Skip to content
KStart free
AI InfrastructureDefenseQuantumAll studies →

FBK US Equity

FB Financial CorpFinancials · State Commercial Banks · CIK 1649749 · FY ends Dec 31
$58.65
+0.11 (+0.19%)
USD · as of 2026-08-21 · marketstack

FBK · 10-K · period ended 2022-12-31

← all FBK documents
filed 2023-02-28 · EDGAR original ↗

Our rendering of the filing — original pagination and typography are not reproduced, and tables are reduced to their short label cells (the figures live on FA). Nothing is summarized: every line below is the filing's own text.

blocks 1487 of 2,339506k characters rendered

fbk-20221231

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

______________________________________________________________

FORM 10-K

______________________________________________________________

(Mark One)

☒ ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the fiscal year ended December 31, 2022

OR

☐TRANSITION REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934

For the transition period from ________ to ________

Commission File Number 001-37875

_____________________________________________________________

FB FINANCIAL CORPORATION

(Exact name of registrant as specified in its charter)

______________________________________________________________

211 Commerce Street, Suite 300Nashville, Tennessee 37201

(Address of principal executive offices) (Zip Code)

Registrant’s telephone number, including area code: (615) 564-1212

___________________________________________________________

Securities registered pursuant to Section 12(b) of the Act:

Title of each class Trading Symbol(s) Name of each exchange on which registered

Common Stock, Par Value $1.00 Per Share FBK New York Stock Exchange

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer as defined in Rule 405 of the Securities Act. Yes ☐ No ☒

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐ No ☒

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§ 232.405 of this chapter) during the preceding 12 months (or for such shorter period that the Registrant was required to submit such files). Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

Large accelerated filer ☒ Accelerated filer ☐

Non-accelerated filer ☐ Small reporting company ☐

Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting

under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☒

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☒

As of June 30, 2022, the last business day of the registrant's most recently completed second fiscal quarter, the aggregate market value of the registrant's common stock held by non-affiliates of the registrant was $1,387,074,163, based on the closing sale price of $39.22 per share as reported on the New York Stock Exchange.

The number of shares of registrant’s Common Stock outstanding as of February 14, 2023 was 46,631,883.

Portions of the registrant’s Definitive Proxy Statement relating to the registrant's 2023 Annual Meeting of Shareholders, which will be filed within 120 days after December 31, 2022, are incorporated by reference into Part III of this Annual Report on Form 10-K.

1

Table of Contents

Page

PART I.

Item 1. Business 5

Item 1A. Risk Factors 26

Item 1B. Unresolved Staff Comments 38

Item 2. Properties 38

Item 3. Legal Proceedings 38

Item 4. Mine Safety Disclosures 38

PART II.

Item 6. [RESERVED] 41

Item 7A. Quantitative and Qualitative Disclosures About Market Risk 78

Item 8. Financial Statements and Supplementary Data 80

Item 9A. Controls and Procedures 146

Item 9B. Other Information 146

Item 9C. Disclosure Regarding Foreign Jurisdictions that Prevent Inspections 146

PART III.

Item 10. Directors, Executive Officers and Corporate Governance 147

Item 11. Executive Compensation 147

Item 14. Principal Accounting Fees and Services 147

PART IV.

Item 15. Exhibits and Financial Statement Schedules 148

2

GLOSSARY OF ABBREVIATIONS AND ACRONYMS

As used in this Annual Report on Form 10-K for the years ended December 31, 2022, 2021, and 2020 (this "Report"), references to “we,” “our,” “us,” “FB Financial,” or “the Company” refer to FB Financial Corporation, a Tennessee corporation, and our wholly-owned banking subsidiary, FirstBank, a Tennessee state-chartered bank, unless otherwise indicated or the context otherwise requires. References to “Bank” or “FirstBank” refer to FirstBank, our wholly-owned banking subsidiary.

The acronyms and abbreviations identified below are used in the Notes to the Consolidated Financial Statements as well as in the Management’s discussion and analysis of financial condition and results of operations. You may find it helpful to refer to this page as you read this Report.

ABA American Bankers Association FHLMC Federal Home Loan Mortgage Corporation

ACL Allowance for credit losses FNMA Federal National Mortgage Association

AFS Available-for-sale GAAP U.S. generally accepted accounting principles

ALCO Asset Liability Management Committee GDP Gross Domestic Product

AMLA Anti-Money Laundering Act of 2020 GLBA Gramm-Leach-Bliley Act

AOCI Accumulated other comprehensive income GSE Government-Sponsored Enterprise

ARRC Alternative Reference Rates Committee HFI Held for Investment

ASC Accounting Standard Codification HFS Held for Sale

ASU Accounting Standard Update HTM Held to Maturity

BHCA Bank Holding Company Act of 1956 HUD Housing and Urban Development

BSA Bank Secrecy Act IPO Initial public offering

CBT Clayton Bank and Trust LIBOR London Interbank Offered Rate

CECL Current expected credit losses LRA Lender Risk Act

CEO Chief Executive Officer MBS Mortgage‐backed securities

CET1 Common Equity Tier 1 MOU Memorandum of Understanding

CFPB Consumer Financial Protection Bureau MPP Mortgage Purchase Program

CIBCA Change in Bank Control Act MSA Metropolitan statistical areas

CIP Customer identification program MSR Mortgage servicing rights

CMA Cash management advances NIM Net interest margin

COVID-19 Coronavirus pandemic NPA Nonperforming assets

CPR Conditional prepayment rate NWGB Northwest Georgia Bank

CRA Community Reinvestment Act NYSE New York Stock Exchange

DIF Deposit Insurance Fund OFAC Office of Foreign Assets Control

DOJ Department of Justice PCD Purchased credit deteriorated

ECOA Equal Credit Opportunity Act PCI Purchased credit impaired

EPS Earnings per share PPP Paycheck Protection Program

ERG Employee Resource Groups PSU Performance-based restricted stock units

ESPP Employee Stock Purchase Plan REIT Real estate investment trust

EVE Economic value of equity ROU Right-of-use

FASB Financial Accounting Standards Board RSU Restricted stock units

FBIN FirstBank Investments of Nevada, Inc. SBA Small Business Administration

FBRM FirstBank Risk Management SEC U.S. Securities and Exchange Commission

FDIC Federal Deposit Insurance Corporation SOFR Secured overnight financing rate

FDICIA FDIC Improvement Act TDFI Tennessee Department of Financial Institutions

FHLB Federal Home Loan Bank

3

Cautionary note regarding forward-looking statements

This Annual Report contains certain forward-looking statements that are not historical in nature and may be considered forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995. These forward-looking statements include, without limitation, statements regarding the Company’s future plans, results, strategies, and expectations, including but not limited to expectations around changing economic markets. These statements can generally be identified by the use of the words and phrases “may,” “will,” “should,” “could,” “would,” “goal,” “plan,” “potential,” “estimate,” “project,” “believe,” “intend,” “anticipate,” “expect,” “target,” “aim,” “predict,” “continue,” “seek,” “project,” “forecasts” “likely,” “future,” “strategy” and other variations of such words and phrases and similar expressions. These forward-looking statements are not historical facts, and are based upon management's current expectations, estimates, and projections, many of which, by their nature, are inherently uncertain and beyond the Company’s control. The inclusion of these forward-looking statements should not be regarded as a representation by the Company or any other person that such expectations, estimates, and projections will be achieved. Accordingly, the Company cautions shareholders and investors that any such forward-looking statements are not guarantees of future performance and are subject to risks, assumptions, and uncertainties that are difficult to predict. Actual outcomes and results may prove to be materially different from the outcomes and results expressed or implied by the forward-looking statements.

A number of factors could cause actual results to differ materially from those contemplated by the forward-looking statements including, without limitation, (1) current and future economic conditions, including the effects of inflation, interest rate fluctuations, changes in the economy or global supply chain, supply-demand imbalances affecting local real estate prices, and high unemployment rates in the local or regional economies in which the Company operates and/or the US economy generally; (2) changes in government interest rate policies and its impact on the Company’s business, net interest margin, and mortgage operations; (3) the Company’s ability to effectively manage problem credits; (4) the Company’s ability to identify potential candidates for, consummate, and achieve synergies from, potential future acquisitions; (5) difficulties and delays in integrating acquired businesses or fully realizing costs savings, revenue synergies and other benefits from future and prior acquisitions; dispositions, restructurings or reorganizations; (6) the Company’s ability to successfully execute its various business strategies; (7) changes in state and federal legislation, regulations or policies applicable to banks and other financial service providers, including legislative developments; (8) the potential impact of the phase-out of LIBOR or other changes involving LIBOR; (9) the effectiveness of the Company’s cybersecurity controls and procedures to prevent and mitigate attempted intrusions; (10) the Company's dependence on information technology systems of third party service providers and the risk of systems failures, interruptions, or breaches of security; (11) customer behavior; (12) natural disasters or acts of war or terrorism; and (13) general competitive, economic, political, and market conditions.

The foregoing factors should not be construed as exhaustive and should be read in conjunction with the sections entitled “Risk Factors” and “Management’s Discussion and Analysis of Financial Condition and Results of Operations” included in this Annual Report; and in any of the Company’s subsequent Securities and Exchange Commission Filings. Many of these factors are beyond the Company’s ability to control or predict. If one or more events related to these or other risks or uncertainties materialize, or if the underlying assumptions prove to be incorrect, actual results may differ materially from the forward-looking statements. Accordingly, shareholders and investors should not place undue reliance on any such forward-looking statements. Any forward-looking statement speaks only as of the date of this Annual Report, and the Company undertakes no obligation to publicly update or review any forward-looking statement, whether as a result of new information, future developments or otherwise, except as required by law. New risks and uncertainties may emerge from time to time, and it is not possible for the Company to predict their occurrence or how they will affect the Company. The Company qualifies all forward-looking statements by these cautionary statements.

4

PART I

ITEM - 1. Business

In this Annual Report, the terms "we," "our," "ours," "us," "FB Financial," and "the Company" refer to FB Financial Corporation, a Tennessee corporation, and our wholly-owned subsidiaries, including our state-chartered consolidated banking subsidiary, "FirstBank" or "the Bank," unless the context indicates that we refer only to the parent company, FB Financial Corporation.

Overview

FB Financial Corporation is a bank holding company designated as a financial holding company. We are headquartered in Nashville, Tennessee. Our wholly-owned bank subsidiary is FirstBank which provides a comprehensive suite of commercial and consumer banking services to clients in select markets primarily in Tennessee, Kentucky, Alabama and North Georgia. As of December 31, 2022, our footprint included 82 full-service bank branches and several other limited service banking, ATM and mortgage loan production locations serving the Tennessee metropolitan markets of Nashville, Chattanooga (including North Georgia), Knoxville, Memphis, and Jackson in addition to the metropolitan markets of Birmingham, Florence and Huntsville, Alabama and Bowling Green, Kentucky. The Bank also operates in 16 community markets. Further, the Company also provides mortgage banking services utilizing its bank branch network and mortgage banking offices located throughout the southeastern United States. As of December 31, 2022, we had total assets of $12.85 billion, loans held for investment of $9.30 billion, total deposits of $10.86 billion, and total common shareholders’ equity of $1.33 billion.

Throughout our history, we have maintained a community banking approach of personalized relationship-based service, which is delivered locally through experienced bankers in each market. As we have grown, maintaining this relationship-based approach utilizing local, talented and experienced bankers in each market has been an integral component of our success. Our bankers utilize their local knowledge and relationships to deliver timely solutions to our clients. We empower these bankers by giving them local decision making authority supplemented by appropriate risk management. In our experience, business owners and operators prefer to deal with decision makers, and our banking model is built to place the decision maker as close to the client as possible. We have designed our operations, technology, and centralized risk oversight processes to specifically support our operating model. We deploy this operating model universally in each of our markets, regardless of size. We believe we have a competitive advantage in our markets versus both smaller community banks and larger regional and national banks. Our robust offering of products, services and capabilities differentiate us from community banks, and our significant local market knowledge, client service level and the speed with which we are able to make decisions and deliver our services to customers differentiate us from larger regional and national banks.

We seek to leverage our operating model by focusing on profitable growth opportunities across our footprint, both in high-growth metropolitan markets and in stable community markets. As a result, we are able to strategically deploy our capital across our markets to take advantage of those opportunities that we believe provide the greatest certainty of profitable growth and highest returns.

Our history

Originally chartered in 1906, we are one of the longest continually operating banks in Tennessee. While our deep community roots go back over 100 years, our growth trajectory changed in 1984 when an experienced banker and entrepreneur partnered to acquire Farmers State Bank with a focus on growing the Bank. In 1988, Farmers State Bank purchased the assets of First National Bank of Lexington, Tennessee and changed the name to FirstBank, forming the foundation of our current franchise. In 1990, James W. Ayers became FirstBank's sole shareholder and remained the sole shareholder until our initial public offering in September 2016. The Bank grew from a community bank with only $14 million in assets in 1984 to total assets of $12.8 billion at December 31, 2022.

From 1984 to 2001, we operated as a community bank growing organically and through small acquisitions in community markets in West Tennessee. In 2001, our strategy evolved from serving purely community markets to include a modest presence in metropolitan markets, expanding our reach and enhancing our growth. We entered Nashville and Memphis in 2001 by opening a branch in each of those markets. In 2004 and 2008, we opened our first branches in Knoxville and Chattanooga, respectively. Although we experienced some growth in each metropolitan market, those markets did not become a significant strategic focus until we implemented our current strategy in the Nashville metropolitan statistical area in 2012. The successful implementation of this strategy, along with strategic acquisitions, resulted in growing Nashville into our largest market with 48% of our total deposits as of June 30, 2022. Additionally, we expanded into the Huntsville, Alabama MSA in 2014 by opening a branch in Huntsville and loan production office in Florence, Alabama, which was converted to a full service branch in 2019. During 2020, we expanded into the Bowling Green, Kentucky MSA with our acquisition of FNB Financial Corp. in addition to increasing our Nashville MSA market share through our acquisition of Franklin Financial Network, Inc. During 2021, we expanded our banking division into Central Alabama with hiring of additional experienced senior bankers in Birmingham. As a result of this evolution and focus on continuous organic

5

growth, we operate a balanced business model that serves a diverse customer base in both metropolitan and community markets.

Mergers and acquisitions

On September 18, 2015, the Bank completed its acquisition of Northwest Georgia Bank, a bank headquartered in Ringgold, Georgia, pursuant to the Agreement and Plan of Merger dated April 27, 2015 by and between the Bank and NWGB.The Company acquired NWGB in a $1.5 million cash purchase. NWGB was merged with and into the Bank, with the Bank as the surviving entity. As of September 18, 2015, the estimated fair value of loans acquired and deposits assumed as a result of the merger was $78.6 million and $246.2 million, respectively.

On July 31, 2017, the Bank completed its merger with Clayton Bank and Trust and American City Bank (together the “Clayton Banks”), pursuant to the Stock Purchase Agreement with Clayton HC, Inc., a Tennessee corporation (“Seller”), and James L. Clayton, the majority shareholder of Seller, dated February 8, 2017, as amended on May 26, 2017, with a purchase price of approximately $236.5 million. The Company issued 1,521,200 shares of common stock and paid cash of $184.2 million to purchase all of the outstanding shares of the Clayton Banks. At closing, the Clayton Banks merged with and into FirstBank, with FirstBank continuing as the surviving banking entity. As of July 31, 2017, the estimated fair value of loans acquired and deposits assumed as a result of the merger was $1,059.7 million and $979.5 million, respectively.

On April 5, 2019, the Bank acquired 11 Tennessee and three Georgia branch locations from Atlantic Capital Bank, N.A., ("the Branches") further increasing market share in existing markets and expanding the Company's footprint into new locations. Under the terms of the agreement, the Bank assumed $588.9 million in deposits for a premium of 6.25% and acquired $374.4 million in loans at 99.32% of principal outstanding.

On February 14, 2020, the Company acquired FNB Financial Corp. and its wholly-owned subsidiary, Farmers National Bank of Scottsville (collectively, "Farmers National"). Following the acquisition, Farmers National was merged into the Company with FB Financial Corporation continuing as the surviving entity. The transaction added four branches and expanded the Company's footprint into Kentucky. Under the terms of the agreement, the Company acquired total assets of $258.2 million, loans of $182.2 million and assumed total deposits of $209.5 million. Farmers National shareholders received 954,797 shares of the Company's common stock as consideration in connection with the merger, in addition to $15.0 million in cash consideration.

On August 15, 2020, the Company completed its largest merger to date with Franklin Financial Network, Inc. and its wholly-owned subsidiaries, with FB Financial Corporation continuing as the surviving entity. Under the terms of the agreement, the Company acquired total assets of $3.63 billion, loans of $2.79 billion and assumed total deposits of $3.12 billion in a transaction valued at $477.8 million, which included the issuance of 15,058,181 shares of the Company's common stock. The transaction added a new subsidiary to the Company, FirstBank Risk Management, which provides risk management services to the Company in the form of enhanced insurance coverages. It also added a new subsidiary to the Bank, FirstBank Investments of Tennessee, Inc., which provides investment services to the Bank. FBIT has a wholly-owned subsidiary, FirstBank Investments of Nevada, Inc. to provide investment services to FBIT. FBIN has a controlling interest in a subsidiary, FirstBank Preferred Capital, Inc., which serves as a real estate investment trust, which allows the Bank to sell real estate loans to the REIT to optimize our tax structure. During the year ended December 31, 2022, the Company began the process of dissolving FBRM which is expected to be completed in the first half of 2023.

See Note 2, “Mergers and acquisitions” in the notes to the consolidated financial statements for further details regarding the terms and conditions of these acquisitions.

6

Our markets

Our market footprint is the southeastern United States, centered around Tennessee, and includes portions of Alabama, North Georgia and Kentucky.

Top Metropolitan Markets(2) Top Community Markets(2)

(1)Source: SNL Financial. Market data is as of June 30, 2022 and is presented on a pro forma basis for announced acquisitions since June 30, 2022.

(2)Source: Company data and S&P Global Market Intelligence

Market characteristics and mix.

Metropolitan markets. Our metropolitan markets are generally characterized by attractive demographics and strong economies and offer substantial opportunity for future growth.We compete in these markets with national and regional banks that currently have the largest market share positions and with community banks primarily focused only on a particular geographic area or business niche. We believe we are well positioned to grow our market penetration among our target clients of small to medium sized businesses as well as large corporate businesses and the consumer base working and living in these metropolitan markets. In our experience, such clients demand the product sophistication of a larger bank, but prefer the customer service, relationship focus and local connectivity of a community bank. We believe that our size, product suite and operating model offer us a competitive advantage in these markets versus our smaller competitors, many of which are focused only on specific counties or industries. Our operating model driven by local talent with strong community ties and local authority serves as a key competitive advantage over our larger competitors. We believe that, as a result, we are well positioned to leverage our existing franchise to expand our market share in our markets.

Community markets. Our community markets tend to be more stable throughout various economic cycles, with primarily retail and small business customer opportunities and more limited competition. We believe this leads to an attractive profitability profile and more granular loan and deposit portfolios. Our community markets are standalone markets and not suburbs of larger markets. We primarily compete in these markets with community banks that generally have less than $1 billion in total assets. Our strategy is to compete against these smaller community banks by providing a broader and more sophisticated set of products and capabilities while still maintaining our local service model. We believe these markets are

7

being deemphasized by national and regional banks which provides us with opportunities to hire talented bankers in these communities and maintain or grow market share in these community markets.

Our core client profile across our footprint includes small businesses, corporate clients and owners, and investors of commercial real estate. We target business clients with substantial operating history. Our typical business client would keep business deposit accounts with us, and we would look to provide banking services to the owners and employees of the business as well. We also have an active consumer lending business that includes deposit products, mortgages, home equity lines and small consumer finance loans. We continuously strive to build deeper relationships by actively advising clients and offering products that meet their banking needs.

The following tables show our deposit market share ranking among banks in Tennessee as of June 30, 2022 (the most recent date where such information is publicly available). Of the 10 largest banks in the state based on total deposits, six are national or regional banks, which we believe provides us with significant opportunities to gain market share from these banks.

Top 10 banks in Tennessee:

1 The Toronto-Dominion Bank Cherry Hill, NJ 136 31.5 14.2

2 Regions Financial Corp. (AL) Birmingham, AL 200 25.1 11.3

3 Pinnacle Financial Partners (TN) Nashville, TN 54 23.4 10.5

4 Truist Financial Corp. (NC) Charlotte, NC 107 18.9 8.5

5 Bank of America Corporation (NC) Charlotte, NC 56 18.6 8.4

6 FB Financial Corp (TN) Nashville, TN 77 9.5 4.3

7 U.S. Bancorp (MN) Minneapolis, MN 67 5.1 2.3

8 Simmons First National Corp. (AR) Pine Bluff, AR 47 3.7 1.7

9 Wilson Bank Holding Co. (TN) Lebanon, TN 29 3.7 1.7

10 Fifth Third Bancorp (OH) Cincinnati, OH 41 3.4 1.5

Source: S&P Global Market Intelligence and Company reports as of June 30, 2022 adjusted for pending and completed acquisitions as of June 30, 2022.

Our business strategy

Our overall business strategy is comprised of the following core strategies.

Enhance market penetration in metropolitan markets. In recent years, we have successfully grown our franchise in the Nashville MSA by executing our community bank growth strategy. The strategy is centered on the following: recruiting the best bankers and empowering them with local authority; developing branch presence; building brand awareness and growing our business and consumer banking presence; and expanding our product offering and capabilities. These strategies coupled with our personalized, relationship-based client service have contributed significantly to our success. Additionally, we believe that our scale, resources and sophisticated range of products provides us with a competitive advantage over the smaller community banks in the Nashville MSA and our other MSAs. As a result of these competitive advantages and growth strategies, the Nashville MSA has become our largest market with approximately 5.4% market share, based on pro forma deposits as of June 30, 2022. We intend to continue to efficiently increase our market penetration through organic growth and strategic acquisitions.

Based on market and competitive similarities, we believe our growth strategies are transferable to our other metropolitan markets and we have implemented these strategies in additional markets across our footprint. In Knoxville and Chattanooga, we have achieved top 10 deposit market shares through our acquisitions of Northwest Georgia Bank, the Clayton Banks, and the branches from Atlantic Capital Bank and continued strong organic growth in those markets. In the Memphis, Huntsville and Birmingham MSAs, our banking model has attracted strong leadership teams and we have experienced significant growth in both deposits and loans.

Pursue opportunistic acquisitions. We have completed 13 acquisitions in the past 25 years. We pursue acquisitions that enhance market penetration, possess strong core deposits, are accretive to earnings per share while minimizing tangible book value dilution, and meet our internal return targets. We believe that numerous small to mid-sized banks or branch networks will be available for acquisition throughout our footprint as well as in attractive contiguous markets in the coming years due to industry trends, such as compliance and operational challenges, regulatory pressure, management succession issues and shareholder liquidity needs. In Tennessee alone, there are approximately 110 commercial banks with total assets of less than $5 billion, and in the contiguous states of Alabama, Georgia, Kentucky, North Carolina, South Carolina and Virginia, there are over 450 commercial banks with under $5 billion in assets.We believe that we are positioned as a natural consolidator because of our financial strength, reputation and operating model.

8

Improve efficiency by leveraging technology and scaling operations. We have invested significantly in our bankers, infrastructure and technology in recent years, which we believe has created a scalable platform that will support future growth across all of our markets. Our bankers and branches, especially in the metropolitan markets, continue to scale in size, and we believe there is capacity to grow our business without adding significantly to our branch network. The Company is a founding member of the USDF Consortium formed in early 2022 with a mission to build a network of banks to further the adoption and interoperability of a bank-minted tokenized deposit. Additionally, we have partnered with Zippy, Inc. to increase access to affordable housing by utilizing technology to transform the manufactured housing lending process. We plan to continue to invest, as needed, in our technology and business infrastructure to support our future growth and increase operating efficiencies.

Develop niche banking and noninterest income opportunities. While our primary focus is on capturing opportunities in our core banking business, we have successfully seized opportunities to grow our noninterest income. We have a strong mortgage platform with a traditional retail delivery channel. Additionally, we have successfully expanded our fee-based business to include more robust treasury management, trust and investment services and capital markets revenue streams. We intend to continue emphasizing these business lines which we believe serve as strong customer acquisition channels and provide us with a range of cross-selling opportunities, while making our business stronger and more profitable.

Risk management

General

Our operating model demands a strong risk culture built to address multiple areas of risk, including credit risk, interest rate risk, liquidity risk, price risk, compliance risk, information security/cyber risk, third-party risk, operational risk, strategic risk and reputational risk. Our risk culture is supported by investments in the right people and technologies to protect our business. Our board of directors, through its Risk Committee, is ultimately responsible for overseeing risk management of the Company. We have a Chief Risk Officer who oversees risk management across our business. Our board, Chief Executive Officer and Chief Risk Officer are supported by the heads of other functional areas at the Bank, including credit, legal, IT, audit, compliance, capital markets, loan review, information security and physical security. Our comprehensive risk management framework is designed to complement our core strategy of empowering our experienced, local bankers with local-decision making to better serve our clients.

Our credit policies support our goal of maintaining sound credit quality standards while achieving balance sheet growth, earnings growth, appropriate liquidity and other key objectives. We maintain a risk management infrastructure that includes local authority, centralized policymaking and a system of checks and balances. The fundamental principles of our credit policy and procedures are to maintain credit quality standards, which enhance our long-term value to our clients, associates, shareholders and communities. Our loan policies provide our bankers with a sufficient degree of flexibility to permit them to deliver responsive and effective lending solutions to our clients while maintaining appropriate credit quality. Furthermore, our bankers and associates are hired for the long-term and they are incented to focus on long-term credit quality. Since lending represents credit risk exposure, the board of directors and its duly appointed committees seek to ensure that the Bank maintains appropriate credit quality standards. We have established management oversight committees to administer the loan portfolio and monitor credit risk. These committees include our ACL Committee and Corporate Credit Risk Committee and they meet at least quarterly to review the lending activities.

Credit concentration

Diversification of risk is a key factor in prudent asset management. Our granular loan portfolio reflects a balanced mix of consumer and commercial clients across these markets that we think provides a natural hedge to industry and market cycles. In addition, risk from concentration is actively managed by management and reviewed by the board of directors of the Bank, and exposures relating to borrower, industry and commercial real estate categories are tracked and measured against policy limits. These limits are reviewed as part of our periodic review of the credit policy. Loan concentration levels are monitored by the Corporate Credit Risk Committee and reported to the Credit Risk Committee of the board of directors.

Loan approval process

The loan approval process at the Bank is characterized by local authority supported by a risk control environment that provides for prompt and thorough underwriting of loans. Our localized decision making is reinforced through a centralized review process supported by technology that monitors credits to ensure compliance with our credit policies. Our loan approval method is based on a hierarchy of individual lending authorities for new credits and renewals granted to our individual bankers, market presidents, regional presidents, credit officers, senior management and credit committees. The Corporate Credit Risk Committee, along with senior management, establishes the maximum lending limits at each level and our senior management team sets individual authorities within these maximum limits to each individual based on demonstrated experience and expertise, and are periodically reviewed and updated. We believe that the ability to have

9

individual loan authority up to specified levels based on experience and track record coupled with appropriate approval limits for our market presidents, regional presidents, credit officers, senior management and credit committees allows us to provide prompt and appropriate responses to our clients while still allowing for the appropriate level of oversight.

As a relationship-oriented lender, rather than transaction-oriented lender, a majority of our loans HFI are made to borrowers or relationships located or operating in our market area. This provides us with a better understanding of their business, creditworthiness and the economic conditions in their market and industry. Furthermore, our associates are held accountable for all of their decisions, which effectively aligns their incentives to reflect appropriate risk management.

In considering loans, we follow the underwriting principles set forth in our credit policy with a primary focus on the following factors:

•A relationship with our clients that provides us with a thorough understanding of their financial condition and ability to repay the loan;

•verification that the primary and secondary sources of repayment are adequate in relation to the amount of the loan;

•adherence to appropriate loan to value guidelines for real estate secured loans;

•targeted levels of diversification for the loan portfolio, both as to type of borrower and type of collateral; and

•proper documentation of loans, including perfected liens on collateral.

As part of the approval process for any given loan, we seek to minimize risk in a variety of ways, including the following:

•analysis of the borrower's and/or guarantor's financial condition, cash flow, liquidity, and leverage;

•assessment of the project's operating history, operating projections, location and condition;

•review of appraisals, title commitment and environmental reports;

•consideration of the management's experience and financial strength of the principals of the borrower; and

•understanding economic trends and industry conditions.

The Corporate Credit Risk Committee reviews and approves any amendments to the credit policy, monitors loan portfolio trends and credit trends, and loan reviews. The Credit Risk Committee of the board of directors approves loan transactions that exceed management authorized thresholds as set forth in our credit policy. Loan pricing is established in conjunction with the loan approval process based on pricing guidelines for loans that are set by the Bank’s senior management. We believe that our loan approval process provides for thorough internal controls, underwriting, and decision making.

Lending limits

The Bank is limited in the amount it can loan in the aggregate to a single borrower or related borrowers by the amount of our regulatory capital. Tennessee’s legal lending limit is a safety and soundness measure intended to prevent one person or a relatively small and economically related group of persons from borrowing an unduly large amount of bank funds. It is also intended to safeguard bank’s depositors by diversifying the risk of potential loan losses among a relatively large number of creditworthy borrowers engaged in various types of businesses. Generally, under Tennessee law, loans and extensions of credit to a borrower may not exceed 15% of our bank’s Tier 1 capital, plus an additional 10% of the bank’s Tier 1 capital, with approval of the bank’s board. Further, the Bank may elect to conform to similar standards applicable to national banks under federal law, in lieu of Tennessee law. Because the federal law and Tennessee state law standards are determined as a percentage of the Bank’s capital, these state and federal limits both increase or decrease as the Bank’s capital increases or decreases. Based upon the capitalization of the Bank at December 31, 2022, the Bank’s legal lending limits were approximately $194.0 million (15%) and $323.4 million (25%). The Bank may seek to sell participations in our larger loans to other financial institutions, which will allow us to manage the risk involved in these loans and to meet the lending needs of our clients requiring extensions of credit in excess of these limits.

In addition to these legally imposed lending limits, we also employ appropriate limits on our overall loan portfolio and requirements with respect to certain types of lending and individual lending relationships. For example, we have lending limits related to maximum borrower, industry and certain types of commercial real estate exposures.

10

Enterprise risk management

We maintain an enterprise risk management program that helps us to identify, manage, monitor and control potential risks that may affect us, including credit risk, interest rate risk, liquidity risk, price risk, compliance risk, operational risk, information security/ cyber risk, third-party risk, strategic risk and reputational risk. Our operating model demands a strong risk culture built to address the multiple areas of risk we face, and our risk management strategy is supported by significant investments in the right people and technologies to protect the organization.

Our comprehensive risk management framework and risk identification is a continuous process and occurs at both the transaction level and the portfolio level. While our local bankers and associates support our day-to-day risk practices, management seeks to identify interdependencies and correlations across portfolios and lines of business that may amplify risk exposure through a thorough centralized review process. Risk measurement helps us to control and monitor risk levels and is based on the sophistication of the risk measurement tools used to reflect the complexity and levels of assumed risk. We monitor risks and ensure compliance with our risk policies by timely reviewing risk positions and exceptions. This monitoring process ensures that management’s decisions are implemented for all geographies, products and legal entities with overview by the appropriate committees.

We control risks through limits that are communicated through policies, standards, procedures and processes that define responsibility and authority. Such limits serve as a means to control exposures to the various risks associated with our activities, and are meaningful management tools that can be adjusted if conditions or risk tolerances change. In addition, we maintain a process to authorize exceptions or changes to risk limits when warranted. These risk management practices help to ensure effective reporting, compliance with all laws, rules and regulations, avoid damage to our reputation and related consequences, and attain our strategic goals while avoiding pitfalls and surprises along the way.

The Risk Committee of the board of directors approves policies that set operational standards and risk limits. Management is responsible for the implementation, integrity and maintenance of our risk management systems ensuring the directives are implemented and administered in compliance with the approved policy. Our Chief Risk Officer supervises the overall management of our risk management program, reports to the Chief Executive Officer and yet also retains independent access to the Risk Committee of the board of directors.

Credit risk management

Credit risk management is a key component of our risk management program. We employ consistent analysis and underwriting to examine credit information and prepare underwriting documentation. We monitor and approve exceptions to our credit policies as required, and we also track and address technical exceptions.

Each relationship manager has the primary responsibility for appropriately risk rating each loan that is made. In addition, our credit administration department is responsible for the ongoing monitoring of loan portfolio performance through the review of ongoing financial reports, credit quality reports, relationship manager reports, audit reviews and exception reporting and concentration analysis. This monitoring process also includes an ongoing review of loan risk ratings. Management and monitoring of our allowance for credit losses is performed by our ACL Committee.We have a Corporate Credit Risk Committee which monitors the integrity of our portfolio within the parameters of the credit policy. We utilize a risk grading system that enables management to differentiate individual loan quality and forecast future profitability and portfolio loss potential. The Credit Risk Committee of the board of directors has the authority to approve credit policies and risk limits.

We assign a credit risk rating at the time a commercial loan is made and adjust it as conditions warrant. Portfolio monitoring systems allow management to proactively assess risk and make decisions that will minimize the impact of negative developments. Successful credit management is achieved by lenders consistently meeting with clients and reviewing their financial conditions regularly. This enables both the recognition of future opportunities and potential weaknesses early.

The board of directors supports a strong loan review program and is committed to its effectiveness as part of the independent process of assessing our lending activities. We have communicated to our credit and lending staff that the identification of emerging problem loans begins with the lending personnel knowing their client and supported by credit personnel, actively monitoring their client relationships. The loan review process is meant to augment this active management of client relationships and to provide an independent and broad-based look into our lending activities. We believe that our strong client relationships support our ability to identify potential deterioration of our credits at an early stage enabling us to address these issues early on to minimize potential losses.

We maintain a robust loan review function by utilizing an internal loan review team as well as third-party loan review firms. The results from internal and external loan reviews are reported to the Risk Committee of the board of directors to ensure independence and objectivity. The examinations performed by the loan review department are based on risk assessments of individual loan commitments within our loan portfolio over a period of time. At the conclusion of each review, the loan review department provides management with a report that summarizes the results of the review. At a minimum, the report

11

addresses risk rating accuracy, compliance with regulations and policies, loan documentation accuracy, the timely receipt of financial statements, and any additional material issues.

We monitor the levels of delinquenciesfor any negative or adverse trends. From time to time, we maymodify loans to extend the term or make other concessions to help a borrower with a deteriorating financial condition stay current on their loan and to avoid foreclosure. We generally do not forgive principal or interest on loans or modify the interest rates on loans to rates that are below market rates. We believe that we are well reserved for losses resulting from our non-performing assets.

Liquidity and interest rate risk management

Our liquidity planning framework is focused on robust forecasting and risk management to ensure predictable funding needs and availability. We strive to maintain the lowest cost of funding available while maintaining stable sources of liquidity. To achieve these objectives, we utilize a simple funding and capital structure consisting primarily of deposits and common equity. We remain continually focused on growing our noninterest-bearing and other low-cost core deposits while replacing higher cost funding sources, including wholesale time deposits and other borrowed debt, to fund our balance sheet growth. The following chart shows our overall funding structure as of December 31, 2022.

Funding structure as of December 31, 2022

In addition, we monitor our liquidity risk by adopting policies to define potential liquidity problems, reviewing and maintaining an updated contingency funding plan and providing a prudent capital structure consistent with our credit standing and plans for strategic growth.

Our interest rate risk management system is overseen by the Risk Committee of our board of directors, who has the authority to approve acceptable rate risk levels. Our board of directors has established the Asset/Liability Committee at the management level to ensure appropriate risk appetite by requiring:

•quarterly testing of interest rate risk exposure;

•proactive risk identification and measurement; and

•quarterly risk presentations by senior management

Cyber Security

The Company has implemented a comprehensive set of information security policies, standards, and related trainings that every employee is required to review, acknowledge, and/or complete in connection with the employee’s onboarding process at the time they are hired. Each employee is required to formally review and understand any changes to these policies and standards and complete additional training on at least an annual basis. These policies, standards, and trainings address, but are not limited to, the following topics: data privacy and security, password protection, internet use,

12

computer equipment and software use, e-mail use, risks associated with social engineering, and best-practices and safety.

The Company’s information security practices and risks are reviewed annually by our internal audit team and our external auditors in connection with our annual audit process. Key Risk Indicators, established in conjunction with board approved Statement of Risk Appetite, are reported to the Information Technology Steering Committee and Risk Management Committee on at least a quarterly basis. Our Risk Committee of the Board of Directors is responsible for overseeing the Company’s information security risk and receives updates on a quarterly basis. Our Board of Directors or the Board’s Risk Committee is provided an information security update on an annual basis. The Company does adhere to and implement NIST guidelines and utilizes the ABA recommended Cyber Risk Institute Profile to annually evaluate our information security practices. The results of those annual evaluations are provided to and monitored by the FDIC and the Board’s Risk Committee. The Company also maintains coverage under a cyber security insurance policy. Levels of coverage are reviewed periodically to ensure alignment with the organizations risk appetite.

Competition

We conduct our core banking operations primarily in Tennessee and surrounding states and compete in the commercial banking industry solely through our wholly-owned banking subsidiary, FirstBank. The banking industry is highly competitive, and we experience competition in our market areas from many other financial institutions. We compete with commercial banks, credit unions, savings institutions, mortgage banking firms, online mortgage lenders, online deposit banks, digital banking platforms, consumer finance companies, securities brokerage firms, insurance companies, money market funds and other mutual funds, as well as super-regional, national and international financial institutions that operate offices in our market areas and elsewhere. In addition, a number of out-of-state financial intermediaries have opened production offices, or otherwise solicit deposits, in our market areas. Increased competition in our markets may result in reduced loans and deposits, as well as reduced net interest margin and profitability. Furthermore, our markets have grown increasingly competitive in recent years with a number of banks entering these market, with a primary focus on the metropolitan markets. We believe this trend will continue as banks look to gain a foothold in these growing markets. This trend will result in greater competition primarily in our metropolitan markets. However, we firmly believe that our market position and client-focused operating model enhance our ability to attract and retain clients.

See “Our markets” in this section above for a further discussion of the markets we compete in and the competitive landscape in these markets.

Human capital

At FB Financial, we value our associates, because our associates are FirstBank. They do the work; they serve our communities and they build relationships with our customers. As of December 31, 2022, the Company employed 1,757 full-time equivalent associates with an average tenure of six years of service.

Culture

We pride ourselves on our culture which cultivates the talents of our associates helping them give more and get more out of their jobs than they thought possible. At FirstBank, our vision is to:

•Deliver trusted solutions to our customers;

•Provide a great place to work for our associates;

•Invest in our communities; and

•Provide superior long-term returns for our shareholders.

We also pride ourselves in our values, which we aspire to live by every day:

•One Team, One Bank

•Do The Right Thing

•Commitment to Excellence

•Exist For the Customer

•Treat People With Respect

•Enjoy Life

In 2022, FirstBank has been named one of Middle Tennessee’s Top Workplaces by The Tennessean for the eighth year in a row. FirstBank meets high standards for a healthy workplace culture as ranked by its own employees. We have also been named as one of the Best Banks to Work For in America by American Banker Magazine, for each of the last three years.

13

Diversity, Equity, and Inclusion

Providing a great place to work includes our commitment to diversity, equity, and inclusion. In 2020, we chartered an internal Diversity Council to begin work in 2021. The Diversity Council focuses on educating our associates on inclusion, encouraging them to see differences as opportunities to diversify our workforce, and increasing involvement in our diverse communities. In 2022, the Council was instrumental in providing Unconscious Bias Training to our leadership and adding additional DEI training to the all-associate curriculum.

The Diversity Council oversees our “All In” Employee Resource Groups or ERGs. FirstBank ERG Communities provide a safe place where people who identify as belonging to a certain demographic group – or who consider themselves allies to that group – can speak openly with others who share similar perspectives to provide awareness and education to the FirstBank family. Our All In ERGs will serve as networks for associates to share their unique perspectives – while advancing FirstBank’s diversity, equity and inclusion strategies and position in our local markets. Inclusive groups that collaborate across regions will enable associates to share ideas, grow professionally and connect with colleagues who have similar interests. All In ERG priorities align with the Company’s values and all are open to every associate.

The initial ERG Communities to be launched in 2023 are:

a.Black Professionals. This community group advocates for representation, social awareness, and supporting opportunity for Black and African American associates.

b.Women Professionals. This community group focuses on the development and mentorship of women at FirstBank and in the community.

We continue to focus on hiring associates representative of ethnic minority groups, which made up 15% of our external hires in 2022.

Recruitment, Talent Development, and Retention

During the year ended December 31, 2022, we continued to grow our Talent Advantage program established in 2020 by conducting dozens of in-person talent development meetings across the organization to facilitate succession planning at all levels. Key talent was identified, and development planning initiatives were implemented.

We piloted new manager development sessions designed to provide knowledge and support for new and emerging managers to transition to a supervisory leadership role.

These programs have been developed to give FirstBank associates opportunities to grow, develop and explore career opportunities that are of interest to them within our organization.

We evolved to a more structured recruiting procedure, implemented a new tracking and application system and highlighted our internal application process. This resulted in 21.6% of jobs filled through internal mobility including 141 promotions. With associates joining us from outside the organization, we have an over 93% retention rate of first year hires.

Compensation

We are committed to attracting and retaining the best talent in our markets. We provide competitive compensation and benefits that meet the needs of our employees, including market-competitive pay, healthcare benefits, equity incentives, and an employee stock purchase plan. We also provide meaningful training and development opportunities designed to train our next generation of leaders and provide them opportunities for advancement within the Company.

Through our FirstBank Give More program, we added paid volunteer hours to allow our associates to participate in activities supporting community organizations in their local areas.

Changes in the medical plan were implemented resulting in minimal, if any, premium increases for the majority of associates in a highly inflationary environment.

The Company contributes an average of over 70% of total premium cost.

Information technology systems

During the year ended December 31, 2022, FirstBank continued the expansion of workflow and process automation efforts, focusing on continued improvement to customer experience, while creating efficiencies and reducing manual efforts. The Bank completed the initial implementation of a commercial loan origination system, and has selected and begun implementation of an asset-liability monitoring and funds management system.

Post-pandemic technology improvements throughout 2022 included continuing resiliency implementations across the footprint of the organization, with a majority of key locations now having discrete carrier network redundancy. Other improvements included a focus on scheduled lifecycle replacements of network and workstation hardware.

14

Additionally during 2022, FirstBank initiated a data management program with a goal to enhance the utilization of data by improving confidence, availability and usability of data. The program aligns with the Bank's strategic plan with an initial focus on financial, regulatory, credit and customer data.

Lastly, FirstBank continued exploring emerging technologies and was a founding member of the USDF Consortium in early 2022, which developed a functioning, non-production prototype of a USDF blockchain-based point-to-point payment application, integrating with the Bank's digital banking platform.

During 2023, we plan to focus on the implementation of the budgeted and forecasting system, and supporting the initiatives from the FirstBank Way improvements. The FirstBank Way initiatives will enable us to continually define our business model to be scalable yet community banking focused as we continue to grow. Additionally, the integration of embedded banking technology into the bank's core infrastructure is intended to support the implementation of key innovation partners in 2023. The Bank will also be closely monitoring and seeking to take advantage of regulatory support of possible blockchain innovative opportunities.

Supervision and regulation

The following is a general summary of the material aspects of certain statutes and regulations applicable to us and the Bank. These summary descriptions are not complete, and you should refer to the full text of the statutes, regulations, and corresponding guidance for more information. These statutes and regulations are subject to change, and additional statutes, regulations, and corresponding guidance may be adopted. We are unable to predict these future changes or the effects, if any, that these changes could have on our business, revenues, and financial results.

General

The U.S. financial services and banking industry is highly regulated.The bank regulatory framework, involving the supervision, regulation, and examination of the Bank by bank regulatory agencies are intended primarily for the protection of consumers, bank depositors and the Deposit Insurance Fund of the FDIC, rather than holders of our capital stock.

Federal and state banking laws and regulations affect virtually all of our operations.Statutes, regulations and policies govern, among other things, the scope of activities that we may conduct and the manner in which we may conduct them; our business plan and growth; our board, management, and risk management infrastructure; the type, terms, and pricing of our products and services; our loan and investment portfolio; our capital and liquidity levels; our reserves against deposits; our ability to pay dividends, buy-back stock or distribute capital; and our ability to engage in mergers, acquisitions and other strategic initiatives. The legal and regulatory regime is continually under review by legislatures, regulators and other governmental bodies, and changes regularly occur through the enactment or amendment of laws and regulations or through shifts in policy, implementation or enforcement. Changes are difficult to predict and could have significant effects on our business.

Regulatory Framework

The Company is subject to regulation and supervision by multiple regulatory bodies. As a registered bank holding company, we are subject to ongoing regulation, supervision, and examination by the Federal Reserve under the Bank Holding Company Act of 1956, as amended. The Federal Reserve’s jurisdiction also extends to any company that is directly or indirectly controlled by the bank holding company.

As a Tennessee state-chartered bank that is not a member of the Federal Reserve System, the Bank is subject to ongoing regulation, supervision, and examination by the FDIC and the Bank's state banking regulator, the Tennessee Department of Financial Institutions.

The Bank’s deposits are insured by the deposit insurance fund of the FDIC up to applicable legal limits. The FDIC charges deposit insurance assessments to FDIC-insured institutions, including the Bank, to fund and support the DIF. The rate of these deposit insurance assessments is based on, among other things, the risk characteristics of the Bank. The FDIC has the power to terminate the Bank’s deposit insurance if it determines the Bank is engaging in unsafe or unsound practices. Federal banking laws provide for the appointment of the FDIC as receiver in the event the Bank were to fail, such as in connection with undercapitalization, insolvency, unsafe or unsound conditions or other financial distress. In a receivership, the claims of the Bank’s depositors (and those of the FDIC as subrogee of the Bank) would have priority over other general unsecured claims against the Bank.

The Company is also subject to the disclosure and regulatory requirements of the Securities Act and the Exchange Act, both as administered by the SEC. The Company’s common stock is listed on the New York Stock Exchange under the trading symbol “FBK” and, therefore, is subject to the rules of the NYSE for listed companies.

15

The Dodd-Frank Act

As a result of the Dodd-Frank Act, the regulatory framework under which the Company operates has changed. The Dodd-Frank Act brought about a significant overhaul of many aspects of the regulation of the financial services industry, addressing issues including, among others, systemic risk, capital adequacy, deposit insurance assessments, consumer financial protection, interchange fees, lending limits, mortgage lending practices, registration of investment advisers and changes among the bank regulatory agencies. In particular, portions of the Dodd-Frank Act that affected us and the Bank include, but are not limited to:

•The Consumer Financial Protection Bureau. The CFPB is a federal regulatory body with broad authority to regulate the offering and provision of consumer financial products and services and supervisory authority over banks with more than $10 billion in assets. Any new regulatory requirements promulgated by the CFPB or modifications in the interpretations of existing regulations could require changes to FirstBank's business. The Dodd-Frank Act also gives the CFPB broad data collecting powers for fair lending for both small business and mortgage loans, as well as extensive authority to prevent unfair, deceptive, and abusive practices. The Company's asset size passed $10 billion during the third quarter of 2020 and as such, there continues be an increase to our overall regulatory compliance costs for the year ended December 31, 2022.

•Mortgage lending activities. The Dodd-Frank Act imposes duties on mortgage lenders, including a duty to determine the borrower's ability to repay the loan, and imposed a requirement on mortgage securitizers to retain a minimum level of economic interest in securitized pools of certain mortgage types.

•Executive compensation and corporate governance. The Dodd-Frank Act requires public companies to include, at least once every three years, a separate non-binding “say on pay” vote in their proxy statement by which shareholders may vote on the compensation of the public company’s named executive officers. In addition, if such public companies are involved in a merger, acquisition, or consolidation, or if they propose to sell or dispose of all or substantially all of their assets, shareholders have a right to an advisory vote on any golden parachute arrangements in connection with such transaction (frequently referred to as “say-on-golden parachute” vote). As of December 31, 2022, we are subject to the say-on-pay and say-on-golden-parachute requirements and other corporate governance rules, such as the requirement for an independent compensation committee and the requirement for all exchange-traded companies to adopt clawback policies for incentive compensation paid to executive officers in the event of accounting restatements based on material non-compliance with financial reporting requirements. In October 2022, the SEC adopted a final rule directing national securities exchanges and associations, including the NYSE, to implement listing standards that require listed companies to adopt policies mandating the recovery (or “clawback”) of excess incentive-based compensation earned by a current or former executive officer during the three fiscal years preceding the date the listed company is required to prepare an accounting restatement, including to correct an error that would result in a material misstatement if the error were corrected in the current period or left uncorrected in the current period. The final rule requires us to adopt a clawback policy within 60 days after such listing standard becomes effective.

•Interchange Fees. The Dodd-Frank Act included provisions (known as the "Durbin Amendment"), which restrict interchange fees to those which are "reasonable and proportionate" for certain debit card issuers and limits the ability of networks and issuers to restrict debit card transaction routing. In the final rules, interchange fees for debit card transactions were capped at $0.21 plus five basis points (plus $0.01 for fraud loss) in order to be eligible for a safe harbor such that the fee is conclusively determined to be reasonable and proportionate. The interchange fee restrictions contained in the Durbin Amendment and the rules promulgated thereunder became applicable to FirstBank in the second half of 2022. As such, we experienced a decline in interchange fee income although our volume of interchange transactions increased.

The Company is currently not subject to stress testing reporting requirements under the Economic Growth, Regulatory Relief and Consumer Protection Act due to asset size not exceeding $100 billion. The Company will continue to perform certain stress tests internally and incorporate the economic models and information developed through our testing into our risk management and business planning activities.

Temporary Regulatory Capital Relief Related to Impact of CECL

Concurrent with enactment of the CARES Act, in March 2020, the OCC, the Board of Governors of the Federal Reserve System, and the FDIC published an interim final rule to delay the estimated impact on regulatory capital stemming from the implementation of CECL, the provisions of which became final on September 30, 2020. The final rule maintains the three-year transition option in the previous rule and provides banks the option to delay for two years an estimate of CECL’s effect on regulatory capital, relative to the incurred loss methodology’s effect on regulatory capital, followed by a three-year transition period (five-year transition option). On January 1, 2020, the Company adopted ASU 2016-13, "Financial Instruments - Credit Losses (Topic 326): Measurement of Credit Losses on Financial Instruments" and elected

16

the capital transition relief over the permissible five-year period. As such, we began phasing in the impact of the CECL adoption in 2022.

Holding company regulation

As a regulated bank holding company, we are subject to various laws and regulations that affect our business. These laws and regulations, among other matters, prescribe minimum capital requirements, limit transactions with affiliates, impose limitations on the business activities in which we can engage, limit the dividend or distributions that the Bank can pay to us, restrict the ability of institutions to guarantee our debt, and impose certain specific accounting requirements on us that may be more restrictive and may result in greater or earlier charges to earnings or reductions in our capital than generally accepted accounting principles, among other things.

Financial holding company status

FB Financial has elected to be treated as a financial holding company, which allows us to engage in a broader range of activities than would otherwise be permissible for a bank holding company, including activities such as securities underwriting, insurance underwriting, and merchant banking. To qualify as a financial holding company, a bank holding company must be well-capitalized and well-managed, as those terms are used by the Federal Reserve. In addition, each subsidiary bank of a bank holding company must also be well-capitalized and well-managed and be rated at least "satisfactory" under the CRA. A bank holding company that does not qualify, or has not chosen, to become a financial holding company must limit its activities to traditional banking activities and those non-banking activities the Federal Reserve has deemed to be permissible because they are closely related to the business of banking.

Permitted activities

Under the BHCA, as amended, a bank holding company is generally permitted to engage in, or acquire direct or indirect control of more than five percent of any class of the voting shares of any company that is not a bank or bank holding company and that is engaged in, the following activities (in each case, subject to certain conditions and restrictions and prior approval of the Federal Reserve):

•banking or managing or controlling banks:

•furnishing services to or performing services for our subsidiaries:

•any activity that the Federal Reserve determines by regulation or order to be so closely related to banking as to be a proper incident to the business of banking, including:

▪factoring accounts receivable;

▪making, acquiring, brokering or servicing loans and related activities;

▪leasing personal or real property;

▪operating a nonbank depository institution, such as a savings association;

▪performing trust company functions;

▪conducting financial and investment advisory activities;

▪underwriting and dealing in government obligations and money market instruments;

▪providing specified management consulting and counseling activities;

▪performing selected data processing services and support services;

▪acting as agent or broker in selling credit life insurance and other types of insurance in connection with credit transactions;

▪performing selected insurance underwriting activities;

▪providing certain community development activities (such as making investments in projects designed primarily to promote community welfare); and

▪issuing and selling money orders and similar consumer-type payment instruments.

While the Federal Reserve has found these activities in the past acceptable for other bank holding companies, the Federal Reserve may not allow us to conduct any or all of these activities, which are reviewed by the Federal Reserve on a case by case basis upon application by a bank holding company.

The Federal Reserve has the authority to order a bank holding company or its subsidiaries to terminate any of these activities or to terminate its ownership or control of any subsidiary when it has reasonable cause to believe that the bank holding company’s continued ownership, activity or control constitutes a serious risk to the financial safety, soundness or stability of the bank holding company or any of its bank subsidiaries.

Acquisitions subject to prior regulatory approval

The BHCA requires the prior approval of the Federal Reserve for a bank holding company to acquire substantially all the assets of a bank or to acquire direct or indirect ownership or control of more than 5% of any class of the voting shares of any bank, bank holding company, savings and loan holding company or savings association, or to increase any such non-

17

majority ownership or control of any bank, bank holding company, savings and loan holding company or savings association, or to merge or consolidate with any bank holding company.

Under the BHCA, and if “well capitalized” and “well managed”, as defined under the BHCA and implementing regulations, we or any other bank holding company located in Tennessee may purchase a bank located outside of Tennessee. Conversely, a well-capitalized and well-managed bank holding company located outside of Tennessee may purchase a bank located inside Tennessee. In each case, however, restrictions may be placed on the acquisition of a bank that has only been in existence for a limited amount of time or will result in concentrations of deposits exceeding limits specified by statute. For example, Tennessee law currently prohibits a bank holding company from acquiring control of a Tennessee-based financial institution until the target financial institution has been in operation for at least three years.

Bank holding company obligations to bank subsidiaries

Under current law and Federal Reserve policy, a bank holding company is expected to act as a source of financial and managerial strength to its depository institution subsidiaries and to maintain resources adequate to support such subsidiaries. Under the “source of strength” doctrine, the Federal Reserve may require a bank holding company to make capital injections into a troubled subsidiary bank and may charge the bank holding company with engaging in unsafe and unsound practices for failure to commit resources to such a subsidiary bank. As a result, we could be required to commit resources to support the Bank in situations where additional investments in a bank may not otherwise be warranted. These situations include guaranteeing the compliance of an "undercapitalized" bank with its obligations under a capital restoration plan, as described further under "Bank regulation: Capitalization levels and prompt corrective action" below. As a result of these obligations, a bank holding company may be required to contribute additional capital to its subsidiaries in the form of capital notes or other instruments that qualify as capital under regulatory rules. Any such loan from a holding company to a subsidiary bank is likely to be unsecured and subordinated to the bank's depositors and perhaps to other creditors of the bank. If we were to enter bankruptcy or become subject to the orderly liquidation process established by the Dodd-Frank Act, any commitment by us to a federal bank regulatory agency to maintain the capital of the Bank would be assumed by the bankruptcy trustee or the FDIC, as appropriate, and entitled to a priority of payment.

Restrictions on bank holding company dividends

The ability of the Company or the Bank to pay dividends, repurchase stock and make other capital distributions is limited by regulatory capital rules and other aspects of the regulatory framework. The Federal Reserve's policy regarding dividends is that a bank holding company should not declare or pay a cash dividend that would impose undue pressure on the capital of any bank subsidiary or would be funded only through borrowing or other arrangements that might adversely affect a bank holding company's financial position. As a general matter, the Federal Reserve has indicated that the board of directors of a bank holding company should consult with the Federal Reserve and eliminate, defer or significantly reduce the bank holding company's dividends if:

•its net income available to shareholders for the past four quarters, net of dividends previously paid during that period, is not sufficient to fully fund the dividends;

•its prospective rate of earnings retention is not consistent with its capital needs and overall current and prospective financial condition; or

•it will not meet, or is in danger of not meeting, its minimum regulatory capital adequacy ratios.

Should an insured depository institution controlled by a bank holding company be “significantly undercapitalized” under the applicable federal bank capital ratios, or if the bank subsidiary is “undercapitalized” and has failed to submit an acceptable capital restoration plan or has materially failed to implement such a plan, federal banking regulators (in the case of the Bank, the FDIC) may choose to require prior Federal Reserve approval for any capital distribution by the bank holding company. For more information, see “Bank regulation: Capitalization levels and prompt corrective action.”

In addition, since our legal entity is separate and distinct from the Bank and does not conduct stand-alone operations, our ability to pay dividends depends on the ability of the Bank to pay dividends to us, which is also subject to regulatory restrictions as described below in “Bank regulation: Bank dividends.”

Under Tennessee law, we are not permitted to pay cash dividends if, after giving effect to such payment, we would not be able to pay our debts as they become due in the usual course of business or our total assets would be less than the sum of our total liabilities plus any amounts needed to satisfy any preferential rights if we were dissolving. In addition, in deciding whether or not to declare a dividend of any particular size, our board of directors must consider our current and prospective capital, liquidity, and other needs.

U.S. Basel III capital rules

In July 2013, federal banking regulators, including the Federal Reserve and the FDIC, adopted the U.S. Basel Capital Rules implementing many aspects of the Basel III Capital Standards. The requirements in the U.S. Basel III Capital Rules

18

were fully phased-in as of January 1, 2019. Specifically, the rules impose the following minimum capital requirements applicable to us and the Bank:

•a common equity Tier 1 risk-based capital ratio of 4.5%;

•a Tier 1 risk-based capital ratio of 6%;

•a total risk-based capital ratio of 8%;

•a leverage ratio of 4%; and

•a supplementary leverage ratio of 3%, resulting in a leverage ratio requirement of 7%.

Under the U.S. Basel III Capital Rules, Tier 1 Capital is defined to include two components: common equity Tier 1 Capital and additional Tier 1 Capital. The highest form of capital, Common Equity Tier 1 Capital, consists solely of common stock plus related surplus, retained earnings, accumulated other comprehensive income, and minority interests in the equity accounts of consolidated subsidiaries.

The rules permit bank holding companies with less than $15 billion in total consolidated assets, to continue to include trust-preferred securities and cumulative perpetual preferred stock issued before May 19, 2010, in Tier 1 Capital, but not in CET1 Capital, subject to certain restrictions. Tier 2 Capital consists of instruments that currently qualify in Tier 2 Capital plus instruments that the rule has disqualified from Tier 1 Capital treatment.

In addition, in order to avoid restrictions on capital distributions or discretionary bonus payments to executives, a covered banking organization must maintain a capital conservation buffer on top of its minimum risk-based capital requirements. This buffer must consist solely of Tier 1 Common Equity, but the buffer applies to all three risk-based measurements (CET1 Capital, Tier 1 Capital and total capital). The capital conservation buffer consists of an additional amount of common equity equal to 2.5% of risk-weighted assets.

The U.S. Basel III Capital Standards require certain deductions from or adjustments to capital. As a result, deductions from CET1 Capital are required for goodwill (net of associated deferred tax liabilities); intangible assets such as non-mortgage servicing assets (net of associated deferred tax liabilities); and deferred tax assets that arise from net operating loss and tax credit carryforwards (net of any related valuation allowances and net of deferred tax liabilities). Other deductions are required from different levels of capital. The U.S. Basel III Capital Rules also increased the risk weight for certain assets, meaning that more capital must be held against such assets. For example, commercial real estate loans that do not meet certain underwriting requirements must be risk-weighted at 150% rather than the current 100%.

Additionally, the U.S. Basel III Capital Standards provide for the deduction of three categories of assets: (i) deferred tax assets arising from temporary differences that cannot be realized through net operating loss carrybacks (net of related valuation allowances and of deferred tax liabilities), (ii) mortgage servicing assets (net of associated deferred tax liabilities) and (iii) investments in more than 10% of the issued and outstanding common stock of unconsolidated financial institutions (net of associated deferred tax liabilities). As a non-advanced approach banking organization, we are subject to simpler regulatory capital requirements for the three categories of assets discussed above per the Capital Simplifications final rule. There is a 25% CET1 Capital deduction threshold for all three categories combined.

AOCI is presumptively included in CET1 Capital and often would operate to reduce this category of capital. The U.S. Basel III Capital Rules provided a one-time opportunity at the end of the first quarter of 2015 for covered banking organizations to opt out of much of this treatment of AOCI, which we elected. The rules also have the effect of increasing capital requirements by increasing the risk weights on certain assets, including high volatility commercial real estate, mortgage servicing rights not includable in CET1 Capital, equity exposures, and claims on securities firms, which are used in the denominator of the three risk-based capital ratios.

The U.S. Basel III Capital Rules also make important changes to the “prompt corrective action” framework discussed below in “Bank regulation: Capitalization levels and prompt corrective action.”

Restrictions on affiliate transactions

See “Bank regulation: Restrictions on transactions with affiliates” below.

Change in control

We are a bank holding company regulated by the Federal Reserve. Subject to certain exceptions, the Change in Bank Control Act and its implementing regulations require that any individual or company acquiring “control” of a bank or bank holding company, either directly or indirectly, give the Federal Reserve 60 days’ prior written notice of the proposed acquisition. If within that time period the Federal Reserve has not issued a notice disapproving the proposed acquisition, extended the period for an additional period up to 90 days or requested additional information, the acquisition may proceed. An acquisition may be made before expiration of the disapproval period if the Federal Reserve issues written notice that it intends not to disapprove the acquisition. Acquisition of 25 percent or more of any class of voting securities constitutes control, and it is generally presumed for purposes of the CIBCA that the acquisition of 10 percent or more of

19

any class of voting securities would constitute the acquisition of control, although such a presumption of control may be rebutted.

Also, under the CIBCA, the shareholdings of individuals and companies that are deemed to be “acting in concert” would be aggregated for purposes of determining whether such holders “control” a bank or bank holding company. “Acting in concert” under the CIBCA generally means knowing participation in a joint activity or parallel action towards the common goal of acquiring control of a bank or a bank holding company, whether or not pursuant to an express agreement. The manner in which this definition is applied in individual circumstances can vary and cannot always be predicted with certainty. Many factors can lead to a rebuttable presumption of acting in concert, including where: (i) the shareholders are commonly controlled or managed; (ii) the shareholders are parties to an oral or written agreement or understanding regarding the acquisition, voting or transfer of control of voting securities of a bank or bank holding company; (iii) the shareholders are immediate family members; or (iv) both a shareholder and a controlling shareholder, partner, trustee or management official of such shareholder own equity in the bank or bank holding company.

Furthermore, under the BHCA and its implementing regulations, and subject to certain exceptions, any company would be required to obtain Federal Reserve approval prior to obtaining control of a bank or bank holding company. Tiered presumptions of control are used to determine whether one company has control over another as detailed in the table below. There are circumstances where a company acquires less than 25% of any class of voting securities; however, control continues to exist in circumstances where a company directly or indirectly owns, controls or has power to vote 25% or more of any class of voting securities or control in any manner the election of a majority of the directors or trustees of the other company. There is a presumption of non-control for any holder of less than 5% of any class of voting securities, assuming none of the generally applicable presumptions are triggered.

Summary of Tiered Presumptions

(Presumption triggered if any relationship exceeds the amount on the table)

Business terms NA NA Market terms Market terms

In addition, the Federal Reserve's requirements on equity investments in banks and bank holding companies dictate circumstances under which a minority investor is deemed to control a bank or bank holding company for purposes of the BHCA. Among other things, a minority investor is permitted to hold up to 24.9% (or 33.3% under certain circumstances) of the total equity (voting and non-voting combined) and have at least one representative on the company’s board of directors (with two directors permitted under certain circumstances).

20

Compensation and risk management

Under regulatory guidance applicable to banking organizations, incentive compensation policies must be consistent with safety and soundness principles. Under this guidance, financial institutions must review their compensation programs to ensure that they: (i) provide employees with incentives that appropriately balance risk and reward and that do not encourage imprudent risk, (ii) are compatible with effective controls and risk management, and (iii) are supported by strong corporate governance, including active and effective oversight by the banking organization’s board of directors. Monitoring methods and processes used by a banking organization should be commensurate with the size and complexity of the organization and its use of incentive compensation.

Bank regulation

The Bank is a banking institution that is chartered by and headquartered in the State of Tennessee, and it is subject to supervision and regulation by the TDFI, FDIC, and the CFPB. The TDFI and FDIC supervise and regulate all areas of the Bank’s operations including, without limitation, the making of loans, the issuance of securities, the conduct of the Bank’s corporate affairs, the satisfaction of capital adequacy requirements, the payment of dividends, and the establishment or closing of banking offices. The FDIC is the Bank’s primary federal regulatory agency, which regularly examines the Bank’s operations and financial condition and compliance with federal consumer protection laws. In addition, the Bank’s deposit accounts are insured by the FDIC to the maximum extent permitted by law, and the FDIC has certain enforcement powers over the Bank. The supervision and oversight by the CFPB on the Bank is discussed in greater detail in “Business: Supervision and regulation: Bank regulation: Consumer laws and regulations”.

As a state-chartered banking institution in the State of Tennessee, the Bank is empowered by statute, subject to the limitations contained in those statutes, to take and pay interest on deposits, to make loans on residential and other real estate, to make consumer and commercial loans, to invest, with certain limitations, in equity securities and in debt obligations of banks and corporations and to provide various other banking services for the benefit of the Bank’s clients. Various state consumer laws and regulations also affect the operations of the Bank, including state usury laws, consumer credit and equal credit opportunity laws, and fair credit reporting. In addition, the FDICIA generally prohibits insured state-chartered institutions from conducting activities as principal that are not permitted for national banks. The Bank is also subject to various requirements and restrictions under federal and state law, including but not limited to requirements to maintain reserves against deposits, lending limits, limitations on branching activities, limitations on the types of investments that may be made, activities that may be engaged in, and types of services that may be offered. Various consumer laws and regulations also affect the operations of the Bank. Also, the Bank and certain of its subsidiaries are prohibited from engaging in certain tying arrangements in connection with extensions of credit, leases or sales of property, or furnishing products or services.

Capital adequacy

See “Holding company regulation: U.S. Basel III capital rules.”

Capitalization levels and prompt corrective action

Federal law and regulations establish a capital-based regulatory scheme designed to promote early intervention for troubled banks and require the FDIC to choose the least expensive resolution of bank failures. The capital-based regulatory framework contains five categories of regulatory capital requirements, including “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.” A well-capitalized insured depository institution is one (i) having a total risk-based capital ratio of 10 percent or greater, (ii) having a Tier 1 risk-based capital ratio of 8 percent or greater, (iii) having a CET1 capital ratio of 6.5 percent or greater, (iv) having a leverage capital ratio of 5 percent or greater and (v) that is not subject to any order or written directive to meet and maintain a specific capital level for any capital measure.

Generally, a financial institution must be “well capitalized” before the Federal Reserve will approve an application by a bank holding company to acquire a bank or merge with a bank holding company, and the FDIC applies the same requirement in approving bank merger applications.

An institution that fails to remain well-capitalized becomes subject to a series of restrictions that increase in severity as its capital condition weakens. Such restrictions may include a prohibition on capital distributions, restrictions on asset growth or restrictions on the ability to receive regulatory approval of applications.

As of December 31, 2022, the Bank had sufficient capital to qualify as “well capitalized” under the requirements contained in the applicable regulations, policies and directives pertaining to capital adequacy, and it is unaware of any material violation or alleged material violation of these regulations, policies or directives. Rapid growth, poor loan portfolio performance, or poor earnings performance, or a combination of these factors, could change the Bank’s capital position in a relatively short period of time, making additional capital infusions necessary.

21

It should be noted that the minimum ratios referred to above in this section are merely guidelines, and the bank regulators possess the discretionary authority to require higher capital ratios.

Brokered deposits

In December 2020, the FDIC issued a final rule that is designed to bring the brokered deposits regulations in line with modern deposit taking methods and generally reduces the scope of deposits that would be classified as brokered, which most directly affects banks rated as “adequately capitalized” or “undercapitalized”. The final rule became effective on April 1, 2021, with an extended compliance date of January 1, 2022. Compliance with the final rule did not have an impact to our classification of brokered deposits.

Bank reserves

The Federal Reserve imposes reserve requirements on certain types of deposits and other liabilities of depository institutions. The Federal Reserve Board determined to reduce the reserve requirement ratios to zero percent effective March 26, 2020 in light of the shift to an ample reserves regime. The interim final rule was adopted as a final rule without change in February 2021.

Bank dividends

The FDIC prohibits any distribution that would result in the bank being “undercapitalized” (<4% leverage ratio, <4.5% CET1 Risk-Based ratio, <6% Tier 1 Risk-Based ratio, or <8% Total Risk-Based ratio). Tennessee law places restrictions on the declaration of dividends by state-chartered banks to their shareholders, including, but not limited to, that the board of directors of a Tennessee-chartered bank may only make a dividend from the surplus profits arising from the business of the bank, and may not declare dividends in any calendar year that exceeds the total of its retained net income of that year combined with its retained net income of the preceding two (2) years without the prior approval of the TDFI commissioner. Furthermore, the FDIC and the TDFI also have authority to prohibit the payment of dividends by a Tennessee bank when it determines such payment to be an unsafe and unsound banking practice.

Insurance of accounts and other assessments

The FDIC imposes a risk-based deposit premium assessment system, which was amended pursuant to the Federal Deposit Insurance Reform Act of 2005. Under this system, the amount of FDIC assessments paid by an individual insured depository institution, like the Bank, is based on the level of perceived risk incurred in its activities. The Bank's deposit accounts are currently insured by the Deposit Insurance Fund, generally up to a maximum of $250,000 per separately insured depositor. The Bank pays deposit insurance assessments to the FDIC to be insured by the DIF. Under the current assessment system, the FDIC assigns an institution to a risk category based on the institution's most recent supervisory and capital evaluations, which are designed to measure risk. Under the FDIA, the FDIC may terminate a bank's deposit insurance upon a finding that the institution has engaged in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations, or has violated any applicable law, regulation, rule, order, agreement or condition imposed by the FDIC. Under the Dodd-Frank Act, the FDIC has adopted regulations that base deposit insurance assessments on total assets less capital rather than deposit liabilities and include off-balance sheet liabilities of institutions and their affiliates in risk-based assessments. After an institution's average assets exceed $10 billion over four quarters, the assessment rate increases compared to institutions at lower average asset levels. In addition, for large institutions, the FDIC uses a performance score and a loss-severity score that are used to calculate an initial assessment rate. In calculating these scores, the FDIC uses a bank's capital level and supervisory ratings and certain financial measures to assess an institution's ability to withstand asset-related stress and funding-related stress. The FDIC has the ability to make discretionary adjustments to the total score based upon significant risk factors that are not adequately captured in the calculations.

On October 18, 2022, the FDIC adopted a final rule, applicable to all insured depository institutions, to increase base deposit insurance assessment rate schedules uniformly by 2 basis points beginning in the first quarterly assessment period of 2023. The FDIC has indicated that the new assessment rate schedules will remain in effect until the DIF reserve ratio meets or exceeds 2 percent.

Restrictions on transactions with affiliates

The Bank is subject to sections 23A and 23B of the Federal Reserve Act, or FRA, and the Federal Reserve’s Regulation W, as made applicable to state nonmember banks by section 18(j) of the FDIA. An affiliate of a bank is any company or entity that controls, is controlled by or is under common control with the Bank, and, in our case, includes, among others, the Company as well as our former Chairman, James W. Ayers and the companies he controls. Accordingly, transactions between the Bank and the Company or Mr. Ayers or any of his affiliates, will be subject to a number of restrictions, including restrictions relating to extensions of credit, contracts, leases and purchases or sale of assets. Such restrictions and limitations prevent the Company or other affiliates from borrowing from the Bank unless the loans are secured by specified collateral of designated amounts. Furthermore, such secured loans by the Bank to the Company or other

22

affiliates are limited, individually, to ten percent (10%) of the Bank’s capital and surplus, and such secured loans are limited in the aggregate to twenty percent (20%) of the Bank’s capital and surplus.

All such transactions must be on terms that are no less favorable to the Bank than those that would be available from nonaffiliated third parties. Federal Reserve policies also forbid the payment by bank subsidiaries of management fees which are unreasonable in amount or exceed the fair market value of the services rendered or, if no market exists, actual costs plus a reasonable profit.

Loans to insiders

Loans to executive officers, directors or to any person who directly or indirectly, or acting through or in concert with one or more persons, owns, controls or has the power to vote more than 10% of any class of voting securities of a bank, which the Bank refers to as “10% Shareholders,” or to any political or campaign committee the funds or services of which will benefit those executive officers, directors, or 10% Shareholders or which is controlled by those executive officers, directors or 10% Shareholders, are subject to Sections 22(g) and 22(h) of the FRA and their corresponding regulations, which are commonly referred to as Regulation O. Among other things, these loans must be made on terms substantially the same as those prevailing on transactions made to unaffiliated individuals and certain extensions of credit to those persons must first be approved in advance by a disinterested majority of the entire board of directors. Regulation O prohibits loans to any of those individuals where the aggregate amount exceeds an amount equal to 15% of an institution’s unimpaired capital and surplus plus an additional 10% of unimpaired capital and surplus in the case of loans that are fully secured by readily marketable collateral, or when the aggregate amount on all of the extensions of credit outstanding to all of these persons would exceed the Bank’s unimpaired capital and unimpaired surplus. Section 22(g) identifies limited circumstances in which the Bank is permitted to extend credit to executive officers.

Community Reinvestment Act

The CRA and its corresponding regulations are intended to encourage banks to help meet the credit needs of their service areas, including low and moderate-income neighborhoods, consistent with safe and sound operations. These regulations provide for regulatory assessment of a bank’s record in meeting the credit needs of its service area. Federal banking agencies are required to make public a rating of a bank’s performance under the CRA. The federal banking agencies consider a bank’s CRA rating when a bank submits an application to establish banking centers, merge, or acquire the assets and assume the liabilities of another bank. In the case of a bank holding company, the CRA performance record of all banks involved in the merger or acquisition are reviewed in connection with the filing of an application to acquire ownership or control of shares or assets of a bank or to merge with any other financial holding company. An unsatisfactory record can substantially delay, block or impose conditions on the transaction. The Bank received a satisfactory rating on its most recent CRA assessment.

In September 2020, the Federal Reserve Board issued an ANPR that invites public comment on an approach to modernize the regulations that implement the CRA by strengthening, clarifying, and tailoring them to reflect the current banking landscape and better meet the core purpose of the CRA. The ANPR seeks feedback on ways to evaluate how banks meet the needs of low- and moderate-income communities and address inequities in credit access. In May 2022, the federal banking regulators issued a joint proposed rule that would substantially revise how an insured depository institution's CRA performance is evaluated. As such, we will continue to evaluate the impact of any changes to the regulations implementing the CRA and their impact to our financial condition, results of operations, and/or liquidity, which cannot be predicted at this time.

Anti-money laundering and economic sanctions

The USA PATRIOT Act provides the federal government with additional powers to address terrorist threats through enhanced domestic security measures, expanded surveillance powers, increased information sharing and broadened anti-money laundering requirements. By way of amendments to the BSA, the USA PATRIOT Act imposed new requirements that obligate financial institutions, such as banks, to take certain steps to control the risks associated with money laundering and terrorist financing.

Among other requirements, the USA PATRIOT Act and implementing regulations require banks to establish anti-money laundering programs that include, at a minimum:

•internal policies, procedures and controls designed to implement and maintain the bank's compliance with all of the requirements of the USA PATRIOT Act, the BSA and related laws and regulations;

•systems and procedures for monitoring and reporting of suspicious transactions and activities;

•designated compliance officer;

•employee training;

•an independent audit function to test the anti-money laundering program;

•procedures to verify the identity of each client upon the opening of accounts; and

23

•heightened due diligence policies, procedures and controls applicable to certain foreign accounts and relationships.

Additionally, the USA PATRIOT Act requires each financial institution to develop a customer identification program as part of the Bank’s anti-money laundering program. The key components of the CIP are identification, verification, government list comparison, notice and record retention. The purpose of the CIP is to enable the financial institution to determine the true identity and anticipated account activity of each client. To make this determination, among other things, the financial institution must collect certain information from clients at the time they enter into the client relationship with the financial institution. This information must be verified within a reasonable time through documentary and non-documentary methods. Furthermore, all clients must be screened against any CIP-related government lists of known or suspected terrorists. Financial institutions are also required to comply with various reporting and recordkeeping requirements. The Federal Reserve and the FDIC consider an applicant’s effectiveness in combating money laundering, among other factors, in connection with an application to approve a bank merger or acquisition of control of a bank or bank holding company.

Likewise, the U.S. Department of the Treasury’s OFAC is responsible for helping to ensure that United States entities do not engage in transactions with the subjects of U.S. sanctions, as defined by various Executive Orders and Acts of Congress. Currently, OFAC administers and enforces comprehensive U.S. economic sanctions programs against certain specified countries/regions. In addition to the country/region-wide sanctions programs, OFAC also administers complete embargoes against individuals and entities identified on OFAC’s list of Specially Designated Nationals and Blocked Persons. The SDN List includes thousands of parties that are located in many jurisdictions throughout the world, including in the United States and Europe. The Bank is responsible for determining whether any potential and/or existing clients appear on the SDN List or are owned or controlled by a person on the SDN List. If any client appears on the SDN List or is owned or controlled by a person or entity on the SDN List, such client’s account must be placed on hold and a blocking or rejection report, as appropriate and if required, must be filed within 10 business days with OFAC. In addition, if a client is a citizen of, has provided an address in, or is organized under the laws of any country or region for which OFAC maintains a comprehensive sanctions program, the Bank must take certain actions with respect to such clients as dictated under the relevant OFAC sanctions program. The Bank must maintain compliance with OFAC by implementing appropriate policies and procedures and by establishing a recordkeeping system that is reasonably appropriate to administer the Bank’s compliance program. The Bank has adopted policies, procedures and controls to comply with the BSA, the USA PATRIOT Act and OFAC regulations.

In January 2021, the Anti-Money Laundering Act of 2020, which amends the BSA, was enacted. Among other things, the AMLA codifies a risk-based approach to anti-money laundering compliance for financial institutions; requires the Treasury to promulgate priorities for anti-money laundering and countering the financing of terrorism policy; requires the development of standards by the Treasury for testing technology and internal processes for BSA compliance; expands enforcement- and investigation-related authority, including a significant expansion in the available sanctions for certain BSA violations; and expands BSA whistleblower incentives and protections. Many of the statutory provisions in the AMLA will require additional rulemaking, reports and other measures, and the impact of the AMLA will depend on, among other things, rulemaking and implementation guidance.

Regulatory enforcement authority

Federal and state banking laws grant substantial enforcement powers to federal and state banking regulators. This enforcement authority includes, among other things, the ability to assess civil money penalties, to issue consent or removal orders and to initiate injunctive actions against banking organizations and “institution-affiliated parties,” such as management, employees and agents. In general, these enforcement actions may be initiated for violations of laws, regulations and orders of regulatory authorities, or unsafe or unsound practices. Other actions or inactions, including filing false, misleading or untimely reports with regulatory authorities, may provide the basis for enforcement action. When issued by a banking regulator, consent and similar orders may, among other things, require affirmative action to correct any harm resulting from a violation or practice, including restitution, reimbursement, indemnifications or guarantees against loss. A bank may also be ordered to restrict its growth, dispose of certain assets, rescind agreements or contracts, or take other actions determined to be appropriate by the ordering regulatory agency.

Federal Home Loan Bank system

The Bank is a member of the Federal Home Loan Bank of Cincinnati, which is one of 11 regional Federal Home Loan Banks. Each FHLB serves as a reserve or central bank for its members within its assigned region. It is funded primarily from funds deposited by member institutions and proceeds from the sale of consolidated obligations of the FHLB system. It makes loans to members (i.e., advances) in accordance with policies and procedures established by the board of directors of the FHLB.

As a member of the FHLB of Cincinnati, the Bank is required to own capital stock in the FHLB in an amount generally at least equal to 0.20% (or 20 basis points) of the Bank’s total assets at the end of each calendar year, plus 4.5% of its

24

outstanding advances (borrowings) from the FHLB of Cincinnati under the activity-based stock ownership requirement. These requirements are subject to adjustment from time to time. On December 31, 2022, the Bank was in compliance with this requirement.

Privacy and data security

The Bank is subject to regulations implementing the privacy protection provisions of GLBA. These regulations require the Bank to disclose its privacy policy, including identifying with whom it shares "nonpublic personal information," to customers at the time of establishing the customer relationship and annually thereafter. The regulations also require the Bank to provide its customers with initial and annual notices that accurately reflect its privacy policies and practices. In addition, to the extent its sharing of such information is not covered by an exception, the Bank is required to provide its customers with the ability to "opt-out" of having the Bank share their nonpublic personal information with unaffiliated third parties.

The Bank is subject to regulatory guidelines establishing standards for safeguarding customer information. These regulations implement certain provisions of the GLBA. The guidelines describe the federal bank regulatory agencies’ expectations for the creation, implementation and maintenance of an information security program, which would include administrative, technical and physical safeguards appropriate to the size and complexity of the institution and the nature and scope of its activities. The standards set forth in the guidelines are intended to ensure the security and confidentiality of customer records and information, protect against any anticipated threats or hazards to the security or integrity of such records and protect against unauthorized access to or use of such records or information that could result in substantial harm or inconvenience to any customer. These guidelines, along with related regulatory materials, increasingly focus on risk management and processes related to information technology and the use of third parties in the provision of financial services.

In November 2021, the federal bank agencies approved a final rule that places reporting requirements on banks and banking service providers that experience cybersecurity incidents. Under this rule, banks must report these incidents within 36 hours to federal regulator. In addition, banks are required to inform customers of any computer security incidents lasting more than four hours. This rule went into effect on April 1, 2022, and banks were required to be in compliance by May 1, 2022. This rule became applicable to the Company on April 1, 2022 and as of December 31, 2022, the Company is in compliance.

Consumer laws and regulations

The CFPB and the federal banking agencies continue to focus attention on consumer protection laws and regulations. The CFPB is responsible for promoting fairness and transparency for mortgages, credit cards, deposit accounts and installment financial products and services and for interpreting and enforcing the federal consumer financial laws that govern the provision of such products and services. Federal consumer financial laws enforced by the CFPB include, but are not limited to, the Truth in Lending Act, the Truth in Savings Act, the Electronic Funds Transfer Act, the Expedited Funds Availability Act, the Check Clearing for the 21st Century Act, the Fair Credit Reporting Act, the Fair Debt Collection Practices Act, the Equal Credit Opportunity Act, the Fair Housing Act, the Home Mortgage Disclosure Act, the Fair and Accurate Transactions Act, the Servicemembers Civil Relief Act, the Military Lending Act, the Mortgage Disclosure Improvement Act, and the Real Estate Settlement Procedures Act, among others. These laws and regulations mandate certain disclosure requirements and regulate the manner in which financial institutions must deal with consumers when offering consumer financial products and services. The CFPB is also authorized to prevent any institution under its authority from engaging in an unfair, deceptive, or abusive act or practice in connection with consumer financial products and services. We are subject to multiple federal consumer protection statutes and regulations, including, but not limited to, those referenced above.

In particular, fair lending laws prohibit discrimination in the provision of banking services, and the enforcement of these laws has been an increasing focus for the CFPB, the HUD, and other regulators. Fair lending laws include ECOA and the Fair Housing Act, which outlaw discrimination in credit and residential real estate transactions on the basis of prohibited factors including, among others, race, color, national origin, gender, and religion. A lender may be liable for policies that result in a disparate treatment of, or have a disparate impact on, a protected class of applicants or borrowers. If a pattern or practice of lending discrimination is alleged by a regulator, then that agency may refer the matter to the DOJ for investigation. Failure to comply with these and similar statutes and regulations can result in the Company becoming subject to formal or informal enforcement actions, the imposition of civil money penalties and consumer litigation.

The CFPB has exclusive examination and primary enforcement authority with respect to compliance with federal consumer financial protection laws and regulations by institutions under its supervision and is authorized, individually or jointly with the federal bank regulatory agencies, to conduct investigations to determine whether any person is, or has, engaged in conduct that violates such laws or regulations. The CFPB may bring an administrative enforcement proceeding or civil action in federal district court. In addition, in accordance with a MOU entered into between the CFPB and the DOJ, the two agencies have agreed to coordinate efforts related to enforcing the fair lending laws, which includes information sharing and conducting joint investigations; however, as a result of recent leadership changes at the DOJ and

25

CFPB, as well as changes in the enforcement policies and priorities of each agency, the extent to which such coordination will continue to occur in the near term is uncertain. As an independent bureau funded by the Federal Reserve Board, the CFPB may impose requirements that are more stringent than those of the other bank regulatory agencies.

As an insured depository institution with total assets of more than $10 billion, the Bank is subject to the CFPB’s supervisory and enforcement authorities. The Dodd-Frank Act also permits states to adopt stricter consumer protection laws and state attorneys general to enforce consumer protection rules issued by the CFPB. As a result, the Bank operates in a stringent consumer compliance environment and may incur additional costs related to consumer protection compliance, including but not limited to potential costs associated with CFPB examinations, regulatory and enforcement actions and consumer-oriented litigation. The CFPB, other financial regulatory agencies, including the Federal Reserve, as well as the DOJ, have, over the past several years, pursued a number of enforcement actions against depository institutions with respect to compliance with fair lending laws.

The CFPB may issue regulations that impact products and services offered by us or the Bank. The regulations could reduce the fees that we receive, alter the way we provide our products and services, or expose us to greater risk of private litigation or regulatory enforcement action.

Future legislative developments

Various legislative acts are from time to time introduced in Congress and the Tennessee legislature. This legislation may change banking statutes and the environment in which we operate in substantial and unpredictable ways. We cannot determine the ultimate effect that potential legislation, if enacted, or implementing regulations and interpretations with respect thereto, would have on our financial condition or results of operations.

Available Information

Our website address is www.firstbankonline.com. We file or furnish to the Securities Exchange and Commission Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, proxy statements and Annual Reports to shareholders, and from time to time, amendments to these documents and other documents called for by the SEC. The reports and other documents filed with or furnished to the SEC are available to investors on or through our website at https://investors.firstbankonline.com under the heading “Stock & Filings” and then under “SEC Filings.” These reports are available on our website free of charge as soon as reasonably practicable after we electronically file them with the SEC.

In addition to our website, the SEC maintains an internet site that contains our reports, proxy and information statements and other information we file electronically with the SEC at https://www.sec.gov.

ITEM 1A - Risk Factors

Our operations and financial results are subject to various risks and uncertainties, including, but not limited to, the material risks described below. Many of these risks are beyond our control although efforts are made to manage and mitigate those risks while simultaneously optimizing operational and financial results. The occurrence of any of the following risks, as well as risks of which we are currently unaware or currently deem immaterial, could materially and adversely affect our assets, business, cash flows, condition (financial or otherwise), liquidity, prospects, results of operations and the trading price of our common stock. It is impossible to predict or identify all such factors and, as a result, you should not consider the following factors to be a complete discussion of the risks, uncertainties and assumptions that could materially and adversely affect our assets, business, cash flows, condition (financial or otherwise), liquidity, prospects, results of operations and the trading price of our common stock.

In addition, certain statements in the following risk factors constitute forward-looking statements. Please refer to the section entitled “Cautionary note regarding forward-looking statements” included in this Annual Report.

CREDIT AND LOAN RISK

The majority of our assets are loans, which if not repaid would result in losses to the Bank.

Making any loan involves various risks, including risks inherent in dealing with individual borrowers, risks of nonpayment, risks resulting from uncertainties as to the future value of collateral and cash flows available to service debt, and risks resulting from changes in economic and market conditions. Our credit risk approval and monitoring procedures may fail to identify or reduce these credit risks, and they cannot completely eliminate all credit risks related to our loan portfolio. If the overall economic climate, including employment rates, real estate markets, interest rates and general economic growth, in the United States, generally, or Tennessee, specifically, experiences material disruption, our borrowers may experience difficulties in repaying their loans, the collateral we hold may decrease in value or become illiquid, and the levels of nonperforming loans, charge-offs and delinquencies could rise and require additional provisions for loan losses, which would cause our net income and return on equity to decrease.

26

We maintain an allowance for credit losses, which is a reserve established through a provision for credit losses charged to expense, which represents the portion of the loan's amortized cost basis that we do not expect to collect due to credit losses over the loan's life, considering past events, current conditions, and reasonable and supportable forecasts of future economic conditions considering macroeconomic forecasts. In addition, we record a reserve for unfunded commitments, considering the same items included in the allowance for credit losses with the addition of expected funding. Management’s determination of the appropriateness of the allowance and reserve for unfunded commitments is based on periodic evaluation of the loan portfolio, lending-related commitments and other relevant factors, including macroeconomic forecasts and historical loss rates. Deterioration in economic conditions affecting borrowers, new information regarding existing loans, identification of additional problem loans and other factors, both within and outside of our control, may require an increase in the allowance for credit losses and/or the reserve for unfunded commitments. The model is sensitive to changes in macroeconomic forecasts and incorporates management judgment. If we are required to materially increase our level of allowance for credit losses for any reason, such increase could adversely affect our business, financial condition and results of operations.

The application of the purchase method of accounting in our acquisitions (and any future acquisitions) also will affect our allowance for credit losses. We are required to determine whether purchased loans held for investment have experienced more-than-insignificant deterioration in credit quality since origination. Loans that have experienced this level of deterioration in credit quality are subject to special accounting at initial recognition. We initially measure the amortized cost of a purchase credit deteriorated loan by adding the acquisition date estimate of expected credit losses to the loan's purchase price (i.e. the "gross up" approach). If we have underestimated credit losses at recognition, we will incur additional expense in our provision for credit losses to maintain an appropriate level of allowance for credit losses on those loans.

In addition, bank regulators periodically review our allowance for credit losses and may require an increase in the provision for credit losses or the recognition of further loan charge-offs, based on judgments different than those of management. Furthermore, if charge-offs in future periods exceed the allowance for credit losses, we will need additional provisions to increase the allowance for credit losses. Any increases in the allowance for credit losses will result in a decrease in net income and capital, and may have a material adverse effect on our business, financial condition and results of operations.

Because a significant portion of our loan portfolio is comprised of real estate loans, negative changes in the economy affecting real estate values and liquidity could impair the value of collateral securing our real estate loans and result in loan and other losses.

As of December 31, 2022, approximately 82% of our loan portfolio was comprised of loans with real estate as a primary or secondary component of collateral. This includes collateral consisting of income producing and residential construction properties, which properties tend to be more sensitive to general economic conditions and downturns in real estate markets. As a result, adverse developments affecting real estate values in our market areas could increase the credit risk associated with our real estate loan portfolio. Adverse changes affecting real estate values and the liquidity of real estate in one or more of our markets could increase the credit risk associated with our loan portfolio and could result in losses that would adversely affect credit quality and our financial condition or results of operations. These adverse changes could significantly impair the value of property pledged as collateral to secure the loans and affect our ability to sell the collateral upon foreclosure without a loss or additional losses. If real estate values decline, it is also more likely that we would be required to increase our allowance for credit losses. Thus, declines in the value of real estate collateral could adversely affect our financial condition, results of operations or cash flows.

Weakness in residential real estate market prices, weakness in demand, or increases in building costs could result in a volatile environment including price reductions in home and land values adversely affecting the value of collateral securing some of the construction and development loans that we hold. Should we experience the return of adverse economic and real estate market conditions similar to those we experienced from 2008 through 2010 we may again experience increases in non-performing loans and other real estate owned, increased losses and expenses from the management and disposition of non-performing assets, increases in provision for credit losses, and increases in operating expenses as a result of the allocation of management time and resources to the collection and work out of loans, all of which would negatively impact our financial condition and results of operations.

We are subject to lending concentration risks.

Our exposure to commercial real estate (both owner-occupied and non-owner occupied), commercial and industrial, and construction loans expose us to greater credit risk than loans secured by other types of collateral because the collateral securing these loans is typically more difficult to liquidate. Additionally, these types of loans also often involve larger loan balances to a single borrower or groups of related borrowers. These higher credit risks are further heightened when the loans are concentrated in a small number of larger borrowers leading to relationship exposure. As of December 31, 2022,

27

the following loan types accounted for the stated percentages of our loan portfolio: commercial real estate (both owner-occupied and non-owner occupied) - 33%; commercial and industrial - 18%; and construction - 18%.

Non-owner occupied commercial real estate loans may be affected to a greater extent than residential loans by adverse conditions in real estate markets or the economy because commercial real estate borrowers’ ability to repay their loans depends on successful development of their properties. These loans also involve greater risk because they generally are not fully amortizing over the loan period, and therefore have a balloon payment due at maturity. A borrower’s ability to make a balloon payment typically will depend on being able to either refinance the loan or sell the underlying property in a timely manner. In addition, banking regulators have been giving commercial real estate lending greater scrutiny, and may require banks with higher levels of commercial real estate loans to implement improved underwriting, internal controls, risk management policies and portfolio stress testing, as well as possibly higher levels of allowances for losses and capital levels as a result of commercial real estate lending growth and exposures.

Commercial and industrial loans and owner-occupied commercial real estate loans are typically based on the borrowers’ ability to repay the loans from the cash flow of their businesses. These loans may involve greater risk because the availability of funds to repay each loan depends substantially on the success of the business itself. In addition, the assets securing the loans depreciate over time, are difficult to appraise and liquidate, and fluctuate in value based on the success of the business.

Risk of loss on a construction loan depends largely upon whether our initial estimate of the property’s value at completion of construction or development equals or exceeds the cost of the property construction or development (including interest), the availability of permanent take-out financing and the builder’s ability to sell the property. During the construction or development phase, a number of factors can result in delays and cost overruns. If estimates of value are inaccurate or if actual construction costs exceed estimates, the value of the property securing the loan may be insufficient to ensure full repayment when completed through a permanent loan or by foreclosure on collateral.

Commercial real estate loans, commercial and industrial loans, and construction loans are more susceptible to a risk of loss during a downturn in the business cycle due to the vulnerability of these sectors during a downturn. Our underwriting, review and monitoring cannot eliminate all of the risks related to these loans. We also make both secured and unsecured loans to our commercial customers. Unsecured loans generally involve a higher degree of risk of loss than secured loans because, without collateral, repayment is wholly dependent upon the success of the borrowers’ businesses. Because of this lack of collateral, we are limited in our ability to collect on defaulted unsecured loans. Further, the collateral that secures our secured commercial and industrial loans typically includes inventory, accounts receivable and equipment, which usually have a value that is insufficient to satisfy the loan without a loss if the business does not succeed. Our loan concentration in these sectors and their higher credit risk could lead to increased losses on these loans, which could have a material adverse effect on our financial condition, results of operations or cash flows.

Our ability to grow our loan portfolio may be hampered.

Our ability to grow our loan portfolio could be limited by, among other reasons, economic conditions, competition in our markets, our ability to hire and train experienced or successful bankers, our ability to generate the deposits needed to grow loan assets, or the drain on liquidity and available deposits that the banking industry has experienced and may continue to experience.

MARKET AND INTEREST RATE RISK

Difficult or volatile market conditions in the national financial markets, the U.S. economy generally, or the state of Tennessee in particular may adversely affect our lending activity or other businesses, as well as our financial condition.

Our business and financial performance are vulnerable to weak economic conditions in the financial markets and economic conditions generally and specifically in the state of Tennessee, the principal market in which we conduct business. A deterioration in economic conditions in our primary market areas could result in increased loan delinquencies, foreclosures, and write-downs of asset values, lower demand for our products and services, reduced low cost or noninterest-bearing deposits, and intangible asset impairment. Additionally, difficult market conditions may lead to a deterioration in the value of the collateral for loans made by us, especially real estate, which could reduce our customers' ability to repay outstanding loans and reduce the value of assets associated with our existing loans. Additional issues surrounding weakening economic conditions and volatile markets that could adversely impact us include increased industry regulation and downward pressures on our stock price.

We conduct our banking operations primarily in Tennessee. As of December 31, 2022, approximately 73% of our loans and approximately 82% of our deposits were made to borrowers or received from depositors who live and/or primarily conduct business in Tennessee. Therefore, our success will depend in large part upon the general economic conditions in this area. This geographic concentration imposes risks from lack of geographic diversification, as adverse economic developments in Tennessee (including the Nashville MSA, our largest market), among other things, could affect the

28

volume of loan originations, increase the level of nonperforming assets, increase the rate of foreclosure losses on loans, reduce the value of our loans and loan servicing portfolio, reduce the value of the collateral securing our loans and reduce the amount of our deposits.

Any regional or local economic downturn that affects Tennessee or existing or prospective borrowers, depositors or property values in this area may affect us and our profitability more significantly and more adversely than our competitors whose operations are less geographically concentrated.

Changes in interest rates could adversely affect our results of operations and financial condition.

Our earnings and financial condition are dependent to a large degree upon net interest income, which is the difference, or spread, between interest earned on loans, securities and other interest-earning assets and interest paid on deposits, borrowings and other interest-bearing liabilities. When market rates of interest change, the interest we receive on our assets and the interest we pay on our liabilities may fluctuate. This may cause decreases in our spread and may adversely affect our earnings and financial condition. Interest rates are highly sensitive to many factors including, without limitation: the rate of inflation; economic conditions; federal monetary policies; and stability of domestic and foreign markets.

Although we have implemented procedures we believe will reduce the potential effects of changes in interest rates on our net interest income, these procedures may not always be successful. Accordingly, changes in levels of market interest rates could materially and adversely affect our net interest income and our net interest margin, asset quality, loan and lease origination volume, liquidity or overall profitability. Additionally, changes in interest rates can adversely affect the origination of mortgage loans held for sale and resulting mortgage banking revenues.

A transition away from LIBOR as a reference rate for financial contracts could negatively affect our income and expenses and the value of various financial contracts.

In November 2020, the ICE Benchmark Administration, the London Interbank Offered Rate administrator, announced its intention to continue most U.S. Dollar LIBOR tenors until June 30, 2023. The Financial Conduct Authority announced support for this development, signaling an extension from its prior communication that it would no longer require panel banks to submit rates for LIBOR after 2021. In addition, the Board of Governors of the Federal Reserve System, the Office of the Comptroller of the Currency and the Federal Deposit Insurance Corporation issued a statement encouraging banks to transition away from U.S. Dollar LIBOR as soon as practicable. The Alternative Reference Rates Committee was convened in the U.S. to explore alternative reference rates and support processes to help ensure a successful transition from U.S. Dollar LIBOR to a more robust reference rate. The ARRC is made up of financial and capital markets institutions, is convened by the Federal Reserve Board and the Federal Reserve Bank of New York, and includes participation by various regulators. The ARRC has recommended the Secured Overnight Financing Rate as a successor rate to U.S. Dollar LIBOR and has developed a Paced Transition Plan to facilitate the transition from LIBOR. However, there are conceptual and technical differences between LIBOR and SOFR. In December 2022, the FASB issued ASU 2022-06, "Reference rate Reform (Topic 848): Deferral of the Sunset Date of Topic 848" to extend the date to December 31, 2024 for companies to apply the relief in Topic 848.

The retirement of LIBOR is a significant shift in the industry. The transition will change our market risk profiles, requiring changes to risk and pricing models, valuation tools, product design and hedging strategies. We established a LIBOR Transition Committee to transition from LIBOR to alternative rates and has continued its efforts consistent with industry timelines. As part of these efforts, during the fourth quarter of 2021, we ceased utilization of LIBOR as an index in newly originated loans or loans that are refinanced. Additionally, we identified existing products that utilize LIBOR and are reviewing contractual language to facilitate the transition to alternative reference rates. Failure to adequately manage this transition process with our customers could adversely impact our reputation.

The performance of our investment securities portfolio is subject to fluctuation due to changes in interest rates and market conditions, including credit deterioration of the issuers of individual securities.

Changes in interest rates may negatively affect both the returns on and fair value of our investment securities. Interest rate volatility can reduce unrealized gains or increase unrealized losses in our portfolio. Interest rates are highly sensitive to many factors including monetary policies, domestic and international economic and political issues, and other factors beyond our control. Additionally, actual investment income and cash flows from investment securities that carry prepayment risk, such as mortgage-backed securities and callable securities, may materially differ from those anticipated at the time of investment or subsequently as a result of changes in interest rates and market conditions. These occurrences could materially and adversely affect our net interest income or our results of operations.

We may be materially and adversely affected by the creditworthiness and liquidity of other financial institutions.

Financial services institutions are interrelated as a result of trading, clearing, counterparty, or other relationships. We have exposure to many different industries and counterparties, and routinely execute transactions with counterparties in the

29

financial services industry, including commercial banks, brokers and dealers, investment banks and other institutional customers. Many of these transactions expose us to credit risk in the event of a default by, or questions or concerns about the creditworthiness of, a counterparty or client, or concerns about the financial services industry generally. In addition, our credit risk may be exacerbated when the collateral held by us cannot be realized upon or is liquidated at prices not sufficient to recover the full amount of the credit or derivative exposure due to us. Any such losses could have a material adverse effect on us.

LIQUIDITY RISK

A lack of liquidity could adversely affect our operations and jeopardize our business, financial condition or results of operations.

We rely on our ability to generate deposits and effectively manage the repayment and maturity schedules of our loans and investment securities to ensure that we have adequate liquidity to fund our operations. In addition to our traditional funding sources, we also may borrow funds from third-party lenders or issue equity or debt securities to investors. Our access to funding sources in amounts adequate to finance or capitalize our activities, or on terms that are acceptable to us, could be impaired by factors that affect us directly or the financial services industry or economy in general, such as disruptions in the financial markets or negative views and expectations about the prospects for the financial services industry. Any decline in available funding could adversely impact our ability to originate loans, invest in securities, meet our expenses, pay dividends to our shareholders, or to fulfill obligations such as repaying our borrowings or meeting deposit withdrawal demands, any of which could have a material adverse impact on our liquidity, business, financial condition or results of operations.

MORTGAGE BANKING RISK

Our mortgage revenue is cyclical and is sensitive to the level of interest rates, changes in economic conditions, decreased economic activity, and slowdowns in the housing market.

The success of our mortgage segment is dependent upon our ability to originate loans and sell them to investors. Loan production levels are sensitive to changes in the level of interest rates and changes in economic conditions. As the mortgage industry experienced in 2022, mortgage production, especially refinancing activity, declines when interest rates rise. Our mortgage origination volume could be materially and adversely affected by rising interest rates.

Because we sell a substantial portion of the mortgage loans we originate, the profitability of our mortgage banking business also depends in large part on our ability to aggregate a high volume of loans and sell them in the secondary market at a gain. If interest rates rise, we expect increasing industry-wide competitive pressures related to changing market conditions to reduce pricing margins and mortgage revenues generally. If our level of mortgage production declines, our continued profitability will depend upon our ability to further reduce our costs. If we are unable to do so, our continued profitability may be materially and adversely affected.

In 2022, we sold nearly all of the $2.40 billion of mortgage loans held for sale that we closed. When mortgage loans are sold, whether as whole loans or pursuant to a securitization, we are required to make customary representations and warranties to purchasers, guarantors and insurers about the mortgage loans and the manner in which they were originated. We may be required to repurchase or substitute mortgage loans, or indemnify buyers against losses, in the event we breach certain representations or warranties in connection with the sale of such loans. If repurchase and indemnity demands increase, such demands are valid claims and are in excess of our provision for potential losses, our liquidity, results of operations or financial condition may be materially and adversely affected.

The value of our mortgage servicing rights asset is subjective by nature and may be vulnerable to inaccuracies or other events outside our control.

The value of our mortgage servicing rights asset can fluctuate. Particularly, the asset could decrease in value if prepayment speeds, delinquency rates, or the cost to service increases or overall values decrease causing a lack of liquidity of MSRs in the market. Similarly, the value may decrease if interest rates decrease or change in a non-parallel manner or are otherwise volatile. All of which are mostly out of the Bank’s control. We must use estimates, assumptions and judgments when valuing this asset. An inaccurate valuation, or changes to the valuation due to factors outside of our control, could inhibit our ability to realize the full value of this asset. As a result, our balance sheet may not precisely represent the fair market value of this and other financial assets.

Our business model is materially dependent on U.S. government‐sponsored entities and government agencies, and any changes in these entities, their current roles or the leadership at such entities or their regulators could materially and adversely affect our business, financial condition, liquidity and results of operations.

Our ability to generate revenues through mortgage loan sales depends on programs administered by Government-Sponsored Enterprises, such as Fannie Mae and Freddie Mac, government agencies, including Ginnie Mae, and others that facilitate the issuance of mortgage‐backed securities, in the secondary market. Presently, a significant portion of the

30

newly originated loans that we originate directly with borrowers qualify under existing standards for inclusion in MBS issued by Fannie Mae or Freddie Mac or guaranteed by Ginnie Mae. A number of legislative proposals have been introduced in recent years that would wind down or phase out the GSEs. It is not possible to predict the scope and nature of the actions that the U.S. government, will ultimately take with respect to the GSEs. Any changes in laws and regulations affecting the relationship between Fannie Mae and Freddie Mac and their regulators or the U.S. federal government, and any changes in leadership at these entities, could adversely affect our business and prospects. Any discontinuation of, or significant reduction in, the operation of Fannie Mae or Freddie Mac or any significant adverse change in their capital structure, financial condition, activity levels in the primary or secondary mortgage markets or in underwriting criteria could materially and adversely affect our business, financial condition, liquidity and results of operations.

Elimination of the traditional roles of Fannie Mae and Freddie Mac, or any changes to the nature or extent of the guarantees provided by Fannie Mae and Freddie Mac or the fees, terms and guidelines that govern our selling and servicing relationships with them, could also materially and adversely affect our ability to sell and securitize loans through our loan production segment, and the performance, liquidity and market value of our investments. Moreover, any changes to the nature of the GSEs or their guarantee obligations could redefine what constitutes an Agency MBS and could have broad adverse implications for the market and our business, financial condition, liquidity and results of operations.

Decreased residential mortgage origination volume and pricing decisions of competitors may adversely affect our profitability.

Our mortgage operation originates, sells and services residential mortgage loans. Changes in interest rates, housing prices, applicable government regulations and pricing decisions by our loan competitors may adversely affect demand for our residential mortgage loan products, the revenue realized on the sale of loans, the revenues received from servicing such loans for others and, ultimately, reduce our net income. New regulations, increased regulatory reviews, and/or changes in the structure of the secondary mortgage markets which we utilize to sell mortgage loans may increase costs and make it more difficult to operate a residential mortgage origination business. Our revenue from the mortgage banking business was $73.6 million in 2022. This revenue could significantly decline in future periods if interest rates were to rise and the other risks highlighted in this paragraph were realized, which may adversely affect our profitability.

We may incur costs, liabilities, fines and other sanctions if we fail to satisfy our mortgage loan servicing obligations.

We act as servicer for approximately $11.09 billion of mortgage loans owned by third parties as of December 31, 2022. As a servicer for those loans, we have certain contractual obligations to third parties. If we commit a material breach of our obligations as servicer, we may be subject to termination if the breach is not cured within a specified period of time following notice, causing us to lose servicing income. For certain investors and/or transactions, we may be contractually obligated to repurchase a mortgage loan or reimburse the investor for credit losses incurred on the loan as a remedy for origination errors with respect to the loan. If we have increased repurchase obligations because of claims that we did not satisfy our obligations as a servicer, or if we have increased loss severity on such repurchases, we may have a significant reduction to net servicing income within our mortgage banking noninterest income. In addition, we may be subject to fines and other sanctions imposed by federal or state regulators as a result of actual or perceived deficiencies in our foreclosure practices. Any of these actions may harm our reputation or negatively affect our residential lending or servicing business and, as a result, our profitability.

LEGAL, REGULATORY AND COMPLIANCE RISK

We are subject to significant government regulation and supervision.

The Company and the Bank are subject to extensive federal and state regulation and supervision by the FDIC, Tennessee Department of Financial Institution, the Federal Reserve Board, and the CFPB, among others, the primary focus of which is to protect customers, depositors, the deposit insurance fund and the safety and soundness of the banking system as a whole, and not shareholders. The quantity and scope of applicable federal and state regulations may place banks at a competitive disadvantage compared to less regulated competitors such as financial technology companies, finance companies, credit unions, mortgage banking companies and leasing companies. These laws and regulations apply to almost every aspect of our business, and affect our lending practices and procedures, capital structure, investment activities, deposit gathering activities, our services and products, risk management practices, dividend policy and growth, including through acquisitions.

Source: SEC EDGAR (public domain) · 10-K for the period ended 2022-12-31, filed 2023-02-28 · accession 0001649749-23-000047

Filing HTML rendered to line-structured narrative text by the shipped reducer (datafeeds.edgar_fulltext.visible_text, keep_table_headers=True): scripts and inline-XBRL headers are dropped, and table content is reduced to its short label cells — numeric table data is not rendered and is therefore not counted. The same rendering is used for every year, so a year-over-year comparison is like for like.

The text is our rendering of the filing, not a facsimile: original pagination, typography and tables are not reproduced, and the numbers live in the financial statements (FA).

The outline locates item HEADINGS in this document. Only Items 1A and 7 have certified boundaries elsewhere in the terminal (the redline and the narrative-overlap number); every span here runs from one heading found to the next heading found.

How the outline was chosen. It is the longest chain of item headings that runs forward through both the document and the standard item order: 22 headings are on that chain and 15 further heading-shaped lines are not — the table-of-contents echo of every item, cross-references and exhibit-list mentions. Each entry's length is measured from its heading to the next heading on the chain.