NB Bancorp, Inc. (NBBK) Risk Analysis

Our April 2022 acquisition resulted in our operation of three different business lines that are new to us and have necessitated robust compliance policies and procedures in order to comply with various laws and regulations. We provide depository services to cannabis businesses, including cannabis retailers and cannabis cultivators. We also provide loans to various cannabis-related businesses. We also provide depository services to money service businesses and ATM businesses. These acquired portfolios are mature portfolios which have been previously reviewed and managed by the management team and employees now employed by Needham Bank who were previously employed by the selling institution. However, these business lines are relatively new to Needham Bank and have required and we expect will continue to require, proportionately greater compliance and risk management resources than our other business lines in order for us to comply with laws and regulations related to the prevention of financial crimes and combating terrorism, including the U.S. Patriot Act of 2001. These laws and regulations require us to, among other things, implement specific policies and procedures related to those business lines, including enhanced licensing procedures and policies, and anti-money laundering, anti-bribery and corruption, fraud, compliance, suspicious activities, currency transaction reporting, and due diligence on new and existing customers. With respect to cannabis-related businesses, the Controlled Substances Act makes it illegal under federal law to manufacture, distribute, or dispense cannabis, and therefore federal law, including the money laundering statutes and the Bank Secrecy Act, apply to cannabis-related conduct. Financial transactions involving proceeds generated by cannabis-related conduct can form the basis for prosecution under the money laundering statutes. Financial institutions must report currency transactions and conduct suspicious activity monitoring and reporting in connection with cannabis-related businesses to FinCEN. Our ability to comply with anti-money laundering laws and our reporting obligations to FinCEN depend on our ability to maintain robust customer due diligence, surveillance, detection, reporting and analytic capabilities. Although we believe that we have policies, systems and procedures designed to comply with these laws and regulations, to the extent our policies or procedures are not fully effective or do not meet heightened regulatory standards or expectations, we may be subject to fines, penalties, restrictions on certain activities including future acquisitions, reputational harm, or other adverse consequences from our federal bank regulators, the Department of Justice or FinCEN.

The USA PATRIOT and Bank Secrecy Acts require financial institutions to develop programs to prevent financial institutions from being used for money laundering and terrorist activities. If such activities are suspected, financial institutions are obligated to file suspicious activity reports with FinCEN. These rules require financial institutions to establish procedures for identifying and verifying the identity of customers seeking to open new financial accounts. Failure to comply with these regulations could result in fines or sanctions, including restrictions on pursuing acquisitions or establishing new branches. The policies and procedures we have adopted that are designed to assist in compliance with these laws and regulations may not be effective in preventing violations of these laws and regulations. Furthermore, these rules and regulations continue to evolve and expand.

In addition to being affected by general economic conditions, our earnings and growth are affected by the policies of the Federal Reserve Board. An important function of the Federal Reserve Board is to regulate the money supply and credit conditions. Among the instruments used by the Federal Reserve Board to implement these objectives are open market purchases and sales of U.S. government securities, adjustments of the discount rate and changes in banks' reserve requirements against bank deposits. These instruments are used in varying combinations to influence overall economic growth and the distribution of credit, bank loans, investments and deposits. Their use also affects interest rates charged on loans or paid on deposits. The monetary policies and regulations of the Federal Reserve Board have had a significant effect on the operating results of financial institutions in the past and are expected to continue to do so in the future. The effects of such policies upon our business, financial condition and results of operations cannot be predicted.

We have deposit and loan customers that are licensed in various States to do business in the cannabis industry as growers, processors, and dispensaries. While cannabis is legal in each of these States, it remains classified as a Schedule I controlled substance under the Federal Controlled Substances Act, or CSA. As such, the cultivation, use, distribution, and possession of cannabis is a violation of federal law that is punishable by imprisonment and fines. Moreover, the U.S. Supreme Court ruled in USA v. Oakland Cannabis Buyers' Coop. that the federal government has the authority to regulate and criminalize cannabis, including medical marijuana. In January 2018, the U.S. Department of Justice ("DOJ") rescinded the "Cole Memo" and related memoranda which characterized the enforcement of the CSA against persons and entities complying with state regulatory systems permitting the use, manufacture and sale of medical marijuana as an inefficient use of their prosecutorial resources and discretion. The impact of the DOJ's rescission of the Cole Memo and related memoranda is unclear, but may result in the DOJ increasing its enforcement actions against the regulated cannabis industry generally. As in past years, the U.S. Congress has enacted an omnibus spending bill that includes a provision prohibiting the DOJ and the U.S. Drug Enforcement Administration from using funds appropriated by that bill to prevent states from implementing their medical-use cannabis laws. This provision was recently renewed as part of the Consolidated Appropriations Act of 2022. While this provision has been re-enacted every year since 2014, and is expected to continue to be re-enacted in future federal spending bills, if Congress and the President fail to further renew the provision, then the ability of medical cannabis businesses to act in this area, and our ability to provide banking products and services to such businesses, may be impeded. Further, the U.S. Court of Appeals for the Ninth Circuit held in USA v. McIntosh that this provision prohibits the DOJ from spending funds from relevant appropriations acts to prosecute individuals who engage in conduct permitted by state medical-use cannabis laws and who strictly comply with such laws. There is no guarantee that the U.S. Congress will extend this provision or that U.S. Federal courts located outside the Ninth Circuit will follow the ruling in USA v. McIntosh. As of the date of filing this Annual Report on Form 10-K, we are aware of no federal or state court in or for Massachusetts that has addressed the merits of the McIntosh ruling. Federal prosecutors have significant discretion and there can be no assurance that a federal prosecutor in any of the federal districts in which we operate will not choose to strictly enforce the federal laws governing cannabis, including medical-use cannabis, or that any of these federal courts will follow the Ninth Circuit's ruling in USA v. McIntosh. Any change in the federal government's enforcement position, could cause us to immediately cease providing banking services to the medical-use cannabis industry in the States where we operate. Additionally, as the possession and use of cannabis remains illegal under the CSA, we may be deemed to be aiding and abetting illegal activities through the services that we provide to these customers and could have legal action taken against us by the Federal government, including imprisonment and fines. Any change in position or potential action taken against us could result in significant financial damage to us and our stockholders. The Financial Crimes Enforcement Network ("FinCEN") published guidelines in 2014 for financial institutions servicing state legal cannabis business. These guidelines were issued for the explicit purpose so "that financial institutions can provide services to marijuana-related businesses in a manner consistent with their obligations to know their customers and to report possible criminal activity." Needham Bank has and will continue to follow this and other FinCEN guidance in the areas of cannabis banking. Any adverse change in this FinCEN guidance, any new regulations or legislation, any change in existing regulations or oversight, whether a change in regulatory policy or a change in a regulator's interpretation of a law or regulation, could have a negative impact on our interest income and noninterest income, as well as the cost of our operations, increasing our cost of regulatory compliance and of doing business, and/or otherwise affect us, which may materially affect our profitability.

As a participant in the financial services industry, many aspects of our business involve substantial risk of legal liability. From time to time, customers and others make claims and take legal action pertaining to the performance of our responsibilities. Whether customer claims and legal action related to the performance of our responsibilities are founded or unfounded, if such claims and legal actions are not resolved in a manner favorable to us, they may result in significant expenses, attention from management and financial liability. Any financial liability or reputational damage could have a material adverse effect on our business, which, in turn, could have a material adverse effect on our financial condition and results of operations. There is no assurance that litigation with private parties will not increase in the future. Actions currently pending against us may result in judgments, settlements, fines, penalties or other results adverse to us, which could materially adversely affect our business, financial condition or results of operations, or cause serious reputational harm to us.

Inflation risk is the risk that the value of assets or income from investments will be worth less in the future as inflation decreases the value of money. Recently, there has been a rise in inflation and the Federal Reserve Board has raised certain benchmark interest rates in an effort to combat inflation. As discussed above under "– Risks Related to Market Interest Rates – Changes in interest rates could reduce our profits and asset values," as inflation increases and market interest rates rise, the value of our investment securities, particularly those with longer maturities, would decrease, although this effect can be less pronounced for floating rate instruments. In addition, inflation generally increases the cost of goods and services we use in our business operations, such as electricity and other utilities, which increases our noninterest expenses. Furthermore, our customers are also affected by inflation and the rising costs of goods and services used in their households and businesses, which could have a negative impact on their ability to repay their loans with us.

Local and regional economic conditions have a significant impact on the ability of our borrowers to repay loans and the value of the collateral securing loans. A deterioration in economic conditions, especially local conditions, could have the following consequences, any of which could have a material adverse effect on our business, financial condition, liquidity and results of operations, and could more negatively affect us compared to a financial institution that operates with more geographic diversity: - demand for our products and services may decline;- loan delinquencies, problem assets and foreclosures may increase;- collateral for loans, especially real estate, may decline in value, thereby reducing customers' future borrowing power, and reducing the value of assets and collateral associated with existing loans, causing an increase in our allowance for credit losses; and - the net worth and liquidity of loan guarantors may decline, impairing their ability to honor commitments to us. Moreover, a significant decline in general economic conditions caused by inflation, recession, acts of terrorism, civil unrest, an outbreak of hostilities or other international or domestic calamities, an epidemic or pandemic, unemployment or other factors beyond our control could further impact these local economic conditions and could further negatively affect the financial results of our banking operations. In addition, deflationary pressures, while possibly lowering our operating costs, could have a significant negative effect on our borrowers, especially our business borrowers, and the values of underlying collateral securing loans, which could negatively affect our financial performance. Further, a U.S. government debt default would have a material adverse impact on our business and financial performance, including a decrease in the value of U.S. Treasury securities and other government securities held by us, which could negatively impact our capital position and our ability to meet regulatory requirements. Other negative impacts could be volatile capital markets, an adverse impact on the U.S. economy and the U.S. dollar, as well as increased default rates among borrowers in light of increased economic uncertainty. Some of these impacts might occur even in the absence of an actual default but as a consequence of extended political negotiations around the threat of such a default and a government shutdown.