Company: FLYW
Filing Date: 2025-02-26
Form Type: 10-K
Source: 0000950170-25-027078
Chunk: 98

Company: Flywire Corp
Filing Date: 2025-02-26
Form: 10-K
Item: Item 1
Chunk 98
---
 with the card network rules or other applicable rules and requirements of the card payment networks, Visa or Mastercard or our other card providers could suspend or terminate our registration. Further, our transaction processing capabilities, including with respect to settlement processes, could be delayed or otherwise disrupted, and recurring non-compliance could result in the payment networks seeking to fine us, or suspend or terminate our registrations which allow us to process transactions on their networks, which would make it impossible for us to conduct our business on its current scale. 

Under certain circumstances specified in the card network rules, we may be required to submit to periodic audits, self-assessments, or other assessments of our compliance with the PCI DSS. Such activities may reveal that we have failed to comply with the PCI DSS. In addition, even if we comply with the PCI DSS, there is no assurance that we will be protected from a security breach or other cybersecurity incident. 

The termination of our registration with the payment networks, or any changes in payment network or issuer rules that limit our ability to provide card payment alternatives to our clients’ customers could have an adverse effect on our payment processing volumes, revenues and operating costs. If we are unable to comply with the requirements applicable to our settlement activities, the payment networks may no longer allow us to provide these services and we would lose a substantial portion of our revenues. 

We are also subject to the National Automated Clearing House Association (NACHA) operating rules. NACHA is a self-regulatory organization which administers and facilitates private-sector operating rules for ACH payments and defines the roles and responsibilities of financial institutions and other ACH network participants. The NACHA Rules and Operating Guidelines impose obligations on us and our partner financial institutions particularly when we instruct our partner institutions to debit a third party’s account. These obligations include audit and oversight by the financial institutions and the imposition of mandatory corrective action, including termination, for serious violations. If an audit or self-assessment of PCI DSS or NACHA compliance identifies any deficiencies that we need to remediate, the remediation efforts may distract our management team and other staff and be expensive and time consuming. 

22

Similarly, our ACH sponsor banks have the right to audit our compliance with NACHA’s rules and guidelines and are given wide discretion to approve certain aspects of our business practices. Like the payment networks, NACHA may update its operating rules and guidelines at any time, which could require us to take more costly compliance measures or to develop more complex monitoring systems.