Skip to content
KStart free
AI InfrastructureDefenseQuantumAll studies →

National Bankshares Inc NKSH US Equity

Financials · CIK 796534 · FY ends Dec 31
$40.94
+0.24 (+0.59%)
USD · as of 2026-08-28 · marketstack

National Bankshares Inc (Nasdaq: NKSH), an SEC filer in National Commercial Banks, closed at $40.94, +0.6%, on 2026-08-28, with a market cap of $261M, a trailing P/E of 16.4, a return on equity of 9.3%, a net margin of 28.5% and 3-year sales growth of -2.2%. Institutional ownership, earnings history and filed financials are on the tabs below.

NKSH · 10-K · period ended 2024-12-31

← all NKSH documents
filed 2025-03-28 · EDGAR original ↗

Our rendering of the filing — original pagination and typography are not reproduced, and tables are reduced to their short label cells (the figures live on FA). Nothing is summarized: every line below is the filing's own text.

blocks 1600 of 1,690301k characters rendered

10-K

Table of Contents

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

For the Fiscal Year Ended December 31, 2024

For the transition period from ________ to ________.

Commission File Number: 0-15204

NATIONAL BANKSHARES, INC.

(Exact name of registrant as specified in its charter)

101 Hubbard Street

Blacksburg, Virginia24062-9002

(Address of principal executive offices) (Zip Code)

(540) 951-6300

(Registrant’s telephone number, including area code)

Securities registered pursuant to Section 12(b) of the Act:

Title of each class Trading Symbol(s) Name of each exchange on which registered

Common Stock, par value $1.25 per share NKSH Nasdaq Capital Market

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☐ No ☒

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐ No ☒

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T(§232.405 of this chapter) during the preceding 12 months (or for such period that the registrant was required to submit files). Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☐

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act). Yes ☐ No ☒

The aggregate market value of the voting common stock of the registrant held by non-affiliates of the registrant on June 28, 2024 (the last business day of the most recently completed second fiscal quarter) was approximately $179,901,332. As of March 28, 2025, the registrant had 6,363,371 shares of voting common stock outstanding.

DOCUMENTS INCORPORATED BY REFERENCE

Portions of the following document is incorporated herein by reference into the Part of the Form 10-K indicated.

Document Part of Form 10-K into which incorporated

Table of Contents

NATIONAL BANKSHARES, INC.

Form 10-K

Index

Part I Page

Item 1. Business 3

Item 1A. Risk Factors 11

Item 1B. Unresolved Staff Comments 18

Item 1C. Cybersecurity 19

Item 2. Properties 19

Item 3. Legal Proceedings 20

Item 4. Mine Safety Disclosures 20

Part II

Item 6. [Reserved] 20

Item 7A. Quantitative and Qualitative Disclosures About Market Risk 38

Item 8. Financial Statements and Supplementary Data 38

Item 9A. Controls and Procedures 85

Item 9B. Other Information 86

Item 9C. Disclosure Regarding Foreign Jurisdictions that Prevent Inspections 86

Part III

Item 10. Directors, Executive Officers and Corporate Governance 86

Item 11. Executive Compensation 86

Item 14. Principal Accountant Fees and Services 87

Part IV

Item 15. Exhibits and Financial Statement Schedules 88

Signatures 90

2

Table of Contents

Part I

$ in thousands, except per share data.

Item 1. Business

History and Business

National Bankshares, Inc. (the “Company” or “NBI”) is a financial holding company that was organized in 1986 under the laws of Virginia and is registered under the Bank Holding Company Act of 1956. National Bankshares, Inc. common stock is listed on the Nasdaq Capital Market and is traded under the symbol “NKSH.” It conducts most of its operations through its wholly-owned community bank subsidiary, the National Bank of Blacksburg (the “Bank” or “NBB”). It also owns National Bankshares Financial Services, Inc. (“NBFS”), which does business as National Bankshares Insurance Services and National Bankshares Investment Services. References in this report to “we,” “us,” or “our” refer to NBI unless the context indicates that the reference is to NBB.

The National Bank of Blacksburg

The National Bank of Blacksburg, which does business as National Bank, was originally chartered in 1891 as the Bank of Blacksburg. Its state charter was converted to a national charter in 1922 and it became the National Bank of Blacksburg. In 2004, NBB purchased Community National Bank of Pulaski, Virginia. In May 2006, Bank of Tazewell County, a Virginia bank which since 1996 was a wholly-owned subsidiary of NBI, was merged with and into NBB. On June 1, 2024, NBB purchased Frontier Community Bank ("FCB"), a Virginia bank.

NBB is a community-oriented financial institution headquartered in Blacksburg, Virginia. Through 27 banking locations across southwest and central Virginia and two loan production offices in Roanoke and Charlottesville, Virginia, NBB offers a full range of retail and commercial banking services to individuals, businesses, non-profits and local governments. Construction on a branch in Roanoke, Virginia is underway, with a planned completion date during the first quarter of 2025. NBB offers telephone, mobile and internet banking and it operates 25 automated teller machines (“ATMs”) in its service area.

The Bank’s primary source of revenue stems from lending activities. The Bank focuses lending on small and mid-sized businesses and individuals. Loan types include commercial and agricultural, commercial real estate, construction for commercial and residential properties, residential real estate, home equity and various consumer loan products. The Bank believes its prudent lending policies align its underwriting and portfolio management with its risk tolerance and income strategies. Underwriting and documentation requirements are tailored to the unique characteristics and inherent risks of each loan category.

Deposit products offered by the Bank include interest-bearing and non-interest bearing demand deposit accounts, money market deposit accounts, savings accounts, certificates of deposit, health savings accounts and individual retirement accounts. Deposit accounts are offered to both individuals and commercial businesses. Business and consumer debit and credit cards are available. NBB offers other miscellaneous services normally provided by commercial banks, such as letters of credit, night depository, safe deposit boxes, utility payment services and automatic funds transfer. NBB conducts a general trust business that has wealth management, trust and estate services for individual and business customers.

As of December 31, 2024, NBB had total assets of $1,808,152 and total deposits of $1,661,495. NBB’s net income for 2024 was $11,001, which produced a return on average assets of 0.63% and a return on average equity of 7.95%. Refer to Note 11 of Notes to Consolidated Financial Statements for NBB’s risk-based capital ratios.

National Bankshares Financial Services, Inc.

In 2001, National Bankshares Financial Services, Inc. was formed in Virginia as a wholly-owned subsidiary of NBI. NBFS offers non-deposit investment products and insurance products for sale to the public. NBFS works cooperatively with Osaic, Inc. to provide investments and with Bearing Insurance Group, LLC for insurance products. NBFS does not significantly contribute to NBI’s net income.

Acquisition of Frontier Community Bank

On June 1, 2024 (the "acquisition date"), the Company completed its acquisition of FCB, a Virginia chartered commercial bank, in accordance with the definitive merger agreement, dated January 23, 2024, by and among the Company, the Bank, and FCB. For more information on the completed acquisition, see Note 22: Business Combination.

3

Table of Contents

Operating Revenue

The following table displays components that contributed 15% or more of the Company’s total operating revenue for the years indicated.

Percentage of Total Operating Revenue

For the Year Ended December 31,

Interest and Fees on Loans 60.55 % 57.08 %

Market Area

The Company serves customers through its offices in southwest and central Virginia. Although largely rural, the market area is home to several major state-supported universities, including Virginia Polytechnic Institute and State University (“Virginia Tech”) and Radford University. The recently acquired branches and the loan production office in Charlottesville also service areas that contain the University of Virginia, James Madison University, Virginia Military Institute, Washington and Lee University, Liberty University, and Mary Baldwin University.

In addition to education, the market area has a diverse economic base with manufacturing, agriculture, tourism, healthcare, retail and service industries. Large manufacturing facilities in the region include Celanese Acetate, the largest employer in Giles County, and Volvo Heavy Trucks, the largest company in Pulaski County. Both of these companies have experienced cycles of hiring and layoffs within the past several years. Tazewell County is largely dependent on the coal mining industry and on agriculture for its economic base. Montgomery County, Bluefield in Tazewell County, Abingdon in Washington County and the cities of Roanoke, Charlottesville, Waynesboro, Lynchburg and Staunton are regional retail centers and have facilities to provide basic health care for the regions.

NBI’s market area offers the advantages of a good quality of life, scenic beauty, moderate climate and historical and cultural attractions. The region has had success attracting retirees, particularly from the Northeast and urban northern Virginia. Because NBI’s market area is economically diverse and includes large public employers, it has historically avoided the most extreme effects of past economic downturns. Future economic challenges may impact unemployment and other economic indicators that could negatively affect the Company’s market.

Competition

The banking and financial services industry is highly competitive. The competitive business environment is a result of changes in regulation, changes in technology and product delivery systems and competition from other financial institutions as well as non-traditional financial services. NBB competes for loans and deposits with other commercial banks, credit unions, securities and brokerage companies, mortgage companies, insurance companies, retailers, automobile companies and other nonbank financial service providers. Many of these competitors are much larger in total assets and capitalization, have greater access to capital markets and offer a broader array of financial services than NBB. In order to compete, NBB relies upon a deep knowledge of its markets, a service-based business philosophy, personal relationships with customers, specialized services tailored to meet customers’ needs and the convenience of office locations and technological access. In addition, the Bank is competitive with other financial institutions in its market area with respect to interest rates paid on deposit accounts, interest rates charged on loans and other service charges on loans and deposit accounts.

Organization and Employment

NBI, NBB and NBFS are organized in a holding company/subsidiary structure. As of December 31, 2024, NBB had 242 full time equivalent employees and NBFS had 3 full time equivalent employees. NBB performs services for and charges commensurate fees to NBI and NBFS.

Regulation, Supervision and Government Policy

NBI and NBB are subject to state and federal banking laws and regulations that provide for general regulatory oversight of all aspects of their operations. As a result of substantial regulatory burdens on banking, financial institutions like NBI and NBB are at a disadvantage to other competitors who are not as highly regulated, and NBI and NBB’s costs of doing business are accordingly higher. The following is a brief summary of certain laws, rules and regulations that affect NBI and NBB.

National Bankshares, Inc.

NBI is a bank holding company qualified as a financial holding company under the federal Bank Holding Company Act of 1956, as amended (“BHCA”), which is administered by the Board of Governors of the Federal Reserve System (the “Federal Reserve”). As such, NBI is subject to the supervision, examination, and reporting requirements of the BHCA and the regulations of the Federal Reserve. NBI is required to furnish to the Federal Reserve an annual report of its operations at the end of each fiscal year and such additional

4

Table of Contents

information as the Federal Reserve may require pursuant to the BHCA. The Federal Reserve is authorized to examine NBI and its subsidiaries. With some limited exceptions, the BHCA requires a bank holding company to obtain prior approval from the Federal Reserve before acquiring or merging with a bank or before acquiring more than 5% of the voting shares of a bank unless it already controls a majority of shares.

The Bank Holding Company Act. Under the BHCA, a bank holding company is generally prohibited from engaging in nonbanking activities unless the Federal Reserve has found those activities to be incidental to banking. Amendments to the BHCA that were included in the Gramm-Leach-Bliley Act of 1999 (see below) permitted any bank holding company with bank subsidiaries that are well-capitalized, well-managed and which have a satisfactory or better rating under the Community Reinvestment Act (see below) to file an election with the Federal Reserve to become a financial holding company. A financial holding company may engage in any activity that is (i) financial in nature (ii) incidental to a financial activity or (iii) complementary to a financial activity. Financial activities include insurance underwriting, insurance agency activities, securities dealing and underwriting and providing financial, investment or economic advising services. NBI is a financial holding company that currently engages in insurance agency activities and provides financial, investment or economic advising services.

The Virginia Banking Act. The Virginia Banking Act requires all Virginia bank holding companies to register with the Virginia State Corporation Commission (the “Commission”). NBI is required to report to the Commission with respect to its financial condition, operations and management. The Commission may also make examinations of any bank holding company and its subsidiaries and must approve the acquisition by a Virginia bank holding company of ownership or control of more than 5% of the voting shares of any Virginia bank or bank holding company.

The Gramm-Leach-Bliley Act. The Gramm-Leach-Bliley Act (“GLBA”) permits significant combinations among different sectors of the financial services industry, allows for expansion of financial service activities by bank holding companies and offers financial privacy protections to consumers. GLBA preempts most state laws that prohibit financial holding companies from engaging in insurance activities. GLBA permits affiliations between banks and securities firms in the same holding company structure, and it permits financial holding companies to directly engage in a broad range of securities and merchant banking activities.

The Sarbanes-Oxley Act. The Sarbanes-Oxley Act (“SOX”) protects investors by improving the accuracy and reliability of corporate disclosures. It impacts all companies with securities registered under the Securities Exchange Act of 1934 (the “Exchange Act”), including NBI. SOX creates increased responsibility for chief executive officers and chief financial officers with respect to the content of filings with the Securities and Exchange Commission (the “SEC”). Section 404 of SOX and related SEC rules focused increased scrutiny by internal and external auditors on NBI’s systems of internal controls over financial reporting, which is designed to ensure that those internal controls are effective in both design and operation. SOX sets out enhanced requirements for audit committees, including independence and expertise, and it includes stronger requirements for auditor independence and limits the types of non-audit services that auditors can provide. Finally, SOX contains additional and increased civil and criminal penalties for violations of securities laws.

Capital and Related Requirements. The Federal Reserve's Small Bank Holding Company Policy Statement (the "Statement") sets forth requirements for designation as a small bank holding company and related expectations for capital and reporting requirements. Qualified bank holding companies that have consolidated total assets of less than $3 billion are exempt from reporting consolidated regulatory capital ratios and from minimum regulatory capital requirements. The Company qualifies as a small bank holding company.

The Bank continues to be subject to various capital requirements administered by banking agencies as described below. Failure to meet minimum capital requirements can trigger certain mandatory and discretionary actions by regulators that could have a direct material effect on the Company’s consolidated financial statements.

Dodd-Frank Wall Street Reform and Consumer Protection Act. The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the "Dodd-Frank Act") sets forth requirements for consumer mortgage lending, provisions for corporate governance and executive compensation, directed rule-making by the Federal Reserve limiting fees charged to merchants for credit and debit card transactions and established the Consumer Financial Protection Bureau (the “CFPB”). The CFPB has rule marking authority over financial institutions with regard to consumer protection and oversees the enforcement of all federal laws intended to ensure fair access to credit. For smaller financial institutions such as NBI and NBB, the CFPB coordinates its examination activities through their primary regulators. In February 2025, the Trump administration halted the CFPB’s operations, and its employees were instructed to cease all supervision and examination activity. As a result, the future of the CFPB and its impact on our business are uncertain.

Source of Strength. Federal Reserve policy has historically required bank holding companies to act as a source of financial and managerial strength to their subsidiary banks. The Dodd-Frank Act codified this policy as a statutory requirement. Under this requirement, the Company is expected to commit resources and capital to support NBB, including at times when the Company may not be in a financial position to provide such resources. Any capital loans by a bank holding company to any of its subsidiary banks are subordinate in right of payment to depositors and to certain other indebtedness of such subsidiary banks. In the event of a bank holding company’s bankruptcy, any commitment by the bank holding company to a federal bank regulatory agency to maintain the capital of a subsidiary bank will be assumed by the bankruptcy trustee and entitled to priority of payment.

The Economic Growth, Regulatory Reform and Consumer Protection Act of 2018. The Economic Growth, Regulatory Reform and Consumer Protection Act of 2018 ("EGRRCPA") amended provisions of the Dodd-Frank Act and other statutes administered by banking regulators. Among these amendments are provisions to tailor applicability of certain of the enhanced prudential standards for Systemically Important Financial Institutions and to increase the $50 billion asset threshold in two stages to $250 billion to which these enhanced standards apply. The EGRRCPA exempts insured depository institutions (and their parent companies) with less than $10

5

Table of Contents

billion in consolidated assets and that meet certain tests from the Volker Rule (which prohibits banks from conducting certain investment activities with their own accounts). The EGRRCPA also increased the asset threshold from $1 billion to $3 billion for financial institutions to qualify for an 18 month on site examination schedule. The EGRRCPA addressed numerous other regulatory requirements based on the size and complexity of financial institutions, particularly benefiting smaller institutions like the Company.

The National Bank of Blacksburg

NBB is a national banking association incorporated under the laws of the United States, and the bank is subject to regulation and examination by the Office of the Comptroller of the Currency (the “OCC”). NBB’s deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) up to the limits of applicable law. The OCC, as the primary regulator, and the FDIC regulate and monitor all areas of NBB’s operation. These areas include adequacy of capitalization and loss reserves, loans, deposits, business practices related to the charging and payment of interest, investments, borrowings, payment of dividends, security devices and procedures, establishment of branches, corporate reorganizations and maintenance of books and records. NBB is required to maintain certain capital ratios. It must also prepare quarterly reports on its financial condition for the OCC and conduct an annual audit of its financial affairs. The OCC requires NBB to adopt internal control structures and procedures designed to safeguard assets and monitor and reduce risk exposure. While appropriate for the safety and soundness of banks, these requirements add to overhead expense for NBB and other banks.

The Community Reinvestment Act. NBB is subject to the provisions of the Community Reinvestment Act (“CRA”), which imposes an affirmative obligation on financial institutions to meet the credit needs of the communities they serve, including low and moderate income neighborhoods. The OCC monitors NBB’s compliance with the CRA and assigns public ratings based upon the bank’s performance in meeting stated assessment goals. Unsatisfactory CRA ratings can result in restrictions on bank operations or expansion. NBB received a “satisfactory” rating in its last CRA examination by the OCC.

On October 24, 2023, the federal bank regulatory agencies issued a final rule to modernize their respective CRA regulations. The revised rules substantially alter the methodology for assessing compliance with the CRA, with material aspects taking effect January 1, 2026 and revised data reporting requirements taking effect January 1, 2027. Among other things, the revised rules evaluate lending outside traditional assessment areas generated by the growth of non-branch delivery systems, such as online and mobile banking, apply a metrics-based benchmarking approach to assessment, and clarify eligible CRA activities. The final rule has been subject to an injunction since March 29, 2024, and the effective dates will be extended pending resolution of the lawsuit.

Privacy Legislation. Several recent laws, including the Right to Financial Privacy Act and the GBLA, and related regulations issued by the federal bank regulatory agencies, also provide new protections against the transfer and use of customer information by financial institutions. A financial institution must provide to its customers information regarding its policies and procedures with respect to the handling of customers’ personal information. Each institution must conduct an internal risk assessment of its ability to protect customer information. These privacy provisions generally prohibit a financial institution from providing a customer’s personal financial information to unaffiliated parties without prior notice and approval from the customer.

In October 2024, the CFPB issued a final rule regarding personal financial data rights that is designed to promote “open banking.” The final rule requires, among other things, that data providers, including any financial institution, make available to consumers and certain authorized third parties, upon request, certain covered transaction, account, and payment information. Institutions with at least $1.5 billion but less than $3 billion in total assets, including the Company, are required to comply with the final rule by April 1, 2029. On the same day the final rule was released, certain industry participants filed a complaint against the CFPB challenging the final rule. This legal challenge has since been paused to allow time for the CFPB to assess the rule and determine whether it aligns with the agency’s current policy objectives.

Consumer Laws and Regulations. There are a number of laws and regulations that regulate banks’ consumer loan and deposit transactions. Among these are the Truth in Lending Act, the Truth in Savings Act, the Expedited Funds Availability Act, the Equal Credit Opportunity Act, the Fair Housing Act, the Fair Credit Reporting Act, the Electronic Funds Transfer Act, the Fair Debt Collections Practices Act, the Home Mortgage Disclosure Act, the Service Members Civil Relief Act, laws governing flood insurance, federal and state laws prohibiting unfair and deceptive business practices, foreclosure laws and various regulations that implement some or all of the foregoing. NBB is required to comply with these laws and regulations in its dealings with customers. In addition, the CFPB has adopted and may continue to refine rules regulating consumer mortgage lending pursuant to the Dodd-Frank Act. There are numerous disclosure and other compliance requirements associated with the consumer laws and regulations. The EGRRCPA modified a number of these requirements, including, for qualifying institutions with less than $10 billion in assets, a safe harbor for compliance with the “ability to pay” requirements for consumer mortgage loans.

Deposit Insurance. NBB has deposits that are insured by the FDIC. The FDIC maintains a Deposit Insurance Fund (“DIF”) that is funded by risk-based insurance premium assessments on insured depository institutions. Assessments are determined based upon several factors, including the level of regulatory capital and the results of regulatory examinations. The FDIC may adjust assessments if the insured institution’s risk profile changes or if the size of the DIF declines in relation to the total amount of insured deposits. An institution’s assessment base is consolidated total assets less its average tangible equity as defined by the FDIC. In October 2022, the FDIC adopted a final rule to increase the assessment base rate schedules uniformly by two basis points beginning with the first quarterly assessment period of 2023. The FDIC has authority to impose special measures to boost the deposit insurance fund such as prepayments of assessments and additional special assessments.

6

Table of Contents

After giving primary regulators an opportunity to first take action, the FDIC may initiate an enforcement action against any depository institution it determines is engaging in unsafe or unsound actions or which is in an unsound condition, and the FDIC may terminate that institution’s deposit insurance. NBB has no knowledge of any matter that would threaten its FDIC insurance coverage.

Capital Requirements. NBB is subject to the rules implementing the Basel III capital framework and certain related provisions of the Dodd-Frank Act (the “Basel III Capital Rules”) as applied by the OCC. The Basel III Capital Rules require NBB to comply with minimum capital ratios plus a “capital conservation buffer” designed to absorb losses during periods of economic stress. The following table presents the required minimum ratios along with the required minimum ratios including the capital conservation buffer:

Total Capital to Risk Weighted Assets 8.00 % 10.50 %

Tier 1 Capital to Risk Weighted Assets 6.00 % 8.50 %

Common Equity Tier 1 Capital to Risk Weighted Assets 4.50 % 7.00 %

Tier 1 Capital to Average Assets (Leverage Ratio) 4.00 % 4.00 %

Risk-weighted assets are assets on the balance sheet as well as certain off-balance sheet items, such as standby letters of credit, to which weights between 0% and 1250% are applied, according to the risk of the asset type. Common Equity Tier 1 Capital (“CET1”) is capital according to the balance sheet, adjusted for goodwill and intangible assets and other prescribed adjustments. At NBB’s election, CET1 is also adjusted to exclude accumulated other comprehensive loss. Tier 1 Capital is CET1 adjusted for additional capital deductions. Total Capital is Tier 1 Capital increased for the allowance for credit losses and adjusted for other items. The Leverage Ratio is the ratio of Tier 1 Capital to total average assets, less goodwill and intangibles and certain deferred tax assets. As of December 31, 2024, NBB’s capital ratios exceeded the above minimum ratios including the capital conservation buffer.

NBB is also subject to the “prompt corrective action” regulations pursuant to Section 38 of the Federal Deposit Insurance Act, as amended, which incorporates a CET1 ratio and increases certain other capital ratios. To be classified as well capitalized under the regulations, NBB must have the following minimum capital ratios: (i) a CET1 ratio of at least 6.5%; (ii) a Tier 1 Capital to Risk Weighted Assets ratio of at least 8.0%; (iii) a Total Capital to Risk Weighted Assets ratio of at least 10.0%; and (iv) a Leverage Ratio of at least 5.0%. NBB exceeded the thresholds to be considered well capitalized as of December 31, 2024.

Limits on Dividend Payments. A significant portion of NBI’s income is derived from dividends paid by NBB. As a national bank, NBB may not pay dividends from its capital, and it may not pay dividends if the bank would become undercapitalized, as defined by regulation, after paying the dividend. Without prior OCC approval, NBB’s dividend payments in any calendar year are restricted to the bank’s retained net income for that year, as that term is defined by the laws and regulations, combined with retained net income from the preceding two years, less any required transfer to surplus.

The OCC and FDIC have authority to limit dividends paid by NBB if the payments are determined to be an unsafe and unsound banking practice. Any payment of dividends that depletes the bank’s capital base could be deemed to be an unsafe and unsound banking practice.

Branching. As a national bank, NBB is required to comply with the state branch banking laws of Virginia, the state in which the main office of the bank is located. NBB must also have the prior approval of the OCC to establish a branch or acquire an existing banking operation. Under Virginia law, NBB may open branch offices or acquire existing banks or bank branches anywhere in the state. Virginia law also permits banks domiciled in the state to establish a branch or to acquire an existing bank or branch in another state. The Dodd-Frank Act permits the OCC to approve applications by national banks like NBB to establish de novo branches in any state in which a bank located in that state is permitted to establish a branch.

Mortgage Banking Regulation. NBB is subject to rules and regulations that, among other things, establish standards for mortgage loan origination, prohibit discrimination, provide for inspections and appraisals of property, require credit reports on prospective borrowers, in some cases restrict certain loan features and fix maximum interest rates and fees, require the disclosure of certain basic information to mortgagors concerning credit and settlement costs, limit payment for settlement services to the reasonable value of the services rendered and require the maintenance and disclosure of information regarding the disposition of mortgage applications based on race, gender, geographical distribution and income level. NBB is also subject to rules and regulations that require the collection and reporting of significant amounts of information with respect to mortgage loans and borrowers. NBB’s mortgage origination activities are subject to the Federal Reserve’s Regulation Z, which implements the Truth in Lending Act. Certain provisions of Regulation Z require creditors to make a reasonable and good faith determination based on verified and documented information that a consumer applying for a mortgage loan has a reasonable ability to repay the loan according to its terms.

Anti-Money Laundering Laws and Regulations. The Company is subject to several federal laws that are designed to combat money laundering, terrorist financing, and transactions with persons, companies or foreign governments designated by U.S. authorities (“AML laws”). This category of laws includes the Bank Secrecy Act of 1970, the Money Laundering Control Act of 1986, the USA PATRIOT Act of 2001, and the Anti-Money Laundering Act of 2020.

The AML laws and their implementing regulations require insured depository institutions, broker-dealers, and certain other financial institutions to have policies, procedures, and controls to detect, prevent, and report money laundering and terrorist financing. The AML laws and their regulations also provide for information sharing, subject to conditions, between federal law enforcement agencies and financial institutions, as well as among financial institutions, for counter-terrorism purposes. Federal banking regulators are required,

7

Table of Contents

when reviewing bank holding company acquisition and bank merger applications, to take into account the effectiveness of the anti-money laundering activities of the applicants. To comply with these obligations, the Company has implemented appropriate internal practices, procedures, and controls.

Office of Foreign Assets Control. The U.S. Treasury Department’s Office of Foreign Assets Control (“OFAC”) is responsible for administering and enforcing economic and trade sanctions against specified foreign parties, including countries and regimes, foreign individuals and other foreign organizations and entities. OFAC publishes lists of prohibited parties that are regularly consulted by the Company in the conduct of its business in order to assure compliance. The Company is responsible for, among other things, blocking accounts of, and transactions with, prohibited parties identified by OFAC, avoiding unlicensed trade and financial transactions with such parties and reporting blocked transactions after their occurrence. Failure to comply with OFAC requirements could have serious legal, financial and reputational consequences for the Company.

Incentive Compensation. The Interagency Guidance on Sound Incentive Compensation Policies, issued by federal banking agencies, covers all employees that have the ability to materially affect the risk profile of a financial institution, either individually or as part of a group, and is based upon the key principles that a financial institution’s incentive compensation arrangements should (i) provide incentives that do not encourage risk-taking beyond the institution’s ability to effectively identify and manage risks, (ii) be compatible with effective internal controls and risk management, and (iii) be supported by strong corporate governance, including active and effective oversight by the financial institution’s board of directors.

Section 956 of the Dodd-Frank Act requires the federal banking agencies and the SEC to establish joint regulations or guidelines prohibiting incentive-based payment arrangements at specified regulated entities that encourage inappropriate risk-taking by providing an executive officer, employee, director or principal shareholder with excessive compensation, fees, or benefits or that could lead to material financial loss to the entity. The federal banking agencies issued such proposed rules in March 2011 and issued a revised proposed rule in June 2016 implementing the requirements and prohibitions set forth in Section 956. The revised proposed rule would apply to all banks, among other institutions, with at least $1 billion in average total consolidated assets for which it would go beyond the existing Interagency Guidance on Sound Incentive Compensation Policies to (i) prohibit certain types and features of incentive-based compensation arrangements for senior executive officers, (ii) require incentive-based compensation arrangements to adhere to certain basic principles to avoid a presumption of encouraging inappropriate risk, (iii) require appropriate board or committee oversight, (iv) establish minimum recordkeeping, and (v) mandate disclosures to the appropriate federal banking agency. In May 2024, the FDIC, the OCC, and the Federal Housing Finance Agency reproposed the 2016 proposed rule and requested comment on specific alternatives and general questions, given the passage of time since the 2016 proposed rule was issued.

The Federal Reserve will review, as part of the regular, risk-focused examination process, the incentive compensation arrangements of financial institutions, such as the Company, that are not “large, complex banking organizations.” These reviews will be tailored to each financial institution based on the scope and complexity of the institution’s activities and the prevalence of incentive compensation arrangements. The findings of the supervisory initiatives will be included in reports of examination. Deficiencies will be incorporated into the institution’s supervisory ratings, which can affect the institution’s ability to make acquisitions and take other actions. Enforcement actions may be taken against a financial institution if its incentive compensation arrangements, or related risk-management control or governance processes, pose a risk to the institution’s safety and soundness and the financial institution is not taking prompt and effective measures to correct the deficiencies. As of December 31, 2024, the Company had not been made aware of any instances of non-compliance with the final guidance.

The Nasdaq Stock Market, LLC, the exchange on which our common stock is listed, enacted a listing rule that became effective in 2023 requiring listed companies to adopt policies mandating the recovery or “clawback” of excess incentive compensation earned by a current or former executive officer during the three fiscal years preceding the date the listed company is required to prepare an accounting restatement, including to correct an error that would result in a material misstatement if the error were corrected in the current period or left uncorrected in the current period. The Company has adopted a clawback policy compliant with such rule, a copy of which is attached as Exhibit 97.1 to this Form 10-K.

Cybersecurity. In March 2015, federal regulators issued two related statements regarding cybersecurity. One statement indicates that financial institutions should design multiple layers of security controls to establish lines of defense and to ensure that their risk management processes also address the risk posed by compromised customer credentials, including security measures to reliably authenticate customers accessing internet-based services of the financial institution. The other statement indicates that a financial institution’s management is expected to maintain sufficient business continuity planning processes to ensure the rapid recovery, resumption and maintenance of the institution’s operations after a cyber-attack involving destructive malware. A financial institution is also expected to develop appropriate processes to enable recovery of data and business operations and address rebuilding network capabilities and restoring data if the institution or its critical service providers fall victim to this type of cyber-attack. If the Company fails to observe the regulatory guidance, it could be subject to various regulatory sanctions, including financial penalties.

On November 18, 2021, the federal bank regulatory agencies issued a final rule, effective April 1, 2022, imposing new notification requirements for cybersecurity incidents. The rule requires financial institutions to notify their primary federal regulator as soon as possible and no later than 36 hours after the institution determines that a cybersecurity incident has occurred that has materially disrupted or degraded, or is reasonably likely to materially disrupt or degrade, the institution’s: (i) ability to carry out banking operations, activities, or processes, or deliver banking products and services to a material portion of its customer base, in the ordinary course of business, (ii) business line(s), including associated operations, services, functions, and support, that upon failure would result in a material loss of

8

Table of Contents

revenue, profit, or franchise value, or (iii) operations, including associated services, functions and support, as applicable, the failure or discontinuance of which would pose a threat to the financial stability of the United States.

In July 2023, the SEC issued a final rule to enhance and standardize disclosures regarding cybersecurity risk management, strategy, governance, and incident reporting by public companies that are subject to the reporting requirements of the Exchange Act. Specifically, the final rule requires current reporting about material cybersecurity incidents, periodic disclosures about a registrant’s policies and procedures to identify and manage cybersecurity risk, management’s role in implementing cybersecurity policies and procedures, and the board of directors’ cybersecurity expertise, if any, and its oversight of cybersecurity risk. See Item 1C. Cybersecurity of this Form 10-K for a discussion of the Company’s cybersecurity risk management, strategy and governance.

Monetary Policy

The monetary and interest rate policies of the Federal Reserve, as well as general economic conditions, affect the business and earnings of NBI. NBB and other banks are particularly sensitive to interest rate fluctuations. The spread between the interest paid on deposits and that which is charged on loans is the most important component of the bank’s earnings. In addition, interest earned on securities investments has a significant effect on earnings. U.S. fiscal policy, including deficits requiring increased governmental borrowing also can affect interest rates. As conditions change in the national and international economy and in the money markets, the Federal Reserve’s actions, particularly with regard to interest rates, and the effects of fiscal policies can impact loan demand, deposit levels and earnings at NBB. It is not possible to accurately predict the effects on NBI of economic and interest rate changes.

Other Legislative and Regulatory Concerns

Federal and state laws and regulations are regularly proposed that could affect the regulation of financial institutions. New, revised or rescinded regulations could add to the regulatory burden on banks and other financial service providers and increase the costs of compliance, or they could change the products that can be offered and the manner in which financial institutions do business. We cannot foresee how regulation of financial institutions may change in the future and how those changes might affect NBI.

Company Website

NBI maintains a website at www.nationalbankshares.com. The Company’s annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K and all amendments to those reports are made available on its website as soon as is practical after the material is electronically filed with the SEC. The Company’s proxy materials for the 2025 annual meeting of stockholders will also be posted on a separate website at www.investorvote.com/NKSH. Access through the Company’s websites to the Company’s filings is free of charge. The SEC maintains an internet site (http://www.sec.gov) that contains reports, proxy, and information statements, and other information the Company files electronically with the SEC.

9

Table of Contents

Executive Officers of the Company

The following is a list of names and ages of all executive officers of the Company; their terms of office as officers; the positions and offices within the Company held by each officer; and each person’s principal occupation or employment during the past five years.

Name Age Offices and Positions Held YearElected anOfficer

10

Table of Contents

Item 1A. Risk Factors

An investment in the Company’s common stock involves certain risks, including those described below. In addition to the other information set forth in this Form 10-K, investors in the Company’s securities should carefully consider the factors discussed below. These factors, either alone or taken together, could materially and adversely affect the Company’s business, financial condition, liquidity, results of operations, capital position, and prospects. One or more of these could cause the Company’s actual results to differ materially from its historical results or the results contemplated by the forward-looking statements contained in this report, in which case the trading price of the Company’s securities could decline.

CREDIT RISK

Focus on lending to small to mid-sized community-based businesses may increase our credit risk.

Most of the Company’s commercial business and commercial real estate loans are made to small business or middle market customers. These businesses generally have fewer financial resources in terms of capital or borrowing capacity than larger entities and have a heightened vulnerability to economic conditions. If general economic conditions in the market areas in which the Company operates negatively impact this important customer sector, the Company’s results of operations and financial condition may be adversely affected. Moreover, a portion of these loans have been made by the Company in recent years and the borrowers may not have experienced a complete business or economic cycle since becoming borrowers of the Bank. The deterioration of the borrowers’ businesses may hinder their ability to repay their loans with the Company, which could have a material adverse effect on the Company’s financial condition and results of operations.

The allowance for credit losses may not be adequate to cover actual losses.

In accordance with generally accepted accounting principles in the United States (“GAAP”), the Company maintains an allowance for credit losses on loans (“ACLL”). The ACLL may not be adequate to cover actual credit losses, and future provisions for credit losses could materially and adversely affect operating results. The ACLL is based on available relevant information about the collectability of cash flows, including historical losses, reasonable and supportable forecasts of economic conditions, and current economic and portfolio conditions. The amount of future losses is susceptible to changes in economic, operating, and other outside forces and conditions, including changes in interest rates, all of which are beyond the Company’s control; and these losses may exceed current estimates. Federal regulatory agencies, as an integral part of their examination process, review the Company’s loans and ACLL. The Company also outsources independent loan review. While management believes that the ACLL is adequate to cover current estimated losses, it cannot make assurances that it will not further increase the ACLL or that regulators will not require it to increase this allowance. Either occurrence could adversely affect earnings.

The ACLL requires management to make significant estimates that affect the consolidated financial statements. Due to the inherent nature of these estimates, management cannot provide assurance that it will not significantly increase the ACLL, which could materially and adversely affect earnings.

A decline in the condition of the local real estate market could negatively affect our business.

The Company offers a variety of secured loans, including commercial lines of credit, commercial term loans, real estate, construction, residential mortgages, home equity loans and lines of credit, consumer and other loans. Many of these loans are secured by real estate (both residential and commercial). As of December 31, 2024, 84.6% of all loans were secured by mortgages on real property. Substantially all of the Company’s real property collateral is located in its market area. If there is a decline in real estate values, especially in the Company’s market area, the collateral for loans would deteriorate and provide significantly less security to the Company. In the event the Company forecloses on a loan that is collateralized with property having reduced market value, the Company may suffer a recovery loss.

The Bank has a moderate concentration of credit exposure in commercial real estate, and loans with this type of collateral are viewed as having more risk of default.

As of December 31, 2024, the Bank had approximately $478,078 in loans secured by commercial real estate, representing approximately 48.4% of total loans outstanding at that date. The real estate consists primarily of multi-family housing, non-owner-operated properties and other commercial properties. These types of loans are generally viewed as having more risk of default than residential real estate loans. They are also typically larger than residential real estate loans and consumer loans and depend on cash flows from the owner’s business or the rental of the property to service the debt. Cash flows may be affected significantly by general economic conditions, and a downturn in the local economy or in occupancy rates in the local economy where the property is located could increase the likelihood of default. Because the Bank’s loan portfolio contains a number of commercial real estate loans with relatively large balances, the deterioration of one or a few of these loans could cause a significant increase in the percentage of nonperforming loans. An increase in nonperforming loans could result in a loss of earnings from these loans, an increase in the provision for credit losses and an increase in charge-offs, all of which could have a material adverse effect on the Company’s financial condition.

11

Table of Contents

Nonperforming assets take significant time to resolve and adversely affect the Company’s results of operations and financial condition.

The Company’s nonperforming assets adversely affect its net income in various ways. The Company does not record interest income on nonaccrual loans, which adversely affects its income and increases credit administration costs. When the Company receives collateral through foreclosures and similar proceedings, it is required to mark the related asset to the then fair market value of the collateral less estimated selling costs, which may, and often does, result in a loss. An increase in the level of nonperforming assets also increases the Company’s risk profile and may impact the capital levels regulators believe are appropriate in light of such risks. The Company utilizes various techniques such as workouts and restructurings to manage problem assets. Increases in or negative adjustments in the value of these problem assets, the underlying collateral, or in the borrowers’ performance or financial condition, could adversely affect the Company’s business, results of operations and financial condition. In addition, the resolution of nonperforming assets requires significant commitments of time from management and staff, which can be detrimental to the performance of their other responsibilities, including generation of new loans. There can be no assurance that the Company will avoid increases in nonperforming loans in the future.

The Company relies upon independent appraisals to determine the value of the real estate which secures a significant portion of its loans, and the values indicated by such appraisals may not be realizable if the Company is forced to foreclose upon such loans.

A significant portion of the Company’s loan portfolio consists of loans secured by real estate. The Company relies upon independent appraisers to estimate the value of such real estate. Appraisals are only estimates of value and the independent appraisers may make mistakes of fact or judgment which adversely affect the reliability of their appraisals. In addition, events occurring after the initial appraisal may cause the value of the real estate to increase or decrease. As a result of any of these factors, the real estate securing some of the Company’s loans may be more or less valuable than anticipated at the time the loans were made. If a default occurs on a loan secured by real estate that is less valuable than originally estimated, the Company may not be able to recover the outstanding balance of the loan and will suffer a loss.

MARKET RISK

If competition increases, our business could suffer, which could result in loan losses and adversely affect the Company’s financial condition and results of operations.

The financial services industry is highly competitive, with a number of commercial banks, credit unions, insurance companies, stockbrokers, financial technology companies and other nonbank financial service providers seeking to do business with our customers. If there is additional competition from new business or if our existing competitors focus more attention on our market, we could lose customers and our business could suffer.

Consumers may increasingly decide not to use the Bank to process their financial transactions, which would have a material adverse impact on the Company’s financial condition and operations.

Technology and other changes are allowing parties to complete financial transactions through alternative methods that historically have involved banks. For example, consumers can now maintain funds that would have historically been held as bank deposits in brokerage accounts, mutual funds or general-purpose reloadable prepaid cards. Consumers can also complete transactions such as paying bills and/or transferring funds directly without the assistance of banks. The process of eliminating banks as intermediaries could result in the loss of fee income, as well as the loss of customer deposits and the related income generated from those deposits. The loss of these revenue streams and the lower cost of deposits as a source of funds could have a material adverse effect on the Company’s financial condition and results of operations.

INTEREST RATE RISK

The Company's business is subject to interest rate risk and variations in interest rates and inadequate management of interest rate risk may negatively affect financial performance.

Changes in the interest rate environment may reduce the Company’s profits. It is expected that the Company will continue to realize income from the differential or “spread” between the interest earned on loans, securities, and other interest-earning assets, and interest paid on deposits, borrowings, and other interest-bearing liabilities. Net interest spreads are affected by the difference between the maturities and repricing characteristics of interest-earning assets and interest-bearing liabilities. Loan and deposit volumes, yields, and costs are affected by market interest rates on these products, and there is substantial competition for loans and deposits that affect rates on these products. Additionally, short-term rates are driven by actions of the Federal Reserve, and movements in such rates may have a significant effect on the Company’s interest rate risk. The Company’s management cannot ensure that it can minimize interest rate risk. If the interest rates paid on deposits and other borrowings increase at a faster rate than the interest rates received on loans and other investments, the Company’s net interest income, and therefore earnings, could be adversely affected. Earnings could also be adversely affected if the interest rates received on loans and other investments fall more quickly than the interest rates paid on deposits and other borrowings. Further, shifts in the Company’s mix of interest-earning assets or interest-bearing liabilities could adversely affect yields

12

Table of Contents

on assets or costs of funds, respectively. Accordingly, changes in levels of market interest rates or management thereof could materially and adversely affect the net interest spread, loan and deposit volumes, and the Company’s overall profitability.

LIQUIDITY RISK

Liquidity could be impaired by an inability to access the capital markets or an unforeseen outflow of cash.

Liquidity is essential to the Company’s business. Access to funding sources in amounts adequate to finance the Company’s activities or on terms that are acceptable to us could be impaired by factors that affect us specifically or the financial services industry or economy generally. Factors that could reduce the Company’s access to liquidity sources include a downturn in the economy, difficult credit markets or the liquidity needs of our depositors. A substantial majority of the Company’s liabilities are demand, savings, interest checking and money market deposits, which are payable on demand or upon several days’ notice, while a substantial portion of our assets are loans, which cannot be called or sold in the same time frame. The Company may not be able to replace maturing deposits and advances as necessary in the future, especially if a large number of our depositors sought to withdraw their accounts, regardless of the reason. The Company’s access to deposits may be negatively impacted by, among other factors, changes in interest rates which could promote increased competition for deposits, including from new financial technology competitors, or provide customers with alternative investment options. Additionally, negative news about the Company or the banking industry in general could negatively impact market and/or customer perceptions of the Company, which could lead to a loss of depositor confidence and an increase in deposit withdrawals, particularly among those with uninsured deposits. Furthermore, as many regional banking organizations experienced in 2023, the failure of other financial institutions may cause deposit outflows as customers spread deposits among several different banks so as to maximize their amount of FDIC insurance coverage, move deposits to banks deemed “too big to fail” or remove deposits from the banking system entirely. As of December 31, 2024, approximately 44.6% of the Company’s deposits were uninsured. Uninsured deposits include municipal deposits, which have additional security from bonds pledged as collateral, in accordance with state regulation. Of the Company’s non-municipal deposits, approximately 22.4% are uninsured. We rely on deposits for liquidity. A failure to maintain adequate liquidity could have a material adverse effect on the Company’s business, financial condition and results of operations.

Unrealized losses in the Company’s securities portfolio could affect liquidity.

As market interest rates increased in 2022 and 2023, the Company experienced significant unrealized losses on our available for sale securities portfolio. Unrealized losses related to available for sale securities are reflected in accumulated other comprehensive loss in the Company’s consolidated balance sheets and reduce the level of our book capital and tangible common equity. However, such unrealized losses do not affect the Company’s regulatory capital ratios. The Company actively monitors the available for sale securities portfolio and we do not currently anticipate the need to realize material losses from the sale of securities for liquidity purposes. Furthermore, the Company believes it is unlikely that we would be required to sell any such securities before recovery of their amortized cost bases, which may be at maturity. Nonetheless, the Company’s access to liquidity sources could be affected by unrealized losses if securities must be sold at a loss; tangible capital ratios continue to decline from an increase in unrealized losses or realized credit losses; the Federal Home Loan Bank of Atlanta (“FHLB”) or other funding sources reduce capacity; or bank regulators impose restrictions on us that impact the level of interest rates we may pay on deposits or our ability to access brokered deposits. Additionally, significant unrealized losses could negatively impact market and/or customer perceptions of our company, which could lead to a loss of depositor confidence and an increase in deposit withdrawals, particularly among those with uninsured deposits.

CYBERSECURITY RISK

Our information systems may experience an interruption or security breach.

We rely heavily on communications and information systems to conduct our business. Any failure, interruption or breach in security of these systems could result in failures or disruptions of our internet banking, deposit, loan and other systems. While we have policies and procedures designed to prevent or limit the effect of the possible failure, interruption or security breach of our information systems, there can be no assurance that any such failure, interruption or security breach will not occur or, if it does occur, that it will be adequately addressed.

In the ordinary course of business, the Company collects and stores sensitive data, including proprietary business information and personally identifiable information of its customers and employees, in systems and on networks. The secure processing, maintenance and use of this information is critical to the Company’s operations and business strategy. The Company has invested in industry-accepted technologies, and annually reviews its processes and practices that are designed to protect its networks, computers and data from damage or unauthorized access. Despite these security measures, a cyber breach of any kind could compromise systems and the information stored there could be accessed, damaged or disclosed. The occurrence of any failure, interruption or security breach of our communications and information systems could damage our reputation, result in a loss of customer business, subject us to additional regulatory scrutiny or expose us to civil litigation and possible financial liability.

13

Table of Contents

Cybersecurity attacks may disarm and/or bypass system safeguards that are used by us and our vendors and service providers, and allow unauthorized access and misappropriation of financial data and assets.

As a financial institution, we are vulnerable to and are the target of cybersecurity attacks that attempt to access our digital technology systems, disarm and/or bypass system safeguards, access customer data and ultimately increase the risk of economic and reputational loss. The Company believes its cybersecurity risk management program reasonably addresses the risk from cybersecurity attacks. However, it is not possible to fully eliminate exposure. We may experience human error or have unknown susceptibilities that allow our systems to become victim to a highly-sophisticated cyber-attack. If hackers gain entry to our systems, they may disable other safeguards that limit loss, including limits on the number, amount and frequency of ATM withdrawals, as well as other loss-prevention or detection measures.

We also face risks related to cybersecurity attacks and security breaches in connection with the use, transmission and storage of sensitive information regarding us and our customers by various vendors and service providers. Some of these vendors and service providers have been the target of cybersecurity attacks or suffered security breaches, and because they use systems that we do not control or secure, future cyber-attacks or security breaches affecting any of these vendors and service providers could impact us through no fault of our own. In some cases, we may have exposure and suffer losses relating to these companies. Although we assess the security of our higher risk vendors and service providers, we cannot be sure that the information security protocols of all companies we do business with are sufficient to withstand cyber-attacks or other security breaches.

Insurance may not cover losses from cybersecurity attacks.

The Company has invested in insurance related to cybersecurity. Insurance policies are necessary to protect the Company from major losses but may be written in such a way as to limit the protection from certain risks, including cyber risks. If the insurance carrier denies coverage of losses, the Company may litigate. Because of policy technicalities, litigation may not result in a favorable outcome for the Company and litigation will result in additional legal expense.

OPERATIONAL RISK

The Company is subject to a variety of operational risks, including reputational, legal, and compliance risk, and the risk of fraud ort heft by employees, directors, or outsiders.

The Company is exposed to many types of operational risks, including reputational, legal, and compliance risk, the risk of fraud or theft by employees, directors or outsiders, unauthorized transactions by employees, operational errors, clerical or record-keeping errors, and errors resulting from faulty or disabled computer or communications systems.

Reputational risk, or the risk to the Company’s earnings and capital from negative public opinion, could result from the Company’s actual or alleged conduct in any number of activities, including lending practices, corporate governance, and from actions taken by government regulators and community organizations in response to those activities. Negative public opinion can adversely affect the Company’s ability to attract and keep customers and employees and can expose it to litigation and further regulatory action.

Further, if any of the Company’s financial, accounting, or other data processing systems fail or have other significant issues, the Company could be adversely affected. The Company depends on internal systems and outsourced technology to support these data storage and processing operations. The Company’s inability to use or access these information systems at critical points in time could unfavorably impact the timeliness and efficiency of the Company’s business operations. It could be adversely affected if one of its employees causes a significant operational break-down or failure, either as a result of human error or where an individual purposefully sabotages or fraudulently manipulates its operations or systems. The Company is also at risk of the impact of natural disasters, terrorism, and international hostilities on its systems and from the effects of outages or other failures involving power or communications systems operated by others. The Company may also be subject to disruptions of its operating systems arising from events that are wholly or partially beyond its control (for example, computer viruses, or electrical or communications outages), which may give rise to disruption of service to customers and to financial loss or liability. In addition, there have been instances where financial institutions have been victims of fraudulent activity in which criminals pose as customers to initiate wire and automated clearinghouse transactions out of customer accounts. Although the Company has policies and procedures in place to verify the authenticity of its customers, it cannot guarantee that such policies and procedures will prevent all fraudulent transfers. Such activity can result in financial liability and harm to the Company’s reputation. If any of the foregoing risks materialize, it could have a material adverse effect on the Company’s business, financial condition, and results of operations.

14

Table of Contents

The Company is dependent on key personnel and the loss of one or more of those key personnel may materially and adversely affect the Company’s operations and prospects.

The Company currently depends on the services of a number of key management personnel. The loss of key personnel could materially and adversely affect the results of operations and financial condition. The Company’s success also depends in part on the ability to attract and retain additional qualified management personnel. Competition for such personnel is strong and the Company may not be successful in attracting or retaining the personnel it requires.

The Company relies on other companies to provide key components of the Company’s business infrastructure.

Third parties provide key components of the Company’s business operations such as data processing, recording and monitoring transactions, online banking interfaces and services, internet connections and network access. While the Company has selected these third party vendors carefully, it does not control their actions. Any problem caused by these third parties, including those resulting from disruptions in communication services provided by a vendor, failure of a vendor to handle current or higher volumes, failures of a vendor to provide services for any reason or poor performance of services, could adversely affect the Company’s ability to deliver products and services to its customers and otherwise conduct its business. Financial or operational difficulties of a third party vendor could also hurt the Company’s operations if those difficulties interface with the vendor’s ability to serve the Company. Replacing these third party vendors could also create significant delay and expense and damage the Company’s ability to service its customers, resulting in a loss of customer goodwill. Accordingly, use of such third parties creates an unavoidable inherent risk to the Company’s business operations.

The Company’s ability to operate profitably may be dependent on its ability to integrate or introduce various technologies into its operations.

The market for financial services, including banking and consumer finance services, is increasingly affected by advances in technology, including developments in telecommunications, data processing, computers, automation, online banking and tele-banking. The Company’s ability to compete successfully in its market may depend on the extent to which it is able to exploit such technological changes. If the Company is not able to afford such technologies, properly or timely anticipate or implement such technologies, or effectively train its staff to use such technologies, its business, financial condition or results of operations could be adversely affected.

COMPLIANCE AND REGULATORY RISK

The Company operates in a highly regulated industry, and the laws and regulations that govern the Company’s operations, including changes in them or the Company’s failure to comply with them, and regulatory actions implementing such laws and regulations, may adversely affect the Company.

The Company is subject to extensive regulation and supervision that govern almost all aspects of its operations. These laws and regulations, and regulatory actions implementing such laws and regulations, among other matters, prescribe minimum capital requirements, impose limitations on the Company’s business activities, limit the dividends or distributions that it can pay, and impose certain specific accounting requirements that may be more restrictive and may result in greater or earlier charges to earnings or reductions in its capital than GAAP.

Changes to laws, regulations, or regulatory policies, or supervisory guidance, including changes in interpretation or implementation of laws, regulations, policies, or supervisory guidance, could affect the Company in substantial and unpredictable ways. Regulatory responses in connection with unforeseen stress events, including failures of banks and other financial institutions, often lead to increased regulatory scrutiny and heightened supervisory expectations and could adversely impact the Company’s business, financial condition, and results of operations, or alter or disrupt the Company’s planned future strategies and actions. The Company’s failure to comply with these laws and regulations could subject it to restrictions on its business activities, fines, and other penalties, any of which could adversely affect the Company’s results of operations, capital base, and the price of its securities. Compliance with laws and regulations, and regulatory actions implementing such laws and regulations, can be difficult and costly, and changes to laws and regulations could make compliance more difficult or expensive or otherwise adversely affect the Company’s business and financial condition.

Regulatory capital standards may have an adverse effect on the Company’s profitability, lending, and ability to pay dividends.

The Company is subject to capital adequacy guidelines and other regulatory requirements specifying minimum amounts and types of capital that the Company and the Bank must maintain. From time to time, regulators implement changes to these regulatory capital adequacy guidelines. If the Company fails to meet these minimum capital guidelines and/or other regulatory requirements, its financial condition would be materially and adversely affected. The Basel III Capital Rules require bank holding companies and their subsidiaries to maintain significantly more capital as a result of higher required capital levels and more demanding regulatory capital risk weightings and calculations. While the Company is exempt from these capital requirements under the Statement, the Bank is not exempt and must comply. The Bank must also comply with the capital requirements set forth in the “prompt corrective action” regulations pursuant to Section 38 of the Federal Deposit Insurance Act, as amended. Satisfying capital requirements may require the Company to limit its banking operations, retain net income or reduce dividends to improve regulatory capital levels, which could negatively affect its business, financial condition and results of operations.

15

Table of Contents

Changes in accounting standards could impact reported earnings.

The authorities who promulgate accounting standards, including the Financial Accounting Standards Board (“FASB”), SEC, and other regulatory authorities, periodically change the financial accounting and reporting standards that govern the preparation of the Company’s consolidated financial statements. These changes are difficult to predict and can materially impact how the Company records and reports its financial condition and results of operations. In some cases, the Company could be required to apply a new or revised standard retroactively, resulting in the restatement of consolidated financial statements for prior periods. Such changes could also require the Company to incur additional personnel or technology costs. Notably, guidance issued in June 2016 required a change in the calculation of credit reserves from using an incurred loss model to using the current expected credit losses model (“CECL”), effective January 1, 2023. To implement the standard, the Company incurred costs related to documentation, technology, training and increased audit expenses to validate the model. Adoption increased our credit reserves and reduced capital. Post adoption, the ACLL may experience increased volatility associated with change in forecasts that will impact profit and loss and various financial metrics. Please refer to Note 1 of Notes to Consolidated Financial Statements for further information on CECL.

Failure to maintain effective systems of internal and disclosure controls could have a material adverse effect on the Company's results of operation and financial condition.

Effective internal and disclosure controls are necessary for the Company to provide reliable financial reports and effectively prevent fraud and to operate successfully as a public company. Effective internal controls also are a deterrent to fraud. Pursuant to Section 404 of the SOX, the Company is required to include in its Annual Reports on Form 10-K management’s assessment of the effectiveness of internal controls over financial reporting. If the Company cannot provide reliable financial reports or reasonably prevent fraud, its reputation and operating results would be harmed. As part of its ongoing monitoring of internal controls, the Company may discover material weaknesses or significant deficiencies in its internal controls that require remediation. A “material weakness” is a deficiency, or a combination of deficiencies, in internal controls over financial reporting, such that there is a reasonable possibility that a material misstatement of a company’s annual or interim financial statements will not be prevented or detected on a timely basis.

Compliance with the requirements of Section 404 of SOX, including the costs of remediation efforts relating to weaknesses, is expensive and time-consuming. The Company’s inability to maintain operating effectiveness of the internal controls over financial reporting could result in a material misstatement to financial statements or other disclosures, which could have an adverse effect on its business, financial condition, and results of operations. In addition, any failure to remediate and maintain effective controls or to timely effect any necessary improvement of internal and disclosure controls could, among other things, result in losses from fraud or error, reputational damage, subject the Company to regulatory scrutiny, or cause investors to lose confidence in reported financial information, all of which could have a material adverse effect on the Company’s financial condition and results of operations.

The Company’s ability to pay dividends depends upon the results of operations of its subsidiaries.

The Company is a financial holding company and a bank holding company that conducts substantially all of its operations through NBB. As a result, the Company’s ability to make dividend payments on its common stock depends primarily on certain federal regulatory considerations and the receipt of dividends and other distributions from NBB. There are various regulatory restrictions on the ability of NBB to pay dividends or make other payments to the Company. Although the Company has historically paid a cash dividend to the holders of its common stock, regulatory or economic factors may cause the Company’s Board of Directors to consider, among other things, the reduction of dividends paid on the Company’s common stock.

The Company is subject to laws regarding the privacy, information security, and protection of personal information and any violation of these laws or another incident involving personal, confidential, or proprietary information of individuals could damage the Company’s reputation and otherwise adversely affect its business.

The Company’s business requires the collection and retention of large volumes of customer data, including personally identifiable information (“PII”), in various information systems that the Company maintains and in those maintained by third-party service providers. The Company also maintains important internal company data such as PII about its employees and information relating to its operations. The Company is subject to complex and evolving laws and regulations governing the privacy and protection of PII of individuals (including customers, employees and other third parties). For example, the Company’s business is subject to the GLBA, which, among other things: (i) imposes certain limitations on the Company’s ability to share nonpublic PII about its customers with nonaffiliated third parties; (ii) requires that the Company provide certain disclosures to customers about its information collection, sharing, and security practices and afford customers the right to “opt out” of any information sharing by it with nonaffiliated third parties (with certain exceptions); and (iii) requires that the Company develop, implement, and maintain a written comprehensive information security program containing appropriate safeguards based on the Company’s size and complexity, the nature and scope of its activities, and the sensitivity of customer information it processes, as well as plans for responding to data security breaches. Various federal and state banking regulators and states have also enacted data breach notification requirements with varying levels of individual, consumer, regulatory, or law enforcement notification in the event of a security breach. Ensuring that the Company’s collection, use, transfer, and storage of PII complies with all applicable laws and regulations can increase the Company’s costs. Furthermore, the Company may not be able to ensure that customers and other third parties have appropriate controls in place to protect the confidentiality of the information that they exchange with it, particularly where such information is transmitted by electronic means. If personal, confidential, or proprietary information of customers or others were to be mishandled or misused, the Company could be exposed to litigation or regulatory sanctions under privacy and data protection laws and regulations. Concerns regarding the effectiveness of the Company’s

16

Table of Contents

measures to safeguard PII, or even the perception that such measures are inadequate, could cause the Company to lose customers or potential customers and thereby reduce its revenues. Accordingly, any failure, or perceived failure, to comply with applicable privacy or data protection laws and regulations may subject the Company to inquiries, examinations, and investigations that could result in requirements to modify or cease certain operations or practices or result in significant liabilities, fines, or penalties, and could damage the Company’s reputation and otherwise adversely affect its operations, financial condition, and results of operations.

Climate change and related legislative and regulatory initiatives may result in operational changes and expenditures that could significantly impact the Company’s business.

The current and anticipated effects of climate change are creating an increasing level of concern for the state of the global environment. As a result, political and social attention to the issue of climate change has increased. Federal and state legislatures and regulatory agencies have continued to propose and advance numerous legislative and regulatory initiatives seeking to mitigate the effects of climate change. The federal banking agencies, including the OCC, have emphasized that climate-related risks are faced by banking organizations of all types and sizes and are in the process of enhancing supervisory expectations regarding banks’ risk management practices. In October 2023, the OCC published principles for climate risk management by banking organizations with more than $100 billion in assets. The OCC also has appointed its first ever Climate Change Risk Officer and established an internal climate risk implementation committee in order to assist with these initiatives and to support the agency’s efforts to enhance its supervision of climate change risk management. Similar and even more expansive initiatives are expected, including potentially increasing supervisory expectations with respect to banks’ risk management practices, accounting for the effects of climate change in stress testing scenarios and systemic risk assessments, revising expectations for credit portfolio concentrations based on climate-related factors and encouraging investment by banks in climate-related initiatives and lending to communities disproportionately impacted by the effects of climate change. In addition, on March 6, 2024, the SEC adopted rules to enhance and standardize climate-related disclosures by public companies so that there is more consistent, comparable, and reliable information about the financial effects of climate-related risks on a public company’s operations and how it manages those risks. To the extent that these initiatives lead to the promulgation of new regulations or supervisory guidance applicable to the Company, the Company would likely experience increased compliance costs and other compliance-related risks.

The lack of empirical data surrounding the credit and other financial risks posed by climate change render it impossible to predict how specifically climate change may impact the Company’s financial condition and results of operations; however, the physical effects of climate change may also directly impact the Company. Specifically, unpredictable and more frequent weather disasters may adversely impact the value of real property securing the loans in the Company’s loan portfolio. Additionally, if insurance obtained by borrowers is insufficient to cover any losses sustained to the collateral, or if insurance coverage is otherwise unavailable to borrowers, the collateral securing loans may be negatively impacted by climate change, which could impact the Company’s financial condition and results of operations. Further, the effects of climate change may negatively impact regional and local economic activity, which could lead to an adverse effect on customers and impact the communities in which the Company operates. Overall, climate change, its effects and the resulting unknown impact, could have a material adverse effect on the Company’s financial condition and results of operations.

LEGAL RISK

The Company is subject to claims and litigation pertaining to fiduciary responsibility.

From time to time, customers make claims and take legal action pertaining to the performance of the Company’s fiduciary responsibilities. Whether customer claims and legal action related to the performance of the Company’s fiduciary responsibilities are founded or unfounded, if such claims and legal actions are not resolved in a manner favorable to the Company, they may result in significant financial liability and/or adversely affect the market perception of the Company and its products and services, as well as impact customer demand for those products and services. Any financial liability or reputation damage could have a material adverse effect on the Company’s business, which, in turn, could have a material adverse effect on the Company’s financial condition and results of operations.

GENERAL RISK

Changes in funding for local universities could materially affect our business.

Two major employers in the Company’s market area are Virginia Tech and Radford University, both state-supported institutions. If federal or state support for public colleges and universities wanes, our business may be adversely affected from declines in university programs, capital projects, employment, enrollment, sporting and cultural events, and other related factors.

If the economy suffers a recession, our credit risk will increase and there could be greater loan losses.

If the economy suffers a recession, it is likely to result in a higher rate of business closures and increased job losses in the region in which we do business. These factors would increase the likelihood that more of our customers would become delinquent or default on their loans. A higher level of loan defaults could result in higher loan losses, which could adversely affect our results of operations and financial condition.

17

Table of Contents

While the Company’s common stock is currently traded on the Nasdaq Capital Market, it has less liquidity than stocks for larger companies quoted on a national securities exchange.

The trading volume in the Company’s common stock on the Nasdaq Capital Market has been relatively low when compared with larger companies listed on the Nasdaq Capital Market or other stock exchanges. There is no assurance that a more active and liquid trading market for the common stock will exist in the future. Consequently, stockholders may not be able to sell a substantial number of shares for the same price at which stockholders could sell a smaller number of shares. In addition, the Company cannot predict the effect, if any, that future sales of its common stock in the market, or the availability of shares of common stock for sale in the market, will have on the market price of the common stock. Sales of substantial amounts of common stock in the market, or the potential for large amounts of sales in the market, could cause the price of the Company’s common stock to decline, or reduce the Company’s ability to raise capital through future sales of common stock.

Natural disasters, acts of war or terrorism, geopolitical instability, the impact of public health issues and other adverse external events could detrimentally affect our financial condition and results of operations.

Natural disasters, acts of war or terrorism, geopolitical instability, the impact of public health issues and other adverse external events could have a significant negative impact on our ability to conduct business or upon third parties who perform operational services for us or our customers. Such events also could affect the stability of our deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, impair the value of our investment portfolio, result in lost revenue or cause us to incur additional expenses.

Although the Company has business continuity plans and other safeguards in place, there is no assurance that such plans and safeguards will be effective. In the event of a natural disaster, acts of war or terrorism, public health issues or other adverse external events, our business, services, asset quality, financial condition and results of operations could be adversely affected.

The development and use of Artificial Intelligence (“AI”) presents risks and challenges that may adversely impact our business.

We or our third-party vendors, clients, or counterparties may develop or incorporate AI technology in certain business processes, services, or products. The development and use of AI presents a number of risks and challenges to our business. The legal and regulatory environment relating to AI is uncertain and rapidly evolving, and includes regulatory schemes targeted specifically at AI as well as provisions in intellectual property, privacy, consumer protection, employment, and other laws applicable to the use of AI. These evolving laws and regulations could require changes in our implementation of AI technology and increase our compliance costs and the risk of non-compliance. AI models, particularly generative AI models, may produce outputs or take actions that are incorrect, that reflect biases included in the data on which they are trained, that result in the release of private, confidential, or proprietary information, that infringe on the intellectual property rights of others, or that are otherwise harmful. In addition, the complexity of many AI models makes it difficult to understand why they are generating particular outputs. This limited transparency increases the challenges associated with assessing the proper operation of AI models, understanding and monitoring the capabilities of the AI models, reducing erroneous outputs, eliminating bias, and complying with regulations that require documentation or explanation of the basis on which decisions are made. Further, we may rely on AI models developed by third parties, and, to that extent, would be dependent in part on the manner in which those third parties develop and train their models, including risks arising from the inclusion of any unauthorized material in the training data for their models and the effectiveness of the steps these third parties have taken to limit the risks associated with the outputs of their models, matters over which we may have limited visibility. Any of these risks could expose us to liability or adverse legal or regulatory consequences and harm our reputation and the public perception of our business or the effectiveness of our security measures.

Item 1B. Unresolved Staff Comments

There are no unresolved staff comments.

18

Table of Contents

Item 1C. Cybersecurity

Cybersecurity Risk Management and Strategy

The Company recognizes the risks posed by cybersecurity threats, including the risk of harm to our customers, our financial condition and results of operations, and our reputation. Following a layered defense-in-depth strategy, the Company utilizes a variety of controls and both internal and third-party resources to assess and manage identified risks. The following components of our information security program address cybersecurity risk management, and have been integrated into the Company’s overall risk management systems and processes:

Cybersecurity risks are identified and prioritized for resource allocation using two annual risk assessments: an internal risk assessment utilizing the Federal Financial Institutions Examination Council’s (“FFIEC”) Cybersecurity Assessment Tool, and a formal risk assessment prepared in conjunction with an external consultant.

A comprehensive set of security technologies constantly monitor our information systems and data, including endpoint detection and response services, intrusion detection and prevention, various filtering technologies, and event correlation technologies that alert management to potential cybersecurity threats.

Skilled internal personnel manage and update cyber defense functions including engineering, configuration, data protection, identity and access management, security operations, and threat intelligence.

Training programs continuously educate employees about cybersecurity risks and protection practices.

Periodic social engineering testing assists management in identifying training needs.

An incident response plan outlines the Company’s response to a cybersecurity incident. Periodic testing of the plan ensures readiness and identifies refinements.

Reputable third-party assessors are engaged to conduct various assessments on a regular basis.

Supporting the Company’s information security program is a third-party risk management program that manages the life cycle of external service providers and ensures that vendors meet the Company’s cybersecurity requirements. This includes a periodic risk assessment of vendors and the review of vendor assessment documentation including audit reports and other independent control assessments.

The Company’s cybersecurity risk management and strategy are regularly reviewed and updated to support our business strategy and objectives, our overall risk management, and address evolving potential cybersecurity threats.

Material Effects of Cybersecurity Threats

Cybersecurity risks have the potential to materially affect the Company’s business, financial condition and results of operation. The Company has strengthened its cybersecurity framework in recent years but the sophistication of emerging cyber threats and the utilization of new attack methods continues to evolve. The Company’s cybersecurity risk management and strategy may not protect against all cyber incidents. For more information on how cybersecurity risk may materially affect the Company’s business strategy, results of operations or financial condition, please refer to Item 1A, Risk Factors of this Form 10-K.

Governance

Board of Directors Oversight

The Company’s Board of Directors is charged with overseeing the establishment and execution of the Company’s enterprise risk management framework, including cybersecurity risk, and monitoring adherence to related policies required by applicable statutes, regulations and principles of safety and soundness. The Company’s Information Security Officer (“ISO”) provides the Board Risk Committee with regular updates on information security risk management and an annual comprehensive information security status report, which assesses the effectiveness of the program and updates the Risk Committee on developing trends and emerging threats.

Management’s Role

The Company’s ISO has many years of experience appropriate to the role and is supported by skilled internal personnel. The ISO is responsible for identifying, assessing and managing cybersecurity risks and designing, implementing and maintaining the Company’s information security program. The ISO reports to the Chief Risk Officer and the Board of Directors.Management’s enterprise risk management committee receives regular updates from the ISO on cybersecurity related risks, including trends and emerging threats.

Item 2. Properties

NBB owns and has a branch bank in NBI’s headquarters located at 101 Hubbard Street, Blacksburg, Virginia. NBB’s main office is at 100 South Main Street, Blacksburg, Virginia. NBB owns an additional nineteen branch offices and a private office location for support functions, as well as a property nearing completion that will become its Roanoke branch location. NBB leases six branch locations and one loan production office. As of December 31, 2024, there were no mortgages or liens against any properties. We believe that existing facilities are adequate for current needs and to meet anticipated growth. A list of all branch and ATM locations is available on our website at www.nbbank.com. Information contained on our website is not part of this report. For additional information, please see Note 6 and Note 19 of Notes to Consolidated Financial Statements.

19

Table of Contents

Item 3. Legal Proceedings

NBI, NBB, and NBFS are not currently involved in any material pending legal proceedings. There are no legal proceedings against the Company related to cybersecurity.

Item 4. Mine Safety Disclosures

Not applicable.

Part II

Item 5. Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities

Common Stock Information and Dividends

NBI’s common stock is traded on the Nasdaq Capital Market under the symbol “NKSH.” As of December 31, 2024, there were 894 record stockholders of NBI common stock.

NBI’s primary source of funds for dividend payments is dividends from its bank subsidiary, NBB. Bank dividend payments are restricted by regulators, as more fully disclosed in “Regulation, Supervision and Government Policy” contained in Part I, Item 1, “Business” and Note 10 of Notes to Consolidated Financial Statements contained in Item 8, “Financial Statements and Supplementary Data” of this Form 10-K.

In May 2024, NBI’s Board of Directors approved the repurchase of up to 250,000 shares of the Company’s common stock. The authorization extends from June 1, 2024 to May 31, 2025. During 2024, the Company did not repurchase any shares. The Company’s share repurchase program does not obligate it to acquire any specific number of shares or any shares at all.

Item 6. [Reserved]

20

Table of Contents

Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations

$ in thousands, except per share data.

The purpose of this discussion and analysis is to provide information about the results of operations, financial condition, liquidity and capital resources of the Company. The discussion should be read in conjunction with the material presented in Item 8, “Financial Statements and Supplementary Data,” of this Form 10-K.

Subsequent events have been considered through the date of this Form 10-K.

Cautionary Statement Regarding Forward-Looking Statements

We make forward-looking statements in this Form 10-K that are subject to significant risks and uncertainties. These forward-looking statements include statements regarding our profitability, liquidity, allowance for credit losses, interest rate sensitivity, market risk, growth strategy, and financial and other goals, and are based upon our management’s views and assumptions as of the date of this report. The words “believes,” “expects,” “may,” “will,” “should,” “projects,” “contemplates,” “anticipates,” “forecasts,” “intends,” or other similar words or terms are intended to identify forward-looking statements.

These forward-looking statements are based upon or are affected by factors that could cause our actual results to differ materially from historical results or from any results expressed or implied by such forward-looking statements. These factors include, but are not limited to, effects of or changes in:

inflation and changes in interest rates that may reduce our margins or reduce the fair value of financial instruments,

the ability to maintain adequate liquidity by retaining deposit customers and secondary funding sources, especially if the Company’s or banking industry’s reputation becomes damaged,

the adequacy of the level of the Company’s allowance for credit losses, the amount of credit loss provisions required in future periods, and the failure of assumptions underlying the allowance for credit losses,

general and local economic conditions,

monetary and fiscal policies of the U.S. Government, including policies of the U.S. Treasury, the OCC, the Federal Reserve, the CFPB and the FDIC, and the impact of any policies or programs implemented pursuant to financial reform legislation,

unanticipated increases in the level of unemployment in the Company’s market,

the quality or composition of the loan and/or investment portfolios,

demand for loan products,

deposit flows,

competition,

demand for financial services in the Company’s market,

the real estate market in the Company’s market,

laws, regulations and policies impacting financial institutions,

technological risks and developments, and cyber-threats, attacks or events,

the Company’s technology initiatives,

geopolitical conditions, including trade restrictions and tariffs, and acts or threats of terrorism and/or military conflicts, or actions taken by the U.S. or other governments in response to trade restrictions and tariffs, and acts or threats of terrorism and/or military conflicts,

the occurrence of significant natural disasters, including severe weather conditions, floods, health related issues, and other catastrophic events,

the Company's ability to identify, attract, and retain experienced management, relationship managers, and support personnel, particularly in a competitive labor environment,

performance by the Company’s counterparties or vendors,

applicable accounting principles, policies and guidelines, and

risks associated with mergers, acquisitions, and other expansion activities.

These risks and uncertainties should be considered in evaluating the forward-looking statements contained in this report. We caution readers not to place undue reliance on those statements, which speak only as of the date of this report. This discussion and analysis should be read in conjunction with the description of our “Risk Factors” in Item 1A. of this Form 10-K.

21

Table of Contents

Critical Accounting Policies

The Company’s consolidated financial statements are prepared in accordance with GAAP. The financial information contained within our statements is, to a significant extent, based on measures of the financial effects of transactions and events that have already occurred. A variety of factors could affect the ultimate value obtained when earning income, recognizing an expense, recovering an asset or relieving a liability. Although the economics of the Company’s transactions may not change, the timing of events that would impact the transactions could change.

Critical accounting policies are most important to the portrayal of the Company’s financial condition or results of operations and require management’s most difficult, subjective, and complex judgments about matters that are inherently uncertain. If conditions occur that differ from our assumptions, depending upon the severity of such differences, the Company’s financial condition or results of operations may be materially impacted. The Company designates the following policies as critical: those governing the allowance for credit losses, goodwill, the pension plan, core deposit intangibles and loans acquired in a business combination. The Company evaluates its critical accounting estimates and assumptions on an ongoing basis and updates them as needed. Please refer to Note 1 of Notes to Consolidated Financial Statements for information on these and other accounting policies.

Non-GAAP Financial Measures

This report refers to certain financial measures that are computed on a basis other than GAAP (“non-GAAP”). The Company uses certain non-GAAP financial measures to provide meaningful supplemental information regarding the Company’s operational performance and to enhance investors’ overall understanding of such financial performance. The methodology for determining these non-GAAP measures may differ among companies. Non-GAAP measures are supplemental and not a substitute for, or more important than, financial measures prepared in accordance with GAAP. Details on non-GAAP measures follow.

Net Interest Margin

The Company uses the net interest margin (non-GAAP) to measure profitability of interest generating activities, as a percentage of total interest-earning assets. The Company’s net interest margin is calculated on a fully taxable equivalent (“FTE”) basis. The portion of interest income that is nontaxable is grossed up to the tax equivalent by adding the tax benefit based on a tax rate of 21%. Annualized FTE net interest income is divided by total average earning assets to calculate the net interest margin. The following tables present the reconciliation of tax equivalent net interest income, which is not a measurement under GAAP, to net interest income, for the periods indicated.

Year Ended December 31,

Net interest income, FTE (non-GAAP) $ 37,365 $ 38,173

Net interest margin (non-GAAP) 2.19 % 2.38 %

22

Table of Contents

Efficiency Ratio

The efficiency ratio (non-GAAP) is computed by dividing noninterest expense by the sum of FTE net interest income and noninterest income, excluding certain items the Company’s management deems unusual or non-recurring. This is a non-GAAP financial measure that the Company believes provides investors with important information regarding operational efficiency. The components of the efficiency ratio calculation for the periods indicated are summarized in the following table.

Year Ended December 31,

Less: merger-related expense (2,916 ) -

Less: contract termination expense (1) (173 ) -

Less: proxy-related expense (2) - (786 )

Adjusted noninterest expense (non-GAAP) $ 31,919 $ 28,442

Noninterest income (GAAP) $ 8,960 $ 9,359

Less: realized securities loss, net - 3,332

Less: gain on contract contingency (3) - (232 )

Less: gain on sale of investment (4) - (2,971 )

Less: gain on BOLI settlement - (1,044 )

Adjusted noninterest income (non-GAAP) 8,960 8,444

Total income for efficiency ratio (non-GAAP) $ 46,325 $ 46,617

Efficiency ratio (non-GAAP) 68.90 % 61.01 %

(1)

Contract termination expense was recorded to reflect the Company's notification to a vendor that it intends to end its relationship in 2025.

(2)

Included in professional services in the Consolidated Statements of Income.

(3)

Gain recognized upon receipt of a contract contingency payment associated with the 2022 sale of a private equity investment.

(4)

Sale of the Company’s VISA Class B shares.

23

Table of Contents

Performance Summary

Key to understanding the Company’s results of operations and financial position is the acquisition of FCB and the impact of the interest rate environment. The acquisition of FCB on June 1, 2024 expanded the Company's footprint into desirable markets and increased its growth potential. The acquisition added to the balance sheet $118,743 in loans, $129,717 in deposits and $14,299 in equity. The Company also recorded one-time expenses of $2,916 and provision for credit loss of $1,290 associated with the merger. For more information on the acquisition, see Note 22: Business Combination.

Between March 2022 and July 2023, the Federal Reserve increased interest rates 525 basis points. The rapidity and magnitude of the change was unprecedented and spurred intense competitive pressure for deposits, affected the fair value of the Company’s securities, and dampened loan demand. The effects of the interest rate environment continued into 2024, however the Federal Reserve's 100 basis point interest rate cut between September and December eased deposit pricing pressure somewhat during the fourth quarter of 2024.

When comparing current and prior year results, items to note include the Company's 2023 special one-time dividend of $1 per common share, paid in addition to its usual bi-annual dividends. The dividend rewarded stockholders for the Company’s positive performance during 2022, which included a one-time pre-tax gain on the sale of a private equity investment. Related to the 2022 gain on the sale of a private equity investment, the Company recorded in 2023 pre-tax income of $232 upon receipt of a contract contingency payment. Also in 2023, the Company sold its VISA Class B shares and recognized a pre-tax gain of $2,971, and strategically sold securities, recording a pre-tax loss of $3,332. The Company recognized tax-free income of $1,044 for the settlement of a bank owned life insurance (“BOLI”) policy in 2023, and incurred expense in 2023 of $786 to respond to a proxy contest from an activist investor.

Summary information on results of operations, changes in key balances and asset quality is presented below. Expanded discussion is provided in subsequent sections.

Summary Results of Operations

The following tables present summary income, expenses and key performance indicators for the years indicated. Key performance indicators provide a summary of the Company’s results and allow comparison with results from prior years.

Year Ended December 31,

Provision for (recovery of) credit losses 1,227 (1,261 )

Year Ended December 31,

Summary Key Performance Indicators 2024 2023

Return on average assets 0.44 % 0.97 %

Return on average equity 5.17 % 12.59 %

Basic net income per common share $ 1.24 $ 2.66

Fully diluted net income per common share $ 1.24 $ 2.66

Net interest margin (1) 2.19 % 2.38 %

(1)

See "Non-GAAP Financial Measures" above.

Net income for the year ended December 31, 2024 decreased when compared with the year ended December 31, 2023, due to net interest margin compression, merger related expenses and contract termination expense. The net interest margin as well as key noninterest income and expense items are discussed under “Income Statement” below.

24

Table of Contents

Summary Change in Key Balances

Key balances are presented in the following table as of the dates indicated:

December 31, Change

Loans, net of deferred fees and costs and the ACLL, increased when December 31, 2024 is compared with December 31, 2023, primarily due to the FCB acquisition. The higher interest rate environment continues to restrain loan demand. The Company is positioned to continue to make every loan that meets its underwriting standards.

Securities available for sale are presented at fair value as of each reporting date. The fair value of bonds moves inversely to interest rate changes and expectations of interest rate changes. Most of the Company’s securities were purchased during periods prior to the Federal Reserve’s interest rate increases that began in March of 2022. The portfolio decreased during 2024 due to maturities and pay downs. Further detail is provided in the “Balance Sheet” section below.

Customer deposits increased when December 31, 2024 is compared with December 31, 2023, primarily due to the FCB acquisition, supplemented by organic growth.

Total assets increased from December 31, 2023 to December 31, 2024, primarily due to the acquisition of FCB. Stockholders’ equity increased from December 31, 2023 to December 31, 2024 due to the acquisition of FCB and improvements in accumulated other comprehensive loss related to the market value of securities and the Company's pension plan.

Summary Asset Quality

Key indicators of the Company’s asset quality are presented in the following table as of the dates indicated:

December 31,

Loans past due 90 days or more, and still accruing 548 188

ACLL to loans net of deferred fees and costs 1.04 % 1.06 %

Net charge-off ratio 0.03 % 0.02 %

Ratio of ACLL to nonperforming loans 461.84 % 345.91 %

The Company monitors asset quality indicators in managing credit risk and in determining the ACLL and provision for credit losses. When December 31, 2024 is compared with December 31, 2023, nonaccrual loans improved. The net charge-off ratio and accruing loans past due 90 days or more increased, though remain at historically low levels.

The Company believes that sufficient resources have been dedicated to resolving problem assets, and exposure to loss is somewhat mitigated by sufficient collateralization. More information about nonaccrual and past due loans is provided in Note 1 and Note 5 of Notes to Consolidated Financial Statements. The Company continues to carefully monitor risk levels within the loan portfolio.

25

Table of Contents

Income Statement

The following provides information on the results of operations for the years ended December 31, 2024 and December 31, 2023.

Net Interest Income

The Company’s primary source of revenue is net interest income, which is the difference between the interest and fees earned on loans and investments and the interest paid on customer deposits and other interest-bearing liabilities. Net interest income is affected by various factors, including the Federal Reserve’s monetary policy, U.S. fiscal policy, competitive pressure, the level and composition of the interest-earning assets and the composition of interest-bearing liabilities. Changes in the Federal Reserve’s target interest rate immediately affect the yield on the Company’s interest-bearing deposits in correspondent banks and affect other interest-earning assets over time.

The net interest margin for the year ended December 31, 2024 decreased when compared with the year ended December 31, 2023. Loans, adjustable rate securities and interest bearing deposit assets repriced upward, but did not fully offset higher interest expense. The Federal Reserve's interest rate cuts during the last four months of 2024 immediately decreased interest rates on deposits with pricing based on the prime interest rate, however current interest rates are still at a level that will allow interest income and the yield on earning assets to grow as adjustable loans reach repricing dates.

The frequency and/or magnitude of future changes in market interest are difficult to predict and may have a greater short-term impact on net interest income than adjustments by management. Please refer to the section titled “Analysis of Changes In Interest Income and Interest Expense” for further information related to rate and volume changes.

Analysis of Net Interest Earnings

The following table presents the major categories of interest‐earning assets and interest‐bearing liabilities, the interest earned or paid, the average yield or rate on the daily average balance outstanding, net interest income and net yield on average interest‐earning assets for the years indicated.

Year Ended December 31,

Interest-earning assets:

Interest-bearing liabilities:

Net interest margin 2.19 % 2.38 %

(1)

Loans are net of deferred fees and costs. Loans include loans held in portfolio and loans held for sale.

(2)

Net loan fees included in interest income in 2024 were $200. Net loan fees included in interest income in 2023 were $214.

(3)

Nonaccrual loans are included in average balances for yield computations.

(4)

Daily averages are presented at amortized cost.

(5)

Interest on nontaxable loans and securities is computed on an FTE basis using a Federal income tax rate of 21%.

(6)

Includes restricted stock.

26

Table of Contents

The following table reconciles net interest income on an FTE basis (non-GAAP) to net interest income on a GAAP basis for the years indicated.

December 31,

Net interest income, FTE (non-GAAP) $ 37,365 $ 38,173

Analysis of Changes in Interest Income and Interest Expense

The following table summarizes changes in interest income and interest expense resulting from changes in average asset and liability balances (volume) and changes in average interest rates (rate), when the year ended December 31, 2024 is compared with the year ended December 31, 2023.

Increase (Decrease) due to Changes in: Net Dollar

Rates(2) Volume(2) Change

Interest income: (1)

Nontaxable securities (7 ) (50 ) (57 )

Federal Funds Sold - 26 26

Interest expense:

Short-term borrowings (65 ) (233 ) (298 )

(1)

FTE basis using a Federal income tax rate of 21%.

(2)

Variances caused by the change in rate multiplied by the change in volume have been allocated to rate and volume changes proportional to the relationship of the absolute dollar amounts of the change in each.

The acquisition of FCB increased the volume of both loans and deposits, contributing to higher interest income and interest expense. The elevated rate environment increased interest income and while interest expense continued to rise, the increase moderated when compared with 2023. A portion of the Company’s taxable securities portfolio is subject to monthly repricing, while many of the Company’s loans are adjustable with repricing dates in the future. The volume of interest-bearing deposit assets increased due to higher customer deposits.

Interest Rate Sensitivity

Interest rate risk is the risk to earnings or capital arising from movements in market interest rates. When interest-earning assets and interest-bearing liabilities reprice at different times or in different degrees or when call options are exercised, in response to change in market interest rates, future net interest income is impacted. When interest-earning assets mature or re-price more quickly than interest-bearing liabilities, the balance sheet is considered “asset sensitive”. An asset sensitive position will produce relatively more net interest income when interest rates rise and less net interest income when rates decline. Conversely, when interest-bearing liabilities mature or re-price more quickly than interest-earning assets in a given period, the balance sheet is considered “liability sensitive”. A liability sensitive position will produce relatively more net interest income when interest rates fall and less net interest income when rates increase.

The Company considers interest rate risk to be a significant risk and manages its exposure through policies approved by its Asset Liability Committee ("ALCO") and Board of Directors. ALCO reviews periodic reports of the Company's interest rate risk position, including results of simulation analysis. Simulation analysis applies interest rate shocks, hypothetical immediate shifts in interest rates, to the Company’s financial instruments and determines the impact to projected one-year net interest income and other key measures. The following table shows the results of rate shocks on net interest income projected for one year from the reporting date.

27

Table of Contents

Results of the net interest income simulation indicate that the Company is liability sensitive as of December 31, 2024 and December 31, 2023. The simulation process requires certain estimates and assumptions including, but not limited to, asset growth, the mix of assets and liabilities, the interest rate environment and local and national economic conditions. Asset growth and the mix of assets can, to a degree, be influenced by management. Other areas, such as the interest rate environment and economic factors, cannot be controlled. In addition, competitive pressures can make it difficult to price deposits and loans in a manner that optimally minimizes interest rate risk. Actual results will differ from simulated results due to the timing, magnitude, and frequency of interest rate changes; changes in market conditions and customer behavior; and changes in management strategies.

While the asset/liability management program is designed to protect the Company over the long term, it does not provide near-term protection from interest rate shocks, as interest rate sensitive assets and liabilities do not by their nature move up or down in tandem in response to changes in the overall rate environment. The Company’s profitability in the near-term may be temporarily negatively affected in a period of rapidly rising or rapidly falling rates, because it takes some time for the Company’s portfolio to reflect changes to offering rates in response to a new interest rate environment.

Provision for (Recovery of) Credit Losses

Provision expense for the year ended December 31, 2024 was $1,227, reflecting provision for credit losses for funded loans of $1,242 and recovery of credit losses for unfunded loan balances of $15. Provision for funded loans included $1,290 in provision for non-PCD loans recorded upon acquisition date, offset by $48 resulting from changes in the Company's assessment of credit risk. For the year ended December 31, 2023, the Company recorded a net recovery of $1,261, reflecting an improvement in portfolio metrics and economic conditions when compared with December 31, 2022. More information about the ACLL is provided in “Balance Sheet – Loans – Allowance for Credit Losses” below and in Notes 1 and 5 of Notes to Consolidated Financial Statements.

Noninterest Income

The following table presents the Company’s noninterest income for the years indicated.

Year Ended December 31, Change

Gain on sale of investment - 2,971 (2,971 ) NM

Realized securities loss, net - (3,332 ) 3,332 NM

Service charges on deposit accounts increased when the year ended December 31, 2024 is compared with the year ended December 31, 2023, primarily due to changes in fee structure, the FCB acquisition, and increased customer use of the Bank’s overdraft program. Service charges on deposit accounts also include account maintenance fees, ATM fees and wire transfer fees.

Other service charges and fees decreased when 2024 is compared with 2023, due to lower fees associated with letters of credit and one time fee income received in 2023. Other service charges and fees also include charges for official checks, income from the sale of checks to customers, safe deposit box rent, and income from commissions on the sale of credit life, accident and health insurance.

Credit and debit card fees, net, decreased when 2024 is compared with 2023 due to higher processing costs. Credit and debit card fees are presented net of certain processing expenses and are dependent on the volume of transactions.

28

Table of Contents

Trust income increased when the year ended December 31, 2024 is compared with the year ended December 31, 2023 due to higher volume. Trust fees are generated from a number of different types of accounts, including estates, personal trusts, employee benefit trusts, investment management accounts, attorney-in-fact accounts and guardianships. Trust income varies depending on the number and type of accounts under management and financial market conditions.

BOLI income decreased when 2024 is compared with 2023, due to a gain of $1,044 recorded in 2023 for settlement of a policy.

During 2023, the Company sold its VISA Class B securities, recognizing a gain of $2,971.

The gain on sale of mortgage loans increased from 2023 to 2024 as volume improved.

Other income includes dividends, adjustments to partnership basis in investments, commissions from investment and insurance sales and other miscellaneous components. During 2023, the Company recorded income of $232 upon receipt of a contract contingency payment.

The Company recorded a net loss on the sale of securities during 2023, discussed in further detail under the “Securities” section.

Noninterest Expense

The following table presents the Company’s noninterest expense for the years indicated.

Year Ended December 31, Change

Intangible asset amortization 237 - 237 NM

Net costs of other real estate owned - 31 (31 ) NM

Contract termination expenses 173 - 173 NM

Salaries and employee benefits, which include payroll taxes, health insurance, contributions to the employee stock ownership plan and employee 401(k), pension expense, incentives and salary continuation increased when 2024 is compared with 2023, reflecting the addition of FCB employees.

When the year ended December 31, 2024 is compared with the year ended December 31, 2023, occupancy, furniture and fixtures expense and data processing and ATM expense increased due to ATM upgrades, higher maintenance costs, and additional assets acquired from FCB.

FDIC assessment expense increased from 2023 to 2024, due to an expanded assessment base after the FCB acquisition.

Upon acquisition of FCB in 2024, the Company recognized a core deposit intangible asset that is amortized over 10 years.

Franchise tax expense increased from 2023 to 2024. Franchise taxes are levied by the states in which NBB operates and are based upon NBB’s total equity at the prior year-end, adjusted for real estate taxes and certain other items.

Professional services, which includes legal and other expenses decreased when 2024 is compared to 2023. During 2023, the Company incurred legal and consulting expenses of $786 to respond to a threatened proxy contest from an activist shareholder.

Merger-related expenses included legal, accounting, regulatory, and executive and employee severance costs associated with the FCB acquisition. The Company does not expect any further material expense related to the transaction.

During 2024, the Company recorded a contract termination expense when it gave formal notification to a vendor that it intends to end its relationship in 2025.

Other operating expenses increased when the years ended December 31, 2024 and 2023 are compared. The category of other operating expenses includes expense for marketing and business development, supplies, non-service pension cost and charitable donations. Marketing and business development expenses increased during 2024 for advertising campaigns associated with the FCB acquisition and the coming Roanoke branch. Multiple additional items increased by smaller amounts.

Included within other operating expense and data processing and ATM expense are expenses related to cybersecurity. These expenses include testing and vulnerability assessment, technological defenses, insurance and employee training. The cost of these measures was $365 for 2024 and $529 for 2023. The Company places high priority on cybersecurity. The decrease in expense reflects renegotiation of contracts and licensing.

Income Taxes

29

Table of Contents

Income tax expense for 2024 was $1,499 compared to $2,984 in 2023. The Company’s statutory tax rate was 21% for each year. The Company’s effective tax rates for 2024 and 2023 were 16.43% and 15.98%, respectively. The Company’s effective tax rate is lower than the statutory rate of 21% due to investments in tax-advantaged loans and securities. The Company's effective tax rate for 2024 was also affected by a significant portion of merger related expense that was not tax deductible. During 2023, the Company recognized a gain on the settlement of a BOLI policy that was not taxable. See Note 9 of Notes to Consolidated Financial Statements for information relating to income taxes.

Balance Sheet

The following provides information on the Company’s financial position as of December 31, 2024 and December 31, 2023.

Loans

The Company’s loan categorization reflects its approach to loan portfolio management and includes six groups. Real estate construction loans include construction loans for residential and commercial properties, as well as land. Consumer real estate loans include conventional and junior lien mortgages, equity lines and investor-owned residential real estate. Commercial real estate loans are comprised of owner-occupied and leased nonfarm, nonresidential properties, multi-family residence loans and farmland. Commercial non-real estate loans include agricultural loans, operating capital lines and loans secured by capital assets. Public sector and industrial development authority (“IDA”) loans are extended to municipalities. Consumer non-real estate loans include automobile loans, personal loans, credit cards and consumer overdrafts. The following table presents the composition of the loan portfolio, excluding mortgage loans held for sale, as of the dates indicated.

December 31,

Less deferred fees and costs (663 ) (529 )

Allowance for credit losses on loans (10,262 ) (9,094 )

30

Table of Contents

A.

Maturities and Interest Rate Sensitivities

The following table presents maturities and interest rate sensitivities for total loans, loans with predetermined interest rates and loans with adjustable interest rates as of the dates indicated. Predetermined interest rates do not adjust throughout the life of the loan. Loans are presented on a gross basis.

< 1 Year 1-5 Years 6-15 Years >15 Years Total

Total loans:

Loans with predetermined interest rates:

Loans with adjustable interest rates:

B.

Modifications

In the ordinary course of business the Company modifies loan terms on a case-by-case basis for a variety of reasons. Modifications may include rate reductions, payment extensions of varying lengths of time, a change in amortization term or method or other arrangements. Modifications to consumer loans generally involve short-term payment extensions to accommodate specific, temporary circumstances. Modifications to commercial loans may include, but are not limited to, changes in interest rate, maturity, amortization and financial covenants.

The Company reviews modifications to determine whether the borrower is experiencing financial difficulty, including indicators of default, bankruptcy, going concern, insufficient projected cash flows and inability to obtain financing from other sources. Please refer to Note 5 of Notes to Financial Statements for information on modifications to loans for borrowers experience financial difficulty during the years ended December 31, 2024 and December 31, 2023.

During the years ended December 31, 2024 and 2023, the Company modified loans in the normal course of business for borrowers who were not experiencing financial difficulty. During 2024, the Company modified 875 loans totaling $130,347. During 2023, the Company provided modifications for competitive purposes to 757 loans totaling $89,006.

31

Table of Contents

C.

Summary of Loan Loss Experience

The following table provides information about the allowance for credit losses on loans, nonperforming assets and accruing loans past due 90 days or more as of the dates indicated:

December 31,

ACLL to loans, net of deferred fees and costs 1.04 % 1.06 %

Nonperforming loans to total loans, net of deferred fees and costs 0.22 % 0.31 %

Accruing loans past due 90 days or more $ 548 $ 188

More information about the level and calculation methodology of the allowance for credit losses on loans is provided in the sections “Allowance for Credit Losses on Loans” as well as Notes 1 and 5 of Notes to Consolidated Financial Statements.

D.

Analysis of Net Charge-Offs

The following tables show net charge-offs, average loan balance and the percentage of charge-offs to average loan balance for each of the Company’s loan segments at the end of each period. Average loans are presented net of deferred fees and costs.

Real estate construction $ - $ 66,654 0.00 %

Real estate construction $ - $ 58,214 0.00 %

The Company charges off commercial real estate loans at the time that a loss is confirmed. When delinquency status or other information indicates that the borrower will not repay the loan, the Company considers collateral value based upon a current appraisal or internal evaluation. Any loan amount in excess of collateral value is charged off and the collateral is taken into OREO.

32

Table of Contents

E.

Allowance for Credit Losses on Loans

The Company’s risk analysis as of December 31, 2024 determined an ACLL of $10,262, or 1.04% of loans net of deferred fees and costs. This compares with an allowance of $9,094 as of December 31, 2023, or 1.06% of loans. For information on the Company’s policies on the ACLL, please refer to Note 1 and Note 5 of Notes to Consolidated Financial Statements. To determine the appropriate level of the ACLL, the Company considers credit risk for individually evaluated loans and for groups of loans evaluated collectively.

Individually Evaluated Loans

Individually evaluated loans were $10,521 as of December 31, 2024, a decrease from $10,544 as of December 31, 2023. Please refer to Note 1 of Notes to Consolidated Financial Statements for information on the Company’s identification of individually evaluated loans. As of December 31, 2024, three individually evaluated loans were collateral dependent but were adequately collateralized and did not result in an individual allocation. The remaining individually evaluated loans were measured using the discounted cash flow method, resulting in an allocation of $80.

Collectively Evaluated Loans

Collectively evaluated loans totaled $978,092 with an ACLL of $10,182 as of December 31, 2024. At December 31, 2023, collectively evaluated loans totaled $846,631, with an allowance of $8,522.

Collectively evaluated loans are divided into pools based upon risk characteristics. Utilizing historical loss information and peer data, the Company calculates probability of default (“PD”) and loss given default (“LGD”) for each class, which is adjusted for a reasonable and supportable forecast. Cash flow projections based on each loan’s contractual terms are modified by the adjusted PD and LGD for its class. Loan classes are allocated additional loss estimates based upon the Company’s analysis of qualitative factors including economic measures, asset quality indicators, loan characteristics, and changes to internal Company policies and management.

Reasonable and Supportable Forecast

The Company applies national unemployment forecasts to project cash flows. The Company determined that 12 months represents a reasonable and supportable forecast period as of December 31, 2024, and set a period of 12 months to revert to historical losses on a straight-line basis. The forecast applied as of December 31, 2024 projects that unemployment will rise over the next 12 months to a higher level than the forecast applied as of December 31, 2023. The higher unemployment forecast increased the required level of the ACLL when December 31, 2024 is compared with December 31, 2023.

Qualitative Factors: Economic

The Company sources economic data pertinent to its market from the most recently available publications, including business and personal bankruptcy filings, the residential vacancy rate and the inventory of new and existing homes.

Higher bankruptcy filings indicate heightened credit risk and increase the ACLL, while lower bankruptcy filings have a beneficial impact on credit risk. Compared with data available at December 31, 2023, business bankruptcy filings and personal bankruptcy filings increased.

Residential vacancy rates and housing inventory impact the Company’s residential construction customers and the consumer real estate market. Higher levels increase credit risk. The residential vacancy rate available at December 31, 2024 increased from the data incorporated into the December 31, 2023 calculation, resulting in a higher allocation. Housing data available as of December 31, 2024 showed higher inventory than at December 31, 2023, resulting in a higher allocation.

Qualitative Factors: Asset Quality Indicators

Accruing past due loans are analyzed at the class level and compared with previous levels. Increases in past due loans indicate heightened credit risk. On a portfolio level, accruing loans past due 30-89 days were 0.30% of total loans at December 31, 2024, an increase from 0.19% at December 31, 2023.

Qualitative Factors: Other Considerations

The Company considers other factors that impact credit risk, including the interest rate environment, the competitive, legal and regulatory environments, changes in lending policies and loan review, changes in lending management, and high risk loans.

The interest rate environment impacts variable rate loans. The Federal Reserve’s substantial interest rate increases between March 2022 and July 2023 have increased and are expected to continue to increase payments on the Company’s variable rate loans as they reach contractual repricing dates, despite the Federal Reserve’s recent reduction in its target rate. The Company allocates additional reserve each time the Federal Reserve increases rates, under the expectation that higher payments may increase credit risk. After the rate increase has been in effect for one year, the allocation may be removed if management deems that the impact of the change has become integrated to the portfolio. As of December 31, 2024, the Company reduced its allocation from December 31, 2023.

The competitive, legal and regulatory environments were evaluated for changes that would affect credit risk. Higher competition for loans increases credit risk, while lower competition decreases credit risk. Compared with December 31, 2023, the competitive, legal and regulatory environments remained in similar postures and no changes were made to related allocations.

33

Table of Contents

Lending policies, loan review procedures and management’s experience influence credit risk. Policies and procedures remain similar to those at December 31, 2023. The Company added an allocation for the addition of FCB lenders and removed a previously added allocation recorded for the retirement of a long-time credit administration manager.

Levels of high risk loans are considered in the determination of the level of the ACLL. A decrease in the level of high risk loans within a class decreases the required allocation for the loan class, and an increase in the level of high risk loans within a class increases the required allocation for the loan class. Total high risk loans increased from the level at December 31, 2023, resulting in an increased allocation.

Unallocated Surplus

The unallocated surplus as of December 31, 2024 was $50, or 0.49% in excess of the calculated requirement. The unallocated surplus at December 31, 2023 was $350, or 4.00% in excess of the calculated requirement. The surplus provides some mitigation of current economic uncertainty that may impact credit risk.

Conclusion

The calculation of the appropriate level for the ACLL incorporates analysis of multiple factors and requires management’s prudent and informed judgment. Based on analysis of historical indicators, asset quality and economic factors, management believes the level of ACLL is reasonable for the credit risk in the loan portfolio as of December 31, 2024.

Please refer to Note 5 of Notes to Consolidated Financial Statements for further information on collectively evaluated loans, individually evaluated impaired loans and the unallocated portion of the allowance for credit losses on loans.

Allocation of the Allowance for Credit Losses on Loans

The allowance for credit losses on loans has been allocated according to the amount deemed necessary to provide for anticipated losses within the categories of loans as of the dates indicated. Loans are presented net of deferred fees and costs. The following table presents information on the ACLL as of the dates indicated:

Unallocated 50 - - 350 - -

34

Table of Contents

Securities

The Company’s securities are designated as available for sale and as such, are reported at fair value. The following table presents information on securities available for sale as of the dates indicated.

As of December 31, Change

The securities portfolio is subject to the volatility and risk in the financial markets. The risk in financial markets, including interest rate risk and credit risk, affects the Company in the same way that it affects other institutional and individual investors. The fair value of available for sale securities is reflected on the Company's balance sheet. The unrealized loss in the Company’s investment portfolio is due to interest rate risk. The majority of the securities portfolio was purchased prior to the Federal Reserve’s rate increases during 2022 and 2023.

Source: SEC EDGAR (public domain) · 10-K for the period ended 2024-12-31, filed 2025-03-28 · accession 0000950170-25-046763

Filing HTML rendered to line-structured narrative text by the shipped reducer (datafeeds.edgar_fulltext.visible_text, keep_table_headers=True): scripts and inline-XBRL headers are dropped, and table content is reduced to its short label cells — numeric table data is not rendered and is therefore not counted. The same rendering is used for every year, so a year-over-year comparison is like for like.

The text is our rendering of the filing, not a facsimile: original pagination, typography and tables are not reproduced, and the numbers live in the financial statements (FA).

The outline locates item HEADINGS in this document. Only Items 1A and 7 have certified boundaries elsewhere in the terminal (the redline and the narrative-overlap number); every span here runs from one heading found to the next heading found.

How the outline was chosen. It is the longest chain of item headings that runs forward through both the document and the standard item order: 23 headings are on that chain and 17 further heading-shaped lines are not — the table-of-contents echo of every item, cross-references and exhibit-list mentions. Each entry's length is measured from its heading to the next heading on the chain.