Company: NEWTP
Filing Date: 2025-08-13
Form Type: 424B2
Source: 0001587987-25-000144
Chunk: 89

Company: NewtekOne, Inc.
Filing Date: 2025-08-13
Form: 424B2
Chunk 89
---
 operations” on Page 16 of this prospectus.

Anti-Money Laundering, Sanctions and Financial Crime

We are subject to a wide range of laws related to anti-money laundering, economic sanctions and prevention of financial crime, including the Bank Secrecy Act, the USA PATRIOT Act and economic sanctions programs. We are required to, among other things, maintain an effective anti-money laundering and counter-terrorist compliance program, identify and file suspicious activity and currency transaction reports, and block transactions with sanctioned persons or jurisdictions. Compliance with these laws requires significant investment of management attention and resources. These laws are enforced by a number of regulatory authorities, including the Federal Reserve, the OCC, Office of Foreign Assets Control, the Financial Crimes Enforcement Network, the U.S. Department of Justice, Drug Enforcement Administration, and Internal Revenue Service. Failure to comply with these laws, or to meet our regulators’ supervisory expectations in connection with these laws, could subject us to supervisory or enforcement action, significant financial penalties, criminal liability and/or reputational harm.

#### Third-Party Relationship Risk Management
We utilize third-party service providers to perform a wide range of operations and other functions, which may present various risks. Our regulators will expect us to maintain an effective program for managing risk arising from third-party relationships, which should be commensurate with the level of risk and complexity of our business and our third-party relationships. If not managed effectively, the use of third-party service providers may expose us to risks that could result in regulatory action, financial loss, litigation and reputational harm.

#### Privacy, Information Technology and Cybersecurity
We are subject to various laws related to the privacy of consumer information. For example, we and our subsidiaries are required under federal law periodically to disclose to their retail clients our policies and practices with respect to the sharing of nonpublic client information with their affiliates and others, and the confidentiality and security of that information. In some cases, Newtek Bank must obtain a consumer’s consent before sharing information with an unaffiliated third party, and Newtek Bank must allow a consumer to opt out of Newtek Bank’s sharing of information with its affiliates for marketing and certain other purposes. We are also subject to laws and regulatory requirements related to information technology and cybersecurity. For example, the Federal Financial Institutions Examination Council, which is a council comprised of the primary federal banking regulators, has issued guidance and supervisory expectations for banking organizations with respect to information technology and cybersecurity. Our regulators will regularly examine us for compliance with applicable laws, and adherence