Farmers & Merchants Bancorp (FMAO) Risk Factors

A significant portion of our loan portfolio is secured by real property. We may foreclose on and take title to certain real property. There is a risk that hazardous substances could be found on the property and we may be liable for remediation costs, personal injury and/or property damage. We may incur substantial expenses to comply with environmental laws which may materially reduce the property's value or limit our ability to dispose of the property. The remediation costs and any other financial liabilities associated with the property could have a material adverse effect on our financial condition and results of operations.

In deciding whether to extend credit or enter into other transactions with customers and counterparties, we may rely on information furnished by or on behalf of customers and counterparties, including financial statements and other financial information. We also may rely on representations of clients and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors and accountants if made available. If this information is inaccurate, we may be subject to regulatory action, reputational harm or other adverse effects with respect to the operation of our business, our financial condition and our results of operation.

We are subject to certain operational risks, including, but not limited to, data processing system failures and errors, customer or employee fraud and catastrophic failures resulting from terrorist acts or natural disasters. We maintain a system of internal controls to mitigate against such occurrences and maintain insurance coverage for such risks that are insurable, but should such an event occur that is not prevented or detected by our internal controls, uninsured or in excess of applicable insurance limits, it could have a significant adverse impact on our business, financial condition or results of operations. Our operations are dependent on our ability to process financial transactions in a secure manner. Failure in or breach of our operational or security systems or infrastructure, or those of our third-party vendors and other service providers, could disrupt our business or the businesses of our customers, result in the disclosure or misuse of confidential or proprietary information, damage our reputation, increase our costs and cause losses. We must ensure that information is properly protected from a variety of threats such as cyber attacks, error, fraud, sabotage, terrorism, industrial espionage, privacy violation, service interruption, and natural disaster. These threats arise from numerous sources including human error, fraud on the part of employees or third parties, technological failure, telecommunication outages, and severe weather conditions. Information security risks for financial institutions like us have increased recently in part because of new technologies, the increased use of the internet and telecommunications technologies (including mobile devices and cloud computing) to conduct financial and other business transactions, political activism, and the increased sophistication and activities of organized crime. Although we employ detection and response mechanisms designed to contain and mitigate security incidents, early detection may be thwarted by persistent sophisticated attacks and malware designed to avoid detection. Any activity that jeopardizes our network and the security of the information stored thereon may result in significant cost and have a significant adverse effect on our reputation. We maintain insurance coverage that may, subject to policy terms and conditions, cover certain aspects of cyber risks. Such insurance coverage may be insufficient to cover all losses. Any successful cyber attack or other security breach involving the misappropriation or other unauthorized disclosure of confidential customer information or that compromises our ability to function could severely damage our reputation, erode confidence in the security of our systems, products and services, expose us to the risk of litigation and liability, disrupt our operations and have a material adverse effect on our business. Any successful cyber attack may also subject the Company to regulatory investigations, litigation or enforcement, or require the payment of regulatory fines or penalties or undertaking costly remediation efforts with respect to third parties affected by a cyber security incident, all or any of which could adversely affect the Company's business, financial condition or results of operations and damage its reputation.

Our success depends upon the continued service of our senior management team and upon our ability to attract and retain qualified financial services personnel. Competition for qualified employees is intense. In our experience, it can take a significant period of time to identify and hire personnel with the combination of skills and attributes required in carrying out our strategy. If we lose the services of our key personnel or are unable to attract additional qualified personnel, our business, financial condition, results of operations and cash flows could be adversely affected. A key component of employee retention is providing a fair compensation base combined with the opportunity for additional compensation for above average performance. In this regard, the Company and the Bank use two incentive programs. The Company uses a stock award program to recognize and incentivize officers of the Bank. Under the long-term incentive compensation plan, restricted stock awards may be granted to officers. The amount of shares to be granted each year is determined by the Board Compensation Committee and may vary each year in its amount of shares and the number of recipients. The Compensation Committee determines the number of shares to be awarded overall and to the Chief Executive Officer ("CEO") specifically. The CEO then makes recommendations to the committee as to the recipients of the remaining shares. The full Board of Directors approves the action of the Committee. Since the plan's inception in 2005, all granted stock awards have utilized a three year cliff vesting feature. This is viewed as a retention aid as the awards may be forfeited should an officer leave employment during the vesting period. A second incentive program of the Bank is based on cash compensation of which almost all employees participate (excluding commission based employees and other employees paid for specific higher paid positions, such as peak time). A discussion of executive officer pay is incorporated within the proxy and as such, this discussion will pertain to all other employees. The Bank splits the incentive based on pay ranges and position with each having a percentage of base pay used for the incentive. The employees are paid a cash incentive based on the projected overall performance of the Bank in terms of Return of Average Assets ("ROA") and the achievement of pre-established team and/or individual goals. The Compensation Committee determines the target performance levels on which the percentage of pay will be based. The Committee takes into account the five and ten year trend of ROA along with budget forecasted for the next year and the Bank's past year performance. The Committee also considers the predicted banking environment under which the Bank will be operating. With the formation of the Captive, the ROA goal had been exclusive of the effect of the additional insurance expense at the Bank level, as well as other expenses as agreed upon by the Compensation Committee. The majority of lower based employees receive incentive pay in December of the same year based on the year-to-date base compensation through the last pay received in November. Higher pay range employees, often officers ("non-executive officers"), other than executive officers receive incentive pay based on additional criterion. These individuals are rewarded based on overall ROA of the Bank along with individual pre-established goals. Non-executive officers, therefore, have incentive pay at risk for individual performance. The individualized goals are recommended by each individual's supervisor and are approved by an incentive committee of the Bank. The goals are designed to improve the performance of the Bank while also limiting the risk of a short-term performance focus. For example, a lending officer may be given two goals of which one is to grow loans within specific targets and another is tied to a specific level of past dues and charge-offs. The second goal limits the ability to be rewarded for growth at all costs along with the specific target levels within the growth goal itself. Non-executive officers in a support department may be given goals which create efficiencies, ensure compliance with procedures, or generate new fee or product opportunities. On average, three to four goals were given to each non-executive officer in 2023. Non-executive officers are paid cash incentives based on the year-end ROA of the Bank and receive it within the first quarter of the following year. Should the ROA be forecasted to be positive but below the base target set by the Board, the covered non-executive officers are paid an incentive under the same basis and timing as lower based employees disclosed above. The percentages of base pay on which the incentive is calculated graduates higher as does the responsibility level of the employee and their ability to impact the financial performance of the Bank. These percentages are recommended by management to the Compensation Committee and Board for approval. The cash incentive plan along with its targets and goals are subject to modification at the Compensation Committee and Board's discretion throughout each year.

Uninsured deposits based on FDIC coverage as a percentage of total deposits was 20.9% as of September 30, 2024, and as of the same date, total uninsured deposits (includes public deposits with protection over FDIC) was 10.5%. The use of the financial network products, such as the Certificate of Deposit Account Registry (CDARS) and an Insured Cash Sweep which makes FDIC coverage available to larger depositors, contributes to the low uninsured percentage. Uninsured deposits historically have been viewed by the FDIC as less stable than insured deposits. According to statements made by the FDIC staff and the leadership of the federal banking agencies, customers with larger uninsured deposit account balances often are small- and mid-sized businesses that rely upon deposit funds for payment of operational expenses and, as a result, are more likely to closely monitor the financial condition and performance of their depository institutions. As a result, in the event of financial distress, uninsured depositors historically have been more likely to withdraw their deposits. If a significant portion of our deposits were to be withdrawn within a short period of time such that additional sources of funding would be required to meet withdrawal demands, we may be unable to obtain funding at favorable terms, which may have an adverse effect on our net interest margin. Obtaining adequate funding to meet our deposit obligations may be more challenging during periods of elevated prevailing interest rates, such as the present, and our ability to attract depositors during a time of actual or perceived distress or instability in the marketplace may be limited. Further, interest rates paid for non-deposit borrowings generally exceed the interest rates paid on deposits, and this spread may be exacerbated by higher prevailing interest rates.

Our ability to achieve strong financial performance and a satisfactory return on investment to shareholders will depend in part on our ability to expand our available financial services. In addition to the challenge of attracting and retaining customers for traditional banking services, our competitors now include securities dealers, brokers, mortgage bankers, investment advisors and finance and insurance companies who seek to offer one-stop financial services to their customers that may include services that banks have not been able or allowed to offer to their customers in the past. The increasingly competitive environment is a result primarily of changes in regulation, changes in technology and product delivery systems and the accelerating pace of consolidation among financial services providers. If we fail to adequately address each of the competitive pressures in the banking industry, our financial condition and results of operations could be adversely affected.