions, except per share data)Cash dividend, per share $ 3.04 $ 2.64 $ 2.28 Cash dividends paid $ 2,756 $ 2,448 $ 2,158 The following table summarizes the dividends declared by our Board of Directors on our outstanding Class A common stock and Class B common stock, payable in 2026: Date of Declaration Amount Payable per Share Record Date Date Payable Aggregate Amount (in millions) December 9, 2025 $ 0.87 January 9, 2026 February 9, 2026 $ 777 February 10, 2026 $ 0.87 April 9, 2026 May 8, 2026 $ 776 1 1 Represents the estimated aggregate amount of dividends to be paid. Repurchased shares of our common stock are considered treasury stock. In December 2025 and 2024, our Board of Directors approved programs authorizing us to repurchase shares of our Class A common stock up to $14.0 billion and $12.0 billion, respectively. The program approved in 2025 will become effective after the completion of the program approved in 2024. The timing and actual number of additional shares repurchased will depend on a variety of factors, including cash requirements to meet the operating needs of the business, legal requirements, as well as the share price and economic and market conditions. The following table summarizes our share repurchase authorizations and repurchase activity of our Class A common stock for the year ended December 31, 2025, unless otherwise noted:(in millions, except per share data)Remaining authorization at December 31, 2024 $ 15,188Dollar-value of shares repurchased in 2025 $ 11,727 Remaining authorization at December 31, 2025 $ 17,461 Shares repurchased in 2025 21.1 Average price paid per share in 2025 $ 555.78 Dollar-value of shares repurchased January 1, 2026 through February 6, 2026 $ 1,147Note: Table may not sum due to rounding.See Note 14 (Stockholders' Equity) to the consolidated financial statements included in Part II, Item 8 for further discussion.Critical Accounting Estimates The application of GAAP requires us to make estimates and assumptions about certain items and future events that directly affect our reported financial condition. Our significant accounting policies, including recent accounting pronouncements, are described in Note 1 (Summary of Significant Accounting Policies) to the consolidated financial statements included in Part II, Item 8. Revenue Recognition - Rebates and Incentives We enter into business agreements with certain customers that provide for rebates and incentives when customers meet certain volume thresholds or other incentives tied to customer performance. We consider various factors in estimating customer performance, including forecasted transactions, card issuance and card conversion volumes, expected payments and historical experience with that customer. Rebates and incentives are recorded within net revenue based on these estimates primarily when volume- and transaction- based revenues are recognized over the contractual term. Differences between actual results and our estimates are adjusted in the period the customer reports actual performance. If our customers’ actual performance is not consistent with our estimates of their performance, net revenue may be materially different.61 MASTERCARD 2025 FORM 10-KPART II ITEM 7. MANAGEMENT’S DISCUSSION AND ANALYSIS OF FINANCIAL CONDITION AND RESULTS OF OPERATIONS Loss Contingencies We are currently involved in various claims and legal proceedings. We regularly review the status of each significant matter and assess its potential financial exposure. If the potential loss from any claim or legal proceeding is considered probable and the amount can be reasonably estimated, we accrue a liability for the estimated loss. Significant judgment is required in both the determination of probability and whether an exposure is reasonably estimable. Our judgments are subjective based on the status of the legal or regulatory proceedings, the merits of our defenses and consultation with in-house and outside legal counsel. Because of uncertainties related to these matters, accruals are based only on the best information available at the time. As additional information becomes available, we reassess the potential liability related to pending claims and litigation and may revise our estimates. Due to the inherent uncertainties of the legal and regulatory process in the multiple jurisdictions in which we operate, our judgments may be materially different than the actual outcomes. Income Taxes In calculating our effective income tax rate, estimates are required regarding the timing and amount of taxable and deductible items which will adjust the pretax income earned in various tax jurisdictions. Through our interpretation of local tax regulations, adjustments to pretax income for income earned in various tax jurisdictions are reflected within various tax filings. Although we believe that our estimates and judgments discussed herein are reasonable, actual results may be materially different than the estimated amounts. We record a valuation allowance to reduce our deferred tax assets to the amount that is more likely than not to be realized. Significant judgment is required in determining the valuation allowance. In assessing the need for a valuation allowance, we consider all sources of taxable income, including projected future taxable income, reversing taxable temporary differences and ongoing tax planning strategies. If it is determined that we are able to realize deferred tax assets in excess of the net carrying value or to the extent we are unable to realize a deferred tax asset, we would adjust the valuation allowance in the period in which such a determination is made, with a corresponding increase or decrease to earnings. We record tax liabilities for uncertain tax positions taken, or expected to be taken, which may not be sustained or may only be partially sustained, upon examination by the relevant taxing authorities. We consider all relevant facts and current authorities in the tax law in assessing whether any benefit resulting from an uncertain tax position is more likely than not to be sustained and, if so, how current law impacts the amount reflected within these financial statements. If upon examination, we realize a tax benefit which is not fully sustained or is more favorably sustained, this would generally increase earnings in the period. In certain situations, we will have offsetting tax credits or taxes in other jurisdictions. Business Combinations We account for our business combinations using the acquisition method of accounting. The acquisition purchase price, including contingent consideration, if any, is allocated to the underlying identified, tangible and intangible assets, liabilities assumed and any non-controlling interest in the acquiree, based on their respective estimated fair values on the acquisition date. Any excess of purchase price over the fair value of net assets acquired, including identifiable intangible assets, is recorded as goodwill. The amounts and useful lives assigned to acquisition-related tangible and intangible assets impact the amount and timing of future amortization expense. We use various valuation techniques to determine fair value, primarily discounted cash flows analysis, relief-from-royalty and multi-period excess earnings for estimating the value of intangible assets. These valuation techniques include comparable company multiples, discount rates, growth projections and other assumptions of future business conditions. Determining the fair value of assets acquired, liabilities assumed, any non-controlling interest in the acquiree and the expected useful lives, requires management’s judgment. The significance of management’s estimates and assumptions is relative to the size of the acquisition. Our estimates are based upon assumptions believed to be reasonable, but which are inherently uncertain and unpredictable.MASTERCARD 2025 FORM 10-K 62PART II