FNB CORP/PA/ (FNB) Business

ITEM 1.    BUSINESS

Overview

We are a Pennsylvania corporation, a bank holding company and a financial holding company. We are incorporated under the laws of the Commonwealth of Pennsylvania, and through our subsidiaries, we have been in business since 1864. Our headquarters is located at 626 Washington Place, Pittsburgh, Pennsylvania 15219. As a diversified financial services holding company, FNB, through our subsidiaries, provides a full range of financial services, principally to consumers, corporations, governments and small- to medium-sized businesses in our market areas through our subsidiary network, which is led by our largest subsidiary, FNBPA. Our business strategy focuses primarily on providing quality, consumer- and commercial-based financial services adapted to the needs of each of the markets we serve. We seek to maintain our community orientation by providing local management with certain autonomy in decision making, enabling them to respond to customer requests more quickly and to concentrate on efficiently delivering products and services within their market areas. However, we have centralized operations, support and risk functions (e.g., loan operations, treasury and enterprise risk management). The centralization of these processes enables us to maintain consistent quality of these functions and to achieve certain economies of scale.

As of December 31, 2025, we have three reportable business segments: Community Banking, Wealth Management and Insurance. Our remaining operations are described in Other. As of December 31, 2025, we have 355 Community Banking branches in Pennsylvania, Ohio, Maryland, West Virginia, North Carolina, South Carolina, Washington, D.C. and Virginia.

As of December 31, 2025, we had total assets of $50 billion, loans of $35 billion and deposits of $39 billion. See Item 7, MD&A, and Item 8, “Financial Statements and Supplementary Data,” of this Report.

Internet Information

Our website is at www.fnbcorporation.com and information regarding FNB and investor relations is located under the heading "About Us." We use our website to distribute company information, including as a means of disclosing material, non-public information and for complying with our disclosure obligations under Regulation FD. We generally post and make accessible before or promptly following the first time we use financially-related press releases, including earnings releases and supplemental financial information, various SEC filings, including annual, quarterly and current reports and proxy statements, presentation materials associated with earnings and other investor calls or events on our corporate website. Under some circumstances, the information may be relevant to investors but be directed to customers, in which case it may be accessed directly through our website's home page rather than “About Us-Investor Information.” Investors should monitor the Investor Relations portion of our website, in addition to following our press releases, SEC filings, public conference calls and webcasts. For earnings and other conference calls or events, we generally include in our posted materials a cautionary statement regarding forward-looking and non-GAAP financial information, and we provide GAAP reconciliations when we provide non-GAAP financial information. Such GAAP reconciliations may be in materials for the applicable presentations, in materials for prior presentations or in our annual, quarterly or current reports.

Information on our website is not incorporated by reference into this document and should not be considered part of this Report.

Securities and Exchange Commission Reports and Corporate Governance Information

We are subject to the informational requirements of the Securities Exchange Act of 1934 (Exchange Act) and, in accordance with the Exchange Act, we file annual, quarterly and current reports, proxy statements, and other information with the SEC. The SEC maintains an internet site (http://www.sec.gov) that contains reports, proxy and information statements, and other

3

Table of Contents

information regarding issuers that file electronically with the SEC. Our Annual Reports on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K and amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Exchange Act are also available on the "About Us" portion of our website under the heading Investor Information (accessible by clicking on the SEC Filings link) as soon as reasonably practicable after we electronically file such reports with, or furnish them to, the SEC and at the SEC’s website, www.sec.gov. Also, under the "About Us" portion of our website under the heading "Investor Information" you can click on Corporate Governance to view the following: (i) our Code of Conduct and Code of Ethics; (ii) our Corporate Governance Guidelines; (iii) the charter of each active committee of our Board of Directors; and (iv) our Policy With Respect to Related Person Transactions. We also intend to disclose any amendments to our Code of Conduct and waivers of our Code of Conduct required to be disclosed by the rules of the SEC and the NYSE on the Investor Information portion of our website. All of these corporate governance materials are also available free of charge in print to shareholders who request them in writing to: F.N.B. Corporation, Attention: Office of the Corporate Secretary, 626 Washington Place, Pittsburgh, Pennsylvania, 15219.

Business Segments

In addition to the following information relating to our business segments, more detailed information is contained in Note 24, “Business Segments” in the Notes to Consolidated Financial Statements, which is included in Item 8 of this Report. As of December 31, 2025, we had three reportable business segments, with the largest being the Community Banking segment which consists of a regional bank serving seven states and the District of Columbia. The Wealth Management segment consists of a federally chartered trust company and a subsidiary that offers broker-dealer services through a third-party networking arrangement with a non-affiliated licensed broker-dealer entity. Our former registered investment advisory company, FNBIA, client accounts were transferred to FNTC, and FNBIA was deregistered in the fourth quarter 2025 with the company currently in the process of being dissolved. The Insurance segment consists of an insurance agency and a reinsurer.

Community Banking

Our Community Banking segment consists of FNBPA, which offers commercial and consumer banking services. Commercial banking solutions include corporate banking, treasury management services, small business banking, investment real estate financing, business credit, capital markets and equipment financing. Consumer banking products and services include deposit products, mortgage lending, consumer lending and a complete suite of mobile and online banking services. Additionally, Bank Capital Services, LLC, a subsidiary of FNBPA, offers commercial loans and leases to customers in need of new or used equipment. As of December 31, 2025, our Community Banking segment operated in seven states and the District of Columbia. Our branch network spans several major metropolitan areas, including: Pittsburgh, Pennsylvania; Baltimore, Maryland; Cleveland, Ohio; Washington, D.C.; Charlotte, Raleigh, Durham and the Piedmont Triad (Winston-Salem, Greensboro and High Point) in North Carolina; and Charleston, South Carolina.

The goals of the Community Banking segment are to generate high-quality, profitable revenue growth through increased business with our current customers, attract new customer relationships through FNBPA’s current branches and expand into new and existing markets through de novo branch openings and the establishment of loan production offices. We consider the Community Banking segment an important source of revenue opportunity through products and services offered by our other business segments.

The lending philosophy of the Community Banking segment is to establish high-quality customer relationships, while minimizing credit losses by following strict credit approval standards (which include independent analysis of realizable collateral value), diversifying our loan portfolio by industry, geography, product and borrower, and conducting ongoing review and management of the loan portfolio. Commercial loans are generally made to established businesses within the geographic market areas served by the Community Banking segment.

The Community Banking segment maintains formal policies that establish underwriting standards and processes. Our commercial loan policy requires, among other things, that commercial loans be underwritten to document the borrower’s financial capacity to support the cash flow required to repay the loan. The commercial loan policy also contains additional guidelines and requirements applicable to specific loan products or lines of business. Consumer loan products are designed to meet the diverse credit needs of consumers in our markets for personal and household purposes. Our consumer loan policies and procedures require prospective borrowers to provide appropriate and accurate financial information that will assist our loan underwriting personnel in making credit decisions. Specific information requirements vary based on loan type, risk profile and secondary investor requirements, where applicable.

No material portion of the loans or deposits of the Community Banking segment has been obtained from a single customer or small group of customers, and the loss of any one customer’s loans or deposits or a small group of customers’ loans or deposits

4

Table of Contents

by the Community Banking segment would not have a material adverse effect on the Community Banking segment specifically or on FNB generally. The substantial majority of the loans and deposits have been generated within the geographic market areas in which the Community Banking segment operates.

Wealth Management

Our Wealth Management segment delivers wealth management services to individuals, corporations and retirement funds, including existing customers of the Community Banking segment, located primarily within our geographic markets.

Our Wealth Management operations are conducted through two subsidiaries of FNBPA. FNTC provides a broad range of personal and corporate fiduciary services, including the administration of decedent and trust estates. As of December 31, 2025, the fair value of trust assets under administration was approximately $14.9 billion. FNTC is required to maintain certain minimum capitalization levels in accordance with regulatory requirements. FNTC periodically measures its capital position to ensure all minimum capitalization levels are maintained.

Our Wealth Management segment also includes another subsidiary, First National Investment Services Company, LLC, which offers a broad array of investment products and services for customers of the Wealth Management segment through a networking relationship with a third-party licensed brokerage firm.

No material portion of the business of the Wealth Management segment has been obtained from a single customer or small group of customers, and the loss of any one customer’s business or the business of a small group of customers by the Wealth Management segment would not have a material adverse effect on the Wealth Management segment specifically or on FNB generally.

FNBIA was a subsidiary of FNTC that was registered as an investment adviser with the SEC and subject to the Investment Advisers Act of 1940 (Investment Advisers Act) and applicable state securities laws. FNBIA has ceased operations as an investment adviser and deregistered with the SEC as of December 31, 2025.

Insurance

Our Insurance segment operates principally through FNIA, which is a subsidiary of FNB. FNIA is a full-service insurance brokerage agency offering numerous lines of commercial and personal insurance through major carriers to businesses and individuals primarily within FNB’s geographic markets. The goals of FNIA are to grow revenue with existing clients of the Community Banking segment and to gain new clients through its own channels.

Our Insurance segment also includes a reinsurance subsidiary, Penn-Ohio. Penn-Ohio is not actively underwriting new policies. Additionally, FNBPA owns a direct subsidiary, First National Corporation, which offers title insurance products.

No material portion of the business of the Insurance segment has been obtained from a single customer or small group of customers, and the loss of any one customer’s business or the business of a small group of customers by the Insurance segment would not have a material adverse effect on the Insurance segment specifically or on FNB generally.

Other

We also operate other non-banking subsidiaries which are not considered to be reportable segments of FNB. F.N.B. Capital Corporation, LLC is a merchant banking subsidiary offering mezzanine financing options for small- to medium-sized businesses that need financial assistance beyond the parameters of typical commercial bank lending products. FNB America Securities LLC is a limited broker-dealer subsidiary, which passively participates in corporate and municipal underwritings as well as offering advice and strategic planning for small businesses regarding mergers and acquisitions and capital structure planning. In addition, we have four companies that issued TPS to third-party investors: F.N.B. Statutory Trust II, Yadkin Valley Statutory Trust I, FNB Financial Services Capital Trust I and Patapsco Statutory Trust I, the last three of which were assumed in acquisitions. FNB Financial Services, Inc. and FNB Consumer Financial Services, Inc. are subsidiaries of FNB and are the general partner and limited partner, respectively, of FNB Financial Services, LP, a company established to issue, administer and repay subordinated notes. The proceeds received from these subordinated note issuances are a general funding source for FNB. Certain financial information concerning these subsidiaries, along with the parent company and intercompany eliminations, are included in the “Parent and Other” category in Note 24, “Business Segments” in the Notes to Consolidated Financial Statements, which is included in Item 8 of this Report.

5

Table of Contents

Market Area and Competition

We operate in seven states and the District of Columbia. Our market coverage spans several major metropolitan areas, including: Pittsburgh, Pennsylvania; Baltimore, Maryland; Cleveland, Ohio; Washington, D.C.; Charlotte, Raleigh, Durham and the Piedmont Triad (Winston-Salem, Greensboro and High Point) in North Carolina; and Charleston, South Carolina.

We compete for loans, deposits and financial services business with a large number of bank and non-bank financial institutions and other lenders engaged in the business of extending credit, including financial technology companies and marketplace lenders. Competition for loans comes principally from commercial banks, savings banks, mortgage banking companies, credit unions, insurance companies and other financial services companies. The most direct competition for deposits comes from commercial banks, savings banks and credit unions. Competition for deposits also comes from non-depository competitors such as financial technology companies, mutual funds, securities and brokerage firms, government financial investments and insurance companies. In providing wealth and asset management services, as well as insurance brokerage services, our subsidiaries compete with many other financial services firms, brokerage firms, mutual fund complexes, investment management firms, trust and fiduciary service providers and insurance agencies. Competition for loans and deposits depends on a number of factors, including, among others, customer service, quality, convenience and range of products and services offered, price, reputation, interest rates on loans and deposits and lending limits. Also, our ability to continue to compete effectively depends in large part on retaining and motivating our employees and attracting new employees, while effectively managing compensation and other expenses, especially given recent inflationary wage pressures.

The ability to deploy and use technology effectively is an important competitive factor in the financial services industry. Technology is not only important with respect to the delivery of financial services, risk management, regulatory compliance and security of customer information, but also in processing information. FNB and each of our subsidiaries continually make technological investments to remain competitive in the financial services industry, including the use of AI. FNBPA has executed several initiatives that have integrated and streamlined its physical branch and e-delivery channels, including a growing fleet of ATMs with video TellerChat capabilities. Our flagship digital technology is eStore®, our proprietary online, mobile and in-branch platform where customers can shop and apply for deposit and loan products, access financial education and schedule appointments. FNBPA has enhanced eStore with our one-of-a-kind, universal eStore Common Application, which customers can use to apply for almost all of our products and services simultaneously. These select examples, coupled with our investment in data science and analytics, contribute to our ability to efficiently grow and expand customer relationships.

Human Capital

We are committed to attracting, retaining and developing exceptional talent who reflect the communities we serve.

FNB’s leadership team has made long-standing investments in maintaining a sustainable and resilient work force including providing a competitive compensation and benefits program that promotes work-life balance, financial and mental health, and overall well-being. The comprehensive package includes robust development resources promoting a culture of belonging that encourages and provides opportunity and advancement for all employees at all levels of the company, furthering our strategic focus on building and sustaining a strong workforce. Through our comprehensive approach, we have created a collaborative environment that fosters talent, opportunity, innovation and a passion to win, all of which translate to strong performance and a rewarding and opportunistic experience for all employees.

In 2025, we received more than 80 awards recognizing our financial performance, exceptional workplace, culture, community commitments, strong leadership and innovative banking approach, including national, regional and industry-specific recognition from Energage, an independent research firm, based entirely on feedback from our own team. As part of its award program, Energage highlighted FNB’s cultural excellence in categories such as innovation, leadership, work-life flexibility, professional development, and employee appreciation and well-being. Additionally, our commitment to promoting a culture of belonging and fair treatment for our employees was further celebrated by various national media outlets, including an appearance on Newsweek’s lists of America’s Greatest Workplaces, which recognized companies whose employment practices embody fairness and equality for employees.

As of December 31, 2025, FNB and our subsidiaries had 4,128 full-time and 154 part-time employees.

Recruitment. We are committed to identifying and attracting the best qualified job candidates by cultivating and fostering mutually beneficial partnerships with job and recruiting centers, colleges and universities and other organizations. We use internally created digital marketing-developed algorithms and data tools to increase job posting visibility within a broad range of job boards. We have committed to creating a strong and growing internship program to funnel high potential talent into our

6

Table of Contents

Development Programs within FNB to help with career growth. We continue to build our internal succession planning and are devoted to following the Fair Hiring Practices Act and Fair Chance Act.

Employee Development. We focus resources on programs to develop leaders and promote internal advancement within the organization. This includes mentoring and coaching programs, succession planning reviews, and leadership development programs, administered by our dedicated learning and development team to further develop the talent that our recruitment efforts have attracted. In addition, we offer tuition reimbursement for employees seeking post-secondary education, including college and graduate school.

Engagement. We regularly seek feedback from our employees and in 2025 participated in several regional Top Workplace surveys. Our outstanding scores continue to help us achieve external recognition as an employer of choice.

Compensation. Our compensation philosophy is to maintain a program that supports our mission and values. The compensation program is a management tool that, when aligned with an effective communication plan, is designed to support, reinforce, and align our values, business strategy, and operational and financial needs with our strategic goals.

We believe that compensation programs, through competitive base salary, short-term incentive plans, and long-term incentive plans, are essential for setting performance expectations, improving service quality and productivity, and recognizing contributions to our success, while also avoiding incentivizing undue risk to our financial condition.

Our executive compensation program is overseen by the Compensation Committee of our Board of Directors (composed entirely of independent directors), in collaboration with a leading independent compensation advisory firm. In addition, the oversight and review of our company-wide compensation philosophy and programs are conducted by the Management Compensation Committee. This team, chaired by FNB’s Chairman, President and Chief Executive Officer, regularly meets to promote compensation programs that are fair and impartial, to achieve a performance-driven work culture that generates company growth and to reward employees for focusing on customer needs, while avoiding inappropriate conduct regarding our clients, and demonstrating appropriate risk management behaviors.

Values & Training. We strive to maintain sound financial practices and governance processes through a commitment to ethical behavior, a solid reputation and a firm record of compliance and stability that these strengths create, both within our Corporation and for our customers. Employees complete quarterly and annual training, which include regulatory and compliance requirements and ethical standards, to maintain and increase knowledge of standards required of the financial services industry. Additionally, we provide employees various avenues to confidentially and anonymously report perceived unethical behavior without repercussions to them, such as FNB’s Ethics Hotline. We encourage employees to report any issues that could result in financial or reputational harm to us.

Wellness. Our commitment to the personal and professional well-being of each employee extends beyond a competitive compensation and benefits package. Innovative employee-friendly programs and policies designed to help team members maintain a healthy, meaningful work/life balance by providing resources to support mental, physical and financial health are offered and regularly expanded. This includes parental and caregiver leave, monetary employer contributions to employee Health Savings Accounts, adoption assistance and back-up child-care programs built to provide employees with the financial support and time away from work that they need to focus on their new family members.

Safety. Employee and customer safety remain paramount concerns for us. We demonstrate this commitment to each group through varying initiatives and procedures to ensure that employees and customers alike experience safe surroundings. We provide our employees detailed information and training explaining the safety features of our locations, evacuation routes and emergency procedures processes. Our new state-of-the-art headquarters building prioritizes employee safety in a facility that is fully ADA compliant, has full security access controls and closely manages and monitors guests and visitors entering our space. As a response to the health and safety risks exposed during the COVID-19 outbreak our headquarters building features HVAC systems that are specifically designed to mitigate risks from airborne pathogens using state-of-the-art filtration, Air Handling and Ionization indoor air systems. In 2024, our headquarters building was certified Leadership in Energy and Environmental Design (LEED) Gold by the U.S. Green Building Council. LEED, the world’s most widely used green building rating system, provides a framework for energy-efficient, sustainable design, construction and operations. Projects achieve certification by following prerequisites and earning credits related to green building, with the aim to protect resources and enhance individual human health and community quality of life, among other goals.

7

Table of Contents

Information About Our Executive Officers

The name, age and principal occupation for each of our executive officers as of January 31, 2026 are set forth below:

Government Supervision and Regulation

The financial services industry is subject to extensive regulatory oversight and, in particular, bank holding companies, banks and their affiliates (depending upon charter and business activities) are subject to supervision, regulation and examination by the FRB, OCC, FDIC, CFPB, SEC, Financial Industry Regulatory Authority (FINRA) and various state regulatory agencies. Also, FNB is subject to the rules of the NYSE for listed companies. The statutory and regulatory framework that governs FNB and our affiliates is generally intended to protect depositors and customers, the federal DIF, the U.S. banking and financial system, and financial markets as a whole, rather than our shareholders.

This discussion is qualified in its entirety by reference to applicable laws and regulations. Regulations of banks and their holding companies are subject to frequent and ongoing revision, through legislative changes, regulatory revisions and the evolving supervisory objectives of the federal and state banking agency examiners and supervisory staff. Additionally, the current U.S. administration is in the process of implementing a regulatory reform agenda that is significantly different than that of the prior administration, which affects the rulemaking, supervision, examination and enforcement priorities of the federal banking agencies. In particular, the OCC, FRB and FDIC have signaled a desire to remove excessive regulatory, supervisory and examination burdens, while prioritizing efforts to focus supervision on material financial risks. It is not possible to predict the content or timing of changes to the laws and regulations that may impact our business. Changes in such laws and regulations may have a material effect on our business and prospects. Finally, investors should be aware that the regulatory framework governing banks and the financial services industry is intended primarily to protect depositors and the DIF, not FNB, its subsidiaries or our security holders.

Political, economic, and industry events and other factors may influence changes to the banking laws, regulations and policies by the U.S. Congress, state legislatures and federal and state regulatory agencies. In addition to laws and regulations, state and federal bank regulatory agencies may issue policy statements, interpretive letters and similar written guidance, which sometimes materially changes regulatory expectations. Any change in the statutes, regulations or regulatory policies applicable to us, including changes in their interpretation, expectations or implementation, could have a material effect on our business or organization. (See discussion under Risk Factors - caption “We could be adversely affected by changes in the law, especially changes in the regulation of the banking industry.”)

General

FNB is a legal entity separate and distinct from our subsidiaries. FNB is regulated as a bank holding company under the BHC Act, as amended, which generally restricts bank holding companies from engaging in business activities other than the business of banking and certain closely related activities. FNB elected to become a financial holding company under the BHC Act and, as such, may engage in a broader range of financial and related activities. The ability to elect and maintain status as a financial holding company is subject to certain conditions, including that a bank holding company be “well-capitalized” and “well-managed.” As a bank holding company, FNB is subject to regulation, inspection, examination and supervision by the FRB, which is the “umbrella” regulator of a bank holding company’s consolidated operations. In addition, a bank holding company’s operating entities, including its subsidiary broker-dealers, investment managers, investment advisory companies, insurance companies and banks, as applicable, are subject to the jurisdiction of various federal and state “functional” regulators and self-regulatory organizations, such as FINRA.

8

Table of Contents

Our subsidiary bank, FNBPA, and FNBPA’s subsidiary trust company, FNTC, are organized as national banking associations, which are subject to regulation, supervision and examination by the OCC, which is a bureau of the UST. FNBPA is also subject to certain regulatory requirements of the CFPB, the FDIC, the FRB and other federal and state regulatory agencies, including but not limited to, requirements to maintain reserves against deposits, capital requirements, limitations regarding dividends, restrictions on the types and amounts of loans that may be granted and the interest that may be charged on loans, affiliate transactions, CRA, consumer compliance and anti-discrimination laws and unfair, deceptive or abusive acts and practices prohibitions, monitoring obligations under the BSA and anti-money laundering requirements, limitations on the types of investments that may be made, cybersecurity and consumer privacy requirements, activities that may be engaged in and types of services that may be offered. We and our subsidiaries are subject to examination by various federal and state regulators, which involves periodic examinations and supervisory inquiries, the results of which are not publicly available and can impact the conduct and growth of our businesses. These examinations consider not only safety and soundness principles, but also compliance with applicable laws and regulations.

As a regulated banking organization, FNB’s relationships and good standing with our regulators are of fundamental importance to the continuation and growth of our businesses. The FRB, OCC, FDIC, CFPB and SEC have broad enforcement powers and authority to approve, deny or refuse to act upon applications or notices of FNB or our subsidiaries to open new or close existing offices, conduct new activities, acquire or divest businesses or assets or reconfigure existing operations. Unsatisfactory examination ratings, capital ratios below well-capitalized levels, and regulatory concerns regarding management, controls, assets, operations or other factors can all potentially result in the loss of financial holding company status, practical limitations on the ability of a bank or bank (or financial) holding company to engage in new activities, grow, acquire new businesses, repurchase its stock or pay dividends or continue to conduct existing activities. In addition, if we or our subsidiaries fail to comply with applicable laws and regulations, we may be subject to civil monetary penalties, imposition of cease and desist orders or other written directives, removal of management and, in certain cases, criminal penalties imposed by our regulators.

The following discussion highlights some of the more significant regulatory requirements that govern our operations, but does not purport to be complete or to describe all of the laws and regulations that apply to us and our subsidiaries.

Capital Adequacy Requirements

The FRB, the OCC, and the FDIC have adopted risk-based and leverage capital requirements that apply to banks and bank holding companies. In general, subject to certain exceptions as discussed further below, minimum capital standards established under the agencies’ risk-based capital regulations include a CET1 capital to risk-weighted assets ratio of 4.5%, a Tier 1 capital to risk-weighted assets ratio of 6.0%, a total capital to risk-weighted assets ratio of 8.0%, and a leverage ratio of Tier 1 capital to adjusted average total assets of 4.0%. In determining the amount of risk-weighted assets for purposes of calculating risk-based capital ratios, all assets, including certain off-balance sheet assets (for example, recourse obligations, direct credit substitutes and residual interests) are multiplied by a risk-weight factor assigned by the regulations based on the risks believed inherent in the type of asset. Higher levels of capital are required for asset categories believed to present greater risk. CET1 capital is generally defined as common shareholders’ equity and retained earnings. Tier 1 capital is generally defined as CET1 and additional Tier 1 capital, which includes certain noncumulative perpetual preferred stock and related surplus and minority interests in equity accounts of consolidated subsidiaries. Total capital is defined as Tier 1 capital and Tier 2 capital, which is comprised of capital instruments and related surplus, meeting specified requirements, and may include cumulative preferred stock and long-term perpetual preferred stock, mandatory convertible securities, intermediate preferred stock and subordinated debt. Also included in Tier 2 capital is the allowance for loan losses limited to a maximum of 1.25% of risk-weighted assets. Calculation of all types of regulatory capital is subject to deductions and adjustments specified in the regulations.

In addition to establishing the minimum regulatory capital requirements, the capital regulations limit capital distributions and certain discretionary bonus payments to management if the institution does not hold a capital conservation buffer consisting of 2.5% of CET1 capital to risk-weighted assets above the amount necessary to meet its minimum risk-based capital requirements.

In assessing an institution’s capital adequacy, the OCC takes into consideration not only these numeric factors, but qualitative factors as well, and has the authority to establish higher capital requirements for individual institutions where deemed necessary.

Management believes that as of December 31, 2025, FNB and FNBPA meet all capital adequacy requirements including the capital conservation buffer.

In August 2020, the federal banking agencies issued a final rule providing banking institutions that had adopted the CECL accounting standard in the 2020 calendar year with the option to delay for two years the estimated impact of CECL on regulatory capital, followed by a three-year transition period to phase out the aggregate amount of the capital benefit provided

9

Table of Contents

during the initial two-year delay (i.e., a five-year transition in total). In connection with its adoption of CECL on January 1, 2020, FNB elected to utilize the five-year CECL transition, which concluded as of December 31, 2025.

Prompt Corrective Action

FDICIA, among other things, classifies IDIs into five capital categories (well-capitalized, adequately capitalized, undercapitalized, significantly undercapitalized and critically undercapitalized) and requires the respective federal regulatory agencies to implement systems for “prompt corrective action” for IDIs that do not meet minimum capital requirements within such categories. FDICIA imposes progressively more restrictive constraints on operations, management and capital distributions, depending on the category in which an institution is classified. Failure to meet the capital guidelines could also subject a banking institution to capital-raising requirements, restrictions on its business and a variety of enforcement remedies, including the termination of deposit insurance by the FDIC, and in certain circumstances the appointment of a conservator or receiver. An “undercapitalized” bank must develop a capital restoration plan and its parent holding company must guarantee that bank’s compliance with the plan. The liability of the parent holding company under any such guarantee is limited to the lesser of 5% of the bank’s assets at the time it became “undercapitalized” or the amount needed to comply with the plan. Furthermore, in the event of the bankruptcy of the parent holding company, the obligation under such guarantee would take priority over the parent’s general unsecured creditors. In addition, FDICIA requires the various regulatory agencies to prescribe certain non-capital standards for safety and soundness relating generally to operations and management, asset quality and executive compensation and permits regulatory action against an IDI that does not meet such standards.

The various regulatory agencies have adopted substantially similar regulations that define the five capital categories identified by FDICIA, using the CET1 capital, Tier 1 risk-based capital, total risk-based capital, and leverage capital ratios as the relevant capital measures. Under the regulations, a “well-capitalized” institution must have a CET1 risk-based capital ratio of at least 6.5%, a Tier 1 risk-based capital ratio of at least 8.0%, a total risk-based capital ratio of at least 10.0% and a leverage ratio of at least 5.0% and not be subject to a capital directive order. Under these guidelines, FNBPA was considered well-capitalized as of December 31, 2025.

Dividend Restrictions

Our primary source of funds for cash distributions to our shareholders, and funds used to pay principal and interest on our indebtedness, is dividends received from FNBPA. FNBPA is subject to federal laws and regulations governing its ability to pay dividends to FNB, including requirements to maintain capital above regulatory minimums. Under federal law, the amount of dividends that a national bank, such as FNBPA, may pay in a calendar year is generally limited to the amount of its net income for the current year combined with its retained net income for the two preceding years. In addition to dividends from FNBPA, other sources of parent company liquidity for FNB include cash, short-term investments and issuance of debt instruments, as well as dividends and loan repayments from other subsidiaries.

In addition, the ability of FNB and FNBPA to pay dividends may be affected by the various minimum capital requirements and prompt corrective action standards previously described in the “Capital Adequacy Requirements” and “Prompt Corrective Action” discussions herein. Additionally, the right of FNB, our shareholders and our creditors to participate in any distribution of the assets or earnings of our subsidiaries is further subject to the prior claims of creditors of the respective subsidiaries.

Expansion and Acquisitions

The BHC Act requires a bank or financial holding company to obtain the prior approval of the FRB before:

•the company may acquire direct or indirect ownership or control of any voting shares of any bank, if after such acquisition the bank holding company will directly or indirectly own or control more than 5% of any class of voting securities of the institution;

•any of the company’s subsidiaries, other than a bank, may acquire all or substantially all of the assets of any bank; or

•the company may merge or consolidate with any other bank or financial holding company.

The BHC Act further requires the FRB to consider the competitive impact of the transaction, the extent to which the transaction would result in greater or more concentrated risks to the stability of the U.S. banking or financial system, the financial and managerial resources and future prospects of the bank holding companies and banks concerned and the convenience and needs of the community to be served, including the applicant’s record of performance under the CRA. The FRB is also required to consider in evaluating such a transaction the effectiveness of the parties in combating money laundering activities. Provisions of the FDI Act known as the Bank Merger Act impose similar approval standards for an IDI to merge with another IDI.

10

Table of Contents

On September 17, 2024, the OCC finalized a Policy Statement Regarding Statutory Factors Under the Bank Merger Act (the Policy Statement), which outlined factors that the OCC would consider when evaluating a proposed bank merger transaction. The Policy Statement included a number of factors that would have resulted in stricter and/or more extended reviews of transactions involving particular features, such as an acquirer with open or pending enforcement actions or a resulting institution with total assets over $50 billion. Also on September 17, 2024, the DOJ withdrew its 1995 Bank Merger Guidelines and announced that it will instead evaluate the competitive impact of bank mergers using its 2023 Merger Guidelines that the DOJ applies to mergers in all industries. Compared to the 1995 Bank Merger Guidelines, the 2023 Merger Guidelines set forth more stringent concentration limits and add several largely qualitative bases on which the DOJ may challenge a merger. However, on May 8, 2025, the OCC rescinded the Policy Statement and reinstated its expedited processing procedures for streamlined business combinations. While the long-term effects of these changes and reversals for particular transactions remains unclear, the OCC has acted expeditiously on merger applications since its withdrawal of the Policy Statement, and the DOJ has not yet brought challenges against bank merger transactions under the 2023 Merger Guidelines.

The Riegle-Neal Interstate Banking and Branching Efficiency Act of 1994 (Interstate Banking Act) generally permits bank holding companies to acquire banks in any state and preempts all state laws restricting the ownership by a holding company of banks in more than one state. A bank is subject to any state requirement that the bank has been organized and operating in for a minimum period of time and the requirement that the bank holding company, after the proposed transaction, controls no more than 10% of the total amount of deposits of IDIs in the U.S. and no more than 30% or such lesser or greater amount set by the state law of such deposits in that state. The Interstate Banking Act also permits:

•a bank to merge with an out-of-state bank and convert any offices into branches of the resulting bank;

•a bank to acquire branches from an out-of-state bank; and

•a bank to establish and operate de novo interstate branches whenever the host state permits de novo branching of its own state-chartered banks.

Bank and financial holding companies and banks seeking to engage in mergers authorized by the Interstate Banking Act must be at least adequately capitalized as of the date that the application is filed, and the resulting institution must be well-capitalized and well-managed upon consummation of the transaction.

Pursuant to the Dodd-Frank Act, national and state-chartered banks may open an initial branch in a state other than its home state (e.g., a host state) by establishing a de novo branch at any location in such host state at which a bank chartered in such host state could establish a branch. Applications by a national bank to establish such branches must be filed with the OCC.

The Change in Bank Control Act prohibits a person, entity or group of persons or entities acting in concert, from acquiring “control” of a bank holding company or bank unless the FRB has been given prior notice and has not objected to the transaction. Under current FRB regulations, the acquisition of 10% or more (but less than 25%) of the voting stock of a corporation would, under the circumstances set forth in the regulations, create a rebuttable presumption of acquisition of control of the corporation.

Financial Holding Company Status and Activities

Under the BHC Act, an eligible bank holding company may elect to be a “financial holding company” and thereafter may engage in a range of activities that are financial in nature and that are not otherwise permissible for banks and bank holding companies. FNB is a financial holding company under the BHC Act.

For a bank holding company to be eligible to elect financial holding company status and to engage in additional activities and investments under such authority, all of its subsidiary U.S. depository institutions must be “well-capitalized” and “well-managed” and must have received a “Satisfactory” or better rating on its most recent CRA review. If, after becoming a financial holding company, the company’s subsidiary depository institutions fail to remain “well-capitalized” and “well-managed,” the company must enter into an agreement with the FRB to comply with all applicable capital and management requirements. If the company does not return to compliance within 180 days, the FRB may order the company to divest its subsidiary banks or the company may discontinue or divest investments in companies engaged in activities permissible only for a bank holding company that has elected to be treated as a financial holding company.

Source of Strength

According to the Dodd-Frank Act and FRB policy, a financial or bank holding company is expected to act as a source of financial strength to each of its subsidiary banks and to commit resources to support each such subsidiary. This support may be

11

Table of Contents

required at times when the parent holding company may not be able to provide such support. Consistent with the “source of strength” policy, the FRB has stated that, as a matter of prudent banking, a bank or financial holding company generally should not maintain a rate of cash dividends unless its net income has been sufficient to fully fund the dividends and the prospective rate of earnings retention appears to be consistent with our capital needs, asset quality and overall financial condition.

Dodd-Frank Act

Deposit Insurance. The FDI Act requires FNBPA to pay deposit insurance assessments. The FDIC assessment base against which an IDI’s deposit insurance premiums paid to the FDIC’s DIF are calculated as the IDI’s average consolidated total assets less its average tangible equity. Various other regulatory factors included in an FDIC assessment scorecard also affect an IDI’s assessment rate.

Deposit insurance assessments are also affected by the minimum reserve ratio with respect to the DIF. The Dodd-Frank Act increased the DIF’s minimum reserve ratio to 1.35% of the estimated amount of total insured deposits.

In addition, the Dodd-Frank Act eliminated the requirement for the FDIC to pay dividends to depository institutions when the reserve ratio exceeds certain thresholds. The FDIC may pay dividends to depository institutions when the reserve ratio exceeds 1.5%, but the FDIC has sole discretion to determine whether to suspend or limit the declaration or payment of dividends from the DIF. The FDIC has set the target designated reserve ratio at 2% since 2010. Assessment rates, which declined for all banks when the reserve ratio first surpassed 1.15% in the third quarter of 2016, increased for all insurance depository institutions by 2 basis points in the first quarter of 2023. Assessment rates will remain in effect unless and until the reserve ratio meets or exceeds 2%. The reserve ratio was 1.42% as of December 31, 2025.

Banks with more than $50 billion in total consolidated assets, such as FNBPA, are not eligible to deduct FDIC deposit insurance premium payments for U.S. federal income tax purposes. For banks with less than $50 billion in total consolidated assets, the premium deduction is phased-out based on the proportion of the bank’s assets exceeding $10 billion.

The FDIC issued a final rule in November 2023 to implement a special assessment on banks with over $5 billion in total assets to recover the loss to the DIF associated with protecting uninsured depositors following the closures of Silicon Valley Bank and Signature Bank during the first quarter of 2023. The special assessment rate was 13.44 basis points and will be paid over eight initial quarters beginning in June 2024. FNBPA recognized the entire initial special assessment expense of $29.9 million in the fourth quarter of 2023. The special assessment is not considered an FDIC premium under the Tax Cuts and Jobs Act of 2017 (TCJA) and therefore is tax deductible for federal income tax purposes. The FDIC retained the ability to extend the special assessment collection period or impose a one-time shortfall special assessment if the amount collected by the special assessment does not meet the final loss amounts of Silicon Valley Bank and Signature Bank after the termination of the receiverships. During 2024, the FDIC revised its loss estimate and projected that the special assessment would be collected for an additional two quarters beyond its initial eight-quarter collection period. As a result, FNBPA recognized an additional special assessment charge of $5.2 million in 2024. On December 16, 2025, the FDIC indicated that the special assessment would be fully recovered in the eighth assessment quarter and issued an interim final rule to reduce the special assessment rate for the eighth and final collection quarter, resulting in a $5.6 million reduction to our FDIC special assessment in 2025.

Brokered Deposits. Section 29 of the FDI Act and FDIC regulations issued thereunder limit the ability of an IDI, such as FNBPA, to accept, renew or roll over brokered deposits unless the IDI is well-capitalized under the “prompt corrective action” framework described below, or unless it is adequately capitalized and obtains a waiver from the FDIC. In addition, IDIs that are less than well-capitalized are subject to restrictions on the interest rates that they may pay on deposits. The characterization of deposits as “brokered” may result in the imposition of higher deposit insurance assessments on such deposits. FDIC regulations and guidance define the term “deposit broker” and related terms. For example, FDIC regulations implementing the Economic Growth, Regulatory Relief and Consumer Protection Act include a limited exception to status as brokered deposits for reciprocal deposits for IDIs that are well-managed and well-capitalized (or adequately capitalized and have obtained a waiver from the FDIC, as mentioned above). Under the limited exception, qualified IDIs are able to exclude from treatment as “brokered” deposits up to $5 billion or 20% of the institution’s total liabilities in reciprocal deposits (which is defined as deposits received by a financial institution through a deposit placement network with the same maturity (if any) in the same aggregate amount as deposits placed by the institution in other network member banks).

Transactions with Affiliates. Pursuant to Sections 23A and 23B of the Federal Reserve Act, as implemented by Regulation W, banks are subject to restrictions that limit certain types of transactions between banks and their affiliates. In general, banks are subject to quantitative and qualitative limits on extensions of credit, purchases of assets and certain other transactions involving affiliates. Also, transactions between banks and their non-bank affiliates are required to be on arm's-length terms and consistent with safe and sound banking practices.

12

Table of Contents

Transactions with Insiders. Banks are subject to restrictions that limit their lending to insiders. The Dodd-Frank Act also places restrictions on certain asset sales to and from an insider of an IDI, including requirements that such sales be on market terms and, in certain circumstances, receive the approval of the IDI’s board of directors.

Lending Limits. Federal banking law limits a national bank’s ability to extend credit to one person or group of related persons to an amount that does not exceed certain thresholds.

Volcker Rule. Section 619 of the Dodd-Frank Act (known as the Volcker Rule) generally prohibits, subject to certain exceptions, IDIs and their affiliates from engaging in proprietary trading or having certain ownership interests in and relationships with hedge funds or private equity funds, which are referred to as “covered funds.” The Volcker Rule’s implementing regulations also require certain regulated entities to establish an internal compliance program that is consistent with the extent to which those entities engage in activities covered by the Volcker Rule.

Debit Card Interchange Fees. The FRB, pursuant to its authority under the Dodd-Frank Act, has implemented rules regarding interchange fees charged for electronic debit transactions by payment card issuers having assets over $10 billion, adopting a per-transaction interchange cap base of $0.21 plus 0.05% of the transaction total (and an additional one cent to account for fraud protection costs). In October 2023, the FRB proposed to lower the base component of regulated debit from 21 cents to 14.4 cents. In addition, the ad valorem component would decline to 4 basis points, from its current rate of 5 basis points. However, the fraud-prevention adjustment would increase from 1.0 cents to 1.3 cents. The maximum permissible interchange fee for a $50 debit card transaction would be 17.7 cents under the proposal, down from 24.5 cents under the current rule. The FRB has also proposed that the interchange rate cap will be automatically updated every two years based on the data collected from issuers. Comments were due in May 2024, and the FRB has not yet finalized the proposal. In August 2025, a Federal District Court in North Dakota vacated the FRB’s existing interchange fee limit rules on the grounds that the FRB exceeded its authority when issuing the caps by considering costs to debit card issuers that it was not permitted to consider under the Dodd-Frank Act. The District Court’s ruling is stayed pending appeal, and it is not clear what effect, if any, the ruling will have on the FRB’s pending proposal.

Resolution Planning

The FDIC requires certain IDIs with more than $50 billion in total consolidated assets to submit to the FDIC periodic plans for resolution in the event of the institution’s failure. In June 2024, the FDIC finalized amendments to the resolution planning requirements for IDIs with $50 billion or more in total assets. The amendments require IDIs with between $50 billion and $100 billion in assets, which includes FNBPA, to submit informational filings on a three-year cycle, with an interim supplement updating key information submitted in the off years. The final rule became effective October 1, 2024.

On April 18, 2025, the FDIC announced it was waiving the requirement for covered IDIs to submit content that required speculative analysis or information that was of relatively low value and released Frequently Asked Questions that clarified its approach to reviewing plan submissions under the 2024 rule. Additionally, on December 31, 2025, the FDIC announced that it plans to propose changes to the covered IDI rule in 2026 to codify the content waivers provided in April 2025 and to ensure that the information most critical to supporting the FDIC’s ability to execute a rapid, low-cost failed bank resolution under the FDI Act is available to the FDIC in covered IDI plans, while eliminating requirements that might distract from this objective or that otherwise provide relatively low value. The FDIC also stated that institutions that become covered IDIs prior to the issuance of a final rule will not be required to file plans until a final rule is issued. FNBPA is not a covered IDI but may become one if the average of its total assets on its four most recent Consolidated Reports of Condition and Income exceeds $50 billion.

Community Reinvestment Act and Fair Lending

The CRA requires depository institutions to assist in meeting the credit needs of their entire market areas consistent with safe and sound banking practices. Under the CRA, each depository institution is periodically evaluated and rated on its performance meeting the credit needs of its market areas by, among other things, providing credit to and investments in low- and moderate-income individuals and communities. An institution’s CRA rating can be reduced if the reviewing agency finds evidence of discriminatory or other illegal credit practices. In order for a financial holding company to commence any new activity permitted by the BHC Act, or to acquire any company engaged in any new activity permitted by the BHC Act, each IDI subsidiary of the financial holding company must have received a rating of at least “Satisfactory” in its most recent examination under the CRA. Furthermore, federal banking regulators take into account CRA ratings when considering acquisitions of control and new activities. The OCC's most recent publication of FNBPA's CRA performance evaluation is an “Outstanding” rating.

13

Table of Contents

In October 2023, the FDIC, FRB and OCC issued a joint final rule to modernize their respective CRA regulations. The revised rules substantially alter the methodology for assessing compliance with the CRA, with material aspects taking effect on January 1, 2026, and revised data reporting requirements taking effect on January 1, 2027. The final rule is currently enjoined while a federal court considers a lawsuit challenging the rule, and in July 2025, the agencies issued a joint notice of proposed rulemaking to rescind the final rule and replace it with regulations substantively identical to those in effect on March 29, 2024.

In October 2021, the DOJ announced an initiative to combat redlining through utilization of its fair lending prosecutorial authority and has announced the settlement of a number of bank investigations concerning redlining and other violations of the fair lending laws, including a February 5, 2024 announcement that Yadkin Bank (Yadkin) and its successor by merger, FNBPA, reached a settlement with the DOJ and the State of North Carolina to resolve their fair lending allegations related to the assessment of mortgage lending activities during a five-year period in the Winston-Salem and Charlotte, North Carolina majority Black and Hispanic census tracts (MBHCTs) that began prior to Yadkin’s merger with FNBPA in March 2017. The DOJ investigation encompassed mortgage lending activity by both Yadkin prior to the acquisition and FNBPA in the early years following its entry into the North Carolina markets. Although FNBPA denies the DOJ’s allegations, FNBPA cooperated fully to reach a settlement agreement in this inherited matter as a good faith effort to avoid prolonged litigation. FNBPA is required to have a fair lending program that is of sufficient scope to monitor fair lending and that appropriately remediates issues which were identified during the DOJ investigation as well as add additional branches and increase marketing and mortgage and home equity loan subsidies in these MBHCTs. Specifically, leveraging its previously announced and longstanding commitment to underserved communities across its footprint (including Charlotte and Winston Salem North Carolina), FNBPA entered into settlement agreements with the DOJ and the North Carolina DOJ whereby it committed to invest a minimum of $11.75 million in a mortgage loan subsidy fund over a five-year period ending in 2029. Effective January 2026, FNBPA had fully deployed the $11.75 million mortgage subsidy in the Charlotte and Winston Salem MBHCTs. FNBPA has also agreed to spend approximately $1.75 million over the five-year period on community partnerships, advertising, community outreach and consumer education, of which, FNBPA has also agreed to open three new branch offices in predominantly Black and Hispanic neighborhoods, with two in Charlotte and one in Winston Salem, North Carolina (two opened in 2025 and the third branch will soon begin the construction phase). FNBPA believes the terms of the settlement agreement are consistent with its broad focus on promoting equity and economic prosperity in the markets that it serves. The settlement does not include any civil money penalties against FNBPA.

Consumer Protection Statutes and Regulations

FNBPA is subject to various federal consumer protection laws and regulations including the Truth in Lending Act, Truth in Savings Act, ECOA, Fair Housing Act, Real Estate Settlement Procedures Act, Fair Debt Collection Practices Act, Fair Credit Reporting Act, Electronic Fund Transfer Act and Home Mortgage Disclosure Act, and regulations and guidance promulgated thereunder by the CFPB and the federal banking agencies, as well as certain state consumer protection requirements. Among other things, these laws and regulations:

•require banks to disclose credit terms in meaningful and consistent ways;

•prohibit discrimination against an applicant in any consumer or business credit transaction;

•prohibit discrimination in housing-related lending activities;

•require banks to collect and report applicant and borrower data regarding loans for home purchases or improvement projects;

•require lenders to provide borrowers with more detailed information regarding the nature and cost of real estate settlements;

•prohibit certain lending practices and limit escrow account amounts with respect to real estate transactions;

•prescribe possible penalties for violations of the requirements of consumer protection statutes and regulations;

•require prescribed consumer disclosures and the adoption of error resolution procedures and other consumer protection protocols with respect to electronic fund transfers; and

•prohibit unfair, deceptive or abusive acts and practices in connection with consumer loans, the collection of debt, and the provision of other consumer financial products and services, including identifying risks associated with certain overdraft practices.

We have incurred and may in the future incur additional costs in complying with the above-identified consumer requirements. In addition, there is continued uncertainty about the CFPB’s priorities under the current U.S. administration. For example, in February 2025, the Acting Director of the CFPB instructed agency staff to pause most activity, including supervision and

14

Table of Contents

enforcement. While it is presently unclear when and to what extent the CFPB will resume its activities, other governmental authorities, including state attorneys general or banking regulators, may seek to increase their regulation, supervision, and enforcement of providers of consumer financial products and services in response to changes at the CFPB. Moreover, changes at the CFPB may lead to federal legislative efforts to alter the framework for consumer financial services regulation.

Financial Privacy

In accordance with the GLB Act, federal banking regulators adopted rules that limit the ability of banks, financial institutions and third parties that are not financial institutions but that receive non-public personal information from non-affiliated banks and financial institutions to disclose non-public information about consumers to non-affiliated third parties. These limitations require disclosure of privacy policies to consumers and, in some circumstances, allow consumers to prevent disclosure of certain personal information to a non-affiliated third party. The privacy provisions of the GLB Act affect how consumer information is transmitted through diversified financial companies and conveyed to outside vendors.

Cybersecurity

The federal banking agencies have adopted guidelines for establishing information security standards and cybersecurity programs for implementing safeguards under the supervision of a banking organization’s board of directors. These guidelines, along with related regulatory materials, increasingly focus on risk management, processes related to information technology and operational resiliency, and the use of third parties in the provision of financial services. The OCC as part of its bank supervision operational plan has prioritized review of national banks' information security, data protection and third-party risk management, including the extent to which national banks are positioned to assess the evolving cyber-threat environment and maintain resilient defenses against such threats.

Under a November 2021 interagency rule, banking organizations are required to notify their primary federal regulator as soon as possible and no later than 36 hours after the discovery of a "computer security incident" that rises to the level of a "notification incident" within the meaning attributed to those terms. Banks' non-affiliated service providers are required to notify any affected bank to or on behalf of which the service provider provides services "as soon as possible" after determining that it has experienced an incident that materially disrupts or degrades, or is reasonably likely to materially disrupt or degrade, covered services provided to such bank for as much as four hours.

The Strengthening American Cybersecurity Act of 2022 (SACA) requires enhanced disclosures regarding cybersecurity risk management strategy, governance and incident reporting, with the aim of standardizing cybersecurity processes and disclosure requirements. SACA requires critical infrastructure companies, such as financial institutions, to report "substantial cyber-incidents" and all ransom payments to the U.S. Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA). The definition of a "covered cyber-incident" will be determined by CISA rulemaking, but SACA provides that, at a minimum, an incident must be reported if it: (1) leads to "substantial loss of confidentiality, integrity, or availability" of an information system or network or a "serious impact on the safety and resiliency of operational systems and processes"; (2) causes a "disruption of business or industrial operations, including due to a denial of service attack, ransomware attack, or exploitation of a zero day vulnerability" against an information system or network, or an operational technology system or process; or (3) involves "unauthorized access or disruption of business or industrial operations" due to a "compromise of a cloud service provider, managed service provider, or other third-party data hosting provider or by a supply chain compromise". In addition, in July 2023, the SEC issued a final rule that requires prompt disclosure of material cybersecurity incidents, as well as annual disclosures regarding cybersecurity risk management, strategy and governance.

Anti-Money Laundering Initiatives and the USA PATRIOT Act

A major focus of governmental policy on financial institutions in recent years has been aimed at combating money laundering and terrorist financing. The USA PATRIOT Act of 2001 (USA PATRIOT Act), which amended the BSA, substantially broadened the scope of U.S. anti-money laundering laws and regulations by imposing significant new compliance and due diligence obligations, creating new crimes and penalties and expanding the extra-territorial jurisdiction of the U.S. The UST and federal banking agencies have issued a number of regulations that apply various requirements of the USA PATRIOT Act to financial institutions such as FNBPA. These regulations require financial institutions to maintain appropriate policies, procedures and controls to detect, prevent and report money laundering and terrorist financing and to verify the identity of their customers. These regulations include express requirements regarding risk-based procedures for conducting ongoing customer due diligence. Such procedures require banks to take appropriate steps to understand the nature and purpose of customer relationships. In addition, absent an applicable exclusion, banks must identify and verify the identity of the beneficial owners of all legal entity customers at the time a new account is established. The failure of a financial institution to maintain and

15

Table of Contents

implement adequate programs to combat money laundering and terrorist financing, or to comply with all of the relevant laws or regulations, could have serious legal, including criminal law enforcement, and reputational consequences for the institution.

Federal regulators evaluate the effectiveness of an applicant in combating money laundering when determining whether to approve a proposed bank merger, acquisition, restructuring, or other expansionary activity. There have been a number of significant enforcement actions by regulators, as well as state attorneys general and the DOJ, against banks, broker-dealers and non-bank financial institutions with respect to these laws and some have resulted in substantial penalties, including criminal pleas. FNB and its subsidiaries have implemented policies and procedures that it believes comply with these laws.

On January 1, 2021, Congress passed the National Defense Authorization Act, which enacted the most significant overhaul of the BSA and related anti-money laundering laws since the USA PATRIOT Act. Notable amendments include: (i) significant changes to the collection of beneficial ownership information and the establishment of a beneficial ownership registry maintained by the UST’s Financial Crime Enforcement Network (FinCEN); (ii) enhanced whistleblower provisions; (iii) increased penalties for violations of the BSA; (iv) improvements to existing information-sharing provisions that permit financial institutions to share information relating to suspicious activity reports with certain foreign branches, subsidiaries, and affiliates; and (v) expanded duties and powers of FinCEN. On March 31, 2025, FinCEN issued an interim final rule that largely eliminated the beneficial ownership collection requirements with respect to U.S. companies and U.S. persons.

Office of Foreign Assets Control Regulation

The U.S. has instituted economic sanctions which affect transactions with designated foreign countries, nationals and others. These are sometimes known as the “OFAC rules” because they are administered by the UST Office of Foreign Assets Control (OFAC). The OFAC-administered sanctions target countries and territories in various ways. Generally, however, they contain one or more of the following elements: (i) restrictions on trade with or investment in a sanctioned country/territory, including prohibitions against direct or indirect imports from and exports to a sanctioned country, and prohibitions on engaging in transactions to or from (including investments in, or providing investment-related advice or assistance to) a sanctioned country/territory; and (ii) prohibition on dealing with, and a requirement to block assets of, specified individuals, entities, or governments. Blocked assets (such as property and bank deposits) cannot be paid out, withdrawn, set off or transferred in any manner without a license from OFAC. Failure to comply with these sanctions could have serious legal and reputational consequences.

Incentive Compensation

The Dodd-Frank Act requires the federal bank regulators and the SEC to establish joint regulations or guidelines prohibiting incentive-based payment arrangements at specified regulated entities, including us and FNBPA, having at least $1 billion in total assets that encourage inappropriate risks by providing an executive officer, employee, director or principal shareholder with excessive compensation, fees, or benefits or that could lead to material financial loss to the entity. In addition, these regulators must establish regulations or guidelines requiring enhanced disclosure to regulators of incentive-based compensation arrangements.

The federal banking agencies have issued comprehensive guidance on incentive compensation policies intended to ensure that the incentive compensation policies of banking organizations do not undermine the safety and soundness of such organizations by encouraging excessive risk-taking. This guidance, which covers all employees that have the ability to materially affect the risk profile of an organization, either individually or as part of a group, is based upon the key principles that a banking organization’s incentive compensation arrangements should (i) provide incentives that appropriately balance risk and financial results in a manner that does not encourage employees to expose their organizations to imprudent risk, (ii) be compatible with effective controls and risk management, and (iii) be supported by strong corporate governance, including active and effective oversight by the organization’s board of directors.

During the second quarter of 2016, the U.S. financial regulators, including the FRB and the SEC, proposed revised rules on incentive-based payment arrangements at specified regulated entities having at least $1 billion in total assets. In May 2024, certain of these U.S. financial regulators re-proposed the same regulatory text with a request for public comment on alternative approaches to certain regulatory provisions under consideration by the regulators. These proposed rules have not been finalized.

The FRB will review, as part of the regular, risk-focused examination process, the incentive compensation arrangements of banking organizations, such as us, that are not “large, complex banking organizations.” These reviews will be tailored to each organization based on the scope and complexity of the organization’s activities and the prevalence of incentive compensation arrangements. The findings of the supervisory initiatives will be included in reports of examination. Deficiencies will be incorporated into the organization’s supervisory ratings, which can affect the organization’s ability to make acquisitions and

16

Table of Contents

take other actions. Enforcement actions may be taken against a banking organization if its incentive compensation arrangements or related risk management control or governance processes pose a risk to the organization’s safety and soundness and the organization is not taking prompt and effective measures to correct the deficiencies. The scope and content of federal bank regulatory agencies’ policies on executive compensation are continuing to develop and are likely to continue evolving in the future.

In October 2023, the NYSE adopted a rule as required by the SEC’s 2022 rulemaking that requires listed companies to adopt policies mandating the recovery or “clawback” of excess incentive-based compensation earned by a current or former executive officer during the three fiscal years preceding a required accounting restatement, including to correct an error that would result in a material misstatement if the error were corrected in the current period or left uncorrected in the current period. The excess compensation would be based on the amount the executive officer would have received had the incentive-based compensation been determined using the restated financials. We timely adopted an executive compensation clawback policy in order to comply with this regulation and the listing standards of the NYSE, and a copy of the policy is filed as an exhibit to this Annual Report.

Investment Advisers Act

Until December 31, 2025, FNBIA operated as an investment adviser under the Investment Advisers Act and as such was supervised by the SEC and subject to various legal and regulatory obligations (e.g., record keeping, operational and marketing requirements, disclosure requirements, etc.). FNBIA ceased operations and deregistered as an investment adviser effective December 31, 2025. Although we no longer have a subsidiary that is registered as an investment adviser with the SEC, violations of the Investment Advisers Act by FNB or our subsidiaries (including past violations by FNBIA), could result in investigations, sanctions, fines, disgorgement and reputational damage.

Standard of Care

Pursuant to the Dodd-Frank Act, the SEC adopted a package of rule-makings and interpretations related to the provision of advice by broker-dealers and investment advisers, including Regulation Best Interest and Form CRS. Among other things, Regulation Best Interest requires a broker-dealer to act in the best interest of a retail client when making a recommendation to that client of any securities transaction or investment strategy involving securities. Form CRS requires that broker-dealers and investment advisers provide retail investors with a brief summary document containing simple, easy-to-understand information about the nature of the relationship between the parties. Our implementation of these regulations resulted in the review and modification of certain of our policies and procedures and associated supervisory and compliance controls, as well as the implementation of additional client disclosures, which included us providing related education and training to financial advisors. Various states have also proposed, or adopted, laws and regulations seeking to impose new standards of conduct on broker-dealers that may differ from the SEC's regulations, which may lead to additional implementation costs.

In April 2024, the Department of Labor (DOL) issued a final rule significantly expanding the definition of “investment advice fiduciary” under ERISA, as well as amendments to certain prohibited transaction class exemptions (PTEs). Two federal district courts separately issued nationwide stays of the effective date of the final rule and PTE amendments pending consideration of the merits, which the DOL has since declined to appeal. In September 2025, the DOL announced it would be revisiting the definition of "investment fiduciary" with the objective of issuing a new rule in 2026. As of the date of this filing, the DOL has not published a proposed new rule. We will continue to monitor developments in this regard, as well as other related regulatory and legislative matters, including regarding environmental, social and governance matters and alternative assets investing under ERISA, and evaluate any potential impacts to our business.

Insurance Agencies

Certain FNB subsidiaries are subject to licensing requirements and extensive regulation under the laws of the Commonwealth of Pennsylvania and the various states in which they conduct insurance agency business. Insurance activities are subject to regulation by the states in which such business is transacted. These laws and regulations are primarily for the protection of policyholders. In all jurisdictions, the applicable laws and regulations are subject to amendment or interpretation by regulatory authorities. Generally, those authorities are vested with relatively broad discretion to grant, renew and revoke licenses and approvals and to implement regulations. Licenses may be denied or revoked for various reasons, including for regulatory violations or upon conviction for certain crimes. Possible sanctions that may be imposed for violation of regulations include the suspension of individual employees, limitations on engaging in a particular business for a specified period of time, revocation of licenses, censures and fines.

17

Table of Contents

Penn-Ohio is subject to examination by the Arizona Department of Insurance. Representatives of the Arizona Department of Insurance periodically determine whether Penn-Ohio has maintained required reserves, established adequate deposits under a reinsurance agreement and complied with reporting requirements under the applicable Arizona statutes.

Heightened Standards for Risk Management Governance

The OCC’s Heightened Standards establish guidelines for the governance and risk management practices of OCC-regulated institutions with average total consolidated assets of $50 billion or greater. These Heightened Standards require covered banks to establish and adhere to a written risk management governance framework in order to manage and control their risk-taking activities, provide standards for covered banks’ boards of directors to oversee the risk governance framework, and describe the appropriate risk management roles and responsibilities of front line units, independent risk management, and internal audit functions. FNBPA currently has total consolidated assets of $50 billion and has made substantial progress implementing the necessary enhancements to strengthen risk management and governance practices required for compliance to Heightened Standards. The remaining work will be completed in 2026, with focus on maturing risk management framework execution, continuous process improvement, and optimization through the deployment of technology capabilities. Establishing this risk management framework entailed additional costs for OCC-regulated institutions preparing to comply with the Heightened Standards Guidelines. On December 23, 2025, the OCC issued a proposal for comment in the Federal Register to amend the Heightened Standards requirements to increase the average total consolidated assets threshold for applying the guidelines from $50 billion to $700 billion.

Monetary Policy

The operations of FNB and our subsidiaries are affected not only by general economic conditions, but also by the policies of various regulatory authorities and the current U.S. administration. In particular, the FRB regulates monetary policy and interest rates in order to influence general economic conditions. These policies have a significant influence on overall growth and distribution of loans, investments and deposits and affect interest rates charged on loans or paid for deposits. FRB monetary policies have had a significant effect on the operating results of all financial institutions in the past and may continue to do so in the future.

In view of changing conditions in the national economy and in money markets, as well as the effect of credit policies by monetary and fiscal authorities, including the FRB, it is difficult to predict the impact of possible future changes in interest rates, deposit levels and loan demand, or their effect on our business and earnings or on the financial condition of our various customers (see discussion under Risk Factors - caption “We could be adversely affected by changes in the law, especially changes in the regulation of the banking industry.”)

Available Information

We make available through our website at www.fnbcorporation.com, free of charge, our Annual Report on Form 10-K, Quarterly Reports on Form 10-Q and Current Reports on Form 8-K (and amendments to any of the foregoing) as soon as reasonably practicable after such reports are filed with or furnished to the SEC. Information on our website is not incorporated by reference into this document and should not be considered part of this Report. Our common stock is traded on the NYSE under the symbol “FNB”.