MNSB US Equity☆

main20221231_10k.htm

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

For the fiscal year ended December 31, 2022

OR

Commission File Number001-38817

MainStreet Bancshares, Inc.

(Exact name of Registrant as specified in its Charter)

(Address of principal executive offices) (Zip Code)

Registrant’s telephone number, including area code: (703)481-4567

Securities registered pursuant to Section 12(b) of the Act:

Title of each class Trading Symbol(s) Name of each exchange on which registered

Common Stock MNSB The Nasdaq Stock Market LLC

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the Registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☐ No ☒

Indicate by check mark if the Registrant is not required to file reports pursuant to Section 13 or 15(d) of the Act. Yes ☐ No ☒

Indicate by check mark whether the Registrant: (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the Registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐

Indicate by check mark whether the Registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the Registrant was required to submit such files). Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

Large accelerated filer ☐ Accelerated filer ☐

Non-accelerated filer ☒ Smaller reporting company ☒

Emerging growth company ☒

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☒

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☐

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant's executive officers during the relevant recovery period pursuant to section 240.10D-1(b). ☐

Indicate by check mark whether the Registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☒

As of June 30, 2022, the last business day of the Registrant’s most recently completed second fiscal quarter, the aggregate market value of the shares of common equity held by non-affiliates of the Registrant, based on the closing price of the shares of common stock on The NASDAQ Stock Market, was $171,377,563. The number of shares of Registrant’s Common Stock outstanding as of March 16, 2023 was 7,521,364.

DOCUMENTS INCORPORATED BY REFERENCE:

The information required by Part III of this Annual Report on Form 10-K will be found in the Company’s definitive proxy statement for its 2022 Annual Meeting of Shareholders, to be filed pursuant to Regulation 14A under the Securities Exchange Act of 1934, and such information is incorporated herein by this reference.

INDEX

Page

PART I

Item 1. Business 3

Item 1A. Risk Factors 17

Item 1B. Unresolved Staff Comments 28

Item 2. Properties 29

Item 3. Legal Proceedings 29

Item 4. Mine Safety Disclosures 29

PART II

Item 6. [Reserved] 31

Item 7A. Quantitative and Qualitative Disclosures About Market Risk 52

Item 8. Financial Statements and Supplementary Data 54

Item 9A. Controls and Procedures 90

Item 9B. Other Information 90

Item 9C. Disclosures Regarding Foreign Jurisdictions that Prevent Inspections 90

PART III

Item 10. Directors, Executive Officers and Corporate Governance 91

Item 11. Executive Compensation 91

Item 14. Principal Accountant Fees and Services 91

PART IV

Item 15. Exhibits, Financial Statement Schedules 92

Signatures 93

2

PART I

Item 1. Business

As used herein, the “Company,” “we,” “our,” and “us” refer to MainStreet Bancshares, Inc., and the “Bank” refers to MainStreet Bank.

Overview

MainStreet Bancshares, Inc. is a bank holding company that owns 100% of MainStreet Bank and MainStreet Community Capital, LLC. On October 12, 2021, the Company filed an election to be a financial holding company with the Board of Governors of the Federal Reserve System (the “Federal Reserve”). The Company elected financial holding company status in order to engage in a broader range of financial activities than are permitted for bank holding companies generally. We emphasize providing responsive and personalized services to our clients. Due to the consolidation of financial institutions in our primary market area, we believe there is a significant opportunity for a local bank to provide a full range of financial services. By offering highly professional, personalized banking products and service delivery methods and employing advanced banking technologies, we seek to distinguish ourselves from larger, regional banks operating in our market area and are able to compete effectively with other community banks.

MainStreet Bancshares, Inc.

MainStreet Bancshares Inc. is a bank holding company incorporated under the laws of the Commonwealth of Virginia whose principal activity is the ownership and management of MainStreet Bank and MainStreet Community Capital. The Company is authorized to issue 10,000,000 shares of common stock, par value $4.00 per share. Additionally, the Company is authorized to issue 2,000,000 shares of preferred stock, par value $1.00 per share. There were 7,442,743, shares of common stock outstanding and 28,750 shares of 7.50% Series A Fixed-Rate Non-Cumulative Perpetual Preferred Stock outstanding at December 31, 2022. At that date, there were also outstanding 1,150,000 depositary shares, each representing a 1/40th interest in a share of the Company’s Series A Preferred Stock, with a liquidation preference of $1,000 per share (equivalent to $25 per depositary share).

The Company is a registered bank holding company which is governed under the Bank Holding Company Act of 1956, as amended (the “Bank Holding Act”), that has elected to be a financial holding company. As such, is subject to inspection, examination, and supervision by the Federal Reserve.

The Company’s executive offices are located at 10089 Fairfax Boulevard, Fairfax, Virginia. Our telephone number is (703) 481-4567, and our internet address is www.mstreetbank.com. The information contained on our website shall not be considered part of this Form 10-K, and the reference to our website does not constitute incorporation by reference of the information contained on the website.

MainStreet Bank

MainStreet Bank is a community commercial bank incorporated in and chartered by the Commonwealth of Virginia. The Bank is a member of the Federal Reserve Bank of Richmond, and its deposits are insured by the FDIC. The Bank opened for business on May 26, 2004, and is headquartered in Fairfax, Virginia. We currently operate six Bank branches; located in Herndon, Fairfax, McLean, Clarendon, and Leesburg Virginia, and one in Washington D.C.

The Bank is a community bank focused on serving the borrowing, cash management and depository needs of retail customers, small to medium-sized businesses, and professionals. We believe we have a solid franchise that meets the financial needs of our clients and communities by providing an array of personalized products and services delivered by seasoned banking professionals with decisions made at the local level. We believe a significant customer base in our market prefers to do business with a local institution that has a local management team, a local Board of Directors and local founders and that this customer base may not be satisfied with the responsiveness of larger regional banks. By providing quality services, coupled with the opportunities provided by the economies in our market area, we have generated and expect to continue to generate organic growth.

We service Northern Virginia as well as the greater Washington, D.C. metropolitan area. Our goal is to deliver a customized and targeted mix of products and services that meets or exceeds customer expectations. To accomplish this goal, we have deployed a premium operating system that gives customers access to up-to-date banking technology. These systems and our skilled staff have allowed us to compete aggressively with larger financial institutions. We believe the combination of sophisticated technology and personal service sets us apart from our competition. We strive to be the leading community bank in our market.

We offer a full range of banking services to individuals, small to medium-sized businesses and professional service organizations through both traditional and electronic delivery. We were the first community bank in the Washington, D.C. metropolitan area to offer a full online business banking solution, including remote check scanners on a business customer’s desktop. We offer mobile banking apps for iPhones, iPads and Android devices that provide for remote deposit of checks. In addition, we were the first bank headquartered in the Commonwealth of Virginia to offer CDARS, the Certificate of Deposit Account Registry Service, an innovative deposit insurance solution that provides Federal Deposit Insurance Corporation (“FDIC”) insurance on deposits up to $50 million. We believe that enhanced electronic delivery systems and technology increase profitability through greater productivity and cost control, and allow us to offer new and better products and services.

3

Our products and services include: business and consumer checking, premium interest-bearing checking, business account analysis, savings, certificates of deposit and other depository services, as well as a broad array of commercial, real estate and consumer loans. Internet account access is available for all personal and business accounts, internet bill payment services are available on most accounts, and a robust online cash management system is available for business customers.

Avenu

On October 25, 2021, MainStreet Bancshares, Inc. formally introduced AvenuTM, a division of MainStreet Bank. AvenuTM will provide an embedded banking solution that connects our partners (fintechs, application developers, money movers, and entrepreneurs) directly and seamlessly to our Software as a Service (SaaS) solution. Our transformational subledger combined with our high-touch compliance training goes beyond the industry standards to ensure that our Fintech partners will prosper. This division of MainStreet Bank currently serves money service businesses, payment processers, and Banking-as-a-Service customers and provides the Bank with valuable low-cost deposits and additional streams of fee income. Our SaaS software program will be deployed in 2023.

MainStreet Community Capital, LLC

In September 2021, the Company created a community development entity (“CDE”) subsidiary, MainStreet Community Capital, LLC, a Virginia limited liability company, to apply for New Market Tax Credit (“NMTC”) allocations from the U.S. Department of Treasury’s Community Development Financial Institutions Fund. To promote development in economically distressed areas, the NMTC program was established under the Community Renewal Tax Relief Act of 2000 to provide tax incentives for capital investment in disadvantaged market areas that have not experienced economic expansion. The program establishes a tax credit for investment in a CDE and ongoing compliance with the program is accomplished through a governing board and an advisory board which maintains accountability to residents and businesses in the aforementioned disadvantaged areas. This CDE will be an intermediary vehicle for the provision of loans and investments in Low-Income Communities (“LICs”). In January 2022, the Community Development Financial Institutions Fund (“CDFI”) of the United States Department of the Treasury certified MainStreet Community Capital, LLC as a registered CDE. In January 2023, MainStreet Community Capital submitted an application to apply for the 2022 NMTC program allocation. Allocation awards are expected to be announced during the fourth quarter of 2023.

Emerging Growth Company Status

We qualify as an “emerging growth company” under the JOBS Act and as defined in Section 2(a) of the Securities Act of 1933. For as long as we are an emerging growth company, we may choose to take advantage of exemptions from various reporting requirements applicable to other public companies but not to emerging growth companies. See “Risk Factors—We are an emerging growth company, and any decision on our part to comply only with certain reduced reporting and disclosure requirements applicable to emerging growth companies could make our common stock less attractive to investors.”

As an emerging growth company:

In this Form 10-K we have elected to take advantage of the reduced disclosure requirements relating to executive compensation, and in the future we may take advantage of any or all of these exemptions for so long as we remain an emerging growth company. We will remain an emerging growth company until the earliest of (i) the end of the first fiscal year during which we have total annual gross revenues of $1.07 billion or more, (ii) the end of the fiscal year following the fifth anniversary of the completion of our initial registered public offering of common equity securities, which will be in December 31, 2024, (iii) the date on which we have, during the previous three-year period, issued more than $1.0 billion in non-convertible debt and (iv) the date on which we are deemed to be a “large accelerated filer” as defined in Rule 12b-2 under the Securities Exchange Act of 1934 (the “Exchange Act”).

In addition to the relief described above, the JOBS Act permits us an extended transition period for complying with new or revised accounting standards affecting public companies. We have elected not to take advantage of this extended transition period, which means that the financial statements included in this Form 10-K, as well as any financial statements that we file in the future, will be subject to all new or revised accounting standards generally applicable to public companies.

4

Nasdaq Listing

We were approved to list shares of our common stock on the Nasdaq Capital Market under our current symbol “MNSB” as of April 22, 2019. We were approved to list our depositary shares on the Nasdaq Capital Market under the symbol “MNSBP” as of September 16, 2020. Each depository share represents a 1/40th interest in a share of our 7.50% Series A Fixed-Rate Non-Cumulative Perpetual Preferred stock.

Our Business

As of December 31, 2022, MainStreet Bancshares, Inc. had total consolidated assets of $1.9 billion, total net loans of $1.6 billion, total deposits of $1.5 billion and total stockholders’ equity of $198.3 million, and total equity to total assets was 10.30%. For the years ended December 31, 2022 and 2021, our return on average assets was 1.53% and 1.32%, respectively, and our return on average equity was 13.98% and 12.38%, respectively.

We are focused on growing business relationships and building core deposits, profitable loans and non-interest income. We believe that we have a solid franchise that meets the financial needs of our clients and communities by providing an array of personalized products and services delivered by seasoned banking professionals with decisions made at the local level. We strive to be the leading community bank in our markets.

We believe that our core lending and deposit business segments continue to perform well. For each of the fiscal years ended December 31, 2022 and December 31, 2021, our net charge-offs to average loans was 0.00%. As of December 31, 2022, we had only $21,000 in non-performing loans and non-performing assets to total assets was 0.00%.

Management believes that the Company is well positioned to build on its core performance to continue to grow profitably. Although we have successfully attracted new associates, providing depth and talent in key positions, additional employees and infrastructure are expected to be needed to manage the increasing customer relationships that would come with sustained growth.

We are a community-oriented financial institution. Our Bank offers a wide-range of commercial and consumer loan and deposit products, as well as mortgage services to individuals, and small and medium sized businesses in our market. We seek to be the provider of choice for financial solutions to customers who value exceptional personalized service, local decision making, and modern banking technology. Our business involves attracting deposits from local businesses and individual customers and using these deposits to originate commercial, mortgage, and consumer loans in our market area. We also invest in securities consisting primarily of obligations of U.S. government sponsored entities, municipal obligations, mortgage-backed securities issued by Fannie Mae, Freddie Mac and Ginnie Mae, and the subordinated debt of other financial institutions. We also invest in NMTC funds that furthers our mission to provide opportunities to areas in need. The Company is the owner and beneficiary of bank owned life insurance (BOLI) policies on certain current and former Bank employees. These policies generate income and can be liquidated, if necessary, with associated tax costs.

The Federal Reserve and the Virginia State Corporation Commission, through its Bureau of Financial Institutions (the “Bureau”), regulate and monitor operations of the Company and the Bank. We are required to file with the FDIC quarterly financial condition and performance reports. The Federal Reserve and the Bureau conduct periodic onsite and offsite examinations. We must comply with a wide variety of reporting requirements and banking regulations. The laws and regulations governing us generally have been promulgated to protect depositors and the federal deposit insurance funds and not to protect shareholders. Additionally, we must bear the cost of compliance with the reporting and regulations; these costs can be significant and may have an effect on our financial performance.

Our Market Area. We consider our primary market area to be the northern Virginia counties of Arlington, Fairfax, Loudoun, and Prince William, and the cities of Fairfax, Alexandria, Falls Church, Manassas and Manassas Park, as well as Washington DC and the greater Washington, DC metropolitan area. Our headquarters is located approximately 15 miles west of Washington, D.C., in Fairfax County, Virginia.

5

According to the U.S. Census Bureau, the Washington, D.C. Metropolitan Statistical area (MSAs) includes three of the wealthiest counties in the United States, as well as six of the top 20 wealthiest counties. Median household income growth projections range from 9% to over 14% through 2028. Overall, the Washington D.C. MSA ranks sixth out of the largest 25 MSAs ranked by population estimates as of 2021 according to the Census Bureau. We expect our strategies to benefit from the continued growth in population and high income of our market area’s residents.

Source: U.S. Bureau of Labor Statistics, S&P Global Market Intelligence

The Washington, D.C. MSA is a desirable market for a broad range of companies in a variety of industries, including sixteen companies from the 2022 Fortune 500 list, and six of the United States’ largest 100 private companies, according to the 2022 Forbes list of largest private companies by revenue. According to the U.S Bureau of Labor Statistics, the Washington, D.C. MSA has a large and diversified economy. The following table provides an in-depth view of the distribution of employment within the Washington, D.C. MSA.

Washington, D.C. MSA Employment by Sector Employment Sector by Percent

Mining, Lodging, and Construction 5.0%

Manufacturing 1.7%

Trade, Transportation, and Utilities 12.2%

Information 2.4%

Financial Activities 4.4%

Professional and Business Services 24.2%

Education and Health Services 13.2%

Leisure and Hospitality 9.3%

Other Services 6.0%

Government 21.6%

As the home of the federal government, the broader Washington, D.C. region benefits from consistent population growth and remains well positioned to capitalize on any increase in government spending and infrastructure. Further, as banks in our market have experienced continued consolidation over the last few years, our opportunities to attract talented employees and capitalize on customer dislocation have improved. With its strong demographic characteristics, scale and robust economic activity we believe that the Washington, D.C. metropolitan area represents a strong geographic market for us to realize our continued growth strategies within our core business model.

The Company is active in community development activities that include support for affordable housing for low- or moderate-income (LMI) individuals, including multifamily rental housing, promoting economic development by financing small businesses or farms, revitalizing or stabilizing LMI geographies or designated disaster areas, and targeting support for community services to LMI individuals. The Company also makes qualified investments that target these initiatives within our geographic footprint. In addition, many of our employees and directors are involved in community activities as well as volunteer their time and expertise to local causes.

6

Competitive Strengths. We continually review our product and service offerings and based on these reviews may selectively add additional products and services to provide further diversification of our revenue sources and to capture our customers’ full banking relationships. We believe that the following business strengths have been instrumental to the success of our core operations and will enable us to continue profitable growth and to maximize value to our shareholders, while remaining fundamentally sound.

Community Banking Philosophy. We provide our clients with local decision making and individualized service coupled with products and services offered by our larger institutional competitors. As our business lenders, officers, and Bank directors are based in or reside in the communities we serve, we are able to maintain a high-level of involvement in local organizations and establish a strong understanding of the banking needs of the respective communities. We believe that our customer-centric business philosophy and sales approach enables us to build long-term relationships with desirable customers, which enhances the quality and stability of our funding and lending operations. Our mission and philosophy have positioned us well in the communities across our market area and have enabled us to attract and maintain a very talented and experienced management team.

Disciplined Credit Culture. We achieve our strong credit quality by adherence to sound underwriting and credit administration standards and by maintaining long-term customer relationships. All credit decisions between $250,000 and $750,000 require concurrence of a senior lender and the Bank’s Chief Credit Officer. Approvals of credits in excess of $750,000 require full consensus of the Officer’s Loan Committee or the Chief Credit Officer and Chief Lending Officer. We maintain an independent loan review team, and senior management is actively involved with any credits requiring special attention.

Capital Position. The Bank exceeds the regulatory guidelines to be classified as “well capitalized.” Our capital position is strong and has consistently grown. At December 31, 2022, the Bank had a tier 1 leverage capital ratio of 15.05%, a common equity tier 1 risk-based capital ratio of 15.47%, a tier 1 risk-based capital ratio of 15.47%, and a total risk-based capital ratio of 16.27%. We believe that our capital position enhances our ability to grow organically because it enables the Bank to continue lending and to remain focused on our customers’ needs. For additional information, see Note 16 of Notes to Consolidated Financial Statements.

Technology. We have invested in the technology necessary to meet the developing demands of our commercial and retail customers. We utilize a strong core operating system that enables us to efficiently offer high-end deposit and loan products and have partnered with industry-leading internet banking, cash management, mobile banking, and application-based banking solutions to offer a complete banking experience to all customers, regardless of their preference. We participate in an international and nationwide automated teller machine network in order to offer our customers ATM transactions at over 55,000 locations in the United States, Canada, United Kingdom and Mexico.

Growth Opportunities. We believe that we can attract new customers and expand our total loans and deposits within our existing market areas through organic growth, online and mobile banking, strategic branching and possible acquisition opportunities. We expect our market will continue to create opportunities to attract new clients and, in some cases, may become the catalyst for mergers and acquisitions. We expect to grow our loan portfolio, open new branches and consider acquisitions only after rigorous due diligence and substantial quantitative analysis regarding the financial and capital impacts of any such transactions. We believe that maintaining our financial discipline will generate long-term shareholder value.

Lending Activities. The Bank’s primary market focus is on making loans to small businesses, professionals and other consumers in its local market area, along with various aspects of real estate finance. Owner-occupied and investment commercial real estate loans represent the largest segments of the Bank’s loan portfolio. The Bank’s primary lending activities are principally directed to its defined market area in Northern Virginia, as well as the greater Washington, D.C. metropolitan area.

We offer a diversified loan portfolio consisting primarily of commercial business and owner-occupied and investment commercial real estate loans with higher risk-adjusted returns, shorter maturities and more sensitivity to interest rate fluctuations, while still providing high quality loan products for single-family and multi-family residential borrowers.

Stress Testing. We stress test our loan portfolio on a quarterly basis and measure the results against our capital profile. We multiply the total outstanding amount for each loan category by the highest quarter historical loss for that category in order to determine the stressed loss for commercial business loans, residential real estate lending, owner-occupied commercial real estate lending and consumer instalment lending. We stress test our investor-owned commercial real estate using three separate methodologies. If a property fails more than one of the three tests, we extend the highest exposure amount and add on 10% for selling costs.

We stress test the construction lending portfolio by applying exponential discounting (k factor) to each project based upon its percentage of completion. The project is stressed using the as-is and as-complete appraised values and assumes 10% selling costs.

7

The total estimated losses from the loan stress tests are subtracted from the capital account and the regulatory ratios are recalculated. As of December 31, 2022, the post-stress capital ratios were all in excess of regulatory requirements.

Commercial Business Lending. Commercial loans are written for a variety of business purposes, including government contract receivables, plant and equipment, general working capital, contract administration and acquisition lending. Our client base is diverse, and we do not have a concentration of commercial business loans in any specific industry segment.

Commercial Real Estate Lending. We finance owner-occupied and investment commercial real estate. Our underwriting policies and processes focus on the client’s ability to repay the loan as well as assessment of the underlying real estate. Risks inherent in managing a commercial real estate portfolio relate to sudden or gradual drops in property values as well as changes in the economic climate. We attempt to mitigate those risks by carefully underwriting loans of this type and by following appropriate loan-to-value standards. Commercial real estate loans represent the largest segment of the Bank’s loan portfolio. At December 31, 2022, approximately 14.3% of our loan portfolio related to owner occupied commercial real estate loans, and approximately 29.5% of our loan portfolio related to investment commercial real estate.

Real Estate Construction Lending. This segment of our portfolio is predominately residential in nature and is composed of loans with short durations. We offer real estate construction financing to customers that have in place a permanent loan “take-out,” either by the Bank or another institution. Our approach to this type of lending reduces our credit risk, yet offers a competitive product in the marketplace. We also offer construction financing to many local home builders. These loans are also short duration and carefully underwritten with an increased focus on the builder’s reputation and ability to deliver high quality homes on time and within budget.

We also stress test the construction lending portfolio based upon the percentage completion method by stressing the as-is and as-completed appraised values. For further details, see stress test methodology under lending activities.

Residential Real Estate Lending. The Bank offers a variety of consumer-oriented residential real estate loans both for purchase and refinancing, most of which are brokered to the secondary market.

Consumer Installment Lending. We offer a broad array of consumer loans including term loans and overdraft protection.

Credit Policies and Administration. The Bank has adopted a comprehensive lending policy, which includes a well-defined risk tolerance and stringent underwriting standards for all types of loans. Management believes that it employs experienced lending officers, secures appropriate collateral and carefully monitors the financial conditions of its borrowers.

In addition to normal repayment risks, all loans in the Bank’s portfolio are subject to the state of the economy and the related effects on the borrower and/or the real estate market. Generally, longer-term loans have periodic interest rate adjustments and/or call provisions. Senior management monitors the loan portfolio closely minimize past due loans and swiftly address potential problem loans. In addition to the internal business processes employed in the credit administration area, the Bank engages an outside or independent credit review firm to review the loan portfolio annually. Results of the credit review are used to validate our internal loan ratings and to review independent commentary on specific loans and loan administration activities.

Lending Limit. As of December 31, 2022, our legal lending limit for loans to one borrower was approximately $43.0 million. The Bank “in-house” lending limit is 50% of the legal lending limit for all relationships unless the loan is owner occupied, 1 - 4 family/residential or a government contract line of credit. If owner occupied, 1 - 4 family or a government contractor, the “in-house” lending limit is 90% of the legal lending limit for "Good" rated credits; 85% for "Standard" rated credits and 75% for "Acceptable" rated credits. Our loan policy prescribes a sub-limit to certain borrowers based upon our determination of each borrower’s credit quality. We routinely participate loan amounts in excess of our policy limits to other financial institutions.

For additional information, see Note 1 and Note 5 of Notes to Consolidated Financial Statements.

Investments and Funding. The Bank balances its liquidity needs based on loan and deposit growth through the investment portfolio and purchased funds. It is the Bank’s goal to provide adequate liquidity to support the loan growth of the Bank. In the event the Bank has excess liquidity, investment securities are used to generate additional income. In the event deposit growth does not fully support the Bank’s loan growth, the Bank will utilize deposit listing services, borrowed funds, or incorporate a combination of sales of investment securities, federal funds and other purchased/borrowed funds in order to augment the Bank’s funding position.

8

The current investment policy authorizes the Bank to invest in debt securities issued by the United States Government, agencies of the United States Government, or United States Government-sponsored enterprises. The policy permits investments in mortgage-backed securities, including pass-through securities, issued and guaranteed by Fannie Mae, Freddie Mac and Ginnie Mae. The investment policy also permits investments in federal funds and deposits in other insured institutions. In addition, management is authorized to invest in investment grade state and municipal obligations, private mortgage-backed securities, the subordinated debt of other financial institutions and equity investments in funds designed to help LMI geographies. The Bank does not engage in any hedging or trading activities in its investment portfolio. The Company is also the owner and beneficiary of bank owned life insurance (BOLI) policies on certain current and former Bank employees. These policies generate income and can be liquidated, if necessary, with associated tax costs.

Generally accepted accounting principles require that, at the time of purchase, the Bank designate a security as “held-to-maturity,” “available-for-sale,” or “trading,” depending on our ability and intent to hold such security. Debt securities available for sale are reported at fair value, while debt securities held to maturity are reported at amortized cost. The Bank does not maintain a trading portfolio. Establishing a trading portfolio would require specific authorization by the Board of Directors.

The investment portfolio is actively managed and consists of investments classified as available-for-sale and held-to-maturity. Under the available-for sale classification, investment instruments may be sold as deemed appropriate by management. On a monthly basis, the investment portfolio is marked to market as required by ASC 320. Additionally, the investment portfolio is used to balance the Bank’s asset and liability position. The Bank invests in fixed rate or floating rate instruments as necessary to reduce interest rate risk exposure.

At December 31, 2022, the held-to-maturity portfolio, which is primarily composed of municipal securities and is carried at amortized cost, totaled $17.6 million. At that date, the available-for-sale portfolio, which is composed of U.S. Treasury securities, collateralized mortgage-backed securities, subordinated debt of other financial institutions and U.S. Government agency securities and is carried at fair value, totaled $62.6 million. For additional information, see Note 3 of Notes to Consolidated Financial Statements.

Subordinated Notes. On December 30, 2016, the Company completed the issuance and sale of $14.3 million in aggregate principal amount of fixed-to-floating rate subordinated notes in a private placement transaction to various accredited investors. During the first quarter of 2017, an additional $700 thousand of subordinated notes was issued for a total issuance of $15.0 million. The net proceeds of the offering supported growth and were used for other general business purposes. The notes had a maturity date of December 31, 2026, and had an annual fixed interest rate of 6.25% until December 31, 2021, with an opportunity to call the debt at December 31, 2021.

The Company, taking advantage of the attractive rates in the debt market in 2021, effectively “refinanced” this debt by completing an issuance and sale of $30 million in fixed-to-floating subordinated notes in April 2021 with a similar structure as the previous issuance at an annual fixed interest rate of 3.75% until April 15, 2026. The net proceeds were used to fully call the subordinated notes issued in 2016 and to support additional growth for other general business purposes. After April 15, 2026, the notes will have a floating interest rate based on three-month SOFR rate plus 302 basis points (3.02%) (computed on the basis of a 360-day year of twelve 30-day months) from and including April 15, 2026, to the maturity date or any early redemption date. Interest will be paid semi-annually, in arrears, on July 1 and January 1 of each year during the time that the notes remain outstanding through the fixed interest rate period or earlier redemption date. Interest will be paid quarterly, in arrears, on April 15, July 15, October 15 and January 15 throughout the floating interest rate period or earlier redemption date.

On March 1, 2022, the Company completed the issuance of $43.8 million in aggregate principal amount of fixed-to-floating rate subordinated notes in a private placement transaction to various accredited investors. The net proceeds of the offering have been and will be used to support growth and for other general business purposes. The notes have a maturity date of March 15, 2032, and have an annual fixed interest rate of 4.00% until March 15, 2027. Thereafter, the notes will have a floating interest rate based on three-month SOFR rate plus 233 basis points (2.33%) (computed on the basis of a 360-day year of twelve 30-day months) from and including March 15, 2027, to the maturity date or any early redemption date. Interest will be paid semi-annually, in arrears, on March 15 and September 15 of each year during the time that the notes remain outstanding through the fixed interest rate period or earlier redemption date. Interest will be paid quarterly, in arrears, on March 15, June 15, September 15 and December 15 throughout the floating interest rate period or earlier redemption date.

Deposit Activities. Deposits are the major source of funding for the Bank. The Bank offers a broad array of deposit products that include demand, NOW, money market and savings accounts as well as certificates of deposit. The Bank typically pays a competitive rate on the interest-bearing deposits. As a relationship-oriented organization, we seek generally to obtain deposit relationships with our loan clients.

We offer a full range of consumer and commercial deposit products, including on-line banking with bill pay, cash management, sweep accounts, wire transfer, check imaging, remote deposit capture and courier services.

As the Bank’s overall balance sheet positions dictate, we may become more or less competitive in our interest rate structure as our liquidity position changes. Additionally, we may use wholesale deposits through sources such as deposit listing services, school systems, government entities and other sources to augment our funding position.

We can also arrange for FDIC insurance for deposits up to $50 million through CDARS, the Certificate of Deposit Account Registry Service, which provides a convenient method for a depositor to enjoy full FDIC insurance on deposits up to $50 million through a single banking relationship.

For additional information on deposits, see Note 9 of Notes to Consolidated Financial Statements.

Banking-as-a-Service (BaaS). Beginning in 2016, the Board and management identified an opportunity for alternative sources of low-cost deposits and fee income. We determined that Financial Technology (“FinTech”) companies were making significant inroads into banking, and we expanded our strategic plan to include banking customers that require BaaS and other payment service solutions.

Consistent with our culture, we worked over the past six years with a small group of clients in order to understand the risks associated with this business line. We developed an infrastructure to identify, measure, monitor and control the risks associated with FinTechs, providing BaaS, and payment systems in general. We designed and implemented comprehensive legal, strategic, procedural and policy documents to guide business opportunities.

9

We are designing AvenuTM to be a comprehensive solution that provides FinTechs with an array of embedded banking services they may offer to their customers in a scalable cloud-based platform. We guide our FinTech partners through the complex maze of banking regulations by integrating compliance and fraud detection throughout the framework of our solution as well as in-person training for FinTech partners team members. We have developed a live sandbox for our FinTech partners to provide a proof of concept and allow for quick integration and time to market when they are ready to “go-live.”

Our transformational subledger combined with our high-touch compliance training goes beyond the industry standards to ensure that our FinTech partners will operate successfully. We believe partnering with FinTechs will provide an opportunity to access to untapped markets and will become a fresh source for growth in low-cost deposits and fee income.

We will continue to support the FinTech industry. Consumers in the United States express more confidence banking with FinTechs than traditional banks in many cases. As a business-focused community bank, we see FinTechs as a natural way for us to expand our footprint into consumer banking opportunities.

Competition. We face significant competition for the origination of loans and the attraction of deposits. Our competition for loans comes primarily from financial institutions in our market area and, to a lesser extent, from other financial service providers, such as mortgage companies and mortgage brokers. Competition for loans also comes from the increasing number of non-depository financial service companies entering the mortgage market, such as insurance companies, securities companies and specialty finance companies. Our most direct competition for deposits has historically come from other financial institutions operating in our market area. We also face competition for investors’ funds from money market funds, mutual funds and other corporate and government securities.

Board Leadership and Oversight

The Board of Directors combines the position of Chairman of the Board with the position of Chief Executive Officer, coupled with a Lead Independent Director position to further strengthen the Company's corporate governance structure. Terry Saeger serves as Vice Chairman of the Board and Lead Independent Director. The Board of Directors believes this provides an efficient and effective leadership model for the Company.

The Board of Directors also believes administration of its risk oversight function is enhanced by the Board's leadership structure. To assure effective independent oversight, the Board has adopted appropriate governance practices, including:

Risk Management

The Board of Directors is actively involved in oversight of risks that could affect the Company. This oversight is conducted in part through the Audit and Risk Committee of the Board of Directors, but the full Board of Directors has retained responsibility for general oversight of risks. The Chief Risk Officer and Chief Compliance Officer have reporting lines to the Audit and Risk Committee and are free to contact independent Directors whenever they feel the need to do so.

The Board of Directors satisfies this responsibility through full reports by the Audit and Risk Committee regarding its considerations and actions, regular reports directly from officers responsible for oversight of risks within the Company as well as through internal and external audits. The Audit and Risk Committee conducts an annual assessment of its performance and capabilities.

Risks relating to the direct operations of the Bank are further overseen by the Board of Directors of the Bank. The Board of Directors of the Bank also has additional committees that conduct risk oversight separate from the Company. Further, the Board of Directors oversees risks through the establishment of policies and procedures that are designed to guide daily operations in a manner consistent with applicable laws, regulations and risks acceptable to the organization.

Risk is inherent with every business, particularly financial institutions. We face a number of risks, including credit risk, interest rate risk, liquidity risk, operational risk, legal risk, strategic risk and reputation risk. Management is responsible for the day-to-day management of the risks the Company faces, while the Board has responsibility for the oversight of risk management. In its risk oversight role, the Board of Directors has the responsibility to satisfy itself that the risk management processes designed and implemented by management are adequate and functioning as designed. Senior management meets regularly to discuss strategy and risks facing the Company. Senior management attends the Board meetings and is available to address any questions or concerns raised by the Board on risk management and any other matters. The independent members of the Board provide independent oversight of the Company's management and affairs.

Environmental, Social, and Goverance

At MainStreet Bancshares Inc., our overarching focus is to make a positive impact on the communities we serve. The Board and management are aligned regarding the growing importance of Environmental, Social and Governance (ESG) initiatives, and we believe that an emphasis on sustainability can strengthen risk management and enhance value. We are, in many ways, at the beginning of our ESG journey. As we look to the future, we recognize that ESG initiatives require a commitment to the long term, and making an impact requires a willingness to listen to, learn from, and work with stakeholders across our community. Fortunately, this approach is second nature to community banks; the challenge is to harness information. We are undertaking efforts to quantify how we make a tangible difference in the communities where we live, play and work.

Environmental

The Company has a goal of reducing its carbon emissions each year.

MainStreet Bank’s origins as a “branch-lite” financial institution mean that we have been and will continue to be part of the transition to a sustainable economy that is kinder to our environment because it is less dependent on carbon fuels. Most banks the Company’s size have 20+ branches. The Bank has six locations. The Company has adopted a strategy of Put Our Bank in Your Office®, which also allows customers to conduct business with us without traveling to the Bank. On average, more than 70% of daily transactions are processed by our customers without the need to come to the Bank. These changes were underway at the Bank long before COVID-19 forced behavioral patterns in our society to change. For business operators in particular, our remote banking solutions have reduced the need to make frequent visits to a branch bank to deposit cash and checks. This helps to reduce vehicular traffic in our already crowded market.

The Company has converted all lighting to LED, scheduled HVAC units for maximum efficiency during off-work hours, incorporated mini-split units for specific location heating and cooling, tinted windows to reduce cooling needs and increased the number of indoor plants to improve air quality.

The Company has also added charging stations to accommodate employees who drive electric vehicles and encourages the purchase of hybrid vehicles.

We recognize the growing environmental risks of electronic waste and have procedures in place to reduce our impact in this regard. For example, MainStreet Bank contracts with an asset disposal company to ensure that electronic assets, including monitors, security cameras, and batteries, are disposed of and recycled in an appropriate and environmentally sensitive manner.

We have long allowed and even encouraged our employees to telecommute. Approximately 15% of our employees work remotely full-time. All but our relatively lean team of branch staff are eligible to telecommute, and most do so at least a few days a month. These arrangements give us a broader and more diverse pool of applicants in recruiting, and also serve to reduce our employees’ carbon footprint.

In our lending portfolio, we seek opportunities to support energy efficiency and renewable energy. In the first quarter of 2023, we are closing our first Property Assessed Clean Energy (PACE) loan, which follows Department of Energy guidelines on financing energy-related improvements on private property.

Social

The way the Company interacts with the communities in which it operates and with its employees constitute its social impact. The $2.2 million PACE loan mentioned above exemplifies how we approach the “S” in ESG in our communities. Our funding is renovating The Festival Center, a hub for mission-driven organizations in the Adams Morgan neighborhood of Washington, D.C. The new Festival Center will provide office space to a wide range of community-focused ministries and non-denominational non-profits, which provide access to affordable housing, job training, legal aid services, health services, substance abuse support, and more.

The establishment in 2022 of MainStreet Community Capital is another business initiative we have taken to support ESG initiatives in our communities. MainStreet Community Capital's focus is to invigorate distressed, low-income communities in the Washington, D.C., metropolitan area by providing capital and other financial services. These investments are intended to spur the creation of quality jobs and services in underserved areas. MainStreet Community Capital has earned its designation as a Community Development Entity (CDE) as defined under the U.S. Treasury Department's Community Development Financial Institution (CDFI) Fund. MainStreet Community Capital has applied to the CDFI Fund for an allocation of the New Markets Tax Credits that will be awarded in 2023, and plans to continue to do so annually.

Turning to our staff, as of December 31, 2022, the Company employed 168 full-time employees. None of our employees are represented by a collective bargaining agreement.

The Board and management are focused on maintaining a strong corporate culture. The Company’s goal is to always hire the most qualified individuals. The Company is located in a diversely populated geography, and the Company’s workforce effectively represents that diversity. We believe that a diverse workforce enhances our ability to serve our customers and our communities by enabling us to better understand their financial needs and to provide necessary and appropriate financial services.

Seventy-five percent of the Company’s employees self-identify as either female or ethnically diverse (defined as all Equal Employment Opportunity Commission classifications other than white). The Company is proud to have four veterans on its team as well.

Governance

As indicated in the discussion of Board Leadership and Oversight, the Company believes effective oversight by the Board of Directors is an essential element of a financially sound and well-managed bank. The Board establishes the Company’s risk philosophy, ensures that it has an appropriate risk-management framework, determines the overall business strategy, and monitors implementation of strategy.

To maintain the high caliber of our Board, the Company invests regularly in director education. Additionally, our directors establish and adhere to a rigorous Code of Ethics and Business Conduct. We seek highly qualified directors with skills needed for a forward-looking Board. The Company had a technology expert on the Board in 2011, well before it became a recommended practice for community banks.

At the Board level, the Company has seven independent directors, out of a totel of ten. The total of ten includes one director who stepped down from management in March 2022 and thus will become an independent director in March 2025. Two of the independent directors self-identify as female, one self-identifies as an African-American male and one self-identifies as a Hispanic male. Three of the independent directors self-identify as white males.

Diversity is one factor taken into account when considering candidates to serve on the Board of Directors. The Board believes that diversity supports its goal of best serving the Company and our shareholders, customers and employees. The matrix below summarizes the self-identified diversity attributes of our Board members. The categories listed below have the meanings defined in Nasdaq Listing Rule 5605(f)(1).

Board Size:

Total Number of Directors 10

Gender: Male Female Non-Binary Gender Undisclosed

Number of directors based on gender identity 8 2 — —

Number of directors who identify in any of the categories below:

African American or Black 1 — — —

Alaskan Native or American Indian — — — —

Asian — — — —

Hispanic or Latinx 1 — — —

Native Hawaiian or Pacific Islander — — — —

White 6 2 — —

Two or More Races or Ethnicities — — — —

LQBTQ+ —

Undisclosed —

10

Title Ethnically Diverse Female Ethnically Diverse Male White Female White Male

The Company is focused on equal pay for equal work, and on developing all employees to reach their full potential. The Company realizes that hiring a diverse workforce that is representative of the diversity of the local population also allows us to better serve our marketplace.

Employee Age Diversity

The age distribution of our employee base is also appropriately diversified.

11

The age distribution of our employees as denoted by generational categories.

Employees by Generation

Pre Baby Booms 0.6 %

Baby Boomers 16.5 %

Generation X 43.9 %

Millennials 34.8 %

Generation Z 4.2 %

The gender distribution of our employee base is diversified.

Employees by Gender

For the fiscal year ended December 31, 2022, we had 36 promotions. These promotions were distributed as follows:

2022 Promotions Diversity

Ethnically Diverse White

The Company celebrates diversity throughout the year and fosters opportunities to learn about different cultures, religious practices, traits and differences. The Company finds that doing so brings out the best in the team as we grow together to exceed customer expectations and create shareholder value.

Supervision, Regulation and Other Factors

General. The Company is a bank holding company that has elected status as a financial holding company. As such, the Company is subject to extensive regulation under the Bank Holding Company Act of 1956 and to the examination and reporting requirements of the Federal Reserve. The Company is also subject to the rules and regulations of the SEC under the federal securities laws.

As a Virginia-chartered bank that is a member of the Federal Reserve System, the Bank is subject to regulation, supervision and examination by the Bureau and the Federal Reserve. State and federal laws also govern the activities in which the Bank engages, the investments that it makes and the aggregate amount of loans that may be granted to one borrower. The Bureau and the Federal Reserve also regulate the branching authority of the Bank. In addition, various consumer and compliance laws and regulations affect the Bank’s operations.

The earnings of the Company’s subsidiaries, and therefore the earnings of the Company, are affected by general economic conditions, management policies, changes in state and federal legislation and actions of various regulatory authorities, including those referred to above. The following description summarizes some of the significant state and federal and state laws to which the Company and the Bank are subject. To the extent that statutory or regulatory provisions or proposals are described, the description is qualified in its entirety by reference to the particular statutory or regulatory provisions or proposals.

The statutes, regulations and policies that govern our operations are under continuous review and are subject to amendment from time to time by Congress, the Virginia legislature and federal and state regulatory agencies. Any such future statutory or regulatory changes could adversely affect our operations and financial condition.

Regulation of the Bank. The Bank is subject to regulation and supervision by the Bureau and by the Federal Reserve, which regulation and supervision extends to all aspects of its operations, including but not limited to requirements concerning an allowance for credit losses, lending and mortgage operations, interest rates received on loans and paid on deposits, the payment of dividends to the Company, loans to officers and directors, mergers and acquisitions, capital adequacy, and the opening and closing of branches.

As a state-chartered bank that is a member of the Federal Reserve System, the Bank is subject to periodic examinations by the Bureau and by the Federal Reserve Bank of Richmond. In these examinations, the examiners assess compliance with state and federal banking regulations and the safety and soundness standards in such matters as loan underwriting and documentation, asset quality, earnings standards, internal controls and audit systems, interest rate risk exposure, and employee compensation and benefits.

The Bureau and the Federal Reserve have enforcement responsibility over the Bank and the authority to bring actions against the Bank and certain institution-affiliated parties, including officers, directors, and employees, for violations of laws or regulations and for engaging in unsafe and unsound practices. Formal enforcement actions include the issuance of a capital directive or cease and desist order, civil money penalties, removal of officers and/or directors, and receivership or conservatorship of the institution.

Insurance of Deposit Accounts.The FDIC insures deposits at federally insured financial institutions like the Bank. Deposit accounts in the Bank are insured by the FDIC generally up to a maximum of $250,000 per separately insured depositor and up to a maximum of $250,000 for self-directed retirement accounts.

The FDIC charges insured depository institutions assessments to maintain the Deposit Insurance Fund (the "DIF"). Assessment rates for small institutions (those with less than $10 billion in assets) are based on an institution’s weighted average CAMELS component ratings and certain financial ratios and are applied to the institution’s assessment base, which equals its average total assets minus its average tangible equity.

In October 2022, the FDIC adopted a final rule that increased the initial base deposit insurance assessment rate schedules uniformly by 2 basis points beginning with the first quarterly assessment period of 2023. The FDIC increased the insurance assessment rates in response to the 2020 decline in the DIF reserve ratio below the statutory minimum of 1.35% established by the Dodd-Frank Wall Street Reform and Consumer Protection Act (the “Dodd-Frank Act”), and the increased assessment is expected to improve the likelihood that the reserve ratio would be restored to 1.35% by September 30, 2028 prescribed under the FDIC’s restoration plan. The FDIC’s assessment rates effective January 1, 2023 (which are subject to certain adjustments) range from 3 to 16 basis points for institutions with CAMELS composite ratings of 1 or 2, 6 to 30 basis points for those with a CAMELS composite score of 3, and 16 to 30 basis points for those with CAMELS Composite scores of 4 or 5.

The FDIC has authority to increase insurance assessments. Any significant increases would have an adverse effect on the operating expenses and results of operations of the Bank. We cannot predict what the FDIC assessment rates will be in the future.

12

Insurance of deposits may be terminated by the FDIC upon a finding that an institution has engaged in unsafe or unsound practices, is in an unsafe or unsound condition to continue operations, or has violated any applicable law, regulation, rule, order or condition imposed by the FDIC. We do not know of any practice, condition or violation that may lead to termination of our deposit insurance.

Regulatory Capital Requirements.The Bank is required to comply with applicable capital adequacy requirements adopted by the Federal Reserve and the other federal bank regulatory agencies (the “Basel III Capital Rules”). The Basel III Capital Rules apply to all depository institutions as well as to all top-tier bank and savings and loan holding companies that are not subject to the Federal Reserve’s Small Bank Holding Company Policy Statement. The capital requirements are quantitative measures established by regulation that require the Bank to maintain minimum amounts and ratios of capital. Failure to meet minimum capital requirements can initiate certain mandatory and possibly additional discretionary actions by bank regulators that, if undertaken, could have a direct material effect on the Company’s financial statements.

The Basel III Capital Rules require the maintenance of “Common Equity Tier 1” (“CET1”) capital, Tier 1 capital and Total capital to risk-weighted assets of at least 4.5%, 6% and 8%, respectively. The capital rules also establish a minimum leverage ratio of at least 4% Tier 1 capital to average consolidated assets. In addition to the above minimum requirements, the Basel III Capital Rules limits capital distributions and certain discretionary bonus payments if a banking organization does not hold a “capital conservation buffer” consisting of 2.5% of CET1 capital to risk-weighted assets above the amount necessary to meet its minimum risk-based capital requirements. The capital conservation buffer requirement effectively increases the minimum required risk-based capital ratios to 7% for CET1, 8.5% for Tier 1 capital and 10.5% for Total capital.

In determining the amount of risk-weighted assets for purposes of calculating risk-based capital ratios, a bank’s assets, including certain off-balance sheet assets (e.g., recourse obligations, direct credit substitutes and residual interests), are multiplied by a risk weight factor assigned by the capital regulations based on the risk deemed inherent in the type of asset. Higher levels of capital are required for asset categories believed to present greater risk. For example, a risk weight of 0% is assigned to cash and U.S. government securities, a risk weight of 50% is generally assigned to prudently underwritten first lien one- to four-family residential mortgages, a risk weight of 100% is assigned to commercial and consumer loans, a risk weight of 150% is assigned to non-residential mortgage loans that are 90 days past due or otherwise on non-accrual status, and a risk weight of between 0% to 600% is assigned to permissible equity interests, depending on certain specified factors.

Under applicable federal statute, the federal bank regulatory agencies are required to take “prompt corrective action” with respect to institutions that do not meet specified minimum capital requirements. For these purposes, the statute establishes five capital categories: well- capitalized, adequately capitalized, undercapitalized, significantly undercapitalized and critically undercapitalized. Under the implementing regulations, in order to be considered well-capitalized, a bank must have a ratio of CET1 capital to risk-weighted assets of 6.5%, a ratio of Tier 1 capital to risk-weighted assets of 8%, a ratio of total capital to risk-weighted assets of 10%, and a leverage ratio of 5%. In order to be considered adequately capitalized, a bank must have the minimum capital ratios required by the regulatory capital rule described above. Institutions with lower capital ratios are assigned to lower capital categories. Based on safety and soundness concerns, a bank may be assigned to a lower capital category than would otherwise apply based on its capital ratios. A bank that is not well-capitalized is subject to certain restrictions on brokered deposits and interest rates on deposits. A bank that is not at least adequately capitalized is subject to numerous additional restrictions, and a guaranty by its holding company is required. A bank with a ratio of tangible equity to total assets of 2.0% or less is subject to the appointment of the FDIC as receiver if its capital level does not improve within 90 days.

As of December 31, 2022, the Bank was in compliance with all regulatory capital standards and qualified as “well-capitalized,” under the prompt correction action regulations.See Note [16] of Notes to Consolidated Financial Statements.

Transactions with Related Parties. The Bank is subject to the Federal Reserve’s Regulation W, which comprehensively implements the restrictions of Sections 23A and 23B of the Federal Reserve Act on transactions between a bank and its “affiliates.” The sole “affiliate” of the Bank, as defined in Regulation W, is the Company. Section 23A and the implementing provisions of Regulation W generally place limits on the amount of a bank’s loans or extensions of credit to, investments in, or certain other transactions with its affiliates, and on the amount of advances to third parties collateralized by the securities or obligations of affiliates. Section 23B and Regulation W generally require a bank’s transactions with affiliates to be on terms substantially the same, or at least as favorable to the bank, as those prevailing at the time for comparable transactions with non-affiliated companies.

13

The Bank is also subject to certain restrictions on extensions of credit to executive officers, directors, certain principal shareholders and their related interests. Such extensions of credit must be made on substantially the same terms, including interest rates and collateral, as those prevailing at the time for comparable transactions with third parties and must not involve more than the normal risk of repayment or present other unfavorable features.

Community Reinvestment Act and Fair Lending Laws. All insured depository institutions have a responsibility under the Community Reinvestment Act of 1977 (the “CRA”) and federal regulations thereunder to help meet the credit needs of their communities, including low- and moderate-income neighborhoods. In connection with its examination of a state-chartered Federal Reserve member bank like the Bank, the Federal Reserve is required to assess our record of meeting the credit needs of our entire community. The CRA requires the Bank’s record of compliance with the CRA to be taken into account in the evaluation of applications by the Bank or the Company for approval of an expansionary proposal, such as a merger or other acquisition of another bank or the opening of a new branch office. The Bank received an “Outstanding” CRA rating in its most recent assessment received on August 22, 2022 by the Federal Reserve.

In June 2022, the Federal Reserve and the other federal bank regulatory agencies issued a joint proposal to amend their regulations implementing the CRA. The proposed rules would materially revise the current CRA framework, including new assessment area requirements, new methods of calculating credit for lending, investment, and service activities, and additional data collection and reporting requirements. The rulemaking process is in its early stages, and the final CRA rule’s impact to our financial condition and results of operations cannot be predicted at this time.

In addition, the Equal Credit Opportunity Act and the Fair Housing Act prohibit lenders from discriminating in their lending practices on the basis of characteristics specified in those statutes. A failure to comply with the Equal Credit Opportunity Act or the Fair Housing Act could result in enforcement actions by a bank’s principal federal regulatory agency, as well as by other federal regulatory agencies or the Department of Justice.

Other Consumer Protection Laws.The Bank’s lending and deposit-taking operations are subject to numerous other federal and state laws designed to protect consumers. The Consumer Financial Protection Bureau (“CFPB”) issues regulations and standards under the federal consumer protection laws, which include, among others, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, the Truth in Lending Act, the Electronic Fund Transfer Act, the Truth in Savings Act, the Fair Credit Reporting Act, and the Dodd-Frank Act’s prohibition on unfair, deceptive or abusive acts or practices. The Bank’s consumer financial products and services are subject to examination by the Federal Reserve for compliance with these and other CFPB regulations and standards.

In addition, customer privacy statutes and regulations limit the ability of the Bank to disclose nonpublic consumer information to non-affiliated third parties. These laws require us to provide notice to our customers regarding privacy policies and practices and to give our customers an option to prevent their non-public personal information from being shared with non-affiliated third parties or with our affiliates.

Cybersecurity. The federal bank regulatory agencies have adopted guidelines for establishing information security standards and cybersecurity programs for implementing safeguards under the supervision of a banking organization’s board of directors. This guidance, along with related regulatory materials, increasingly focus on risk management and processes related to information technology and the use of third parties in the provision of financial products and services. The federal bank regulatory agencies expect financial institutions to establish appropriate security controls and to ensure that their risk management processes address the risk posed by compromised customer credentials, and also expect financial institutions to maintain sufficient business continuity planning processes to ensure rapid recovery, resumption and maintenance of the institution’s operations after a cyberattack. If we fail to meet the expectations set forth in such regulatory guidance, we could be subject to various regulatory sanctions, including financial penalties.

In November 2021, the federal bank regulatory agencies issued a final rule to improve the sharing of information about cyber incidents that may affect the U.S. banking system. The rule, which became effective on May 1, 2022, requires a banking organization to notify its primary federal regulator within 36 hours of determining that a “computer-security incident” has materially affected – or is reasonably likely to materially affect – the viability of the banking organization’s operations, its ability to deliver banking products and services, or the stability of the financial sector. In addition, the rule requires a bank service provider to notify affected banking organization customers as soon as possible when the provider determines that it has experienced a computer-security incident that has materially affected or is reasonably likely to materially affect banking organization customers for four or more hours.

Bank Secrecy Act / Anti-Money Laundering Laws. The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001 and the Anti-Money Laundering Act of 2020. These laws and regulations require the Bank to implement policies, procedures, and controls to detect, prevent, and report money laundering and terrorist financing and to verify the identity of their customers. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, provisions of the USA PATRIOT Act require the federal financial institution regulatory agencies to consider the effectiveness of a financial institution's anti-money laundering activities when reviewing mergers and acquisitions.

Commercial Real Estate Lending Concentrations. The federal banking agencies have issued guidance on sound risk management practices for concentrations in commercial real estate lending. The particular focus is on exposure to commercial real estate loans that are dependent on the cash flow from the real estate held as collateral and that are likely to be sensitive to conditions in the commercial real estate market (as opposed to real estate collateral held as a secondary source of repayment or as an abundance of caution). The purpose of the guidance is not to limit a bank’s commercial real estate lending but to guide banks in developing risk management practices and capital levels commensurate with the level and nature of real estate concentrations. The guidance directs the federal banking agencies to focus their supervisory resources on institutions that may have significant commercial real estate loan concentration risk. A bank that has experienced rapid growth in commercial real estate lending, has notable exposure to a specific type of commercial real estate loan, or is approaching or exceeding the following supervisory criteria may be identified for further supervisory analysis with respect to real estate concentration risk:

The guidance provides that the strength of an institution’s lending and risk management practices with respect to such concentrations will be taken into account in supervisory guidance on evaluation of capital adequacy.

Regulation of the Company. The Company is a bank holding company under the Bank Holding Company Act that has elected status as a financial holding company. As such, we are subject to regulation, supervision, and examination by the Federal Reserve. We are required to file quarterly reports with the Federal Reserve and provide such additional information as the Federal Reserve may require. The Federal Reserve has extensive enforcement authority over bank holding companies, including, among other things, the ability to assess civil money penalties, to issue cease and desist or removal orders and to require that a holding company divest subsidiaries (including its bank subsidiaries). In general, enforcement actions may be initiated for violations of law and regulations and unsafe or unsound practices. We are also required to file certain reports with, and otherwise comply with the rules and regulations of, the SEC.

14

Regulatory Capital Requirements. The federal regulatory capital rules apply to all depository institutions as well as to bank holding companies with consolidated assets of $3 billion or more. However, the regulatory capital requirements generally do not apply on a consolidated basis to a bank holding company with total consolidated assets of less than $3 billion unless the holding company: (1) is engaged in significant nonbanking activities either directly or through a nonbank subsidiary; (2) conducts significant off-balance sheet activities (including securitization and asset management or administration) either directly or through a nonbank subsidiary; or (3) has a material amount of debt or equity securities outstanding (other than trust preferred securities) that are registered with the SEC. The Federal Reserve may apply the regulatory capital standards at its discretion to any bank holding company, regardless of asset size, if such action is warranted for supervisory purposes.

Because the Company has total consolidated assets of less than $3 billion and does not engage in activities that would trigger application of the federal regulatory capital rules, it is not at present subject to consolidated capital requirements under such rules.

Acquisitions. Under the Bank Holding Company Act, we are required to obtain the prior approval of the Federal Reserve to acquire ownership or control of more than 5% of the voting shares or substantially all of the assets of any bank holding company or bank or merge or consolidate with another bank holding company. Federal law authorizes bank holding companies to make interstate acquisitions of banks without geographic limitation.

Permissible Activities. In general, the Bank Holding Company Act limits the activities of a bank holding company to those of banking, managing or controlling banks, or any other activity that the Federal Reserve has determined to be so closely related to banking or to managing or controlling banks that an exception is allowed for those activities. A bank holding company that qualifies and elects to be treated as a “financial holding company” may engage in a broad range of additional activities that are (i) financial in nature or incidental to such financial activities or (ii) complementary to a financial activity and do not pose a substantial risk to the safety and soundness of depository institutions or the financial system generally. These activities include securities underwriting and dealing, insurance agency and underwriting, and making merchant banking investments. On October 12, 2021, the Company filed an election to be treated as a financial holding company.

Incentive Compensation. Federal banking agencies have issued guidance on incentive compensation policies intended to ensure that the incentive compensation policies of banking organizations do not undermine the safety and soundness of such organizations by encouraging excessive risk-taking. The guidance, which covers all employees that have the ability to materially affect the risk profile of an organization, is based upon the key principles that a banking organization’s incentive compensation arrangements should (i) provide incentives that do not encourage risk-taking beyond the organization’s ability to effectively identify and manage risks, (ii) be compatible with effective internal controls and risk management, and (iii) be supported by strong corporate governance, including active and effective oversight by the organization’s board of directors. In accordance with federal statute, the federal banking agencies prohibit incentive-based compensation arrangements that encourage inappropriate risk taking by covered financial institutions (generally institutions that have over $1 billion in assets) and are deemed to be excessive, or that may lead to material losses.

The Federal Reserve reviews, as part of its standard, risk-focused examination process, the incentive compensation arrangements of banking organizations (such as the Company) that are not “large, complex banking organizations.” These reviews are tailored to each organization based on the scope and complexity of the organization’s activities and the prevalence of incentive compensation arrangements. The findings of the supervisory initiatives will be included in reports of examination. Deficiencies are incorporated into the organization’s supervisory ratings, which can affect the organization’s ability to make acquisitions and take other actions. Enforcement actions may be taken against a banking organization if its incentive compensation arrangements, or related risk-management control or governance processes, pose a risk to the organization’s safety and soundness and the organization is not taking prompt and effective measures to correct the deficiencies. The scope and content of the U.S. banking regulators’ policies on executive compensation is likely to continue to evolve. It cannot be determined at this time whether compliance with such policies will adversely affect the Company’s ability to hire, retain and motivate its key employees.

In October 2022, the SEC adopted a final rule directing national securities exchanges, including Nasdaq, to establish listing standards requiring listed companies to adopt policies providing for the recovery or “clawback” of excess incentive-based compensation earned by current or former executive officers during the three fiscal years preceding the date the listed company determines an accounting restatement is required. The SEC final rule will require us to adopt a clawback policy within 60 days after the Nasdaq listing standard becomes effective.

Source of Strength. Under the Bank Holding Company Act, a bank holding company is required to act as a source of financial and managerial strength to each of its subsidiary banks and to commit resources to support each subsidiary bank. Under this source of strength doctrine, the Federal Reserve may require a bank holding company to make capital injections into a troubled subsidiary bank. The Federal Reserve may charge the bank holding company with engaging in unsafe and unsound practices if it fails to commit resources to such a subsidiary bank or if it undertakes actions that the Federal Reserve believes might jeopardize its ability to commit resources to such subsidiary bank. A capital injection may be required at times when the holding company does not have the resources to provide it.

In addition, any loans by a holding company to a subsidiary bank are subordinate in right of payment to deposits and to certain other indebtedness of such subsidiary bank. In the event of a bank holding company’s bankruptcy, the bankruptcy trustee will assume any commitment by the holding company to a federal bank regulatory agency to maintain the capital of a subsidiary bank. Moreover, the bankruptcy law provides that claims based on any such commitment will be entitled to a priority of payment over the claims of the institution’s general unsecured creditors, including the holders of its note obligations.

15

Payment of Dividends. The Company is subject to various restrictions relating to the payment of dividends. The Federal Reserve has issued guidance indicating that bank holding companies should generally pay dividends only if the company’s net income available to common shareholders over the past year has been sufficient to fully fund the dividends, and the prospective rate of earnings retention appears consistent with the company’s capital needs, asset quality and overall financial condition. The Federal Reserve’s guidance also states that a bank holding company should inform and consult with its regional Federal Reserve Bank in advance of declaring or paying a dividend that exceeds earnings for the period for which the dividend is being paid or that could result in a material adverse change to the organization’s capital structure. In addition, under Virginia law, the Company generally may not pay dividends or distributions to holders of common stock if it would be unable to pay its debts as they become due in the ordinary course of business or if its total assets would be less than the sum of its total liabilities plus the amount of the liquidation preference of any class of shares with superior rights than common stock.

As the majority of the Company’s revenues result from dividends paid to the Company by the Bank, the Company’s ability to pay dividends to our shareholders largely depends on the receipt of such dividends from the Bank. The Bank is subject to various laws and regulations limiting the amount of dividends that it can pay. Under Virginia law, without the permission of the Virginia State Corporation Commission, a state bank may not pay dividends, except from retained earnings. Under federal law applicable to state-chartered Federal Reserve member banks, a bank may not declare or pay a dividend without prior Federal Reserve approval if the total of all dividends declared during the calendar year, including the proposed dividend, exceeds the sum of the bank’s net income during the current calendar year and the retained net income of the prior two calendar years. The Federal Reserve may also object to a proposed dividend based on safety and soundness concerns.

No insured depository institution may pay a dividend if, after paying the dividend, the institution would be undercapitalized. In addition, as noted above, if the Bank does not maintain the capital conservation buffer required by applicable regulatory capital rules, its ability to pay dividends to the Company will be limited.

Federal Securities Law. The Company’s common stock is registered under Section 12(b) of the Exchange Act, and the Company is subject to the periodic reporting and other requirements of the SEC under Section 12(b) of the Exchange Act and SEC regulations.

16

Item 1A. Risk Factors

This section highlights material risks that the Company currently faces. Any of the risks described below, along with management’s discussion and analysis and the consolidated financial statements and footnotes, could materially adversely affect our business, financial condition, and results of operations. Additional risks of which management currently is not aware or which management currently considers to not be material may also adversely affect our business, financial condition and results of operations. There is no assurance that this section describes all potential risks to which the Company may be exposed.

Risks Related to Our Business

Credit and Lending Risks

Our business, like that of most banking organizations, is highly susceptible to credit risk.

As a lender, the Bank is exposed to the risk that borrowers will be unable to repay their loans according to terms of the loan agreements and that the collateral securing payment of the loans (if any) may not be sufficient to assure repayment. Credit losses could have a material adverse effect on our business, financial condition, and results of operations.

We have significant exposure to risks associated with commercial and residential real estate.

A substantial portion of our loan portfolio consists of commercial and residential real estate-related loans, including construction and residential and commercial mortgage loans. As of December 31, 2022, we had approximately $228.4 million of owner-occupied and $472.4 million of investment commercial real estate loans outstanding, which represented approximately 14.3% and 29.5%, respectively, of our loan portfolio as of December 31, 2022. As of that same date, we had approximately $393.8 million of construction real estate loans and $394.4 million of residential real estate loans, which represented 24.6% and 24.7% respectively.

The adverse consequences from real estate-related credit risks tend to be cyclical and are often driven by local and national economic developments that are not controllable or entirely foreseeable by us or our borrowers. As a result:

During the ordinary course of our business, we may foreclose on and take title to properties securing certain loans, in which event we become exposed to the costs and risks inherent in the ownership of commercial and residential real estate, which could have an adverse effect on our business, financial condition and results of operations. The amount that we, as a mortgagee, may realize after a default is dependent upon factors outside of our control, including:

• general or local economic conditions;

• environmental clean-up liabilities;

• neighborhood values;

• interest rates;

17

• real estate tax rates;

• operating expenses of the foreclosed properties;

• supply of and demand for rental units or properties;

• ability to obtain and maintain adequate occupancy of the properties;

• zoning laws;

• governmental rules, regulations and fiscal policies; and

• extreme weather conditions or other natural or man-made disasters.

Certain expenditures associated with the ownership of real estate, principally real estate taxes and maintenance costs, may also adversely affect our operating expenses.

Commercial and industrial loans may expose us to greater financial and credit risk than other loans.

Commercial and industrial loans can involve a greater degree of financial and credit risk than other loans, including less collateral at liquidation. Any significant failure to pay on time by these customers would hurt our earnings. The increased financial and credit risks associated with these types of loans result from several factors, including the concentration of principal in a limited number of loans and borrowers, the size of loan balances, the effects of general economic conditions on income-producing properties and the increased difficulty of evaluating and monitoring these types of loans and factors outside the borrowers' control such as adverse financial conditions and governmental regulations. In addition, when underwriting a commercial or industrial loan, we may take a security interest in commercial real estate, and, in some instances upon a default by the borrower, we may foreclose on and take title to the property, which may lead to additional risks for us under applicable environmental laws described below.

In recent years commercial real estate markets both nationally and locally have been adversely affected by the COVID-19 pandemic. Remote employee work opportunities during the pandemic have impacted, and may continue to impact, the occupancy of commercial properties. Weakness in our commercial real estate market could result in an increased delinquency rate and losses from these loans. We believe that the resilience of our market and borrowers provides an ability to adjust to and withstand such risks. However, increased losses from this portfolio could have an adverse effect on our business, financial condition and results of operations.

Thesmall-to-midsized businesses that we lend to may have fewer resources to weather adverse business developments, which may impair a borrower’s ability to repay a loan, and such impairment could have a material adverse effect on our business, financial condition and results of operations.

We focus our business development and marketing strategy primarily on small-to-midsized businesses. These businesses frequently have smaller market shares than their competition, may be more vulnerable to economic downturns, often need substantial additional capital to expand or compete and may experience substantial volatility in operating results, any of which may impair a borrower’s ability to repay a loan. In addition, the success of a small-to-midsized business often depends on the management skills, talents and efforts of one or two people or a small group of people, and the death, disability or resignation of one or more of these people could have an adverse impact on the business and its ability to repay its loan. If general economic conditions negatively impact the markets in which we operate and small-to-midsized businesses are adversely affected or our borrowers are otherwise harmed by adverse business developments, this, in turn, could have a material adverse effect on our business, financial condition and results of operations.

The borrowing needs of our customers may increase, especially during a challenging economic environment, which could result in increased borrowing against our contractual obligations to extend credit.

A commitment to extend credit is a formal agreement to lend funds to a customer as long as there is no violation of any condition established under the agreement. The actual borrowing needs of our customers under these credit commitments have historically been lower than the contractual amount of the commitments. A significant portion of these commitments expire without being drawn upon. Because of the credit profile of our customers, we typically have a substantial amount of total unfunded credit commitments, which is not reflected on our balance sheet. As of December 31, 2022, we had $435.8 million in unfunded credit commitments to our customers. Actual borrowing needs of our customers may exceed our expectations, especially during a challenging economic environment when our customers may be more dependent on our credit commitments due to the lack of available credit elsewhere, the increasing costs of credit, or the limited availability of financings from venture firms. This could adversely affect our liquidity, which could impair our ability to fund operations and meet obligations as they become due and could have a material adverse effect on our business, financial condition and results of operations.

Our allowance for credit losses may not be adequate to cover actual future losses.

Our success depends significantly on the quality of our assets, particularly loans. Like all financial institutions, we are exposed to the risk that our borrowers may not repay their loans according to their terms, and the collateral securing the payment of these loans may be insufficient to fully compensate us for the outstanding balance of the loan plus the costs to dispose of the collateral.

We maintain an allowance for credit losses ("ACL"), which includes the allowance for loan losses ("ALLL"), at a level we believe is adequate to absorb expected losses in our loan portfolio as of the corresponding balance sheet date. The process to determine the ACL uses models and assumptions that require us to make difficult and complex judgments that are often interrelated. This includes forecasting how borrowers will perform in changing and unprecedented economic conditions. The ability of our borrowers to repay their obligations will likely be impacted by changes in future economic conditions, which in turn could impact the accuracy of our loss forecasts and allowance estimates. There is also the possibility that we have failed or will fail to accurately identify the appropriate economic indicators, to accurately estimate the timing of future changes in economic conditions, or to estimate accurately the impacts of future changes in economic conditions to our borrowers, which similarly could impact the accuracy of our loss forecasts and allowance estimates.

If the models, estimates, and assumptions we use to establish reserves or the judgments we make in extending credit to our borrowers prove inaccurate in predicting future events, we may suffer unexpected losses. The ACL is our best estimate of expected credit losses; however, there is no guarantee that it will be sufficient to address credit losses, particularly if the economic outlook deteriorates significantly and quickly. In such an event, we may increase our ACL, which would reduce our earnings. Additionally, to the extent that economic conditions worsen, impacting our consumer and commercial borrowers or underlying collateral, and credit losses are worse than expected, as may be caused by persistent inflation, an economic recession or otherwise, we may increase our provision for loan losses, which could have an adverse effect on our results of operations and could negatively impact our financial condition.

Continuing deterioration in economic conditions, including inflation, a possible recession, higher interest rates, unresolved or new adverse effects of the COVID-19 pandemic, and unanticipated problem loans, may necessitate an increase in our allowance for loan losses. In addition, bank regulatory authorities may require an increase or future charge-offs based on their judgments which may differ from ours.

18

We may be required to increase our provisions for credit losses and to charge off loans in the future, which increases and charges could materially adversely affect us.

There is no precise method of predicting the timing of loan losses. We can give no assurance that our allowance for credit losses is or will be sufficient to absorb actual loan losses. We maintain an allowance for loan losses, which is a reserve established through a provision for loan losses charged to expense, that represents management’s estimable and observable losses within the existing portfolio of loans. The level of the allowance reflects management’s evaluation of, among other factors, the status of specific impaired loans, trends in historical loss experience, delinquency trends, credit concentrations and economic conditions within our market area. The determination of the appropriate level of the allowance for loan losses inherently involves a high degree of subjectivity and judgment and requires us to make significant estimates of current and expected future credit risks and future trends, any or all of which may undergo subsequent material changes. Changes in economic conditions affecting borrowers, new information regarding existing loans, identification of additional problem loans and other factors, both within and outside of our control, may require us to increase our allowance for loan losses. Increases in nonperforming loans have a significant impact on our allowance for loan losses.

In addition, bank regulatory agencies periodically review our allowance for loan losses and may require us to increase the provision for loan losses or to recognize further loan charge-offs, based on judgments that differ from those of management. If loan charge-offs in future periods exceed our allowance for loan losses, we will need to record additional provisions to increase our allowance for loan losses. Furthermore, growth in our loan portfolio would generally lead to an increase in the provision for loan losses. Generally, increases in our allowance for loan losses will result in a decrease in net income and shareholders’ equity, and may have a material adverse effect on our financial condition, results of operations and cash flows. Material additions to our allowance could also materially decrease our net income and, possibly, capital, and may have an adverse effect on our business.

Our credit standards and judgments and our ongoing process of credit assessment might not protect us from significant credit losses.

We extend credit to a variety of customers based on internally established standards, judgments and procedures. We manage credit risk through a program of underwriting standards, the review of certain credit decisions and an on-going process of assessment of the quality of the credit already extended. We avoid highly leveraged transactions as well as excessive industry and other concentrations. Our credit administration function employs risk management techniques to ensure that loans adhere to corporate policy and problem loans are promptly identified. While these procedures are designed to provide us with the information needed to implement policy adjustments where necessary, and to take proactive corrective actions, there can be no assurance that such measures will be effective in avoiding undue credit risk.

19

We are subject to environmental liability risk associated with our lending activities.

In the course of our business, we may purchase real estate, or we may foreclose on and take title to real estate. Although we exercise prudent due diligence when making loans, we could be subject to environmental liabilities with respect to these properties. We may be held liable to a governmental entity or to third parties for property damage, personal injury, investigation and clean-up costs incurred by these parties in connection with environmental contamination or may be required to investigate or clean up hazardous or toxic substances or chemical releases at a property. The costs associated with investigation or remediation activities could be substantial. In addition, if we are the owner or former owner of a contaminated site, we may be subject to common law claims by third parties based on damages and costs resulting from environmental contamination emanating from the property. Any significant environmental liabilities could cause an adverse effect on our business, financial condition and results of operations.

Climate change could have a material negative impact on us.

Climate change could negatively impact our business, as well as the operations and activities of our customers. Climate change could present both immediate and long-term risks to our operations, and these risks could increase over time. Climate change could present multi-faceted risks, including operational risks from the physical effects of environmental events on our facilities and other assets, as well as those of our customers; potential credit risk from borrowers with significant exposure to environmental risk; and potential reputational risk from shareholder and public comments and concerns about our practices related to climate change and our relationships with customers and vendors who operate in environmentally sensitive industries. Our business, reputation and ability to attract and retain employees could also be harmed if our responses to climate change are negatively perceived.

Interest Rate Risks

Changes in interest rates may negatively affect our earnings, income and financial condition as well as the value of our assets.

Our earnings and cash flows depend substantially upon our net interest income. Net interest income is the difference between interest income earned on interest-earning assets, such as loans and investment securities, and interest expense paid on interest-bearing liabilities, such as deposits and borrowed funds. Interest rates are sensitive to many factors that are beyond our control, including general economic conditions, competition and policies of various governmental and regulatory agencies and, in particular, the policies of the Federal Reserve.

In an attempt to help the overall economy and in response to inflationary pressures, throughout 2022 the Federal Reserve increased its targetd Fed Funds rate. The Federal Reserve also announced its intention to take other actions to mitigate growing signs of inflation. As the Federal Reserve continues to increase the targeted Fed Funds rate, overall interest rates have been impacted.

Changes in monetary policy, including rapid changes in interest rates, not only could influence the interest we receive on loans and investment securities and the amount of interest we pay on deposits and borrowings, but such changes could also affect: (1) our ability to originate loans and obtain deposits; (2) the fair value of our financial assets and liabilities, including our securities portfolio; and (3) the average duration of our interest-earning assets. Interest-earning assets may be more responsive to changes in interest rates than interest-bearing liabilities, or vice versa (repricing risk), individual interest rates or rate indices underlying various interest-earning assets and interest-bearing liabilities may not change in the same degree over a given time period (basis risk), and interest rate relationships may change across the spectrum of interest-earning asset and interest-bearing liability maturities (yield curve risk), including a prolonged flat or inverted yield curve environment. Higher interest payment obligations could also advesely affect certain borrowers, particularly our floating-rate borrowers. Substantial and prolonged increases in market interest rates could have a material adverse effect on our financial condition and results of operation.

Our business may be adversely affected by the transition from the London InterBank Offered Rate (LIBOR) as a reference rate..

The London Interbank Offered Rate (LIBOR) has been used extensively in the United States and globally as a reference rate for various commercial and financial contracts, including adjustable rate mortgages, corporate debt, interest rate swaps and other derivatives. LIBOR is set based on interest rate information reported by certain banks for short-term loans.

In 2017, the United Kingdom's Financial Conduct Authority announced that it intended to stop persuading or compelling banks to submit LIBOR rates after 2021.

In March 2022, the U.S. Government enacted the Adjustable Interest Rate (LIBOR) Act to provide a transition for legacy contracts that either lack or contain insufficient provisions addressing the cessation of LIBOR by providing for the transition to the applicable reference rate identified by the Federal Reserve on June 30, 2023 (the "LIBOR replacement date"). Effective in February 2023, the Federal Reserve adopted a final rule which establishes benchmark replacement rates to replace LIBOR on the LIBOR replacement date. The final rule identifies SOFR-based Federal Reserve selected benchmark replacements for LIBOR contracts that will not mature prior to the LIBOR replacement date and do not contain clear and practicable benchmark replacements.

The Secured Oversight Financing Rate (SOFR) is different from LIBOR in that it is a backward-looking secured rate rather than a forward-looking unsecured rate. These differences could lead to a greater disconnect between our costs to raise funds for SOFR as compared to LIBOR.

We have discontinued originating LIBOR-based financial instruments and are now originating loans based on SOFR. Until replacement rates are fully established and all agreements have been addressed, we will continue to have a number of loans, derivative contracts, and other financial instruments with attributes that are directly or indirectly dependent on LIBOR. We are currently unable to assess the ultimate impact of the LIBOR transition.

20

Liquidity Risk

Liquidity risk could impair our ability to fund operations, meet our obligations as they become due, and jeopardize our financial condition.

Liquidity is essential to our business. An inability to raise funds through deposits, borrowings, the sale of loans and other sources could have a substantial negative effect on our liquidity. Our access to funding sources in amounts adequate to finance our activities, or on terms that are acceptable to us, could be impaired by factors that affect us specifically or the financial services industry or the economy in general. Factors that could detrimentally affect our access to liquidity sources include, among other things, a decrease in the level of our business activity as a result of a downturn in the markets in which our loans are concentrated and an adverse regulatory action against us. Our ability to borrow could also be impaired by factors that are not specific to us, such as a disruption in the financial markets or negative views and expectations about the prospects for the financial services industry.

Among other sources of funds, we rely heavily on deposits for funds to make loans and provide for our other liquidity needs. However, our loan demand has historically exceeded the rate at which we have been able to build core deposits for which there is substantial competition from a variety of different competitors, so we have relied on interest-sensitive deposits, including wholesale deposits, as sources of funds. Those deposits may not be as stable as other types of deposits and, in the future, depositors may not renew those deposits when they mature, or we may have to pay a higher rate of interest to attract or retain them or to replace them with other deposits or with funds from other sources. Not being able to attract deposits, or to retain or replace them as they mature, would adversely affect our liquidity. Paying higher deposit rates to attract, retain or replace those deposits could have a negative effect on our interest margin and operating results. A failure to maintain adequate lidquidity could have a material adverse effect on our business, financial condition and results of operation.

Operational Risks

New lines of business, products, product enhancements or services may subject us to additional risks.

General. From time to time, we implement new lines of business, or offer new products and product enhancements as well as new services within our existing lines of business and we will continue to do so in the future. There are substantial risks and uncertainties associated with these efforts, particularly in instances where the markets are not fully developed. In implementing, developing or marketing new lines of business, products, product enhancements or services, we may invest significant time and resources, although we may not assign the appropriate level of resources or expertise necessary to make these new lines of business, products, product enhancements or services successful or to realize their expected benefits. Further, initial timetables for the introduction and development of new lines of business, products, product enhancements or services may not be achieved, and price and profitability targets may not prove feasible. External factors, such as compliance with regulations, competitive alternatives and shifting market preferences, may also impact the ultimate implementation of a new line of business or offerings of new products, product enhancements or services. Furthermore, any new line of business, product, product enhancement or service could have a significant impact on the effectiveness of our system of internal controls. Failure to successfully manage these risks in the development and implementation of new lines of business or offerings of new products, product enhancements or services could have an adverse impact on our business, financial condition or results of operations.

Payments Services. In 2016, we added a new funding source by way of facilitating payment services. We are continuing to identify and solicit new customers in need of these specialized services. The primary reasons for expanding into payment services are to secure an additional source of low-cost deposits and to capture additional fee income. A bank’s risks when dealing with a processor account are similar to risks from other activities in which customers conduct transactions through the bank on behalf of the customers’ clients. It is necessary for a bank to implement an adequate processor approval, monitoring and auditing program that extends beyond credit risk management and is conducted on an ongoing basis. When a bank is not able to identify and understand the nature and source of transactions processed through accounts, the bank’s risks and the likelihood of suspicious activity can increase. Without these precautions, a bank could be vulnerable to processing illicit or sanctioned transactions.

BaaS Software Solutions. In 2021, the Company began development of a proprietary BaaS software solution, AvenuTM, which provides an embedded banking solution that connects our partners (fintechs, application developers, money movers, and entrepreneurs) directly and seamlessly to our Software as a Service (SaaS) solution. Developing and deploying a software program may add additional risk.

We face risks related to our operational, technological and organizational infrastructure.

Our ability to grow and compete is dependent on the Company’s ability to build or acquire the necessary operational and technological infrastructure and to manage the cost of that infrastructure as we expand. In our case, operational risk can manifest itself in many ways, such as errors related to failed or inadequate processes, faulty or disabled computer systems, fraud by employees or outside persons and exposure to external events. As discussed below, we are dependent on our operational infrastructure to help manage these risks. In addition, we are heavily dependent on the strength and capability of our technology systems that the Company uses both to interface with customers and to manage internal financial and other systems. Our ability to develop and deliver new products that meet the needs of our existing customers and attract new ones depends on the functionality of our technology systems. Additionally, our ability to run our business in compliance with applicable laws and regulations is dependent on these infrastructures.

We continuously monitor our operational and technological capabilities and make modifications and improvements as circumstances warrant. In some instances, the Company may build and maintain these capabilities itself. We outsource many of these functions to third parties. These third parties may experience errors or disruptions that could adversely impact the Company and over which it may have limited control. We also face risk from the integration of new infrastructure platforms and/or new third-party providers of such platforms into the Company’s existing businesses.

Many of our larger competitors have substantially greater resources to invest in technological improvements. As a result, they may be able to offer additional or superior technologies compared to those that we will be able to provide, which could put us at a competitive disadvantage. Accordingly, we may lose customers seeking new technology-driven products and services to the extent we are unable to compete effectively.

21

A failure or a breach of our operational systems or infrastructure, or those of third party service providers, could disrupt our business, result in the unauthorized disclosure of confidential or proprietary information, damage our reputation and cause financial losses.

Operations Risk. Our business is dependent on our ability to process, store and transmit, on a daily basis, a number of transactions. These transactions, as well as the information technology services we provide to clients, often must adhere to client-specific guidelines, as well as legal and regulatory standards. Developing and maintaining our operational systems and infrastructure is challenging, particularly as a result of rapidly evolving legal and regulatory requirements and technological shifts. Our financial, accounting, data processing or other operating systems and facilities may fail to operate properly or become disabled as a result of events that are wholly or partially beyond the Company’s control, such as a spike in transaction volume, cyber-attack or other unforeseen catastrophic events, which may adversely affect our ability to process these transactions or provide services.

In addition, our operations rely on the secure processing, storage and transmission of confidential, proprietary and other information on our computer systems and networks. Although we take protective measures to maintain the confidentiality, integrity and availability of our and our clients’ information across all geographic and product lines, and endeavor to modify these protective measures as circumstances warrant, the nature of the threats continues to evolve. As a result, our computer systems, software and networks may be vulnerable to unauthorized access, loss or destruction of data (including confidential and proprietary client information), account takeovers, unavailability of service, computer viruses or other malicious code, cyber-attacks and other events that could have an adverse security impact. Despite the defensive measures we take to manage our internal technological and operational infrastructure, these threats may originate externally from third parties such as foreign governments, organized crime and other hackers, and outsource or infrastructure-support providers and application developers, or may originate internally from within our organization. Given the increasingly high volume of our transactions, certain errors may be repeated or compounded before they can be discovered and rectified.

We also face the risk of operational disruption, failure, termination or capacity constraints of any of the third parties that facilitate our business activities, including exchanges, clearing agents, clearing houses or other financial intermediaries. Such parties could also be the source of an attack on, or breach of, our operational systems, data or infrastructure. In addition, as interconnectivity with our clients grows, we increasingly face the risk of operational failure with respect to our clients’ systems.

Vendor Support Risk. As discussed below, we rely on external vendors to support our operations. We also rely on vendors to provide part of our services we deliver to customers. While we have a vendor management program policy in place and believe we have selected our vendors appropriately, we cannot directly control their employees or their operating environments. A breach or failure of a chosen vendor could have a material adverse impact on our operating environment. Replacing a chosen vendor could also result in a significant delay and expense.

Internet Risk. Our services and technology solutions rely on the internet more and more. Computers connected to the internet are vulnerable to many types of threats by cyber criminals. Although none of these types of attacks have had a material impact on our business to date, we anticipate that the efforts to attack our systems, and those of our customers and vendors, will grow in complexity and volume. As such, we have developed an incident response plan to coordinate the efforts following the identification of an attack.

Failure to maintain a secure computing environment, stay up to date on security vulnerabilities or deploy adequate technologies to protect against attacks, may subject our information and systems to security breaches that could compromise confidential information and damage our reputation and business. We rely on industry-standard encryption and authentication security systems to provide the security required to protect our data. Periodically our systems are subjected to scans, exploitations and audits by a qualified independent third party to evaluate the effectiveness of our security controls and system configurations.

Cyber criminals may attempt to trick employees, customers or vendors through phishing schemes or other methods to disclose sensitive information. Employees receive annual security training and are periodically assessed through simulated attack tools to assist with behavior shaping and coaching against social engineering threats.

If one or more of these events occurs, it could potentially jeopardize the confidential, proprietary and other information processed and stored in, and transmitted through, the Company’s computer systems and networks, or otherwise cause interruptions or malfunctions in our, as well as our clients’ or other third parties’ operations, which could result in damage to our reputation, substantial costs, regulatory penalties and/or client dissatisfaction or loss.

Potential costs of a cyber incident may include, but would not be limited to, remediation costs, increased protection costs, lost revenue from the unauthorized use of proprietary information or the loss of current and/or future customers, and litigation.

Insurance Risk. We maintain an insurance policy through the Company’s blanket bond at the maximum of currently available limits. However, we cannot assure you that this policy would be sufficient to cover all financial losses, damages, and penalties, including lost revenues, should the Company experience any one or more of our or a third party’s systems failing or experiencing attack.

A cyber-attack or other security incident, including one that results in the theft, loss, manipulation or misuse of information (including personal information), or the disabling of systems and access to information critical to business operations, may result in increased costs, reductions in revenue, reputational damage, legal exposure and business disruptions.

Our ability to provide our products and services, many of which are internet-based, and communicate with our customers, depends upon the management and safeguarding of information systems and infrastructure, networks, software, data, technology, methodologies and business secrets, including those of our service providers. Our products and services involve the collection, authentication, management, usage, storage, transmission and eventual destruction of sensitive and confidential information, including personal information, regarding our customers and their accounts, our employees, our partners and other third parties with which we do business. We also have arrangements in place with third parties through which we share and receive information about their customers who are or may become our customers. The financial services industry, including the Company, is particularly at risk because of the use of and reliance on digital banking products and other digital services, including mobile banking products, such as mobile payments, and other internet- and cloud-based products and applications, and the development of additional remote connectivity solutions, which increase cybersecurity risks and exposure.

Technologies, systems, networks, and other devices of the Bank as well as those of our employees, service providers, partners and other third parties with whom we interact, have been and may continue to be the subject of cyber-attacks and other security incidents, including computer viruses, hacking, malware, ransomware, supply chain attacks, vulnerabilities, credential stuffing, or phishing or other forms of social engineering. Such cyber-attacks and other security incidents are designed to lead to various harmful outcomes, such as unauthorized transactions in the Bank’s accounts, unauthorized or unintended access to or release, gathering, monitoring, disclosure, loss, destruction, corruption, disablement, encryption, misuse, modification or other processing of confidential or sensitive information (including personal information), intellectual property, software, methodologies or business secrets, disruption, sabotage or degradation of service, systems or networks, or other damage. These threats may derive from, among other things, error, fraud or malice on the part of our employees, insiders, or third parties or may result from accidental technological failure or design flaws. Any of these parties may also attempt to fraudulently induce employees, service providers, customers, partners or other third-party users of our systems or networks to disclose confidential or sensitive information (including personal information) in order to gain access to our systems, networks or data or that of our customers, partners, or third parties with whom we interact, or to unlawfully obtain monetary benefit through misdirected or otherwise improper payment. For instance, any party that obtains our confidential or sensitive information (including personal information) through a cyber-attack or other security incident may use this information for ransom, to be paid by us or a third party, as part of a fraudulent activity that is part of a broader criminal activity, or for other illicit purposes.

Cyber and information security risks for financial institutions like us continue to increase due to the proliferation of new technologies, the industry-wide shift to reliance upon the internet to conduct financial transactions, and the increased sophistication and activities of malicious actors, organized crime, perpetrators of fraud, hackers, terrorists, activists, extremist parties, formal and informal instrumentalities of foreign governments, state-sponsored actors and other external parties. In addition, our customers access our products and services using personal devices that are necessarily external to our security control systems. There has also been a significant proliferation of consumer information available on the internet resulting from breaches of third-party entities, including personal information, log-in credentials and authentication data. This threat could include the risk of unauthorized account access, data loss and fraud. The use of artificial intelligence, “bots” or other automation software can increase the velocity and efficacy of these types of attacks. We will likely face an increasing number of attempted cyber-attacks as we expand our mobile and other internet-based products and services, as well as our usage of mobile and cloud technologies and as we provide more of these services to a greater number of banking customers.

22

The methods and techniques employed by malicious actors change frequently, are increasingly sophisticated and often are not fully recognized or understood until after they have occurred, and some techniques could occur and persist for an extended period of time before being detected and remediated. We may also be unable to hire, develop and retain talent that keeps pace with the rapidly changing cyber threat landscape, and which are capable of preventing, detecting, mitigating or remediating these risks. Although we seek to maintain a robust suite of authentication and layered information security controls, any one or combination of these controls could fail to prevent, detect, mitigate or remediate these risks in a timely manner.

A disruption or breach, including as a result of a cyber-attack or media reports of perceived security vulnerabilities at the Bank or at our service providers, could result in legal and financial exposure, regulatory intervention, litigation, remediation costs, card reissuance, supervisory liability, damage to our reputation or loss of confidence in the security of our systems, products and services that could adversely affect our business. There can be no assurance that unauthorized access or cyber incidents will not occur or that we will not suffer material losses in the future. If future attacks are successful or if customers are unable to access their accounts online for other reasons, it could adversely impact our ability to service customer accounts or loans, complete financial transactions for our customers or otherwise operate any of our businesses or services. In addition, a breach or attack affecting one of our service providers or other third parties with which we interact could harm our business even if we do not control the service that is attacked.

Further, our ability to monitor our service providers’ cybersecurity practices is limited. Although the agreements that we have in place with our service providers generally include requirements relating to cybersecurity and data privacy, we cannot guarantee that such agreements will prevent a cyber incident impacting our systems or information or enable us to obtain adequate or any reimbursement from our service providers in the event we should suffer any such incidents.

In addition, the increasing prevalence and the evolution of cyber-attacks and other efforts to breach or disrupt our systems or networks or those of our customers, service providers, partners or other third parties with which we interact has led, and will likely continue to lead, to increased costs to us with respect to preventing, detecting, mitigating and remediating these risks, as well as any related attempted fraud. In order to address ongoing and future risks, we must expend resources to support protective security measures, investigate and remediate any vulnerabilities of our information systems and infrastructure and invest in new technology designed to mitigate security risks. Further, high profile cyber incidents at the Bank or other financial institutions could lead to a general loss of customer confidence in financial institutions that could negatively affect us, including harming the market perception of the effectiveness of our security measures or the global financial system in general, which could result in reduced use of our financial products. We have insurance against some cyber risks and attacks; nonetheless, our insurance coverage may not be sufficient to offset the impact of a material loss event (including if our insurer denies coverage as to any particular claim in the future), and such insurance may increase in cost or cease to be available on commercially reasonable terms, or at all, in the future.

We rely on third party service providers to provide key components of our business infrastructure, and a failure of these parties to perform for any reason could disrupt our operations.

Third parties provide key components of our business infrastructure such as data processing, internet connections, network access, core application processing, statement production and account analysis. Our business depends on the successful and uninterrupted functioning of our information technology and telecommunications systems and third-party servicers. The failure of these systems, or the termination of a third-party software license or service agreement on which any of these systems is based, could interrupt our operations. Because our information technology and telecommunications systems interface with and depend on third-party systems, we could experience service denials if demand for such services exceeds capacity or such third-party systems fail or experience interruptions. Replacing vendors or addressing other issues with our third-party service providers could entail significant delay and expense. If we are unable to efficiently replace ineffective service providers, or if we experience a significant, sustained or repeated system failure or service denial, it could compromise our ability to operate effectively, damage our reputation, result in a loss of customer business, and subject us to additional regulatory scrutiny and possible financial liability, any of which could have an adverse effect on our business, financial condition and results of operations.

Reputational risk and social factors may impact our results.

Our ability to originate and maintain accounts is highly dependent upon consumer and other external perceptions, whether or not true, of our business practices and/or our financial health. Adverse perceptions could damage our reputation in both the customer and funding markets, leading to difficulties in generating and maintaining accounts as well as in financing them. Adverse developments with respect to the consumer or other external perceptions regarding the practices of our competitors, or our industry as a whole, may also adversely impact our reputation. In addition, adverse reputational impacts on third parties with whom we have important relationships may also adversely impact our reputation. Adverse impacts on our reputation, or the reputation of our industry, may also result in greater regulatory and/or legislative scrutiny, which may lead to laws or regulations that may change or constrain the manner in which the Company engages with its customers and the products the Company offers. Adverse reputational impacts or events may also increase our litigation risk. We carefully monitor internal and external developments for areas of potential reputational risk and have established governance structures to assist in evaluating such risks in our business practices and decisions.

We could be subject to losses, regulatory action or reputational harm due to fraudulent and negligent acts on the part of loan applicants, our employees and vendors.

In deciding whether to extend credit or enter into other transactions with clients and counterparties, and the terms of any such transaction, we may rely on information furnished by or on behalf of clients and counterparties, including financial statements, property appraisals, title information, employment and income documentation, account information and other financial information. We may also rely on representations of clients and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors. Any such misrepresentation or incorrect or incomplete information, whether fraudulent or inadvertent, may not be detected prior to funding. In addition, one or more of our employees or vendors could cause a significant operational breakdown or failure, either as a result of human error or where an individual purposefully sabotages or fraudulently manipulates our loan documentation, operations or systems. Whether a misrepresentation is made by the applicant or another third party, we generally bear the risk of loss associated with the misrepresentation. A loan subject to a material misrepresentation is typically unsellable or subject to repurchase if it is sold prior to detection of the misrepresentation. The sources of the misrepresentations may also be difficult to locate, and we may be unable to recover any of the monetary losses we may suffer as a result of the misrepresentations. Any of these developments could have an adverse effect on our business, financial condition and results of operations.

We are subject to claims and litigation pertaining to intellectual property.

Banking and other financial services companies, such as ours, rely on technology companies to provide information technology products and services necessary to support their day-to-day operations. Technology companies frequently enter into litigation based on allegations of patent infringement or other violations of intellectual property rights. In addition, patent holding companies seek to monetize patents they have purchased or otherwise obtained. Competitors of our vendors, or other individuals or companies, may from time to time claim to hold intellectual property sold to us by our vendors. Such claims may increase in the future as the financial services sector becomes more reliant on information technology vendors. The plaintiffs in these actions frequently seek injunctions and substantial damages.

Regardless of the scope or validity of such patents or other intellectual property rights, or the merits of any claims by potential or actual litigants, we may have to engage in protracted litigation. Such litigation is often expensive, time-consuming, disruptive to our operations and distracting to management. If we are found to infringe one or more patents or other intellectual property rights, we may be required to pay substantial damages or royalties to a third party. In certain cases, we may consider entering into licensing agreements for disputed intellectual property, although no assurance can be given that such licenses can be obtained on acceptable terms or that litigation will not occur. These licenses may also significantly increase our operating expenses. If legal matters related to intellectual property claims were resolved against us or settled, we could be required to make payments in amounts that could have an adverse effect on our business, financial condition and results of operations. As described below these competitors include banks, other financial institution and non-banks offering services and products previously only provided by banks.

23

The decreased soundness of other financial institutions could adversely affect us.

Our ability to engage in routine funding transactions could be adversely affected by the actions and commercial soundness of other financial institutions. Financial services institutions are interrelated as a result of trading, clearing, counterparty or other relationships. We have exposure to many different industries and counterparties, and we routinely execute transactions with counterparties in the financial industry. As a result, defaults by, or even rumors or questions about, one or more financial services institutions, or the financial services industry generally, have led in the past to market-wide liquidity problems and could lead to losses or defaults by us or by other institutions. Many of these transactions expose us to credit risk in the event of default of our counterparty or client. In addition, our credit risk may be exacerbated when the collateral that we hold cannot be realized upon or is liquidated at prices insufficient to recover the full amount of the loan. We cannot assure you that any such losses would not materially and adversely affect our business, financial condition or results of operations.

COVID-19 and its variants have not been completely eliminated.

The Company has resumed pre-COVID-19 pandemic business activities, and our employees have returned to the office. The Bank’s branch offices are open and operating during normal business hours. To protect the health of its customers and employees, the Company continues to take precautions. Those actions have not impaired our ability to conduct business and fully serve our customers. While the adverse impacts of the COVID-19 pandemic have dissipated, COVID-19 and its variants have not been completely eliminated. New variants could adversely disrupt our future operations.

Strategic Risks

Strong competition within our market area could reduce our profits and slow growth.

We face strong competition in making loans, attracting deposits and hiring and retaining experienced employees from various competitors, many of which are larger and have greater financial resources than the Company. Price competition for loans and deposits may result in our charging lower interest rates on loans and paying higher interest rates on deposits, thereby reducing our net interest income. Price competition also may limit our ability to originate loans and adversely affect our growth and profitability. Competition makes it more difficult and costly to attract and retain qualified employees.

Our financial performance will be negatively affected if we are unable to execute our growth strategy.

Our stated growth strategy is to grow organically and supplement that growth with select acquisitions, if available. Our success depends primarily on generating loans and deposits of acceptable risk and expense. There can be no assurance that we will be successful in continuing our organic, or internal, growth strategy. Our ability to identify appropriate markets for expansion, recruit and retain qualified personnel, and fund growth at reasonable cost, depends upon prevailing economic conditions, maintenance of sufficient capital, competitive factors, changes in banking laws, and other factors.

We cannot be certain as to our ability to manage increased levels of assets and liabilities without increased expenses and higher levels of nonperforming assets. We may be required to make additional investments in equipment and personnel to manage higher asset levels and loan balances, which may adversely affect earnings, shareholder returns, and our efficiency ratio. Increases in operating expenses or nonperforming assets may decrease our earnings and the value of the Company’s capital stock.

We may face increasing deposit-pricing pressures, which may, among other things, reduce our profitability.

Deposit pricing pressures may result from competition as well as changes to the interest rate environment. Current economic conditions have intensified competition for deposits. The competition has had an impact on interest rates paid to attract deposits as well as fees charged on deposit products. In addition to the competitive pressures from other depository institutions, we face heightened competition from non-depository financial products such as securities and other alternative investments.

Furthermore, technology and other market changes have made it more convenient for bank customers to transfer funds for investing purposes. Bank customers also have greater access to deposit vehicles that facilitate spreading deposit balances among different depository institutions to maximize FDIC insurance coverage. In addition to competitive forces, we also are at risk from market forces as they affect interest rates. It is not uncommon when interest rates transition from a low interest rate environment to a rising rate environment, for deposit and other funding costs to rise in advance of yields on earning assets. In order to keep deposits required for funding purposes, it may be necessary to raise deposit rates without commensurate increases in asset pricing in the short term.

In recent years it has been the policy of the Federal Reserve to maintain interest rates at historically low levels through its targeted federal funds rate and the purchase of mortgage-backed securities. As a result, market rates on the loans we have originated and the yields on securities we have purchased have been at historically low levels. As discussed above, rates are fluctuating, and due to a number of factors including changes in monetary policies of the Federal Reserve, will likely continue to fluctuate.

24

External and Market-Related Risks

Changes in general business, economic and political conditions, especially in our market area, could adversely affect our growth and earnings.

Our success depends, to a certain extent, upon general business economic and political conditions, local and national, as well as governmental monetary policies. Conditions such as inflation, recession, unemployment, changes in interest rates, money supply and other factors beyond our control may adversely affect our asset quality, deposit levels and loan demand and, therefore our growth and earnings. In addition, there are continuing concerns related to, among other things, the level of U.S. government debt and fiscal actions that may be taken to address that debt, a potential resurgence of economic and political tensions with China or an escalation of tensions between Russia and Ukraine, all of which may have a destabilizing effect on financial markets and economic activity. Economic pressure on consumers, businesses and overall economic uncertainty may result in changes in spending, borrowing, and saving habits. These economic conditions and other negative developments in the domestic or international credit markets and economies may significantly affect the markets in which we do business. Because we have a significant amount of real estate loans, decreases in real estate values could adversely affect the value of property used as collateral and our ability to sell the collateral upon foreclosure. Adverse changes in the economy may also have a negative effect on the ability of our borrowers to make timely repayments of their loans, which would have an adverse impact on our earnings. If during a period of reduced real estate values we are required to liquidate the collateral securing a loan to satisfy the debt or to increase our allowance for loan losses, it could materially reduce our profitability and adversely affect our financial condition. The substantial majority of our loans are to individuals and businesses in the Northern Virginia and Washington D.C metropolitan area. Consequently, significant declines in the economy in the Northern Virginia and Washington D.C. metropolitan area could have a materially adverse effect on our financial condition and results of operations.

Additionally, the emergence of widespread health emergencies or pandemics, such as coronavirus (“COVID-19”), could lead to quarantines, business shutdowns, increases in unemployment, labor shortages, disruptions to supply chains, and overall economic instability. Events such as these may become more common in the future and could cause significant damage such as disrupt power and communication services, impact the stability of our facilities and result in additional expenses, impair the ability of our borrowers to repay their loans, reduce the value of collateral securing the repayment of our loans, which could result in the loss of revenue. While we have established and regularly test disaster recovery procedures, the occurrence of any such event could have a material adverse effect on our business, operations and financial condition.

If we do not adjust to rapid changes in the financial services industry, our financial performance may suffer.

We face substantial competition for customer relationships, as well as other sources of funding in the communities we serve. Competing providers include other banks, savings institutions and trust companies, insurance companies, mortgage banking operations, credit unions, finance companies, title companies, money market funds and other financial and nonfinancial companies which offer products functionally equivalent to those available at the Bank. Many competing providers have greater financial resources than we do and offer services within and outside the market areas we serve. In addition to this challenge of attracting and retaining customers for traditional banking services, our competitors include securities dealers, brokers, mortgage bankers, investment advisors and finance and insurance companies who seek to offer one-stop financial services to their customers that may include services that financial institutions have not been able or allowed to offer to their customers in the past. The increasingly competitive environment is primarily a result of changes in regulation, changes in technology and product delivery systems and the accelerating pace of consolidation among financial service providers. If we are unable to adjust both to increased competition for traditional banking services and changing customer needs and preferences, our financial performance and your investment in our capital stock could be adversely affected.

Additional required capital may not be available.

We are required by federal regulatory authorities to maintain adequate levels of capital to support our operations. In addition, we may elect to raise additional capital to support our business or to finance acquisitions, if any, or we may otherwise elect or be required to raise additional capital. Our ability to raise additional capital, if needed, will depend on conditions in the capital markets, economic conditions and a number of other factors, many of which are outside of our control, and on our financial performance. Accordingly, there can be no assurance that we can raise additional capital if needed or on terms acceptable to us. If we cannot raise additional capital when needed, it may have a material adverse effect on our financial condition, results of operations and prospects.

Compliance and Regulatory Risks

We operate in a highly regulated environment, and we may be adversely affected by changes in laws and regulations.

We are subject to extensive regulation, supervision and examination by the Federal Reserve, our primary federal regulator, the Virginia Bureau of Financial Institutions, our chartering authority and the FDIC, as insurer of our deposits. Such regulation and supervision govern the activities in which we may engage, and are intended primarily for the protection of the insurance fund and the depositors and borrowers of the Bank rather than for holders of our common stock. Various consumers and compliance laws also affect our operations.

Regulatory authorities have extensive discretion in their supervisory and enforcement activities, including the imposition of restrictions on our operations, the classification of our assets and determination of the level of our allowance for loan losses. Any change in such regulation and oversight, whether in the form of regulatory policy, regulations, legislation or supervisory action, may have a material impact on our operations. The earnings of the Bank, and therefore the earnings of the Company, are affected by changes in federal and state legislation and actions of various regulatory authorities.

25

Risks Associated with Our Common Stock

The market price for the Company’s common stock price may be volatile.

The market price of our common stock may be highly volatile, which may make it difficult for you to resell your shares at the volume, prices and times desired. There are many factors that may impact the market price and trading volume of our common stock, including, without limitation:

• changes in expectations as to our future financial performance;

• future issuances of our common stock or other securities;

• changes in general economic or business conditions;

• proposed or adopted changes in laws, regulations or policies affecting us;

26

The Company depends on the Bank for dividends, distributions and other payments.

There can be no assurance of whether or when we may pay dividends in the future. Cash available to pay dividends to our shareholders is derived primarily, if not entirely, from dividends paid to us from the Bank. The ability of the Bank to pay dividends to us as well as our ability to pay dividends to our shareholders is limited by regulatory and legal restrictions and the need to maintain sufficient consolidated capital. We may also decide to limit the payment of dividends even when we have the legal ability to pay them in order to retain capital for use in our business. Further, any lenders making loans to us may impose financial covenants that may be more restrictive than regulatory requirements with respect to the payment of dividends.

We are prohibited from paying dividends on our common stock if the required payments on our subordinated debentures have not been made. Additionally, dividends on our common stock could be adversely impacted if dividend payments on our preferred stock have not been made.

Although we have paid cash dividends on shares of our common stock in the past, we may not pay cash dividends on shares of our common stock in the future.

Holders of shares of our common stock are only entitled to receive such dividends as our Board of Directors may declare out of funds legally available for such purpose. We have a history of paying dividends to our shareholders. However, future cash dividends will depend upon our results of operations, financial condition, cash requirements, the need to maintain adequate capital levels, the need to comply with safe and sound banking practices as well as meet regulatory expectations, and other factors, including the ability of the Bank to make distributions to us, which ability may be restricted by statutory, contractual or other constraints. There can be no assurance that we will continue to pay dividends even if the necessary financial and regulatory conditions are met and if sufficient cash is available for distribution.

Our common stock is subordinate to our existing and future preferred stock and to our subordinated notes.