Virginia National Bankshares Corp: Form 10-K for the period ended Dec 31, 2024

General

The Company was incorporated under the laws of the Commonwealth of Virginia on February 21, 2013 at the direction of the Board of Directors of the Bank for the purpose of acquiring all of the outstanding shares of the Bank and becoming the holding company of the Bank. On June 19, 2013, the shareholders of the Bank approved the Reorganization Agreement and Plan of Share Exchange, dated March 6, 2013, whereby the Bank would reorganize into a holding company structure. On December 16, 2013, when the Reorganization became effective, the Bank became a wholly-owned subsidiary of the Company, and each share of the Bank’s common stock was exchanged for one share of the Company’s common stock.

The Company is regulated under the BHCA and is subject to inspection, examination and supervision by the Federal Reserve. The Company is also under the jurisdiction of the SEC and is subject to the disclosure and regulatory requirements of the Exchange Act as administered by the SEC.

Virginia National Bank, the principal operating subsidiary of the Company, was organized in 1998 under federal law as a national banking association to engage in a general commercial and retail banking business. The Bank received its charter from the OCC and commenced operations on July 29, 1998. The Bank received fiduciary powers in January 2000. The Bank’s deposits are insured up to the maximum amount provided by the FDIC.

Prior to July 2018, the Bank had one wholly owned subsidiary, VNBTrust, a national trust bank formed in 2007. Effective July 1, 2018, VNBTrust was merged into the Bank. The Bank continues to offer trust and estate administration services under the name of VNB Trust and Estate Services.

The Bank, through its financial subsidiary Fauquier Bank Services, Inc., has equity ownership interests in Bankers Insurance, LLC, a Virginia independent insurance company, and Bankers Title Shenandoah, LLC, a title insurance company, both of which are owned by a consortium of Virginia community banks.

The Bank has another subsidiary, Special Properties Acquisition - VA, LLC, which was originally formed by Fauquier to hold other real estate owned; however, there are no assets currently held by this subsidiary.

The Bank is subject to the supervision, examination and regulations of the OCC and is also subject to regulations of the FDIC, the Federal Reserve and the CFPB.

During 2018, the Company formed Masonry Capital Management, LLC, a registered investment advisor, which offers investment advisory and management services to clients through separately managed accounts and a private investment fund. The membership interests in this business line were sold to an officer of the Company effective April 1, 2024. Per the terms of the sale agreement, the Company will receive an annual revenue-share amount for a period of six years. No expenses have been or will be incurred by the Company related to Masonry Capital subsequent to April 1, 2024.

References to the Company’s subsidiaries in this document include both the Bank and Masonry Capital.

In addition, the Company owns Fauquier Statutory Trust II (“Trust II”), which is an unconsolidated subsidiary. The subordinated debt owed to Trust II is reported as a liability of the Company.

The main offices of the Company, the Bank and VNB Trust Estate Services, as well as corporate and Bank operations, are located in Charlottesville, Virginia.

Products and Services

The Bank offers a full range of banking and related financial services, including checking accounts, NOW accounts, money market deposit accounts, certificates of deposit, individual retirement accounts, CDARS™, ICS® and other depository services. The Bank actively solicits such accounts from individuals, businesses and charitable organizations within its trade areas. Other services offered by the Bank include ATMs, internet banking, treasury and cash management services and merchant card services. In addition, the Bank is affiliated with Visa®, which is accepted worldwide, and offers debit cards to consumer and business customers.

The Bank also offers short- to long-term commercial, real estate and consumer loans. The Bank is committed to being a reliable and consistent source of credit, providing loans that are priced based upon an overall banking relationship, easy access to the Bank’s local decision makers who possess strong local market knowledge, local delivery, fast response, and continuity in the banking relationship.

Trust and estate administration services are offered through VNB Trust and Estate Services.

The Company primarily serves the Virginia communities in and around the cities of Charlottesville, Winchester, Manassas and Richmond, and the counties of Albemarle, Fauquier, Frederick and Prince William. Refer to Item 2. Properties for additional information regarding locations. The Bank’s locations are well-positioned in attractive markets. Within its market areas, there are various types of industry including higher education, medical and professional services, research and development companies and retail.

Competition

The Company engages in highly competitive activities. Each activity involves competition with other banks, as well as with non-banking enterprises that offer financial products and services that compete directly with the Company’s product and service offerings. The Company actively competes with other banks in its efforts to obtain deposits and make loans, in the scope and types of services offered, in interest rates paid on time deposits and charged on loans, and in other aspects of banking.

In addition to competing with other community and commercial banks within and outside its primary service areas, the Company competes with other institutions engaged in the business of making loans or accepting deposits, such as credit unions, insurance companies, small loan companies, finance companies, fintech companies, certain governmental agencies and other enterprises. Competition for deposits and loans is affected by various factors including, without limitation, interest rates offered, the number and location of branches and types of products offered, digital capabilities, and the reputation of the institution. Credit unions increasingly have been allowed to expand their membership definitions, yet they continue to enjoy a favorable tax status.

The market areas served by the Company are highly competitive with respect to banking. Many of the Company’s competitors have substantially greater resources and lending limits than the Company and offer certain services such as extensive and established branch networks that the Company does not expect to match. Deposit competition is also very strong. Management believes, however, that a market exists for the personal and customized financial services an independent, community bank can offer.

Social

To develop young talent in the financial industry, the Company has created the Finance Career & Leadership Academy ("FCLA"), which is an instructional program designed to not only provide advanced personal finance and employment readiness training, but also a path to career opportunities in banking for high school juniors and seniors within the Company's communities. Currently held in Charlottesville, Virginia, the FCLA runs as an in-person series of classroom meetings.

This program is offered free-of-charge to those students accepted into the FCLA. Up to eight students are accepted into each session. The program provides quality financial training that gives young people the perspective and tools necessary to level the economic playing field and make responsible financial decisions. Also, included in the curriculum is a comprehensive study of employment readiness and professionalism concepts and strategies aimed to increase the marketability and employability of the participants. In order to begin a successful career and have a successful financial future, these young adults must be prepared to effectively communicate with a multi-generational workforce and have the skills necessary to manage their own finances intelligently and productively.

This program also offers the potential opportunity for training necessary to enter a lucrative career without incurring six-figure debt and four lost years of earning potential, as the most promising and top performing students from the Academy are considered for VNB’s College Program (the Commercial Banking/Staff Development Program). The Company's partnership with the Center for Financial Training and Education Alliance (CFTEA) has allowed the Company to create a credentialing program specifically designed to prepare students to meet the demands of the industry, and to do so without the prohibitive cost of a four-year degree. This bank-sponsored, comprehensive, free training program consists of 16 courses of which 13 are accredited college/university courses (39 credit hours that are transferable to a 2 or 4-year college/university) and work projects. Participants receive full-time pay with full fringe benefits (includes 401k with company match) while completing the program and, if successful in the program, have the potential opportunity for a career with VNB. Also, once employed, should they choose, they may go on to complete a 2 or 4-year degree at the Company’s expense.

Employees

The Company has a shared vision of guiding principles, core values and strategies that work and have guided the Company through both good and challenging times. The Company strives to ensure that its constituents, including its shareholders, customers, board, executive management and high performing employees, believe in it as well. The Company believes that the shared vision, when properly aligned and communicated to all constituents, will produce more than above average performance in key metrics. As part of the shared vision, the Company is committed to its shareholders, customers, employees and communities. A critical part of this commitment is attracting and retaining high performing employees. To attract and retain high performing employees, the Company provides a competitive compensation and benefits program, including wellness benefits.

At December 31, 2024, the Company had 146 full-time equivalent employees, of which 9 were part-time employees. None of its employees are represented by any collective bargaining unit. The Company considers relations with its employees to be good. We strive for the Company's workforce to reflect the diversity of the customers and communities we serve. The Company's selection and promotion process are without bias and include the active recruitment of minorities and women. At December 31, 2024, women represented 75% of the Company's employees and racial and ethnic minorities represented 17% of the Company's employees. At December 31, 2024, 35% of the Company's employees have been employed by the Company or its subsidiaries for at least 10 years.

The Company owns BOLI policies on each executive officer and certain other senior officers of the Company. BOLI is a bank-eligible asset designed to recover costs of providing pre- and post-retirement benefits and/or to finance general employee benefit expenses. Under BOLI policies, each executive officer and certain other senior officers of the Company are the insured, and the Company is the owner and beneficiary of the policies. The insured has no claim to the insurance policy or to the policy’s cash value. Under separate split dollar agreements, a portion of any death benefit may be paid to the beneficiaries of the insured officer, subject to the terms and restrictions of the split dollar endorsement agreement between the insured officer and the Company.

Supervision and Regulation

The Company and the Bank are extensively regulated under both federal and state laws. The following description briefly addresses certain historic and current provisions of federal and state laws and certain regulations, proposed regulations and the potential impacts on the Company and the Bank. To the extent statutory or regulatory provisions or proposals are described in this report, the description is qualified in its entirety by reference to the particular statutory or regulatory provisions or proposals.

The Company

General. As a bank holding company registered under the BHCA, the Company is subject to supervision, regulation, and examination by the Federal Reserve. The Company is also registered under the bank holding company laws of Virginia and is subject to supervision, regulation, and examination by the Bureau of Financial Institutions of the Virginia State Corporation Commission.

Regulatory Environment. Banking and other financial services statutes, regulations and policies are continually under review by Congress, state legislatures and federal and state regulatory agencies. The scope of the laws and regulations, and the intensity of the supervision to which the Company and its subsidiaries are subject, have increased in recent years, initially in response to the 2008 financial crisis, and more recently in light of other factors, including continued turmoil and stress in the financial markets, technological factors, market changes, and increased scrutiny of proposed bank mergers and acquisitions by federal and state bank regulators.

Proposals to change the laws, regulations and policies governing the banking industry are frequently raised at both the state and federal levels. The Trump administration may seek to implement a regulatory reform agenda that is significantly different than the agenda and policies of the previous administration, which the Company expects may significantly impact the rulemaking, supervision, examination and enforcement priorities of the federal banking agencies. On January 20, 2025, President Donald J. Trump issued a presidential memorandum titled “Regulatory Freeze Pending Review” that directs federal agencies to (1) not propose or issue any rules until they are reviewed and approved by a department or agency head appointed by the President, (2) immediately withdraw any unpublished rules to allow for the review by a department or agency head as described above, and (3) consider postponing for 60 days from the date of the executive order the effective date for any rules that have been published in the Federal Register, or any rules that have been issued but have not taken effect, to allow for review of any questions of fact, law or policy. Subsequent to that presidential memorandum, the administration has taken actions that have reduced available staffing at certain regulatory agencies, and reduced the current regulatory and enforcement activities of certain regulatory agencies, among other substantive impacts.

The Company continues to experience ongoing regulatory reform and these regulatory changes could have a significant effect on how the Company and the Bank conduct business. The specific impacts of regulatory reforms cannot yet be fully predicted and will depend to a large extent on the specific regulations that are likely to be adopted in the future. Further, a change in the manner in which laws, regulations and regulatory guidance are interpreted by regulatory agencies or courts may have a material impact on the Company’s business, operations and earnings.

Permitted Activities. The permitted activities of a bank holding company are limited to managing or controlling banks, furnishing services to or performing services for its subsidiaries, and engaging in other activities that the Federal Reserve determines by regulation or order to be so closely related to banking, or managing or controlling banks, as to be a proper incident thereto. In determining whether a particular activity is permissible, the Federal Reserve must consider whether the performance of such an activity reasonably can be expected to produce benefits to the public that outweigh possible adverse effects. Possible benefits include greater convenience, increased competition, and gains in efficiency. Possible adverse effects include undue concentration of resources, decreased or unfair competition, conflicts of interest, and unsound banking practices. Despite prior approval, the Federal Reserve may order a bank holding company or its subsidiaries to terminate any activity or to terminate ownership or control of any subsidiary when the Federal Reserve has reasonable cause to believe that a serious risk to the financial safety, soundness or stability of any bank subsidiary of that bank holding company may result from such an activity.

Banking Acquisitions; Changes in Control. The BHCA and related regulations require, among other things, the prior approval of the Federal Reserve in any case where a bank holding company proposes to (i) acquire direct or indirect ownership or control more than 5% of the outstanding voting stock of any bank or bank holding company (unless it already owns a majority of such voting shares), (ii) acquire all or substantially all of the assets of another bank or bank holding company, or (iii) merge or consolidate with any other bank holding company. In determining whether to approve a proposed acquisition, the Federal Reserve will consider, among other factors, the following: the effect of the acquisition on competition; the public benefits expected to be received from the acquisition; any outstanding regulatory compliance issues of any institution that is a party to the transaction; the projected capital ratios and levels on a post-acquisition basis; the financial condition of each institution that is a party to the transaction and of the combined institution after the transaction; the parties’ managerial resources, as well as risk management and governance processes and systems; the parties’ compliance with the Bank Secrecy Act and anti-money laundering requirements; the acquiring institution’s performance under the CRA and its compliance with fair housing and other consumer protection laws; and the data security and cybersecurity infrastructure of the constituent organizations and the combined organization.

In September 2024, the OCC approved a final rule updating its regulation for business combinations involving national banks and a policy statement clarifying its review of applications under the Bank Merger Act. The future effectiveness of the OCC’s final rule and policy statement remains unclear.

Subject to certain exceptions, the BHCA and the Change in Bank Control Act, together with the applicable regulations, require Federal Reserve approval (or, depending on the circumstances, no notice of disapproval) prior to any person or company’s acquiring “control” of a bank or bank holding company. A conclusive presumption of control exists if an individual or company acquires the power, directly or indirectly, to direct the management or policies of an insured depository institution or to vote 25% or more of any class of voting securities of any insured depository institution. A rebuttable presumption of control may exist if a person or company acquires 5% or more but less than 25% of any class of voting securities and certain other relationships are present between the investor and the bank holding company, or if certain other ownership thresholds for voting or total equity have been exceeded.

In addition, Virginia law requires the prior approval of the SCC for (i) the acquisition by a Virginia bank holding company of more than 5% of the voting shares of a Virginia bank or a Virginia bank holding company, or (ii) the acquisition by any other person of control of a Virginia bank holding company or a Virginia bank.

Source of Strength. Federal Reserve policy has historically required bank holding companies to act as a source of financial and managerial strength to their subsidiary banks. The Dodd-Frank Act codified this policy as a statutory requirement. Under this requirement, the Company is expected to commit resources to support the Bank, including at times when the Company may not be in a financial position to provide such resources. Any capital loans by a bank holding company to any of its subsidiary banks are subordinate in right of payment to depositors and to certain other indebtedness of such subsidiary banks. In the event of a bank holding company’s bankruptcy, any commitment by the bank holding company to a federal bank regulatory agency to maintain the capital of a subsidiary bank will be assumed by the bankruptcy trustee and entitled to priority of payment.

Safety and Soundness. There are a number of obligations and restrictions imposed on bank holding companies and their subsidiary banks by law and regulatory policy that are designed to minimize potential loss to the depositors of such depository institutions and the FDIC insurance fund in the event of a depository institution insolvency, receivership, or default. For example, under the Federal Deposit Insurance Company Improvement Act of 1991, to avoid receivership of an insured depository institution subsidiary, a bank holding company is required to guarantee the compliance of any subsidiary bank that may become “undercapitalized” with the terms of any capital restoration plan filed by such subsidiary with its appropriate federal bank regulatory agency up to the lesser of (i) an amount equal to 5% of the institution’s total assets at the time the institution became undercapitalized, or (ii) the amount that is necessary (or would have been necessary) to bring the institution into compliance with all applicable capital standards as of the time the institution fails to comply with such capital restoration plan.

Under the Federal Deposit Insurance Act, the federal bank regulatory agencies have adopted guidelines prescribing safety and soundness standards. These guidelines establish general standards relating to capital management, internal controls and information systems, internal audit systems, information systems, data security, loan documentation, credit underwriting, interest rate exposure and risk management, vendor management, corporate governance, and asset growth, as well as compensation, fees, and benefits. In general, the guidelines require, among other things, appropriate systems and practices to identify and manage the risk and exposures specified in the guidelines.

Capital Requirements. The Federal Reserve imposes certain capital requirements on bank holding companies under the BHCA, including a minimum leverage ratio and a minimum ratio of “qualifying” capital to risk-weighted assets. These requirements are described below under “The Bank – Capital Requirements.” Subject to its capital requirements and certain other restrictions, the Company is able to borrow money to make a capital contribution to the Bank, and such loans may be repaid from dividends paid by the Bank to the Company.

Limits on Dividends and Other Payments. The Company is a legal entity, separate and distinct from its subsidiaries. A significant portion of the revenues of the Company result from dividends paid to it by the Bank. There are various legal limitations applicable to the payment of dividends by the Bank to the Company and to the payment of dividends by the Company to its shareholders. The Bank is subject to various statutory and regulatory restrictions on its ability to pay dividends to the Company. The OCC has advised that a national bank should generally pay dividends only out of current operating earnings. Under current regulations, prior regulatory approval is required if cash dividends declared by the Bank in any given year exceed net income for that year, plus retained net profits of the two preceding years. The payment of dividends by the Bank or the Company may be limited by other factors, such as requirements to maintain capital above regulatory guidelines. Bank regulatory agencies have the authority to prohibit the Bank or the Company from engaging in an unsafe or unsound practice in conducting its respective business. The payment of dividends, depending on the financial condition of the Bank or the Company, could be deemed to constitute such an unsafe or unsound practice.

Under the FDIA, insured depository institutions, such as the Bank, are prohibited from making capital distributions, including the payment of dividends, if, after making such distributions, the institution would become “undercapitalized” (as such term is used in the statute). Based on the Bank’s current financial condition, the Company does not expect that this provision will have any impact on its ability to receive dividends from the Bank.

In addition, the Company’s ability to pay dividends is limited by restrictions imposed by the Virginia Stock Corporation Act on Virginia corporations. In general, dividends paid by a Virginia corporation may be paid only if, after giving effect to the distribution, (i) the corporation is still able to pay its debts as they become due in the usual course of business, or (ii) the corporation’s total assets are greater than or equal to the sum of its total liabilities plus (unless the corporation’s articles of incorporation permit otherwise) the amount that would be needed, if the corporation were to be dissolved at the time of the distribution, to satisfy the preferential rights, upon the dissolution, of shareholders whose preferential rights are superior to those receiving the distribution.

The Bank

General. The Bank is supervised and regularly examined by the OCC. The various laws and regulations administered by the OCC and the other bank regulatory agencies affect corporate practices, such as the payment of dividends, incurrence of debt, and acquisition of financial institutions and other companies; they also affect business practices, such as the payment of interest on deposits, the charging of interest on loans, types of business conducted and location of offices. Certain of these laws and regulations are referenced above under “The Company.”

Regulatory Capital Requirements. The OCC and the other federal bank regulatory agencies have issued risk-based and leverage capital guidelines applicable to U.S. banking organizations. Those regulatory agencies may from time-to-time require that a banking organization maintain capital above the minimum levels because of its financial condition or actual or anticipated growth.

The OCC and the other federal bank regulatory agencies have adopted rules to implement the Basel III capital framework as outlined by the Basel Committee on Banking Supervision and standards for calculating risk-weighted assets and risk-based capital measurements (collectively, the Basel III Final Rules) that apply to banking institutions they supervise. For the purposes of these capital rules, (i) CET1 capital consists principally of common stock (including surplus) and retained earnings; (ii) Tier 1 capital consists principally of CET1 plus non-cumulative preferred stock and related surplus, and certain grandfathered cumulative preferred stocks and trust preferred securities; and (iii) Tier 2 capital consists of other capital instruments, principally qualifying subordinated debt and preferred stock, and limited amounts of an institution’s ACL. Each regulatory capital classification is subject to certain adjustments and limitations, as implemented by the Basel III Final Rules. The Basel III Final Rules also establish risk weightings that are applied to many classes of assets held by community banks, importantly including applying higher risk weightings to certain commercial real estate loans. The Basel III Final Rules also include a requirement that banks maintain additional capital known as the “capital conservation buffer.”

The Basel III Final Rules and capital conservation buffer require banks and bank holding companies to maintain:

i. a minimum ratio of CET1 to risk-weighted assets of at least 4.5%, plus a 2.5% capital conservation buffer (which is added to the minimum CET1 ratio, effectively resulting in a required ratio of CET1 to risk-weighted assets of at least 7.0%);

ii. a minimum ratio of Tier 1 capital to risk-weighted assets of at least 6.0%, plus the 2.5% capital conservation buffer (effectively resulting in a required Tier 1 capital ratio of 8.5%);

iii.a minimum ratio of total (that is, Tier 1 plus Tier 2) capital to risk-weighted assets of at least 8.0%, plus the 2.5% capital conservation buffer (effectively resulting in a required total capital ratio of 10.5%), and

iv. a minimum leverage ratio of 4.0%, calculated as the ratio of Tier 1 capital to average total assets, subject to certain adjustments and limitations.

The Basel III Final Rules provide deductions from and adjustments to regulatory capital measures, primarily to CET1, including deductions and adjustments that were not applied to reduce CET1 under historical regulatory capital rules. For example, mortgage servicing rights, deferred tax assets dependent upon future taxable income, and significant investments in non-consolidated financial entities must be deducted from CET1 to the extent that any one such category exceeds 25% of CET1.

The Basel III Final Rules permanently include in Tier 1 capital trust preferred securities issued prior to May 19, 2010 by bank holding companies with less than $15 billion in total assets, subject to a limit of 25% of Tier 1 capital. The Company expects that its trust preferred securities will be included in the Company’s regulatory capital as Tier 1 capital instruments until their maturity.

The Tier 1, CET1, total capital to risk-weighted assets, and leverage ratios of the Company were 17.94%, 17.94%, 18.77% and 11.68%, respectively, as of December 31, 2024, thus exceeding the minimum requirements. The Tier 1, CET1, total capital to risk-weighted assets, and leverage ratios of the Bank were 17.77%, 17.77%, 18.60% and 11.55%, respectively, as of December 31, 2024, also exceeding the minimum requirements.

With respect to the Bank, to be “well capitalized” under the revised “prompt corrective action” regulations, a bank must have the following minimum capital ratios: (i) a CET1 capital ratio of at least 6.5%; (ii) a Tier 1 capital to risk-weighted assets ratio of at least 8.0%; (iii) a total capital to risk-weighted assets ratio of at least 10.0%; and (iv) a leverage ratio of at least 5.0%. The Bank exceeds the thresholds to be considered well capitalized as of December 31, 2024. See “Prompt Corrective Action” below.

In July 2023, the Federal Reserve and the FDIC issued proposed rules to implement the final components of the Basel III agreement, often known as the “Basel III endgame.” These proposed rules contain provisions that apply to banks with $100 billion or more in total assets and that will significantly alter how those banks calculate risk-based assets. These proposed rules do not apply to holding companies or banks with less than $100 billion in assets, such as the Company and the Bank, but the final impacts of these rules cannot yet be predicted. The comment window for these proposed rules closed on January 16, 2024.

Community Bank Leverage Ratio. As required by the EGRRCPA, qualifying banks with less than $10 billion in consolidated assets could elect to be subject to a 9% leverage ratio applied using less complex leverage calculations commonly referred to as the community bank leverage ratio CBLR. Banks that opt into the CBLR framework and maintain a leverage ratio of greater than 9% are not subject to other risk-based and leverage capital requirements and are deemed to meet Basel III Final Rules’ well capitalized ratio requirements. As of December 31, 2024, the Bank has not elected to apply the CBLR framework, but the Bank continues to assess the potential impact of opting in to the CBLR framework as part of its ongoing capital management and planning processes.

Small Bank Holding Company Policy Statement. Bank holding companies with less than $3 billion in assets may rely on the Federal Reserve Board’s Small Bank Holding Company Policy Statement. In addition to meeting the asset threshold, a bank holding company must not engage in significant nonbanking activities, not conduct significant off-balance sheet activities, and not have a material amount of debt or equity securities outstanding and registered with the SEC (subject to certain exceptions). The Federal Reserve Board may, in its discretion, exclude any bank holding company from the application of the Small Bank Holding Company Policy Statement if such action is warranted for supervisory purposes.

In August 2018, the Federal Reserve Board issued an interim final rule to apply the Small Bank Holding Company Policy Statement to bank holding companies with consolidated total assets of less than $3 billion. The policy statement, which, among other things, exempts certain bank holding companies from minimum consolidated regulatory capital ratios that apply to other bank holding companies. As a result of the interim final rule, which was effective August 30, 2018, the Company expects that it will be treated as a small bank holding company and will not be subject to regulatory capital requirements. The comment period on the interim final rule closed on October 29, 2018, and, to date, the Federal Reserve

Board has not issued a final rule to replace the interim final rule. The Bank remains subject to the regulatory capital requirements described above.

Prompt Corrective Action. Federal banking regulators are authorized and, under certain circumstances, required to take certain actions against banks that fail to meet their capital requirements. The federal bank regulatory agencies have additional enforcement authority with respect to undercapitalized depository institutions. “Well capitalized” institutions may generally operate without additional supervisory restriction. With respect to “adequately capitalized” institutions, such banks (i) cannot normally pay dividends or make any capital contributions that would leave them undercapitalized, (ii) cannot pay management fees to a controlling person if, after paying the fee, they would be undercapitalized, and (iii) cannot accept, renew, or roll over any brokered deposit unless they have applied for and been granted a waiver by the FDIC.

Immediately upon becoming “undercapitalized,” a depository institution becomes subject to the provisions of Section 38 of the FDIA, which: (i) restrict payment of capital distributions and management fees; (ii) require that the appropriate federal banking agency monitor the condition of the institution and its efforts to restore its capital; (iii) require submission of a capital restoration plan; (iv) restrict the growth of the institution’s assets; and (v) require prior approval of certain expansion proposals. The appropriate federal banking agency for an undercapitalized institution also may take any number of discretionary supervisory actions if the agency determines that any of these actions is necessary to resolve the problems of the institution at the least possible long-term cost to the DIF, subject in certain cases to specified procedures. These discretionary supervisory actions include: (i) requiring the institution to raise additional capital; (ii) restricting transactions with affiliates; (iii) requiring divestiture of the institution or the sale of the institution to a willing purchaser; and (iv) any other supervisory action that the agency deems appropriate. These and additional mandatory and permissive supervisory actions may be taken with respect to significantly undercapitalized and critically undercapitalized institutions. The Bank met the definition of being “well capitalized” as of December 31, 2024.

As described above in “The Bank – Regulatory Capital Requirements,” the capital rules issued by the OCC incorporate new requirements into the prompt corrective action framework.

Deposit Insurance. The deposits of the Bank are insured up to applicable limits by the Deposit Insurance Fund of the FDIC and are subject to deposit insurance assessments based on average total assets minus average tangible equity to maintain the DIF. The basic limit on FDIC deposit insurance coverage is $250 thousand per depositor. Under the FDIA, the FDIC may terminate deposit insurance upon a finding that the institution has engaged in unsafe or unsound practices, is in an unsafe or unsound condition to continue operations as an insured depository institution, or has violated any applicable law, regulation, rule, order or condition imposed by the FDIC, subject to administrative and potential judicial hearing and review processes. The FDIC may also suspend deposit insurance temporarily during the hearing process for the permanent termination of insurance if the institution has no tangible capital. If deposit insurance is terminated, the deposits at the institution at the time of termination, less subsequent withdrawals, shall continue to be insured for a period from six months to two years, as determined by the FDIC. Management is aware of no existing circumstances that could result in termination of the Bank’s deposit insurance.

Deposit Insurance Assessments. The DIF is funded by assessments on banks and other depository institutions calculated based on average consolidated total assets minus average tangible equity (defined as Tier 1 capital). As required by the Dodd-Frank Act, the FDIC has adopted a large-bank pricing assessment scheme, set a target “designated reserve ratio” (described in more detail below) of 2% for the DIF and, in lieu of dividends, provides for a lower assessment rate schedule when the reserve ratio reaches 2% and 2.5%. An institution's assessment rate is based on a statistical analysis of financial ratios that estimates the likelihood of failure over a three-year period, which considers the institution’s weighted average CAMELS composite rating, and is subject to further adjustments including those related to levels of unsecured debt and brokered deposits.

The Dodd-Frank Act transferred to the FDIC increased discretion with regard to managing the required amount of reserves for the DIF, or the “designated reserve ratio.” The FDIA requires that the FDIC consider the appropriate level for the designated reserve ratio on at least an annual basis. On October 18, 2022, the FDIC adopted a final rule to increase initial base deposit insurance assessment rate schedules uniformly by 2 basis points, beginning in the first quarterly assessment period of 2023. As a result of this final rule, the total base assessment rates beginning with the first quarter of 2023 for institutions with less than $10 billion in assets that have been insured for at least five years range from 2.5 bps to 32 bps. This increase in assessment rate schedules is intended to increase the likelihood that the reserve ratio reaches 1.35% by the statutory deadline of September 30, 2028. The new assessment rate schedules will remain in effect unless and until the reserve ratio meets or exceeds 2%. Progressively lower assessment rate schedules will take effect when the reserve ratio reaches 2%, and again when it reaches 2.5%.

In November 2023, the FDIC issued a final rule to implement a special DIF assessment following the FDIC’s use of the “systemic risk” exception to the least-cost resolution test in connection with the failures and resolutions of Silicon Valley Bank and Signature Bank. Banks with less than $5 billion of uninsured deposits, such as the Bank, are exempt from this special assessment.

In 2024 and 2023, the Company expensed $700 thousand and $710 thousand, respectively, in deposit insurance assessments.

Transactions with Affiliates. Pursuant to Sections 23A and 23B of the Federal Reserve Act and Regulation W, the authority of the Bank to engage in transactions with related parties or “affiliates” or to make loans to insiders is limited. Loan transactions with an affiliate generally must be collateralized and certain transactions between the Bank and its affiliates, including the sale of assets, the payment of money or the provision of services, must be on terms and conditions that are substantially the same, or at least as favorable to the Bank, as those prevailing for comparable nonaffiliated transactions. In addition, the Bank generally may not purchase securities issued or underwritten by affiliates.

Loans to executive officers, directors, or to any person who directly or indirectly, or acting through or in concert with one or more persons, owns, controls, or has the power to vote more than 10% of any class of voting securities of a bank, are subject to Sections 22(g) and 22(h) of the Federal Reserve Act and their corresponding regulations (Regulation O) and Section 13(k) of the Exchange Act relating to the prohibition on personal loans to executives (which exempts financial institutions in compliance with the insider lending restrictions of Section 22(h) of the Federal Reserve Act). Among other things, these loans must be made on terms substantially the same as those prevailing on transactions made to unaffiliated individuals and certain extensions of credit to those persons must first be approved in advance by a disinterested majority of the entire Board of Directors. Section 22(h) of the Federal Reserve Act prohibits loans to any of those individuals where the aggregate amount exceeds an amount equal to 15% of an institution’s unimpaired capital and surplus plus an additional 10% of unimpaired capital and surplus in the case of loans that are fully secured by readily marketable collateral, or when the aggregate amount on all of the extensions of credit outstanding to all of these persons would exceed the Bank’s unimpaired capital and unimpaired surplus. Section 22(g) of the Federal Reserve Act identifies limited circumstances in which the Bank is permitted to extend credit to executive officers.

Community Reinvestment Act. The Bank is subject to the requirements of the CRA. The CRA imposes on financial institutions an affirmative and ongoing obligation to meet the credit needs of the local communities, including low- and moderate-income neighborhoods. The CRA requires the appropriate federal banking agency, in connection with its examination of a bank, to assess the bank’s record in meeting such credit needs. In addition, in order for a bank holding company, like the Company, to commence any new activity permitted by the BHC Act, or to acquire any company engaged in any new activity permitted by the BHC Act, each insured depository institution subsidiary of the bank holding company must have received a rating of at least “satisfactory” in its most recent examination under the CRA. Under the CRA, institutions are assigned a rating of “outstanding,” “satisfactory,” “needs to improve,” or “substantial non-compliance.” The Bank received a “satisfactory” CRA rating in its most recent examination.

On October 24, 2023, the federal banking regulatory agencies jointly issued a final rule to modernize CRA

regulations consistent with the following key goals: (i) to encourage banks to expand access to credit, investment,

and banking services in low-income and moderate-income communities; (ii) to adapt to changes in the banking industry,

including internet and mobile banking and the growth of non-branch delivery systems; (iii) to provide greater clarity

and consistency in the application of the CRA regulations, including adoption of a new metrics-based approach to

evaluating bank retail lending and community development financing; and (iv) to tailor CRA evaluations and data

collection to bank size and type, recognizing that differences in bank size and business models may impact CRA

evaluations and qualifying activities. Most of the final CRA rule’s requirements will be applicable beginning January

1, 2026, with certain requirements, including the data reporting requirements, applicable as of January 1, 2027. The

Bank is evaluating the expected impact of the modernized CRA regulations, but currently does not anticipate any

material impact to its business, operations or financial condition due to the modified CRA regulations.

The legality of the modernized CRA regulations is being challenged and a preliminary injunction against enforcing new rules implementing the modified CRA regulations has been granted. In addition, the updated CRA regulations may be impacted by the presidential memorandum entitled “Regulatory Freeze Pending Review” described above.

Confidentiality of Customer Information. The Company and the Bank are subject to various laws and regulations that address the privacy of nonpublic personal financial information of customers. A financial institution must provide to its customers information regarding its policies and procedures with respect to the handling of customers’ personal information. Each institution must conduct an internal risk assessment of its ability to protect customer information. These privacy laws and regulations generally prohibit a financial institution from providing a customer’s personal financial information to unaffiliated parties without prior notice and approval from the customer.

The CFPB published its final rule to update Regulation P pursuant to the amended Gramm-Leach-Bliley Act in 2018. Under this rule, certain qualifying financial institutions are not required to provide annual privacy notices to customers. To qualify, a financial institution must not share nonpublic personal information about customers except as described in certain statutory exceptions which do not trigger a customer’s statutory opt-out right. In addition, the financial institution must not have changed its disclosure policies and practices from those disclosed in its most recent privacy notice. The rule sets forth timing requirements for delivery of annual privacy notices in the event that a financial institution that qualified for the annual notice exemption later changes its policies or practices in such a way that it no longer qualifies for the exemption.

Data privacy and data protection are areas of increasing state legislative focus. In March 2021, the Governor of Virginia signed into law the VCDPA, which went into effect on January 1, 2023. The VCDPA grants Virginia residents the right to access, correct, delete, know, and opt-out of the sale and processing for targeted advertising purposes of their personal information, similar to the protections provided by consumer data privacy laws in California and in Europe. The VCDPA also imposes data protection assessment requirements and authorizes the Attorney General of Virginia to enforce the VCDPA but does not provide a private right of action for consumers. The Bank is exempt from the VCDPA, but certain third-party vendors of the Company or the Bank are subject to the VCDPA, which could negatively impact the products or services that the Company obtains from those vendors.

In October 2023, the CFPB proposed a new rule that would require a provider of payment accounts or products, such as the Bank, to make certain data available to consumers upon request regarding the products or services they obtain from the provider. The proposed rule is intended to give consumers control over their financial data, including with whom it is shared, and encourage competition in the provision of consumer financial products and services. Based on its expected asset size, the Company expects to begin complying with this rule in 2028 or 2029.

These laws and regulations impose compliance costs and create obligations and, in some cases, reporting obligations, and compliance with these laws, regulations, and obligations may require the Company to use significant resources.

Anti-Money Laundering Laws and Regulations. The Company is subject to several federal laws that are designed to combat money laundering, terrorist financing, and transactions with persons, companies or foreign governments designated by U.S. authorities (“AML laws”). This category of laws includes the Bank Secrecy Act of 1970, the Money Laundering Control Act of 1986, the USA PATRIOT Act of 2001, and the Anti-Money Laundering Act of 2020.

The AML laws and their implementing regulations require insured depository institutions, broker-dealers, and certain other financial institutions to have policies, procedures, and controls to detect, prevent, and report money laundering and terrorist financing. The AML laws and their regulations also provide for information sharing, subject to conditions, between federal law enforcement agencies and financial institutions, as well as among financial institutions, for counter-terrorism purposes. Federal banking regulators are required, when reviewing bank holding company acquisition and bank merger applications, to take into account the effectiveness of the anti-money laundering activities of the applicants. To comply with these obligations, the Company has implemented appropriate internal practices, procedures, and controls.

Office of Foreign Assets Control. OFAC which is a division of the U.S. Treasury, is responsible for helping to ensure that United States entities do not engage in transactions with “enemies” of the United States, as defined by various Executive Orders and Acts of Congress. If the Bank finds a name of an “enemy” of the United States on any transaction, account, or wire transfer that is on an OFAC list, it must freeze such account or place transferred funds into a blocked account, and report it to OFAC. Failure to comply with OFAC requirements could have serious legal, financial and reputational consequences for the Company. To comply with these obligations, the Company has implemented appropriate internal practices, procedures, and controls.

Cybersecurity. The federal banking agencies have adopted guidelines for establishing information security standards and cybersecurity programs for implementing safeguards under the supervision of a financial institution’s board of directors. These guidelines, along with related regulatory materials, increasingly focus on risk management and processes related to information technology and the use of third parties in the provision of financial products and services. The federal banking agencies expect financial institutions to establish lines of defense and ensure that their risk management processes also address the risk posed by compromised customer credentials, and also expect financial institutions to maintain sufficient business continuity planning processes to ensure rapid recovery, resumption and maintenance of the institution’s operations after a cyber-attack. If the Company or the Bank fails to meet the expectations set forth in this regulatory guidance, the Company or the Bank could be subject to various regulatory actions and any remediation efforts may require significant resources of the Company or the Bank. In addition, all federal and state banking agencies continue to increase focus on cybersecurity programs and risks as part of regular supervisory exams.

On November 18, 2021, the federal bank regulatory agencies issued a final rule to improve the sharing of information about cybersecurity incidents that may affect the U.S. banking system. The rule requires a banking organization to notify its primary federal regulator of any significant computer-security incident as soon as possible and no later than 36 hours after the banking organization determines that a cybersecurity incident has occurred. Notification is required for incidents that have materially affected or are reasonably likely to materially affect the viability of a banking organization’s operations, its ability to deliver banking products and services, or the stability of the financial sector. In addition, the rule requires a bank service provider to notify affected banking organization customers as soon as possible when the provider determines that it has experienced a computer-security incident that has materially affected or is reasonably likely to materially affect banking organization customers for four or more hours. The rule became effective on May 1, 2022.

Corporate Transparency Act

On January 1, 2021, as part of the 2021 National Defense Authorization Act, Congress enacted the Corporate Transparency Act (“CTA”), which requires the Financial Crimes Enforcement Network (“FinCEN”) to issue regulations implementing reporting requirements for “reporting companies” (as defined in the CTA) to disclose beneficial ownership interests of certain U.S. and foreign entities by January 1, 2022. The CTA imposes additional reporting requirements on entities not previously subject to such beneficial ownership disclosure regulations and also contains exemptions for several different types of entities, including among others: (i) certain banks, bank holding companies, and credit unions; (ii) money transmitting businesses registered with FinCEN; and (iii) certain insurance companies. Reporting companies subject to the CTA are required to provide specific information with respect to beneficial owner(s) (as defined in the CTA) as well as satisfy initial filing obligations (for newly-formed reporting companies) and submit on-going periodic reports. Non-compliance with FinCEN regulations promulgated under the CTA may result in civil fines and criminal penalties.

On September 29, 2022, FinCEN issued a final rule to implement the beneficial ownership reporting requirements of the CTA, which became effective January 1, 2024, and would have required reporting of beneficial ownership for entities that were formed or first registered prior to 2024 by January 1, 2025. Beginning in December 2024, U.S. federal courts have issued preliminary injunctions against enforcement of the CTA, including a stay of the beneficial ownership reporting requirements pending resolution of a lawsuit challenging the CTA’s constitutionality. On February 18, 2025, the U.S. District Court for the Eastern District of Texas lifted the preliminary injunction blocking enforcement of the beneficial ownership reporting requirements under the CTA. Pending further court action, beneficial ownership information reporting obligations are back in effect and a majority of companies must now report by March 21, 2025; however, recent FinCEN guidance indicates that FinCEN will not issue any fines or penalties, or take any other enforcement actions, based on failure to file or update reports pursuant to the CTA by the current deadlines.

The Company and the Bank continue to monitor regulatory developments related to the CTA, including future rule makings, and will continue to assess the ultimate impact of the CTA on the Company and the Bank. the Company cannot currently predict the nature and timing of future developments related to the CTA.

Stress Testing. The federal banking agencies have implemented stress testing requirements for certain large or risky financial institutions, including bank holding companies and state-chartered banks and they emphasize that all banking organizations, regardless of size, should have the capacity to analyze the potential effect of adverse market conditions or outcomes on the organization’s financial condition. Based on existing regulatory guidance, the Company and the Bank are expected to consider the institution’s interest rate risk management, commercial real estate loan concentrations and other credit-related information, and funding and liquidity management during this analysis of adverse market conditions or outcomes.

Call Reports and Examination Cycle. All institutions, regardless of size, submit a quarterly call report that includes data used by federal banking agencies to monitor the condition, performance, and risk profile of individual institutions and the industry as a whole. The EGRRCPA contained provisions expanding the number of regulated institutions eligible to use streamlined call report forms. In June 2019, the federal banking agencies issued a final rule to permit insured depository institutions with total assets of less than $5 billion that do not engage in certain complex or international activities to file the most streamlined version of the quarterly call report, and to reduce data reportable on certain streamlined call report submissions.

Federal Home Loan Bank of Atlanta. The Bank is a member of the FHLB of Atlanta, which is one of 11 regional FHLBs that provide funding to their members for making housing loans as well as for affordable housing and community development loans. Each regional FHLB serves as a reserve, or central bank, for the members within its assigned region. Each FHLB makes loans to members in accordance with policies and procedures established by the Board of Directors of the FHLB. As a member, the Bank must purchase and maintain stock in the FHLB. At December 31, 2024, the Bank owned $2.1 million of FHLB stock.

Consumer Financial Protection. The CFPB is the federal regulatory agency that is responsible for implementing, examining and enforcing compliance with federal consumer financial laws for institutions with more than $10 billion of assets and, to a lesser extent, smaller institutions. The CFPB supervises and regulates providers of consumer financial products and services, and has rulemaking authority in connection with numerous federal consumer financial protection laws (for example, but not limited to, the Truth-in-Lending Act (TILA), the Real Estate Settlement Procedures Act (RESPA), the Electronic Funds Transfer Act (EFTA), the Equal Credit Opportunity Act (ECOA), the Home Ownership and Equity Protection

Act (HOEPA), the Fair Credit and Reporting Act (FCRA), the Fair Debt Collection Practices Act (FDCPA) and the Home Mortgage Disclosure Act (HMDA)). To comply with these obligations, the Company has implemented appropriate internal practices, procedures, and controls.

Because the Company and the Bank are smaller institutions (i.e., with assets of $10 billion or less), most consumer protection aspects of the Dodd-Frank Act will continue to be applied to the Company by the Federal Reserve Board and to the Bank by the OCC. However, the CFPB may include its own examiners in regulatory examinations by a smaller institution’s principal regulators and may require smaller institutions to comply with certain CFPB reporting requirements. In addition, regulatory positions taken by the CFPB and administrative and legal precedents established by CFPB enforcement activities, including in connection with supervision of larger bank holding companies and banks, could influence how the Federal Reserve Board and OCC apply consumer protection laws and regulations to financial institutions that are not directly supervised by the CFPB. The precise effect of the CFPB’s consumer protection activities on the Company and the Bank cannot be determined with certainty.

On March 30, 2023, the CFPB issued a final rule amending Regulation B to implement Section 1071 of the Dodd-Frank Act, which amended ECOA to require the collection of certain small business lending data. As a result of ongoing litigation, all deadlines for compliance with the amendments to Regulation B are currently stayed. If implemented as issued, the final rule would require the Bank to compile, maintain, and submit to the bureau certain small business lending data, including data on applications for credit by women-owned, minority-owned, and small businesses. The Bank is unable to determine the date that the Section 1071 final rule will become effective or the date that the Bank will be required to comply with its requirements. The Bank is evaluating the expected impact of the Section 1071 final rule, but currently does not anticipate any material impact to its business, operations or financial condition due to this final rule.

In January 2025, the CFPB adopted amendments to Regulation E and Regulation Z that would impose the disclosure requirements of TILA on extensions of overdraft credit, with certain exemptions, for financial institutions with greater than $10 billion in assets. While this rule does not apply to banks with less than $10 billion in assets, including the Bank, the Bank cannot determine the ultimate impact such a regulatory change would have on the broader market for overdraft products and services, which may include a downward pressure on the interest and fees that a bank is able to charge for consumer transactions that overdraw deposit accounts. The impact of such changes on the Bank or its financial condition and results of operations cannot be determined at this time. Beginning in January 2025, multiple lawsuits challenging these amendments were filed, and these rules may be subject to the presidential memo titled “Regulatory Freeze Pending Review” described above.

Mortgage Banking Regulation. In connection with making mortgage loans, the Company and the Bank are subject to rules and regulations that, among other things, establish standards for loan origination, prohibit discrimination, provide for inspections and appraisals of property, require credit reports on prospective borrowers, in some cases restrict certain loan features and fix maximum interest rates and fees, require the disclosure of certain basic information to mortgagors concerning credit and settlement costs, limit payment for settlement services to the reasonable value of the services rendered, and require the maintenance and disclosure of information regarding the disposition of mortgage applications based on race, gender, geographical distribution and income level. The Company and the Bank are also subject to rules and regulations that require the collection and reporting of significant amounts of information with respect to mortgage loans and borrowers.

The Company’s and the Bank’s mortgage origination activities are subject to Regulation Z, which implements the TILA. Certain provisions of Regulation Z require creditors to make a reasonable and good faith determination based on verified and documented information that a consumer applying for a mortgage loan has a reasonable ability to repay the loan according to its terms. Creditors are required to determine consumers’ ability to repay in one of two ways. The first alternative requires the creditor to consider the following eight underwriting factors when making the credit decision: (i) current or reasonably expected income or assets; (ii) current employment status; (iii) the monthly payment on the covered transaction; (iv) the monthly payment on any simultaneous loan; (v) the monthly payment for mortgage-related obligations; (vi) current debt obligations, alimony, and child support; (vii) the monthly debt-to-income ratio or residual income; and (viii) credit history. Alternatively, the creditor can originate “qualified mortgages,” which are entitled to a presumption that the creditor making the loan satisfied the ability-to-repay requirements. In general, a “qualified mortgage” is a mortgage loan without negative amortization, interest-only payments, balloon payments, or terms exceeding 30 years. In addition, to be a qualified mortgage, the points and fees paid by a consumer cannot exceed 3% of the total loan amount, and the consumer’s debt-to-income ratio (“DTI”) must be below the prescribed threshold. Qualified mortgages that are “higher-priced” (e.g. subprime loans) garner a rebuttable presumption of compliance with the ability-to-repay rules, while qualified mortgages that are not “higher-priced” (e.g. prime loans) are given a safe harbor of compliance. Small creditors, as described below, may originate qualified mortgages that are not restricted by the specific DTI threshold (however, the DTI must still be considered). Small creditors are those financial institutions that meet the following requirements: (i) have assets below $2 billion (adjustable annually by CFPB); (ii) originated no more than 2 thousand first-lien, closed-end residential mortgages subject to the ability-to-repay requirements in the preceding calendar year; and (iii) hold the qualified mortgage loan in its portfolio after origination. The Company, as a small creditor, does comply with the “qualified mortgage rules” and the other applicable TILA requirements.

Incentive Compensation. In 2016, the SEC and the federal banking agencies proposed rules that prohibit covered financial institutions (including bank holding companies and banks) from establishing or maintaining incentive-based compensation arrangements that encourage inappropriate risk-taking by providing covered persons (consisting of senior executive officers and significant risk takers, as defined in the rules) with excessive compensation, fees or benefits that could lead to material financial loss to the financial institution. The proposed rules outline factors to be considered when analyzing whether compensation is excessive and whether an incentive-based compensation arrangement encourages inappropriate risks that could lead to material loss to the covered financial institution, and establishes minimum requirements that incentive-based compensation arrangements must meet to be considered to not encourage inappropriate risks and to appropriately balance risk and reward. The proposed rules also impose additional corporate governance requirements on the boards of directors of covered financial institutions and impose additional record-keeping requirements. The comment period for these proposed rules closed and a final rule has not yet been published. In May 2024, the FDIC, OCC and two other federal bank regulatory agencies re-proposed the regulatory text of the 2016 proposed rules and requested comment on specific alternatives, given the passage of time since the 2016 proposed rules was issued, as well as additional supervisory experience, changes in industry practice, and other developments. The SEC and Federal Reserve did not join in such re-proposal, and on March 3, 2025, the FDIC withdrew this proposal.

Future Regulation

From time-to-time, various legislative and regulatory initiatives are introduced in Congress and state legislatures, as well as by regulatory agencies. Such initiatives may include proposals to expand or contract the powers of bank holding companies and depository institutions or proposals to substantially change the financial institution regulatory system. Such legislation could change banking statutes and the operating environment of the Company and the Bank in substantial and unpredictable ways. If enacted, such legislation could increase or decrease the cost of doing business, limit or expand permissible activities, or affect the competitive balance among banks, savings associations, credit unions, and other financial institutions. The Company cannot predict whether any such legislation will be enacted, and, if enacted, the effect that it, or any implementing regulations, would have on the financial condition or results of operations of the Company or the Bank.

Effect of Governmental Monetary Policies

The Company’s operations are affected not only by general economic conditions but also by the policies of various regulatory authorities. In particular, the Federal Reserve uses monetary policy tools to impact money market and credit market conditions and interest rates to influence general economic conditions. These policies have a significant impact on overall growth and distribution of loans, investments, and deposits; they affect market interest rates charged on loans or paid for time and savings deposits. Federal Reserve monetary policies have had a significant effect on the operating results of commercial banks, including the Company, in the past and are expected to do so in the future.

Reporting Obligations under Securities Laws; Availability of Information

The Company is subject to the periodic and other reporting requirements of the Exchange Act, including the filing of annual, quarterly and other reports with the SEC. Prior to the Reorganization in 2013, the Bank filed the periodic and annual reports required under the Exchange Act with the OCC. Annual reports on Form 10-K, quarterly reports on Form 10-Q and current reports on Form 8-K, plus any amendments to these reports, are available, free of charge, at www.vnbcorp.com (http://www.vnbcorp.com). The Company’s SEC filings are posted and available as soon as reasonably practicable after the reports are filed electronically with the SEC. The information on the Company’s website is not incorporated into this report or any other filing the Company makes with the SEC. The SEC maintains an internet site that contains reports, proxy and information statements, and other information regarding issuers that file electronically with the SEC at www.sec.gov (http://www.sec.gov).

The Company’s business is subject to risk. The following discussion, along with management’s discussion and analysis, the information contained in “Forward Looking Statements and Factors that Could Affect Future Results,” and the financial statements and footnotes, sets forth the most significant risks and uncertainties that management believes could adversely affect the Company’s business, financial condition or results of operations, and that investors in the Company’s securities should carefully consider. Additional risks and uncertainties that management is not aware of or that management currently deems immaterial may also have a material adverse effect on the Company’s business, financial condition or results of operations. There is no assurance that this discussion covers all potential risks that the Company may face.

Credit Risks

The Company’s credit standards and its on-going credit assessment processes might not protect it from significant credit losses.

The Company assumes credit risk by virtue of making loans and extending loan commitments and letters of credit. The Company manages credit risk through a program of underwriting standards, the review of certain credit decisions and a continuous quality assessment process of credit already extended. The Company’s exposure to credit risk is managed through the use of consistent underwriting standards that emphasize local lending while avoiding highly leveraged transactions, as well as excessive industry and other concentrations. The Company’s credit administration function employs risk management techniques to help ensure that problem loans are promptly identified. While these procedures are designed to provide the Company with the information needed to implement policy adjustments where necessary and to take appropriate corrective actions, there can be no assurance that such measures will be effective in avoiding undue credit risk.

The Company’s ACL may be insufficient and any increases in the ACL may have a material adverse effect on the Company’s financial condition and results of operations.

On January 1, 2023, the Company adopted ASC 326, more commonly referred to as "CECL," which replaced prior accounting principles for the recognition of loan losses based on losses that have been incurred with a requirement to record an allowance for credit losses that represents expected credit losses over the lifetime of all loans in the Company’s portfolio. Under ASC 326, the Company’s estimate of expected credit losses is based on reasonable and supportable forecasts of future economic conditions and loan performance. While the adoption of ASC 326 does not affect ultimate loan performance or cash flows of the Company from making loans, the period in which expected credit losses affect net income of the Company may not be similar to the recognition of loan losses under prior accounting guidance, and recognizing an ACL based on expected credit losses may create more volatility in the level of the Company's ACL and results of operations, including based on volatility in economic forecasts and expectations of loan performance in future periods, as actual results may differ materially from management's estimates. If the Company is required to materially increase the level of ACL for any reason, such increase could adversely affect the Company's business, financial condition, and results of operations.

The level of the ACL reflected management’s evaluation of the level of loans outstanding, the level of nonperforming loans, historical loan loss experience, delinquency trends, underlying collateral values, the amount of actual losses charged to the reserve in a given period and assessment of present and anticipated economic conditions. The determination of the appropriate level of the ACL inherently involved a high degree of subjectivity and required the Company to make significant estimates of credit risks and future trends, all of which could undergo material changes. Although the Company believed the ACL was a reasonable estimate of known and inherent losses in the loan portfolio at the time, it could not precisely predict such losses or be certain that the ACL would be adequate in the future. Deterioration of economic conditions affecting borrowers, new information regarding existing loans, identification of additional problem loans and other factors, both within and outside the Company’s control, may have required an increase in the ACL. In addition, bank regulatory agencies and the Company’s auditors periodically reviewed its ACL and may have required an increase in the provision for loan losses or the recognition of further loan charge-offs, based on judgments different from those of management. No adjustments to the ACL have been recommended or required as a result of audits.

The Company’s focus on lending to small to mid-sized community-based businesses may increase its credit risk.

Most of the Company’s commercial business and commercial real estate loans are made to small and mid-sized businesses and 501(c)3 organizations. These businesses generally have fewer financial resources in terms of capital or borrowing capacity than larger entities and have a heightened vulnerability to economic conditions. If general economic conditions in the market areas in which the Company operates negatively impact this important customer sector, the Company’s results of operations and financial condition may be adversely affected. Moreover, a portion of these loans have been made by the Company in recent years and the borrowers may not have experienced a complete business or economic cycle. Any deterioration of the borrowers’ businesses may hinder their ability to repay their loans with the Company, which could have a material adverse effect on its financial condition and results of operations. Steps to mitigate such risks include underwriting multiple sources of repayment, including but not limited to, business cash flow, personal guarantees, collateral, and government guarantees, where applicable. Although the Company has taken these mitigation steps, there is no guarantee that such practices will be effective to prevent the increased credit risk.

The Company’s concentration in loans secured by real estate may increase its future credit losses, which would negatively affect the Company’s financial results.

The Company offers a variety of secured loans, including commercial lines of credit, commercial term loans, real estate, construction, home equity, consumer and other loans. Credit risk and credit losses can increase if its loans are concentrated to borrowers who, as a group, may be uniquely or disproportionately affected by economic or market conditions. As of December 31, 2024, approximately 76.4% of the Company’s loans are secured by real estate, both residential and commercial. The Company has established concentration limits that are regularly monitored by management and reported to the Board. A major change in the real estate market in the regions in which the Company operates, resulting in a deterioration in real estate values, or in the local or national economy, could adversely affect the Company’s customers’ ability to pay these loans, which in turn could adversely impact the Company. Risk of loan defaults and foreclosures are inherent in the banking industry, and the Company tries to limit its exposure to this risk by carefully underwriting and monitoring its extensions of credit. The Company cannot fully eliminate credit risk, and as a result, credit losses may occur in the future.

The Company has a moderate concentration of credit exposure in commercial real estate and loans with this type of collateral are viewed as having higher risk of default.

As of December 31, 2024, the Company had approximately $453.9 million in loans secured by non-owner occupied commercial real estate, which represented approximately 36.7% of total loans outstanding at that date and 226% of regulatory capital. Such category of loans consists of $309.8 million of non-owner occupied commercial real estate, $107.2 million of multifamily and $37.0 million of construction, land development and other land loans. These types of loans are generally viewed as having higher risk of default than residential real estate loans. They are also typically larger than residential real estate loans and consumer loans and depend on cash flows from the property to service the debt, successful completion of construction projects and, for development loans, sale of the underlying asset. It may be more difficult for commercial real estate borrowers to repay their loans in a timely manner, as commercial real estate borrowers’ abilities to repay their loans frequently depend on the successful rental of their properties. Some degree of instability in the commercial real estate markets is expected in the coming quarters as loans are refinanced in markets with higher vacancy rates under current economic conditions. The outlook for commercial real estate remains dependent on the broader economic environment and, specifically, how major subsectors respond to a higher interest rate environment and higher prices for commodities, goods and services. Cash flows may be affected significantly by general economic conditions, and a sustained downturn in the local economy or in occupancy rates in the local economy where the property is located could increase the likelihood of default. Because the Company’s loan portfolio contains a number of commercial real estate loans with relatively large balances, the deterioration of one or a few of these loans could cause a significant increase in its percentage of nonperforming loans. An increase in nonperforming loans could result in a loss of earnings from these loans, an increase in the provision for credit losses and an increase in charge-offs, all of which could have a material adverse effect on the Company’s financial condition. The Company’s banking regulators generally give commercial real estate lending greater scrutiny and may require banks with higher levels of commercial real estate loans to implement improved underwriting, internal controls, risk management policies and portfolio stress testing, as well as possibly higher levels of ACL and capital as a result of commercial real estate lending growth and exposures, which could have a material adverse effect on the Company’s results of operations. Steps to mitigate such risks include underwriting multiple sources of repayment, including but not limited to, business cash flow, personal guarantees, collateral, and government guarantees, where applicable. In addition, the Company has established concentration limits that are regularly monitored by management and reported to the Board. Although the Company has taken these mitigation steps, there is no guarantee that such practices will be effective to prevent the increased credit risk.

The Company’s results of operations are significantly affected by the ability of borrowers to repay their loans.

A significant source of risk for the Company is the possibility that losses will be sustained because borrowers, guarantors and related parties may fail to perform in accordance with the terms of their loan agreements. Most of the Company’s loans are secured but some loans are unsecured. With respect to the secured loans, the collateral securing the repayment of these loans may be insufficient to cover the obligations owed under such loans. Collateral values may be adversely affected by changes in economic, environmental and other conditions, declines in the value of real estate, changes in interest rates, changes in monetary and fiscal policies of the federal government, terrorist activity, environmental contamination and other external events. In addition, collateral appraisals that are out of date or that do not meet industry-recognized standards may create the impression that a loan is adequately collateralized when it is not. The Company has adopted underwriting and credit monitoring procedures and policies, including regular reviews of appraisals and borrower financial statements, that management believes are appropriate to mitigate the risk of loss. An increase in nonperforming loans could result in a net loss of earnings from these loans, an increase in the provision for credit losses and an increase in loan charge-offs, all of which could have a material adverse effect on the Company’s financial condition and results of operations.

Market Risks

The Company may be adversely impacted by changes in market conditions.

The Company is directly and indirectly affected by changes in market conditions. Market risk generally represents the risk that values of assets and liabilities or revenues will be adversely affected by changes in market conditions. As a financial institution, market risk is inherent in the financial instruments associated with the Company’s operations and activities, including loans, deposits, securities, and short-term borrowings. A few of the market conditions that may shift from time-to-time, thereby exposing the Company to market risk, include fluctuations in interest rates, equity and futures prices, and price deterioration or changes in value due to changes in market perception or actual credit quality of issuers. The Company’s investment securities portfolio, in particular, may be impacted by market conditions beyond its control, including rating agency downgrades of the securities, defaults of the issuers of the securities, lack of market pricing of the securities, and inactivity or instability in the credit markets. Any changes in these conditions, in current accounting principles or interpretations of these principles could impact the Company’s assessment of fair value and thus the determination of other-than-temporary impairment of the securities in the investment securities portfolio, which could adversely affect the Company’s earnings and capital ratios.

Asset values also directly impact revenues in the Company’s wealth management businesses. The Company receives asset-based management fees based on the value of clients’ portfolios or investments in funds managed by the Company and, in some cases, the Company may also receive performance fees based on increases in the value of such investments. Declines in asset values can reduce the value of clients’ portfolios or fund assets, which in turn can result in lower fees earned for managing such assets.

Weaknesses in economic or market conditions, or adverse developments in the financial services industry, could pose challenges for the Company and could adversely affect the results of operations, liquidity, and financial condition[.

Deterioration in, or uncertain, economic conditions could adversely affect the Company’s business which is directly affected by general economic and market conditions; broad trends in industry and finance; legislative and regulatory changes; changes in governmental monetary and fiscal policies, including trade policies and tariffs; and inflation, all of which are beyond the Company’s control. Prolonged periods of inflation may impact profitability by negatively impacting fixed costs and expenses, including increasing funding costs and expense related to talent acquisition and retention, and negatively impacting the demand for products and services. Additionally, inflation may lead to a decrease in consumer and commercial purchasing power and an increase in default rates on loans. Any deterioration in economic conditions, in particular a prolonged economic slowdown within the Company’s geographic region or a broader disruption in the economy, possibly as a result of a pandemic or other widespread public health emergency, acts of terrorism, or outbreak of domestic or international hostilities (including the ongoing military conflicts between Russia and Ukraine or and in the Middle East), or unanticipated events in the banking industry, such as high-profile bank failures in 2023, could result in the following consequences, any of which could hurt business materially; declines in real estate values and home sales and increases in the financial stress on borrowers and unemployment rates, all of which could lead to increases in loan delinquencies, problem assets and foreclosures, and a deterioration in the value of collateral for loans made by the Company's various business segments; an increase in the level of loan losses exceeding the level the Company has provided in its ACL, which would reduce the Company’s earnings; a decline in demand for the Company's products and services; changes in the fair value of financial instruments held by the Company or its subsidiaries; or declines in available sources or amounts of liquidity and funding. Events in the financial services industry, such as the high-profile bank failures in 2023, may also cause concern and uncertainty about the financial services industry generally, which may result in sudden deposit outflows, increased borrowing and funding costs, and increased competition for liquidity, any of which could have a material adverse impact on the Company’s business, financial condition, and results of operations.]

Inflation can have an adverse impact on the Company’s business and on its customers.

During 2022, the United States experienced the highest level of inflation since the 1980s. In response, the Federal Reserve increased the federal funds target rate at the fastest pace in over 40 years, increasing 425 bps during 2022 and an additional 100 bps in 2023, before declining by 100bps during 2024 and early 2025. Price-wage inflation may cause the Company to give higher than normal raises to employees and start new employees at a higher wage. Furthermore, the Company’s customers are also affected by inflation and the rising costs of goods and services used in their households and businesses, which could have a negative impact on their ability to repay their loans with the Company. As market interest rates rise, the value of the Company’s investment securities generally decreases, although this effect can be less pronounced for floating rate instruments. Higher interest rates reduce the demand for loans and increase the attractiveness of alternative investment and savings products, like U.S. Treasury securities and money market funds, which can make it difficult to attract and retain deposits.

The Company’s business is subject to interest rate risk, and variations in interest rates and inadequate management of interest rate risk may negatively affect financial performance.

Changes in the interest rate environment may reduce the Company’s profits. It is expected that the Company will continue to realize income from the differential or “spread” between the interest earned on loans, securities, and other interest-earning assets, and interest paid on deposits, borrowings and other interest bearing liabilities. Net interest spreads are affected by the difference between the maturities and repricing characteristics of interest-earning assets and interest bearing liabilities. In addition, loan volume and yields are affected by market interest rates on loans, and the current interest rate environment encourages extreme competition for new loan originations from qualified borrowers. The Company’s management cannot ensure that it can minimize interest rate risk. If the interest rates paid on deposits and other borrowings increase at a faster rate than the interest rates received on loans and other investments, the Company’s net interest income, and therefore earnings, could be adversely affected. Earnings could also be adversely affected if the interest rates received on loans and other investments fall more quickly than the interest rates paid on deposits and other borrowings. Accordingly, changes in levels of market interest rates could materially and adversely affect the net interest spread, asset quality, loan origination volume and the Company’s overall profitability.

The Company relies upon independent appraisals to determine the value of the real estate that secures a significant portion of its loans and the value of any foreclosed properties that may be carried on its books, and the values indicated by such appraisals may not be realizable if it is forced to foreclose upon such loans or liquidate such foreclosed property.

As indicated above, a significant portion of the Company’s loan portfolio consists of loans secured by real estate and it may also hold foreclosed properties from time-to-time. The Company relies upon independent appraisers to estimate the value of such real estate. Appraisals are only estimates of value and the independent appraisers may make mistakes of fact or judgment that adversely affect the reliability of their appraisals. In addition, events occurring after the initial appraisal may cause the value of the real estate to increase or decrease. As a result of any of these factors, the real estate securing some of the Company’s loans and any foreclosed properties that may be held by the Company may be more or less valuable than anticipated. If a default occurs on a loan secured by real estate that is less valuable than originally estimated, the Company may not be able to recover the outstanding balance of the loan. It may also be unable to sell any foreclosed properties for the values estimated by their appraisals. The Company had no foreclosed property as of December 31, 2024 or December 31, 2023.

Liquidity Risks

The Company’s liquidity needs could adversely affect results of operations and financial condition.

The Company’s primary sources of funds are deposits and loan repayments. While scheduled loan repayments are a relatively stable source of funds, they are subject to the ability of borrowers to repay the loans. The ability of borrowers to repay loans can be adversely affected by a number of factors, including, but not limited to, changes in economic conditions, adverse trends or events affecting business industry groups, reductions in real estate values or markets, availability of, and/or access to, sources of refinancing, business closings or lay-offs, pandemics or endemics, inclement weather, natural disasters and international instability. Deposit levels may be affected by a number of factors, including, but not limited to, rates paid by competitors, general interest rate levels, regulatory capital requirements, returns available to customers on alternative investments and general economic conditions. Additionally, negative news about the Company or the banking industry in general could negatively impact market and/or customer perceptions of the Company, which could lead to a loss of depositor confidence and an increase in deposit withdrawals, particularly among those with uninsured deposits. Furthermore, as many regional banking organizations experienced in 2023, the failure of other financial institutions may cause deposit outflows as customers spread deposits among several different banks so as to maximize their amount of FDIC insurance, move deposits to banks deemed “too big to fail” or remove deposits from the banking system entirely. As of December 31, 2024, approximately 27.4% of the Company's deposits were uninsured and the Company relies on these deposits for liquidity. Accordingly, the Company may be required from time-to-time to rely on secondary sources of liquidity to meet withdrawal demands or otherwise fund operations. Such sources include FHLB advances, sales of securities and loans, federal funds lines of credit from correspondent banks and borrowings from the Federal Reserve Discount Window, as well as additional out-of-market time deposits and brokered deposits. While the Company believes that these sources are currently adequate, there can be no assurance they will be sufficient or available to meet future liquidity demands, particularly if the Company continues to grow and experiences increasing loan demand. The Company may be required to slow or discontinue loan growth, capital expenditures or other investments, or liquidate assets should such sources not be adequate.

Recent negative developments affecting the banking industry, and resulting media coverage, have eroded customer confidence in the banking system.

The closures of Silicon Valley Bank and Signature Bank in March 2023, and First Republic Bank in May 2023, and concerns about similar future events, have generated significant market volatility among publicly traded bank holding companies and, in particular, regional banks. More recently, concerns about commercial real estate concentrations at regional and community banks have exacerbated this volatility. These market developments have negatively impacted customer confidence in the safety and soundness of regional and community banks. As a result, customers may choose to maintain deposits with larger financial institutions or invest in higher yielding short-term fixed income securities, all of which could materially adversely impact the Company’s liquidity, loan funding capacity, net interest margin, capital and results of operations. While federal bank regulators took action to ensure that depositors of the failed banks had access to their deposits, including uninsured deposit accounts, there is no guarantee that such actions will be successful in restoring customer confidence in regional and community banks and the banking system more broadly. Furthermore, there is no guarantee that regional bank failures or bank runs similar to the ones that occurred in 2023 will not occur in the future and, if they were to occur, they may have a material and adverse impact on customer and investor confidence in regional and community banks negatively impacting the Company’s liquidity, capital, results of operations and stock price.

The Company may need to raise additional capital in the future and may not be able to do so on acceptable terms, or at all.

Access to sufficient capital is critical in order to enable the Company to implement its business plan, support its business, expand its operations and meet applicable capital requirements. The inability to have sufficient capital, whether internally generated through earnings or raised in the capital markets, could adversely impact the Company’s ability to support and to grow its operations. If the Company grows its operations faster than it generates capital internally, it will need to access the capital markets. The Company may not be able to raise additional capital in the form of additional debt or equity on acceptable terms, or at all. The Company’s ability to raise additional capital, if needed, will depend on, among other things, conditions in the capital markets at that time, the Company’s financial condition and its results of operations. Economic conditions and a loss of confidence in financial institutions may increase the Company’s cost of capital and limit access to some sources of capital. Further, if the Company needs to raise capital in the future, it may have to do so when many other financial institutions are also seeking to raise capital and would then have to compete with those institutions for investors. An inability to raise additional capital on acceptable terms when needed could have a material adverse impact on the Company’s business, financial condition and results of operations.

Strategic Risks

The Company faces strong and growing competition from financial services companies and other companies that offer banking and other financial services, which could negatively affect the Company’s business.

The Company encounters substantial competition from other financial institutions in its market area and competition is increasing. Ultimately, the Company may not be able to compete successfully against current and future competitors. Many competitors offer the same banking services that the Company offers in its service area. These competitors include national, regional and community banks. The Company also faces competition from many other types of financial institutions, including finance companies, mutual and money market fund providers, brokerage firms, insurance companies, credit unions, financial subsidiaries of certain industrial corporations and financial technology companies. Increased competition may result in reduced business for the Company.

Additionally, banks and other financial institutions with larger capitalization and financial intermediaries not subject to bank regulatory restrictions have larger lending limits and are thereby able to serve the credit needs of larger customers. Areas of competition include interest rates for loans and deposits, efforts to obtain loans and deposits, and range and quality of products and services provided, including new technology-driven products and services. If the Company is unable to attract and retain banking customers, it may be unable to continue to grow loan and deposit portfolios and its results of operations and financial condition may otherwise be adversely affected.

The Company may not be able to successfully manage its long-term growth, which may adversely affect its results of operations and financial condition.

The Company’s ability to continue to grow depends, in part, upon its ability to (i) open new branch offices or acquire existing branches or other financial institutions, (ii) attract deposits to those locations, and (iii) identify attractive loan and investment opportunities.

The Company may not be able to successfully implement its growth strategy if it is unable to identify attractive markets, locations or opportunities to expand in the future, or if the Company is subject to regulatory restrictions on growth or expansion of its operations. The Company’s ability to manage its growth successfully also will depend on whether it can maintain capital levels adequate to support its growth, maintain cost controls and asset quality and successfully integrate any businesses the Company acquires into its organization. As the Company identifies opportunities to implement its growth strategy by opening new branches or acquiring branches or other banks, it may incur increased personnel, occupancy and other operating expenses. In the case of new branches, the Company must absorb those higher expenses while it begins to generate new deposits, and there is a further time lag involved in redeploying new deposits into attractively priced loans and other higher yielding assets.

The Company may consider acquiring other businesses or expanding into new product lines that it believes will help it fulfill its strategic objectives. The Company expects that other banking and financial companies, some of which have significantly greater resources, will compete with it to acquire financial services businesses. This competition could increase prices for potential acquisitions that the Company believes are attractive. Acquisitions may also be subject to various regulatory approvals. If the Company fails to receive the appropriate regulatory approvals, it will not be able to consummate acquisitions that it believes are in its best interests.

When the Company enters into new markets or new lines of business, its lack of history and familiarity with those markets, customers and lines of business may lead to unexpected challenges or difficulties that inhibit its success. The Company’s plans to expand could depress earnings in the short run, even if it efficiently executes a growth strategy leading to long-term financial benefits.

Operational Risks

The Company is subject to a variety of operational risks, including reputational risk, legal and compliance risk, and the risk of fraud or theft by employees or outsiders.

The Company is exposed to many types of operational risks, including reputational risk, legal and compliance risk, the risk of fraud or theft by employees or outsiders, unauthorized transactions by employees, operational errors, clerical or record-keeping errors, and errors resulting from faulty or disabled computer or communications systems.

Reputational risk, or the risk to the Company’s earnings and capital from negative public opinion, could result from the Company’s actual or alleged conduct in any number of activities, including lending practices, corporate governance, and from actions taken by government regulators and community organizations in response to those activities. Negative public opinion can adversely affect the Company’s ability to attract and keep customers and employees and can expose it to litigation and regulatory action.

Further, if any of the Company’s financial, accounting, or other data processing systems fail or have other significant issues, the Company could be adversely affected. The Company depends on internal systems and outsourced technology to support these data storage and processing operations. The Company’s inability to use or access these information systems at critical points in time could unfavorably impact the timeliness and efficiency of the Company’s business operations. It could be adversely affected if one of its employees causes a significant operational break-down or failure, either as a result of human error or where an individual purposefully sabotages or fraudulently manipulates its operations or systems. The Company is also at risk of the impact of natural disasters, terrorism and international hostilities on its systems and from the effects of outages or other failures involving power or communications systems operated by others. The Company may also be subject to disruptions of its operating systems arising from events that are wholly or partially beyond its control (for example, computer viruses or electrical or communications outages), which may give rise to disruption of service to customers and to financial loss or liability. In addition, there have been instances where financial institutions have been victims of fraudulent activity in which criminals pose as customers to initiate wire and automated clearinghouse transactions out of customer accounts. Although the Company has policies and procedures in place to verify the authenticity of its customers, it cannot guarantee that such policies and procedures will prevent all fraudulent transfers. Such activity can result in financial liability and harm to the Company’s reputation. If any of the foregoing risks materialize, it could have a material adverse effect on the Company’s business, financial condition and results of operations.

Changes in accounting standards could impact reported earnings.

The authorities that promulgate accounting standards, including the FASB, the SEC and other regulatory authorities, periodically change the financial accounting and reporting standards that govern the preparation of the Company’s Consolidated Financial Statements. These changes are difficult to predict and can materially impact how the Company records and reports its financial condition and results of operations. In some cases, the Company could be required to apply a new or revised standard retroactively, resulting in the restatement of financial statements for prior periods. Such changes could also require the Company to incur additional personnel or technology costs.

Failure to maintain effective systems of internal and disclosure control could have a material adverse effect on the Company’s results of operation and financial condition.

Effective internal and disclosure controls are necessary for the Company to provide reliable financial reports and effectively prevent fraud and to operate successfully as a public company. The Company is also required to establish and maintain an adequate internal control structure over financial reporting pursuant to regulations of the FDIC. As a public company, the Company is required by the Sarbanes-Oxley Act to design and maintain a system of internal control over financial reporting and include management’s assessment regarding internal control over financial reporting. If the Company cannot provide reliable financial reports or prevent fraud, its reputation and operating results would be harmed. As part of the Company’s ongoing monitoring of internal control, it may discover material weaknesses or significant deficiencies in its internal control that require remediation. A “material weakness” is a deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of a company’s annual or interim financial statements will not be prevented or detected on a timely basis.

The Company’s inability to maintain the operating effectiveness of the controls described above could result in a material misstatement to the Company’s financial statements or other disclosures, which could have an adverse effect on its business, financial condition or results of operations. In addition, any failure to maintain effective controls or to timely effect any necessary improvement of the Company’s internal and disclosure controls could, among other things, result in losses from fraud or error, harm the Company’s reputation or cause investors to lose confidence in its reported financial information, all of which could have a material adverse effect on its results of operation and financial condition.

The Company depends on the accuracy and completeness of information about customers and counterparties, and the Company’s financial condition could be adversely affected if it relies on misleading or incorrect information.

In deciding whether to extend credit or to enter into other transactions with customers and counterparties, the Company may rely on information furnished to it by or on behalf of customers and counterparties, including financial statements and other financial information, which it does not independently verify. The Company also may rely on representations of customers and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors. For example, in deciding whether to extend credit to customers, the Company may assume that a customer’s audited financial statements conform with GAAP and present fairly, in all material respects, the financial condition, results of operations and cash flows of that customer. The Company’s financial condition and results of operations could be negatively impacted to the extent it relies on financial statements that do not comply with GAAP or are materially misleading.

The Company’s success depends on its management team, and the unexpected loss of any of these personnel could adversely affect operations.

The Company’s success is, and is expected to remain, highly dependent on its management team. This is particularly true because, as a community bank, the Company depends on the management team’s ties to the community and customer relationships to generate business. The Company’s growth will continue to place significant demands on management, and the loss of any such person’s services may have an adverse effect upon growth and profitability. If the Company fails to retain or continue to recruit qualified employees, growth and profitability could be adversely affected.

The Company relies on other companies to provide key components of its business infrastructure.

Third parties provide key components of the Company’s business operations such as data processing, recording and monitoring transactions, online banking interfaces and services, internet connections and network access. While the Company has performed due diligence and selected these third-party vendors carefully, it does not control their actions. Any problem caused by these third parties, including poor performance of services, failure to provide services, disruptions in communication services provided by a vendor and failure to handle current or higher volumes, could adversely affect the Company’s ability to deliver products and services to its customers and otherwise conduct its business, and may harm its reputation. Financial or operational difficulties of a third-party vendor could also hurt the Company’s operations if those difficulties interfere with the vendor’s ability to serve the Company. Replacing these third-party vendors could also create significant delay and expense. Accordingly, use of such third-parties creates an unavoidable inherent risk to the Company’s business operations.

The soundness of other financial institutions could adversely affect the Company.

The Company’s ability to engage in routine funding transactions could be adversely affected by the actions and commercial soundness of other financial institutions. Financial services institutions are interrelated as a result of trading, clearing, counterparty or other relationships. The Company has exposure to many different industries and counterparties, and routinely executes transactions with counterparties in the financial industry. As a result, defaults by, or even rumors or questions about, one or more financial services institutions, or the financial services industry generally, have led to market-wide liquidity problems and could lead to losses or defaults by the Company or by other institutions. Many of these transactions expose the Company to credit risk in the event of default of its counterparty or customer. In addition, credit risk may be exacerbated when the collateral held cannot be realized upon or is liquidated at prices insufficient to recover the full amount of the financial instrument exposure due. There is no assurance that any such losses would not materially and adversely affect results of operations.

The Company’s operations may be adversely affected by cybersecurity risks.

In the ordinary course of business, the Company collects and stores sensitive data, including proprietary business information and personally identifiable information related to its customers and employees in systems and on networks. The secure processing, maintenance, and use of this information is critical to operations and the Company’s business strategy. The Company has invested in accepted technologies, and continually reviews processes and practices that are designed to protect its networks, computers, and data from damage or unauthorized access. Despite these security measures, the Company’s computer systems and infrastructure may be vulnerable to attacks by hackers or breached due to employee error, malfeasance or other disruptions. A breach of any kind could compromise systems and the information stored there could be accessed, damaged or disclosed. A breach in security could result in legal claims, regulatory penalties, disruption in operations, and damage to the Company’s reputation, which could adversely affect its business and financial condition. Furthermore, as cyber threats continue to evolve and increase, the Company may be required to expend significant additional financial and operational resources to modify or enhance its protective measures, or to investigate and remediate any identified information security vulnerabilities.

In addition, multiple major U.S. retailers have experienced data systems incursions reportedly resulting in the thefts of credit and debit card information, online account information and other financial or privileged data. Retailer incursions affect cards issued and deposit accounts maintained by many banks, including Virginia National Bank. Although the Company’s systems are not breached in retailer incursions, these events can cause it to reissue a significant number of cards and take other costly steps to avoid significant theft loss to the Company and its customers. In some cases, the Company may be required to reimburse customers for the losses they incur. Other possible points of intrusion or disruption not within the Company’s control include internet service providers, electronic mail portal providers, social media portals, distant-server (cloud) service providers, electronic data security providers, data processing service providers, telecommunications companies, and smart phone manufacturers.

Consumers may increasingly decide not to directly use banks to complete their financial transactions, which would have a material adverse impact on the Company’s financial condition and operations.

Technology and other changes are allowing parties to complete financial transactions through alternative methods that historically have involved banks. For example, consumers can now maintain funds that would have historically been held as bank deposits in brokerage accounts, mutual funds, general-purpose reloadable prepaid cards, or in other types of assets, including cryptocurrencies or other digital assets. Consumers can also complete transactions such as paying bills or transferring funds directly without the assistance of banks. The process of eliminating banks as intermediaries, known as “disintermediation,” could result in the loss of fee income, as well as the loss of customer deposits and the related income generated from those deposits. The loss of these revenue streams and the loss of deposits as a lower cost source of funds could have a material adverse effect on the Company's financial condition and results of operations.

The Company’s ability to operate profitably may be dependent on its ability to integrate or introduce various technologies into its operations.

The market for financial services, including banking and consumer finance services, is increasingly affected by advances in technology, including developments in telecommunications, data processing, computers, automation, online banking and tele-banking. The Company’s ability to compete successfully in its market may depend on the extent to which it is able to implement or exploit such technological changes. If the Company is not able to afford such technologies, properly or timely anticipate or implement such technologies, or effectively train its staff to use such technologies, its business, financial condition or operating results could be adversely affected.

Legal, Regulatory and Compliance Risks

The Company operates in a highly regulated industry and the laws and regulations that govern the Company’s operations, corporate governance, executive compensation and financial accounting, or reporting, including changes in them or the Company’s failure to comply with them, may adversely affect the Company.

The Company is subject to extensive regulation and supervision that govern almost all aspects of its operations. These laws and regulations, among other matters, prescribe minimum capital requirements, impose limitations on the Company’s business activities, limit the dividends or distributions that it can pay, restrict the ability of institutions to guarantee its debt and impose certain specific accounting requirements that may be more restrictive and may result in greater or earlier charges to earnings or reductions in its capital than GAAP. Compliance with laws and regulations can be difficult and costly, and changes to laws and regulations often impose additional compliance costs.

The Company is currently facing increased regulation and supervision of its industry. The Dodd-Frank Act instituted major changes to the banking and financial institutions regulatory regimes. Other changes to statutes, regulations or regulatory policies or supervisory guidance, including changes in interpretation or implementation of statutes, regulations, policies or supervisory guidance, could affect the Company in substantial and unpredictable ways. Such additional regulation and supervision has increased, and may continue to increase, the Company’s costs and limit its ability to pursue business opportunities. Further, the Company’s failure to comply with these laws and regulations, even if the failure was inadvertent or reflects a difference in interpretation, could subject it to restrictions on its business activities, fines and other penalties, any of which could adversely affect the Company’s results of operations, capital base and the price of its securities. Further, any new laws, rules and regulations could make compliance more difficult or expensive or otherwise adversely affect the Company’s business and financial condition.

Regulations issued by the CFPB could adversely impact earnings due to, among other things, increased compliance costs or costs due to noncompliance.

The CFPB significantly influences consumer financial laws, regulation and policy through rulemaking related to enforcement of the Dodd-Frank Act’s prohibitions against unfair, deceptive, and abusive consumer finance products or practices, which are directly affecting the business operations of financial institutions offering consumer financial products or services, including the Company. This agency’s broad rulemaking authority includes identifying practices or acts that are unfair, deceptive, or abusive in connection with any consumer financial transaction, financial product, or service. In particular, the CFPB’s interpretation of the Dodd-Frank Act’s prohibitions against unfair, deceptive, and abusive consumer finance products or practices may ultimately affect products or services currently offered by the Company and its subsidiaries and may affect the amount of revenue that may be derived from these products and services in the future, especially revenue from overdraft products offered by the Bank. Although the CFPB has supervisory jurisdiction over banks with $10 billion or greater in assets, rules, regulations, and policies issued by the CFPB may also apply to the Company or its subsidiaries by virtue of the adoption of such policies and practices by the Federal Reserve and the OCC. Further, the CFPB may include its own examiners in regulatory examinations by the Company and the Bank’s primary regulators. The limitations and restrictions imposed by the CFPB may produce significant, material effects on the Company's business, financial condition, and results of operations.

The Company is subject to laws regarding the privacy, information security and protection of personal information and any violation of these laws or another incident involving personal, confidential or proprietary information of individuals could damage the Company’s reputation and otherwise adversely affect its business.

The Company’s business requires the collection and retention of large volumes of customer data, including PII in various information systems that the Company maintains and in those maintained by third party service providers. The Company also maintains important internal company data such as PII about its employees and information relating to its operations. The Company is subject to complex and evolving laws and regulations governing the privacy and protection of PII of individuals (including customers, employees and other third-parties). For example, the Company’s business is subject to the Gramm-Leach-Bliley Act of 1999, which, among other things: (i) imposes certain limitations on the Company’s ability to share nonpublic PII about its customers with nonaffiliated third parties; (ii) requires that the Company provides certain disclosures to customers about its information collection, sharing and security practices and affords customers the right to “opt out” of any information sharing by it with nonaffiliated third parties (with certain exceptions); and (iii) requires that the Company develops, implements and maintains a written comprehensive information security program containing appropriate safeguards based on the Company’s size and complexity, the nature and scope of its activities, and the sensitivity of customer information it processes, as well as plans for responding to data security breaches. Various federal and state banking regulators and states have also enacted data breach notification requirements with varying levels of individual, consumer, regulatory or law enforcement notification in the event of a security breach. Ensuring that the Company’s collection, use, transfer and storage of PII complies with all applicable laws and regulations can increase the Company’s costs. Furthermore, the Company may not be able to ensure that customers and other third parties have appropriate controls in place to protect the confidentiality of the information that they exchange with the Company, particularly where such information is transmitted by electronic means. If personal, confidential or proprietary information of customers or others were to be mishandled or misused, the Company could be exposed to litigation or regulatory sanctions under privacy and data protection laws and regulations. Concerns regarding the effectiveness of the Company’s measures to safeguard PII, or even the perception that such measures are inadequate, could cause the Company to lose customers or potential customers and thereby reduce its revenues. Accordingly, any failure, or perceived failure, to comply with applicable privacy or data protection laws and regulations may subject the Company to inquiries, examinations and investigations that could result in requirements to modify or cease certain operations or practices or in significant liabilities, fines or penalties, and could damage the Company’s reputation and otherwise adversely affect its operations, financial condition and results of operations.

The Company’s business and earnings are impacted by governmental, fiscal and monetary policy over which it has no control.

The Company is affected by domestic monetary policy. The Federal Reserve regulates the supply of money and credit in the United States, and its policies determine in large part the Company’s cost of funds for lending, investing and capital raising activities and the return it earns on those loans and investments, both of which affect the Company’s net interest margin. The actions of the Federal Reserve also can materially affect the value of financial instruments that the Company holds, such as loans and debt securities, and also can affect the Company’s borrowers, potentially increasing the risk that they may fail to repay their loans. The Company’s business and earnings also are affected by the fiscal or other policies that are adopted by various regulatory authorities of the United States. Changes in fiscal or monetary policy are beyond the Company’s control and hard to predict.

Risks Related to the Company’s Common Stock

The Company is not obligated to pay dividends and its ability to pay dividends is limited.

The Company’s ability to make dividend payments on its common stock depends primarily on certain regulatory considerations and the receipt of dividends and other distributions from the Bank. There are various regulatory restrictions on the ability of banks, such as the Bank, to pay dividends or make other payments to their holding companies. The Company is currently paying a quarterly cash dividend to holders of its common stock at a rate of $0.33 per share. Although the Company has paid a quarterly cash dividend to the holders of its common stock since July 2013, holders of its common stock are not entitled to receive dividends, and the Company is not obligated to pay dividends in any particular amounts or at any particular times. Regulatory, economic and other factors may cause the Company’s Board to consider, among other things, the reduction of dividends paid on its common stock.

Future issuances of the Company’s common stock could adversely affect the market price of the common stock and could be dilutive.

The Company’s Board, without the approval of shareholders, could from time-to-time decide to issue additional shares of common stock or shares of preferred stock, which may adversely affect the market price of the shares of common stock and could be dilutive to the Company’s shareholders. Any sale of additional shares of the Company’s common stock may be at prices lower than the current market value of the Company’s shares. In addition, new investors may have rights, preferences and privileges that are senior to, and that could adversely affect, the Company’s existing shareholders. For example, preferred stock would be senior to common stock in right of dividends and as to distributions in liquidation. The Company cannot predict or estimate the amount, timing, or nature of its future offerings of equity securities. Thus, the Company’s shareholders bear the risk of future offerings diluting their stock holdings, adversely affecting their rights as shareholders, and/or reducing the market price of the Company’s common stock.

An investment in the Company’s common stock is not an insured deposit.

The Company’s common stock is not a bank deposit and, therefore, it is not insured against loss by the FDIC or by any other public or private entity. An investment in the Company’s common stock is inherently risky for the reasons described in this “Risk Factors” section and elsewhere in this report and is subject to the same market forces that affect the price of common stock in any company and, as a result, shareholders may lose some or all of their investment.

The Company qualifies as a “smaller reporting company,” and the reduced disclosure obligations applicable to smaller reporting companies may make its common stock less attractive to investors.

The Company is a “smaller reporting company” as defined in federal securities laws, and will remain a smaller reporting company until the fiscal year following the determination that the market value of its voting and non-voting common shares held by non-affiliates is more than $250 million measured on the last business day of its second fiscal quarter, or its annual revenues are less than $100 million during the most recently completed fiscal year and the market value of its voting and non-voting common shares held by non-affiliates is more than $700 million measured on the last business day of its second fiscal quarter. Smaller reporting companies have reduced disclosure obligations, such as an exemption from providing selected financial data and an ability to provide simplified executive compensation information and only two years of audited financial statements. If some investors find the Company’s common stock less attractive because the Company may rely on these reduced disclosure obligations, there may be a less active trading market for its common stock and its stock price may be more volatile.

While the Company’s common stock is currently listed on the Nasdaq Capital Market, it has less liquidity than stocks for larger companies listed on national securities exchanges.

The trading volume in the Company’s common stock on the Nasdaq Capital Market has been relatively low when compared with larger companies listed on national securities exchanges. There is no assurance that a more active and liquid trading market for the common stock will exist in the future. Consequently, shareholders may not be able to sell a substantial number of shares for the same price at which shareholders could sell a smaller number of shares. In addition, the Company cannot predict the effect, if any, that future sales of its common stock in the market, or the availability of shares of common stock for sale in the market, will have on the market price of the common stock. Sales of substantial amounts of common stock in the market, or the potential for large amounts of sales in the market, could cause the price of the Company’s common stock to decline, or reduce the Company’s ability to raise capital through future sales of common stock.

General Risk Factors

The Company is exposed to risk of environmental liabilities with respect to properties to which it takes title.

In the course of its business, the Company may foreclose and take title to real estate, potentially becoming subject to environmental liabilities associated with the properties. The Company may be held liable to a governmental entity or to third parties for property damage, personal injury, investigation and clean-up costs or the Company may be required to investigate or clean up hazardous or toxic substances or chemical releases at a property. Costs associated with investigation or remediation activities can be substantial. If the Company is the owner or former owner of a contaminated site, it may be subject to common law claims by third parties based on damages and costs resulting from environmental contamination emanating from the property. These costs and claims could adversely affect the Company’s business.

Severe weather, earthquakes, other natural disasters, pandemics, endemics, acts of war or terrorism and other external events could significantly impact the Company's business.

Severe weather, earthquakes, other natural disasters, pandemics, acts of war or terrorism and other adverse external events could have a significant impact on the Company's ability to conduct business. Such events could affect the stability of the deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, results in loss of revenue and/or cause the Company to incur additional expenses. Although management has established disaster recovery policies and procedures, the occurrence of any such events could have a material adverse effect on the Company's business, financial condition and results of operations.

Cybersecurity Risk Management and Strategy

As a corporation committed to maintaining the integrity, confidentiality, and availability of the Company's digital assets and sensitive information, the Company recognizes the critical importance of cybersecurity in today's interconnected business landscape. The Company's cybersecurity measures are designed to safeguard the Company's systems, networks, data, and information from unauthorized access, disruption, or misuse.

The Company recognizes that cybersecurity is fundamental to maintaining trust with shareholders, customers, and other stakeholders. By prioritizing cybersecurity as a strategic imperative, the Company strives to safeguard business operations, sensitive information, and integrity which preserves the value delivered to all the Company's constituents.

Key components of the Company's cybersecurity program:

• Risk Management: The Company continuously assesses and mitigates cybersecurity risks across the organization by leveraging industry best practices and frameworks such as NIST Cybersecurity Framework.
• Governance and Oversight: The Company's Board of Directors (the Board) regularly reviews cybersecurity matters, ensuring alignment with business objectives and regulatory requirements. A designated Information Technology Strategic Committee, which includes many subject matter experts from the Board and Executive Management, meets quarterly to provide additional focus and expertise in this area.
• Security Controls: The Company has implemented robust technical and procedural controls to protect information assets, including firewalls, intrusion detection systems, encryption, access controls, and multifactor authentication. These controls are tested periodically by external technology audit firms with penetration tests and security audits.
• Policy Controls: Annually all employees sign off on the Company’s data and device controls. The Company ensures that all information access points are the Company’s assets and all data passing through these access points are accessible by the Company and can be deleted whenever the Company deems necessary.
• Employee Training and Awareness: Ongoing cybersecurity training and awareness programs are implemented to educate employees about potential threats, phishing attacks, social engineering tactics, and best practices for safeguarding company information.
• Incident Response: The Company maintains a comprehensive incident response plan to promptly detect, contain, and recover from cybersecurity incidents. Regular testing and simulation exercises ensure readiness and effectiveness of response capabilities.
• Third-Party Risk Management: The Company regularly evaluates and monitors the cybersecurity posture of third-party vendors and partners with whom data is shared or relied upon for critical services, to ensure they meet the Company's security standards.
• Continuous Improvement: The Company regularly reviews and makes enhancements to the cybersecurity program to adapt to emerging threats, technological advancements, and changes in regulatory requirements. Implementation of new technologies, practices, and infrastructures to target security vulnerabilities is ongoing.
• Compliance and Reporting: The Company adheres to relevant cybersecurity regulations and standards applicable to the Company's industry and maintains transparency by disclosing material cybersecurity incidents or risks in accordance with regulatory obligations.

The Company had no material cybersecurity incidents in 2024.

The Company and its subsidiaries currently occupy twelve full-service and one limited-service banking facilities in the cities of Charlottesville, Manassas, Richmond and Winchester, and the counties of Albemarle, Fauquier and Prince William. The Company’s main office, a full-service banking facility and operations are located at 404 People Place, Charlottesville, Virginia. VNB Trust and Estate Services is located at 103 Third Street, SE, Charlottesville, Virginia. Of the thirteen locations used as bank branches, five of the buildings are owned by the Company, six are leased from nonaffiliates and two are leased from affiliates described below. One former branch location is currently under contract to be sold. Leases with affiliates are described below.

The five-story building located at 404 People Place, Charlottesville, Virginia, just east of the Charlottesville city limits on Pantops Mountain, was constructed by the Bank on a pad site leased in 2005 from Pantops Park, LLC for a term of twenty years, with seven five-year renewal options. William D. Dittmar, Jr., a director of the Company and the Bank, is the manager and indirect owner of Pantops Park, LLC. The building, consisting of approximately 43,000 square feet, was completed in early 2008, and the Bank opened this full-service office in April 2008. In addition to the Company’s use of this building as outlined in the preceding paragraph, a portion of the additional space is leased to tenants.

The drive-through location at 301 East Water Street, Charlottesville, which is a limited-service banking facility, and the adjoining office space located at 112 Third Street, SE, Charlottesville Virginia is leased from East Main Investments, LLC. Hunter E. Craig, a director of the Company and the Bank, serves as manager of East Main Investments, LLC, which is owned by Mr. Craig and his spouse.

See Note 6 – Premises and Equipment and Note 7 – Leases in the Notes to Consolidated Financial Statements in Item 8. Financial Statements and Supplementary Data for information with respect to the amounts at which the Company’s premises and equipment are carried and commitments under long-term leases. All of the Company's properties are in good operating condition and are adequate for the Company's present and anticipated future needs.

In the ordinary course of its operations, the Company and/or its subsidiaries are parties to various legal proceedings from time-to-time. Based on the information presently available, and after consultation with legal counsel, management believes that the ultimate outcome of such proceedings, in the aggregate, will not have a material adverse effect on the business or financial condition of the Company and its subsidiaries.

The following discussion provides information about the major components of the results of operations and financial condition, liquidity, and capital resources of Virginia National Bankshares Corporation. This discussion and analysis should be read in conjunction with the Consolidated Financial Statements and Notes to Consolidated Financial Statements in Item 8. Financial Statements and Supplementary Data.

Application of Critical Accounting Policies and Critical Accounting Estimates

The accounting and reporting policies followed by the Company conform, in all material respects, to GAAP and to general practices within the financial services industry. The preparation of financial statements in conformity with GAAP requires management to make estimates and assumptions that affect the amounts reported in the financial statements and accompanying notes. While the Company bases estimates on historical experience, current information, and other factors deemed to be relevant, actual results could differ from those estimates.

The Company considers accounting estimates to be critical to reported financial results if (i) the accounting estimate requires management to make assumptions about matters that are highly uncertain and (ii) different estimates that management reasonably could have used for the accounting estimate in the current period, or changes in the accounting estimate that are reasonably likely to occur from period to period, could have a material impact on the Company’s financial statements. The Company’s accounting policies are fundamental to understanding management’s discussion and analysis of financial condition and results of operations.

Following are the accounting policies and estimates that the Company considers as critical:

• Allowance for credit losses - The Company establishes the ACL through charges to earnings in the form of a provision for credit losses. Loan losses are charged against the ACL for the difference between the carrying value of the loan and the estimated net realizable value or fair value of the collateral, if collateral dependent, when management believes that the collectability of the principal is unlikely. Subsequent recoveries, if any, are credited to the ACL. The ACL represents management’s current estimate of expected credit losses over the contractual term of loans held for investment, and is recorded at an amount that, in management’s judgment, reduces the recorded investment in loans to the net amount expected to be collected. Management’s judgment in determining the level of the ACL is based on evaluations of historical loan losses, current conditions and reasonable and supportable forecasts relevant to the collectability of loans. Various national economic variables are utilized in the development of the ACL, including the national unemployment rate and national gross domestic product. In addition, management’s estimate of expected credit losses is based on the remaining life of certain consumer loans held for investment, and changes in expected prepayment behavior may result in changes in the remaining life of loans and expected credit losses. Management also assesses the risk of credit losses arising from changes in general market, economic and business conditions; the nature and volume of the loan portfolio; the volume and severity of delinquencies and adversely classified loan balances and the value of underlying collateral in determining the recorded balance of the ACL. This evaluation is inherently subjective because it requires estimates that are susceptible to significant revision as more information becomes available. In evaluating the level of the ACL, the Company considers a range of possible assumptions and outcomes related to the various factors identified above. The level of the ACL is particularly sensitive to changes in the actual and forecasted national unemployment rate and changes in current conditions or reasonably expected future conditions affecting the collectability of loans.
• Fair value measurements are used by the Company to record fair value adjustments to certain assets and liabilities and to determine fair value disclosures. The Company’s valuation methodologies may produce a fair value calculation that may not be indicative of net realized value or reflective of future fair values. While management believes the Company’s valuation methodologies are appropriate and consistent with other market participants, the use of different methodologies or assumptions to determine the fair value of certain financial instruments could result in a different estimate of fair value at the reporting date. Additional discussion of valuation methodologies is presented in Note 17 – Fair Value Measurements, in the Notes to Consolidated Financial Statements.
• Intangible asset accounting policies require that goodwill and other intangible assets acquired in a purchase business combination and determined to have an indefinite useful life are not amortized, but tested for impairment at least annually, or more frequently if events and circumstances exist that indicate that a goodwill impairment test should be performed. Intangible assets with definite useful lives are amortized over their

estimated useful lives, which range from 3 to 10 years, to their estimated residual values. Goodwill is the only intangible asset with an indefinite life on the Company’s Consolidated Balance Sheets. Additional discussion of the accounting policies and composition of goodwill and other intangibles assets is presented in Note 1 – Summary of Significant Accounting Policies and Note 8 – Goodwill and Other Intangible Assets, in the Notes to Consolidated Financial Statements.

• Income tax accounting policies have the objective to recognize the amount of taxes payable or refundable for the current year and the deferred tax assets and liabilities for future tax consequences of events that have been recognized in an entity’s financial statements or tax returns. Judgment is required in assessing the future tax consequences of events that have been recognized in the Company’s Consolidated Financial Statements or tax returns. Fluctuations in the actual outcome of these future tax consequences could impact the Company’s consolidated financial condition or results of operations.

See Note 1 – Summary of Significant Accounting Policies and Note 11 – Income Taxes, in the Notes to Consolidated Financial Statements, for further detail on the accounting policies for income taxes and for components of the deferred tax assets and liabilities.

Non-GAAP Presentations

The accounting and reporting policies of the Company conform to GAAP and prevailing practices in the banking industry. However, certain non-GAAP measures are used by management to supplement the evaluation of the Company’s performance. These include adjusted tangible book value per share and the following fully-taxable equivalent measures: net interest income-FTE, efficiency ratio-FTE and net interest margin-FTE. Interest on tax-exempt loans and securities is presented on a taxable-equivalent basis (which converts the income on loans and investments for which no income taxes are paid to the equivalent yield as if income taxes were paid) using the federal corporate income tax rate of 21% that was applicable for all periods presented.

Management believes that the use of these non-GAAP measures provides meaningful information about operating performance by enhancing comparability with other financial periods, other financial institutions, and between different sources of interest income. The non-GAAP measures used by management enhance comparability by excluding the effects of (1) balances of intangible assets, including goodwill, that vary significantly between institutions and (2) tax benefits that are not consistent across different opportunities for investment. These non-GAAP financial measures should not be considered an alternative to GAAP-basis financial statements, and other banks and bank holding companies may define or calculate these or similar measures differently. Net income is discussed in Management’s Discussion and Analysis on a GAAP basis unless noted as “non-GAAP.”

A reconcilement of the non-GAAP financial measures used by the Company to evaluate and measure the Company's performance to the most directly comparable GAAP financial measures is presented below:

(Dollars in thousands, except per share data)

1 FTE calculations use a Federal income tax rate of 21%.

2 The efficiency ratio, GAAP basis, is computed by dividing noninterest expense by the sum of net interest income and noninterest income.

3 The efficiency ratio, FTE, is computed by dividing noninterest expense by the sum of net interest income (FTE) and noninterest income.

Results of Operations

Consolidated Return on Assets and Equity and Other Key Ratios

The ratio of net income to average total assets and average shareholders' equity and certain other ratios for the years indicated are as follows:

Net income for the year ended December 31, 2024 was $17.0 million, or $3.15 per diluted share, an 11.9% decrease compared to $19.3 million, or $3.58 per diluted share for the year ended December 31, 2023. This decrease was the result of a $2.6 million decrease in net interest income and a $1.5 million decrease in noninterest income, offset by a $397.0 thousand decrease in noninterest expense. Each component of such year-over-year changes are described in more detail below.

The efficiency ratio (FTE) was 62.0% for the year ended December 31, 2024, compared to 58.3% for the same period of 2023, increasing due to the fluctuations in net interest income, noninterest income and noninterest expense noted above.

The Company had three reportable segments during the periods presented: the Bank, VNB Trust and Estate Services and Masonry Capital.

• Bank - The Bank’s commercial banking activities involve making loans, taking deposits and offering related services to individuals, businesses and charitable organizations. Loan fee income, service charges from deposit accounts, and other non-interest-related revenue, such as fees for debit cards and ATM usage and fees for treasury management services, generate additional income for this segment.
• VNB Trust and Estate Services - This segment offers corporate trustee services, trust and estate administration, IRA administration and custody services and offers in-house investment management services. Revenue for this segment is generated from administration, service and custody fees, as well as management fees which are derived from Assets Under Management. Investment management services currently are offered through affiliated and third-party managers.
• Masonry Capital - Masonry Capital offers investment management services for separately managed accounts and a private investment fund employing a value-based, catalyst-driven investment strategy. Revenue for this segment is generated from management fees which are derived from Assets Under Management and incentive income which is based on the investment returns generated on performance-based Assets Under Management. Note that the membership interests in this business line were sold to an officer of the Company effective April 1, 2024. Subsequent to the date of sale, the Company will receive an annual revenue-share amount for a period of six years. No expenses have been or will be incurred by the Company related to Masonry Capital subsequent to April 1, 2024.

The Bank segment earned net income of $17.2 million in 2024, a $2.2 million decrease compared to the $19.4 million netted in 2023. VNB Trust and Estate Services realized a net loss of $275.0 thousand in 2024, compared to a net loss of $307.0 thousand in 2023. Masonry Capital realized a net loss of $2 thousand in the first quarter of 2024 prior to the sale of the business line, compared to net income of $145 thousand in 2023.

Details of the changes in the various components of net income are further discussed below.

Net Interest Income

Net interest income is computed as the difference between the interest income on earning assets and the interest expense on deposits and other interest bearing liabilities. Net interest income represents the principal source of revenue for the Company and accounted for 85.9% of the total revenue in 2024. Net interest margin (FTE) is the ratio of taxable-equivalent net interest income to average earning assets for the period. The level of interest rates and the volume and mix of earning assets and interest bearing liabilities impact net interest income (FTE) and net interest margin (FTE).

The following table details the average balance sheet, including an analysis of net interest income (FTE) for earning assets and interest bearing liabilities, for the years ended December 31, 2024, 2023, and 2022.

Consolidated Average Balance Sheets and Analysis of Net Interest Income (FTE)

(Dollars in thousands)

(1) Tax-exempt income for investment securities has been adjusted to a fully tax-equivalent basis (FTE), using a Federal income tax rate of 21%. Refer to the Reconcilement of Non-GAAP Measures table within the Non-GAAP Presentations earlier in this section.

(2) Interest rate spread is the average yield earned on earning assets less the average rate paid on interest bearing liabilities.

(3) Net interest margin (FTE) is net interest income (FTE) expressed as a percentage of average earning assets.

The purpose of the volume and rate analysis below is to describe the impact on the net interest income (FTE) of the Company resulting from changes in average balances and average interest rates for the periods indicated. The change in interest due to both volume and rate has been allocated to volume and rate changes in proportion to the relationship of the absolute dollar amounts of the change in each. Interest income is reported on a tax-equivalent basis.

Volume and Rate Analysis

2024 compared to 2023

(Dollars in thousands)

2023 compared to 2022

(Dollars in thousands)

For 2024, net interest income (FTE) of $46.7 million was recognized, a decrease of $2.6 million over 2023. Net interest income (FTE) for 2023 totaled $49.3 million, a $4.6 million decrease over the 2022 total of $53.9 million. Average earning assets increased $37.8 million or 2.6% in 2024 compared to 2023 and decreased $212.1 million or 12.6% in 2023 compared to 2022. The increase in the average balance of loans in the real estate and commercial categories were the primary drivers of the increase in interest income from 2023 to 2024. The average balance for loans as a percentage of earnings assets for 2024 was 77.5%, compared to 66.8% and 58.3% in 2023 and 2022, respectively.

The 2024 net interest margin (FTE) declined 26 bps to 3.10% from 3.36% in 2023. The 2023 net interest margin (FTE) improved 15 bps from 3.21% in 2022. The tax-equivalent yield on average earning assets for 2024 of 5.07% was 28 bps higher than the 2023 yield of 4.79%. The 2023 tax-equivalent yield on average earning assets was 139 bps higher than the comparable 2022 yield of 3.40%. Loan yields for 2024 were 5.71%, declining only 1 bp from the loan yield of 5.72% for 2023. Average loans for 2024 of $1.2 billion were $185.1 million higher than the 2023 average of $980.6 million.

The increase in rates paid on deposits in 2024 compared to 2023 negatively impacted net interest income. Interest expense as a percentage of average earning assets increased to 196 bps for 2024, compared to 143 bps and 19 bps for 2023 and 2022, respectively. Net interest margin will be impacted by future changes in short-term and long-term interest rate levels on deposits, as well as the impact from the competitive environment. A continuing primary driver of the Company’s low cost of funds compared to peers is the Company’s level of non-interest bearing demand deposits and low-cost deposit accounts. Following is a table illustrating the average balances of deposit accounts as a percentage of total deposit account balances.

(Dollars in thousands)

Provision for Credit Losses

The level of the ACL reflects changes in the size of the portfolio or in any of its components, as well as management’s continuing evaluation of industry concentrations, specific credit risks, loan loss experience, current loan portfolio quality, and economic, political and regulatory conditions. Additional information concerning management’s methodology in determining the adequacy of the ACL is contained later in this section under allowance for credit losses, in addition to Note 1 – Summary of Significant Accounting Policies and Note 5 – Allowance for Credit Losses of the Notes to Consolidated Financial Statements, found in Item 8. Financial Statements and Supplementary Data.

Based on management’s continuing evaluation of the loan portfolio in 2024, the Company recorded a net recovery of provision for credit losses of $600 thousand, which is net of a $118 thousand provision for unfunded commitments, compared to provision expense of $734 thousand, which includes a $38 thousand provision for unfunded commitments, in 2023 and provision expense of $106 thousand in 2022. The decrease in 2024 is primarily the result of the impact of declining expected loss rates on most of the pools of loans within the CECL segmentation. The increase in 2023 is primarily the result of the adoption of ASC 326, which increased the ACL by $2.5 million effective January 1, 2023, as well as increase in provision related to organic loan growth.

The ACL as a percentage of total loans was 0.68% at December 31, 2024 compared to 0.77% at December 31, 2023.

The following is a summary of the changes in the ACL for the years ended December 31, 2024, 2023, and 2022:

(Dollars in thousands)

40

Noninterest Income

The major components of noninterest income are detailed below. Year-to-year variances are shown for each noninterest income category.

(Dollars in thousands)

Noninterest income of $7.6 million for the year ended December 31, 2024 decreased $1.5 million over the prior year, as a result of the following:

• Investment management income of $632 thousand and performance fees of $376 thousand were recognized in 2023 related to the Masonry business line. The membership interests in this business line were sold to an officer of the Company effective April 1, 2024. Subsequent to the date of sale, the Company will receive an annual revenue-share amount for a period of six years. See below for impact of the sale on Masonry on 2024's noninterest expense.
• Proceeds of bank owned life insurance were collected in 2023 related to the death of a former employee.
• These decreases were partially offset by a $904 gain on early redemption of debt realized in 2024.

Noninterest Expense

The major components of noninterest expense are detailed below. Year-over-year variances are shown for each noninterest expense category.

(Dollars in thousands)

Noninterest expense of $33.7 million for the year ended December 31, 2024 decreased $397.0 thousand from the prior year, predominantly due to continued efficiencies gained from the Merger in the areas of occupancy and data processing. In addition, management reduced the level of marketing, advertising and promotion expense in 2024 compared to 2023. Normal, recurring increases in salaries and employee benefits in the form of merit increases and benefit costs were offset by a reduction in salaries and employee benefits related to Masonry, as that business line was sold effective April 1, 2024. At December 31, 2024, the Company had 146 full-time equivalent employees compared to 155 at December 31, 2023.

Core deposit intangible amortization expense is a result of the Merger and amounted to $1.3 million in 2024 and $1.5 million in 2023.

Provision for Income Taxes

The provision for income taxes is based upon the results of operations, adjusted for the effect of certain tax-exempt income and non-deductible expenses. In addition, certain items of income and expense are reported in different periods for financial reporting and tax return purposes. The tax effects of these temporary differences are recognized currently in the deferred income tax provision or benefit. Deferred tax assets or liabilities are computed based on the difference between the financial statement and the income tax bases of assets and liabilities using the applicable enacted marginal tax rate.

For 2024, the Company provided $3.9 million for Federal income taxes, resulting in an effective income tax rate of 18.8%. In 2023, the Company provided $4.0 million for Federal income taxes, resulting in an effective income tax rate of 17.2%. The effective tax rate was higher in 2024 due to the adoption of the proportional method of accounting for LIHTCs, as described in Note 26 - Investment in Affordable Housing Projects of the Notes to Consolidated Financial Statements which is found in Item 8. Financial Statements and Supplementary Data. In addition, the effective tax rate was lower in 2023 due to the nontaxability of proceeds from bank owned life insurance as a result of the death of a former employee. The effective income tax rates for 2024 and 2023 were lower than the U.S. statutory rate of 21% due to the effect of tax-exempt income from municipal bonds and tax-exempt interest from bank owned life insurance policies.

More information on income taxes, including net deferred taxes can be found in Note 11 – Income Taxes of the Notes to Consolidated Financial Statements which is found in Item 8. Financial Statements and Supplementary Data.

BALANCE SHEET ANALYSIS

Securities

The investment securities portfolio has a primary role in the management of the Company’s liquidity requirements and interest rate sensitivity, as well as generating significant interest income. Investment securities also play a key role in diversifying the Company’s balance sheet. In addition, a portion of the investment securities portfolio is pledged as collateral for public fund deposits. Changes in deposit and other funding balances and in loan production will impact the overall level of the investment portfolio.

As of December 31, 2024, the Company’s investment portfolio totaled $269.7 million, with obligations of U.S. government corporations and government-sponsored enterprises amounting to $163.9 million, or approximately 61% of the total. The Company’s investment portfolio totaled $429.0 million as of December 31, 2023.

During the years ended December 31, 2024, and December 31, 2023, $40.0 million and $49.8 million of securities were sold incurring pre-tax losses of $4 thousand and $206 thousand, respectively. All of these sales were part of strategic decisioning to reinvest proceeds into higher yielding assets. Management proactively manages the mix of earning assets and cost of funds to maximize the earning capacity of the Company.

In accordance with ASC 320, “Investments - Debt and Equity Securities,” the Company has categorized its unrestricted securities portfolio as Available for Sale. Securities classified as AFS may be sold in the future, prior to maturity. Any decision to sell a security classified as AFS would be based on various factors, including significant movements in interest rates, changes in the maturity mix of the Company’s assets and liabilities, liquidity needs, regulatory capital considerations, and other similar factors. AFS securities are carried at fair value. Net aggregate unrealized gains or losses on these securities are included, net of taxes, as a component of shareholders’ equity. All of the Company’s unrestricted securities were investment grade or better as of December 31, 2024. Management has evaluated whether the decline in fair value is the result of credit losses and has determined that no credit loss provision is required as of December 31, 2024 related to the AFS portfolio. AFS securities included gross unrealized losses of $53.0 million as of December 31, 2024.

(Dollars in thousands)

All mortgage-backed securities included in the above tables were issued by U.S. government agencies and corporations. At December 31, 2024, the securities issued by political subdivisions or agencies were highly rated with 93% of the municipal bonds having A+ or higher ratings. Approximately 63% of the municipal bonds are general obligation bonds, and issuers are geographically diverse. The Company held no issues that exceeded 10% of the Company’s shareholders' equity at December 31, 2024.

The Company’s holdings of restricted securities totaled $6.2 million and $8.4 million at December 31, 2024 and December 31, 2023, respectively, and consisted of stock in the Federal Reserve Bank, stock in the FHLB, and stock in CBB Financial Corporation, the holding company for Community Bankers’ Bank, and an investment in an SBA loan fund. The Bank is required to hold stock in the Federal Reserve Bank and the FHLB as a condition of membership with each of these correspondent banks. The amount of stock required to be held by the Bank is periodically assessed by each bank, and the Bank may be subject to purchase or surrender stock held in these banks, as determined by their respective calculations. Stock ownership in the bank holding company for Community Bankers’ Bank provides the Bank with several benefits that are not available to non-shareholder correspondent banks. None of these stock issues are traded on the open market and can only be redeemed by the respective issuer. Restricted stock holdings are recorded at cost.

The table shown below details the amortized cost and fair value of AFS securities at December 31, 2024 based upon contractual maturities, by major investment categories. Expected maturities may differ from contractual maturities because issuers have the right to call or prepay obligations. The tax-equivalent yield is based upon a federal tax rate of 21%. Refer to the Reconcilement of Non-GAAP Measures table within the Non-GAAP Presentations section earlier in Item 7.

Maturity Distribution and Average Yields

(Dollars in thousands)

Weighted average yield is calculated based on the relative amortized cost of the securities. Yields on tax-exempt securities have been computed on a tax-equivalent basis using the federal corporate income tax rate of 21%.

As stated, the preceding table reflects the distribution of the contractual maturities of the investment portfolio at December 31, 2024. Management’s investment portfolio strategy is to structure the portfolio so that it is a constant source of liquidity for the balance sheet. In order to achieve greater liquidity in the portfolio, securities that have a monthly flow of principal repayments become a key component. To illustrate the difference between contractual maturity and average life, consider the difference for the fixed rate mortgage-backed securities (MBS) component of this portfolio. At December 31, 2024, the weighted average maturity of the fixed rate MBS sector was 15.6 years, and the projected average life for this group of securities is 6.0 years.

Another indication of the investment portfolio’s liquidity potential is shown by the projected annual principal cash flow from maturities, callable bonds, and monthly principal repayments. For the next three years, the principal cash flows are estimated to be $33.5 million for 2025, $24.4 million for 2026, and $30.9 million for 2027, based upon rates remaining at current levels. This represents approximately 28% of the investment portfolio’s AFS balance at December 31, 2024 that will be available to support the future liquidity needs of the Company. Cash flow projections are subject to change based upon changes to market interest rates.

Loan Portfolio

The Company’s objective is to maintain the historically strong credit quality of the loan portfolio by maintaining rigorous underwriting standards. These standards coupled with regular evaluation of the creditworthiness of, and the designation of lending limits for, each borrower has helped the Company achieve this objective. The primary portfolio strategy includes seeking industry and loan size diversification in order to minimize credit exposure and originating loans in markets with which the Company is familiar. The predominant market area for loans includes Charlottesville, Albemarle County, Fauquier County, Prince William County, Winchester, Frederick County, Manassas, and Richmond, as well as other areas in Virginia, Maryland, West Virginia and the District of Columbia.

The Company’s loan portfolio totaled $1.2 billion as of December 31, 2024 or 76.4% of total assets. Loan balances increased $143.3 million, or 13.1%, from the balance of $1.1 billion as of December 31, 2023. Note that all loan balances are presented net of credit and other fair value discounts, when applicable. The table below shows the composition of the loan portfolio:

(Dollars in thousands)

At December 31, 2024, the loan-to-deposit ratio stood at 86.8%, compared to 77.5% at December 31, 2023.

Based on underwriting standards, loans may be secured in whole or in part by collateral such as liquid assets, accounts receivable, equipment, inventory and real property. The collateral securing any loan may depend on the type of loan and may vary in value based on market conditions.

The Company’s real estate loan portfolio increased by $42.0 million to a balance of $944.1 million at December 31, 2024 from $902.1 million at December 31, 2023. This category comprises 76.4% of all loans, and these loans are secured by mortgages on real property located principally in the Company's market area. Of this amount, approximately $313.6 million represented loans on 1-4 family residential properties. Commercial real estate loans totaled $593.5 million as of December 31, 2024. Sources of repayment are from the borrower’s operating profits, cash flows and liquidation of pledged collateral. The remaining real estate loans were comprised of construction and land development loans which totaled $37.0 million as of December 31, 2024.

Of the $593.5 million of commercial mortgages held on the balance sheet as of December 31, 2024, $309.8 million consists of non-owner occupied commercial real estate, $107.2 million of multifamily, and $176.5 million of owner occupied CRE. No CRE loans were over 90 days past due as of December 31, 2024.

The following table details the Company's levels of non-owner occupied commercial real estate as of December 31, 2024, along with the average loan size and % of risk ratings for each category:

As of December 31, 2024, the Company’s commercial and industrial loan portfolio totaled $257.7 million, a $105.2 million increase from the $152.5 million balance at year-end 2023. This category, representing approximately 20.8% of all loans, includes loans made to individuals and small to medium-sized businesses, as well as loans purchased in the government guaranteed market. As of December 31, 2024 and December 31, 2023, the portfolio of government guaranteed loans, included in the commercial loan balance, was $218.3 million and $109.7 million, respectively.

Consumer loans, comprised of student loans purchased, revolving credit, and other fixed payment loans, totaled $34.2 million as of December 31, 2024 or 2.8% of all loans. Consumer loans ended 2024 with balances $3.8 million lower than the prior year-end, primarily due to normal amortization within the student loan portfolio.

The following table presents the maturity/repricing distribution of the Company’s loans at December 31, 2024. The table also presents the portion of loans that have fixed interest rates or variable/floating interest rates that fluctuate over the life of the loans in accordance with changes in an interest rate index such as the Wall Street Journal prime rate or U.S. Treasury bond indices.

Maturities and Sensitivities of Loans to Changes in Interest Rates

(Dollars in thousands)

46

Total loans at December 31, 2024 and 2023 included loans purchased in connection with the Merger. These loans were recorded at estimated fair value on the date of acquisition without the carryover of the related allowance for loan loss. The following table presents the outstanding principal balance and the carrying amount of purchased loans as of December 31, 2024:

(Dollars in thousands)

Loan Asset Quality

Intrinsic to the lending process is the possibility of loss. While management endeavors to minimize this risk, it recognizes that loan losses will occur and that the amount of these losses will fluctuate depending on the risk characteristics of the loan portfolio, which in turn depend on current and future economic conditions, the financial condition of borrowers, the realization of collateral, and the credit management process.

Generally, loans are placed on non-accrual status when management believes, after considering economic and business conditions and collections efforts, that it is probable that the Company will be unable to collect all amounts due according to the contractual terms of the loan agreement, or when the loan is past due for 90 days or more, unless the debt is both well-secured and in the process of collection.

At December 31, 2024 and 2023, the Company had loans classified as non-accrual with balances of $2.3 million and $1.9 million, respectively. The non-accrual balance as of December 31, 2024 consists of twelve loans to eleven borrowers and 100% of such balance is secured by real estate.

Loans 90 days or more past due and still accruing interest amounted to $754 thousand as of December 31, 2024, compared to $879 thousand as of December 31, 2023. The 2024 balance includes three loans totaling $705 thousand which are 100% government-guaranteed, and three student loans totaling $49 thousand. No CRE loans were 90 days or more past due as of December 31, 2024.

Allowance for Credit Losses

The relationship of the ACL to total loans and nonaccrual loans appears below:

(Dollars in thousands)

See Note 4 – Loans and Note 5 – Allowance for Credit Losses in the accompanying Notes to Consolidated Financial Statements included in Item 8. Financial Statements and Supplementary Data for further details regarding the Company’s loan asset quality measurements.

Activity for the ACL is provided in the following table:

(Dollars in thousands)

(Dollars in thousands)

As of December 31, 2024, the ACL was $8.5 million, an increase of $60 thousand from $8.4 million at December 31, 2023, due to the increased balances in the loan portfolio and also impacted by net recoveries of previously charged-off loans due to strong and successful collection efforts. Management’s estimates for the ACL resulted in the Company’s ACL to total loans outstanding ratio of 0.68% at December 31, 2024, compared to 0.77% at December 31, 2023.

During 2024, there were $759 thousand in loan balances charged off, with a total of $1.5 million in recoveries of previously charged-off balances, resulting in net charge-offs of $778 thousand. During 2023, there were $721 thousand in loan balances charged off, with a total of $377 thousand in recoveries of previously charged-off balances, resulting in net charge-offs of $344 thousand. The ratio of net charge-offs to average loans was 0.07% (net recovery) and 0.04% for 2024 and 2023, respectively.

The table below provides an allocation of year-end ACL by loan type; however, allocation of a portion of the allowance to one loan category does not preclude its availability to absorb losses in other categories.

Allocation of the Allowance for Credit Losses

(Dollars in thousands)

48

(Dollars in thousands)

Deposits

Depository accounts represent the Company’s primary source of funding and are comprised of demand deposits, interest bearing checking accounts, money market deposit accounts and time deposits. These deposits have been provided predominantly by individuals, businesses and charitable organizations in the Charlottesville/Albemarle County, Fauquier County, Manassas, Prince William County, Richmond and Winchester market areas.

Depository accounts held by the Company as of December 31, 2024, totaled $1.4 billion, an increase of $14.4 million or 1.0% compared to the December 31, 2023 balance.

At December 31, 2024, the balances of non-interest bearing demand deposits were $374.1 million or 26.3% of total deposits, a 0.3% increase from $372.9 million at December 31, 2023. Interest bearing transaction and money market accounts totaled $741.0 million at December 31, 2024, an increase of $23.4 million compared to $717.7 million at December 31, 2023. The Company offers ICS®, which allows customers access to multi-million-dollar FDIC insurance on funds placed into demand deposit and/or money market deposit accounts. As of December 31, 2024, the reciprocal ICS® balances included in demand deposit and money market accounts were $44.5 million and $122.1 million, respectively. The Company’s low-cost deposit accounts, which include both non-interest and interest bearing checking accounts as well as money market accounts, represented 78.3% of total deposit account balances at December 31, 2024 compared to 77.4% of total deposit account balances at December 31, 2023.

Certificates of deposit and other time deposit balances decreased $10.1 million to $308.4 million at December 31, 2024 from the balance of $318.6 million at December 31, 2023. Included in this deposit total were reciprocal relationships under CDARS™, whereby depositors can obtain FDIC insurance on deposits up to $50 million. These reciprocal CDARS™ deposits totaled $4.9 million and $5.5 million at December 31, 2024 and 2023, respectively.

(Dollars in thousands)

49

As of December 31, 2024 and 2023, the estimated amounts of total uninsured deposits were $389.6 million and $360.0 million, respectively.

Maturities of time deposits in excess of FDIC insurance limits as of December 31, 2024 were as follows:

(Dollars in thousands)

Borrowings

Borrowings, consisting primarily of FHLB advances and federal funds purchased, are additional sources of funds for the Company. The level of these borrowings is determined by various factors, including customer demand and the Company's ability to earn a favorable spread on the funds obtained.

The Company has a collateral dependent line of credit with the FHLB. As of December 31, 2024, the Company had $20.0 million in outstanding advances from the FHLB, compared to $66.5 million in outstanding advances as of December 31, 2023.

Additional borrowing arrangements maintained by the Bank include formal federal funds lines with five correspondent banks. The Company had $236 thousand in federal funds purchased as of December 31, 2024 compared to $3.5 million at of December 31, 2023 and no outstanding balance at December 31, 2022.

Borrowings, excluding federal funds purchased, consist of the following as of December 31, 2024, 2023, and 2022:

(Dollars in thousands)

Details on available borrowing lines can be found later under Liquidity in the Asset/Liability Management section.

Junior Subordinated Debt

In 2006, a subsidiary of Fauquier, Fauquier Statutory Trust II, privately issued $4.0 million face amount of the trust’s Floating Rate Capital Securities in a pooled capital securities offering. Simultaneously, the trust used the proceeds of that sale to purchase $4.0 million principal amount of the Fauquier’s Floating Rate Junior Subordinated Deferrable Interest Debentures due 2036. As of December 31, 2024, total capital securities were $3.5 million, as adjusted to fair value as of the date of the Merger. The interest rate on the capital security resets every three months at 1.70% above the then current three-month CME Term SOFR plus a spread adjustment of 0.26% and is paid quarterly.

The Trust II issuance of capital securities and the respective subordinated debentures are callable at any time. The subordinated debentures are an unsecured obligation of the Company and are junior in right of payment to all present and future senior indebtedness of the Company. The capital securities are guaranteed by the Company on a subordinated basis.

ASSET/LIABILITY MANAGEMENT

The Company’s primary earnings source is its net interest income; therefore, the Company devotes significant time and resources to assist in the management of interest rate risk and asset quality. The Company’s net interest income is affected by changes in market interest rates and by the level and composition of interest-earning assets and interest bearing liabilities. The Company’s objectives in its asset/liability management are to utilize its capital effectively, to provide adequate liquidity and to enhance net interest income, without taking undue risks or subjecting the Company unduly to interest rate fluctuations. The Company takes a coordinated approach to the management of its liquidity, capital and interest rate risk. This risk management process is governed by policies and limits established by the Bank’s Asset/Liability Committee, which are reviewed and approved by the Bank’s Board of Directors. This committee, which is comprised of directors and members of management, meets to review, among other things, economic conditions, interest rates, yield curves, cash flow projections, expected customer actions, liquidity levels, capital ratios and repricing characteristics of assets, liabilities and financial instruments.

Market Risk

Market risk is the risk of loss in a financial instrument arising from adverse changes in market indices such as interest rates. The Company’s principal market risk exposure is interest rate risk. Interest rate risk is the exposure to changes in market interest rates. Interest rate sensitivity is the relationship between market interest rates and net interest income due to the repricing characteristics of assets and liabilities. The Company monitors the interest rate sensitivity of its balance sheet positions by examining its near-term sensitivity and its longer-term gap position. In its management of interest rate risk, the Company utilizes several financial and statistical tools including traditional gap analysis and sophisticated income simulation models.

A traditional gap analysis is prepared based on the maturity and repricing characteristics of interest-earning assets and interest bearing liabilities for selected time bands. The mismatch between repricings or maturities within a time band is commonly referred to as the “gap” for that period. A positive gap (asset sensitive) where interest rate sensitive assets exceed interest rate sensitive liabilities generally will result in the net interest margin increasing in a rising rate environment and decreasing in a falling rate environment. A negative gap (liability sensitive) will generally have the opposite result on the net interest margin. The Company’s balance sheet structure is primarily short-term in nature with a substantial portion of rate-sensitive assets and rate-sensitive liabilities repricing or maturing within one year, as shown in the Gap Interest Sensitivity Analysis table below.

Gap Interest Sensitivity Analysis

As of December 31, 2024

The Company utilizes the gap analysis to complement its income simulations modeling. However, the traditional gap analysis does not assess the relative sensitivity of assets and liabilities to changes in interest rates and other factors that could have an impact on interest rate sensitivity or net interest income.

ALCO routinely monitors simulated net interest income sensitivity over a rolling two-year horizon. It also utilizes additional tools to monitor potential longer-term interest rate risk. The income simulation models measure the Company’s net interest income volatility or sensitivity to interest rate changes utilizing statistical techniques that allow the Company to consider various factors which impact net interest income. These factors include actual maturities, estimated cash flows, repricing characteristics, deposit growth/retention and, most importantly, the relative sensitivity of the Company’s assets and liabilities to changes in market interest rates. This relative sensitivity is important to consider as the Company’s core deposit base has not been subject to the same degree of interest rate sensitivity as its assets. The core deposit costs are internally managed and tend to exhibit less sensitivity to changes in interest rates than the Company’s adjustable rate assets whose yields are based on external indices and generally change in concert with market interest rates. The Company’s interest rate sensitivity is determined by identifying the probable impact of changes in market interest rates on the yields on the Company’s assets and the rates that would be paid on its liabilities. This modeling technique involves a degree of estimation based on certain assumptions that management believes to be reasonable. Utilizing this process, management projects the impact of changes in interest rates on net interest margin. The Company has established certain policy limits for the potential volatility of its net interest margin assuming certain levels of changes in market interest rates with the objective of maintaining a stable net interest margin under various probable rate scenarios. Management generally has maintained a risk position well within the policy limits.

As market conditions vary from those assumed in the income simulation models, actual results will also differ due to: prepayment/refinancing levels likely deviating from those assumed, the varying impact of interest rate change caps or floors on adjustable rate assets, the potential effect of changing debt service levels on customers with adjustable rate loans, depositor early withdrawals and product preference changes, and other variables. Furthermore, this sensitivity analysis does not reflect actions that the ALCO might take in responding to or anticipating changes in interest rates.

In simulating the effects of upward and downward changes in market rates to net interest income over a rolling two-year horizon, the model utilizes a “static” balance sheet approach where balance sheet composition or mix as of the measurement date is maintained over the two-year horizon. Similarly, the base case simulation performed assumes interest rates on the measurement date are unchanged for the next 24 months. Then the simulation assumes all rate indices are instantaneously shocked upward and downward by 100 bps to 400 basis points, in 100 basis point increments.

(Dollars in thousands)

In addition to monitoring the effects to interest income, the model computes the effects to the economic value of equity using the same “static” balance sheet with immediate and parallel rate changes for the same rate change horizons. The Asset/Liability Committee monitors the results compared to policy limits that have been established.

As individual rate indices have not historically moved to the same degree, non-parallel rate shocks are also performed to add a degree of sophistication over the parallel rate shocks. In these analyses, the effects to net interest income and market value of equity are computed using eight different scenarios. Changing slopes and twists of the yield curve are achieved by incorporating both likely and unlikely change across different tenors. Since Federal funds rates may not change to the same degree or direction that longer term Treasury bonds may move, the different scenarios are analyzed so that management and the Asset/Liability Committee can monitor risks as they more severely stress the Company’s balance sheet.

The shape of the yield curve can cause downward pressure on net interest income. In general, if and to the extent that the yield curve is flatter (i.e., the differences between interest rates for different maturities are relatively smaller) than previously anticipated, then the yield on the Company’s interest earning assets and its cash flows will tend to be lower. Management believes that the current interest rate exposure is manageable and within the Company's current interest rate risk guidelines.

Liquidity

Liquidity represents the Company’s ability to provide funds to meet customer demand for loan and deposit withdrawals without impairing profitability. Effective management of balance sheet liquidity is necessary to fund growth in earning assets and to pay liability maturities and depository customers’ withdrawal requirements. The Company maintains a Liquidity Management Policy that is approved by the Board of Directors. The policy sets limits in a number of areas, including limits on the amount of non-core liabilities, and funding long-term assets with non-core liabilities.

The Bank’s customer base has provided a stable source of funds and liquidity. Limits contained within the Bank’s Investment Policy also provides for appropriate levels of liquidity through maturities and cash flows within the securities portfolio. Other sources of balance sheet liquidity are obtained from the repayment of loan proceeds and overnight investments. The Bank has numerous secondary sources of liquidity including access to borrowing arrangements from a number of correspondent banks. Available borrowing arrangements maintained by the Bank include formal federal funds lines with six major regional correspondent banks, access to advances from the Federal Home Loan Bank and access to the discount window at the Federal Reserve Bank. Access to borrowings at the discount window are dependent on the fair value of any securities pledged for advances. As of December 31, 2024, the Bank has pledged investment securities with an amortized cost of $4.0 million and a fair value of $3.1 million.

Borrowing Lines

As of December 31, 2024

As of December 31, 2024, the Company had $20.0 million in outstanding advances with the FHLB.

Any excess funds are sold on a daily basis in the federal funds market or maintained on account at the Federal Reserve. The Company maintained an average of $14.7 million outstanding in federal funds sold, and an average of $8.2 million at the Federal Reserve during 2024. On the liability side of the balance sheet, the Company maintained an average of $36.1 million in FHLB advances and $489 thousand in federal funds purchased during 2024. On December 31, 2024 the Company had a $20 million balance in FHLB advances and a $236 thousand balance outstanding in federal funds purchased. The Company intends to maintain sufficient liquidity at all times to meet its funding commitments.

Capital

The Basel III Capital Rules require banks and bank holding companies to comply with the following minimum capital ratios: (i) a ratio of common equity Tier 1 capital to risk-weighted assets of at least 4.5%, plus a 2.5% “capital conservation buffer” (effectively resulting in a minimum ratio of common equity Tier 1 to risk-weighted assets of at least 7%); (ii) a ratio of Tier 1 capital to risk-weighted assets of at least 6.0%, plus the 2.5% capital conservation buffer (effectively resulting in a minimum Tier 1 capital ratio of 8.5%); (iii) a ratio of total capital to risk-weighted assets of at least 8.0%, plus the 2.5% capital conservation buffer (effectively resulting in a minimum total capital ratio of 10.5%); and (iv) a leverage ratio of 4%, calculated as the ratio of Tier 1 capital to balance sheet exposures plus certain off-balance sheet exposures (computed as the average for each quarter of the month-end ratios for the quarter).

The Tier 1, common equity Tier 1, total capital to risk-weighted assets, and leverage ratios of the Bank were 17.77%, 17.77%, 18.60% and 11.55%, respectively, as of December 31, 2024, exceeding the minimum requirements.

With respect to the Bank, to be “well capitalized” under the PCA regulations, a bank must have the following minimum capital ratios: (i) a common equity Tier 1 capital ratio of at least 6.5%; (ii) a Tier 1 capital to risk-weighted assets ratio of at least 8.0%; (iii) a total capital to risk-weighted assets ratio of at least 10.0%; and (iv) a leverage ratio of at least 5.0%. The Bank exceeds the thresholds to be considered well capitalized as of December 31, 2024.

On September 17, 2019 the FDIC finalized a rule that introduced an optional simplified measure of capital adequacy for qualifying community banking organizations, referred to as, the community bank leverage ratio framework, as required by the EGRRCPA. The CBLR framework is designed to reduce burden by removing the requirements for calculating and reporting risk-based capital ratios for qualifying community banking organizations that opt into the framework.

In order to qualify for the CBLR framework, a community banking organization must have a Tier 1 leverage ratio of greater than 9%, less than $10 billion in total consolidated assets, and limited amounts of off-balance-sheet exposures and trading assets and liabilities. A qualifying community banking organization that opts into the CBLR framework and meets all requirements under the framework will be considered to have met the well-capitalized ratio requirements under the PCA regulations and will not be required to report or calculate risk-based capital.

The CBLR framework was made available for community banking organizations to use in their March 31, 2020 Call Report. The Company has not opted into the CBLR framework.

The Basel III capital regulations and CBLR framework are discussed in greater detail under the caption “Supervision and Regulation,” found earlier in this report under “Item 1. Business.” In addition, information regarding the Company’s risk-based capital at December 31, 2024 and December 31, 2023 is presented in Note 15 – Capital Requirements of the Notes to Consolidated Financial Statements, contained in Item 8. Financial Statements and Supplementary Data. Using the most recent capital requirements, the Bank’s capital ratios remain above the levels designated by bank regulators as "well capitalized" at December 31, 2024.

Impact of Inflation and Changing Prices

The Company’s financial statements included herein have been prepared in accordance with GAAP, which requires the financial position and operating results to be measured principally in terms of historical dollars without considering the change in the relative purchasing power of money over time due to inflation. Inflation affects the Company’s results of operations mainly through increased operating costs, but since nearly all of the Company’s assets and liabilities are monetary in nature, changes in interest rates affect the financial condition of the Company to a greater degree than changes in the rate of inflation. Although interest rates are greatly influenced by changes in the inflation rate, they do not necessarily change at the same rate or in the same magnitude as the inflation rate. The Company’s management reviews pricing of its products and services, in light of current and expected costs due to inflation, to mitigate the inflationary impact on financial performance.

Off-Balance Sheet Arrangements

The Company is party to financial instruments with off-balance sheet risk in the normal course of business to meet the financing needs of its customers. These financial instruments consist primarily of commitments to extend credit and standby letters of credit. Additional information concerning the Company’s off-balance sheet arrangements is contained in Note 13 of the Notes to Consolidated Financial Statements, found in Item 8. Financial Statements and Supplementary Data.

Related Party Transactions

The Company and its subsidiaries have business dealings with companies owned by directors and beneficial shareholders of the Company. In 2024 and 2023, leasing/rental expenditures of $562 thousand and $543 thousand respectively, (including reimbursements for taxes, insurance, and other expenses) were paid to an entity indirectly owned by a director of the Company.

Contractual Commitments

In the normal course of business, the Company and its subsidiaries enter into contractual obligations, including obligations on lease arrangements, contractual commitments for capital expenditures, and service contracts. The significant contractual obligations include the leasing of certain of its banking and operations offices under operating lease agreements on terms ranging from 1 to 10 years, most with renewal options.

Following is a schedule of future minimum rental payments under non-cancelable operating leases that have initial or remaining terms in excess of one year as of December 31, 2024:

(Dollars in thousands)

Evaluation of Disclosure Controls and Procedures. The Company maintains “disclosure controls and procedures,” as such term is defined in Rule 13a-15(e) under the Exchange Act, that are designed to ensure that information required to be disclosed in reports that it files or submits under the Exchange Act is recorded, processed, summarized, and reported within the time periods specified in SEC’s rules and forms, and that such information is accumulated and communicated to management, including the Chief Executive Officer and Chief Financial Officer, as appropriate, to allow timely decisions regarding required disclosure.

In designing and evaluating its disclosure controls and procedures, management recognized that disclosure controls and procedures, no matter how well conceived and operated, can provide only reasonable assurance that the objectives of the disclosure controls and procedures are met. Additionally, in designing disclosure controls and procedures, management necessarily is required to apply its judgment in evaluating the cost-benefit relationship of possible disclosure controls and procedures. The design of any disclosure controls and procedures also is based in part upon certain assumptions about the likelihood of future events, and there can be no assurance that any design will succeed in achieving its stated goals under all potential future conditions.

Based on their evaluation as of the end of the period covered by this Annual Report on Form 10-K, the Company’s Chief Executive Officer and Chief Financial Officer have concluded that the disclosure controls and procedures were effective at the reasonable assurance level.

Management’s Report on Internal Control over Financial Reporting. Management is responsible for establishing and maintaining adequate internal control over financial reporting as defined in Rule 13a-15(f) of the Exchange Act. Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.

Management assessed the effectiveness of the Company’s internal control over financial reporting as of December 31, 2024. This assessment was based on criteria established in “Internal Control-Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (“COSO”) on May 14, 2013. Based on their evaluation as of the end of the period covered by this Annual Report on Form 10-K, the Company’s Chief Executive Officer and Chief Financial Officer have concluded that the internal control over financial reporting was effective based on those criteria.

Changes in Internal Control over Financial Reporting. There were no changes in the internal control over financial reporting that occurred during the fourth quarter of 2024 that has materially affected, or is reasonably likely to materially affect, the internal control over financial reporting. This annual report does not include an attestation report of the Company's independent registered public accounting firm, Yount, Hyde & Barbour, P.C., (U.S. PCAOB Auditor Firm I.D.: 613), regarding internal control over financial reporting. Management's report was not subject to attestation by the Company's independent registered public accounting firm pursuant to the rules of the SEC that permit the Company to provide only management's report in this annual report.