MA · CIK 1141391
What Mastercard Incorporated told the SEC could break it.
Mastercard's disclosures point to where its revenue concentrates. Its five largest customers together generated about $6.9 billion — 21% of total net revenue in 2025 — so although none individually exceeds 10%, losing one or its major card programs would bite. A similar share, roughly 29%, comes from cross-border activity, leaving revenue sensitive to declines in international travel and commerce. Beyond that, it flags two legal exposures: a class of non-bank U.S. ATM operators alleges it and Visa violated the Sherman Act through non-discriminatory ATM-surcharge rules, and its compliance with sanctions and suspension of operations in Russia could bring fines, lawsuits and even nationalization of its Russian subsidiary.
4 self-disclosed vulnerabilities, pulled from its own filings — each in the company’s words, with the source. This is the risk register almost nobody reads.
In its own words
What could break it.
Customer concentration
- five largest customers = ~21% of net revenue (~$6.9B)medium
Mastercard's five largest customers together generated approximately $6.9 billion, or 21%, of total net revenue in 2025; no single customer exceeded 10%, but loss of any of these customers or their major card programs could adversely impact revenue.
“A significant portion of our net revenue is concentrated among our five largest customers. In 2025, the net revenue from these customers was approximately $6.9 billion, or 21%, of total net revenue. The loss of any of these customers or their significant card programs could adversely impact our revenue.”
SEC filing →As of 2026
Geographic concentration
- cross-border volume fees ~29% of net revenuemedium
Cross-border activity generated about 29% of Mastercard's net revenue in 2025 (30% in 2024 and 2023); declines in cross-border travel/commerce would reduce revenue.
“29 % of net revenue in 2025, 30 % in 2024 and 30 % in 2023. No individual country, other than the U.S., generated more than 10% of net revenue in those periods.”
SEC filing →As of 2026
Litigation
- ATM Operators Class antitrust complaint (Sherman Act §1) vs Mastercard and Visamedium
A class of non-bank U.S. ATM operators alleges Mastercard and Visa violated Section 1 of the Sherman Act by imposing rules requiring non-discriminatory ATM surcharges, exposing Mastercard to antitrust liability.
“Plaintiffs allege that Mastercard and Visa have violated Section 1 of the Sherman Act by imposing rules that require ATM operators to charge non-discriminatory ATM surcharges for transactions processed over Mastercard's and Visa's respectiv”
SEC filing →As of 2026
Regulatory & policy
- Russia suspension — sanctions, subsidiary nationalization risk, litigationmedium
Mastercard's compliance with sanctions and its suspension of business operations in Russia has led, and could further lead, to legal ramifications including fines, nationalization of its Russian subsidiary, and lawsuits.
“our compliance with sanctions and our decision to suspend our business operations in Russia has led, and could further lead, to other legal ramifications and operational challenges, including fines, the nationalization of our subsidiary and any resulting impacts, and/or lawsuits.”
The hidden graph
Who it depends on, and who depends on it.
Relationships surfaced from filings — including ones disclosed by the other side, which is how the non-obvious ones come to light.
Its customers
“Significantly, certain third-party service providers, including Mastercard, are the sole source or one of a limited number of sources of the services they provide for us. It would be difficult and disruptive for us to replace some of our third-party vendors in a timely manner if they were unwilling or unable to provide us with these services in the future (as a result of their financial or business conditions or otherwise), and our business and operations likely would be materially adversely affected.”
Cited →“sale of services in the U.S. and Canada to merchants that accept Visa cards and Mastercard cards are dependent on our continued financial institution sponsorship and we are required to comply with payment card network operating rules”
Cited →“if we were precluded from allowing our clients to process Visa and MasterCard transactions, which we access through our payment processor arrangements, we would lose substantially all of our revenue.”
Cited →
In the MyPRIA app, this is checked against the companies you actually own.
← World Watch