All federal prohibitions on the ability of financial institutions to pay interest on demand deposit accounts were repealed as part of the Dodd-Frank Act. We do not yet know what interest rates other institutions may offer as market interest rates begin to increase. Our interest expense will increase and our net interest margin will decrease if we begin offering interest on demand deposits to attract additional customers or maintain current customers, which could have a material adverse effect on our business, financial condition and results of operations.

Our customers and employees have been and will continue to be, targeted by parties using fraudulent e-mails and other communications in attempts to misappropriate passwords, bank account information or other personal information or to introduce viruses or other malware through "Trojan horse" programs to our information systems and/or our customers' computers. Though we endeavor to mitigate these threats through product improvements, use of encryption and authentication technology and customer and employee education, such cyber attacks against us or our merchants and our third party service providers remain a serious issue. The pervasiveness of cybersecurity incidents in general and the risks of cyber crime are complex and continue to evolve. More generally, publicized information concerning security and cyber-related problems could inhibit the use or growth of electronic or web-based applications or solutions as a means of conducting commercial transactions.

Although we make significant efforts to maintain the security and integrity of our information systems and have implemented various measures to manage the risk of a security breach or disruption, there can be no assurance that our security efforts and measures will be effective or that attempted security breaches or disruptions would not be successful or damaging. Even the most well protected information, networks, systems and facilities remain potentially vulnerable because attempted security breaches, particularly cyber attacks and intrusions, or disruptions will occur in the future and because the techniques used in such attempts are constantly evolving and generally are not recognized until launched against a target and in some cases are designed not to be detected and, in fact, may not be detected. Accordingly, we may be unable to anticipate these techniques or to implement adequate security barriers or other preventative measures and thus it is virtually impossible for us to entirely mitigate this risk. While we maintain specific “cyber” insurance coverage, which would apply in the event of various breach scenarios, the amount of coverage may not be adequate in any particular case. Furthermore, because cyber threat scenarios are inherently difficult to predict and can take many forms, some breaches may not be covered under our cyber insurance coverage. A security breach or other significant disruption of our information systems or those related to our customers, merchants and our third party vendors, including as a result of cyber attacks, could (i) disrupt the proper functioning of our networks and systems and therefore our  operations and/or those of certain of our customers; (ii) result in the unauthorized access to and destruction, loss, theft, misappropriation or release of confidential, sensitive or otherwise valuable information of ours or our customers; (iii) result in a violation of applicable privacy, data breach and other laws, subjecting us to additional regulatory scrutiny and expose the us to civil litigation, governmental fines and possible financial liability; (iv) require significant management attention and resources to remedy the damages that result; or (v) harm our reputation or cause a decrease in the number of customers that choose to do business with us. The occurrence of any of the foregoing could have a material adverse effect on our business, financial condition and results of operations.

We outsource certain information system and data management and processing functions to third party providers. These third party service providers are sources of operational and informational security risk to us, including risks associated with operational errors, information system interruptions or breaches and unauthorized disclosures of sensitive or confidential client or customer information. If third party service providers encounter any of these issues, or if we have difficulty communicating with them, we could be exposed to disruption of operations, loss of service or connectivity to customers, reputational damage and litigation risk that could have a material adverse effect on our results of operations or our business.

Third party vendors provide key components of our business infrastructure such as internet connections, network access and core application processing. While we have selected these third party vendors carefully, we do not control their actions.