dfs-20201231

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, or a smaller reporting company. See the definitions of “large accelerated filer,” “accelerated filer” and “smaller reporting company” in Rule 12b-2 of the Exchange Act.

Large Accelerated Filer

☒

Accelerated Filer

☐

Non-accelerated Filer

☐

Smaller Reporting Company

☐

Emerging Growth Company

☐

Except as otherwise indicated or unless the context otherwise requires, “Discover Financial Services,” “Discover,” “DFS,” “we,” “us,” “our,” and “the Company” refer to Discover Financial Services and its subsidiaries. See “Item 8 — Financial Statements and Supplementary Data — Glossary of Acronyms” for terms and abbreviations used throughout the annual report.

We own or have rights to use the trademarks, trade names and service marks that we use in conjunction with the operation of our business, including, but not limited to: Discover®, PULSE®, Cashback Bonus®, Discover Cashback Checking®, Discover it®, Freeze it®, College Covered® and Diners Club International®. All other trademarks, trade names and service marks included in this annual report on Form 10-K are the property of their respective owners.

Discover Financial Services (the “Company”) is a digital banking and payment services company. We were incorporated in Delaware in 1960. We are a bank holding company under the Bank Holding Company Act of 1956 as well as a financial holding company under the Gramm-Leach-Bliley Act and therefore are subject to oversight, regulation and examination by the Board of Governors of the Federal Reserve System (the “Federal Reserve”). We provide digital banking products and services and payment services through our subsidiaries. We offer our customers credit card loans, private student loans, personal loans, home loans and deposit products. We had $90.4 billion in loan receivables and $63.5 billion in deposits issued through direct-to-consumer channels and affinity relationships at December 31, 2020. We also operate the Discover Network, the PULSE network (“PULSE”) and Diners Club International (“Diners Club”), collectively known as the Discover Global Network. The Discover Network processes transactions for Discover-branded credit and debit cards and provides payment transaction processing and settlement services. PULSE operates an electronic funds transfer network, providing financial institutions issuing debit cards on the PULSE network with access to ATMs domestically and internationally, as well as merchant acceptance throughout the United States for debit card transactions. Diners Club is a global payments network of licensees, which are generally financial institutions, that issue Diners Club branded charge cards and/or provide card acceptance services.

We make available, free of charge through the investor relations page of our internet site www.discover.com, our annual reports on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, proxy statements, Forms 3, 4 and 5 filed by or on behalf of our directors and executive officers, and any amendments to those documents filed with or furnished to the Securities and Exchange Commission (the “SEC”) pursuant to the Securities Exchange Act of 1934. These filings are available as soon as reasonably practicable after they are filed with or furnished to the SEC.

In addition, the following information is available on the investor relations page of our internet site: (i) our Corporate Governance Policies; (ii) our Code of Ethics and Business Conduct; and (iii) the charters of the Audit, Compensation and Leadership Development, Nominating and Governance and Risk Oversight Committees of our Board of Directors. These documents are also available in print without charge to any person who requests them by writing or telephoning our principal executive offices: Discover Financial Services, Office of the Corporate Secretary, 2500 Lake Cook Road, Riverwoods, Illinois 60015, United States of America, telephone number (224) 405-0900.

We manage our business activities in two segments: Digital Banking and Payment Services. We have changed the name of our banking segment to Digital Banking to better align with our business activities, structure and strategy. This name change did not involve any change to the operations or composition of our segments period-over-period. Our Digital Banking segment includes consumer banking and lending products, specifically Discover-branded credit cards issued to individuals on the Discover Network and other consumer banking products and services, including private student loans, personal loans, home loans and deposit products. Our Payment Services segment includes PULSE, Diners Club and our Network Partners business, which provides payment transaction processing and settlement services on the Discover Global Network.

We are principally engaged in providing products and services to customers in the United States. However, we also receive revenue from sources outside of the United States, including royalty and licensee revenue from our Diners Club licensees and network assessment, discount and interchange fees from our network-to-network partners (“Network Alliances”). For quantitative information concerning our geographic distribution, see Note 4: Loan Receivables to our consolidated financial statements.

We currently offer and issue credit cards to consumers. Our credit card customers are permitted to “revolve” their balances and repay their obligations over a period of time and at an interest rate set forth in their cardmember agreements, which may be either fixed or variable. The interest that we earn on revolving credit card balances makes up approximately 81% of our total interest income. We also charge customers other fees as specified in the cardmember agreements. These fees may include fees for late payments, returned checks, balance transfer transactions and cash advance transactions.

Our private student loans are primarily available to students attending eligible non-profit undergraduate and graduate schools. We also offer certain post-graduate loans, including consolidation, bar study and residency loans. All of our private student loans are unsecured and have terms and conditions that vary by product. We encourage students to borrow responsibly and maximize grants, scholarships and other free financial aid before taking student loans.

Our private student loans feature fixed or variable interest rates with zero origination fees. Customers can elect to make extra payments to pay their loans off earlier than contractually scheduled without penalty. The loans can feature potential rewards, such as for good grades, and we also offer optional in-school payment products where students make monthly payments while in school. The standard repayment period is 15 to 20 years, depending on the type of student loan. Private student loans may include a deferment period, during which interest continues to accrue and customers are not required to make payments while enrolled in school at least half time as determined by the school. This period begins on the date the loan is first disbursed and ends six to nine months (depending on loan type) after the customer ceases to be enrolled in school at least half time. As part of the loan approval process, all of our private student loans, except for

We market our private student loans through digital channels, direct mail, email, radio and television. We also work with schools to create awareness of our products with students and their families. Students can apply for our private student loans online or by telephone and we have dedicated staff within our call centers to service private student loans. We invite applicants who qualify to apply with a creditworthy cosigner, which may improve the likelihood of loan approval and a lower interest rate.

Our personal loans are primarily intended to help customers consolidate existing debt, although they can be used for other purposes. These loans are unsecured with fixed interest rates, terms and payments, and have zero origination fees. The repayment period for personal loans is three to seven years and there is no penalty for prepaying any portion of a personal loan balance. Customers may be subject to late fees if they have not made a minimum payment by the contractual due date.

Our home loans are intended for multiple purposes, including mortgage refinance, debt consolidation, home improvement and other major expenses. These loans are closed-end with fixed interest rates, terms and payments, and are secured by a first or second lien on a customer’s home. These loans require monthly payment over a 10- to 30-year term. Customers may elect to make larger than minimum payments without being subject to a prepayment penalty. Customers do not pay origination fees or third-party costs during the application process or at closing, but they may be required to reimburse certain third-party costs if the loan is repaid in full within three years. Customers may also be subject to additional charges, including late fees and returned payment charges.

We obtain deposits from consumers directly or through affinity relationships (“direct-to-consumer deposits”). Additionally, we obtain deposits through third-party securities brokerage firms that offer our deposits to their customers (“brokered deposits”). Our direct-to-consumer deposit products include savings accounts, certificates of deposit, money market accounts, IRA certificates of deposit, IRA savings accounts and checking accounts, while our brokered deposit products include certificates of deposit and sweep accounts. All of our deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) to the maximum permitted by law. We do not pay interest on checking account balances and instead offer cashback rewards for certain debit card purchases. Certificates of deposit are offered on a range of tenors from three months through ten years with interest rates that are fixed for the full period. There are minimum balance requirements to open certificates of deposit and penalties for early withdrawals. There are no minimum balance requirements to open money market accounts and savings accounts. Money market accounts and savings accounts have limitations on withdrawal frequency and interest rates on these accounts are subject to change at any time. Service charges apply to outgoing wire transfers only and availability of funds varies based on type and method of deposit and customer relationship tenure.

We market our direct-to-consumer deposit products through the use of digital channels, direct mail, print materials, email and arrangements with third parties. Customers can generally apply for deposit accounts online or by telephone. Cashback Debit checking account applications can only be initiated online. For more information regarding our deposit products, see “Management’s Discussion and Analysis of Financial Condition and Results of Operations — Liquidity and Capital Resources — Funding Sources — Deposits.”

Our PULSE network is one of the nation’s leading debit/ATM networks. PULSE links cardholders served by financial institutions to ATMs and point-of-sale (“POS”) terminals located throughout the United States, including cardholders at financial institutions with which PULSE has direct relationships and through agreements PULSE has with other debit networks. PULSE also provides cash access at ATMs internationally.

PULSE’s primary source of revenue is transaction fees charged for switching and settling ATM and debit transactions initiated through the use of debit cards issued by participating financial institutions. In addition, PULSE offers a variety of optional products and services that produce income for the network, including signature debit transaction processing, debit card fraud detection and risk mitigation services and connections to other regional and national electronic funds transfer networks.

When a financial institution joins the PULSE network, debit cards issued by that institution are eligible to be used at all of the ATMs and POS debit terminals that participate in the PULSE network and the PULSE mark can be used on that institution’s debit cards and ATMs. In addition, financial institution participants may sponsor merchants, direct processors and independent sales organizations to participate in the PULSE POS and ATM debit service. A participating financial institution assumes liability for transactions initiated through the use of debit cards issued by that institution, as well as for ensuring compliance with PULSE’s operating rules and policies applicable to that institution’s debit cards, ATMs and, if applicable, sponsored merchants, direct processors and independent sales organizations.

When PULSE enters into a network-to-network agreement with another debit network, the other network’s participating financial institutions’ debit cards can be used at terminals in the PULSE network. PULSE does not have a direct relationship with these financial institutions and the other network bears the financial responsibility for transactions of those financial institutions’ cardholders and for ensuring compliance with PULSE’s operating rules.

Our Diners Club business maintains a global acceptance network through its relationships with licensees, which are generally financial institutions. We do not directly issue Diners Club cards to consumers, but grant our licensees the right to issue Diners Club branded cards and/or provide card acceptance services. Our licensees pay us royalties for the right to use the Diners Club brand, which is our primary source of Diners Club revenues. We also earn revenue from providing various support services to our Diners Club licensees, including processing and settlement of cross-border transactions. We also provide a centralized service center and technological services to our licensees.

When Diners Club cardholders use their cards outside the host country or territory of the issuing licensee, transactions are routed and settled over the Diners Club network through its centralized service center. In order to increase merchant acceptance in certain targeted countries and territories, we work with merchant acquirers to offer Diners Club and Discover acceptance to their merchants. These acquirers are granted licenses to market the Diners Club and Discover brands to existing and new merchants. As we continue to work toward achieving full card acceptance across our networks, Discover customers are using their cards at an increasing number of merchant and ATM locations that accept Diners Club and Discover cards around the world. Diners Club cardholders with cards issued by licensees outside of North America continue to use their cards on the Discover Network in North America and on the PULSE and Diners Club networks in their card-issuing territory and abroad.

We have agreements with a number of financial institutions, networks or Network Alliances and commercial service providers for issuance of products or processing of payments on the Discover Global Network (i.e., Discover Network, PULSE and Diners Club). We refer to these financial institutions, networks and commercial service providers as “Network Partners.” We may earn merchant discount and acquirer assessments net of issuer fees paid, in addition to other fees, for processing transactions for Network Partners. We also leverage our payments infrastructure in other ways, such as business-to-business payment processing.

Our Network Partners business is comprised of Network Alliances, technology-enabled partners and our commercial payments network. Network Alliances allow Discover-enabled cards to be used at other networks’ participating merchants and allow other networks’ participating issuers’ cards to be used at Discover Network merchants. Our commercial payments network facilitates transactions and business-to-business payments between buyers and suppliers using the existing payment infrastructure of Discover Network.

The discussion below provides additional detail concerning the supporting functions of our two segments. The credit card, private student loan, personal loan, home loan and deposit products issued through our Digital Banking segment require significant investments in consumer portfolio risk management, marketing, customer service and related technology, whereas the operation of our Payment Services business requires that we invest in the technology to manage risk and service network partners, merchants and merchant acquirer relationships.

Credit risk refers to the risk of loss arising from borrower default when borrowers are unable or unwilling to meet their financial obligations to us. For all loan types, we have established a credit policy and limits that are designed to manage the Company's exposure to credit risk. Our credit risk arising from consumer lending products is generally highly diversified across millions of accounts without significant individual exposures. We manage credit risk primarily based on customer segments and product types. See “— Risk Management” for more information regarding how we define and manage our credit and other risks.

We assess the creditworthiness of each consumer loan applicant through evaluating an applicant’s credit information provided by credit bureaus and information from other sources. The assessment is performed using our credit scoring systems, both externally developed and proprietary. For our unsecured lending products, we also use experienced credit underwriters to supplement our automated decision-making processes. For our home loan products, experienced credit underwriters must review and approve each application.

The revolving nature of our credit card loans requires that we regularly assess the credit risk exposure of such accounts. This assessment uses the individual’s Discover account performance information as well as information from credit bureaus. We utilize statistical evaluation models to support the measurement and management of credit risk. At the individual customer level, we use custom risk models together with more generally available industry models as an integral part of the credit decision-making process. Depending on the duration of the customer’s account, risk profile and other performance metrics, the account may be subject to a range of account management treatments, including transaction authorization limits and increases or decreases on credit limits.

We provide our customers with a variety of tools to proactively manage their accounts, including email, text message and push reminders and a website dedicated to customer education, as further discussed under the heading “— Customer Service.” These tools are designed to limit a customer’s risk of becoming delinquent. When a customer’s account becomes delinquent or is at risk of becoming delinquent, we employ a variety of strategies to assist customers in returning to current status on their accounts.

All monthly billing statements of accounts with past due amounts include a request for payment of such amounts. Customer assistance personnel generally initiate contact with customers within 30 days after any portion of their balance becomes past due. The nature and the timing of the initial contact are determined by a review of the customer’s prior account activity and payment habits.

We reevaluate our collection efforts and consider the implementation of other techniques as a customer becomes increasingly delinquent. We limit our exposure to delinquencies through controls within our process for authorizing transactions and credit limits and criteria-based account suspension and revocation. In situations involving customers with financial difficulties, we may enter into arrangements to extend or otherwise change payment schedules, lower interest rates and/or waive fees to aid customers in returning to current status on their obligations to us. For more information see Note 4: Loan Receivables to our consolidated financial statements.

In order to attract and retain customers and merchants, we continue to develop new programs, features and benefits and market them through a variety of channels, including television, radio, mail and digital. Marketing efforts may promote no annual fee, Cashback Bonus, FICO Credit Score for free, Freeze it, Social Security Number Alerts, New Account Alerts, balance transfer offers and other rewards programs. Through the development of a large prospect database, use of credit bureau data and use of a customer contact strategy and management system, we continuously develop our modeling and customer engagement capabilities, which helps optimize product, pricing and channel selection.

•Identity Theft Protection. The identity theft monitoring product includes an initial credit report, credit bureau report monitoring at the three major credit bureaus, prompt alerts to key changes to credit bureau files that help customers spot possible identity theft quickly, internet surveillance to monitor multiple credit and debit card numbers and social security numbers on suspicious websites, identity theft insurance of up to $1,000,000 to cover certain out-of-pocket expenses due to identity theft and access to knowledgeable professionals who can help resolve issues.

•Payment Protection. This product allows customers to suspend their minimum payments due for up to two years, depending on the qualifying event and product level, when certain qualifying life events occur. While on benefit, customers have no minimum monthly payment and are not charged interest, late fees or the fees for the product. This product covers a variety of different events, such as unemployment, disability, natural disasters or other life events, such as marriage or the birth of a child. Depending on the product level and availability under state laws, outstanding balances up to $10,000 or $25,000, are cancelled in the event of death.

•Wallet Protection. This product offers one-call convenience if a customer’s wallet is lost or stolen, including requesting cancellation and replacement of the customer’s credit and debit cards, monitoring the customer’s credit bureau reports at the three major credit bureaus for 180 days and alerting them to key changes to their credit files and providing up to $100 to replace the customer’s wallet or purse.

We maintain a full-service marketing department charged with delivering integrated mass and direct communications to foster customer engagement with our products and services. We also leverage strategic partnerships and sponsorship properties such as the NHL and the Big Ten Conference to help drive loan growth. Our brand team utilizes consumer insights and market intelligence to define our mass communication strategy, create multi-channel advertising messages and develop marketing partnerships with sponsorship properties. This work is performed in house as well as with a variety of external agencies and vendors.

We monitor our customers’ accounts to help prevent, detect, investigate and resolve fraud. Our fraud prevention processes are designed to protect the security of cards, applications and accounts in a manner consistent with our customers’ needs to easily acquire and use our products. Prevention systems monitor the authorization of application information, verification of customer identity, sales, processing of convenience and balance transfer checks and electronic transactions.

Each credit and debit card transaction is subject to screening, authorization and approval through externally developed and proprietary POS decision systems. We use a variety of techniques that help identify and halt fraudulent transactions, including machine-learning models, rules-based decision-making logic, report analysis, data integrity checks and manual account reviews. We manage accounts identified by the fraud detection system through technology that integrates fraud prevention and customer service. Strategies are subject to regular review and enhancement to enable us to respond quickly to changing conditions as well as to protect our customers and our business from emerging fraud activity.

We support our merchants through a merchant acquiring model that includes direct relationships with large merchants in the United States and arrangements with merchant acquirers generally for small- and mid-size merchants. In addition to our United States-based merchant acceptance locations, Discover Network cards are accepted in a growing number of countries around the world on the Diners Club network, or through reciprocal acceptance arrangements made with international payment networks (i.e., Network Alliances).

We maintain direct relationships with most of our large merchant accounts, which enables us to benefit from joint marketing programs and opportunities and to retain the entire discount revenue from the merchants. The terms of our direct merchant relationships are governed by merchant services agreements. These agreements are also accompanied by additional program documents that further define our network functionality and requirements, including operating regulations, technical specifications and dispute rules. To enable ongoing improvements in our network’s functionality and in accordance with industry convention, we publish updates to our program documents on a semi-annual basis.

Discover Global Network services the majority of its small- and mid-size merchant portfolios through third-party merchant acquirers to allow such acquirers to offer a comprehensive payments processing package to such merchants. Merchants also can apply to our merchant acquirer partners directly to accept Discover Global Network cards through the acquirers’ integrated payments solutions. Merchant acquirers provide merchants with consolidated servicing for Discover, Visa and MasterCard transactions, resulting in streamlined statements and customer service for merchants and reduced costs for us. These acquirer partners also perform credit evaluations and screen applications against unacceptable business types and the Office of Foreign Asset Control Specifically Designated Nationals list.

The Discover Global Network operates systems and processes that seek to ensure data integrity, prevent fraud and ensure compliance with our operating regulations. Our systems evaluate incoming transaction activity to identify abnormalities that require investigation and fraud mitigation. Designated Discover Global Network personnel are responsible for validating compliance with our operating regulations and law, including enforcing our data security standards and prohibitions against illegal or otherwise unacceptable activities. Discover Global Network is a founding and current member of the Payment Card Industry Security Standards Council, LLC (the “Council”) and is working to expand the adoption of the Council’s security standards globally for merchants and service providers that store, transmit or process cardholder data.

We provide technology systems processing through a combination of owned and hosted data centers and the use of third-party vendors. These data centers support our payment networks, provide customers with access to their accounts and manage transaction authorization and settlement, among other functions. The Discover Global Network works with a number of vendors to maintain our connectivity in support of POS authorizations. This connectivity also enables merchants to receive timely payment for their Discover Global Network card transactions.

Our approach to technology development and management involves both third-party and in-house resources. We use third-party vendors for basic technology services (e.g., cloud, telecommunications, hardware and operating systems) as well as for processing and other services for our digital banking and payment services businesses. We subject each vendor to a formal approval process, which includes, among other things, a security assessment, to ensure that the vendor can assist us in maintaining a cost-effective and reliable technology platform. We use our in-house resources to build, maintain and oversee some of our technology systems. We believe this approach enhances our operations and improves cost efficiencies.

In our credit card business, we experience fluctuations in transaction volumes and the level of loan receivables as a result of higher seasonal consumer spending and payment patterns around the winter holidays, summer vacations and back-to-school periods. In our private student loan business, our loan disbursements peak at the beginning of a school’s academic semester or quarter. Although there is a seasonal impact to transaction volumes and the levels of credit card and private student loan receivables, seasonal trends have not caused significant fluctuations in our results of operations or credit quality metrics between quarterly and annual periods.

We compete with other consumer financial services providers, including non-traditional providers such as financial technology firms and payment networks on the basis of a number of factors, including brand, reputation, customer service, product and service offerings, incentives, pricing and other terms. Our credit card business also competes on the basis of reward programs and merchant acceptance. We compete for accounts and utilization with cards issued by other financial institutions (including American Express, Bank of America, JPMorgan Chase, Capital One and Citi) and, to a lesser extent, businesses that issue their own private label cards or otherwise extend credit to their customers. In comparison to our largest credit card competitors, our strengths include cash rewards, conservative portfolio management and strong customer service. Competition based on rewards and other card features and benefits continues to be strong. Our private student loan product competes for customers with Sallie Mae and Citizens Bank, as well as other lenders that offer private student loans. Our personal loan product competes for customers primarily with financial institutions (including Citi and American Express) and non-traditional lenders (including Lending Club). Our home loan product faces competition primarily from traditional national and regional mortgage lenders.

Although our private student and personal loan receivables have increased, our credit card receivables continue to represent a majority of our receivables. The credit card business is highly competitive. Some of our competitors offer a wider variety of financial products than we do, which may position them better among customers who prefer to use a single financial institution to meet all of their financial needs. Some of our competitors enjoy greater financial resources, diversification and scale than we do and are therefore able to invest more in initiatives and technology to attract and retain customers, such as advertising, targeted marketing, account acquisitions and pricing offerings in interest rates, annual fees, reward programs and low-priced balance transfer programs. In addition, some of our competitors have assets such as branch locations and co-brand relationships that may help them compete more effectively. Another competitive factor in the credit card business is the increasing use of debit cards as an alternative to credit cards for purchases.

Because most domestically-issued credit cards, other than those issued on the American Express network, are issued on the Visa and MasterCard networks, most other card issuers benefit from the dominant market share of Visa and MasterCard. The former exclusionary rules of Visa and MasterCard limited our ability to attract merchants and credit and debit card issuers, contributing to Discover not being as widely accepted in the United States as Visa and MasterCard. Merchant acceptance of the Discover card has increased in the past several years, both in the number of merchants enabled for acceptance and the number of merchants actively accepting Discover. We continue to make investments in expanding Discover and Diners Club acceptance in key international markets where an acceptance gap exists.

In our payment services business, we compete with other networks for volume and to attract network partners to issue credit, debit and prepaid cards on the Discover, PULSE and Diners Club networks. We generally compete on the basis of customization of services and various pricing strategies, including incentives and rebates. We also compete on the basis of issuer fees, fees paid to networks (including switch fees), merchant acceptance, network functionality,

customer perception of service quality, brand image, reputation and market share. The Diners Club and Discover networks’ primary competitors are Visa, MasterCard and American Express. PULSE’s network competitors include Visa’s Interlink, MasterCard’s Maestro and First Data’s STAR. American Express is a particularly strong competitor to Diners Club as both cards target international business travelers. As the payments industry continues to evolve, we are also facing increasing competition from financial technology firms and alternative payment solutions, which leverage new technologies and a customer’s existing deposit and credit card accounts and bank relationships to create payment or other fee-based solutions.

In our direct-to-consumer deposits business, we have acquisition and servicing capabilities similar to other large banks, including Ally, American Express, Barclays, Capital One (360), Goldman Sachs, Synchrony and USAA. We compete with banks and credit unions that source deposits through branch locations and direct channels. We seek to differentiate our deposit product offerings on the basis of brand reputation, digital experience, customer service and value.

We use a variety of methods, such as trademarks, patents, copyrights and trade secrets, to protect our intellectual property. We also place appropriate restrictions on our proprietary information to control access and prevent unauthorized disclosures. Our Discover, PULSE and Diners Club brands are important assets and we take steps to protect the value of these assets and our reputation.

As of December 31, 2020, we employed approximately 17,600 individuals. We employ 100% of our customer service agents onshore within the United States, which we believe offers a distinct competitive advantage. At the onset of the coronavirus Disease 2019 (“COVID-19”) pandemic, we safely transitioned approximately 98% of our employees to working from home within a three-week period. Previously, only a small portion of employees worked primarily from a location other than one of our offices. As the COVID-19 pandemic took hold, we prioritized customer service and our employees’ safety with the goals of maintaining our high expectations and level of customer service, and providing our employees a safe work-at-home environment while preserving their jobs, wage rates and benefits.

Attracting, retaining and developing employees is important to our success as a leading digital banking and payments company. Discover has consistently received awards as a top place to work, including Glassdoor’s 2020 Top 100 Best Places to Work. We believe that a key to our employee strategy is establishing and maintaining employee engagement. We take a continuous approach to creating, driving and improving engagement through our actions and policies. Our approach has resulted in employee engagement scores that outperformed industry benchmarks for the fifth consecutive year, placing us in an elite set of firms representing just 7% of all organizations studied by Willis Towers Watson with both strong financial performance and highly-favorable opinion scores on engagement.

We offer a competitive compensation package to attract, retain and motivate highly qualified and diverse talent. We believe in pay-for-performance; our compensation programs are grounded in a pay-for-performance philosophy that is designed to reward achievement of our Company’s financial and strategic performance. We review performance and compensation with all employees annually. We seek to pay our employees fairly for their work and we continuously monitor our performance and address any discrepancies or issues. We regularly benchmark roles and compensation data to help ensure internal pay equity. Discover partners with an independent, third-party consultant to conduct a company-wide pay equity analysis that includes race and gender to identify pay discrepancies. Based on our last two reviews using this approach, women and minorities at Discover earn, on average, between $0.99 and $1.02 for every $1 earned by men and non-minorities.

Diversity, Equity and Inclusion (DE&I) is a competitive differentiator for companies and we seek to accentuate that advantage at Discover. Our employee population is comprised of 59% women and 40% minorities, including 9% who identify as Black and 14% as Latinx. We believe that diverse perspectives positively impact our ability to assist our customers and employees and strengthen our communities. Discover has consistently been recognized as a top place to work for both its inclusivity and quality of workplace. As part of our expanded commitment to DE&I, we introduced measurable goals that we will work toward in our focus areas of Diversity, Equity, Inclusion and External Impact and in 2020 appointed our first Chief Diversity Officer.

We structure accountability across three lines of defense along the principles of risk management execution, oversight and independent validation. As the first line of defense, our business units seek to create, sustain and improve a particular process to achieve business outcomes and identify and manage risks that arise from day-to-day operations as well as those driven by change. The principles apply across all businesses and risk types and guide the definition of specific roles and responsibilities.

Our second and third lines of defense, which comprises risk and control functions, operate independently of the business units. The second line of defense includes our corporate risk management (“CRM”) department, which is led by our Chief Risk Officer (“CRO”), who is appointed by our Board of Directors. The CRM department oversees the establishment of enterprise-level risk management standards and policies and designs processes that are designed to be consistent with the size and complexity of our business, industry practices and applicable legal and regulatory requirements. The CRO is accountable for providing our Board of Directors and executive management with an independent perspective on: the risks to which we are exposed; how well management is identifying, assessing and managing risk; and the capabilities we have in place to manage risks across the enterprise. Our internal audit department, as the third line of defense, performs periodic, independent reviews and tests compliance with risk management policies, procedures and standards across the company. It also periodically reviews the design and operating effectiveness of our risk management program and processes, including the independence and effectiveness of our CRM function, and reports the results to our Audit Committee of the Board of the Directors (“Audit Committee”) and, where appropriate, the Risk Oversight Committee of the Board of Directors (“Risk Oversight Committee”).

We seek to provide transparency of exposures and outcomes, which is core to our risk culture. We provide this risk transparency through our risk committee structure and standardized processes for escalating issues and reporting. This is accomplished at several levels within the organization, including quarterly meetings held by our Risk Committee and quarterly reports to the Risk Oversight and Audit Committees of the Board of Directors, as well as regular reporting to our Risk subcommittees commensurate with the needs of our businesses. Further, our CRO is a member of our Company’s Executive Committee.

Our Board of Directors (i) approves certain risk management policies; (ii) approves our capital targets and goals; (iii) approves our risk appetite framework; (iv) monitors our strategic plan; (v) appoints our CRO and other risk governance function leaders, as appropriate; (vi) receives reports on any exceptions to the Enterprise Risk Management policy; and (vii) receives and reviews regulatory examination reports. The Board of Directors receives reports from the Audit Committee and Risk Oversight Committee on risk management matters and from the Compensation and Leadership Development Committee on risks associated with compensation and leadership development.

Our Risk Oversight Committee is responsible for overseeing our risk management policies and the operations of our enterprise-wide risk management framework and our capital planning, liquidity risk management and resolution planning activities. The Committee is responsible for, among other things, (i) approving and periodically reviewing our risk management policies; (ii) overseeing the operation of our policies, standards and procedures for establishing our risk management governance, risk management procedures and risk-control infrastructure; (iii) overseeing the operation of processes and systems for implementing and monitoring compliance with such policies and procedures; (iv) reviewing and making recommendations to the Board of Directors, as appropriate, regarding the our risk management framework, key risk management policies and our risk appetite and tolerance; (v) receiving and reviewing regular reports from our CRO on risk management deficiencies and significant risks, the status of and changes to risk exposures, policies, procedures and practices and the steps management has taken to monitor and control risk exposures; (vi) receiving reports on compliance with our risk appetite and limit structure and risk management policies, procedures and controls; and (vii) sharing information, liaising and meeting in joint session with the Audit Committee (which it may do through the Chairs of the Committees) as necessary or desirable to help ensure that the committees have received the information necessary to permit them to fulfill their duties and responsibilities with respect to oversight of risk management matters.

With respect to the enterprise risk management framework, our Audit Committee’s responsibilities include the following: (i) discussing policies with respect to risk assessment and management; (ii) receiving and reviewing reports from our CRO and other members of management as the Committee deems appropriate on the guidelines and policies for assessing and managing our exposure to risks, the corporation’s major financial risk exposures and the steps management has taken to monitor and control such exposures; and (iii) sharing information and liaising with the Risk Oversight Committee as necessary or desirable to help ensure that the committees have received the information necessary to permit them to fulfill their duties and responsibilities with respect to oversight of risk management matters.

Our Compensation and Leadership Development Committee is responsible for overseeing risk management associated with our compensation and leadership development practices. The Committee receives reporting regarding our compensation practices and evaluates whether these practices encourage excessive risk-taking. As a part of its reviews, the Committee considers input from our CRO and takes into account risk outcomes. The Compensation and Leadership Development Committee receives reporting regarding talent management practices and evaluates risks associated with leadership development and succession planning.

Our Risk Committee is an executive management-level committee that establishes and oversees a comprehensive enterprise risk management program, which includes (i) providing a regular forum for representatives of our different functional groups to identify and discuss key risk issues and to recommend to senior management actions that should be taken to manage the level of risk taken by the business lines; (ii) establishing and overseeing an enterprise-wide approach to risk management through the development of our Enterprise Risk Management Policy and the associated oversight framework for the identification, measurement, monitoring, management and reporting of enterprise risk; (iii) communicating our risk appetite and philosophy, including establishing limits and thresholds for managing enterprise-wide risks; and (iv) reviewing, on a periodic basis, our aggregate enterprise-wide risk exposures and the effectiveness of

Our Risk Committee has formed and designated a number of committees to assist it in carrying out its responsibilities. These committees, made up of representatives from senior levels of management, escalate issues to our Risk Committee as guided by escalation thresholds. These risk management committees include the Discover Bank Credit Committee, Asset/Liability Management Committees (Discover Financial Services and Discover Bank), the Counterparty Credit Committee, the New Initiatives Committee, the Operational Risk Committee, the Capital Planning Committee, the Compliance Committee, the Technology and Information Risk Committee, Supervisory Matters Oversight Group and the Human Resources Risk Committee.

Our business unit heads are responsible for managing risk associated with pursuit of their strategic, financial and other business objectives. Business unit heads are responsible for (i) complying with all risk limits and risk policies; (ii) identifying and documenting risks and implementing appropriate controls; (iii) understanding and managing the overall level of risk in their organization, including the impact of the risks being accepted; (iv) explicitly considering risk when developing strategic plans, budgets and new products, (v) implementing appropriate controls when pursuing business strategies and objectives; (vi) ensuring business units test and implement business unit processes, controls and monitoring to support corporate model risk management standards such as documentation standards and reporting standards; (vii) coordinating with CRM to produce relevant, sufficient, accurate and timely risk reporting that is consistent with the processes and methodology established by CRM; (viii) ensuring sufficient financial resources and qualified personnel are deployed to control the risks inherent in the business activities; and (ix) designating, in consultation with the CRO, a Business Risk Officer to assist with the above and to perform the specific duties described below.

As a member of the Company’s senior management team, the CRO chairs our Risk Committee. In addition, the CRO has oversight responsibility to establish the CRM function with capabilities to exercise its mandate across all risk categories. Our CRO reports directly to our Risk Oversight Committee and administratively to the CEO. Our CRO provides an independent view on the key risks to which our Company is exposed to our Risk Committee, our Audit Committee, our Risk Oversight Committee and our Board of Directors.

The CRM department is led by the CRO and supports business units by providing objective oversight of our risk profile to help ensure that risks are managed, aggregated and reported to our Risk Committee, our Risk Oversight Committee and our Audit Committee. The CRM department participates in our Risk Committee and sub-committee meetings to provide an enterprise-wide perspective on risk, governance matters, policies and risk thresholds. The CRM department is comprised of enterprise, operational, consumer credit, counterparty credit, market, liquidity, compliance, Bank Secrecy Act/anti-money laundering, third-party, business technology, model, information security and insurance risk functions, each of which manages the risks associated with their respective area.

Credit Risk Management is responsible for (i) developing, validating and implementing credit policy criteria and predictive loan origination and servicing models in order to optimize the profitability of our Company’s lending activities; (ii) ensuring adherence to our credit risk policies and approval limits, and that departmental policies, procedures and internal controls are consistent with the standards defined by our Company; (iii) ensuring that we manage credit risk within approved limits; and (iv) monitoring performance for both new and existing consumer loan products and portfolios.

The legal organization plays a significant role in managing our legal risk by, among other things, identifying, interpreting and advising on legal and regulatory risks. The CRM department collaborates and coordinates closely with other risk and control functions in exercising its oversight responsibilities, in particular with the legal organization. Our legal organization participates in meetings of the Risk Committee and the sub-committees of the Risk Committee in order to advise on legal and compliance risks and to inform the committees of any relevant legislative and regulatory developments. Further, our Chief Legal Officer is a member of our Company’s Executive Committee.

Our internal audit department performs periodic, independent reviews and testing of compliance with risk management policies and standards across our Company, as well as assessments of the design and operating effectiveness of these policies and standards. The internal audit department also validates that risk management controls are functioning as intended by reviewing and evaluating the design and operating effectiveness of the CRM program and processes, including the effectiveness of the CRM function. The results of such reviews are reported to our Audit Committee and Risk Oversight Committee.

We are exposed to a broad set of risks in the course of our business activities due to both internal and external factors, which we segment into seven major risk categories. The first six are defined to be broadly consistent with guidance published by the Federal Reserve and the Basel Committee on Banking Supervision (“BCBS”): credit (consumer and counterparty), market, liquidity, operational, compliance and legal risk. We recognize the seventh, strategic risk, as a separate risk category. We evaluate the potential impact of a risk event on our Company by assessing the financial impact, the impact to our reputation, the legal and regulatory impact and the client/customer impact. In addition, we have established various policies to help govern these risks.

Our credit risk arises from the potential that a borrower or counterparty will fail to perform on an obligation. Our credit risk includes consumer credit risk and counterparty credit risk. Consumer credit risk is primarily incurred by Discover Bank through the issuance of (i) unsecured credit including credit cards, private student loans and personal loans and (ii) secured credit including deposit secured credit cards and home loans. Counterparty credit risk is incurred through a number of business-facing activities including payment network settlement, certain marketing and incentive programs, asset/liability management, guarantor and insurance relationships and strategic investments.

Market risk is the risk to our financial condition resulting from adverse movements in market rates or prices, such as interest rates, foreign exchange rates, credit spreads or equity prices. Given the nature of our business activities, we are exposed to various types of market risk; in particular interest rate risk, foreign exchange risk and other risks that arise through the management of our investment portfolio. Interest rate risk is more significant relative to other market risk exposures and results from potential mismatches in the repricing term of assets and liabilities (yield curve risk) and volatility in reference rates used to reprice floating-rate structures (basis risk). Foreign exchange risk is primarily incurred through exposure to currency movements across a variety of business activities and is derived, specifically, from the timing differences between transaction authorizations and settlement.

Operational risk is defined as the risk of loss resulting from inadequate or failed internal processes, people and systems or from external events. Operational risk is inherent in all our businesses. Operational risk categories incorporate all of the operational loss event-type categories set forth by the BCBS, which include the following: (i) internal fraud; (ii) external fraud; (iii) employment practices and workplace safety; (iv) clients, products and business practices; (v)

Compliance risk is the operational risk of legal or regulatory sanctions, financial loss or damage to reputation resulting from failure to comply with laws, regulations, rules, other regulatory requirements, or codes of conduct and other standards of self-regulatory organizations applicable to us. Compliance risk exposures are actively and primarily managed by our business units in conjunction with our Compliance department. Our compliance program governs the management of compliance risk and includes oversight by our Risk Committee and Compliance Committee.

Legal risk arises from the potential that unenforceable contracts, lawsuits or adverse judgments can disrupt or otherwise negatively affect our operations or condition. These risks are inherent in all of our businesses. Legal risk exposures are primarily managed by our business units in conjunction with our legal organization. Our Risk Committee and Compliance Committee oversee our legal risk management. Specifically, the legal organization is responsible for providing advice, interpreting and identifying developments regarding laws, regulations, regulatory guidance and litigation and setting standards for communicating relevant changes to corporate compliance, the business and internal audit. The legal organization also identifies and communicates legal risk associated with new products and business practices.

Strategic risk is the risk that our strategies and the execution of those strategies do not produce the desired outcome, resulting in a negative impact on our enterprise value. This risk can be driven by internal and external factors, including (i) our business model, market position, selection of strategies and execution of those strategies and (ii) competitor strategies, emergence of new competitors, emergence of new technologies, changing consumer preferences or other market factors.

Our enterprise risk management principles are executed through a risk management framework that is based upon industry standards for managing risk and controls. While the detailed activities vary by risk type, there are common process elements that apply across risk types. We seek to apply these elements consistently in the interest of effective and efficient risk management. This framework seeks to link risk processes and infrastructure with the appropriate risk oversight to create a risk management structure that raises risk awareness, reduces impact of potential risk events, improves business decision-making and increases operational efficiency.

We seek to identify potential exposures that could adversely affect our ability to successfully implement strategies and achieve objectives. To ensure that the full scale and scope of risk exposures from firm-wide activities are identified, we seek to identify risk exposures based on (i) significant enterprise-level risks that are strategic, systemic, or emerging in nature, including Company-specific risks that span across multiple lines of business; (ii) granular risk exposures from on-balance sheet and off-balance sheet positions, including concentrations; and (iii) risk exposures from initiatives focused on new, expanded, customized, or modified products, services and processes.

Risk exposures identified through these three approaches are consolidated to create a comprehensive risk inventory. This inventory is leveraged by a number of processes within our Company including stress scenario design and stress testing, capital planning, risk appetite setting and risk modeling. The risk inventory is reviewed and approved at least annually by the Risk Committee while the sub-committees review the risks mapped to the relevant risk categories for transparency and comprehensive coverage of risk exposures.

Our risks are monitored through an integrated monitoring framework consisting of risk appetite metrics and key risk indicators (“KRIs”). These metrics are established to monitor changes in our risk exposures and external environment. Risk appetite metrics are used to monitor the overall risk profile of our Company by setting risk boundaries and expectations through quantitative limits and qualitative expressions. We use KRIs to monitor our risk profile through direct or indirect alignment with the risk appetite limits.

We have policies and a defined governance structure in place to manage risks. In the event of a risk exposure exceeding established thresholds, management determines appropriate response actions. Responses, which may be taken by the Board of Directors, the Risk Oversight Committee, the Audit Committee, the Risk Committee, sub-committees or the CRO, or business units, may include (i) actions to directly mitigate or resolve risk; (ii) actions to terminate any activities resulting in an undesired or unintended risk position; or (iii) actions to prevent, avoid, modify, share or accept a risk position (or activity prior to its occurrence).

As the constituents primarily responsible for proactively managing the risks to which they are exposed, our business units and risk and control functions periodically report to the governance committees. The CRM function is responsible for independent reporting on risk matters to various constituencies across our Company on a periodic basis. The CRM department periodically provides risk management reporting to the Risk Committee, the Audit Committee, the Risk Oversight Committee and the Board of Directors.

We use stress testing to better understand the range of potential risks and their impacts to which our Company is exposed. A stress testing framework is employed to provide a comprehensive, integrated and forward-looking assessment of material risks and vulnerabilities. Stress test results provide information for business strategy, risk appetite setting and decisions related to capital actions, contingency capital plans, liquidity buffer, contingency funding plans and balance sheet positioning. Our stress testing framework utilizes a risk inventory, which covers our risk exposures across our defined risk categories. The risk inventory provides a comprehensive view of our vulnerabilities capturing significant risks from the Board of Directors’ and management’s view, granular risks relevant to business units and emerging risks associated with new initiatives.

We believe in a pay-for-performance philosophy, which considers performance across our Company, business segments and individual performance, as appropriate, as well as the long-term interests of our shareholders and the safety and soundness of our Company. We design compensation to be competitive relative to our peers to attract, retain and motivate our employees. In addition to being competitive in the markets in which we compete for talent and encouraging employees to achieve objectives set out by our management, our compensation programs are designed to balance an appropriate mix of compensation components to align the interests of employees with the long-term interests of shareholders and the safety and soundness of our Company.

Risk appetite is expressed through both quantitative limits and qualitative expressions to recognize a range of possible outcomes and to help set boundaries for proactive management of risks. Risk appetite measures take into account the risk profile of the businesses, the external macroeconomic environment and stakeholder views, including those of shareholders, regulators, ratings agencies and customers. These limits and expressions are revised at least annually or as warranted by changes in business strategy, risk profile and external environment.

Management and our CRM department monitor approved limits and escalation triggers to ensure that the business is operating within the approved risk appetite. Risk limits are monitored and reported on to various risk sub-committees, the Risk Committee and our Board of Directors, as appropriate. Through ongoing monitoring of risk exposures, management seeks to be able to identify appropriate risk response and mitigation strategies in order to react dynamically to changing conditions.

Risk exposures identified through the risk identification process across risk categories and risk types are consolidated to create a comprehensive risk inventory. This inventory is leveraged by a number of processes within the Company including stress scenario design, capital planning, risk appetite setting and risk modeling. The risk inventory is reviewed and approved at least annually by the Capital Planning Committee along with the Risk Committee and sub-committees to ensure transparency and comprehensive coverage of risk exposures. Our capital planning and management framework encompasses forecasting capital levels, establishing capital targets, monitoring capital adequacy against targets, maintaining appropriate contingency capital plans and identifying strategic options to deploy excess capital.

Our operations are subject to extensive regulation, supervision and examination under United States federal, state and foreign laws and regulations. As a bank holding company under the Bank Holding Company Act of 1956 and a financial holding company under the Gramm-Leach-Bliley Act, we are subject to the supervision, examination and regulation of the Federal Reserve. As a large provider of consumer financial services, we are subject to the supervision, examination and regulation of the Consumer Financial Protection Bureau (the “CFPB”).

Our bank subsidiary, Discover Bank, is located in the United States and is chartered and regulated by the Office of the Delaware State Bank Commissioner (the “Delaware Commissioner”) and is also regulated by the FDIC, which insures its deposits up to applicable limits and serves as the bank’s primary federal banking regulator. Discover Bank offers credit card loans, private student loans, personal loans and home loans as well as certificates of deposit, savings and checking accounts and other types of deposit accounts.

On September 30, 2020, we merged Bank of New Castle, formerly a wholly owned subsidiary bank of Discover, with and into Discover Bank. On consummation of this merger, Discover Bank assumed the capital, assets, liabilities, policies, procedures, systems, operations and personnel of Bank of New Castle. During the fourth quarter of 2020, Discover Bank became a member of the Federal Home Loan Bank of Chicago.

Permissible activities for a bank holding company include owning a bank as well as those activities that are so closely related to banking as to be a proper incident thereto, such as consumer lending and other activities that have been approved by the Federal Reserve by regulation or order. Certain servicing activities are also permissible for a bank holding company if conducted for or on behalf of the bank holding company or any of its affiliates. Impermissible

A financial holding company and the non-bank companies under its control are permitted to engage in activities considered financial in nature, incidental to financial activities, or complementary to financial activities, if the Federal Reserve determines that such activities pose no risk to the safety or soundness of depository institutions or the financial system in general. Being a financial holding company under the Gramm-Leach-Bliley Act requires that the depository institution that we control meets certain criteria, including capital, management and Community Reinvestment Act requirements. In addition, under the Dodd-Frank Wall Street Reform and Consumer Protection Act (the “Dodd-Frank Act”) we are required to meet certain capital and management criteria to maintain our status as a financial holding company. Failure to meet the criteria for financial holding company status results in restrictions on new financial activities or acquisitions and could require discontinuance of existing activities that are not generally permissible for bank holding companies.

Federal Reserve regulations and the Federal Deposit Insurance Act (the “FDIA”), as amended by the Dodd-Frank Act, require a bank holding company to serve as a source of strength to its subsidiary bank(s) and commit resources to support each subsidiary bank. This support may be required at times when a bank holding company may not be able to provide such support without adversely affecting its ability to meet other obligations.

The Dodd-Frank Act addresses risks to the economy and the payments system, especially those posed by large systemically significant financial firms. The Economic Growth, Regulatory Relief, and Consumer Protection Act (the “EGRRCPA”) amended the Dodd-Frank Act by raising the asset size thresholds for certain enhanced prudential standards. Under the amended statute, the Federal Reserve is authorized to impose certain enhanced prudential standards on bank holding companies with total assets of at least $100 billion, including Discover, only after issuing a new regulation or order based on a risk-based determination. In October 2019, the federal banking regulators approved final rules that tailor the existing regulatory requirements related to capital, liquidity and enhanced prudential standards to an institution’s risk and complexity profile for banking institutions with total consolidated assets of $100 billion or more. Under the final rules, which became effective December 31, 2019, Discover is considered a Category IV institution and therefore subject to the least stringent category of enhanced prudential standards for bank holding companies with at least $100 billion in total assets. Among other things, Discover is required to submit to supervisory stress tests every other year rather than annually, is no longer subject to regulations requiring Discover to submit the results of company-run capital stress tests and is no longer subject to the liquidity coverage ratio. However, Discover is still required to submit annual capital plans to the Federal Reserve and remains subject to other core components of the enhanced prudential standards rules, such as risk-management and risk committee requirements and liquidity risk management regulations. Discover may submit to supervisory stress tests in off years if it wishes to reset or revise the stress test portion of its stress capital buffer (“SCB”).

Discover was required to submit a capital plan to the Federal Reserve and participate in its 2020 Comprehensive Capital Analysis and Review (“CCAR”) stress tests. We received the stress test results from the Federal Reserve in June 2020 along with notice that our SCB had been preliminarily set at 3.5%. Additionally, Discover was notified by the Federal Reserve that it would be required to submit to a special mid-cycle stress test in the fourth quarter under new scenarios intended to assess the economic impacts of the COVID-19 pandemic. In December of 2020, we received the results of the special mid-cycle stress test from the Federal Reserve along with notice that the Federal Reserve is extending the time period during which it may notify firms of its intention to recalculate their SCB to March 31, 2021.

Beginning in 2020, Discover was subject to the Federal Reserve’s new supervisory rating system for large financial institutions (“LFI Rating System”). The LFI Rating System is intended to align more closely with the Federal Reserve’s current supervisory programs for large financial institutions, enhance the clarity and consistency of supervisory assessments and provide greater transparency regarding the consequences of a given rating. Under the LFI Rating System, the Federal Reserve evaluates and assigns ratings for the following three components: capital planning and positions; liquidity risk management and positions; and governance and controls. Unlike the prior supervisory rating system, the LFI Rating System does not include an overall composite rating. An institution subject to the LFI Rating System, such as Discover, will not be considered “well managed” under applicable regulations if it is assigned a deficient rating in any one component, which could be a barrier for seeking the Federal Reserve’s approval to engage in new or expansionary activities.

we can charge for services or limit our ability to pursue certain business opportunities and obtain related required regulatory approvals. For additional information regarding bank regulatory limitations on acquisitions and investments, see “— Acquisitions and Investments.” See Note 19: Litigation and Regulatory Matters to our consolidated financial statements for more information on recent matters affecting Discover. Regulatory developments could also influence our strategies, impact the value of our assets, or otherwise adversely affect our businesses. For more information regarding the regulatory environment and developments under the Dodd-Frank Act, see “Management’s Discussion and Analysis of Financial Condition and Results of Operations — Regulatory Environment and Developments” and “Risk Factors.”

We and Discover Bank are subject to capital adequacy guidelines adopted by federal banking regulators, which include maintaining minimum capital and leverage ratios for capital adequacy and higher ratios to be deemed “well-capitalized” for other regulatory purposes. We and Discover Bank are required to maintain Tier 1 and total capital equal to at least 6% and 8% of our total risk-weighted assets, respectively. We and Discover Bank are also required to maintain a minimum “leverage ratio” (Tier 1 capital to adjusted total assets) of 4% and a common equity Tier 1 capital ratio (common equity Tier 1 capital to total risk-weighted assets) of 4.5%. Further, under the Federal Reserve’s current capital plan requirements, Discover Financial Services is required to demonstrate that under stress scenarios we will maintain each of the minimum capital ratios on a pro-forma basis throughout the nine-quarter planning horizon.

In addition to the supervisory minimum levels of capital described above, Federal Reserve rules applicable to Discover Financial Services require maintenance of the following minimum capital ratios to be considered “well-capitalized” for certain purposes under Regulation Y (12 CFR 225): (i) a Tier 1 risk-based capital ratio of 6% and (ii) a total risk-based capital ratio of 10%. Our bank subsidiary is required by the FDIC’s Prompt Corrective Action rules to maintain the following minimum capital ratios to be considered “well-capitalized”: (i) a common equity Tier 1 capital ratio of 6.5%; (ii) a Tier 1 risk-based capital ratio of 8%; (iii) a total risk-based capital ratio of 10%; and (iv) a Tier 1 leverage ratio of 5%. At December 31, 2020, Discover Financial Services met all requirements to be deemed “well-capitalized” pursuant to the applicable regulations. For related information regarding our bank subsidiary see “— FDIA” below.

There are various federal and state law limitations on the extent to which our bank subsidiary can provide funds to us through dividends, loans or otherwise. These limitations include minimum regulatory capital requirements, federal and state banking law requirements concerning the payment of dividends out of net profits or surplus, affiliate transaction limits and general federal and state regulatory oversight to prevent unsafe or unsound practices. In general, federal and applicable state banking laws prohibit, without first obtaining regulatory approval, insured depository institutions, such as Discover Bank, from making dividend distributions if such distributions are not paid out of available earnings or would cause the institution to fail to meet applicable capital adequacy standards. For more information, see “— FDIA” below.

Additionally, we are subject to regulatory requirements imposed by the Federal Reserve as part of its stress testing framework and its CCAR program. For the third and four quarter of 2020, the Federal Reserve limited covered firms’ capital distributions, including common stock dividends and repurchases, based on a formula that restricts most share repurchases and limits dividends based on average net income during the past four quarters. As discussed above, in 2020 Discover participated in CCAR and the 2020 mid-cycle stress test. In connection with the results of its mid-cycle stress test, the Federal Reserve announced that, provided Discover does not increase the amount of its common stock dividends, Discover may pay common stock dividends and make share repurchases during the first quarter of 2021 that, in the aggregate, do not exceed an amount equal to the average of Discover’s net income for the four preceding quarters. It is uncertain whether these temporary restrictions will be carried past the first quarter 2021, nor is it certain whether the Federal Reserve will seek to recalculate or change Discover’s SCB requirement prior to the March 31, 2021 deadline it has set for itself.

Under the Federal Reserve’s current capital planning rule, Discover as a Category IV bank holding company will be required to submit a capital plan to the Federal Reserve in 2021 but will not be required to submit to the supervisory stress test component of the CCAR exercise. The Federal Reserve has proposed revisions to its capital plan rule that would clarify the applicability of certain CCAR components to Category IV firms in years where such firms are not subject to mandatory supervisory stress tests.

For more information, including additional conditions and limits on our ability to pay dividends and repurchase our stock, see “— Bank Holding Company Regulation,” “Risk Factors — Credit, Market and Liquidity Risk — We may be limited in our ability to pay dividends on and repurchase our stock,” “— We are a holding company and depend on payments from our subsidiaries,” “Management’s Discussion and Analysis of Financial Condition and Results of

The FDIA imposes various requirements on insured depository institutions. For example, the FDIA requires, among other things, the federal banking agencies to take “prompt corrective action” in respect of depository institutions that do not meet minimum capital requirements. The FDIA sets forth the following five capital tiers: “well-capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized” and “critically undercapitalized.” A depository institution’s capital tier will depend upon how its capital levels compare with various relevant capital measures and certain other factors that are established by regulation. At December 31, 2020, Discover Bank met all applicable requirements to be deemed “well-capitalized.”

The FDIA also prohibits any depository institution from making any capital distributions (including payment of a dividend) or paying any management fee to its parent holding company if the depository institution would thereafter be “undercapitalized.” “Undercapitalized” institutions are subject to growth limitations and are required to submit a capital restoration plan. For a capital restoration plan to be acceptable, among other things, the depository institution’s parent holding company must guarantee that the institution will comply with the capital restoration plan.

If a depository institution fails to submit an acceptable capital restoration plan, it is treated as if it is “significantly undercapitalized.” “Significantly undercapitalized” depository institutions may be subject to a number of requirements and restrictions, including orders to sell sufficient voting stock to become “adequately capitalized,” requirements to reduce total assets and cessation of receipt of deposits from correspondent banks. “Critically undercapitalized” institutions are subject to the appointment of a receiver or conservator.

The FDIA prohibits insured banks from accepting brokered deposits or offering interest rates on any deposits significantly higher than the prevailing rate in the bank’s normal market area or nationally (depending upon where the deposits are solicited), unless it is “well-capitalized,” or it is “adequately capitalized” and receives a waiver from the FDIC. Under current FDIC regulations, a bank that is less than “well-capitalized” is generally prohibited from paying an interest rate on deposits in excess of 75 basis points over the national market average. There are no such restrictions under the FDIA on a bank that is “well-capitalized.” As of December 31, 2020, Discover Bank met the FDIC’s definition of a “well-capitalized” institution for purposes of accepting brokered deposits. An inability to accept brokered deposits in the future could materially adversely impact our funding costs and liquidity. For more information, see “Risk Factors — Credit, Market and Liquidity Risk — An inability to accept or maintain deposits in the future could materially adversely affect our liquidity position and our ability to fund our business.”

The FDIA also affords FDIC insured depository institutions, such as Discover Bank, the ability to “export” interest rates permitted under the laws of the state where the bank is located. Discover Bank is located in Delaware and, therefore, can charge interest on loans to out-of-state borrowers at rates permitted under Delaware law, regardless of the usury limitations imposed by the state laws of the borrower’s residence. Delaware law does not limit the amount of interest that may be charged on loans of the type offered by Discover Bank. This flexibility facilitates the current nationwide lending activities of Discover Bank.

The FDIA subjects Discover Bank to deposit insurance assessments. Under the Dodd-Frank Act, in order to bolster the reserves of the Deposit Insurance Fund, the minimum reserve ratio set by the FDIC was increased to 1.35% and subsequently the FDIC set a reserve ratio of 2%. The Dodd-Frank Act removed the statutory cap for the reserve ratio, leaving the FDIC free to set a cap in the future. The FDIC also previously amended its deposit insurance regulations in ways that have raised Discover Bank’s cost of deposit insurance. Further increases may occur in the future.

Since we are a bank holding company, and Discover Bank is an insured depository institution, we are subject to banking laws and regulations that limit the types of acquisitions and investments that we can make. In addition, certain permitted acquisitions and investments that we seek to make are subject to the prior review and approval of our banking regulators, including the Federal Reserve and FDIC. Our banking regulators have broad discretion on whether to approve proposed acquisitions and investments. In deciding whether to approve a proposed acquisition, federal bank regulators will consider, among other factors, the effect of the acquisition on competition, our financial condition and our future prospects, including current and projected capital ratios and levels; the competence, experience and integrity of our management and our record of compliance with laws and regulations; the convenience and needs of the


Securities registered pursuant to Section 12(b) of the Act:
Title of each class	Trading Symbol(s)	Name of each exchange on which registered
Common Stock, par value $0.01 per share	DFS	New York Stock Exchange

Securities registered pursuant to Section 12(g) of the Act: None


Part I
Item 1.	Business	1
Item 1A.	Risk Factors	25
Item 1B.	Unresolved Staff Comments	45
Item 2.	Properties	45
Item 3.	Legal Proceedings	45
Item 4.	Mine Safety Disclosures	45

Part II
Item 5.	Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities	46
Item 6.	Selected Financial Data	47
Item 7.	Management’s Discussion and Analysis of Financial Condition and Results of Operations	50
Item 7A.	Quantitative and Qualitative Disclosures about Market Risk	81
Item 8.	Financial Statements and Supplementary Data	84
Item 9.	Changes in and Disagreements with Accountants on Accounting and Financial Disclosure	153
Item 9A.	Controls and Procedures	153
Item 9B.	Other Information	153

Part III
Item 10.	Directors, Executive Officers and Corporate Governance	154
Item 11.	Executive Compensation	154
Item 12.	Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters	154
Item 13.	Certain Relationships and Related Transactions, and Director Independence	155
Item 14.	Principal Accounting Fees and Services	155

Part IV
Item 15.	Exhibits, Financial Statement Schedules	156
Item 16.	Form 10-K Summary	162