Legal issues of M&A in the fintech sector

Introduction
Mergers and acquisitions (M&A) play a significant role in the Fintech sector. The Fintech industry is known for its rapid innovation and disruption. Mergers and acquisitions allow companies to consolidate their market position by acquiring competitors or supplementary businesses. This consolidation helps firms to achieve economies of scale, expand their customer base, and increase market share.
Fintech companies often acquire other firms to gain access to specialized talent and cutting-edge technology. This can accelerate their product development cycles and enhance their ability to innovate. For example, a company might acquire a smaller startup with expertise in artificial intelligence or blockchain technology to strengthen its offerings.
M&A activities enable Fintech companies to diversify their product and service offerings. By acquiring companies in adjacent or ancillary sectors, they can expand into new markets or offer a broader range of financial products. This diversification can help Fintech firms to mitigate risks associated with relying too heavily on a single product or market segment.
Regulatory compliance is a major challenge for Fintech companies, especially as they expand into new markets or offer new financial services. Acquiring a company that already has expertise in navigating regulatory frameworks can help expedite the compliance process and reduce legal risks.
Mergers and acquisitions can also facilitate strategic partnerships between Fintech firms and traditional financial institutions. For example, a Fintech startup specializing in payment processing might be acquired by a large bank seeking to modernize its digital banking offerings. These partnerships can drive innovation and improve the overall competitiveness of the companies involved.
Mergers and acquisitions are important for the Fintech sector because they enable companies to achieve growth, innovation, and market leadership in an increasingly competitive industry.
The Fintech Industry in Colombia
In the most recent study “Fintech Snapshot 2023-2” by Colombia Fintech, the following statistics are presented:
- Fintech is generating more than 26,000 jobs.
- Around 45% of fintechs that have between 20 and 249 employees have been in the Colombian market for six to 20 years.
- 46.4% of fintechs invest more than 30% of their operational income in technological capital.
- 28.6% of the country’s Fintech companies are financed with their own resources (Bootstrapping). The analysis of the investment rounds in which Colombian fintechs are found reveals a diversity in financing sources and development stages.
- The two leading verticals in the fintech ecosystem continue to be Digital Credit (35.6%) and Digital Payments (28.8%)
- 63% of the country’s fintech companies are microbusinesses. Half of the companies have been established between one and five years. Likewise, 95% do not exceed 20 years of incorporation.
- The distribution of Fintech companies in Colombia reflects a strong concentration in Bogotá. The capital is the undisputed epicenter of fintech activity in the country. However, a significant presence is observed in Antioquia, with 19% of the Fintech companies in the country.
Risks and Challenges of the Fintech Industry
The Fintech industry is characterized by a certain degree of risk, stemming from various factors inherent to its nature and operating environment.
Fintech companies often operate in highly regulated sectors such as banking, payments, lending, and securities. Navigating complex and evolving regulatory frameworks can be challenging, and changes in regulations can significantly impact business models, operations, and compliance costs.
Fintech companies handle sensitive financial data, making them attractive targets for cyberattacks and data breaches. Security vulnerabilities in technology systems, inadequate data protection measures, and sophisticated cyber threats pose significant risks to Fintech firms and their customers.
The Fintech industry is subject to rapid technological development, changing consumer preferences, and market disruptions. Fintech startups face competition from traditional financial institutions as well as other agile startups, and market dynamics can shift quickly, impacting business viability and growth prospects.
Fintech companies rely heavily on technology and digital infrastructure to deliver their products and services. Operational risks such as system failures, IT disruptions, technical glitches, and service outages can result in financial losses, reputational damage, and loss of customer trust.
Fintech firms engaged in lending, crowdfunding, or peer-to-peer finance activities are exposed to credit risk, including the risk of borrower default or non-payment.
Additionally, Fintech companies may face counterparty risks related to their relationships with other financial institutions, service providers, or business partners.
Fintech companies collect and process vast amounts of customer data, raising concerns about data privacy, confidentiality, and compliance with data protection regulations. Failure to adequately protect customer data or comply with regulatory requirements can lead to legal liabilities, fines, and reputational harm.
Fintech firms operating in payment processing, digital banking, cryptocurrency, and online lending sectors are susceptible to fraud, money laundering, and other financial crimes. Implementing robust fraud detection and prevention measures is essential to mitigate these risks and maintain trust with customers and regulators.
Rapid growth and scalability are common goals for Fintech startups, but scaling operations while maintaining quality, compliance, and customer satisfaction can be challenging. Inadequate infrastructure, insufficient resources, and organizational complexities can hinder scalability efforts and impede long-term success.
Many Fintech companies rely on partnerships with banks, technology providers, payment networks, and regulatory bodies to deliver their products and services. Dependency on third-party providers and ecosystem dynamics can introduce risks related to reliability, performance, and strategic alignment.
Despite these risks, the Fintech industry also presents significant opportunities for innovation, disruption, and value creation. Managing and mitigating risks effectively through robust risk management practices, compliance programs, cybersecurity measures, and strategic planning is essential for Fintech companies to succeed in a rapidly evolving and competitive landscape.
¿IPO or M&A in the Fintech industry?
There following are some of the reasons why there may be more merger and acquisition (M&A) deals than initial public offerings (IPOs) in the Fintech sector:
- Market Maturity and Consolidation: The Fintech industry has matured significantly over the past decade, leading to increased consolidation as larger companies seek to acquire smaller startups to expand their market reach, enhance their technology capabilities, and gain access to new customer segments. M&A deals are often seen as a faster and more efficient way for companies to achieve growth and scale compared to pursuing an IPO, which can be time-consuming and costly.
- Access to Capital: Fintech startups and emerging companies may find it challenging to access public capital markets through an IPO, particularly if they have not yet achieved profitability or established a track record of sustained growth. In contrast, M&A deals provide an alternative source of capital for startups by allowing them to be acquired by larger, more established companies with the financial resources to support their growth and development.
- Valuation Considerations: Valuation can be a significant factor influencing the decision between an IPO and an M&A deal. In some cases, Fintech startups may receive more attractive valuation offers from potential acquirers than they would receive in the public markets through an IPO, particularly if there is strong strategic interest or competition among buyers.
- Risk Mitigation: M&A deals can help mitigate various risks associated with scaling a Fintech business, including regulatory compliance, cybersecurity, competitive pressures, and market volatility. By joining forces with a larger, more established company, Fintech startups may gain access to additional resources, expertise, and support to address these challenges and accelerate their growth trajectory.
- Strategic Alignment: M&A deals often occur when there is strategic alignment between the buyer and the target company, such as complementary product offerings, technology capabilities, or market presence. For example, a Fintech startup specializing in payment processing may be acquired by a larger financial institution seeking to strengthen its digital banking capabilities. These strategic synergies can create value for both parties and drive M&A activity in the Fintech sector.
- Exit Opportunities for Investors: M&A deals provide liquidity and exit opportunities for Fintech investors, including venture capital firms, private equity investors, and early-stage backers. When a Fintech company is acquired, investors may realize returns on their investments sooner than if they had waited for an IPO, which can be appealing for investors seeking timely exits and capital deployment opportunities.
While M&A deals may be more prevalent than IPOs in the Fintech sector, both pathways offer advantages for companies seeking to raise capital, achieve liquidity, and pursue growth opportunities. The choice between an IPO and an M&A deal depends on various factors, including the company’s strategic objectives, financial position, market dynamics, and investor preferences.
Types of legal structures in the Fintech´s M&A transactions
The legal structure of a deal in the Fintech sector can vary depending on various factors such as the nature of the transaction, the parties involved, regulatory considerations, tax implications, and the strategic objectives of the parties.
- Asset Purchase Agreement (APA): In an asset purchase agreement, the buyer purchases specific assets and liabilities of the target company rather than acquiring its stock or equity interests. This structure allows the buyer to acquire specific assets such as intellectual property, technology, customer contracts, and goodwill while avoiding assuming certain liabilities of the seller.
- Stock Purchase Agreement (SPA): A stock purchase agreement involves the purchase of the target company’s stock or equity interests, either in part or in whole. This structure provides the buyer with ownership and eventual control of the entire business, including its assets, liabilities, contracts, and intellectual property rights.
- Merger Agreement: A merger agreement involves the consolidation of two or more companies into a single entity through the absorption of one of the entities or the creation a new one. Depending on whether they fall within the general authorization regime, merger transactions may or may not require a prior approval by the surveilling government agency.
- Joint Venture Agreement: Joint ventures often operate through merely contractual schemes or through the incorporation of a business entity. Except for unincorporated joint-ventures in public procurement regulation (consortia and temporary unions), joint ventures in Colombia are not specifically regulated but are possible under general contract and corporate laws. Incorporated joint-ventures may take any form available to business entities (stock corporations, limited liability corporations, simplified stock corporations, partnerships).
- In the Fintech sector, joint ventures may be established to collaborate on product development, market expansion, or technology sharing initiatives. This structure allows parties to combine their resources, expertise, and capabilities while maintaining separate legal entities.
- Franchising or Licensing Agreement: A licensing agreement allows one party (the licensor) to grant another party (the licensee) the right to use its intellectual property, technology, or other proprietary assets in exchange for a fee or royalty. In the Fintech sector, licensing agreements may be used to commercialize software, patents, trademarks, or other technology assets. In more sophisticated schemes, franchises may also allow to replicate the whole look & feel of a business together with its know-how, suppliers and business methodology.
- Strategic Partnership Agreement: A strategic partnership agreement involves a collaboration between two or more parties to pursue common business objectives, such as developing new products, entering new markets, or leveraging complementary strengths. Strategic partnerships in the Fintech sector may involve banks, technology companies, payment networks, or regulatory bodies.
- Subscription Agreement: A subscription agreement is used in equity financing transactions, such as seed rounds, venture capital investments, or private placements. This agreement sets forth the terms and conditions under which investors subscribe to purchase equity securities (e.g., common stock, preferred stock, or convertible notes) issued by the Fintech company.
- Service Agreement: A service agreement outlines the terms and conditions governing the provision of services by one party to another party. In the Fintech sector, service agreements may cover various services such as software development, IT support, payment processing, data analytics, or regulatory compliance.
The choice of legal structure depends on various factors, including the specific goals of the transaction, regulatory requirements, tax implications, risk allocation, and the preferences of the parties involved. It is essential for parties to consult with legal and financial advisors to determine the most appropriate structure for their particular circumstances and to ensure compliance with applicable laws and regulations.
Due Diligence in the Fintech´s M&A transactions
Performing due diligence before acquiring a Fintech company is crucial to assess its value, risks, and potential synergies.
The key areas to consider are the following:
- Financial Due Diligence: This involves a comprehensive analysis of the target company’s financial statements, including revenue, expenses, profitability, cash flow, and debt. It aims to verify the accuracy of financial information provided by the target and assess its financial health and sustainability.
- Regulatory and Compliance Due Diligence: Fintech companies operate in a highly regulated environment. Assessing the target company’s compliance with relevant laws and regulations is essential to identify any legal risks or compliance issues. This includes reviewing licenses, permits, regulatory filings, and any past or ongoing legal disputes or regulatory actions.
- Technology and Intellectual Property (IP) Due Diligence: Fintech companies rely heavily on technology and intellectual property assets such as software, algorithms, patents, and trademarks. Evaluating the target company’s technology infrastructure, development processes, cybersecurity measures, and IP portfolio helps assess its technological capabilities and potential for innovation.
- Market and Competitive Analysis: Understanding the target company’s market position, competitive landscape, customer base, and growth prospects is essential for assessing its strategic fit and growth potential. This involves analyzing market trends, customer feedback, market share, and competitive strengths and weaknesses.
- Operational Due Diligence: Examining the target company’s operational capabilities, including organizational structure, management team, business processes, and scalability, helps identify operational risks and integration challenges. Assessing factors such as employee retention, culture, and key operational metrics is also important.
- Cybersecurity and Data Privacy Due Diligence: Given the sensitive nature of financial data handled by Fintech companies, assessing the target company’s cybersecurity measures, data protection practices, and compliance with data privacy regulations is critical. This involves evaluating the effectiveness of security controls, incident response procedures, data encryption, and privacy policies.
- Customer and Partner Relationships: Understanding the nature of the target company’s relationships with customers, partners, suppliers, and other stakeholders is essential. This includes assessing customer satisfaction, contract terms, partnership agreements, and any dependencies or risks associated with key relationships. It also involves measuring consumer-protection compliance. Consumers are nowadays well educated about their rights and new mechanisms are being introduced for them to claim against Fintech entities when alleged violations occur. Recently the consumer-protection agency in Colombia, Superintendence of Industry and Commerce (SIC), issued instructions (Circular letter No. 02 of 10 October 2023) to tackle multiple complaints filed by FINTECH consumers and even imposing in recent days historic sanctions for this type of commerce. The SIC’s instructions include the following obligations by Fintech entities:
- To inform consumers at the time of entering into the contract and in writing about the remunerative interest rate and the delay interest rate expressed in terms of annual effective rate, the periodicity of payments, the number of installments and value of each one.
- To apply default interest only with respect to late installments and to provide sufficient information on credit assignments to third parties, securities, guarantees granted, the right of consumers to make early payments without generating penalties and the values or additional expenses to the credit operation, such as credit studies, insurance and guarantees, the type of credit and indications on collection costs.
- To refrain from making collections under conditions of threat, coercion and intimidation to the consumer and third parties.
- To ensure that the service offered does not cause damage to the integrity of the consumer and that its provision is given with the characteristics informed. Likewise, that the information to be provided is clear, truthful, sufficient, timely, verifiable, understandable, precise, suitable and in Spanish, and that they exclude from their contracts any clause considered abusive.
- Synergy Assessment: Identifying potential synergies between the acquiring company and the target company is crucial for maximizing the value of the acquisition. This involves assessing how the combined entities can leverage their respective strengths, capabilities, and resources to achieve strategic objectives, such as expanding market reach, enhancing product offerings, or improving operational efficiency.
- Environmental, Social & Governance (ESG) Due Diligence: It addresses companies’ potential controversial conduct or failure to adhere to legal regulations, while providing information on responsible ESG programs. ESG issues now constitute a crucial part of the investment decision-making process and portfolio management.
By conducting thorough due diligence across these key areas, acquiring companies can make informed decisions, mitigate risks, and maximize the success of their acquisitions in the Fintech sector.
Standard Reps and Warranties in the Fintech Industry
In a merger and acquisition (M&A) transaction involving a Fintech company, representations and warranties (reps and warranties) are contractual statements made by the seller regarding the condition, performance, and legal status of the company being sold. These provisions serve to protect the buyer by providing assurances about the accuracy and completeness of the information disclosed during due diligence.
The standard reps and warranties typically included in a Fintech M&A deal are the following:
- Corporate existence and authority: The seller represents that it is a legally formed and validly existing entity with the authority to enter into the transaction.
- Title to assets: The seller warrants that it has good and marketable title to all assets being sold, free and clear of any liens, claims, or encumbrances, except as disclosed.
- Compliance with laws and regulations: The seller represents that it has complied with all applicable laws, regulations, and industry standards relevant to its business operations, including financial services regulations, data protection laws, and anti-money laundering (AML) requirements.
- Intellectual property rights: The seller warrants that it owns or has the right to use all intellectual property (IP) assets necessary for its business, including software, patents, trademarks, and trade secrets, and that there are no third-party claims against such IP rights.
- Financial statements and performance: The seller represents that its financial statements are accurate, complete, and prepared in accordance with generally accepted accounting principles (GAAP) or International Financial Reporting Standards (IFRS), and that there have been no material adverse changes in its financial condition since the date of the latest financial statements.
- Contracts and agreements: The seller warrants that all material contracts, agreements, and commitments are valid, enforceable, and in full force and effect, and that there are no breaches or defaults under such contracts, except as disclosed.
- Regulatory compliance: The seller represents that it holds all necessary licenses, permits, and approvals required to conduct its business and that it is not subject to any pending or threatened regulatory actions or investigations.
- Litigation and claims: The seller warrants that there are no pending or threatened litigation, claims, or disputes that could materially affect its business, operations, or financial condition, except as disclosed.
- Data security and privacy: The seller represents that it has implemented adequate measures to protect the security and privacy of customer data and that it is in compliance with applicable data protection laws and regulations.
- Employment matters: The seller warrants that it is in compliance with all employment laws and regulations, including those related to wages, benefits, discrimination, and termination, and that there are no pending or threatened labor disputes or employee claims.
The specific terms and scope of reps and warranties may vary depending on the nature of the transaction, the parties involved, and the specific risks and considerations relevant to the Fintech sector. It is essential for both the buyer and the seller to carefully negotiate and document these provisions to allocate risks appropriately and facilitate a successful transaction.
Exit Clauses in a Fintech´s M&A transactions
Exit clauses in Fintech deals, like in any other sector, are provisions that outline the circumstances under which a party can exit the transaction or terminate the agreement. These clauses are essential for providing parties with options to exit the deal if certain conditions are not met or if unforeseen events occur. Here are some common exit clauses found in Fintech deals:
- Termination for Cause: This clause allows either party to terminate the agreement if the other party breaches a material provision of the contract. The breach must be significant enough to justify termination, and the terminating party may be required to provide notice and an opportunity to cure the breach before termination.
- Termination for Convenience: Some agreements include a termination for convenience clause, which allows one or both parties to terminate the agreement without cause upon giving notice within a specified timeframe. This clause provides flexibility for parties to exit the deal for any reason or no reason at all, subject to contractual requirements.
- Change of Control: In Fintech deals involving equity investments or acquisitions, change of control clauses may be included to address what happens if there is a change in ownership or control of one of the parties. This clause may give the non-acquiring party the right to terminate the agreement or require the acquiring party to obtain consent before completing the transaction.
- Force Majeure: Force majeure clauses excuse parties from performing their obligations under the agreement in the event of unforeseen circumstances beyond their control, such as natural disasters, acts of war, or government actions. If a force majeure event occurs and prevents the parties from fulfilling their obligations, the agreement may be terminated or suspended until the event is resolved.
- Material Adverse Change (MAC) Clause: A MAC clause allows a party to terminate the agreement if there is a material adverse change in the financial condition, business operations, or prospects of the other party or the target company. These clauses are often subject to negotiation and may include specific thresholds or carve-outs to limit their applicability.
- Exit Rights for Investors: In equity financing transactions, such as venture capital investments or private placements, investors may negotiate exit rights that allow them to sell their shares or redeem their investment under certain conditions, such as the failure to achieve specified milestones or the passage of a certain period of time.
- Drag-Along Rights: Drag-along rights empower majority shareholders to force minority shareholders to sell their shares in the event of a sale of the company. This clause ensures that all shareholders are treated equally and can facilitate the sale of the company by eliminating the need to obtain consent from every shareholder.
- Tag-Along Rights: Tag-along rights, also known as co-sale rights, give minority shareholders the right to join in a sale of the company initiated by majority shareholders on the same terms and conditions. This clause protects minority shareholders from being left behind in a sale transaction and allows them to participate in the sale process.
The speed with which technological innovation in the provision of financial services has evolved is undeniable. There are currently more than 700 fintech ventures in Latin America, and Colombia is the country with the third highest number of fintechs in the region. Traditional players like banking entities in Colombia have deployed different strategies to adapt to the transformation process by entering into alliances with fintechs including the implementation of digital labs to boost innovation in an organic way.
Having specialized legal advice in each of the areas related to the Fintech business can allow companies to develop their ventures in a more secure environment and with clear competitive advantages.

The National Tax and Customs Office -DIAN regulates the use of the electronic signatures
CAUSE FOR DISOLUTION OF COMPANIES DUE TO NON-COMPLIANCE WITH THE HYPOTHESIS OF CONTINUING BUSINESS
