Skip to content
KStart free
AI InfrastructureDefenseQuantumAll studies →

MNSB US Equity

MainStreet Bancshares, Inc.Financials · State Commercial Banks · CIK 1693577 · FY ends Dec 31
$24.81
-0.45 (-1.78%)
USD · as of 2026-08-21 · marketstack

MNSB · 10-K · period ended 2023-12-31

← all MNSB documents
filed 2024-03-20 · EDGAR original ↗

Our rendering of the filing — original pagination and typography are not reproduced, and tables are reduced to their short label cells (the figures live on FA). Nothing is summarized: every line below is the filing's own text.

blocks 1396 of 1,647374k characters rendered

main20231231_10k.htm

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

For the fiscal year ended December 31, 2023

OR

Commission File Number001-38817

MainStreet Bancshares, Inc.

(Exact name of Registrant as specified in its Charter)

(Address of principal executive offices) (Zip Code)

Registrant’s telephone number, including area code: (703)481-4567

Securities registered pursuant to Section 12(b) of the Act:

Title of each class Trading Symbol(s) Name of each exchange on which registered

Common Stock MNSB The Nasdaq Stock Market LLC

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the Registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. yes ☐ No ☒

Indicate by check mark if the Registrant is not required to file reports pursuant to Section 13 or 15(d) of the Act. yes ☐ No ☒

Indicate by check mark whether the Registrant: (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the Registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ no ☐

Indicate by check mark whether the Registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the Registrant was required to submit such files). Yes ☒ no ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

Large accelerated filer ☐ Accelerated filer ☐

Non-accelerated filer ☒ Smaller reporting company ☒

Emerging growth company ☒

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☒

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☐

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant's executive officers during the relevant recovery period pursuant to section 240.10D-1(b). ☐

Indicate by check mark whether the Registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). yes ☐ no ☒

As of June 30, 2023, the last business day of the Registrant’s most recently completed second fiscal quarter, the aggregate market value of the shares of common equity held by non-affiliates of the Registrant, based on the closing price of the shares of common stock on The NASDAQ Stock Market, was $155,925,363. The number of shares of Registrant’s Common Stock outstanding as of March 18, 2024 was 7,614,090.

DOCUMENTS INCORPORATED BY REFERENCE:

The information required by Part III of this Annual Report on Form 10-K will be found in the Company’s definitive proxy statement for its 2023 Annual Meeting of Shareholders, to be filed pursuant to Regulation 14A under the Securities Exchange Act of 1934, and such information is incorporated herein by this reference.

INDEX

Page

PART I

Item 1. Business 3

Item 1A. Risk Factors 19

Item 1B. Unresolved Staff Comments 31

Item 1C. Cybersecurity 31

Item 2. Properties 32

Item 3. Legal Proceedings 32

Item 4. Mine Safety Disclosures 32

PART II

Item 6. [Reserved] 34

Item 7A. Quantitative and Qualitative Disclosures About Market Risk 59

Item 8. Financial Statements and Supplementary Data 61

Item 9A. Controls and Procedures 96

Item 9B. Other Information 96

Item 9C. Disclosures Regarding Foreign Jurisdictions that Prevent Inspections 96

PART III

Item 10. Directors, Executive Officers and Corporate Governance 97

Item 11. Executive Compensation 97

Item 14. Principal Accountant Fees and Services 97

PART IV

Item 15. Exhibits, Financial Statement Schedules 98

Signatures 99

2

PART I

Item 1. Business

As used herein, the “Company,” “we,” “our,” and “us” refer to MainStreet Bancshares, Inc., and the “Bank” refers to MainStreet Bank.

Overview

MainStreet Bancshares, Inc. is a bank holding company that owns 100% of MainStreet Bank and MainStreet Community Capital, LLC. On October 12, 2021, the Company filed an election to be a financial holding company with the Board of Governors of the Federal Reserve System (the “Federal Reserve”). The Company elected financial holding company status in order to engage in a broader range of financial activities than are permitted for bank holding companies generally. We emphasize providing responsive and personalized services to our clients. Due to the consolidation of financial institutions in our primary market area, we believe there is a significant opportunity for a local bank to provide a full range of financial services. By offering highly professional, personalized banking products and service delivery methods and employing advanced banking technologies, we seek to distinguish ourselves from larger, regional banks operating in our market area and are able to compete effectively with other community banks.

MainStreet Bancshares, Inc.

MainStreet Bancshares Inc. is a bank holding company incorporated under the laws of the Commonwealth of Virginia whose principal activity is the ownership and management of MainStreet Bank and MainStreet Community Capital, LLC. The Company is authorized to issue 10,000,000 shares of common stock, par value $4.00 per share. Additionally, the Company is authorized to issue 2,000,000 shares of preferred stock, par value $1.00 per share. There were 7,527,415, shares of common stock outstanding and 28,750 shares of 7.50% Series A Fixed-Rate Non-Cumulative Perpetual Preferred Stock outstanding at December 31, 2023. At that date, there were also outstanding 1,150,000 depositary shares, each representing a 1/40th interest in a share of the Company’s Series A Preferred Stock, with a liquidation preference of $1,000 per share (equivalent to $25 per depositary share).

The Company is a registered bank holding company which is governed under the Bank Holding Company Act of 1956, as amended (the “Bank Holding Act”), that has elected to be a financial holding company. As such, is subject to inspection, examination, and supervision by the Federal Reserve.

The Company’s executive offices are located at 10089 Fairfax Boulevard, Fairfax, Virginia. Our telephone number is (703) 481-4567, and our internet address is www.mstreetbank.com. The information contained on our website shall not be considered part of this Form 10-K, and the reference to our website does not constitute incorporation by reference of the information contained on the website.

MainStreet Bank

MainStreet Bank is a community commercial bank incorporated in and chartered by the Commonwealth of Virginia. The Bank is a member of the Federal Reserve Bank of Richmond, and its deposits are insured by the FDIC. The Bank opened for business on May 26, 2004, and is headquartered in Fairfax, Virginia. We currently operate six Bank branches; located in Herndon, Fairfax, McLean, Clarendon, and Leesburg, Virginia, and one in Washington D.C.

The Bank is a community bank focused on serving the borrowing, cash management and depository needs of retail customers, small to medium-sized businesses, and professionals. We believe we have a solid franchise that meets the financial needs of our clients and communities by providing an array of personalized products and services delivered by seasoned banking professionals with decisions made at the local level. We believe a significant customer base in our market prefers to do business with a local institution that has a local management team, a local Board of Directors and local founders and that this customer base may not be satisfied with the responsiveness of larger regional banks. By providing quality services, coupled with the opportunities provided by the economies in our market area, we have generated and expect to continue to generate organic growth.

We service Northern Virginia as well as the greater Washington, D.C. metropolitan area. Our goal is to deliver a customized and targeted mix of products and services that meets or exceeds customer expectations. To accomplish this goal, we have deployed a premium operating system that gives customers access to up-to-date banking technology. These systems and our skilled staff have allowed us to compete aggressively with larger financial institutions. We believe the combination of sophisticated technology and personal service sets us apart from our competition. We strive to be the leading community bank in our market.

We offer a full range of banking services to individuals, small to medium-sized businesses and professional service organizations through both traditional and electronic delivery. We were the first community bank in the Washington, D.C. metropolitan area to offer a full online business banking solution, including remote check scanners on a business customer’s desktop. We offer mobile banking apps for iPhones, iPads and Android devices that provide for remote deposit of checks. In addition, we were the first bank headquartered in the Commonwealth of Virginia to offer CDARS, the Certificate of Deposit Account Registry Service, an innovative deposit insurance solution that provides Federal Deposit Insurance Corporation (“FDIC”) insurance on deposits up to $50 million. We believe that enhanced electronic delivery systems and technology increase profitability through greater productivity and cost control, and allow us to offer new and better products and services.

3

Our products and services include: business and consumer checking, premium interest-bearing checking, business account analysis, savings, certificates of deposit and other depository services, as well as a broad array of commercial, real estate and consumer loans. Internet account access is available for all personal and business accounts, internet bill payment services are available on most accounts, and a robust online cash management system is available for business customers.

Avenu

On October 25, 2021, MainStreet Bancshares, Inc. formally introduced Avenu, a division of MainStreet Bank. Avenu will provide an embedded Banking as a Service (BaaS) solution that connects our partners (fintechs, application developers, money movers, and entrepreneurs) directly and seamlessly to our Software as a Service (SaaS) solution. Our transformational subledger combined with our high-touch compliance training goes beyond the industry standards to ensure that our Fintech partners will prosper. This division of MainStreet Bank will serve money service businesses, payment processers, and other clients who have a need to embed deposit gathering and payment processing in their mobile Apps. This division provides the Bank with valuable low-cost deposits and additional streams of fee income. Our SaaS software program will be deployed in the second quarter of 2024. Additional information can be found in our investor presentations filed quarterly.

MainStreet Community Capital, LLC

In September 2021, the Company created a community development entity (“CDE”) subsidiary, MainStreet Community Capital, LLC, a Virginia limited liability company, to apply for New Market Tax Credit (“NMTC”) allocations from the U.S. Department of Treasury’s Community Development Financial Institutions Fund. To promote development in economically distressed areas, the NMTC program was established under the Community Renewal Tax Relief Act of 2000 to provide tax incentives for capital investment in disadvantaged market areas that have not experienced economic expansion. The program establishes a tax credit for investment in a CDE and ongoing compliance with the program is accomplished through a governing board and an advisory board which maintains accountability to residents and businesses in the aforementioned disadvantaged areas. This CDE will be an intermediary vehicle for the provision of loans and investments in Low-Income Communities (“LICs”). In January 2022, the Community Development Financial Institutions Fund (“CDFI”) of the United States Department of the Treasury certified MainStreet Community Capital, LLC as a registered CDE. In December 2023, MainStreet Community Capital submitted an application to apply for the 2023 NMTC program allocation. Allocation awards are expected to be announced during the fourth quarter of 2024.

Emerging Growth Company Status

We qualify as an “emerging growth company” under the JOBS Act and as defined in Section 2(a) of the Securities Act of 1933. For as long as we are an emerging growth company, we may choose to take advantage of exemptions from various reporting requirements applicable to other public companies but not to emerging growth companies. See “Risk Factors—We are an emerging growth company, and any decision on our part to comply only with certain reduced reporting and disclosure requirements applicable to emerging growth companies could make our common stock less attractive to investors.”

As an emerging growth company:

In this Form 10-K we have elected to take advantage of the reduced disclosure requirements relating to executive compensation, and in the future we may take advantage of any or all of these exemptions for so long as we remain an emerging growth company. We will remain an emerging growth company until the earliest of (i) the end of the first fiscal year during which we have total annual gross revenues of $1.07 billion or more, (ii) the end of the fiscal year following the fifth anniversary of the completion of our initial registered public offering of common equity securities, which will be in December 31, 2024, (iii) the date on which we have, during the previous three-year period, issued more than $1.0 billion in non-convertible debt and (iv) the date on which we are deemed to be a “large accelerated filer” as defined in Rule 12b-2 under the Securities Exchange Act of 1934 (the “Exchange Act”).

In addition to the relief described above, the JOBS Act permits us an extended transition period for complying with new or revised accounting standards affecting public companies. We have elected not to take advantage of this extended transition period, which means that the financial statements included in this Form 10-K, as well as any financial statements that we file in the future, will be subject to all new or revised accounting standards generally applicable to public companies.

4

Nasdaq Listing

We were approved to list shares of our common stock on the Nasdaq Capital Market under our current symbol “MNSB” as of April 22, 2019. We were approved to list our depositary shares on the Nasdaq Capital Market under the symbol “MNSBP” as of September 16, 2020. Each depository share represents a 1/40th interest in a share of our 7.50% Series A Fixed-Rate Non-Cumulative Perpetual Preferred stock.

Our Business

As of December 31, 2023, MainStreet Bancshares, Inc. had total consolidated assets of $2.0 billion, total net loans of $1.7 billion, total deposits of $1.7 billion and total stockholders’ equity of $221.5 million, and total tangible equity to total tangible assets was 10.24%. For the years ended December 31, 2023 and 2022, our return on average assets was 1.38% and 1.53%, respectively, and our return on average equity was 12.66% and 13.98%, respectively.

We are focused on growing business relationships and building core deposits, loans and non-interest income. We believe that we have a solid franchise that meets the financial needs of our clients and communities by providing an array of personalized products and services delivered by seasoned banking professionals with decisions made at the local level. We strive to be the leading community bank in our markets.

We believe that our core lending and deposit business segments continue to perform well. For each of the fiscal years ended December 31, 2023 and December 31, 2022, our net charge-offs to average loans were 0.03% and 0.00%, respectively. As of December 31, 2023, we had $1.0 million in non-performing loans and non-performing assets to total assets was 0.05%.

Management believes that the Company is well positioned to build on its core performance to continue to grow profitably. Although we have successfully attracted new associates, providing depth and talent in key positions, additional employees and infrastructure are expected to be needed to manage the increasing customer relationships that would come with sustained growth.

We are a community-oriented financial institution. Our Bank offers a wide range of commercial and consumer loan and deposit products, as well as mortgage services to individuals, and small and medium sized businesses in our market. We seek to be the provider of choice for financial solutions to customers who value exceptional personalized service, local decision making, and modern banking technology. Our business involves attracting deposits from local businesses and individual customers and using these deposits to originate commercial, mortgage, and consumer loans in our market area. We also invest in securities consisting primarily of obligations of U.S. government sponsored entities, municipal obligations, mortgage-backed securities issued by Fannie Mae, Freddie Mac and Ginnie Mae, and the subordinated debt of other financial institutions. We also invest in NMTC funds that furthers our mission to provide opportunities to areas in need. The Company is the owner and beneficiary of bank owned life insurance (BOLI) policies on certain current and former Bank employees. These policies generate income and can be liquidated, if necessary, with associated tax costs.

The Federal Reserve and the Virginia State Corporation Commission, through its Bureau of Financial Institutions (the “Bureau”), regulate and monitor operations of the Company and the Bank. We are required to file with the FDIC quarterly financial condition and performance reports. The Federal Reserve and the Bureau conduct periodic onsite and offsite examinations. We must comply with a wide variety of reporting requirements and banking regulations. The laws and regulations governing us generally have been promulgated to protect depositors and the federal deposit insurance funds and not to protect shareholders. Additionally, we must bear the cost of compliance with the reporting and regulations; these costs can be significant and may have an effect on our financial performance.

Our Market Area. We consider our primary market area to be the northern Virginia counties of Arlington, Fairfax, Loudoun, and Prince William, and the cities of Fairfax, Alexandria, Falls Church, Manassas and Manassas Park, as well as Washington DC and the greater Washington, DC metropolitan area. Our headquarters is located approximately 15 miles west of Washington, D.C., in Fairfax County, Virginia.

5

According to the U.S. Census Bureau, the Washington, D.C. Metropolitan Statistical area (MSAs) includes three of the wealthiest counties in the United States, as well as six of the top 20 wealthiest counties. Median household income growth projections range from 5% to over 10% through 2029. Overall, the Washington D.C. MSA ranks ninth out of the largest 25 MSAs ranked by population estimates as of 2023 according to the Census Bureau. We expect our strategies to benefit from the continued growth in population and high income of our market area’s residents.

Source: U.S. Bureau of Labor Statistics, S&P Global Market Intelligence

The Washington, D.C. MSA is a desirable market for a broad range of companies in a variety of industries, including twenty-seven companies from the 2023 Fortune 500 list, and six of the United States’ largest 100 private companies, according to the 2023 Forbes list of largest private companies by revenue. According to the U.S Bureau of Labor Statistics, the Washington, D.C. MSA has a large and diversified economy. The following table provides an in-depth view of the distribution of employment within the Washington, D.C. MSA.

Washington, D.C. MSA Employment by Sector Employment Sector by Percent

Mining, Lodging, and Construction 4.9%

Manufacturing 1.7%

Trade, Transportation, and Utilities 11.7%

Information 2.4%

Financial Activities 4.5%

Professional and Business Services 23.9%

Education and Health Services 13.6%

Leisure and Hospitality 9.5%

Other Services 5.9%

Government 21.6%

As the home of the federal government, the broader Washington, D.C. region benefits from consistent population growth and remains well positioned to capitalize on any increase in government spending and infrastructure. Further, as banks in our market have experienced continued consolidation over the last few years, our opportunities to attract talented employees and capitalize on customer dislocation have improved. With its strong demographic characteristics, scale and robust economic activity we believe that the Washington, D.C. metropolitan area represents a strong geographic market for us to realize our continued growth strategies within our core business model.

The Company is active in community development activities that include support for affordable housing for low- or moderate-income (LMI) individuals, including multifamily rental housing, promoting economic development by financing small businesses or farms, revitalizing or stabilizing LMI geographies or designated disaster areas, and targeting support for community services to LMI individuals. The Company also makes qualified investments that target these initiatives within our geographic footprint. In addition, many of our employees and directors are involved in community activities as well as volunteer their time and expertise to local causes.

6

Competitive Strengths. We continually review our product and service offerings and based on these reviews may selectively add additional products and services to provide further diversification of our revenue sources and to capture our customers’ full banking relationships. We believe that the following business strengths have been instrumental to the success of our core operations and will enable us to continue profitable growth and to maximize value to our shareholders, while remaining fundamentally sound.

Community Banking Philosophy. We provide our clients with local decision making and individualized service coupled with products and services offered by our larger institutional competitors. As our business lenders, officers, and Bank directors are based in or reside in the communities we serve, we are able to maintain a high-level of involvement in local organizations and establish a strong understanding of the banking needs of the respective communities. We believe that our customer-centric business philosophy and sales approach enables us to build long-term relationships with desirable customers, which enhances the quality and stability of our funding and lending operations. Our mission and philosophy have positioned us well in the communities across our market area and have enabled us to attract and maintain a very talented and experienced management team.

Disciplined Credit Culture. We achieve our strong credit quality by adherence to sound underwriting and credit administration standards and by maintaining long-term customer relationships. All credit decisions between $250,000 and $750,000 require concurrence of the Chief Lending Officer and the Chief Credit Officer. Approvals of credits in excess of $750,000 require full consensus of the Officer’s Loan Committee. We maintain an independent loan review team, and senior management is actively involved with any credits requiring special attention.

Capital Position. The Bank exceeds the regulatory guidelines to be classified as “well capitalized.” Our capital position is strong and has consistently grown. At December 31, 2023, the Bank had a tier 1 leverage capital ratio of 14.66%, a common equity tier 1 risk-based capital ratio of 16.22%, a tier 1 risk-based capital ratio of 16.22%, and a total risk-based capital ratio of 17.18%. We believe that our capital position enhances our ability to grow organically because it enables the Bank to continue lending and to remain focused on our customers’ needs. For additional information, see Note 16 of Notes to Consolidated Financial Statements.

Technology. We have invested in the technology necessary to meet the developing demands of our commercial and retail customers. We utilize a strong core operating system that enables us to efficiently offer high-end deposit and loan products and have partnered with industry-leading internet banking, cash management, mobile banking, and application-based banking solutions to offer a complete banking experience to all customers, regardless of their preference. We participate in an international and nationwide automated teller machine network in order to offer our customers ATM transactions at over 55,000 locations in the United States, Canada, United Kingdom and Mexico.

Growth Opportunities. We believe that we can attract new customers and expand our total loans and deposits within our existing market areas through organic growth, online and mobile banking, strategic branching and possible acquisition opportunities. We expect our market will continue to create opportunities to attract new clients and, in some cases, may become the catalyst for mergers and acquisitions. We expect to grow our loan portfolio, open new branches and consider acquisitions only after rigorous due diligence and substantial quantitative analysis regarding the financial and capital impacts of any such transactions. We believe that maintaining our financial discipline will generate long-term shareholder value.

Lending Activities. The Bank’s primary market focus is on making loans to small businesses, professionals and other consumers in its local market area, along with various aspects of real estate finance. Owner-occupied and investment commercial real estate loans represent the largest segments of the Bank’s loan portfolio. The Bank’s primary lending activities are principally directed to its defined market area in Northern Virginia, as well as the greater Washington, D.C. metropolitan area.

We offer a diversified loan portfolio consisting primarily of commercial business and owner-occupied and investment commercial real estate loans with higher risk-adjusted returns, shorter maturities and more sensitivity to interest rate fluctuations, while still providing high quality loan products for single-family and multi-family residential borrowers.

7

Commercial Business Lending. Commercial loans are written for a variety of business purposes, including government contract receivables, plant and equipment, general working capital, contract administration and acquisition lending. Our client base is diverse, and we do not have a concentration of commercial business loans in any specific industry segment.

Commercial Real Estate Lending. We finance owner-occupied and investment commercial real estate. Our underwriting policies and processes focus on the client’s ability to repay the loan as well as an assessment of the underlying real estate. Risks inherent in managing a commercial real estate portfolio relate to sudden or gradual drops in property values as well as changes in the economic climate. We attempt to mitigate those risks by carefully underwriting loans of this type and by following appropriate loan-to-value standards. Commercial real estate loans represent the largest segment of the Bank’s loan portfolio. At December 31, 2023, approximately 16.3% of our loan portfolio related to owner occupied commercial real estate loans, and approximately 26.7% of our loan portfolio related to investment commercial real estate.

Real Estate Construction Lending. This segment of our portfolio is predominately residential in nature and is composed of loans with short durations. We offer real estate construction financing to customers that have in place a permanent loan “take-out,” either by the Bank or another institution. Our approach to this type of lending reduces our credit risk, yet offers a competitive product in the marketplace. We also offer construction financing to many local home builders. These loans are also short duration and carefully underwritten with an increased focus on the builder’s reputation and ability to deliver high quality homes on time and within budget.

We also stress test the construction lending portfolio based upon the percentage completion method by stressing the as-is and as-completed appraised values. For further details, see stress test methodology in the Management's Discussion and Analysis.

Residential Real Estate Lending. The Bank offers a variety of consumer-oriented residential real estate loans both for purchase and refinancing, most of which are brokered to the secondary market.

Consumer Installment Lending. We offer consumer loans including term loans and overdraft protection.

Credit Policies and Administration. The Bank has adopted a comprehensive lending policy, which includes a well-defined risk tolerance and stringent underwriting standards for all types of loans. Management believes that it employs experienced lending officers, secures appropriate collateral and carefully monitors the financial conditions of its borrowers.

In addition to normal repayment risks, all loans in the Bank’s portfolio are subject to the state of the economy and the related effects on the borrower and/or the real estate market. Generally, longer-term loans have periodic interest rate adjustments and/or call provisions. Senior management monitors the loan portfolio closely to minimize past due loans and swiftly address potential problem loans. In addition to the internal business processes employed in the credit administration area, the Bank engages an outside or independent credit review firm to review the loan portfolio annually. Results of the credit review are used to validate our internal loan ratings and to review independent commentary on specific loans and loan administration activities.

Lending Limit. As of December 31, 2023, our legal lending limit for loans to one borrower was approximately $46.8 million. The Bank “in-house” lending limit is 50% of the legal lending limit for all relationships unless the loan is owner occupied, 1 - 4 family/residential or a government contract line of credit. If owner occupied, 1 - 4 family or a government contractor, the “in-house” lending limit is 90% of the legal lending limit for "Good" rated credits; 85% for "Standard" rated credits and 75% for "Acceptable" rated credits. Our loan policy prescribes a sub-limit to certain borrowers based upon our determination of each borrower’s credit quality. We routinely participate loan amounts in excess of our policy limits to other financial institutions.

For additional information, see Note 1 and Note 5 of Notes to Consolidated Financial Statements.

Investments and Funding. The Bank balances its liquidity needs based on loan and deposit growth through the investment portfolio and purchased funds. It is the Bank’s goal to provide adequate liquidity to support the loan growth of the Bank. In the event the Bank has excess liquidity, investment securities are used to generate additional income. In the event deposit growth does not fully support the Bank’s loan growth, the Bank will utilize deposit listing services, borrowed funds, or incorporate a combination of sales of investment securities, federal funds and other purchased/borrowed funds in order to augment the Bank’s funding position.

8

The current investment policy authorizes the Bank to invest in debt securities issued by the United States Government, agencies of the United States Government, or United States Government-sponsored enterprises. The policy permits investments in mortgage-backed securities, including pass-through securities, issued and guaranteed by Fannie Mae, Freddie Mac and Ginnie Mae. The investment policy also permits investments in federal funds and deposits in other insured institutions. In addition, management is authorized to invest in investment grade state and municipal obligations, private mortgage-backed securities, the subordinated debt of other financial institutions and equity investments in funds designed to help LMI geographies. The Bank does not engage in any hedging or trading activities in its investment portfolio. The Company is also the owner and beneficiary of bank owned life insurance (BOLI) policies on certain current and former Bank employees. These policies generate income and can be liquidated, if necessary, with associated tax costs.

Generally accepted accounting principles require that, at the time of purchase, the Bank designate a security as “held-to-maturity,” “available-for-sale,” or “trading,” depending on our ability and intent to hold such security. Debt securities available for sale are reported at fair value, while debt securities held to maturity are reported at amortized cost. The Bank does not maintain a trading portfolio. Establishing a trading portfolio would require specific authorization by the Board of Directors.

The investment portfolio is actively managed and consists of investments classified as available-for-sale and held-to-maturity. Under the available-for sale classification, investment instruments may be sold as deemed appropriate by management. On a monthly basis, the investment portfolio is marked to market as required by ASC 320. Additionally, the investment portfolio is used to balance the Bank’s asset and liability position. The Bank invests in fixed rate or floating rate instruments as necessary to reduce interest rate risk exposure.

At December 31, 2023, the held-to-maturity portfolio, which is primarily composed of municipal securities and is carried at amortized cost, totaled $17.3 million. At that date, the available-for-sale portfolio, which is composed of U.S. Treasury securities, collateralized mortgage-backed securities, subordinated debt of other financial institutions and U.S. Government agency securities and is carried at fair value, totaled $59.9 million. For additional information, see Note 3 of Notes to Consolidated Financial Statements.

Subordinated Notes. In April of 2021, the Company completed an issuance and sale of $30 million in fixed-to-floating subordinated notes at an annual fixed interest rate of 3.75% until April 15, 2026. The net proceeds were used to fully call subordinated notes issued in 2016 and to support additional growth for other general business purposes. After April 15, 2026, the notes will have a floating interest rate based on three-month SOFR rate plus 302 basis points (3.02%) (computed on the basis of a 360-day year of twelve 30-day months) from and including April 15, 2026, to the maturity date or any early redemption date. Interest will be paid semi-annually, in arrears, on July 1 and January 1 of each year during the time that the notes remain outstanding through the fixed interest rate period or earlier redemption date. Interest will be paid quarterly, in arrears, on April 15, July 15, October 15 and January 15 throughout the floating interest rate period or earlier redemption date.

On March 1, 2022, the Company completed the issuance of $43.8 million in aggregate principal amount of fixed-to-floating rate subordinated notes in a private placement transaction to various accredited investors. The net proceeds of the offering have been and will be used to support growth and for other general business purposes. The notes have a maturity date of March 15, 2032, and have an annual fixed interest rate of 4.00% until March 15, 2027. Thereafter, the notes will have a floating interest rate based on three-month SOFR rate plus 233 basis points (2.33%) (computed on the basis of a 360-day year of twelve 30-day months) from and including March 15, 2027, to the maturity date or any early redemption date. Interest will be paid semi-annually, in arrears, on March 15 and September 15 of each year during the time that the notes remain outstanding through the fixed interest rate period or earlier redemption date. Interest will be paid quarterly, in arrears, on March 15, June 15, September 15 and December 15 throughout the floating interest rate period or earlier redemption date.

Deposit Activities. Deposits are the major source of funding for the Bank. The Bank offers a broad array of deposit products that include demand, NOW, money market and savings accounts as well as certificates of deposit. The Bank typically pays a competitive rate on the interest-bearing deposits. As a relationship-oriented organization, we seek generally to obtain deposit relationships with our loan clients.

We offer a full range of consumer and commercial deposit products, including on-line banking with bill pay, cash management, sweep accounts, wire transfer, check imaging, remote deposit capture and courier services.

As the Bank’s overall balance sheet positions dictate, we may become more or less competitive in our interest rate structure as our liquidity position changes. Additionally, we may use wholesale deposits through sources such as deposit listing services, school systems, government entities and other sources to augment our funding position.

We can also arrange for FDIC insurance for deposits up to $50 million through CDARS, the Certificate of Deposit Account Registry Service, which provides a convenient method for a depositor to enjoy full FDIC insurance on deposits up to $50 million through a single banking relationship.

For additional information on deposits, see Note 9 of Notes to Consolidated Financial Statements.

Banking-as-a-Service (BaaS). Beginning in 2016, the Board and management identified an opportunity for alternative sources of low-cost deposits and fee income. We determined that Financial Technology (“FinTech”) companies were making significant inroads into banking, and we expanded our strategic plan to include banking customers that require BaaS and other payment service solutions.

Consistent with our culture, we worked over the past seven years with a small group of clients in order to understand the risks associated with this business line. We developed an infrastructure to identify, measure, monitor and control the risks associated with FinTechs, providing BaaS, and payment systems in general. We designed and implemented comprehensive legal, strategic, procedural and policy documents to guide business opportunities.

9

We are designing Avenu to be a comprehensive solution that provides FinTechs with an array of embedded banking services they may offer to their customers in a scalable cloud-based platform. We guide our FinTech partners through the complex maze of banking regulations by integrating compliance and fraud detection throughout the framework of our solution as well as in-person training for FinTech partners' team members. We have developed a live sandbox for our FinTech partners to provide a proof of concept and allow for quick integration and time to market when they are ready to “go-live.”

Our subledger, combined with our high-touch compliance training, goes beyond the industry standards to ensure that our FinTech partners will operate successfully. We believe partnering with FinTechs will provide an opportunity to access untapped markets and will become a fresh source for growth in low-cost deposits and fee income.

We will continue to support the FinTech industry. Consumers in the United States express more confidence banking with FinTechs than traditional banks in many cases. As a business-focused community bank, we see FinTechs as a natural way for us to expand our footprint into consumer banking opportunities.

Competition. We face significant competition for the origination of loans and the attraction of deposits. Our competition for loans comes primarily from financial institutions in our market area and, to a lesser extent, from other financial service providers, such as mortgage companies and mortgage brokers. Competition for loans also comes from the increasing number of non-depository financial service companies entering the mortgage market, such as insurance companies, securities companies and specialty finance companies. Our most direct competition for deposits has historically come from other financial institutions operating in our market area. We also face competition for investors’ funds from money market funds, mutual funds and other corporate and government securities.

Board Leadership and Oversight

The Board of Directors combines the position of Chairman of the Board with the position of Chief Executive Officer, coupled with a Lead Independent Director position to further strengthen the Company's corporate governance structure. Terry Saeger serves as Vice Chairman of the Board and Lead Independent Director. The Board of Directors believes this provides an efficient and effective leadership model for the Company.

The Board of Directors also believes administration of its risk oversight function is enhanced by the Board's leadership structure. To assure effective independent oversight, the Board has adopted appropriate governance practices, including:

Risk Management

The Board of Directors is actively involved in oversight of risks that could affect the Company. This oversight is conducted in part through the Audit and Risk Committee of the Board of Directors, but the full Board of Directors has retained responsibility for general oversight of risks. The Chief Risk Officer and Chief Compliance Officer have reporting lines to the Audit and Risk Committee and are free to contact independent Directors whenever they feel the need to do so.

The Board of Directors satisfies this responsibility through full reports by the Audit and Risk Committee regarding its considerations and actions, regular reports directly from officers responsible for oversight of risks within the Company as well as through internal and external audits. The Audit and Risk Committee conducts an annual assessment of its performance and capabilities.

Risks relating to the direct operations of the Bank are further overseen by the Board of Directors of the Bank. The Board of Directors of the Bank also has additional committees that conduct risk oversight separate from the Company. Further, the Board of Directors oversees risks through the establishment of policies and procedures that are designed to guide daily operations in a manner consistent with applicable laws, regulations and risks acceptable to the organization.

Risk is inherent with every business, particularly financial institutions. We face a number of risks, including credit risk, interest rate risk, liquidity risk, operational risk, legal risk, strategic risk and reputation risk. Management is responsible for the day-to-day management of the risks the Company faces, while the Board has responsibility for the oversight of risk management. In its risk oversight role, the Board of Directors has the responsibility to satisfy itself that the risk management processes designed and implemented by management are adequate and functioning as designed. Senior management meets regularly to discuss strategy and risks facing the Company. Senior management attends the Board meetings and is available to address any questions or concerns raised by the Board on risk management and any other matters. The independent members of the Board provide independent oversight of the Company's management and affairs.

10

Environmental, Social, and Governance

At MainStreet Bancshares Inc., our overarching focus is to make a positive impact on the communities we serve. The Board and management are aligned regarding the growing importance of Environmental, Social and Governance (ESG) initiatives, and we believe that an emphasis on sustainability can strengthen risk management and enhance value. We are, in many ways, at the beginning of our ESG journey. As we look to the future, we recognize that ESG initiatives require a commitment to the long term, and making an impact requires a willingness to listen to, learn from, and work with stakeholders across our community. Fortunately, this approach is second nature to community banks; the challenge is to harness information. We are undertaking efforts to quantify how we make a tangible difference in the communities where we live, play and work.

Environmental

The Company has a goal of reducing its carbon emissions each year.

MainStreet Bank’s origins as a “branch-lite” financial institution mean that we have been and will continue to be part of the transition to a sustainable economy that is kinder to our environment because it is less dependent on carbon fuels. Most banks the Company’s size have 20+ branches. The Bank has six locations. The Company has adopted a strategy of Put Our Bank in Your Office®, which also allows customers to conduct business with us without traveling to the Bank. On average, more than 70% of daily transactions are processed by our customers without the need to come to the Bank. These changes were underway at the Bank long before COVID-19 forced behavioral patterns in our society to change. For business operators in particular, our remote banking solutions have reduced the need to make frequent visits to a branch bank to deposit cash and checks. This helps to reduce vehicular traffic in our already crowded market.

The Company has converted all lighting to LED, scheduled HVAC units for maximum efficiency during off-work hours, incorporated mini-split units for specific location heating and cooling, tinted windows to reduce cooling needs and increased the number of indoor plants to improve air quality.

The Company has also added charging stations to accommodate employees who drive electric vehicles and encourages the purchase of hybrid vehicles.

We recognize the growing environmental risks of electronic waste and have procedures in place to reduce our impact in this regard. For example, MainStreet Bank contracts with an asset disposal company to ensure that electronic assets, including monitors, security cameras, and batteries, are disposed of and recycled in an appropriate and environmentally sensitive manner.

We have long allowed and even encouraged our employees to telecommute. Approximately 13% of our employees work remotely full-time. All but our relatively lean team of branch staff are eligible to telecommute, and most do so at least a few days a month. These arrangements give us a broader and more diverse pool of applicants in recruiting, and also serve to reduce our employees’ carbon footprint.

In our lending portfolio, we seek opportunities to support energy efficiency and renewable energy.

Social

In 2022, the establishment of MainStreet Community Capital is another business initiative we have taken to support ESG initiatives in our communities. MainStreet Community Capital's focus is to invigorate distressed, low-income communities in the Washington, D.C., metropolitan area by providing capital and other financial services. These investments are intended to spur the creation of quality jobs and services in underserved areas. MainStreet Community Capital has earned its designation as a Community Development Entity (CDE) as defined under the U.S. Treasury Department's Community Development Financial Institution (CDFI) Fund. MainStreet Community Capital has applied to the CDFI Fund for an allocation of the New Markets Tax Credits , and plans to continue to do so annually.

Turning to our staff, as of December 31, 2023, the Company employed 186 full-time employees. None of our employees are represented by a collective bargaining agreement.

The Board and management are focused on maintaining a strong corporate culture. The Company’s goal is to always hire the most qualified individuals. The Company is located in a diversely populated geography, and the Company’s workforce effectively represents that diversity. We believe that a diverse workforce enhances our ability to serve our customers and our communities by enabling us to better understand their financial needs and to provide necessary and appropriate financial services.

Seventy-four percent of the Company’s employees self-identify as either female or ethnically diverse (defined as all Equal Employment Opportunity Commission classifications other than white). The Company is proud to have three veterans on its team as well.

11

Governance

As indicated in the discussion of Board Leadership and Oversight, the Company believes effective oversight by the Board of Directors is an essential element of a financially sound and well-managed bank. The Board establishes the Company’s risk philosophy, ensures that it has an appropriate risk-management framework, determines the overall business strategy, and monitors implementation of strategy.

To maintain the high caliber of our Board, the Company invests regularly in director education. Additionally, our directors establish and adhere to a rigorous Code of Ethics and Business Conduct. We seek highly qualified directors with skills needed for a forward-looking Board. The Company had a technology expert on the Board in 2011, well before it became a recommended practice for community banks.

At the Board level, the Company has seven independent directors, out of a total of ten. The total of ten includes one director who stepped down from management in March 2022 and thus will become an independent director in March 2025. Two of the independent directors self-identify as female, one self-identifies as an African-American male and one self-identifies as a Hispanic male. Three of the independent directors self-identify as white males.

Diversity is one factor taken into account when considering candidates to serve on the Board of Directors. The Board believes that diversity supports its goal of best serving the Company and our shareholders, customers and employees. The matrix below summarizes the self-identified diversity attributes of our Board members. The categories listed below have the meanings defined in Nasdaq Listing Rule 5605(f)(1).

Board Size:

Total Number of Directors 10

Gender: Male Female Non-Binary Gender Undisclosed

Number of directors based on gender identity 8 2 — —

Number of directors who identify in any of the categories below:

African American or Black 1 — — —

Alaskan Native or American Indian — — — —

Asian — — — —

Hispanic or Latinx 1 — — —

Native Hawaiian or Pacific Islander — — — —

White 6 2 — —

Two or More Races or Ethnicities — — — —

LQBTQ+ —

Undisclosed —

12

Title Ethnically Diverse Female Ethnically Diverse Male White Female White Male

The Company is focused on equal pay for equal work, and on developing all employees to reach their full potential. The Company realizes that hiring a diverse workforce that is representative of the diversity of the local population also allows us to better serve our marketplace.

Employee Age Diversity

The age distribution of our employee base is also appropriately diversified.

13

The age distribution of our employees as denoted by generational categories.

Employees by Generation

Pre Baby Booms 0.5 %

Baby Boomers 15.6 %

Generation X 43.5 %

Millennials 34.4 %

Generation Z 6.0 %

The gender distribution of our employee base is diversified.

Employees by Gender

For the fiscal year ended December 31, 2023, we had 48 promotions. These promotions were distributed as follows:

2023 Promotions Diversity

Ethnically Diverse White

The Company celebrates diversity throughout the year and fosters opportunities to learn about different cultures, religious practices, traits and differences. The Company finds that doing so brings out the best in the team as we grow together to exceed customer expectations and create shareholder value.

Supervision, Regulation and Other Factors

General. The Company is a bank holding company that has elected status as a financial holding company. As such, the Company is subject to extensive regulation under the Bank Holding Company Act of 1956 and to the examination and reporting requirements of the Federal Reserve. The Company is also subject to the rules and regulations of the SEC under the federal securities laws.

As a Virginia-chartered bank that is a member of the Federal Reserve System, the Bank is subject to regulation, supervision and examination by the Bureau and the Federal Reserve. State and federal laws also govern the activities in which the Bank engages, the investments that it makes and the aggregate amount of loans that may be granted to one borrower. The Bureau and the Federal Reserve also regulate the branching authority of the Bank. In addition, various consumer and compliance laws and regulations affect the Bank’s operations.

The earnings of the Company’s subsidiaries, and therefore the earnings of the Company, are affected by general economic conditions, management policies, changes in state and federal legislation and actions of various regulatory authorities, including those referred to above. The following description summarizes some of the significant state and federal and state laws to which the Company and the Bank are subject. To the extent that statutory or regulatory provisions or proposals are described, the description is qualified in its entirety by reference to the particular statutory or regulatory provisions or proposals.

The statutes, regulations and policies that govern our operations are under continuous review and are subject to amendment from time to time by Congress, the Virginia legislature and federal and state regulatory agencies. Any such future statutory or regulatory changes could adversely affect our operations and financial condition.

Regulation of the Bank. The Bank is subject to regulation and supervision by the Bureau and by the Federal Reserve, which regulation and supervision extends to all aspects of its operations, including but not limited to requirements concerning an allowance for credit losses, lending and mortgage operations, interest rates received on loans and paid on deposits, the payment of dividends to the Company, loans to officers and directors, mergers and acquisitions, capital adequacy, and the opening and closing of branches.

As a state-chartered bank that is a member of the Federal Reserve System, the Bank is subject to periodic examinations by the Bureau and by the Federal Reserve Bank of Richmond. In these examinations, the examiners assess compliance with state and federal banking regulations and the safety and soundness standards in such matters as loan underwriting and documentation, asset quality, earnings standards, internal controls and audit systems, interest rate risk exposure, and employee compensation and benefits.

The Bureau and the Federal Reserve have enforcement responsibility over the Bank and the authority to bring actions against the Bank and certain institution-affiliated parties, including officers, directors, and employees, for violations of laws or regulations and for engaging in unsafe and unsound practices. Formal enforcement actions include the issuance of a capital directive or cease and desist order, civil money penalties, removal of officers and/or directors, and receivership or conservatorship of the institution.

Insurance of Deposit Accounts.The FDIC insures deposits at federally insured financial institutions like the Bank. Deposit accounts in the Bank are insured by the FDIC generally up to a maximum of $250,000 per separately insured depositor and up to a maximum of $250,000 for self-directed retirement accounts.

The FDIC charges insured depository institutions assessments to maintain the Deposit Insurance Fund (the "DIF"). Assessment rates for small institutions (those with less than $10 billion in assets) are based on an institution’s weighted average CAMELS component ratings and certain financial ratios and are applied to the institution’s assessment base, which equals its average total assets minus its average tangible equity.

14

In October 2022, the FDIC adopted a final rule that increased the initial base deposit insurance assessment rate schedules uniformly by 2 basis points beginning with the first quarterly assessment period of 2023. The FDIC increased the insurance assessment rates in response to the 2020 decline in the DIF reserve ratio below the statutory minimum of 1.35% established by the Dodd-Frank Wall Street Reform and Consumer Protection Act (the “Dodd-Frank Act”), and the increased assessment is expected to improve the likelihood that the reserve ratio would be restored to 1.35% by September 30, 2028 prescribed under the FDIC’s restoration plan. The FDIC’s assessment rates effective January 1, 2023 (which are subject to certain adjustments) range from 3 to 16 basis points for institutions with CAMELS composite ratings of 1 or 2, 6 to 30 basis points for those with a CAMELS composite score of 3, and 16 to 30 basis points for those with CAMELS Composite scores of 4 or 5.

The FDIC has authority to increase insurance assessments. Any significant increases would have an adverse effect on the operating expenses and results of operations of the Bank. We cannot predict what the FDIC assessment rates will be in the future.

Insurance of deposits may be terminated by the FDIC upon a finding that an institution has engaged in unsafe or unsound practices, is in an unsafe or unsound condition to continue operations, or has violated any applicable law, regulation, rule, order or condition imposed by the FDIC. We do not know of any practice, condition or violation that may lead to termination of our deposit insurance.

Wholesale Deposits. The Company will refer to brokered deposits as wholesale deposits for the entirety of this filing. The Federal Deposit Insurance Act prohibits an insured depository institution from accepting wholesale deposits or offering interest rates on any deposits significantly higher than the prevailing rate in the bank’s normal market area or nationally (depending upon where the deposits are solicited), unless it is well-capitalized or is adequately capitalized and receives a waiver from the FDIC. A depository institution that is adequately capitalized and accepts wholesale deposits under a waiver from the FDIC may not pay an interest rate on any deposit in excess of national and local rate caps set by the FDIC and published on its website.

Regulatory Capital Requirements.The Bank is required to comply with applicable capital adequacy requirements adopted by the Federal Reserve and the other federal bank regulatory agencies (the “Basel III Capital Rules”). The Basel III Capital Rules apply to all depository institutions as well as to all top-tier bank and savings and loan holding companies that are not subject to the Federal Reserve’s Small Bank Holding Company Policy Statement. The capital requirements are quantitative measures established by regulation that require the Bank to maintain minimum amounts and ratios of capital. Failure to meet minimum capital requirements can initiate certain mandatory and possibly additional discretionary actions by bank regulators that, if undertaken, could have a direct material effect on the Company’s financial statements.

The Basel III Capital Rules require the maintenance of “Common Equity Tier 1” (“CET1”) capital, Tier 1 capital and Total capital to risk-weighted assets of at least 4.5%, 6% and 8%, respectively. The capital rules also establish a minimum leverage ratio of at least 4% Tier 1 capital to average consolidated assets. In addition to the above minimum requirements, the Basel III Capital Rules limits capital distributions and certain discretionary bonus payments if a banking organization does not hold a “capital conservation buffer” consisting of 2.5% of CET1 capital to risk-weighted assets above the amount necessary to meet its minimum risk-based capital requirements. The capital conservation buffer requirement effectively increases the minimum required risk-based capital ratios to 7% for CET1, 8.5% for Tier 1 capital and 10.5% for Total capital.

In determining the amount of risk-weighted assets for purposes of calculating risk-based capital ratios, a bank’s assets, including certain off-balance sheet assets (e.g., recourse obligations, direct credit substitutes and residual interests), are multiplied by a risk weight factor assigned by the capital regulations based on the risk deemed inherent in the type of asset. Higher levels of capital are required for asset categories believed to present greater risk. For example, a risk weight of 0% is assigned to cash and U.S. government securities, a risk weight of 50% is generally assigned to prudently underwritten first lien one- to four-family residential mortgages, a risk weight of 100% is assigned to commercial and consumer loans, a risk weight of 150% is assigned to non-residential mortgage loans that are 90 days past due or otherwise on non-accrual status, and a risk weight of between 0% to 600% is assigned to permissible equity interests, depending on certain specified factors.

Under applicable federal statute, the federal bank regulatory agencies are required to take “prompt corrective action” with respect to institutions that do not meet specified minimum capital requirements. For these purposes, the statute establishes five capital categories: well- capitalized, adequately capitalized, undercapitalized, significantly undercapitalized and critically undercapitalized. Under the implementing regulations, in order to be considered well-capitalized, a bank must have a ratio of CET1 capital to risk-weighted assets of 6.5%, a ratio of Tier 1 capital to risk-weighted assets of 8%, a ratio of total capital to risk-weighted assets of 10%, and a leverage ratio of 5%. In order to be considered adequately capitalized, a bank must have the minimum capital ratios required by the regulatory capital rule described above. Institutions with lower capital ratios are assigned to lower capital categories. Based on safety and soundness concerns, a bank may be assigned to a lower capital category than would otherwise apply based on its capital ratios. A bank that is not well-capitalized is subject to certain restrictions on wholesale deposits and interest rates on deposits. A bank that is not at least adequately capitalized is subject to numerous additional restrictions, and a guaranty by its holding company is required. A bank with a ratio of tangible equity to total assets of 2.0% or less is subject to the appointment of the FDIC as receiver if its capital level does not improve within 90 days.

As of December 31, 2023, the Bank was in compliance with all regulatory capital standards and qualified as “well-capitalized,” under the prompt correction action regulations. See Note16 of Notes to Consolidated Financial Statements.

Transactions with Related Parties. The Bank is subject to the Federal Reserve’s Regulation W, which comprehensively implements the restrictions of Sections 23A and 23B of the Federal Reserve Act on transactions between a bank and its “affiliates.” The sole “affiliate” of the Bank, as defined in Regulation W, is the Company. Section 23A and the implementing provisions of Regulation W generally place limits on the amount of a bank’s loans or extensions of credit to, investments in, or certain other transactions with its affiliates, and on the amount of advances to third parties collateralized by the securities or obligations of affiliates. Section 23B and Regulation W generally require a bank’s transactions with affiliates to be on terms substantially the same, or at least as favorable to the bank, as those prevailing at the time for comparable transactions with non-affiliated companies.

15

The Bank is also subject to certain restrictions on extensions of credit to executive officers, directors, certain principal shareholders and their related interests. Such extensions of credit must be made on substantially the same terms, including interest rates and collateral, as those prevailing at the time for comparable transactions with third parties and must not involve more than the normal risk of repayment or present other unfavorable features.

Community Reinvestment Act and Fair Lending Laws. All insured depository institutions have a responsibility under the Community Reinvestment Act of 1977 (the “CRA”) and federal regulations thereunder to help meet the credit needs of their communities, including low- and moderate-income neighborhoods. In connection with its examination of a state-chartered Federal Reserve member bank like the Bank, the Federal Reserve is required to assess our record of meeting the credit needs of our entire community. The CRA requires the Bank’s record of compliance with the CRA to be taken into account in the evaluation of applications by the Bank or the Company for approval of an expansionary proposal, such as a merger or other acquisition of another bank or the opening of a new branch office. The Bank received an “Outstanding” CRA rating in its most recent assessment received on August 22, 2022 by the Federal Reserve.

In October 2023, the Federal Reserve, the Office of the Comptroller of the Currency, and the FDIC issued a final rule to strengthen and modernize the CRA regulations. Under the final rule a bank with assets of at least $600 million as of December 31 in both the prior two calendar years and less than $2 billion as of December 31 in either of the prior two calendar years will be an “intermediate bank,” and a bank with assets of at least $2 billion as of December 31 in both of the prior two calendar years will be a “large bank.” The agencies will evaluate large banks under four performance tests: the Retail Lending Test, the Retail Services and Products Test, the Community Development Financing Test, and the Community Development Services Test. The agencies will evaluate intermediate banks under the Retail Lending Test and either the current community development test, referred to in the final rule as the Intermediate Bank Community Development Test, or, at the bank’s option, the Community Development Financing Test. The applicability date for the majority of the provisions in the CRA regulations is January 1, 2026, and additional requirements will be applicable on January 1, 2027. Those regulations are not currently effective, and management has not determined the impact of the new regulations on the Bank.

In addition, the Equal Credit Opportunity Act and the Fair Housing Act prohibit lenders from discriminating in their lending practices on the basis of characteristics specified in those statutes. A failure to comply with the Equal Credit Opportunity Act or the Fair Housing Act could result in enforcement actions by a bank’s principal federal regulatory agency, as well as by other federal regulatory agencies or the Department of Justice.

Other Consumer Protection Laws.The Bank’s lending and deposit-taking operations are subject to numerous other federal and state laws designed to protect consumers. The Consumer Financial Protection Bureau (“CFPB”) issues regulations and standards under the federal consumer protection laws, which include, among others, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, the Truth in Lending Act, the Electronic Fund Transfer Act, the Truth in Savings Act, the Fair Credit Reporting Act, and the Dodd-Frank Act’s prohibition on unfair, deceptive or abusive acts or practices. The Bank’s consumer financial products and services are subject to examination by the Federal Reserve for compliance with these and other CFPB regulations and standards.

In addition, customer privacy statutes and regulations limit the ability of the Bank to disclose nonpublic consumer information to non-affiliated third parties. These laws require us to provide notice to our customers regarding privacy policies and practices and to give our customers an option to prevent their non-public personal information from being shared with non-affiliated third parties or with our affiliates.

Cybersecurity. The federal bank regulatory agencies have adopted guidelines for establishing information security standards and cybersecurity programs for implementing safeguards under the supervision of a banking organization’s board of directors. This guidance, along with related regulatory materials, increasingly focus on risk management and processes related to information technology and the use of third parties in the provision of financial products and services. The federal bank regulatory agencies expect financial institutions to establish appropriate security controls and to ensure that their risk management processes address the risk posed by compromised customer credentials, and also expect financial institutions to maintain sufficient business continuity planning processes to ensure rapid recovery, resumption and maintenance of the institution’s operations after a cyberattack. If we fail to meet the expectations set forth in such regulatory guidance, we could be subject to various regulatory sanctions, including financial penalties.

In November 2021, the federal bank regulatory agencies issued a final rule to improve the sharing of information about cyber incidents that may affect the U.S. banking system. The rule, which became effective on May 1, 2022, requires a banking organization to notify its primary federal regulator within 36 hours of determining that a “computer-security incident” has materially affected – or is reasonably likely to materially affect – the viability of the banking organization’s operations, its ability to deliver banking products and services, or the stability of the financial sector. In addition, the rule requires a bank service provider to notify affected banking organization customers as soon as possible when the provider determines that it has experienced a computer-security incident that has materially affected or is reasonably likely to materially affect banking organization customers for four or more hours.

To date, neither the Company nor the Bank has experienced a significant compromise, significant data loss, or material financial losses related to cybersecurity attacks, but its systems and those of its customers and third-party service providers are under constant threat, and it is possible that the Company or the Bank could experience a significant event in the future. Risks and exposures related to cybersecurity attacks are expected to remain high for the foreseeable future due to the rapidly evolving nature and sophistication of these threats, as well as due to the expending use of Internet banking, mobile banking, and other technology-based products and services by the Company and the Bank and their customers.

Bank Secrecy Act / Anti-Money Laundering Laws. The Bank is subject to the Bank Secrecy Act and other anti-money laundering laws and regulations, including the USA PATRIOT Act of 2001 and the Anti-Money Laundering Act of 2020. These laws and regulations require the Bank to implement policies, procedures, and controls to detect, prevent, and report money laundering and terrorist financing and to verify the identity of their customers. Violations of these requirements can result in substantial civil and criminal sanctions. In addition, provisions of the USA PATRIOT Act require the federal financial institution regulatory agencies to consider the effectiveness of a financial institution's anti-money laundering activities when reviewing mergers and acquisitions.

Loans and Investments. State commercial banks have authority to originate and purchase any type of loan, including commercial, commercial real estate, residential mortgage or consumer loans. Aggregate loans by a state commercial bank to any single borrower or group of related borrowers are generally limited to 15% of the Bank’s capital stock, surplus and loan loss reserve.

Federal and state laws and regulations limit the Bank’s investment authority. Generally, a state member bank is prohibited from investing in corporate equity securities for its own account other than the equity securities of companies through which the bank conducts its business. Under federal and state regulations, a state member bank may invest in investment securities for its own account up to specified limits depending upon the type of security. “Investment securities” are generally defined as marketable obligations that are rated investment grade and not predominantly speculative in nature.

Commercial Real Estate Lending Concentrations. The federal banking agencies have issued guidance on sound risk management practices for concentrations in commercial real estate lending. The particular focus is on exposure to commercial real estate loans that are dependent on the cash flow from the real estate held as collateral and that are likely to be sensitive to conditions in the commercial real estate market (as opposed to real estate collateral held as a secondary source of repayment or as an abundance of caution). The purpose of the guidance is not to limit a bank’s commercial real estate lending but to guide banks in developing risk management practices and capital levels commensurate with the level and nature of real estate concentrations. The guidance directs the federal banking agencies to focus their supervisory resources on institutions that may have significant commercial real estate loan concentration risk. A bank that has experienced rapid growth in commercial real estate lending, has notable exposure to a specific type of commercial real estate loan, or is approaching or exceeding the following supervisory criteria may be identified for further supervisory analysis with respect to real estate concentration risk:

The guidance provides that the strength of an institution’s lending and risk management practices with respect to such concentrations will be taken into account in supervisory guidance on evaluation of capital adequacy.

16

Regulation of the Company. The Company is a bank holding company under the Bank Holding Company Act that has elected status as a financial holding company. As such, we are subject to regulation, supervision, and examination by the Federal Reserve. We are required to file quarterly reports with the Federal Reserve and provide such additional information as the Federal Reserve may require. The Federal Reserve has extensive enforcement authority over bank holding companies, including, among other things, the ability to assess civil money penalties, to issue cease and desist or removal orders and to require that a holding company divest subsidiaries (including its bank subsidiaries). In general, enforcement actions may be initiated for violations of law and regulations and unsafe or unsound practices. We are also required to file certain reports with, and otherwise comply with the rules and regulations of, the SEC.

Regulatory Capital Requirements. The federal regulatory capital rules apply to all depository institutions as well as to bank holding companies with consolidated assets of $3 billion or more. However, the regulatory capital requirements generally do not apply on a consolidated basis to a bank holding company with total consolidated assets of less than $3 billion unless the holding company: (1) is engaged in significant nonbanking activities either directly or through a nonbank subsidiary; (2) conducts significant off-balance sheet activities (including securitization and asset management or administration) either directly or through a nonbank subsidiary; or (3) has a material amount of debt or equity securities outstanding (other than trust preferred securities) that are registered with the SEC. The Federal Reserve may apply the regulatory capital standards at its discretion to any bank holding company, regardless of asset size, if such action is warranted for supervisory purposes.

Because the Company has total consolidated assets of less than $3 billion and does not engage in activities that would trigger application of the federal regulatory capital rules, it is not at present subject to consolidated capital requirements under such rules.

Acquisitions. Under the Bank Holding Company Act, we are required to obtain the prior approval of the Federal Reserve to acquire ownership or control of more than 5% of the voting shares or substantially all of the assets of any bank holding company or bank or merge or consolidate with another bank holding company. Federal law authorizes bank holding companies to make interstate acquisitions of banks without geographic limitation.

Permissible Activities. In general, the Bank Holding Company Act limits the activities of a bank holding company to those of banking, managing or controlling banks, or any other activity that the Federal Reserve has determined to be so closely related to banking or to managing or controlling banks that an exception is allowed for those activities. A bank holding company that qualifies and elects to be treated as a “financial holding company” may engage in a broad range of additional activities that are (i) financial in nature or incidental to such financial activities or (ii) complementary to a financial activity and do not pose a substantial risk to the safety and soundness of depository institutions or the financial system generally. These activities include securities underwriting and dealing, insurance agency and underwriting, and making merchant banking investments. On October 12, 2021, the Company filed an election to be treated as a financial holding company.

To maintain financial holding company status, a financial holding company and all of its depository institution subsidiaries must be “well capitalized” and “well managed” as defined under applicable Federal Reserve requirements. If a financial holding company ceases to meet these capital and management requirements, the Federal Reserve’s regulations provide that the financial holding company must enter into an agreement with the Federal Reserve to comply with all applicable capital and management requirements. Until the financial holding company returns to compliance, the Federal Reserve may impose limitations or conditions on the conduct of its activities, and the company may not commence any of the broader financial activities permissible for financial holding companies or acquire a company engaged in such financial activities without prior approval of the Federal Reserve. If the company does not return to compliance within 180 days, the Federal Reserve may require the financial holding company to divest its depository institution subsidiaries or to cease engaging in any activity that is financial in nature (or incident to such financial activity) or complementary to a financial activity. In order for a financial holding company to commence any new activity permitted by the Bank Holding Company Act or to acquire a company engaged in any new activity permitted by the Bank Holding Company Act, each insured depository institution subsidiary of the financial holding company must have received a rating of at least “satisfactory” in its most recent examination under the CRA. See “Regulation of the Bank-Community Reinvestment Act and Fair Lending Laws.”

Despite prior approval, the Federal Reserve may order a bank holding company or its subsidiaries to terminate any activity or to terminate ownership or control of any subsidiary when the Federal Reserve has reasonable cause to believe that a serious risk to the financial safety, soundness, or stability of any bank subsidiary of that bank holding company may result from such an activity.

Incentive Compensation. Federal banking agencies have issued guidance on incentive compensation policies intended to ensure that the incentive compensation policies of banking organizations do not undermine the safety and soundness of such organizations by encouraging excessive risk-taking. The guidance, which covers all employees that have the ability to materially affect the risk profile of an organization, is based upon the key principles that a banking organization’s incentive compensation arrangements should (i) provide incentives that do not encourage risk-taking beyond the organization’s ability to effectively identify and manage risks, (ii) be compatible with effective internal controls and risk management, and (iii) be supported by strong corporate governance, including active and effective oversight by the organization’s board of directors. In accordance with federal statute, the federal banking agencies prohibit incentive-based compensation arrangements that encourage inappropriate risk taking by covered financial institutions (generally institutions that have over $1 billion in assets) and are deemed to be excessive, or that may lead to material losses.

The Federal Reserve reviews, as part of its standard, risk-focused examination process, the incentive compensation arrangements of banking organizations (such as the Company) that are not “large, complex banking organizations.” These reviews are tailored to each organization based on the scope and complexity of the organization’s activities and the prevalence of incentive compensation arrangements. The findings of the supervisory initiatives will be included in reports of examination. Deficiencies are incorporated into the organization’s supervisory ratings, which can affect the organization’s ability to make acquisitions and take other actions. Enforcement actions may be taken against a banking organization if its incentive compensation arrangements, or related risk-management control or governance processes, pose a risk to the organization’s safety and soundness and the organization is not taking prompt and effective measures to correct the deficiencies. The scope and content of the U.S. banking regulators’ policies on executive compensation is likely to continue to evolve. It cannot be determined at this time whether compliance with such policies will adversely affect the Company’s ability to hire, retain and motivate its key employees.

In 2022, the SEC adopted a final rule directing national securities exchanges, including Nasdaq, to establish listing standards requiring listed companies to adopt policies providing for the recovery or “clawback” of excess incentive-based compensation earned by current or former executive officers during the three fiscal years preceding the date the listed company determines an accounting restatement is required. In June 2023, the SEC approved new listing standards for public companies, such as the Company, listed on Nasdaq. The new standards took effect on October 2, 2023, and require listed companies to adopt written clawback policies by December 1, 2023. On November 15, 2023, the Board of Directors of the Company adopted a Policy for Recovery of Erroneously Awarded Compensation (“Clawback Policy”), effective as of October 2, 2023. The Clawback Policy would be triggered by both “Big R” and “little r” restatements and apply to any incentive-based compensation that is granted, earned or vested based wholly or in part upon the attainment of a financial reporting measure. The Clawback Policy is filed as Exhibit 97.1 to this Annual Report on Form 10-K and is incorporated herein by reference.

Source of Strength. Under the Bank Holding Company Act, a bank holding company is required to act as a source of financial and managerial strength to each of its subsidiary banks and to commit resources to support each subsidiary bank. Under this source of strength doctrine, the Federal Reserve may require a bank holding company to make capital injections into a troubled subsidiary bank. The Federal Reserve may charge the bank holding company with engaging in unsafe and unsound practices if it fails to commit resources to such a subsidiary bank or if it undertakes actions that the Federal Reserve believes might jeopardize its ability to commit resources to such subsidiary bank. A capital injection may be required at times when the holding company does not have the resources to provide it.

In addition, any loans by a holding company to a subsidiary bank are subordinate in right of payment to deposits and to certain other indebtedness of such subsidiary bank. In the event of a bank holding company’s bankruptcy, the bankruptcy trustee will assume any commitment by the holding company to a federal bank regulatory agency to maintain the capital of a subsidiary bank. Moreover, the bankruptcy law provides that claims based on any such commitment will be entitled to a priority of payment over the claims of the institution’s general unsecured creditors, including the holders of its note obligations.

17

Dividends, Capital Distributions and Other Payments. There are various legal limitations applicable to the payment of dividends by the Bank to the Company, to the payment of dividends on capital stock and other distributions by the Company, and to the repurchase by the Company of its outstanding shares of capital stock. The Federal Reserve has issued guidance indicating that bank holding companies should generally pay dividends only if the company’s net income available to common shareholders over the past year has been sufficient to fully fund the dividends, and the prospective rate of earnings retention appears consistent with the company’s capital needs, asset quality and overall financial condition. The Federal Reserve’s guidance also states that a bank holding company should inform and consult with its regional Federal Reserve Bank in advance of declaring or paying a dividend that exceeds earnings for the period for which the dividend is being paid or that could result in a material adverse change to the organization’s capital structure. In addition, under Virginia law, the Company generally may not pay dividends or distributions to holders of common stock if it would be unable to pay its debts as they become due in the ordinary course of business or if its total assets would be less than the sum of its total liabilities plus the amount of the liquidation preference of any class of shares with superior rights than common stock.

As the majority of the Company’s revenues result from dividends paid to the Company by the Bank, the Company’s ability to pay dividends to our shareholders largely depends on the receipt of such dividends from the Bank. The Bank is subject to various laws and regulations limiting the amount of dividends that it can pay. Under Virginia law, without the permission of the Virginia State Corporation Commission, a state bank may not pay dividends, except from retained earnings. Under federal law applicable to state-chartered Federal Reserve member banks, a bank may not declare or pay a dividend without prior Federal Reserve approval if the total of all dividends declared during the calendar year, including the proposed dividend, exceeds the sum of the bank’s net income during the current calendar year and the retained net income of the prior two calendar years.

Bank regulatory agencies have the authority to prohibit the Bank or the Company from engaging in an unsafe or unsound practice in the conduct of their respective business. The payment of dividends, other capital distributions, or the repurchase of capital stock, depending on the financial condition of the Bank and/or the Company, could be deemed an unsafe or unsound practice.

No insured depository institution may pay a dividend if, after paying the dividend, the institution would be undercapitalized. In addition, as noted above, if the Bank does not maintain the capital conservation buffer required by applicable regulatory capital rules, its ability to pay dividends to the Company will be limited.

Future Regulation. From time to time, various legislative and regulatory initiatives are introduced in Congress and state legislatures, as well as by federal and state regulatory agencies. Such initiatives may include proposals to expand or contract the powers of bank holding companies and financial institutions or proposals to substantially change the regulatory system. Such initiatives could change banking statutes and our operating environment. If enacted or adopted, such initiatives could increase or decrease our cost of conducting business, limit or expand our permissible activities, or affect our competitive position. We cannot predict whether any such initiatives will be approved, and, if approved, the effect that they could have on our financial condition or results of operations.

Government Monetary Policies. Our results of operations are influenced by the monetary policies of regulatory authorities. Actions by the Federal Reserve impact market and general economic conditions. Federal Reserve policies can significantly affect market interest rates charged on loans or paid for deposits, as well as employment and inflation rates and investments. Federal Reserve monetary policies have had, and can be expected to continue to have, significant effects on financial institution results of operations.

Federal Securities Laws. The Company’s common stock and depositary shares (each representing a 1/40th interest in a share of 7.50% Series A Fixed-Rate Non-Cumulative Perpetual Preferred Stock) are registered under Section 12(b) of the Exchange Act, and the Company is subject to the periodic reporting and other requirements of the SEC under Section 12(b) of the Exchange Act and SEC regulations.

Our annual reports on Form 10-K, quarterly reports on Form 10-Q, and current reports on Form 8-K, and amendments to those reports, are available at no cost on our website, www.mstreetbank.com, as soon as reasonably practicable after we file, or furnish, such documents with the SEC. The information contained on our website is not part of this Annual Report on Form 10-K, nor incorporated by reference into this or any other SEC filing. Our SEC filings are also available at no cost through the SEC’s website at www.sec.gov.

18

Item 1A. Risk Factors

This section highlights material risks that the Company currently faces. Any of the risks described below, along with management’s discussion and analysis and the consolidated financial statements and footnotes, could materially adversely affect our business, financial condition, and results of operations. Additional risks of which management currently is not aware or which management currently considers to not be material may also adversely affect our business, financial condition and results of operations. There is no assurance that this section describes all potential risks to which the Company may be exposed.

Risks Related to Our Business

Credit and Lending Risks

Our business, like that of most banking organizations, is highly susceptible to credit risk.

As a lender, the Bank is exposed to the risk that borrowers will be unable to repay their loans according to terms of the loan agreements and that the collateral securing payment of the loans (if any) may not be sufficient to assure repayment. Credit losses could have a material adverse effect on our business, financial condition, and results of operations.

We have significant exposure to risks associated with commercial and residential real estate.

A substantial portion of our loan portfolio consists of commercial and residential real estate-related loans, including construction and residential and commercial mortgage loans. As of December 31, 2023, we had approximately $282.1 million of owner-occupied and $461.8 million of investment commercial real estate loans outstanding, which represented approximately 16.3% and 26.7%, respectively, of our loan portfolio as of December 31, 2023. As of that same date, we had approximately $429.6 million of construction real estate loans and $474.6 million of residential real estate loans, which represented 24.9% and 27.5% respectively.

The adverse consequences from real estate-related credit risks tend to be cyclical and are often driven by local and national economic developments that are not controllable or entirely foreseeable by us or our borrowers. As a result:

During the ordinary course of our business, we may foreclose on and take title to properties securing certain loans, in which event we become exposed to the costs and risks inherent in the ownership of commercial and residential real estate, which could have an adverse effect on our business, financial condition and results of operations. The amount that we, as a mortgagee, may realize after a default is dependent upon factors outside of our control, including:

• general or local economic conditions;

• environmental clean-up liabilities;

• neighborhood values;

• interest rates;

19

• real estate tax rates;

• operating expenses of the foreclosed properties;

• supply of and demand for rental units or properties;

• ability to obtain and maintain adequate occupancy of the properties;

• zoning laws;

• governmental rules, regulations and fiscal policies; and

• extreme weather conditions or other natural or man-made disasters.

Certain expenditures associated with the ownership of real estate, principally real estate taxes and maintenance costs, may also adversely affect our operating expenses.

In recent years commercial real estate markets both nationally and locally have been adversely affected by the COVID-19 pandemic. Remote employee work opportunities during the pandemic have impacted, and may continue to impact, the occupancy of commercial properties. Weakness in our commercial real estate market could result in an increased delinquency rate and losses from these loans. We believe that the resilience of our market and borrowers provides an ability to adjust to and withstand such risks. However, increased losses from this portfolio could have an adverse effect on our business, financial condition and results of operations.

Commercial and industrial loans may expose us to greater financial and credit risk than other loans.

Commercial and industrial loans can involve a greater degree of financial and credit risk than other loans, including less collateral at liquidation. Any significant failure to pay on time by these customers would hurt our earnings. The increased financial and credit risks associated with these types of loans result from several factors, including the concentration of principal in a limited number of loans and borrowers, the size of loan balances, the effects of general economic conditions on income-producing properties and the increased difficulty of evaluating and monitoring these types of loans and factors outside the borrowers' control such as adverse financial conditions and governmental regulations. In addition, when underwriting a commercial or industrial loan, we may take a security interest in commercial real estate, and, in some instances upon a default by the borrower, we may foreclose on and take title to the property, which may lead to additional risks for us under applicable environmental laws described below.

Thesmall-to-midsized businesses that we lend to may have fewer resources to weather adverse business developments, which may impair a borrower’s ability to repay a loan, and such impairment could have a material adverse effect on our business, financial condition and results of operations.

We focus our business development and marketing strategy primarily on small-to-midsized businesses. These businesses frequently have smaller market shares than their competition, may be more vulnerable to economic downturns, often need additional capital to expand or compete and may experience volatility in operating results, any of which may impair a borrower’s ability to repay a loan. In addition, the success of a small-to-midsized business often depends on the management skills, talents and efforts of one or two people or a small group of people, and the death, disability or resignation of one or more of these people could have an adverse impact on the business and its ability to repay its loan. If general economic conditions negatively impact the markets in which we operate and small-to-midsized businesses are adversely affected or our borrowers are otherwise harmed by adverse business developments, this, in turn, could have a material adverse effect on our business, financial condition and results of operations.

The borrowing needs of our customers may increase, especially during a challenging economic environment, which could result in increased borrowing against our contractual obligations to extend credit.

A commitment to extend credit is a formal agreement to lend funds to a customer as long as there is no violation of any condition established under the agreement. The actual borrowing needs of our customers under these credit commitments have historically been lower than the contractual amount of the commitments. A significant portion of these commitments expire without being drawn upon. Because of the credit profile of our customers, we typically have a substantial amount of total unfunded credit commitments, which is not reflected on our balance sheet. As of December 31, 2023, we had $359.4 million in unfunded credit commitments to our customers. Actual borrowing needs of our customers may exceed our expectations, especially during a challenging economic environment when our customers may be more dependent on our credit commitments due to the lack of available credit elsewhere, the increasing costs of credit, or the limited availability of financings from venture firms. This could adversely affect our liquidity, which could impair our ability to fund operations and meet obligations as they become due and could have a material adverse effect on our business, financial condition and results of operations.

Our allowance for credit losses may not be adequate to cover actual future losses.

Our success depends significantly on the quality of our assets, particularly loans. Like all financial institutions, we are exposed to the risk that our borrowers may not repay their loans according to their terms, and the collateral securing the payment of these loans may be insufficient to fully compensate us for the outstanding balance of the loan plus the costs to dispose of the collateral.

20

We maintain an allowance for credit losses ("ACL"), which includes the allowance for credit losses on loans, at a level we believe is adequate to absorb expected losses in our loan portfolio as of the corresponding balance sheet date. The process to determine the ACL uses models and assumptions that require us to make difficult and complex judgments that are often interrelated. This includes forecasting how borrowers will perform in changing and unprecedented economic conditions. The ability of our borrowers to repay their obligations will likely be impacted by changes in future economic conditions, which in turn could impact the accuracy of our loss forecasts and allowance estimates. There is also the possibility that we have failed or will fail to accurately identify the appropriate economic indicators, to accurately estimate the timing of future changes in economic conditions, or to estimate accurately the impacts of future changes in economic conditions to our borrowers, which similarly could impact the accuracy of our loss forecasts and allowance estimates.

If the models, estimates, and assumptions we use to establish reserves or the judgments we make in extending credit to our borrowers prove inaccurate in predicting future events, we may suffer unexpected losses. The ACL is our best estimate of expected credit losses; however, there is no guarantee that it will be sufficient to address credit losses, particularly if the economic outlook deteriorates significantly and quickly. In such an event, we may increase our ACL, which would reduce our earnings. Additionally, to the extent that economic conditions worsen, impacting our consumer and commercial borrowers or underlying collateral, and credit losses are worse than expected, as may be caused by persistent inflation, an economic recession or otherwise, we may increase our provision for credit losses, which could have an adverse effect on our results of operations and could negatively impact our financial condition.

Continuing deterioration in economic conditions, including inflation, a possible recession, higher interest rates, unresolved or new adverse effects of the COVID-19 pandemic, and unanticipated problem loans, may necessitate an increase in our allowance for credit losses. In addition, bank regulatory authorities may require an increase or future charge-offs based on their judgments which may differ from ours.

We may be required to increase our provisions for credit losses and to charge off loans in the future, which increases and charges could materially adversely affect us.

There is no precise method of predicting the timing of loan losses. We can give no assurance that our allowance for credit losses is or will be sufficient to absorb actual loan losses. We maintain an allowance for credit losses on loans, which is a reserve established through a provision for credit losses charged to expense, that represents management’s estimable and observable losses within the existing portfolio of loans. The level of the allowance reflects management’s evaluation of, among other factors, the status of specific individually evaluated loans, trends in historical loss experience, delinquency trends, credit concentrations and economic conditions within our market area. The determination of the appropriate level of the allowance for credit losses inherently involves a high degree of subjectivity and judgment and requires us to make significant estimates of current and expected future credit risks and future trends, any or all of which may undergo subsequent material changes. Changes in economic conditions affecting borrowers, new information regarding existing loans, identification of additional problem loans and other factors, both within and outside of our control, may require us to increase our allowance for credit losses. Increases in nonperforming loans have a significant impact on our allowance for loan losses.

In addition, bank regulatory agencies periodically review our allowance for credit losses and may require us to increase the provision for credit losses or to recognize further loan charge-offs, based on judgments that differ from those of management. If loan charge-offs in future periods exceed our allowance for credit losses, we will need to record additional provisions to increase our allowance for credit losses. Furthermore, growth in our loan portfolio would generally lead to an increase in the provision for credit losses. Generally, increases in our allowance for credit losses will result in a decrease in net income and stockholders’ equity, and may have a material adverse effect on our financial condition, results of operations and cash flows. Material additions to our allowance could also materially decrease our net income and, possibly, capital, and may have an adverse effect on our business.

Our credit standards and judgments and our ongoing process of credit assessment might not protect us from significant credit losses.

We extend credit to a variety of customers based on internally established standards, judgments and procedures. We manage credit risk through a program of underwriting standards, the review of certain credit decisions and an on-going process of assessment of the quality of the credit already extended. We avoid highly leveraged transactions as well as excessive industry and other concentrations. Our credit administration function employs risk management techniques to ensure that loans adhere to corporate policy and problem loans are promptly identified. While these procedures are designed to provide us with the information needed to implement policy adjustments where necessary, and to take proactive corrective actions, there can be no assurance that such measures will be effective in avoiding undue credit risk.

21

We are subject to environmental liability risk associated with our lending activities.

In the course of our business, we may purchase real estate, or we may foreclose on and take title to real estate. Although we exercise prudent due diligence when making loans, we could be subject to environmental liabilities with respect to these properties. We may be held liable to a governmental entity or to third parties for property damage, personal injury, investigation and clean-up costs incurred by these parties in connection with environmental contamination or may be required to investigate or clean up hazardous or toxic substances or chemical releases at a property. The costs associated with investigation or remediation activities could be substantial. In addition, if we are the owner or former owner of a contaminated site, we may be subject to common law claims by third parties based on damages and costs resulting from environmental contamination emanating from the property. Any significant environmental liabilities could cause an adverse effect on our business, financial condition and results of operations.

The implementation of the Current Expected Credit Loss accounting standard could require us to increase our allowance and future provisions for credit losses and may have a material adverse effect on our financial condition and results of operations.

Effective January 1, 2023, we were required to adopt the Financial Accounting Standards Board (the “FASB”) Accounting Standards Update 2016-13, Financial Instruments-Credit Losses (Topic 326), Measurement of Credit Losses on Financial Instruments, commonly referred to as “CECL.” Under CECL the allowance for credit losses methodology has been changed from an incurred loss concept to an expected loss concept, which is more dependent on future economic forecasts, assumptions and models than previous accounting standards and could result in increases in, and add volatility to, our allowance for credit losses and future provisions for credit losses. These forecasts, assumptions, and models are inherently uncertain and are based upon management’s reasonable judgments in light of currently available information. As a result, our allowance for credit losses may not be adequate to absorb actual credit losses, and, if not adequate, could materially and adversely affect our financial condition and results of operations.

We are subject to environmental liability risk associated with our lending activities.

In the course of our business, we may foreclose on and take title to real estate. Although we exercise prudent due diligence when making loans, we could be subject to environmental liabilities with respect to these properties. We may be held liable to a governmental entity or to third parties for property damage, personal injury, investigation and clean-up costs incurred by these parties in connection with environmental contamination or may be required to investigate or clean up hazardous or toxic substances or chemical releases at a property. The costs associated with investigation or remediation activities could be substantial. In addition, if we are the owner or former owner of a contaminated site, we may be subject to common law claims by third parties based on damages and costs resulting from environmental contamination emanating from the property. Any significant environmental liabilities could cause an adverse effect on our business, financial condition and results of operations.

Climate change could have a material negative impact on us.

Climate change could negatively impact our business, as well as the operations and activities of our customers. Climate change could present both immediate and long-term risks to our operations, and these risks could increase over time. Climate change could present multi-faceted risks, including operational risks from the physical effects of environmental events on our facilities and other assets, as well as those of our customers; potential credit risk from borrowers with significant exposure to environmental risk; and potential reputational risk from shareholder and public comments and concerns about our practices related to climate change and our relationships with customers and vendors who operate in environmentally sensitive industries. Our business, reputation and ability to attract and retain employees could also be harmed if our responses to climate change are negatively perceived.

Interest Rate Risks

Changes in interest rates may negatively affect our earnings, income and financial condition as well as the value of our assets.

Our earnings and cash flows depend substantially upon our net interest income. Net interest income is the difference between interest income earned on interest-earning assets, such as loans and investment securities, and interest expense paid on interest-bearing liabilities, such as deposits and borrowed funds. Interest rates are sensitive to many factors that are beyond our control, including general economic conditions, competition and policies of various governmental and regulatory agencies and, in particular, the policies of the Federal Reserve.

In an attempt to help the overall economy and in response to inflationary pressures, throughout 2022 and 2023 the Federal Reserve increased its targeted Fed Funds rate. The Federal Reserve also announced its intention to take other actions to mitigate growing signs of inflation. As the Federal Reserve continues its mission, overall interest rates have been impacted.

Changes in monetary policy, including rapid changes in interest rates, not only could influence the interest we receive on loans and investment securities and the amount of interest we pay on deposits and borrowings, but such changes could also affect: (1) our ability to originate loans and obtain deposits; (2) the fair value of our financial assets and liabilities, including our securities portfolio; and (3) the average duration of our interest-earning assets. Interest-earning assets may be more responsive to changes in interest rates than interest-bearing liabilities, or vice versa (repricing risk), individual interest rates or rate indices underlying various interest-earning assets and interest-bearing liabilities may not change in the same degree over a given time period (basis risk), and interest rate relationships may change across the spectrum of interest-earning asset and interest-bearing liability maturities (yield curve risk), including a prolonged flat or inverted yield curve environment. Higher interest payment obligations could also adversely affect certain borrowers, particularly our floating-rate borrowers. Substantial and prolonged increases in market interest rates could have a material adverse effect on our financial condition and results of operation.

22

Liquidity Risk

Liquidity risk could impair our ability to fund operations, meet our obligations as they become due, and jeopardize our financial condition.

Liquidity is essential to our business. An inability to raise funds through deposits, borrowings, the sale of loans and other sources could have a substantial negative effect on our liquidity. Our access to funding sources in amounts adequate to finance our activities, or on terms that are acceptable to us, could be impaired by factors that affect us specifically or the financial services industry or the economy in general. Factors that could detrimentally affect our access to liquidity sources include, among other things, a decrease in the level of our business activity as a result of a downturn in the markets in which our loans are concentrated and an adverse regulatory action against us. Our ability to borrow could also be impaired by factors that are not specific to us, such as a disruption in the financial markets or negative views and expectations about the prospects for the financial services industry.

Among other sources of funds, we rely heavily on deposits for funds to make loans and provide for our other liquidity needs. However, our loan demand has historically exceeded the rate at which we have been able to build core deposits for which there is substantial competition from a variety of different competitors, so we have relied on interest-sensitive deposits, including wholesale deposits, as sources of funds. Those deposits may not be as stable as other types of deposits and, in the future, depositors may not renew those deposits when they mature, or we may have to pay a higher rate of interest to attract or retain them or to replace them with other deposits or with funds from other sources. Not being able to attract deposits, or to retain or replace them as they mature, would adversely affect our liquidity. Paying higher deposit rates to attract, retain or replace those deposits could have a negative effect on our interest margin and operating results. A failure to maintain adequate liquidity could have a material adverse effect on our business, financial condition and results of operation.

Operational Risks

New lines of business, products, product enhancements or services may subject us to additional risks.

General. From time to time, we implement new lines of business, or offer new products and product enhancements as well as new services within our existing lines of business and we will continue to do so in the future. There are risks and uncertainties associated with these efforts, particularly in instances where the markets are not fully developed. In implementing, developing, or marketing new lines of business, products, product enhancements or services, we may invest significant time and resources, although we may not assign the appropriate level of resources or expertise necessary to make these new lines of business, products, product enhancements or services successful or to realize their expected benefits. Further, initial timetables for the introduction and development of new lines of business, products, product enhancements or services may not be achieved, and price and profitability targets may not prove feasible. External factors, such as compliance with regulations, competitive alternatives and shifting market preferences, may also impact the ultimate implementation of a new line of business or offerings of new products, product enhancements or services. Furthermore, any new line of business, product, product enhancement or service could have a significant impact on the effectiveness of our system of internal controls. Failure to successfully manage these risks in the development and implementation of new lines of business or offerings of new products, product enhancements or services could have an adverse impact on our business, financial condition or results of operations.

Payments Services. In 2016, we added a new funding source by way of facilitating payment services. We are continuing to identify and solicit new customers in need of these specialized services. The primary reasons for expanding into payment services are to secure an additional source of low-cost deposits and to capture additional fee income. A bank’s risks when dealing with a processor account are similar to risks from other activities in which customers conduct transactions through the bank on behalf of the customers’ clients. It is necessary for a bank to implement an adequate processor approval, monitoring and auditing program that extends beyond credit risk management and is conducted on an ongoing basis. When a bank is not able to identify and understand the nature and source of transactions processed through accounts, the bank’s risks and the likelihood of suspicious activity can increase. Without these precautions, a bank could be vulnerable to processing illicit or sanctioned transactions.

BaaS Software Solutions. In 2021, the Company began development of a proprietary BaaS software solution, Avenu, which provides an embedded banking solution that connects our partners (fintechs, application developers, money movers, and entrepreneurs) directly and seamlessly to our Software as a Service (SaaS) solution. Developing and deploying a software program may add additional risk, including cybersecurity, compliance, financial, and reputational concerns.

We face risks related to our operational, technological and organizational infrastructure.

Our ability to grow and compete is dependent on the Company’s ability to build or acquire the necessary operational and technological infrastructure and to manage the cost of that infrastructure as we expand. In our case, operational risk can manifest itself in many ways, such as errors related to failed or inadequate processes, faulty or disabled computer systems, fraud by employees or outside persons and exposure to external events. As discussed below, we are dependent on our operational infrastructure to help manage these risks. In addition, we are heavily dependent on the strength and capability of our technology systems that the Company uses both to interface with customers and to manage internal financial and other systems. Our ability to develop and deliver new products that meet the needs of our existing customers and attract new ones depends on the functionality of our technology systems. Additionally, our ability to run our business in compliance with applicable laws and regulations is dependent on these infrastructures.

We continuously monitor our operational and technological capabilities and make modifications and improvements as circumstances warrant. In some instances, the Company may build and maintain these capabilities itself. We outsource many of these functions to third parties. These third parties may experience errors or disruptions that could adversely impact the Company and over which it may have limited control. We also face risk from the integration of new infrastructure platforms and/or new third-party providers of such platforms into the Company’s existing businesses.

Many of our larger competitors have substantially greater resources to invest in technological improvements. As a result, they may be able to offer additional or superior technologies compared to those that we will be able to provide, which could put us at a competitive disadvantage. Accordingly, we may lose customers seeking new technology-driven products and services to the extent we are unable to compete effectively.

23

A failure or a breach of our operational systems or infrastructure, or those of third party service providers, could disrupt our business, result in the unauthorized disclosure of confidential or proprietary information, damage our reputation and cause financial losses.

Operations Risk. Our business is dependent on our ability to process, store and transmit, on a daily basis, a number of transactions. These transactions, as well as the information technology services we provide to clients, often must adhere to client-specific guidelines, as well as legal and regulatory standards. Developing and maintaining our operational systems and infrastructure is challenging, particularly as a result of rapidly evolving legal and regulatory requirements and technological shifts. Our financial, accounting, data processing or other operating systems and facilities may fail to operate properly or become disabled as a result of events that are wholly or partially beyond the Company’s control, such as a spike in transaction volume, cyber-attack or other unforeseen catastrophic events, which may adversely affect our ability to process these transactions or provide services.

In addition, our operations rely on the secure processing, storage and transmission of confidential, proprietary and other information on our computer systems, networks. and cloud infrastructure. Although we take protective measures to maintain the confidentiality, integrity, and availability of our and our clients’ information across all geographic and product lines, and endeavor to modify these protective measures as circumstances warrant, the nature of the threats continues to evolve. As a result, our computer systems, software, and networks may be vulnerable to unauthorized access, loss or destruction of data (including confidential and proprietary client information), account takeovers, unavailability of service, computer viruses or other malicious code, cyber-attacks and other events that could have an adverse security impact. Despite the defensive measures we take to manage our internal technological and operational infrastructure, these threats may originate externally from third parties such as foreign governments, organized crime and other hackers, and outsource or infrastructure-support providers and application developers or may originate internally from within our organization. Given the increasingly high volume of our transactions, certain errors may be repeated or compounded before they can be discovered and rectified.

We also face the risk of operational disruption, failure, termination or capacity constraints of any of the third parties that facilitate our business activities, including exchanges, clearing agents, clearing houses or other financial intermediaries. Such parties could also be the source of an attack on, or breach of, our operational systems, data or infrastructure. In addition, as interconnectivity with our clients grows, we increasingly face the risk of operational failure with respect to our clients’ systems.

Vendor Support Risk. As discussed below, we rely on external vendors to support our operations. We also rely on vendors to provide part of the services we deliver to customers. While we have a vendor management program policy in place and believe we have selected our vendors appropriately, we cannot directly control their employees or their operating environments. A breach or failure of a chosen vendor could have a material adverse impact on our operating environment. Replacing a chosen vendor could also result in a significant delay and expense.

Internet Risk. Our services and technology solutions rely on internet communications. Computers connected to the internet are vulnerable to many types of threats by cyber criminals. Although none of these types of attacks have had a material impact on our business to date, we anticipate that the efforts to attack our systems, and those of our customers and vendors, will grow in complexity and volume. As such, we have developed an incident response plan to coordinate the efforts following the identification of an attack.

Failure to maintain a secure computing environment, stay up to date on security vulnerabilities or deploy adequate technologies to protect against attacks, may subject our information and systems to security breaches that could compromise confidential information and damage our reputation and business. We rely on industry-standard encryption and authentication security systems to provide the security required to protect our data. Periodically our systems are subjected to scans, exploitations and audits by a qualified independent third party to evaluate the effectiveness of our security controls and system configurations.

Cyber criminals may attempt to trick employees, customers or vendors through phishing schemes or other methods to disclose sensitive information. Employees receive annual security training and are periodically assessed through simulated attack tools to assist with behavior shaping and coaching against social engineering threats.

If one or more of these events occurs, it could potentially jeopardize the confidential, proprietary and other information processed and stored in, and transmitted through, the Company’s computer systems and networks, or otherwise cause interruptions or malfunctions in our, as well as our clients’ or other third parties’ operations, which could result in damage to our reputation, substantial costs, regulatory penalties and/or client dissatisfaction or loss.

Potential costs of a cyber incident may include, but would not be limited to, remediation costs, increased protection costs, lost revenue from the unauthorized use of proprietary information or the loss of current and/or future customers, and litigation.

Insurance Risk. We maintain an insurance policy through the Company’s blanket bond at the maximum of currently available limits. However, we cannot assure you that this policy would be sufficient to cover all financial losses, damages, and penalties, including lost revenues, should the Company experience any one or more of our or a third party’s systems failing or experiencing attack.

A cyber-attack or other security incident, including one that results in the theft, loss, manipulation, or misuse of information (including personal information), or the disabling of systems and access to information critical to business operations, may result in increased costs, reductions in revenue, reputational damage, legal exposure and business disruptions.

A “deep fake” incident, which involves synthetic media that is created using artificial intelligence to create realistic images, videos, or audio recordings of people that appear to be real but are not. This technology has the potential to be used for malicious purposes, such as spreading misinformation or impersonating individuals. Deep fakes could have a material impact on the Company in a number of ways, including:

24

Our ability to provide our products and services, many of which are internet-based, and communicate with our customers, depends upon the management and safeguarding of information systems and infrastructure, networks, software, data, technology, methodologies and business secrets, including those of our service providers. Our products and services involve the collection, authentication, management, usage, storage, transmission and eventual destruction of sensitive and confidential information, including personal information, regarding our customers and their accounts, our employees, our partners and other third parties with which we do business. We also have arrangements in place with third parties through which we share and receive information about their customers who are or may become our customers. The financial services industry, including the Company, is particularly at risk because of the use of and reliance on digital banking products and other digital services, including mobile banking products, such as mobile payments, and other internet- and cloud-based products and applications, and the development of additional remote connectivity solutions, which increase cybersecurity risks and exposure.

Technologies, systems, networks, and other devices of the Bank as well as those of our employees, service providers, partners and other third parties with whom we interact, have been and may continue to be the subject of cyber-attacks and other security incidents, including computer viruses, hacking, malware, ransomware, supply chain attacks, vulnerabilities, credential stuffing, or phishing or other forms of social engineering. Such cyber-attacks and other security incidents are designed to lead to various harmful outcomes, such as unauthorized transactions in the Bank’s accounts, unauthorized or unintended access to or release, gathering, monitoring, disclosure, loss, destruction, corruption, disablement, encryption, misuse, modification or other processing of confidential or sensitive information (including personal information), intellectual property, software, methodologies or business secrets, disruption, sabotage or degradation of service, systems or networks, or other damage. These threats may derive from, among other things, error, fraud or malice on the part of our employees, insiders, or third parties or may result from accidental technological failure or design flaws. Any of these parties may also attempt to fraudulently induce employees, service providers, customers, partners or other third-party users of our systems or networks to disclose confidential or sensitive information (including personal information) in order to gain access to our systems, networks or data or that of our customers, partners, or third parties with whom we interact, or to unlawfully obtain monetary benefit through misdirected or otherwise improper payment. For instance, any party that obtains our confidential or sensitive information (including personal information) through a cyber-attack or other security incident may use this information for ransom, to be paid by us or a third party, as part of a fraudulent activity that is part of a broader criminal activity, or for other illicit purposes.

Cyber and information security risks for financial institutions like us continue to increase due to the proliferation of new technologies, the industry-wide shift to reliance upon the internet to conduct financial transactions, and the increased sophistication and activities of malicious actors, organized crime, perpetrators of fraud, hackers, terrorists, activists, extremist parties, formal and informal instrumentalities of foreign governments, state-sponsored actors and other external parties. In addition, our customers access our products and services using personal devices that are necessarily external to our security control systems. There has also been a significant proliferation of consumer information available on the internet resulting from breaches of third-party entities, including personal information, log-in credentials and authentication data. This threat could include the risk of unauthorized account access, data loss and fraud. The use of artificial intelligence, “bots” or other automation software can increase the velocity and efficacy of these types of attacks. We will likely face an increasing number of attempted cyber-attacks as we expand our mobile and other internet-based products and services, as well as our usage of mobile and cloud technologies and as we provide more of these services to a greater number of banking customers.

The methods and techniques employed by malicious actors change frequently, are increasingly sophisticated and often are not fully recognized or understood until after they have occurred, and some techniques could occur and persist for an extended period of time before being detected and remediated. We may also be unable to hire, develop and retain talent that keeps pace with the rapidly changing cyber threat landscape, and which are capable of preventing, detecting, mitigating or remediating these risks. Although we seek to maintain a robust suite of authentication and layered information security controls, any one or combination of these controls could fail to prevent, detect, mitigate or remediate these risks in a timely manner.

A disruption or breach, including as a result of a cyber-attack or media reports of perceived security vulnerabilities at the Bank or at our service providers, could result in legal and financial exposure, regulatory intervention, litigation, remediation costs, card reissuance, supervisory liability, damage to our reputation or loss of confidence in the security of our systems, products and services that could adversely affect our business. There can be no assurance that unauthorized access or cyber incidents will not occur or that we will not suffer material losses in the future. If future attacks are successful or if customers are unable to access their accounts online for other reasons, it could adversely impact our ability to service customer accounts or loans, complete financial transactions for our customers or otherwise operate any of our businesses or services. In addition, a breach or attack affecting one of our service providers or other third parties with which we interact could harm our business even if we do not control the service that is attacked.

Further, our ability to monitor our service providers’ cybersecurity practices is limited. Although the agreements that we have in place with our service providers generally include requirements relating to cybersecurity and data privacy, we cannot guarantee that such agreements will prevent a cyber incident impacting our systems or information or enable us to obtain adequate or any reimbursement from our service providers in the event we should suffer any such incidents.

In addition, the increasing prevalence and the evolution of cyber-attacks and other efforts to breach or disrupt our systems or networks or those of our customers, service providers, partners or other third parties with which we interact has led, and will likely continue to lead, to increased costs to us with respect to preventing, detecting, mitigating and remediating these risks, as well as any related attempted fraud. In order to address ongoing and future risks, we must expend resources to support protective security measures, investigate and remediate any vulnerabilities of our information systems and infrastructure and invest in new technology designed to mitigate security risks. Further, high profile cyber incidents at the Bank or other financial institutions could lead to a general loss of customer confidence in financial institutions that could negatively affect us, including harming the market perception of the effectiveness of our security measures or the global financial system in general, which could result in reduced use of our financial products. We have insurance against some cyber risks and attacks; nonetheless, our insurance coverage may not be sufficient to offset the impact of a material loss event (including if our insurer denies coverage as to any particular claim in the future), and such insurance may increase in cost or cease to be available on commercially reasonable terms, or at all, in the future.

25

We rely on third party service providers to provide key components of our business infrastructure, and a failure of these parties to perform for any reason could disrupt our operations.

Third parties provide key components of our business infrastructure such as data processing, internet connections, network access, cloud computing access, core application processing, statement production and account analysis. Our business depends on the successful and uninterrupted functioning of our information technology and telecommunications systems and third-party servicers. The failure of these systems, or the termination of a third-party software license or service agreement on which any of these systems is based, could interrupt our operations. Because our information technology and telecommunications systems interface with and depend on third-party systems, we could experience service denials if demand for such services exceeds capacity or such third-party systems fail or experience interruptions. Replacing vendors or addressing other issues with our third-party service providers could entail significant delay and expense. If we are unable to efficiently replace ineffective service providers, or if we experience a significant, sustained or repeated system failure or service denial, it could compromise our ability to operate effectively, damage our reputation, result in a loss of customer business, and subject us to additional regulatory scrutiny and possible financial liability, any of which could have an adverse effect on our business, financial condition and results of operations.

Reputational risk and social factors may impact our results.

Our ability to originate and maintain accounts is highly dependent upon consumer and other external perceptions, whether or not true, of our business practices and/or our financial health. Adverse perceptions could damage our reputation in both the customer and funding markets, leading to difficulties in generating and maintaining accounts as well as in financing them. Adverse developments with respect to the consumer or other external perceptions regarding the practices of our competitors, or our industry as a whole, may also adversely impact our reputation. In addition, adverse reputational impacts on third parties with whom we have important relationships may also adversely impact our reputation. Adverse impacts on our reputation, or the reputation of our industry, may also result in greater regulatory and/or legislative scrutiny, which may lead to laws or regulations that may change or constrain the manner in which the Company engages with its customers and the products the Company offers. Adverse reputational impacts or events may also increase our litigation risk. We carefully monitor internal and external developments for areas of potential reputational risk and have established governance structures to assist in evaluating such risks in our business practices and decisions.

We could be subject to losses, regulatory action or reputational harm due to fraudulent and negligent acts on the part of loan applicants, our employees and vendors.

In deciding whether to extend credit or enter into other transactions with clients and counterparties, and the terms of any such transaction, we may rely on information furnished by or on behalf of clients and counterparties, including financial statements, property appraisals, title information, employment and income documentation, account information and other financial information. We may also rely on representations of clients and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors. Any such misrepresentation or incorrect or incomplete information, whether fraudulent or inadvertent, may not be detected prior to funding. In addition, one or more of our employees or vendors could cause a significant operational breakdown or failure, either as a result of human error or where an individual purposefully sabotages or fraudulently manipulates our loan documentation, operations or systems. Whether a misrepresentation is made by the applicant or another third party, we generally bear the risk of loss associated with the misrepresentation. A loan subject to a material misrepresentation is typically unsellable or subject to repurchase if it is sold prior to detection of the misrepresentation. The sources of the misrepresentations may also be difficult to locate, and we may be unable to recover any of the monetary losses we may suffer as a result of the misrepresentations. Any of these developments could have an adverse effect on our business, financial condition and results of operations.

We are subject to claims and litigation pertaining to intellectual property.

Banking and other financial services companies, such as ours, rely on technology companies to provide information technology products and services necessary to support their day-to-day operations. Technology companies frequently enter into litigation based on allegations of patent infringement or other violations of intellectual property rights. In addition, patent holding companies seek to monetize patents they have purchased or otherwise obtained. Competitors of our vendors, or other individuals or companies, may from time to time claim to hold intellectual property sold to us by our vendors. Such claims may increase in the future as the financial services sector becomes more reliant on information technology vendors. The plaintiffs in these actions frequently seek injunctions and substantial damages.

Regardless of the scope or validity of such patents or other intellectual property rights, or the merits of any claims by potential or actual litigants, we may have to engage in protracted litigation. Such litigation is often expensive, time-consuming, disruptive to our operations and distracting to management. If we are found to infringe one or more patents or other intellectual property rights, we may be required to pay substantial damages or royalties to a third party. In certain cases, we may consider entering into licensing agreements for disputed intellectual property, although no assurance can be given that such licenses can be obtained on acceptable terms or that litigation will not occur. These licenses may also significantly increase our operating expenses. If legal matters related to intellectual property claims were resolved against us or settled, we could be required to make payments in amounts that could have an adverse effect on our business, financial condition and results of operations. As described below these competitors include banks, other financial institution and non-banks offering services and products previously only provided by banks.

26

The decreased soundness of other financial institutions could adversely affect us.

Our ability to engage in routine funding transactions could be adversely affected by the actions and commercial soundness of other financial institutions. Financial services institutions are interrelated as a result of trading, clearing, counterparty or other relationships. We have exposure to many different industries and counterparties, and we routinely execute transactions with counterparties in the financial industry. As a result, defaults by, or even rumors or questions about, one or more financial services institutions, or the financial services industry generally, have led in the past to market-wide liquidity problems and could lead to losses or defaults by us or by other institutions. Many of these transactions expose us to credit risk in the event of default of our counterparty or client. In addition, our credit risk may be exacerbated when the collateral that we hold cannot be realized upon or is liquidated at prices insufficient to recover the full amount of the loan. We cannot assure you that any such losses would not materially and adversely affect our business, financial condition or results of operations.

COVID-19 and its variants have not been completely eliminated.

The Company has resumed pre-COVID-19 pandemic business activities, and our employees have returned to the office. The Bank’s branch offices are open and operating during normal business hours. To protect the health of its customers and employees, the Company continues to take precautions. Those actions have not impaired our ability to conduct business and fully serve our customers. While the adverse impacts of the COVID-19 pandemic have dissipated, COVID-19 and its variants have not been completely eliminated. New variants could adversely disrupt our future operations.

The re-emergence of widespread health emergencies or pandemics, such as coronavirus, could lead to quarantines, business shutdowns, increases in unemployment, labor shortages, disruptions to supply chains, and overall economic instability. Events such as these may become more common in the future and could cause significant damage such as disrupt power and communication services, impact the stability of our facilities and result in additional expenses, impair the ability of our borrowers to repay their loans, reduce the value of collateral securing the repayment of our loans, which could result in the loss of revenue. While we have established and regularly test disaster recovery procedures, the occurrence of any such event could have a material adverse effect on our business, operations and financial condition.

Strategic Risks

Strong competition within our market area could reduce our profits and slow growth.

We face strong competition in making loans, attracting deposits and hiring and retaining experienced employees from various competitors, many of which are larger and have greater financial resources than the Company. Price competition for loans and deposits may result in our charging lower interest rates on loans and paying higher interest rates on deposits, thereby reducing our net interest income. Price competition also may limit our ability to originate loans and adversely affect our growth and profitability. Competition makes it more difficult and costly to attract and retain qualified employees.

Our financial performance will be negatively affected if we are unable to execute our growth strategy.

Our stated growth strategy is to grow organically and supplement that growth with select acquisitions, if available. Our success depends primarily on generating loans and deposits of acceptable risk and expense. There can be no assurance that we will be successful in continuing our organic, or internal, growth strategy. Our ability to identify appropriate markets for expansion, recruit and retain qualified personnel, and fund growth at reasonable cost, depends upon prevailing economic conditions, maintenance of sufficient capital, competitive factors, changes in banking laws, and other factors.

We cannot be certain as to our ability to manage increased levels of assets and liabilities without increased expenses and higher levels of nonperforming assets. We may be required to make additional investments in equipment and personnel to manage higher asset levels and loan balances, which may adversely affect earnings, shareholder returns, and our efficiency ratio. Increases in operating expenses or nonperforming assets may decrease our earnings and the value of the Company’s capital stock.

We may face increasing deposit-pricing pressures, which may, among other things, reduce our profitability.

Deposit pricing pressures may result from competition as well as changes to the interest rate environment. Current economic conditions have intensified competition for deposits. The competition has had an impact on interest rates paid to attract deposits as well as fees charged on deposit products. In addition to the competitive pressures from other depository institutions, we face heightened competition from non-depository financial products such as securities and other alternative investments.

Furthermore, technology and other market changes have made it more convenient for bank customers to transfer funds for investing purposes. Bank customers also have greater access to deposit vehicles that facilitate spreading deposit balances among different depository institutions to maximize FDIC insurance coverage. In addition to competitive forces, we also are at risk from market forces as they affect interest rates. It is not uncommon when interest rates transition from a low interest rate environment to a rising rate environment, for deposit and other funding costs to rise in advance of yields on earning assets. In order to keep deposits required for funding purposes, it may be necessary to raise deposit rates without commensurate increases in asset pricing in the short term.

Prior to 2022, it has been the policy of the Federal Reserve to maintain interest rates at historically low levels through its targeted federal funds rate and the purchase of mortgage-backed securities. As a result, market rates on the loans we have originated and the yields on securities we have purchased have been at historically low levels. As discussed above, rates are fluctuating, and due to a number of factors including changes in monetary policies of the Federal Reserve, will likely continue to fluctuate.

27

External and Market-Related Risks

Changes in general business, economic and political conditions, especially in our market area, could adversely affect our growth and earnings.

Our success depends, to a certain extent, upon general business economic and political conditions, local and national, as well as governmental monetary policies. Conditions such as inflation, recession, unemployment, changes in interest rates, money supply and other factors beyond our control may adversely affect our asset quality, deposit levels and loan demand and, therefore our growth and earnings. In addition, there are continuing concerns related to, among other things, the level of U.S. government debt and fiscal actions that may be taken to address that debt, a potential resurgence of economic and political tensions with or between other countries may have a destabilizing effect on financial markets and economic activity. Economic pressure on consumers, businesses and overall economic uncertainty may result in changes in spending, borrowing, and saving habits. These economic conditions and other negative developments in the domestic or international credit markets and economies may significantly affect the markets in which we do business. Adverse changes in the economy may also have a negative effect on the ability of our borrowers to make timely repayments of their loans, which would have an adverse impact on our earnings.

Inflationary pressures and rising prices may affect our results of operations and financial condition.

Inflation began to rise sharply at the beginning of 2022 and remained at an elevated level through the present time. Small to medium-sized businesses may be impacted more during periods of high inflation as they are not able to leverage economies of scale to mitigate cost pressures compared to larger businesses. Consequently, the ability of our business customers to repay their loans may deteriorate, and in some cases this deterioration may occur quickly, which would adversely impact our results of operations and financial condition. Furthermore, a prolonged period of inflation could cause wages and other costs to the Company to increase, which could adversely affect our results of operations and financial condition.

Source: SEC EDGAR (public domain) · 10-K for the period ended 2023-12-31, filed 2024-03-20 · accession 0001437749-24-008676

Filing HTML rendered to line-structured narrative text by the shipped reducer (datafeeds.edgar_fulltext.visible_text, keep_table_headers=True): scripts and inline-XBRL headers are dropped, and table content is reduced to its short label cells — numeric table data is not rendered and is therefore not counted. The same rendering is used for every year, so a year-over-year comparison is like for like.

The text is our rendering of the filing, not a facsimile: original pagination, typography and tables are not reproduced, and the numbers live in the financial statements (FA).

The outline locates item HEADINGS in this document. Only Items 1A and 7 have certified boundaries elsewhere in the terminal (the redline and the narrative-overlap number); every span here runs from one heading found to the next heading found.

How the outline was chosen. It is the longest chain of item headings that runs forward through both the document and the standard item order: 23 headings are on that chain and 18 further heading-shaped lines are not — the table-of-contents echo of every item, cross-references and exhibit-list mentions. Each entry's length is measured from its heading to the next heading on the chain.