Company: FLYW
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0000950170-25-027078
Chunk: 164

Company: Flywire Corp
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1A
Chunk 164
---
 operate. As part of our compliance efforts, we scan our clients and their customers against watch lists promulgated by OFAC and certain other international agencies. Our application can be accessed from nearly anywhere in the world, and if our service is accessed from a sanctioned country or otherwise accessed or used in violation of applicable trade and economic sanctions, we could be subject to fines or other enforcement actions. In the course of enhancing our sanctions compliance function, we initiated an internal review that identified issues related to our compliance with sanctions, including payments that may have originated from sanctioned jurisdictions or sanctioned persons. We have made voluntary submissions to OFAC to report the apparent violations and to provide supplemental information. Flywire is currently engaging with OFAC to resolve these matters. Although the internal investigation completed to date suggests that any loss incurred as a result of this matter would not be material to our business, if OFAC ultimately concludes any violation has occurred in connection with these or other transactions, it could result in penalties, fines, costs, and restrictions on our ability to do business, which could also harm our operating results.

We are also subject to various AML and CFT laws and regulations around the world that prohibit, among other things, our involvement in transferring the proceeds of criminal or terrorist activities. In the United States, most of our solutions are subject to AML laws and regulations, including the BSA, and similar laws and regulations. The BSA, among other things, requires MSBs to develop and implement risk-based AML programs, to report large cash transactions and 

59

suspicious activity, and in some cases, to collect and maintain information about clients who use their services and maintain other transaction records. Regulators and third-party auditors have identified gaps in how similar businesses have implemented AML programs, and we could likewise be subject to significant fines, penalties, inquiries, audits, investigations, enforcement actions, and criminal and civil liability if our AML program is found to be insufficient by a regulator. 

Our business operations in other parts of the world such as the U.K., Lithuania, Canada, Australia, Hong Kong, New Zealand, Indonesia and Singapore are subject to similar laws and requirements. Regulators in the United States and globally continue to increase their scrutiny of compliance with these obligations, which may require us to further revise or expand our compliance program, including the procedures we use to verify the identity of our clients and to monitor transactions on our system, including payments to persons outside of the United States. Regulators regularly re-examine the transaction volume thresholds at