RBB US Equity☆

rbb20231231_10k.htm

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

For the fiscal year ended December 31, 2023

OR

FOR THE TRANSITION PERIOD FROM TO

Commission File Number 001-38149

RBB BANCORP

(Exact name of Registrant as specified in its Charter)

1055 Wilshire Blvd., 12th floor Los Angeles, California 90017

(Address of principal executive offices) (Zip Code)

Registrant’s telephone number, including area code: (213)627-9888

Securities registered pursuant to Section 12(b) of the Act:

Title of each class Trading Symbol(s) Name of exchange on which registered

Common Stock, No Par Value RBB NASDAQ Global Select Market

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. Yes ☐ No ☒

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or 15(d) of the Act. Yes ☐ No ☒

Indicate by check mark whether the registrant: (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes ☒ No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ☒ No ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

Large accelerated filer ☐ Accelerated filer ☒

Non-accelerated filer ☐ Smaller reporting company ☐

Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report ☒

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant's executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). Yes ☐ No ☒

The aggregate market value of the voting and non-voting common equity held by non-affiliates computed by reference to the price at which the common equity was last sold, or the average bid and asked price of such common equity, as of the last business day of the registrant’s most recently completed second fiscal quarter was $207,343,729.

The number of shares of the registrant’s common stock outstanding as of March 8, 2024, was 18,621,781.

DOCUMENTS INCORPORATED BY REFERENCE

The information required by Items 10, 11, 12, 13 and 14 of Part III of this Annual Report on Form 10-K will be found in the Company’s definitive proxy statement for its 2024 Annual Meeting of Shareholders, to be filed pursuant to Regulation 14A under the Securities Exchange Act of 1934, as amended, and such information is incorporated herein by this reference.

Table of Contents

Table of Contents

Page

PART I

Item 1. Business 4

Item 1A. Risk Factors 27

Item 1B. Unresolved Staff Comments 38

Item 1C. Cybersecurity 38

Item 2. Properties 38

Item 3. Legal Proceedings 39

Item 4. Mine Safety Disclosures 39

PART II

Item 6. Reserved

Item 7A. Quantitative and Qualitative Disclosures About Market Risk 71

Item 8. Financial Statements and Supplementary Data 74

Item 9A. Controls and Procedures 123

Item 9B. Other Information 124

Item 9C. Disclosure Regarding Foreign Jurisdictions that Prevent Inspections 124

PART III

Item 10. Directors, Executive Officers and Corporate Governance 125

Item 11. Executive Compensation 125

Item 14. Principal Accountant Fees and Services 125

PART IV

Item 15. Exhibits, Financial Statement Schedules 126

1

Table of Contents

FORWARD-LOOKING STATEMENTS

In this Annual Report on Form 10-K (this “Annual Report”), the term “Bancorp” refers to RBB Bancorp and the term “Bank” refers to Royal Business Bank. The terms “Company,” “we,” “us,” and “our” refer to Bancorp and the Bank collectively. The statements in this report include forward-looking statements within the meaning of the applicable provisions of the Private Securities Litigation Reform Act of 1995, Section 27A of the Securities Act of 1933, as amended (the “Securities Act”), and Section 21E of the Securities Exchange Act of 1934, as amended (the “Exchange Act”), regarding management’s beliefs, projections, and assumptions concerning future results and events. We intend such forward-looking statements to be covered by the safe harbor provision for forward-looking statements in these provisions. All statements other than statements of historical fact are “forward-looking statements” for purposes of federal and state securities laws, including statements about anticipated future operating and financial performance, financial position and liquidity, growth opportunities and growth rates, growth plans, acquisition and divestiture opportunities, business prospects, strategic alternatives, business strategies, financial expectations, regulatory and competitive outlook, investment and expenditure plans, financing needs and availability, and other similar forecasts and statements of expectation and statements of assumptions underlying any of the foregoing. Words such as “aims,” “anticipates,” “believes,” “can,” “could,” “estimates,” “expects,” “hopes,” “intends,” “may,” “plans,” “projects,” “seeks,” “shall,” “should,” “will,” “predicts,” “potential,” “continue,” “possible,” “optimistic,” and variations of these words and similar expressions are intended to identify these forward-looking statements. Forward-looking statements by us are based on estimates, beliefs, projections, and assumptions of management and are not guarantees of future performance. These forward-looking statements are subject to certain risks and uncertainties that could cause actual results to differ materially from our historical experience and our present expectations or projections. Such risks and uncertainties and other factors include, but are not limited to, adverse developments or conditions related to or arising from:

● possible additional provisions for credit losses and charge-offs;

● potential goodwill impairment;

● liquidity risk;

● fluctuations in interest rates;

● inflation and deflation;

● real estate market conditions and the value of real estate collateral;

● environmental liabilities;

● our ability to compete with larger competitors;

● our ability to retain key personnel;

● successful management of reputational risk;

● failures, interruptions, or security breaches of our information systems;

2

Table of Contents

● cybersecurity threats and the cost of defending against them;

● risk management processes and strategies;

● adverse results in legal proceedings;

● the impact of regulatory enforcement actions, if any;

● changes in tax laws and regulations;

● market disruption and volatility;

● fluctuations in our stock price;

● issuances of preferred stock;

● our success at managing the risks involved in the foregoing items.

These and other factors are further described in this Annual Report (at Item 1A in particular), the Company’s other reports filed with the SEC and other filings the Company makes with the SEC from time to time. Actual results in any future period may also vary from the past results discussed in this report. Given these risks and uncertainties, readers are cautioned not to place undue reliance on any forward-looking statements, which speak to the date of this report. We have no intention and undertake no obligation to update any forward-looking statement or to publicly announce any revision of any forward-looking statement to reflect future developments or events, except as required by law.

3

Table of Contents

PART I

Item 1. Business.

Company Overview

RBB Bancorp is a bank holding company registered under the Bank Holding Company Act of 1956, as amended. RBB Bancorp’s principal business is to serve as the holding company for its wholly-owned banking subsidiaries, Royal Business Bank (“Bank”) and RBB Asset Management Company (“RAM”), collectively referred to herein as “the Company.” The Bank began operations in 2008 as a California state-chartered commercial bank. In 2012, we established RBB Asset Management Company (“RAM”), as a wholly-owned subsidiary of the Company. We may continue to utilize RAM to purchase certain assets from the Bank from time to time, including assets acquired in acquisitions that we may make in the future. When we refer to “we”, “us”, “our”, or the “Company”, we are referring to RBB Bancorp and its consolidated subsidiaries including the Bank, collectively. When we refer to the “parent company”, “Bancorp”, or the “holding company”, we are referring to RBB Bancorp, the parent company, on a stand-along basis.

The Bank was organized by a group of experienced bankers, some of whom began their banking careers in Asia and have worked together at various banks in California during the 1980s and 1990s. After working for many years in positions of increasing responsibility at such banks, these individuals identified an opportunity resulting from the 2007 credit crisis to capitalize on the general dissatisfaction that many customers had with the nature and level of services being provided by existing Asian-American banks at that time. These bankers observed that first generation Chinese immigrants were not well served by existing banks.

Our strategic plan focuses on providing commercial and consumer banking services to Asian American communities. The Bank’s management team has utilized their strong local community ties along with their credibility and relationships with both federal and California bank regulatory agencies to create a bank that we believe emphasizes strong credit quality, a solid balance sheet without the burden of the troubled legacy assets of other banks, and a robust capital base, with the ability to raise additional capital.

In recent years, the Bank has brought in independent directors and senior managers from diverse ethnic backgrounds. Using the experience and expertise of our officers and employees, we have tailored our loan and deposit products to serve the Chinese-American, Korean-American, and other Asian-American markets. We focus both on existing businesses and individuals already established in our local market area, as well as Asian immigrants who desire to establish their own businesses, purchase a home, or educate their children in the United States. Our size and infrastructure allow us to serve customers who require higher lending limits than normally associated with other smaller, local banking institutions that serve the Asian-American communities in which we operate. Our strategic plan is centered on delivering high-touch, superior customer service, customized solutions, and quick and local decision-making with respect to loan originations and servicing.

After forming the Bank and retaining a strong executive management team, we established RBB Bancorp, a California corporation, as our holding company in January 2011. We began to review potential acquisition candidates and over the next several years, we acquired six banks to strategically grow our customer base by expanding our geographic footprint into other key Asian-American markets. Initially, we made a series of all cash transactions acquiring Las Vegas, Nevada-based First Asian Bank (“FAB”) and Oxnard, California-based Ventura County Business Bank (“VCBB”) in 2011, California-based Los Angeles National Bank (“LANB”) in 2013, California-based TFC Holding Company (“TFC”) and its wholly-owned subsidiary, TomatoBank in 2016, New York-based First American International Corp. (“FAIC”) and its wholly-owned subsidiary First American International Bank (“FAIB”) in 2018, and Chicago-based PGB Holdings, Inc. (“PGBH”) and its wholly-owned subsidiary, Pacific Global Bank (“PGB”) in 2020.

On January 14 2022, we purchased the Bank of the Orient's (“BOTO”) Honolulu, Hawaii branch (the “Hawaii Branch”). We received a payment of $71.0 million to acquire all the premises and equipment at the Hawaii Branch, all deposits totaling $81.7 million and performing loans totaling $7.4 million as of the purchase date, reflecting a premium paid by us of approximately $2.3 million.

We previously disclosed that, on December 28, 2021, we entered into a definitive agreement to acquire Gateway Bank F.S.B. (“Gateway”) in an all cash transaction, subject to certain terms and conditions. On September 28, 2023, we announced that the Company and Gateway had mutually agreed to terminate the definitive agreement, effective as of that date. Neither party has or will have any liability or pay any penalty to the other party as a result of the termination, and each party has released the other from any and all claims related to the definitive agreement or the transactions contemplated by the definitive agreement.

We intend to continue to pursue organic growth opportunities and, once we fully resolve the matters contained in our Consent Order, growth through acquisitions that meet our criteria. We will consider opportunistic acquisitions that we believe will be beneficial to our long-term growth strategy for loans and deposits and immediately accretive to earnings.

We operate as a minority depository institution, which is defined by the FDIC as a federally insured depository institution (“IDI”) where 51% or more of the voting stock is owned by minority individuals. A minority depository institution is eligible to receive from the FDIC and other federal regulatory agencies training, technical assistance and review, and assistance regarding the implementation of proposed new deposit taking and lending programs, as well as with respect to the adoption of applicable policies and procedures governing such programs. We intend to maintain our minority depository institution designation, as it is expected that at least 51% of our issued and outstanding shares of capital shall remain owned by minority individuals. The minority depository institution designation has been historically beneficial to us, as the FDIC has reviewed and assisted with the implementation of our deposit and lending programs, and we continue to use the program for technical assistance.

In addition, in 2016, we became a community development financial institution (“CDFI”) which is a financial institution that has a primary mission of community development, serves a target market, is a financing entity, provides development services, remains accountable to its community, and is a non-governmental entity. CDFIs are certified by the CDFI Fund at the U.S. Department of the Treasury (“Treasury”), which provide funds to CDFIs through a variety of programs. We have established a CDFI advisory board to assist the Bank in finding organizations that provide services to low-to-moderate income individuals. In our commitment to this designation, the Bank has a policy that requires management above the level of vice president to contribute at least 24 hours of community service annually to a qualified organization. In 2021, the Bank was awarded a $1.8 million CDFI grant under the Treasury’s Rapid Response Program to facilitate a rapid response to the economic impacts of the COVID-19 pandemic in distressed and underserved communities. The award was subject to various performance goals and measures that specify the use of the funds to provide affordable housing. The Bank utilized all of such funds to originate two loans that provide affordable housing to underserved communities. In 2023, the Bank was awarded a $5.0 million CDFI grant under the Treasury’s Equitable Recovery Program (“ERP”) in response to the economic impacts of the COVID-19 pandemic in low and moderate-income communities that were disproportionally harmed by health and economic effects of the pandemic. The CDFI ERP award was subject to various performance goals and measures that specify the use of the funds. The Bank utilized all of such funds to originate two loans in the fourth quarter of 2023, which fulfilled the performance obligations specified under the ERP.

The Bank currently operates 24 branches across two separate regions: the Western region with branches in Los Angeles County, California; Orange County, California; Ventura County, California; Clark County, Nevada; and Honolulu, Hawaii; and the Eastern region with branches in Manhattan, Brooklyn and Queens, New York; Chicago, Illinois and Edison, New Jersey.

As of December 31, 2023, the Company had total consolidated assets of $4.03 billion, total consolidated held for investment loans of $3.03 billion, total consolidated deposits of $3.17 billion and total consolidated shareholders’ equity of $511.3 million. Our common stock is traded on the NASDAQ Global Select Market under the symbol “RBB.”

4

Table of Contents

Our Strategic Plan

In connection with the organization of the Company, we adopted a strategic plan that reflects the Company’s growth and recent developments. The Company’s current strategic plan contains the following key elements:

● Focus on a target market consisting of businesses that:

o have loan needs of $1 million to $40 million; and

● Provide five main lending products:

● Consider new markets, products and services;

● Explore new niche markets to gain a competitive advantage.

5

Table of Contents

Our Competition

We view the Asian-American banking market, including the Company, as comprised of 29 banks divided into three overlapping segments: publicly-traded banks, locally-based banks, and banks that are subsidiaries of Taiwanese or Chinese banks. These banks promote competition for attracting deposits and making loans in the markets we target.

In addition to Chinese-American banks, we also compete with other banks in the region, particularly with Korean-American banks in our lending areas for SFR and SBA loans. Although we were founded by and market primarily to Chinese-Americans, we are broadening our marketing efforts to include all Asian-American communities. In certain geographic markets where we currently operate, there is an overlap between Chinese-American, Korean-American and other Asian-American banks for loan and deposit business. We aim to grow both organically and potentially through opportunistic acquisitions in these markets.

Lending Activities

We seek to be the premier provider of lending products and services in our market areas and serve the credit needs of high quality business and individual borrowers in the communities that we serve. Our lending strategy is to maintain a broadly diversified loan portfolio based on the type of customer (e.g., businesses versus individuals), type of loan product (e.g., owner occupied commercial real estate, commercial loans, etc.), geographic location and industries in which our business customers are engaged. We principally focus our lending activities on loans that we originate from borrowers located in our market areas.

We strive to expedite all requests from potential borrowers by promptly responding after we receive required financials and certain preliminary information. Our ability to provide quick responses to borrowers with financial solutions, while performing appropriate underwriting if a borrower decides to move forward, is due primarily to the experiences and expertise of our professionals who understand the needs of borrowers in our target markets and the areas of commercial lending practices that the Bank is engaged in. In addition, our credit approval process is streamlined since decision-making often only requires a couple of key executive management members while any loans that exceed executive management's delegated authority is elevated to a board loan committee which meets regularly or whenever needed.

We have five principal lending areas:

Commercial and Industrial Loans. We have significant expertise in small to middle market C&I lending. Our success is the result of our product and market expertise. We focus on delivering high-quality, customized and quick turnaround service for our clients while maintaining an appropriate balance between prudent and disciplined underwriting and flexibility and responsiveness to our clients. Our trade financing unit provides international letters of credit, SWIFT, export advice, trade finance discounts and foreign exchange to many of our C&I loan customers. As of December 31, 2023, we had outstanding C&I loans of $130.1 million, or 4.3% of our total loan portfolio, compared to $201.2 million, or 6.0% of our total loan portfolio as of December 31, 2022. C&I loans on nonaccrual totaled $854,000 and $713,000 at December 31, 2023 and 2022.

Commercial Real Estate Loans. We offer real estate loans for owner occupied and non-owner occupied commercial property, including loans secured by single-family residences for business purposes, multi-family residential property and construction and land development loans. Our management team has an extensive knowledge of the markets where we operate and our borrowers; we take a conservative approach to CRE lending, focus on high quality credits with low loan-to-value ratios, income-producing properties with stable cash flow, and strong collateral profiles. The real estate securing our existing CRE loans includes a wide variety of property types, such as multi-family properties, mixed-use residential and commercial, mobile home parks, hotels, offices, apartments, warehouses and retail centers.

6

Table of Contents

The total CRE portfolio was $1.2 billion, or 38.5% of our total loan portfolio, at December 31, 2023 of which $193.4 million was secured by owner occupied properties compared to $1.3 billion, or 39.3% of our total loan portfolio, at December 31, 2022, of which $255.2 million was secured by owner occupied properties. The multi-family residential loan portfolio totaled $573.4 million as of December 31, 2023 compared to $643.2 million as of December 31, 2022. Non-accrual CRE loans totaled $10.6 million and $13.2 million at December 31, 2023 and 2022.

Construction and Land Development Loans. Our C&D loans are comprised of residential construction, commercial construction and land acquisition and development construction. Interest reserves are generally established on real estate construction loans. As of December 31, 2023, our real estate construction loan portfolio totaled $181.5 million, or 6.0% of our total loan portfolio, and was divided among the following categories: $80.3 million of residential construction; $78.1 million of commercial construction; and $23.1 million of land acquisition and development. As of December 31, 2022, the C&D loans were comprised of $166.6 million of residential construction, $77.2 million of commercial construction, and $33.1 million of land acquisition and development. There were no non-accrual C&D loans as of December 31, 2023 compared to $141,000 as of December 31, 2022.

SBA Loans. We are designated as a Preferred Lender under the SBA Preferred Lender Program. We offer mostly SBA 7(a) variable-rate loans. We originate all loans to hold for investment and move loans to available for sale as management decides which loans to sell. We generally sell the guaranteed portion of the SBA loans that we originate. Our SBA loans are typically made to small-sized manufacturing, wholesale, retail, hotel/motel and service businesses for working capital needs or business expansions. SBA loans can have any maturity up to 25 years. Typically, non-real estate secured loans mature in less than 10 years. Collateral may include inventory, accounts receivable and equipment, and personal guarantees. From time to time, we also originate SBA 504 loans. As of December 31, 2023, our SBA loan portfolio totaled $52.1 million, or 1.7% of our total loan portfolio compared to $61.4 million, or 1.8% at December 31, 2022. Our non-accrual SBA loans as of December 31, 2023 were $2.1 million, compared to $2.2 million as of December 31, 2022.

SFR Loans. We originate qualified SFR mortgage loans and non-qualified, alternative documentation SFR mortgage loans through correspondent relationships and retail channels, including our branch network, to accommodate the needs of the Asian American market. The qualified SFR mortgage loans are 15-year and 30-year conforming mortgages, which are generally originated through our branch network and may be sold directly to FNMA and FHLMC. As of December 31, 2023, we had $1.49 billion of SFR mortgage loans, representing 49.1% of our total loan portfolio compared to $1.46 billion, or 43.9% at December 31, 2022. We had $18.1 million in non-accrual SFR real estate loans as of December 31, 2023 compared to $5.9 million in non-accrual loans at December 31, 2022.

We originate non-qualified SFR mortgage loans generally to hold for investment. The loans generated through our retail branch network are to our customers, many of whom establish a deposit relationship with us. During 2023, we originated $78.6 million of such loans through our retail channel and $113.7 million through our correspondent and wholesale channel of such loans. During 2022, we originated $386.1 million through our retail channel and $286.0 million through our correspondent and wholesale channel of such loans. The decrease in loan originations was due to increases in market interest rates.

We have sold non-qualified SFR mortgage loans to other Asian-American banks and other investors. During 2023, we engaged in loan sales to one affiliated bank, and are working to expand our network of entities who will acquire our SFR loan product. Loans held for sale consist primarily of first trust deed mortgages on SFR properties located in California, New York and New Jersey. SFR mortgage loans held for sale are generally sold with the servicing rights retained.

7

Table of Contents

Deposits

The quality of our deposit franchise and access to stable funding are key components to our success. We offer traditional depository products, including checking, savings, money market and certificates of deposits, to individuals, businesses, municipalities and other entities through our branch network. Deposits at the Bank are insured by the FDIC up to statutory limits. We consider all deposit relationships under $250,000 as a core relationship except for time deposits originated through an internet listing service.

As an Asian-American business bank that focuses on successful businesses and their owners, many of our depositors choose to leave large deposits with us. We monitor all deposit relationships over $250,000 on a quarterly basis and consider a relationship to be stable if there are any three or more of the following characteristics: (i) relationships with us (as a director or shareholder); (ii) deposits within our market area; (iii) additional non-deposit services with us; (iv) electronic banking services with us; (v) active demand deposit account with us; (vi) deposits at market interest rates; and (vii) longevity of the relationship with us. As many of our customers have more than $250,000 on deposit with us, we believe that using this method reflects a more accurate assessment of our deposit base. As of December 31, 2023, $2.36 billion or 74.4% of our relationships are considered stable relationships.

Many of our management team members, including our branch managers, have worked together for up to 30 years, and our deposits relationships have been cultivated over that time period. Our ability to gather deposits, particularly core deposits, is an important aspect of our business franchise and we believe core deposits are a significant driver of franchise value as a cost efficient and stable source of funding to support our growth. As of December 31, 2023, we had $3.17 billion of total deposits, with a weighted average spot rate of 3.51%.

Other Subsidiaries

In addition to the Bank and RAM, the holding Company has three statutory business trusts as follows:

TFC Statutory Trust.In connection with our 2016 acquisition of TomatoBank and its holding company, TFC, the Company acquired the TFC Statutory Trust (the “TFC Trust”), a statutory business trust that was established by TFC in 2006 as a wholly-owned subsidiary.

FAIC Statutory Trust. In connection with our 2018 acquisition of FAIB and its holding company, FAIC, the Company acquired the FAIC Statutory Trust (the “FAIC Trust”), a statutory business trust that was established by FAIC in 2004 under the laws of Delaware as a wholly-owned subsidiary.

PGBH Trust. In connection with our 2020 acquisition of PGB and its holding company, PGBH, the Company acquired Pacific Global Bank Trust I (“PGB Capital Trust I”), a statutory business trust that was established by PGB in 2004 under the laws of Delaware as a wholly-owned subsidiary.

Each of the foregoing trusts issued trust preferred securities representing undivided preferred beneficial interests in the assets of the trusts. The proceeds of these trusts preferred securities were invested in certain securities issued by us, with similar terms to the relevant series of securities issued by the trusts, which we refer to as subordinated debentures. The Company guarantees on a limited basis the payments of distributions on the capital securities of the trusts and payments on redemption of the capital securities of the trusts. The Company is the owner of all the beneficial interests represented by the common securities of the trusts.

In addition, the Bank has a wholly-owned subsidiary, FAIB Capital Corp, a real estate investment trust, which was acquired in connection with the 2018 acquisition of FAIC. FAIB Capital Corp. is a New York State corporation formed on August 28, 2013. The purpose of this real estate investment trust is to minimize New York State and local taxes.

8

Table of Contents

Human Capital Resources

We believe in the value of teamwork and the power of diversity. We expect and encourage participation and collaboration, and understand that we need each other to be successful. We value accountability because it is essential to our success, and we accept our responsibility to hold ourselves and others accountable for meeting shareholder commitments and achieving exceptional standards of performance.

Staffing Model. The majority of our staff are regular full-time employees. We also employ regular part-time associates and some seasonal/temporary associates. As of December 31, 2023, we had 376 full-time equivalent employees. We do not outsource job functions or use subcontractors to fill open positions. None of our employees are represented by any collective bargaining unit or are parties to a collective bargaining agreement.

Diversity, Equity and Inclusion. We believe that diversity of thought and experiences results in better outcomes and empowers our employees to make more meaningful contributions within our company and communities. Our board of directors is comprised of six Asian-Americans and four Caucasians, of which seven members are men and three members are women. Our executive committee is comprised of six Asian-Americans and two Caucasians, including two members who are women. Our workforce includes 332 Asian-Americans, 23 Latin-Americans, 20 Caucasians, one Pacific Islander and four employees who identify with two or more races.

Health & Safety. We are focused on conducting our business in a safe manner and in compliance with all local, state and federal safety and health regulations, and special safety concerns.

Benefits. We are committed to offering a competitive total compensation package. We regularly compare compensation and benefits with peer companies and market data, making adjustments as needed to ensure compensation stays competitive. We also offer a wide array of benefits for our associates and their families, including:

● Competitive bonus programs;

● Comprehensive medical, dental and vision benefits;

● 401(k) plan including a competitive company match;

● Flexible work schedules;

● Paid time off (PTO), holidays and bank holidays;

● Internal training and development; and

● Employee Assistance Plans (EAP)

Climate-related Discussion

The SEC adopted a final rule that will require companies to disclose a broad array of climate-related exposures, including, among other things, material climate-related risks; activities to mitigate or adapt to such risks; information about the registrant’s board of directors’ oversight of climate-related risks and management’s role in managing material climate-related risks; and information on any climate-related targets or goals that are material to the registrant’s business, results of operations, or financial condition. The final rule will also require disclosure of Scope 1 and/or Scope 2 greenhouse gas (GHG) when such emissions are material, the filing of an attestation report covering the required disclosure of a company’s Scope 1 and/or Scope 2 emissions and disclosure of the financial statement effects of severe weather events and other natural conditions.

The disclosures related to GHG emissions would include a company’s material direct emissions and indirect emissions in the form of purchased energy — otherwise known as Scope 1 and Scope 2 emissions, respectively.

As a financial institution, the Company has minimal Scope 1 direct GHG emissions. Scope 1 GHG emissions result from a leased automobile, and three owned vehicles, all of which are compliant with state emissions regulations. Scope 2 emissions result from 23 leased office properties and six owned office properties, which have indirect GHG emissions from acquired electricity, steam heat or cooling.

Under the SEC's final rule, Scope 1 and Scope 2 disclosures will be required on a phased-in basis for larger registrants when such emissions are material and will be required to be made by accelerated filers reporting fiscal year 2028 results.

We are committed to overseeing the Company’s environmental efforts. The Company considers environmental matters throughout the organization. The Company’s environmental initiatives are currently focused on reducing the Company’s environmental impact through supporting employees' use of mass transit where possible, recycling efforts and supporting organizations in the communities the Company serves that address sustainable development goals.

Properties

We believe that the leases to which we are subject are generally on terms consistent with prevailing market terms. None of the leases are with our directors, officers, beneficial owners of more than 5% of our voting securities or any affiliates of the foregoing.

Corporate Information

Our principal executive offices are located at 1055 Wilshire Blvd. Suite 1200, Los Angeles, California 90017, and our telephone number at that address is (213) 627-9888.

9

Table of Contents

Available Information

We invite you to visit our website at www.royalbusinessbankusa.com, to access free of charge our Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K, and amendments to those reports, all of which are made available as soon as reasonably practicable after we electronically file such material with or furnish it to the SEC. The content of our website is not incorporated into and is not part of this Annual Report. In addition, you can write to us to obtain a free copy of any of those reports at RBB Bancorp, 1055 Wilshire Blvd. Suite 1200, Los Angeles, California 90017, Attn: Investor Relations. These reports are also available through the SEC’s Public Reference Room, located at 100 F Street NE, Washington, DC 20549 and online at the SEC’s website, available at http://www.sec.gov. Investors can obtain information about the operation of the SEC’s Public Reference Room by calling 800-SEC-0330. Our Code of Ethics and other corporate governance documents are located on our website at www.royalbusinessbankusa.com.

Supervision and Regulation

General

Financial institutions, their holding companies and their affiliates are extensively regulated under U.S. federal and state laws. As a result, the growth and earnings performance of the Company and its subsidiaries may be affected not only by management decisions and general economic conditions, but also by the requirements of federal and state statutes and by the regulations and policies of various bank regulatory agencies, including the DFPI, the Board of Governors of the Federal Reserve System (“Federal Reserve”), the FDIC, and the Consumer Financial Protection Bureau (“CFPB”). Furthermore, tax laws administered by the Internal Revenue Service and state taxing authorities, accounting rules developed by the FASB, securities laws administered by the SEC and state securities authorities, anti-money laundering laws enforced by the Treasury, and mortgage related rules, including with respect to loan securitization and servicing by the U.S. Department of Housing and Urban Development, and agencies such as FNMA and FHLMC, have an impact on the Company’s business. The effect of these statutes, regulations, regulatory policies and rules are significant to the financial condition and results of operations of the Company and its subsidiaries, including the Bank, and the nature and extent of future legislative, regulatory or other changes affecting financial institutions are impossible to predict with any certainty.

Additional initiatives may be proposed or introduced before Congress, the California Legislature, and other governmental bodies in the future. Such proposals, if enacted, may further alter the structure, regulation, and competitive relationship among financial institutions and may subject us to increased supervision and disclosure and reporting requirements. In addition, the various bank regulatory agencies often adopt new rules, regulations and policies to implement and enforce existing legislation. It cannot be predicted whether, or in what form, any such legislation or regulatory changes in policy may be enacted or the extent to which the business of the Bank would be affected thereby. The outcome of examinations, any litigation, or any investigations initiated by state or federal authorities also may result in necessary changes in our operations and increased compliance costs.

Federal and state banking laws impose a comprehensive system of supervision, regulation and enforcement on the operations of financial institutions, their holding companies and affiliates intended primarily for the protection of the FDIC-insured deposits and depositors of banks, rather than their shareholders. These federal and state laws, and the related regulations of the bank regulatory agencies, affect, among other things, the scope of business, the kinds and amounts of investments banks may make, reserve requirements, capital levels relative to operations, the nature and amount of collateral for loans, the establishment of branches, the ability to merge, consolidate and acquire, dealings with insiders and affiliates and the payment of dividends.

This supervisory and regulatory framework subjects banks and bank holding companies to regular examination by their respective regulatory agencies, which results in examination reports and ratings that, while not publicly available, can affect the conduct and growth of their businesses. These examinations consider not only compliance with applicable laws and regulations, but also capital levels, asset quality and risk, management ability and performance, earnings, liquidity, and various other factors. The regulatory agencies generally have broad discretion to impose restrictions and limitations on the operations of a regulated entity where the agencies determine, among other things, that such operations are unsafe or unsound, fail to comply with applicable laws or are otherwise inconsistent with laws and regulations or with the supervisory policies of these agencies.

The following is a summary of the material elements of the supervisory and regulatory framework applicable to the Company and its subsidiaries, including the Bank. It does not describe all of the statutes, regulations and regulatory policies that apply, nor does it restate all of the requirements of those that are described. The descriptions are qualified in their entirety by reference to the particular statutory and regulatory provision.

Bank Holding Company and Bank Regulation

Bancorp is a bank holding company within the meaning of the Bank Holding Company Act of 1956, as amended (the “BHCA”), and is registered as such with the Federal Reserve. Bancorp is also a bank holding company within the meaning of Section 1280 of the California Financial Code. Therefore, Bancorp and its subsidiaries are subject to examination by, and may be required to file reports with, the Federal Reserve and the DFPI. Federal Reserve and DFPI approvals are also required for financial holding companies to acquire control of a bank. As a California commercial bank, the deposits of which are insured by the FDIC, the Bank is subject to regulation, supervision, and regular examination by the DFPI and by the FDIC, as the Bank’s primary federal regulator, and must additionally comply with certain applicable regulations of the Federal Reserve.

The wide range of requirements and restrictions contained in both federal and state banking laws include:

● Requirements that bank holding companies and banks file periodic reports.

10

Table of Contents

● Limitations on transactions with affiliates.

● Requirements for opening of intra- and interstate branches.

11

Table of Contents

Specific federal and state laws and regulations which are applicable to banks regulate, among other things, the scope of their business, their investments, their reserves against deposits, the timing of the availability of deposited funds, their activities relating to dividends, the nature and amount of collateral for certain loans, servicing and foreclosing on loans, borrowings, capital requirements, certain check-clearing activities, branching, and mergers and acquisitions. California banks are also subject to statutes and regulations including Federal Reserve Regulation O and Federal Reserve Act Sections 23A and 23B and Regulation W, which restrict or limit loans or extensions of credit to “insiders,” including officers, directors, and principal shareholders, and affiliates, and purchases of assets from affiliates, including parent bank holding companies, except pursuant to certain exceptions and only on terms and conditions at least as favorable to those prevailing for comparable transactions with unaffiliated parties. The Dodd-Frank Act expanded definitions and restrictions on transactions with affiliates and insiders under Sections 23A and 23B, and also lending limits for derivative transactions, repurchase agreements and securities lending, and borrowing transactions.

The Bank operates branches and/or loan production offices in California, Illinois, Nevada, New York, New Jersey and Hawaii. While the DFPI remains the Bank’s primary state regulator, the Bank’s operations in these jurisdictions are subject to examination and supervision by local bank regulators, and transactions with customers in those jurisdictions are subject to local laws, including consumer protection laws.

CFPB Actions

The Dodd-Frank Act provided for the creation of the CFPB as an independent entity within the Federal Reserve with broad rulemaking, supervisory, and enforcement authority over consumer financial products and services, including deposit products, residential mortgages, home-equity loans and credit cards. The CFPB’s functions include investigating consumer complaints, conducting market research, rulemaking, supervising and examining bank consumer transactions, and enforcing rules related to consumer financial products and services. CFPB regulations and guidance apply to all financial institutions and banks with $10 billion or more in assets, which are also subject to examination by the CFPB. As the Bank has less than $10 billion in assets, it is not examined by the CFPB for compliance with CFPB regulations, although it is examined by the FDIC and the DFPI.

The CFPB has enforcement authority over unfair, deceptive or abusive acts and practices (“UDAAP”). UDAAP is considered one of the most far reaching enforcement tools at the disposal of the CFPB and covers all consumer and small business financial products or services such as deposit and lending products or services such as overdraft programs and third-party payroll card vendors. It is a wide-ranging regulatory net that potentially picks up the gaps not included in other consumer laws, rules and regulations. Violations of UDAAP can be found in many areas and can include advertising and marketing materials, the order of processing and paying items in a checking account or the design of client overdraft programs. The scope of coverage includes not only direct interactions with clients and prospects but also actions by third-party service providers. The Dodd-Frank Act does not prevent states from adopting stricter consumer protection standards. State regulation of financial products and potential enforcement actions could also adversely affect our business, financial condition or results of operations.

In 2020, the California Legislature passed Assembly Bill 1864, which enacts the California Consumer Financial Protection Law (“CCFPL”). Among other items, the CCFPL:

Interchange Fees

Under the Durbin Amendment to the Dodd-Frank Act, the Federal Reserve adopted rules establishing standards for assessing whether the interchange fees that may be charged with respect to certain electronic debit transactions are “reasonable and proportional” to the costs incurred by issuers for processing such transactions.

12

Table of Contents

Interchange fees, or “swipe” fees, are charges that merchants pay to us and other card-issuing banks for processing electronic payment transactions. Under the final rules, for those card-issuing banks with $10 billion or more in total assets, the maximum permissible interchange fee is equal to no more than 21 cents plus 5 basis points of the transaction value for many types of debit interchange transactions. We are not subject to this limitation because we have less than $10 billion in total assets. The Federal Reserve also adopted a rule to allow a debit card issuer to recover 1 cent per transaction for fraud prevention purposes if the issuer complies with certain fraud-related requirements required by the Federal Reserve. The Federal Reserve also has rules governing routing and exclusivity that require issuers to offer two unaffiliated networks for routing transactions on each debit or prepaid product.

Based on the CFPB issued Compliance Bulletin 2022-06 on “Unfair Returned Deposit Item Fee Assessment Practices” and Consumer Financial Protection Circular 2022-06 on “Unanticipated Overdraft Fee Assessment Practices,” the Bank lowered “Overdraft Fees and Non-sufficient Fees” from $35 per item to $15 per item, effective July 1, 2022. The Bank further lowered the “Overdraft Fees and Non-sufficient Fees” from $15 per item to $10 per item, effective February 1, 2023. The Bank also removed the “Return Items Fees” from the Bank’s Schedule of Deposit Accounts, Services and Fees.

Financial Regulatory Reform

The Dodd-Frank Act, which was enacted in July 2010, significantly restructured the financial regulatory landscape in the United States, including the creation of a systemic risk oversight body, the Financial Stability Oversight Council (the “FSOC”). The FSOC oversees and coordinates the efforts of the primary U.S. financial regulatory agencies (including the Federal Reserve, SEC, the Commodity Futures Trading Commission and the FDIC) in establishing regulations to address financial stability concerns. The Dodd-Frank Act and the Federal Reserve’s implementing regulations impose increasingly stringent regulatory requirements on financial institutions as their size and scope of activities increases.

In May 2018, the Economic Growth, Regulatory Relief, and Consumer Protection Act (“EGRRCPA”) was enacted. While the EGRRCPA reduced the impact of the Dodd-Frank Act on bank holding companies of our size, the Dodd-Frank Act nonetheless subjected us to additional significant regulatory requirements.

Regulatory Capital Requirements

Bank holding companies and banks are subject to various regulatory capital requirements administered by state and federal agencies. These agencies may establish higher minimum requirements if, for example, a banking organization previously has received special attention or has a high susceptibility to interest rate risk. Risk-based capital requirements determine the adequacy of capital based on the risk inherent in various classes of assets and off-balance sheet items. Under the Dodd-Frank Act, the Federal Reserve must apply consolidated capital requirements to depository institution holding companies that are no less stringent than those currently applied to depository institutions. The Dodd-Frank Act additionally requires capital requirements to be countercyclical so that the required amount of capital increases in times of economic expansion and decreases in times of economic contraction, consistent with safety and soundness.

Under federal regulations, bank holding companies and banks must meet certain risk-based capital requirements. Effective as of January 1, 2015, the Basel III final capital framework, among other things, (i) introduced as a new capital measure “Common Equity Tier 1” (“CET1”), (ii) specified that Tier 1 capital consists of CET1 and “Additional Tier 1 capital” instruments meeting specified requirements, (iii) defined CET1 narrowly by requiring that most adjustments to regulatory capital measures be made to CET1 and not to the other components of capital, and (iv) expanded the scope of the adjustments, as compared to existing regulations. Beginning January 1, 2016, financial institutions were required to maintain a minimum capital conservation buffer to avoid restrictions on capital distributions such as dividends and equity repurchases and other payments such as discretionary bonuses to executive officers. The minimum capital conservation buffer was phased in over a four year transition period with minimum buffers of 0.625%, 1.25%, 1.875%, and 2.50% during 2016, 2017, 2018 and 2019, respectively.

As fully phased-in on January 1, 2019, Basel III subjects bank holding companies and banks to the following risk-based capital requirements:

To be considered “well capitalized,” a bank holding company or bank must have the following minimum ratios: (i) a Tier 1 leverage ratio of 5.0%, (ii) a CET1 capital ratio of 6.5%, (iii) a Tier 1 risk-based capital ratio of 8.0%, and (iv) a Total risk-based capital ratio of 10.0%.

The Basel III final framework provides for a number of deductions from and adjustments to CET1. These include, for example, a limitation on the amount mortgage servicing rights, deferred tax assets dependent upon future taxable income and significant investments in non-consolidated financial entities that may be held on a Bank's balance sheet, with any excess to be deducted from CET1. Basel III also includes, as part of the definition of CET1 capital, a requirement that banking institutions include the amount of Additional Other Comprehensive Income (“AOCI”), which primarily consists of unrealized gains and losses on available for sale securities, which are not required to be treated as other-than-temporary impairment, net of tax, in calculating regulatory capital. Banking institutions had the option to opt out of including AOCI in CET1 capital if they elected to do so in their first regulatory report following January 1, 2015. As permitted by Basel III, the Company elected to exclude AOCI from CET1.

13

Table of Contents

The Dodd-Frank Act excludes trust preferred securities issued after May 19, 2010 from being included in Tier 1 capital, unless the issuing company is a bank holding company with less than $500 million in total assets. Trust preferred securities issued prior to that date will continue to count as Tier 1 capital for bank holding companies with less than $15 billion in total assets, such as Bancorp. The trust preferred securities issued by our unconsolidated subsidiary capital trusts qualify as Tier 1 capital up to a maximum limit of 25% of total Tier 1 capital. Any additional portion of our trust preferred securities would qualify as “Tier 2 capital.”

In addition, goodwill and most intangible assets are deducted from Tier 1 capital. For purposes of applicable total risk-based capital regulatory guidelines, Tier 2 capital (sometimes referred to as “supplementary capital”) is defined to include, subject to limitations: perpetual preferred stock not included in Tier 1 capital, intermediate-term preferred stock and any related surplus, certain hybrid capital instruments, perpetual debt and mandatory convertible debt securities, allowances for credit losses, and intermediate-term subordinated debt instruments. The maximum amount of qualifying Tier 2 capital is 100% of qualifying Tier 1 capital. For purposes of determining total capital under federal guidelines, total capital equals Tier 1 capital, plus qualifying Tier 2 capital, minus investments in unconsolidated subsidiaries, reciprocal holdings of bank holding company capital securities, and deferred tax assets and other deductions.

We had outstanding subordinated debentures and subordinated notes in the aggregate principal amount of $134.1 million as of December 31, 2023. Of this amount, $14.9 million is attributable to subordinated debentures issued to statutory trusts in connection with prior issuances of trust preferred securities, which qualifies as Tier 1 capital, and $119.1 million is attributable to outstanding subordinated notes, which qualifies as Tier 2 capital.

Basel III changed the manner of calculating risk-weighted assets. New methodologies for determining risk-weighted assets in the general capital rules are included, including revisions to recognition of credit risk mitigation, including a greater recognition of financial collateral and a wider range of eligible guarantors. They also include risk weighting of equity exposures and past due loans; and higher (greater than 100%) risk weighting for certain commercial real estate exposures that have higher credit risk profiles, including higher loan-to-value and equity components. In particular, loans categorized as “high-volatility commercial real estate” loans, as defined as pursuant to applicable federal regulations, are required to be assigned a 150% risk weighting, and require additional capital support.

In addition to the uniform risk-based capital guidelines and regulatory capital ratios that apply across the industry, the regulators have the discretion to set individual minimum capital requirements for specific institutions at rates significantly above the minimum guidelines and ratios. Future changes in regulations or practices could further reduce the amount of capital recognized for purposes of capital adequacy. Such a change could affect our ability to grow and could restrict the amount of profits, if any, available for the payment of dividends.

In addition, the Dodd-Frank Act requires the federal banking agencies to adopt capital requirements that address the risks that the activities of an institution poses to the institution and the public and private stakeholders, including risks arising from certain enumerated activities.

Basel III became applicable to Bancorp and the Bank on January 1, 2015. As a result of the EGRRCPA, Bancorp was not subject to the more stringent Basel III minimum capital requirements until Bancorp’s total consolidated assets equaled or exceeded $3 billion. However, as of December 31, 2023, Bancorp had total consolidated assets of $4.03 billion and, consequently, the more stringent Basel III minimum capital requirements are applicable. Overall, the Company believes that implementation of the more stringent Basel III minimum capital requirements has not had and will not have a material adverse effect on Bancorp’s or the Bank’s capital ratios, earnings, shareholder’s equity, or its ability to pay dividends, effect stock repurchases or pay discretionary bonuses to executive officers.

14

Table of Contents

In December 2017, the Basel Committee published standards that it described as the finalization of the Basel III post-crisis regulatory reforms (the standards are commonly referred to as “Basel IV”). Among other things, these standards revise the Basel Committee’s standardized approach for credit risk (including by recalibrating risk weights and introducing new capital requirements for certain “unconditionally cancellable commitments,” such as unused credit card lines of credit) and provides a new standardized approach for operational risk capital. Under the Basel framework, these standards will generally be effective on January 1, 2022, with an aggregate output floor phasing in through January 1, 2027. Under the current U.S. capital rules, operational risk capital requirements and a capital floor apply only to advanced approaches institutions, and not to Bancorp or the Bank. The impact of Basel IV on us will depend on the manner in which it is implemented by the federal bank regulators.

In 2018, the federal bank regulatory agencies issued a variety of proposals and made statements concerning regulatory capital standards. These proposals touched on such areas as commercial real estate exposure, credit loss allowances under U.S. generally accepted accounting principles (“GAAP”) and capital requirements for covered swap entities, among others. In July 2019, the federal bank regulators adopted a final rule that simplifies the capital treatment for certain deferred tax assets, mortgage servicing assets, investments in non-consolidated financial entities and minority interests for banking organizations, such as Bancorp and the Bank, that are not subject to the advanced approaches requirements.

In February 2019, the U.S. federal bank regulatory agencies approved a final rule modifying their regulatory capital rules and providing an option to phase-in over a three-year period the Day 1 adverse regulatory capital effects of CECL accounting standard. Additionally, in March 2020, the U.S. federal bank regulatory agencies issued an interim final rule that provides banking organizations an option to delay the estimated CECL impact on regulatory capital for an additional two years for a total transition period of up to five years to provide regulatory relief to banking organizations to better focus on supporting lending to creditworthy households and businesses in light of recent strains on the U.S. economy as a result of the COVID-19 pandemic. The capital relief in the interim is calibrated to approximate the difference in allowances under CECL relative to the incurred loss methodology for the first two years of the transition period using a 25% scaling factor. The cumulative difference at the end of the second year of the transition period is then phased in to regulatory capital at 25% per year over a three-year transition period. Effective January 1, 2022, the Company adopted ASU 2016-13, reflected the full effect of CECL at December 31, 2022, and did not elect the three-year or five-year CECL phase-in options on regulatory capital.

As of December 31, 2023, the Bank’s capital ratios exceeded the minimum capital adequacy guideline percentage requirements of the federal banking agencies for “well capitalized” institutions under the Basel III capital rules on a fully phased-in basis.

With respect to the Bank, the Basel III Capital Rules also revise the Prompt Corrective Action (“PCA”) regulations pursuant to Section 38 of the Federal Deposit Insurance Act (the “FDIA”), as discussed below under “Prompt Corrective Action.”

Prompt Corrective Action

The FDIA requires federal banking agencies to take PCA in respect of depository institutions that do not meet minimum capital requirements. The FDIA includes the following five capital tiers: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized,” and “critically undercapitalized.” A depository institution’s capital tier will depend upon how its capital levels compare with various relevant capital measures and certain other factors, as established by regulation. Effective January 1, 2015, the Basel III Capital Rules revised the PCA requirements. Under the revised PCA provisions of the FDIA, an IDI generally will be classified in the following categories based on the capital measures indicated:

Well capitalized 10% 8% 6.5% 5%

Adequately capitalized 8% 6% 4.5% 4%

Undercapitalized < 8% < 6% < 4.5% < 4%

Significantly undercapitalized < 6% < 4% < 3.0% < 3%

Critically undercapitalized Tangible Equity/Total Assets =< 2%

An institution may be downgraded to, or deemed to be in, a capital category that is lower than indicated by its capital ratios if it is determined to be in an unsafe or unsound condition or if it receives an unsatisfactory examination rating with respect to certain matters. A bank’s capital category is determined solely for the purpose of applying PCA regulations and the capital category may not constitute an accurate representation of such bank’s overall financial condition or prospects for other purposes.

15

Table of Contents

The FDIA generally prohibits a depository institution from making any capital distributions (including payment of a dividend) or paying any management fee to its parent holding company, if the depository institution would thereafter be “undercapitalized.” “Undercapitalized” institutions are subject to growth limitations and are required to submit capital restoration plans. If a depository institution fails to submit an acceptable plan, it is treated as if it is “significantly undercapitalized.” “Significantly undercapitalized” depository institutions may be subject to a number of requirements and restrictions, including orders to sell sufficient voting stock to become “adequately capitalized,” requirements to reduce total assets, and cessation of receipt of deposits from correspondent banks. “Critically undercapitalized” institutions are subject to the appointment of a receiver or conservator.

The capital classification of a bank holding company and a bank affects the frequency of regulatory examinations, the bank holding company’s and the bank’s ability to engage in certain activities and the deposit insurance premium paid by the bank. As of December 31, 2023, we met the requirements to be “well-capitalized” based upon the aforementioned ratios for purposes of the PCA regulations, as currently in effect.

The Company

General. Bancorp, as the sole shareholder of the Bank, is a bank holding company under federal law and regulation. As a bank holding company, Bancorp is registered with, and is subject to regulation by, the Federal Reserve under the BHCA. In accordance with Federal Reserve policy, and as now codified by the Dodd-Frank Act, Bancorp is legally obligated to act as a source of financial strength to the Bank and to commit resources to support the Bank in circumstances where Bancorp might not otherwise do so. Under the BHCA, Bancorp is subject to periodic examination by the Federal Reserve. Bancorp is required to file with the Federal Reserve periodic reports of Bancorp’s operations and such additional information regarding Bancorp and its subsidiaries as the Federal Reserve may require.

Acquisitions, Activities and Change in Control. The primary purpose of a bank holding company is to control and manage banks. The BHCA generally requires the prior approval by the Federal Reserve for any merger involving a bank holding company or any acquisition of control by a bank holding company of another bank or bank holding company. Subject to certain conditions (including deposit concentration limits established by the BHCA and the Dodd-Frank Act), the Federal Reserve may allow a bank holding company to acquire banks located in any state of the United States. In approving interstate acquisitions, the Federal Reserve is required to give effect to applicable state law limitations on the aggregate amount of deposits that may be held by the acquiring bank holding company and its IDI affiliates in the state in which the target bank is located (provided that those limits do not discriminate against out-of-state depository institutions or their holding companies) and state laws that require that the target bank have been in existence for a minimum period of time (not to exceed five years) before being acquired by an out-of-state bank holding company. Furthermore, in accordance with the Dodd-Frank Act, bank holding companies must be well-capitalized and well-managed in order to effect interstate mergers or acquisitions. For a discussion of the capital requirements, see “Regulatory Capital Requirements” above.

The BHCA generally prohibits Bancorp from acquiring direct or indirect ownership or control of more than 5% of the voting shares of any company that is not a bank and from engaging in any business other than that of banking, managing and controlling banks or furnishing services to banks and their subsidiaries. This general prohibition is subject to a number of exceptions. The principal exception allows bank holding companies to engage in, and to own shares of companies engaged in, certain businesses found by the Federal Reserve prior to November 11, 1999 to be “so closely related to banking as to be a proper incident thereto.” This authority would permit Bancorp to engage in a variety of banking-related businesses, including the ownership and operation of a savings association, or any entity engaged in consumer finance, equipment leasing, the operation of a computer service bureau (including software development) and mortgage banking and brokerage. The BHCA generally does not place territorial restrictions on the domestic activities of nonbank subsidiaries of bank holding companies.

Additionally, bank holding companies that meet certain eligibility requirements prescribed by the BHCA and elect to operate as financial holding companies may engage in, or own shares in companies engaged in, a wider range of nonbanking activities, including securities and insurance underwriting and sales, merchant banking and any other activity that the Federal Reserve, in consultation with the Secretary of the Treasury, determines by regulation or order is financial in nature or incidental to any such financial activity or that the Federal Reserve determines by order to be complementary to any such financial activity and does not pose a substantial risk to the safety or soundness of depository institutions or the financial system generally. Bancorp has elected to be a bank holding company.

In order to maintain Bancorp’s status as a bank holding company, Bancorp and the Bank must be well-capitalized, well-managed, and have at least a satisfactory CRA rating. If the Federal Reserve subsequently determines that Bancorp, as a bank holding company, is not well-capitalized or well-managed, Bancorp would have a period of time during which to achieve compliance, but during the period of noncompliance, the Federal Reserve may place any limitations on Bancorp it believes to be appropriate. Furthermore, if the Federal Reserve subsequently determines that the Bank, as a bank holding company subsidiary, has not received a satisfactory CRA rating, Bancorp would not be able to commence any new financial activities or acquire a company that engages in such activities.

16

Table of Contents

Federal law also prohibits any person or company from acquiring “control” of an FDIC-insured depository institution or its holding company without prior notice to the appropriate federal bank regulator. “Control” is conclusively presumed to exist upon the acquisition of 25% or more of the outstanding voting securities of a bank or bank holding company, but may arise under certain circumstances between 5% and 24.99% ownership.

Under the California Financial Code, any proposed acquisition of “control” of the Bank by any person (including a company) must be approved by the Commissioner of the DFPI. The California Financial Code defines “control” as the power, directly or indirectly, to direct the Bank’s management or policies or to vote 25% or more of any class of the Bank’s outstanding voting securities. Additionally, a rebuttable presumption of control arises when any person (including a company) seeks to acquire, directly or indirectly, 10% or more of any class of the Bank’s outstanding voting securities.

Capital Requirements. Bank holding companies are required to maintain capital in accordance with Federal Reserve capital adequacy requirements, as affected by the Dodd-Frank Act and Basel III. For a discussion of capital requirements, see “Regulatory Capital Requirements” above.

Dividend Payments. Bancorp’s ability to pay dividends to its shareholders may be affected by both general corporate law considerations and the policies of the Federal Reserve applicable to bank holding companies. As a California corporation, Bancorp is subject to the limitations of California law, which allows a corporation to distribute cash or property to shareholders, including a dividend or repurchase or redemption of shares, if the corporation meets either a retained earnings test or a “balance sheet” test. Under the retained earnings test, Bancorp may make a distribution from retained earnings to the extent that its retained earnings exceed the sum of (a) the amount of the distribution plus (b) the amount, if any, of dividends in arrears on shares with preferential dividend rights. Bancorp may also make a distribution if, immediately after the distribution, the value of its assets equals or exceeds the sum of (a) its total liabilities plus (b) the liquidation preference of any shares which have a preference upon dissolution over the rights of shareholders receiving the distribution. Indebtedness is not considered a liability if the terms of such indebtedness provide that payment of principal and interest thereon are to be made only if, and to the extent that, a distribution to shareholders could be made under the balance sheet test. A California corporation may specify in its articles of incorporation that distributions under the retained earnings test or balance sheet test can be made without regard to the preferential rights amount. Bancorp’s articles of incorporation do not address distributions under either the retained earnings test or the balance sheet test.

As a general matter, the Federal Reserve has indicated that the board of directors of a bank holding company should eliminate, defer or significantly reduce dividends to shareholders if: (i) Bancorp’s net income available to shareholders for the past four quarters, net of dividends previously paid during that period, is not sufficient to fully fund the dividends; (ii) the prospective rate of earnings retention is inconsistent with Bancorp’s capital needs and overall current and prospective financial condition; or (iii) Bancorp will not meet, or is in danger of not meeting, its minimum regulatory capital adequacy ratios. The Federal Reserve also possesses enforcement powers over bank holding companies and their nonbank subsidiaries to prevent or remedy actions that represent unsafe or unsound practices or violations of applicable statutes and regulations. Among these powers is the ability to proscribe the payment of dividends by banks and bank holding companies.

The terms of our junior subordinated notes also limit our ability to pay dividends on our common stock. If we are not current on our payment of interest on our Junior Subordinated Notes, we may not pay dividends on our common stock. The amount of future dividends by Bancorp will depend on our earnings, financial condition, capital requirements and other factors, and will be determined by our board of directors in accordance with the capital management and dividend policy.

The Bank is a legal entity that is separate and distinct from its holding company. Bancorp is dependent on the performance of the Bank for funds, which may be received as dividends from the Bank, for use in the operation of Bancorp and the ability of Bancorp to pay dividends to its stockholders. Future cash dividends by the Bank will also depend upon management’s assessment of future capital requirements, contractual restrictions, and other factors. When phased in, the new capital rules will restrict dividends by the Bank if the capital conservation buffer is not achieved.

The Bank

General. The Bank is a California-chartered bank, but is not a member of the Federal Reserve System (a “non-member bank”). The deposit accounts of the Bank are insured by the FDIC’s Deposit Insurance Fund (“DIF”) to the maximum extent provided under federal law and FDIC regulations. As a California-chartered FDIC-insured non-member bank, the Bank is subject to the examination, supervision, reporting and enforcement requirements of the DFPI, the chartering authority for California banks, and as a non-member bank, the FDIC.

Supervisory Assessments. California-chartered banks are required to pay supervisory assessments to the DFPI to fund its operations. The amount of the assessment paid by a California bank to the DFPI is calculated on the basis of the institution’s total assets, including consolidated subsidiaries, as reported to the DFPI. During the years ended December 31, 2023 and 2022, the Bank paid supervisory assessments to the DFPI totaling $268,000 and $212,000, respectively.

17

Table of Contents

Capital Requirements. Banks are generally required to maintain capital levels in excess of other businesses. For a discussion of capital requirements, see “Regulatory Capital Requirements” above.

Dividend Payments. The primary source of funds for the Company is dividends from the Bank. Under the California Financial Code, the Bank is permitted to pay a dividend in the following circumstances: (i) without the consent of either the DFPI or the Bank’s shareholders, in an amount not exceeding the lesser of (a) the retained earnings of the Bank; or (b) the net income of the Bank for its last three fiscal years, less the amount of any distributions made during the prior period; (ii) with the prior approval of the DFPI, in an amount not exceeding the greatest of: (a) the retained earnings of the Bank; (b) the net income of the Bank for its last fiscal year; or (c) the net income for the Bank for its current fiscal year; and (iii) with the prior approval of the DFPI and the Bank’s shareholders in connection with a reduction of its contributed capital. The payment of dividends by any financial institution is affected by the requirement to maintain adequate capital pursuant to applicable capital adequacy guidelines and regulations, and a financial institution generally is prohibited from paying any dividends if, following payment thereof, the institution would be undercapitalized. As described above, the Bank exceeded its minimum capital requirements under applicable regulatory guidelines as of December 31, 2023.

Transactions with Affiliates and Insiders. Depository institutions are subject to the restrictions contained in the Federal Reserve Act (the “FRA”) with respect to loans to directors, executive officers and principal stockholders. Under the FRA, loans to directors, executive officers and stockholders who own more than 10% of a depository institution and certain affiliated entities of any of the foregoing, may not exceed, together with all other outstanding loans to such person and affiliated entities, the institution’s loans-to-one-borrower limit. Federal regulations also prohibit loans above amounts prescribed by the appropriate federal banking agency to directors, executive officers, and stockholders who own more than 10% of an institution, and their respective affiliates, unless such loans are approved in advance by a majority of the board of directors of the institution. Any “interested” director may not participate in the voting. The proscribed loan amount, which includes all other outstanding loans to such person, as to which such prior board of director approval is required, is the greater of $25,000 or 5% of capital and surplus up to $500,000. The Federal Reserve also requires that loans to directors, executive officers and principal stockholders be made on terms substantially the same as offered in comparable transactions to non-executive employees of the bank and must not involve more than the normal risk of repayment. There are additional limits on the amount a bank can loan to an executive officer.

Transactions between a bank and its “affiliates” are quantitatively and qualitatively restricted under Sections 23A and 23B of the FRA. Section 23A restricts the aggregate amount of covered transactions with any individual affiliate to 10% of the capital and surplus of the financial institution. The aggregate amount of covered transactions with all affiliates is limited to 20% of the institution’s capital and surplus. Certain transactions with affiliates are required to be secured by collateral in an amount and of a type described in Section 23A and the purchase of low quality assets from affiliates are generally prohibited.

Section 23B generally provides that certain transactions with affiliates, including loans and asset purchases, must be on terms and under circumstances, including credit standards, that are substantially the same or at least as favorable to the institution as those prevailing at the time for comparable transactions with non-affiliated companies. The Federal Reserve has promulgated Regulation W, which codifies prior interpretations under Sections 23A and 23B of the FRA and provides interpretive guidance with respect to affiliate transactions. Affiliates of a bank include, among other entities, a bank’s holding company and companies that are under common control with the bank. Bancorp is considered to be an affiliate of the Bank.

The Dodd-Frank Act generally enhanced the restrictions on transactions with affiliates under Section 23A and 23B of the FRA, including an expansion of the definition of “covered transactions” and an increase in the amount of time for which collateral requirements regarding covered credit transactions must be satisfied. Insider transaction limitations are expanded through the strengthening of loan restrictions to insiders and the expansion of the types of transactions subject to the various limits, including derivatives transactions, repurchase agreements, reverse repurchase agreements and securities lending or borrowing transactions. Restrictions are also placed on certain asset sales to and from an insider to an institution, including requirements that such sales be on market terms and, in certain circumstances, approved by the institution’s board of directors.

Loans to One Borrower. Under California law, our ability to make aggregate secured and unsecured loans-to-one-borrower is limited to 25% and 15%, respectively, of unimpaired capital and surplus. At December 31, 2023, the Bank’s regulatory limit on aggregate secured loans-to-one-borrower was $163.9 million and unsecured loans-to-one borrower was $98.3 million. The Bank did not have any loans to one borrower that exceeded either of these limits at December 31, 2023.

18

Table of Contents

Safety and Soundness Standards/Risk Management. The federal banking agencies have adopted guidelines that establish operational and managerial standards to promote the safety and soundness of federally insured depository institutions. The guidelines set forth standards for internal controls, information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, compensation, fees and benefits, asset quality and earnings.

In general, the safety and soundness guidelines prescribe the goals to be achieved in each area, and each institution is responsible for establishing its own procedures to achieve those goals. If an institution fails to comply with any of the standards set forth in the guidelines, the financial institution’s primary federal regulator may require the institution to submit a plan for achieving and maintaining compliance. If a financial institution fails to submit an acceptable compliance plan, or fails in any material respect to implement a compliance plan that has been accepted by its primary federal regulator, the regulator is required to issue an order directing the institution to cure the deficiency. Until the deficiency cited in the regulator’s order is cured, the regulator may restrict the financial institution’s rate of growth, require the financial institution to increase its capital, restrict the rates the institution pays on deposits or require the institution to take any action the regulator deems appropriate under the circumstances. Noncompliance with the standards established by the safety and soundness guidelines may also constitute grounds for other enforcement action by the federal bank regulatory agencies, including cease and desist orders and civil money penalty assessments.

During the past decade, the bank regulatory agencies have increasingly emphasized the importance of sound risk management processes and strong internal controls when evaluating the activities of the financial institutions they supervise. Properly managing risks has been identified as critical to the conduct of safe and sound banking activities and has become even more important as new technologies, product innovation, and the size and speed of financial transactions have changed the nature of banking markets. The agencies have identified a spectrum of risks facing a banking institution including, but not limited to, credit, market, liquidity, operational, legal, and reputational risk. In particular, recent regulatory pronouncements have focused on operational risk, which arises from the potential that inadequate information systems, operational problems, breaches in internal controls, fraud, or unforeseen catastrophes will result in unexpected losses. New products and services, third-party risk management and cybersecurity are critical sources of operational risk that financial institutions are expected to address in the current environment. The Bank is expected to have active board and senior management oversight; adequate policies, procedures, and limits; adequate risk measurement, monitoring, and management information systems; and comprehensive internal controls.

Branching Authority. California banks, such as the Bank, may, under California law, establish a banking office so long as the bank’s board of directors approves the banking office and the DFPI is notified of the establishment of the banking office. Deposit-taking banking offices must be approved by the FDIC, which considers a number of factors, including financial history, capital adequacy, earnings prospects, character of management, needs of the community and consistency with corporate power. The Dodd-Frank Act permits insured state banks to engage in de novo interstate branching if the laws of the state where the new banking office is to be established would permit the establishment of the banking office if it were chartered by such state. Finally, we may also establish banking offices in other states by merging with banks or by purchasing banking offices of other banks in other states, subject to certain restrictions.

Community Reinvestment Act Requirements. The CRA requires the Bank to have a continuing and affirmative obligation in a safe and sound manner to help meet the credit needs of its entire community, including low- and moderate-income neighborhoods. Federal regulators regularly assess the Bank’s record of meeting the credit needs of its communities. Applications for additional acquisitions would be affected by the evaluation of the Bank’s effectiveness in meeting its CRA requirements. In April 2018, the Treasury issued a memorandum to the federal banking regulators recommending changes to the CRA’s regulations to reduce their complexity and associated burden on banks, and in December 2019, the FDIC and the Office of the Comptroller of the Currency (“OCC”) proposed for public comment rules to modernize the agencies’ regulations under the CRA. In September 2020, the Federal Reserve released for public comment its proposed rules to modernize CRA regulations. We will continue to evaluate the impact of any changes to the CRA regulations. The Bank received a “satisfactory” rating on its most recent CRA examination, which was conducted in May 2023.

In May 2022, federal bank regulatory agencies jointly issued a proposal to strengthen and modernize regulations implementing the CRA to better achieve the purposes of the law. On October 24, 2023, the federal banking agencies issued a final rule that significantly amends the CRA regulations and revises the framework for evaluating banks’ records of community reinvestment under the CRA. Under the revised framework, banks with assets of at least $2 billion, such as the Bank, are considered large banks and their retail lending, retail services and products, community development financing, and community development services will be subject to periodic evaluation. Depending on a large bank’s geographic distribution of lending, the evaluation of retail lending may include assessment areas in which the bank extends loans but does not operate any deposit-taking facilities, in addition to assessment areas in which the Bank has deposit-taking facilities. The effective date of the rule is April 1, 2024, however, certain provisions of the final rule will apply beginning January 1, 2026, and the remaining provisions will apply beginning January 1, 2027. The Company is evaluating the impact of the final rule.

Anti-Money Laundering and OFAC Regulation. The USA Patriot Act is designed to deny terrorists and criminals the ability to obtain access to the U.S. financial system and has significant implications for depository institutions, brokers, dealers and other businesses involved in the transfer of money. The USA Patriot Act mandates financial services companies to have policies and procedures with respect to measures designed to address any or all of the following matters: (i) customer identification programs; (ii) money laundering; (iii) terrorist financing; (iv) identifying and reporting suspicious activities and currency transactions; (v) currency crimes; and (vi) cooperation between financial institutions and law enforcement authorities. Banking regulators also examine banks for compliance with the economic sanctions regulations administered by OFAC. Failure of a financial institution to maintain and implement adequate anti-money laundering and OFAC programs, or to comply with all of the relevant laws or regulations, could have serious legal and reputational consequences for the institution.

19

Table of Contents

Concentrations in Commercial Real Estate. Concentration risk exists when financial institutions deploy too many assets to any one industry or segment. Concentration stemming from commercial real estate is one area of regulatory concern. The CRE Concentration Guidance, provides supervisory criteria, including the following numerical indicators, to assist bank examiners in identifying banks with potentially significant commercial real estate loan concentrations that may warrant greater supervisory scrutiny: (i) commercial real estate loans exceeding 300% of capital and increasing 50% or more in the preceding three years; or (ii) construction and land development loans exceeding 100% of capital. The CRE Concentration Guidance does not limit banks’ levels of commercial real estate lending activities, but rather guides institutions in developing risk management practices and levels of capital that are commensurate with the level and nature of their commercial real estate concentrations. Based on the Bank’s loan portfolio, the Bank does not exceed these guidelines.

Consumer Financial Services

Banks and other financial institutions are subject to numerous laws and regulations intended to protect consumers in their transactions with banks. These laws include, among others, laws regarding unfair and deceptive acts and practices and usury laws, as well as the following consumer protection statutes: Truth in Lending Act, Truth in Savings Act, Electronic Fund Transfer Act, Expedited Funds Availability Act, Equal Credit Opportunity Act, Fair and Accurate Credit Transactions Act, Fair Housing Act, Fair Credit Reporting Act, Fair Debt Collection Act, GLB Act, Home Mortgage Disclosure Act, Right to Financial Privacy Act and Real Estate Settlement Procedures Act.

Many states and local jurisdictions including California have consumer protection laws analogous, and in addition, to those listed above. These federal, state and local laws regulate the manner in which financial institutions deal with customers when taking deposits, making loans or conducting other types of transactions. Examples include but are not limited to the CCPA and the CCFPL described above. Failure to comply with these laws and regulations could give rise to regulatory sanctions, customer rescission rights, action by state and local attorneys general and civil or criminal liability.

The structure of federal consumer protection regulation applicable to all providers of consumer financial products and services changed significantly on July 21, 2011, when the CFPB commenced operations to supervise and enforce consumer protection laws. The CFPB has broad rulemaking authority for a wide range of consumer protection laws that apply to all providers of consumer products and services, including the Bank, as well as the authority to prohibit “unfair, deceptive or abusive” acts and practices. The CFPB has examination and enforcement authority over providers with more than $10 billion in assets. Banks and savings institutions with $10 billion or less in assets, like the Bank, will continue to be examined by their applicable bank regulators.

Mortgage and Mortgage-Related Products. The Dodd-Frank Act significantly expanded underwriting requirements applicable to loans secured by 1-4 family residential real property and augmented federal law combating predatory lending practices. In addition to numerous disclosure requirements, the Dodd-Frank Act imposed new standards for mortgage loan originations on all lenders, including banks and savings associations, in an effort to strongly encourage lenders to verify a borrower’s ability to repay, while also establishing a presumption of compliance for certain “qualified mortgages.” The Dodd-Frank Act generally required lenders or securitizers to retain an economic interest in the credit risk relating to loans that the lender sells, and other asset-backed securities that the securitizer issues, if the loans do not comply with the ability-to-repay standards described below. The risk retention requirement generally is 5%, but could be increased or decreased by regulation. The Bank does not currently expect the CFPB’s rules to have a significant impact on its operations, except for higher compliance costs.

20

Table of Contents

Incentive Compensation Guidance

The federal bank regulatory agencies have issued comprehensive guidance intended to ensure that the incentive compensation policies of banking organizations do not undermine the safety and soundness of those organizations by encouraging excessive risk-taking. The incentive compensation guidance sets expectations for banking organizations concerning their incentive compensation arrangements and related risk-management, control and governance processes. The incentive compensation guidance, which covers all employees that have the ability to materially affect the risk profile of an organization, either individually or as part of a group, is based upon three primary principles: (1) balanced risk-taking incentives; (2) compatibility with effective controls and risk management; and (3) strong corporate governance. Any deficiencies in compensation practices that are identified may be incorporated into the organization’s supervisory ratings, which can affect its ability to make acquisitions or take other actions. In addition, under the incentive compensation guidance, a banking organization’s federal supervisor may initiate enforcement action if the organization’s incentive compensation arrangements pose a risk to the safety and soundness of the organization. In addition, beginning January 1, 2016, the Basel III rules limit discretionary bonus payments to the Bank’s executive officers if its capital ratios are below the threshold levels of the capital conservation buffer established by the rules. The capital conservation buffer was phased in from January 1, 2016 to January 1, 2019, when the full capital conservation buffer of 2.5% (as a percentage of risk-weighted assets) became effective. The capital conservation buffer is in addition to the minimum risk-based capital requirement. The scope and content of the U.S. banking regulators’ policies on executive compensation are continuing to develop and are likely to continue evolving in the near future.

Sarbanes-Oxley Act

The Company is subject to the accounting oversight and corporate governance requirements of the Sarbanes-Oxley Act of 2002 (the “Sarbanes-Oxley Act”), including, among other things, required executive certification of financial presentations, requirements for board audit committees and their members, and disclosure of controls and procedures and internal control over financial reporting.

Enforcement Powers of Federal and State Banking Agencies

The federal bank regulatory agencies have broad enforcement powers, including the power to terminate deposit insurance, impose substantial fines and other civil and criminal penalties, and appoint a conservator or receiver for financial institutions. Failure to comply with applicable laws and regulations could subject us and our officers and directors to administrative sanctions and potentially substantial civil money penalties. In addition to the grounds discussed above under “Prompt Corrective Actions,” the appropriate federal bank regulatory agency may appoint the FDIC as conservator or receiver for a banking institution (or the FDIC may appoint itself, under certain circumstances) if any one or more of a number of circumstances exist, including, without limitation, the fact that the banking institution is undercapitalized and has no reasonable prospect of becoming adequately capitalized, fails to become adequately capitalized when required to do so, fails to submit a timely and acceptable capital restoration plan or materially fails to implement an accepted capital restoration plan. The DFPI also has broad enforcement powers over us, including the power to impose orders, remove officers and directors, impose fines and appoint supervisors and conservators.

Financial Privacy

The federal bank regulatory agencies have adopted rules that limit the ability of banks and other financial institutions to disclose non-public information about consumers to non-affiliated third parties. These limitations require disclosure of privacy policies to consumers and, in some circumstances, allow consumers to prevent disclosure of certain personal information to a non-affiliated third party. These regulations affect how consumer information is transmitted through financial services companies and conveyed to outside vendors. In addition, consumers may also prevent disclosure of certain information among affiliated companies that is assembled or used to determine eligibility for a product or service, such as that shown on consumer credit reports and asset and income information from applications. Consumers also have the option to direct banks and other financial institutions not to share information about transactions and experiences with affiliated companies for the purpose of marketing products or services.

Additional Constraints on the Company and the Bank

Monetary Policy. The monetary policy of the Federal Reserve has a significant effect on the operating results of financial or bank holding companies and their subsidiaries. Among the tools available to the Federal Reserve to affect the money supply are open market transactions in U.S. government securities, changes in the discount rate on member bank borrowings and changes in reserve requirements against member bank deposits. These means are used in varying combinations to influence overall growth and distribution of bank loans, investments and deposits, and their use may affect interest rates charged on loans or paid on deposits.

21

Table of Contents

The Volcker Rule. In addition to other implications of the Dodd-Frank Act discussed above, the Dodd-Frank Act amended the BHCA to require the federal regulatory agencies to adopt rules that prohibit banking entities and their affiliates from engaging in proprietary trading and investing in and sponsoring certain unregistered investment companies (defined as hedge funds and private equity funds). This statutory provision is commonly called the “Volcker Rule.” On December 10, 2013, the federal regulatory agencies issued final rules to implement the prohibitions required by the Volcker Rule. Thereafter, in reaction to industry concern over the adverse impact to community banks of the treatment of certain collateralized debt instruments in the final rule, the federal regulatory agencies approved an interim final rule to permit financial institutions to retain interests in collateralized debt obligations backed primarily by trust preferred securities (“TruPS CDOs”), from the investment prohibitions contained in the final rule. Under the interim final rule, the regulatory agencies permitted the retention of an interest in or sponsorship of covered funds by banking entities if the following qualifications were met: (i) the TruPS CDO was established, and the interest was issued, before May 19, 2010; (ii) the banking entity reasonably believes that the offering proceeds received by the TruPS CDO were invested primarily in qualifying TruPS collateral; and (iii) the banking entity’s interest in the TruPS CDO was acquired on or before December 10, 2013.

Revisions to the Volcker Rule in 2019, that become effective in 2020, simplifies and streamlines the compliance requirements for banks that do not have significant trading activities. In 2020, the OCC, Federal Reserve, FDIC, SEC and Commodity Futures Trading Commission finalized further amendments to the Volcker Rule. The amendments include new exclusions from the Volcker Rule’s general prohibitions on banking entities investing in and sponsoring private equity funds, hedge funds, and certain other investment vehicles (collectively “covered funds”). The amendments in the final rule, which became effective on October 1, 2020, clarify and expand permissible banking activities and relationships under the Volcker Rule.

Additional Restrictions on Bancorp and Bank Activities

Subject to prior notice or Federal Reserve approval, bank holding companies may generally engage in, or acquire shares of companies engaged in, activities determined by the Federal Reserve to be so closely related to banking or managing or controlling banks as to be a proper incident thereto. Bank holding companies, such as Bancorp, which elect and retain “financial holding company” status pursuant to the GLB Act may engage in these nonbanking activities and broader securities, insurance, merchant banking and other activities that are determined to be “financial in nature” or are incidental or complementary to activities that are financial in nature without prior Federal Reserve approval. Pursuant to the GLB Act and the Dodd-Frank Act, in order to elect and retain financial holding company status, a bank holding company and all depository institution subsidiaries of a bank holding company must be well capitalized and well managed, and, except in limited circumstances, depository subsidiaries must be in satisfactory compliance with the CRA. Failure to sustain compliance with these requirements or correct any non-compliance within a fixed time period could lead to divestiture of subsidiary banks or require all activities to conform to those permissible for a bank holding company.

Pursuant to the FDIA and the California Financial Code, California state chartered commercial banks may generally engage in any activity permissible for national banks. Therefore, the Bank may form subsidiaries to engage in the many so-called “closely related to banking” or “nonbanking” activities commonly conducted by national banks in operating subsidiaries or subsidiaries of bank holding companies. Further, pursuant to the GLB Act, California banks may conduct certain “financial” activities in a subsidiary to the same extent as a national bank, provided the bank is and remains “well-capitalized,” “well-managed” and in satisfactory compliance with the CRA. The Bank currently has no financial subsidiaries.

Source of Strength

Federal Reserve policy and federal law require bank holding companies to act as a source of financial and managerial strength to their subsidiary banks. Under this requirement, Bancorp is expected to commit resources to support the Bank, including at times when Bancorp may not be in a financial position to provide such resources, and it may not be in Bancorp’s, or Bancorp’s stockholders’ or creditors’, best interests to do so. In addition, any capital loans Bancorp makes to the Bank are subordinate in right of payment to depositors and to certain other indebtedness of the Bank. In the event of Bancorp’s bankruptcy, any commitment by Bancorp to a federal bank regulatory agency to maintain the capital of the Bank will be assumed by the bankruptcy trustee and entitled to priority of payment.

22

Table of Contents

Enforcement Authority

The federal and California regulatory structure gives the bank regulatory agencies extensive discretion in connection with their supervisory and enforcement activities and examination policies, including policies with respect to the classification of assets and the establishment of adequate loan loss reserves for regulatory purposes. The regulatory agencies have adopted guidelines to assist in identifying and addressing potential safety and soundness concerns before an institution’s capital becomes impaired. The guidelines establish operational and managerial standards generally relating to: (i) internal controls, information systems, and internal audit systems; (ii) loan documentation; (iii) credit underwriting; (iv) interest-rate exposure; (v) asset growth and asset quality; (vi) loan concentration; and (vii) compensation, fees, and benefits. Further, the regulatory agencies have adopted safety and soundness guidelines for asset quality and for evaluating and monitoring earnings to ensure that earnings are sufficient for the maintenance of adequate capital and reserves. If, as a result of an examination, the DFPI or the FDIC should determine that the financial condition, capital resources, asset quality, earnings prospects, management, liquidity, or other aspects of the Bank’s operations are unsatisfactory or that the Bank or its management is violating or has violated any law or regulation, the DFPI and the FDIC have residual authority to:

The Federal Reserve has similar enforcement authority over bank holding companies and commonly takes parallel action in conjunction with actions taken by a subsidiary bank’s regulators.

In the exercise of their supervisory and examination authority, the regulatory agencies have recently emphasized corporate governance, stress testing, enterprise risk management and other board responsibilities; anti-money laundering compliance and enhanced high-risk customer due diligence; vendor management; cyber security and fair lending and other consumer compliance obligations.

Deposit Insurance

The FDIC is an independent federal agency that insures deposits, up to prescribed statutory limits, of federally insured banks and savings institutions and safeguards the safety and soundness of the banking and savings industries. The FDIC insures our customer deposits through the DIF up to prescribed limits of $250,000 for each depositor pursuant to the Dodd-Frank Act. The amount of FDIC assessments paid by each DIF member institution is based on its relative risk of default as measured by regulatory capital ratios and other supervisory factors. The FDIC uses a performance score and a loss-severity score to calculate an initial assessment rate for the Bank. In calculating these scores, the FDIC uses the Bank’s capital level and regulatory supervisory ratings and certain financial measures to assess the Bank’s ability to withstand asset-related stress and funding-related stress. The FDIC also has the ability to make discretionary adjustments to the total score based upon significant risk factors that are not adequately captured in the calculations. In addition to ordinary assessments described above, the FDIC has the ability to impose special assessments in certain instances.

We are generally unable to control the amount of assessments that we are required to pay for FDIC insurance. If there are additional bank or financial institution failures or if the FDIC otherwise determines, we may be required to pay even higher FDIC assessments than the recently increased levels. These increases in FDIC insurance assessments may have a material and adverse effect on our earnings and could have a material adverse effect on the value of, or market for, our common stock.

Under the FDIA, the FDIC may terminate deposit insurance upon a finding that the institution has engaged in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations, or has violated any applicable law, regulation, rule, order or condition imposed by the FDIC.

On October 18, 2022, the FDIC adopted a final rule that increased initial base deposit insurance assessment rates by 2 basis points, beginning with the first quarterly assessment period of 2023. Due to the decline in the DIF reserve ratio below the statutory minimum of 1.35% as of June 30, 2020, caused by extraordinary growth in insured deposits during the first and second quarters of 2020, the FDIC established a Restoration Plan in September 2020 to restore the DIF reserve ratio to meet or exceed the statutory minimum of 1.35% within eight years. The Restoration Plan did not include an increase in the deposit insurance assessment rate. On June 21, 2022, however, the FDIC adopted an Amended Restoration Plan and notice of proposed rulemaking to increase the deposit insurance assessment rates as it was otherwise at risk of not reaching the statutory minimum by the statutory deadline of September 30, 2028. The proposed rule was adopted as final without change.

Also, in the final rule adopted on October 18, 2022, the FDIC incorporated Accounting Standards Update (“ASU”) 2022-02, Financial Instruments - Credit Losses (Topic 326) Troubled Debt Restructurings and Vintage Disclosures in the risk-based deposit insurance assessment system applicable to all large and highly complex IDIs. In March 2022, the FASB issued ASU 2022-02, which eliminates accounting guidance for troubled debt restructurings (“TDRs”) and introduces new disclosures and enhances existing disclosures concerning certain loan refinancings and restructurings when a borrower is experiencing financial difficulty. The FDIC final rule amends the assessment regulations to include a new term, “modifications to borrowers experiencing financial difficulty,” in two financial measures—the underperforming assets ratio and the higher-risk assets ratio—used to determine deposit insurance assessments for large and highly complex IDIs. The final rule became effective on January 1, 2023, and was applicable to the first quarterly assessment period of 2023.

On November 16, 2023, the FDIC adopted a final rule on special assessment to recover the losses to the DIF from the protection of uninsured depositors following the closures of Silicon Valley Bank, Santa Clara, CA, and Signature Bank, New York, NY during March 2023. The assessment base for the special assessment is equal to an IDI’s estimated uninsured deposits, reported for the quarter that ended December 31, 2022, adjusted to exclude the first $5 billion in estimated uninsured deposits from the IDI, or for IDIs that are part of a holding company with one or more subsidiary IDIs, at the banking organization level. The FDIC will collect the special assessment at an annual rate of approximately 13.4 basis points, over eight quarterly assessment periods. The FDIC retains the ability to cease collection early, extend the special assessment collection period, and impose a final shortfall special assessment to collect the difference between actual losses and the amounts collected after the receiverships for Silicon Valley Bank and Signature Bank terminate. The final rule will be effective April 1, 2024, with the first collection for the special assessment reflected on the invoice for the first quarterly assessment period of 2024 with a payment date of June 28, 2024. Our deposits as of December 31, 2022 were below $5 billion and therefore the Bank is not subject to this special assessment.

Operations, Consumer and Privacy Compliance Laws

The Bank must comply with numerous federal and state anti-money laundering and consumer protection statutes and implementing regulations, including the USA Patriot Act, the Bank Secrecy Act, the Foreign Account Tax Compliance Act, the CRA, the Fair Credit Reporting Act, as amended by the Fair and Accurate Credit Transactions Act, the Equal Credit Opportunity Act, the Truth in Lending Act, the Fair Housing Act, the Home Mortgage Disclosure Act, the Real Estate Settlement Procedures Act, the National Flood Insurance Act, the California Homeowner Bill of Rights and various federal and state privacy protection laws, including but not limited to the CCPA. The Bank and Bancorp are also subject to federal and state laws prohibiting unfair or fraudulent business practices, untrue or misleading advertising, and unfair competition. Some of these laws are further discussed below:

23

Table of Contents

The Equal Credit Opportunity Act (“ECOA”) generally prohibits discrimination in any credit transaction, whether for consumer or business purposes, on the basis of race, color, religion, national origin, sex, marital status, age, receipt of income from public assistance programs, or good faith exercise of any rights under the Consumer Credit Protection Act.

The Truth in Lending Act (“TILA”) is designed to ensure that credit terms are disclosed in a meaningful way so that consumers may compare credit terms more readily and knowledgeably. As a result of the TILA, all creditors must use the same credit terminology to express rates and payments, including the annual percentage rate, the finance charge, the amount financed, the total of payments and the payment schedule, among other things.

The Fair Housing Act (“FH Act”) regulates many practices, including making it unlawful for any lender to discriminate in its housing-related lending activities against any person because of race, color, religion, national origin, sex, handicap or familial status. A number of lending practices have been found by the courts to be, or may be considered, illegal under the FH Act, including some that are not specifically mentioned in the FH Act itself.

The Home Mortgage Disclosure Act (“HMDA”) grew out of public concern over credit shortages in certain urban neighborhoods and provides public information that will help show whether financial institutions are serving the housing credit needs of the neighborhoods and communities in which they are located. The HMDA also includes a “fair lending” aspect that requires the collection and disclosure of data about applicant and borrower characteristics as a way of identifying possible discriminatory lending patterns and enforcing anti-discrimination statutes.

Finally, the Real Estate Settlement Procedures Act (“RESPA”) requires lenders to provide borrowers with disclosures regarding the nature and cost of real estate settlements. Also, RESPA prohibits certain abusive practices, such as kickbacks, and places limitations on the amount of escrow accounts. Penalties under the above laws may include fines, reimbursements and other civil money penalties.

Due to heightened regulatory concern related to compliance with the CRA, TILA, FH Act, ECOA, HMDA and RESPA generally, the Bank may incur additional compliance costs or be required to expend additional funds for investments in its local community.

The Federal Reserve and other bank regulatory agencies also have adopted guidelines for safeguarding confidential, personal customer information. These guidelines require financial institutions to create, implement and maintain a comprehensive written information security program designed to ensure the security and confidentiality of customer information, protect against any anticipated threats or hazards to the security or integrity of such information and protect against unauthorized access to or use of such information that could result in substantial harm or inconvenience to any customer. Financial institutions are also required to implement policies and procedures regarding the disclosure of nonpublic personal information about consumers to non-affiliated third parties. In general, financial institutions must provide explanations to consumers on policies and procedures regarding the disclosure of such nonpublic personal information and, except as otherwise required by law, prohibits disclosing such information. The Bank has adopted a customer information security and privacy program to comply with such requirements.

Operations, consumer and privacy compliance laws and regulations also mandate certain disclosure and reporting requirements and regulate the manner in which financial institutions must deal with customers when taking deposits, making loans, collecting loans, and providing other services. Failure to comply with these laws and regulations can subject the Bank to lawsuits and penalties, including enforcement actions, injunctions, fines or criminal penalties, punitive damages to consumers, and the loss of certain contractual rights.

Federal Home Loan Bank System

The Bank is a member of the Federal Home Loan Bank (“FHLB”) of San Francisco. Among other benefits, each FHLB serves as a reserve or central bank for its members within its assigned region. Each FHLB is financed primarily from the sale of consolidated obligations of the FHLB system. Each FHLB makes available loans or advances to its members in compliance with the policies and procedures established by the board of directors of the individual FHLB. Each member of the FHLB of San Francisco is required to own stock in an amount equal to the greater of (i) a membership stock requirement, or (ii) an activity based stock requirement (based on a percentage of outstanding advances). There can be no assurance that the FHLB will pay dividends at the same rate it has paid in the past, or that it will pay any dividends in the future.

24

Table of Contents

Impact of Monetary Policies

The earnings and growth of the Bank are largely dependent on its ability to maintain a favorable differential or spread between the yield on its interest-earning assets and the rates paid on its deposits and other interest-bearing liabilities. As a result, the Bank’s performance is influenced by general economic conditions, both domestic and foreign, the monetary and fiscal policies of the federal government, and the policies of the regulatory agencies. The Federal Reserve implements national monetary policies (with objectives such as seeking to curb inflation and combat recession) by its open-market operations in U.S. government securities, by adjusting the required level of reserves for financial institutions subject to its reserve requirements, and by varying the discount rate applicable to borrowings by banks from the Federal Reserve Banks. The actions of the Federal Reserve in these areas influence the growth of bank loans, investments and deposits, and also affect interest rates charged on loans and deposits. The nature and impact of any future changes in monetary policies cannot be predicted.

Securities and Corporate Governance

Bancorp is subject to the disclosure and regulatory requirements of the Securities Act and the Exchange Act, both as administered by the SEC. As a company listed on the NASDAQ Global Select Market, the Company is subject to NASDAQ listing standards for listed companies. Bancorp is also subject to the Sarbanes-Oxley Act, provisions of the Dodd-Frank Act, and other federal and state laws and regulations which address, among other issues, required executive certification of financial presentations, corporate governance requirements for board audit and compensation committees and their members, and disclosure of controls and procedures and internal control over financial reporting, auditing and accounting, executive compensation, and enhanced and timely disclosure of corporate information. NASDAQ has also adopted corporate governance rules, which are intended to allow stockholders and investors to more easily and efficiently monitor the performance of companies and their directors. Under the Sarbanes-Oxley Act, management and the Bancorp’s independent registered public accounting firm are required to assess the effectiveness of the Bancorp’s internal control over financial reporting. These assessments are included in Part II — Item 9A — “Controls and Procedures.”

Federal Banking Agency Compensation Guidelines

Guidelines adopted by the federal banking agencies pursuant to the FDIA prohibit excessive compensation as an unsafe and unsound practice and describe compensation as excessive when the amounts paid are unreasonable or disproportionate to the services performed by an executive officer, employee, director or principal stockholder. The federal banking agencies have issued comprehensive guidance on incentive compensation policies intended to ensure that the incentive compensation policies of banking organizations do not undermine the safety and soundness of such organizations by encouraging excessive risk-taking.

The guidance, which covers all employees that have the ability to materially affect the risk profile of an organization, is based upon the key principles that a banking organization’s incentive compensation arrangements should (i) provide incentives that do not encourage risk-taking beyond the organization’s ability to effectively identify and manage risks, (ii) be compatible with effective internal controls and risk management, and (iii) be supported by strong corporate governance, including active and effective oversight by the organization’s board of directors. In accordance with the Dodd-Frank Act, the federal banking agencies prohibit incentive-based compensation arrangements that encourage inappropriate risk taking by covered financial institutions (generally institutions, like us, that have over $1 billion in assets) and are deemed to be excessive, or that may lead to material losses.

The Federal Reserve will review, as part of the regular, risk-focused examination process, the incentive compensation arrangements of banking organizations, such as the Company, that are not “large, complex banking organizations.” These reviews will be tailored to each organization based on the scope and complexity of the organization’s activities and the prevalence of incentive compensation arrangements. The findings of the supervisory initiatives will be included in reports of examination. Deficiencies will be incorporated into the organization’s supervisory ratings, which can affect the organization’s ability to make acquisitions and take other actions. Enforcement actions may be taken against a banking organization if its incentive compensation arrangements, or related risk-management control or governance processes, pose a risk to the organization’s safety and soundness, and the organization is not taking prompt and effective measures to correct the deficiencies.

The scope and content of the U.S. banking regulators’ policies on executive compensation may continue to evolve in the near future. It cannot be determined at this time whether compliance with such policies will adversely affect the Company’s ability to hire, retain, and motivate its key employees.

25

Table of Contents

Audit Requirements

The Bank is required to have an annual independent audit, alone or as a part of its bank holding company’s audit, and to prepare all financial statements in accordance with GAAP. The Bank and Bancorp are also each required to have an audit committee comprised entirely of independent directors. As required by NASDAQ, Bancorp has certified that its audit committee has adopted formal written charters and meets the requisite number of directors, independence, and other qualification standards.

Regulation of Non-Bank Subsidiaries

Non-bank subsidiaries are subject to additional or separate regulation and supervision by other state, federal and self-regulatory bodies. Additionally, any foreign-based subsidiaries would also be subject to foreign laws and regulations.

Future Legislation and Regulation

Congress may enact, modify or repeal legislation from time to time that affects the regulation of the financial services industry, and state legislatures may enact, modify or repeal legislation from time to time affecting the regulation of financial institutions chartered by or operating in those states. Federal and state regulatory agencies also periodically propose and adopt changes to their regulations or change the manner in which existing regulations are applied. The substance or impact of pending or future legislation or regulation, or the application thereof, cannot be predicted, although enactment of proposed legislation (or modification or repeal of existing legislation) could impact the regulatory structure under which the Company and the Bank operate and may significantly increase its costs, impede the efficiency of its internal business processes, require the Bank to increase its regulatory capital and modify its business strategy, and limit its ability to pursue business opportunities in an efficient manner. The Company’s business, financial condition, results of operations or prospects may be adversely affected, perhaps materially.

Federal and State Taxation

Bancorp and the Bank report their income on a consolidated basis using the accrual method of accounting and are subject to federal income taxation in the same manner as other corporations with some exceptions. The Company has not been audited by the Internal Revenue Service. For 2023, 2022 and 2021, the Company was subject to a maximum federal income tax rate of 21.00%, California state income tax rate of 10.84% and various state tax rates for other various state jurisdictions.

26

Table of Contents

Item 1A. Risk Factors.

Risks Related to Interest Rates

Fluctuations in interest rates may reduce net interest income and otherwise negatively impact our financial condition and results of operations.

Shifts in short-term interest rates may reduce net interest income, which is the principal component of our earnings. Net interest income is the difference between the amounts received by us on our interest-earning assets and the interest paid by us on our interest-bearing liabilities. When interest rates rise, the rate of interest we receive on our assets, such as loans, rises more quickly than the rate of interest that we pay on our interest-bearing liabilities, such as deposits, which may cause our profits to increase. When interest rates decrease, the rate of interest we receive on our assets, such as loans, declines more quickly than the rate of interest that we pay on our interest-bearing liabilities, such as deposits, which may cause our profits to decrease. The impact on earnings is more adverse when the slope of the yield curve flattens, that is, when short-term interest rates increase more than long-term interest rates or when long-term interest rates decrease more than short-term interest rates.

Interest rate increases often result in larger payment requirements for our borrowers, which increases the potential for default. At the same time, the marketability of the underlying property may be adversely affected by any reduced demand resulting from higher interest rates. In a declining interest rate environment, there may be an increase in prepayments on loans as borrowers refinance their mortgages and other indebtedness at lower rates. At December 31, 2023, total loans held for investment were 80.2% of our earning assets and exhibited a positive 4% sensitivity to rising interest rates in a 100 basis point parallel shock.

Changes in interest rates also can affect the value of loans, securities and other assets. An increase in interest rates that adversely affects the ability of borrowers to pay the principal or interest on loans may lead to an increase in nonperforming assets and a reduction of income recognized, which could have a material adverse effect on our results of operations and cash flows. Further, when we place a loan on nonaccrual status, we reverse any accrued but unpaid interest receivable, which decreases interest income. Subsequently, we continue to have a cost to fund the loan, which is reflected as interest expense, without any interest income to offset the associated funding expense. Thus, an increase in the amount of nonperforming assets would have an adverse impact on net interest income.

Rising interest rates will result in a decline in the value of the fixed-rate debt securities we hold in our investment securities portfolio. The unrealized losses resulting from holding these securities would be recognized in accumulated other comprehensive income (loss) and reduce total shareholders’ equity. Unrealized losses do not negatively impact our regulatory capital ratios; however, tangible common equity and the associated ratios would be reduced. If debt securities in an unrealized loss position are sold, such losses become realized and will reduce our regulatory capital ratios.

If short-term interest rates remain constant but longer-term interest rates fall, we could experience net interest margin compression as our interest earning assets would continue to reprice downward while our interest-bearing liability rates could fail to decline in tandem. This would have a material adverse effect on our net interest income and our results of operations.

We could recognize losses on securities held in our securities portfolio, particularly if interest rates increase or economic and market conditions deteriorate.

As of December 31, 2023, the fair value of our securities portfolio was approximately $324.2 million. Factors beyond our control can significantly influence the fair value of securities in our portfolio and can cause potential adverse changes to the fair value of these securities. For example, fixed-rate securities acquired by us are generally subject to decreases in market value when interest rates rise. Additional factors include, but are not limited to, rating agency downgrades of the securities or our own analysis of the value of the security, defaults by the issuer or individual mortgagors with respect to the underlying securities, and continued instability in the credit markets. Any of the foregoing factors could cause other-than-temporary impairment in future periods and result in realized losses. The process for determining whether impairment is other-than-temporary usually requires difficult, subjective judgments about the future financial performance of the issuer and any collateral underlying the security in order to assess the probability of receiving all contractual principal and interest payments on the security. Because of changing economic and market conditions affecting interest rates, the financial condition of issuers of the securities and the performance of the underlying collateral, we may recognize realized and/or unrealized losses in future periods, which could have an adverse effect on our financial condition and results of operations.

At December 31, 2023, $319.0 million of our securities were classified as available-for-sale with an aggregate net unrealized loss of $28.1 million. We increase or decrease shareholders’ equity by the amount of change from the unrealized gain or loss (the difference between the estimated fair value and the amortized cost) of our available-for-sale securities portfolio, net of the related tax, under the category of accumulated other comprehensive income (loss). Therefore, a decline in the estimated fair value of this portfolio will result in a decline in reported shareholders’ equity, book value per common share, and tangible book value per common share. This decrease will occur even though the securities are not sold. In the case of debt securities, if these securities are never sold and there are no credit impairments, the decrease will be recovered over the life of the securities. In the case of equity securities, which have no stated maturity, the declines in fair value may or may not be recovered over time.

Risks Related to Our Business

A decline in general business and economic conditions and any regulatory responses to such conditions could have a material adverse effect on our business, financial position, results of operations and growth prospects.

Our business and operations are sensitive to general business and economic conditions in the United States, generally, and particularly in the states of California, Nevada, Illinois, New Jersey, Hawaii and New York, and the Los Angeles, New York City, Chicago, Las Vegas and Honolulu metropolitan areas. Unfavorable or uncertain economic and market conditions could lead to credit quality concerns related to repayment ability and collateral protection as well as reduced demand for the products and services we offer. In the recent year there has been a gradual decline in the U.S. economy as evidenced by a decline in the housing market, higher unemployment and lower prices in the equities markets; however, economic growth has been uneven, and opinions vary on the strength and direction of the economy. Uncertainties also have arisen regarding the potential for a reversal or renegotiation of international trade agreements, as the current U.S. administration has with China, the European Union and the United Kingdom. In addition, concerns about the performance of international economies, especially in Europe and emerging markets, and economic conditions in Asia, particularly the economies of China and Taiwan, can impact the economy and financial markets in the U.S. If the national, regional and local economies experience worsening economic conditions, including high levels of unemployment, our growth and profitability could be constrained. Weak economic conditions are characterized by, among other indicators, deflation, elevated levels of unemployment, fluctuations in the debt and equity capital markets, increased delinquencies on mortgage, commercial and consumer loans, residential and commercial real estate price declines, lower home sales and commercial activity, and fluctuations in the commercial and Federal Housing Administration financing sector. All of these factors are generally detrimental to our business. Our business is significantly affected by monetary and other regulatory policies of the U.S. federal government, its agencies and government-sponsored entities. Changes in any of these policies are influenced by macroeconomic conditions and other factors that are beyond our control, are difficult to predict and could have a material adverse effect on our business, financial position, results of operations and growth prospects.

27

Table of Contents

In the wake of actions by government authorities and other parties to mitigate health risks associated with the COVID-19 pandemic, and fiscal and monetary policy measures used to mitigate the adverse effects of the pandemic on individual households and businesses, a number of macroeconomic challenges emerged, including, without limitation, inflation, supply chain issues and labor market disruptions.

Ongoing elevated inflation poses risk to the economy overall, and could indirectly pose challenges to our clients and to our business. Elevated inflation can impact our business customers through loss of purchasing power for their customers, leading to lower sales. Rising inflation can also increase input and inventory costs for our customers, forcing them to raise their prices or lower their profitability. Supply chain disruption, also leading to inflation, can delay our customers’ shipping ability, or timing on receiving inputs for their production or inventory. Inflation can lead to higher wages for our business customers, increasing costs. All of these inflationary risks for our business customer base can be financially detrimental, leading to increased likelihood that the customer may default on a loan. In addition, sustained inflationary pressure has led the Federal Reserve’s Federal Open Market Committee to raise interest rates rapidly, which has increased our interest rate risk. To the extent such conditions exist or worsen, we could experience adverse effects on our business, financial condition, and results of operations.

Financial markets may be adversely affected by the current or anticipated impact of military conflict, other geopolitical risk, and trade tensions. Military conflicts include military actions between Russia and Ukraine, Israel and Hamas, overall tension and conflict in the Middle East, and terrorism. Geopolitical risk is generally rising, with shipping incidents in the Red Sea causing losses and disruption to commercial shipping routes. In addition, trade tensions between the U.S. and China, the two largest global economies, increases economic uncertainty.

While customer confidence in the banking system has improved considerably since the first half of 2023, risk related to disintermediation and uninsured deposits remain, and could continue to have a material effect on the Company’s operations and/or stock price.

Several high-profile bank failures in the first half of 2023 generated significant market volatility among publicly traded bank holding companies and, in particular, regional banks. The industry has stabilized since these failures and the customer confidence in the safety and soundness of smaller regional banks has improved considerably. Nevertheless, risks remain that customers may choose to invest in higher yielding and higher-rated short-term fixed income securities or maintain deposits with larger more systematically important financial institutions, all of which could materially and adversely impact our liquidity, loan funding capacity, net interest margin, capital, and results of operations. In addition, the banking operating environments and public trading prices of banking institutions can be highly correlated, in particular during times of stress, which could adversely impact the trading prices of our common stock and potentially, our results of operations. Separately, banking regulators have announced a more stringent supervisory posture after the bank failures.

Health crises have in the past, and could in the future, materially and adversely affect our business and our customers, counterparties, employees, and third-party service providers.

Pandemics, epidemics, or other health crises, including COVID-19, have had and could have repercussions that could impact household, business, economic, and market conditions. These events have caused and could in the future, cause us to implement measures to combat such health crises, including restrictions impacting individual, including our current and potential investors and customers, and the manner in which business continues to operate. Additionally, our operations may be impacted by the need to close certain offices and limit how customers conduct business through our branch network.

Pandemics, epidemics, or other health crises could impact our business, capital, liquidity, financial position, results of operations, and business prospects due to the potential effect on our customers, employees, and third-party service providers. In addition, health crises can lead to lingering impacts on economies and markets, for example, the unprecedented extent of economic stimulus during the COVID-19 pandemic that caused and/or exacerbated inflationary pressures.

We are subject to liquidity risk, which could adversely affect our financial condition and results of operations.

Effective liquidity management is essential for the operation of our business. Although we have implemented strategies to maintain sufficient and diverse sources of funding to accommodate planned, as well as unanticipated, changes in assets, liabilities, and off-balance sheet commitments under various economic conditions, an inability to raise funds through deposits, borrowings, the sales of investment securities and other sources could have a material adverse effect on our liquidity. Our access to funding sources in amounts adequate to finance our activities could be impaired by factors that affect us specifically or the financial services industry in general. Factors that could detrimentally impact our access to liquidity sources include a decrease in the level of our business activity due to a market disruption, a decrease in the borrowing capacity assigned to our pledged assets by our secured creditors, or adverse regulatory action against us. Deterioration in economic conditions and the loss of confidence in financial institutions may increase our cost of funding and limit our access to some of our customary sources of liquidity, including, but not limited to, inter-bank borrowings and borrowings from the Federal Reserve and FHLB. Our ability to acquire deposits or borrow, and the possibility of deposit outflows, could also be impaired by various stress environments and other factors that are not specific to us, including a severe disruption of the financial markets or negative views and expectations about the prospects for the financial services industry generally as a result of conditions faced by banking organizations in the domestic and international credit markets. Other factors, for example a cybersecurity breach that is specific to us, could also impair our ability to acquire or retain deposits.

Our business depends on our ability to attract and retain Asian-American immigrants as clients.

A significant portion of our business is based on successfully attracting and retaining Asian-American immigrants as clients for both our non-qualified residential mortgage loans and deposits. We may be limited in our ability to attract Asian-American clients to the extent the U.S. adopts restrictive domestic immigration laws. Changes to U.S. immigration policies that restrain the flow of immigrants may inhibit our ability to meet our goals and budgets for non-qualified SFR mortgage loans and deposits, which may adversely affect our net interest income and net income.

28

Table of Contents

Risks Related to Our Loans

Because a significant portion of our loan portfolio is comprised of real estate loans, negative changes in the economy affecting real estate values and liquidity could impair the value of collateral securing our real estate loans and result in loan and other losses.

At December 31, 2023, approximately 93.6% of our loan portfolio was comprised of loans with real estate as a primary or secondary component of collateral. Adverse developments affecting real estate values in our market areas could increase the credit risk associated with our real estate loan portfolio. The market value of real estate can fluctuate significantly in a short period of time as a result of market conditions in the area in which the real estate is located. Adverse changes affecting real estate values and the liquidity of real estate in one or more of our markets could increase the credit risk associated with our loan portfolio, significantly impair the value of property pledged as collateral on loans and affect our ability to sell the collateral upon foreclosure without a loss or additional losses, which could result in losses that would adversely affect profitability. Such declines and losses would have a material adverse impact on our business, results of operations and growth prospects. In addition, if hazardous or toxic substances are found on properties pledged as collateral, the value of the real estate could be impaired. If we foreclose on and take title to such properties, we may be liable for remediation costs, as well as for personal injury and property damage. Environmental laws may require us to incur substantial expenses to address unknown liabilities and may materially reduce the affected property’s value or limit our ability to use or sell the affected property.

Many of our loans are to commercial borrowers, which have a higher degree of risk than other types of loans.

At December 31, 2023, we had $1.5 billion of commercial loans, consisting of $1.17 billion of CRE loans, $130.1 million of C&I loans for which real estate is not the primary source of collateral and $181.5 million of C&D loans. C&I loans represented 4.3% of our total loan portfolio at December 31, 2023. Commercial loans are often larger and involve greater risks than other types of lending. Because payments on such loans are often dependent on the successful operation or development of the property or business involved, repayment of such loans is often more sensitive than other types of loans to adverse conditions in the real estate market or the general business climate and economy. Accordingly, a downturn in the real estate market and a challenging business and economic environment may increase our risk related to commercial loans, particularly commercial real estate loans. Unlike residential mortgage loans, which generally are made on the basis of the borrowers’ ability to make repayment from their employment and other income and which are secured by real property whose value tends to be more easily ascertainable, commercial loans typically are made on the basis of the borrowers’ ability to make repayment from the cash flow of the commercial venture. Our C&I loans are primarily made based on the identified cash flow of the borrower and secondarily on the collateral underlying the loans. Most often, this collateral consists of accounts receivable, inventory and equipment. Inventory and equipment may depreciate over time, may be difficult to appraise and may fluctuate in value based on the success of the business. If the cash flow from business operations is reduced, the borrower’s ability to repay the loan may be impaired. Due to the larger average size of each commercial loan as compared with other loans such as residential loans, as well as collateral that is generally less readily-marketable, losses incurred on a small number of commercial loans could have a material adverse impact on our financial condition and results of operations.

We have a concentration in commercial real estate, which could cause our regulators to restrict our ability to grow.

As a part of their regulatory oversight, the federal regulators have issued the CRE Concentration Guidance on sound risk management practices with respect to a financial institution’s concentrations in commercial real estate lending activities. These guidelines were issued in response to the agencies’ concerns that rising CRE concentrations might expose institutions to unanticipated earnings and capital volatility in the event of adverse changes in the commercial real estate market. The CRE Concentration Guidance identifies certain concentration levels that, if exceeded, will expose the institution to additional supervisory analysis with regard to the institution’s CRE concentration risk. The CRE Concentration Guidance is designed to promote appropriate levels of capital and sound loan and risk management practices for institutions with a concentration of CRE loans. In general, the CRE Concentration Guidance establishes the following supervisory criteria as preliminary indications of possible CRE concentration risk: (1) the institution’s total construction, land development and other land loans represent 100% or more of total risk-based capital; or (2) total CRE loans as defined in the regulatory guidelines represent 300% or more of total risk-based capital, and the institution’s CRE loan portfolio has increased by 50% or more during the prior 36-month period. Pursuant to the CRE Concentration Guidelines, loans secured by owner occupied commercial real estate are not included for purposes of CRE Concentration calculation. We believe that the CRE Concentration Guidance is applicable to us. As of December 31, 2023, our CRE loans represented 183% of our Bank total risk-based capital, as compared to 215% and 251% as of December 31, 2022 and 2021, respectively. We actively work to manage our CRE concentration and we have discussed the CRE Concentration Guidance with the FDIC and believe that our underwriting policies, management information systems, independent credit administration process, and monitoring of real estate loan concentrations are currently sufficient to address the CRE Concentration Guidance. Nevertheless, the FDIC could become concerned about our CRE loan concentrations, and they could limit our ability to grow by restricting their approvals for the establishment or acquisition of branches, or approvals of mergers or other acquisition opportunities.

Our SFR loan product consists primarily of non-qualified SFR mortgage loans, which may be considered less liquid and more risky.

As of December 31, 2023, our SFRmortgage loan portfolio amounted to $1.49 billion or 49.1% of our held for investment loan portfolio. As of that date, 96.7% of our SFR mortgage loans consisted of non-qualified mortgage loans, which are considered to have a higher degree of risk and are less liquid than qualified mortgage loans. We offer two SFRmortgage products, a low loan-to-value, alternative document hybrid non-qualified SFRmortgage loan, or non-qualified SFRmortgage loan, and a qualified SFRmortgage loan. As of December 31, 2023, our non-qualified SFRmortgage loans had an average loan-to-value of 57.3% and an average FICO score of 763. As of December 31, 2023, 3.3% of our total SFRmortgage loan portfolio were loans originated to foreign nationals. The non-qualified single-family residential mortgage loans that we originate are designed to assist Asian-Americans who have recently immigrated to the United States and as such are willing to provide higher down payment amounts and pay higher interest rates and fees in return for reduced documentation requirements. Non-qualified SFRmortgage loans are considered less liquid than qualified SFRmortgage loans because such loans are not able to be securitized and can only be sold directly to other financial institutions. Such non-qualified loans may be considered more risky than qualified mortgage loans although we attempt to address this enhanced risk through our underwriting process, including requiring larger down payments and, in some cases, interest reserves.

We also have a concentration in our SFRsecondary sale market, as a substantial portion of our non-qualified mortgage loans have been historically sold to two banks; although, we are currently selling SFR mortgage loans to three banks. Although, we are taking steps to reduce our dependence on these banks by expanding the number of banks that we sell our non-qualified SFRmortgages to, we may not be successful expanding our sales market for our non-qualified mortgage loans. These loans also present pricing risk as rates change, and our sale premiums cannot be guaranteed. Further, the criteria for our loans to be purchased by other banks may change from time to time, which could result in a lower volume of corresponding loan originations.

Mortgage production historically, including refinancing activity, declines in rising interest rate environments such as the current environment in which we have experienced increasing rates over the last year.

29

Table of Contents