SoFi Technologies, Inc.

TABLE OF CONTENTS

Item 7A. Quantitative and Qualitative Disclosures About Market Risk

In the normal course of business, we are subject to a variety of market-related risks that can affect our operations and profitability. We broadly define these areas of risk as interest rate risk, credit risk, counterparty risk and operational risk. Historically, substantially all of our revenue and operating expenses were denominated in United States dollars. We may in the future be subject to increasing foreign currency exchange rate risk with our acquisition of a foreign company. Foreign currency exchange rate risk is the risk that our financial position or results of operations could be positively or negatively impacted by fluctuations in exchange rates. Exchange rate risk was not a material risk for us during the years presented.

Interest Rate Risk

We are exposed to the risk of loss to future earnings, values or future cash flows that may result from changes in market discount rates or overall market conditions, such as instability in the banking and financial services sectors. We are subject to interest rate risk associated with our loans, securitization investments (including residual investments and asset-backed bonds), servicing rights and investments in AFS debt securities, which are measured at fair value on a recurring basis using a discounted cash flow methodology in which the discount rate represents an estimate of the required rate of return by market participants. Our loans with variable interest rates are exposed to interest rate volatility, which impacts the amount of recognized interest income. Our securitization residual investments are carried at fair value, which is subject to changes in market value by virtue of the impact of interest rates on the market yield of the residual investments. The value and earnings of our asset-backed bonds, which are associated with our personal loans and student loans, have a converse relationship to the movement of interest rates. That is, as interest rates rise, bond values and earnings fall and vice versa. Additionally, we are subject to interest rate risk on our variable-rate warehouse facilities and our revolving credit facility. Market interest rates may also drive the interest we offer to members on their deposits. Future funding activities may increase our exposure to interest rate risk, as the interest rates payable on such funding may be tied to SOFR or another representative alternative reference rate. We are also exposed to market risk through our investments in equity securities, which we elect to measure using the measurement alternative method of accounting and therefore may have positive or negative adjustments that impact our results of operations resulting from observable price changes based on current market conditions.

Interest rate risk also occurs in periods where changes in short-term interest rates result in loans being originated with terms that provide a smaller interest rate spread above the financing terms of our warehouse facilities or above the interest rate we offer on deposits, which can negatively impact our realized net interest income. We manage and mitigate these risks using interest rate derivative hedges, our investment portfolio, and broader asset liability management activities. Our Corporate Treasury group, under the supervision of our ALCO and Board Risk Management committees, centrally manages our interest rate risk. Our ALCO includes leadership from Treasury, Finance, Independent Risk Management, and Business Units. ALCO is responsible for identifying key risks and exposures, establishing tolerances and limits, monitoring them appropriately, and managing these risks. Risk management activities are conducted under the oversight of respective Board Risk Management committees.

Our primary metrics for the measurement and monitoring of interest rate risk (IRR) on a company-wide basis include Net Interest Income (NII) and fair value sensitivity. Additionally, we utilize Economic Value of Equity (EVE) as a longer term metric of interest rate risk. These interest rate risk metrics are calculated for a wide range of interest rate scenarios, and risk appetite limits have been established. The interest rate risk exposures and historical trends against risk limit scenarios are reported to our ALCO and EBRC.

The NII risk metric measures the change in net interest income under an interest rate shock relative to the forecasted baseline scenario over a 12 month horizon. Our baseline forecast takes into consideration the current balance sheet, projections of future business activity, and the market expectations of benchmark interest rates. The NII metric is driven by key modeling assumptions for both assets and liabilities. For assets, key assumptions include prepayment speeds, new lending origination volumes, and new lending origination pricing. For liabilities, key assumptions include forecasted deposit balances and deposit pricing betas.

Fair value sensitivities measure the interest rate sensitivity of balance sheet assets recorded at fair value which primarily consists of loans and securitization investments. Servicing rights and AFS securities in the investment portfolio are also measured as fair value sensitivities. The fair value sensitivity reflects the change in asset price due to an interest rate shock to the underlying benchmark discount rate. Key assumptions for the fair value sensitivity include conditional prepayment rates, annual default rates, and discount rates. Please refer to the Level 3 Significant Inputs in Note 15. Fair Value Measurements to the Notes to Consolidated Financial Statements for more details on these assumptions.

133

SoFi Technologies, Inc.

TABLE OF CONTENTS

The following tables summarize the potential effect on (i) net interest income; and (ii) the change in fair value of interest rate sensitive financial assets recorded on our consolidated balance sheet, based upon a sensitivity analysis performed by management assuming a hypothetical, immediate and parallel increase and decrease in market interest rates of 100 and 200 basis points. While a relevant measure of our interest rate exposure, this sensitivity analysis does not represent a forecast of our net interest income.

Net Interest Income (Expense)

December 31, 2024December 31, 2023

Basis point change scenario

+200

$(140,315)$(80,484)

+100

(62,415)(33,942)

-10053,730 42,855

-20099,763 81,436

Change in Fair Value

December 31, 2024December 31, 2023

Basis point change scenario

+200

$(1,102,784)$(802,857)

+100

(562,526)(409,956)

-100591,349 438,486

-2001,209,383 896,011

Our consolidated balance sheet is liability sensitive, given that liabilities are expected to reprice faster than assets resulting in higher net interest income in decreasing interest rate scenarios. The period over period change in sensitivity reflected in the tables above are attributed to changes in balance sheet composition and asset-liability management activities.

In addition to our net interest income and fair value sensitivity analysis above, we also utilize EVE as a longer term measure of interest rate risk. EVE is a point-in-time analysis of the sensitivity of the current balance sheet and off-balance sheet assets and liabilities that incorporates all cash flows over their estimated remaining lives. Due to this longer forecast, EVE only uses the current balance sheet and does not include assumptions related to future activities. Key modeling assumptions in the EVE metric include asset prepayment speeds, deposit pricing beta, and deposit decay rates.

The scenarios, methodologies and assumptions used in the IRR framework are periodically evaluated and enhanced in response to changes in the market environment, changes in our balance sheet composition, enhancements in our modeling and other factors. The identification and testing of key assumptions are influenced by market conditions and management views of key risks. IRR measurement across interest rate scenarios is driven by key modeling assumptions that influence the calculated exposures. Calibration of key assumptions is based upon a combination of factors including historical experience and management judgment. Key modeling assumptions are subject to periodic review and validation. In addition, sensitivity testing is performed on key assumptions by increasing and decreasing the modeling inputs relative to the base value and then comparing the resulting impact to the IRR exposure. Sensitivity testing is periodically reported to ALCO.

Credit Risk

We are subject to credit risk, which is the risk of default that results from a borrower's inability or unwillingness to make contractually required loan payments or declines in home loan collateral values. Generally, all loans sold into the secondary market are sold without recourse. For such loans, our credit risk is generally limited to repurchase obligations due to fraud or origination defects. For loans that were repurchased or not sold in the secondary market, we are subject to credit risk to the extent a borrower defaults and we are not able to fully recover the principal balance. We believe that this risk is mitigated through the implementation of stringent underwriting standards, strong fraud detection tools and technology designed to comply with applicable laws and our standards. In addition, we believe that this risk is mitigated through the quality of our loan portfolio.

The following table summarizes the potential effect on earnings over the next 12 months and the potential effect on the fair values of our loans for which we elected the fair value option and residual investments recorded on our consolidated balance sheet as of December 31, 2024 based on upon a sensitivity analysis performed by management assuming an immediate hypothetical change in credit loss rates by a rate of 10%. The fair value and earnings sensitivities are applied only to financial

134

SoFi Technologies, Inc.

assets that existed at the balance sheet date, which included loans, investments in AFS debt securities (which had an immaterial impact from credit risk) and residual investments as of December 31, 2024. Asset-backed bonds are excluded because they are not expected to absorb the losses of the VIE based on the extent of overcollateralization and expected credit losses of the VIE. Alternatively, residual investments are subject to credit exposure, and by design this is the portion of the SPE that is expected to absorb the losses of the VIE.

The carrying value and earnings sensitivities are applied only to financial assets that existed at the balance sheet date, which included loans at amortized cost, for which we have recorded an allowance as of December 31, 2024.

Impact if Credit Loss Rates:

($ in thousands)

Increase 10 PercentDecrease 10 Percent

Fair value$(121,431)$121,431

Carrying value(4,668)4,668

Income (loss) before income taxes(126,099)126,099

Counterparty Risk

We are subject to risk that arises from our debt warehouse facilities, economic hedging activities, third-party custodians, and capped call options on our common stock. These activities generally involve an exchange of obligations with unaffiliated lenders or other individuals or entities, referred to in such transactions as "counterparties". If a counterparty was to default, we could potentially be exposed to reputational damage and financial loss if such counterparty was unable to meet its obligations to us. We manage this risk by selecting only counterparties that we believe to be financially strong, spreading the risk among multiple such counterparties, placing contractual limits on the amount of dependence on any single counterparty, and entering into netting agreements with the counterparties, as appropriate.

In accordance with Treasury Market Practices Group's recommendation, we execute Securities Industry and Financial Markets Association trading agreements with all material trading partners. Each such agreement provides for an exchange of margin money should either party's exposure exceed a predetermined contractual limit. Such margin requirements limit our overall counterparty exposure. The master netting agreements contain a legal right to offset amounts due to and from the same counterparty. Derivative assets represent derivative contracts in a gain position net of loss positions with the same counterparty and, therefore, also represent our maximum counterparty credit risk. We incurred no losses due to nonperformance by any of our counterparties during the year ended December 31, 2024. As of December 31, 2024, gross derivative asset and liability positions subject to master netting arrangements were $289.0 million and less than $1 million, respectively.

In the case of our loan warehouse facilities, we are subject to risk if the counterparty chooses not to renew a borrowing agreement and we are unable to obtain financing to originate loans. With our loan warehouse facilities, we seek to mitigate this risk by ensuring that we have sufficient borrowing capacity with a variety of well-established counterparties to meet our funding needs. As of December 31, 2024, we had total borrowing capacity under loan warehouse facilities of $6.8 billion, of which $1.3 billion was utilized. Refer to Note 12. Debt to the Notes to Consolidated Financial Statements for additional information regarding our loan warehouse facilities.

In the case of our call options on our common stock, if the capped call counterparties, which are financial institutions and initial purchasers of our convertible notes, are unable to meet their obligations under the contract, we may not be able to mitigate the dilutive effect on our common stock upon conversions of our convertible notes or offset any potential cash payments we may be required to make in excess of the principal amount of converted convertible notes. Refer to Note 13. Equity to the Notes to Consolidated Financial Statements for additional information on our capped call transactions.

Operational Risk

Operational risk is the risk of loss arising from inadequate or failed internal processes, controls, people (e.g., human error or misconduct) or systems (e.g., technology problems), business continuity or external events (e.g., natural disasters), compliance, reputational, regulatory, cybersecurity or legal matters and includes those risks as they relate directly to us, fraud losses attributed to applications and any associated fines and monetary penalties as a result, transaction processing, or employees, as well as to third parties with whom we contract or otherwise do business. We rely on third-party computer systems and third-party providers to support and carry out certain functions on our platform, which are themselves susceptible to operational risk or which may rely on subcontractors to provide services to us that face similar risks. Any interruption in

135

SoFi Technologies, Inc.

services or deterioration in the quality of the service or performance of such third-party systems or providers could be disruptive to our business and adversely affect our results of operations and the perception of the reliability of our networks and services and the quality of our brand. In addition, we may be subjected to member complaints, fines, subpoenas, civil investigative demands, litigation, disputes, regulatory investigations and other similar actions. We strive to manage operational risk, including operational risk associated with our reliance on third-party systems, through contractual provisions, our system design, and a robust third-party risk management process, which includes establishing policies and procedures to accomplish timely and efficient processing, obtaining periodic internal control attestations from management, conducting internal process Risk Control Self-Assessments and audit reviews to evaluate the effectiveness of internal controls. With respect to cybersecurity risk, which can also translate to financial and reputational risk, our technology and cybersecurity teams rely on a layered system of preventive and detective technologies, controls, and policies to detect, mitigate, and contain cybersecurity threats. In addition, our cybersecurity team, and the third-party consultants they engage, regularly assess our cybersecurity risks and mitigation efforts. Our operational risk, and the amount we invest in risk management, may increase as we introduce new products and product features, and as new threat actors and evolving threat vectors, such as account takeover tactics, increase and become more sophisticated. In order to be effective, among other things, our enterprise risk management capabilities must adapt and align to support any new product or loan features, capability, strategic development, or external change.