NATIONAL BANKSHARES INC (NKSH) Business

Item 1. Business

History and Business

National Bankshares, Inc. (the “Company” or “NBI”) is a financial holding company that was organized in 1986 under the laws of Virginia and is registered under the Bank Holding Company Act of 1956, as amended ("BHCA"). National Bankshares, Inc. common stock is listed on the Nasdaq Capital Market and is traded under the symbol “NKSH.” It conducts most of its operations through its wholly-owned community bank subsidiary, The National Bank of Blacksburg (the “Bank” or “NBB”). It also owns National Bankshares Financial Services, Inc. (“NBFS”), which does business as National Bankshares Insurance Services and National Bankshares Investment Services. References in this report to “we,” “us,” or “our” refer to NBI unless the context indicates that the reference is to NBB.

The National Bank of Blacksburg

The National Bank of Blacksburg, which does business as National Bank, was originally chartered in 1891 as the Bank of Blacksburg. Its state charter was converted to a national charter in 1922 and it became The National Bank of Blacksburg. In 2004, NBB purchased Community National Bank of Pulaski, Virginia. In May 2006, Bank of Tazewell County, a Virginia bank which since 1996 was a wholly-owned subsidiary of NBI, was merged with and into NBB. On June 1, 2024, NBB purchased Frontier Community Bank ("FCB"), a Virginia bank.

NBB is a community-oriented financial institution headquartered in Blacksburg, Virginia. Through 28 banking locations across southwest, western and central Virginia, including a new branch opened in 2025 in Roanoke, Virginia, a recently upgraded Lynchburg, Virginia location and a loan production office in Charlottesville, Virginia, NBB offers a full range of retail and commercial banking services to individuals, businesses, non-profits and local governments. NBB offers telephone, mobile and internet banking and it operates 26 automated teller machines (“ATMs”) in its service area.

The Bank’s primary source of revenue stems from lending activities. The Bank focuses lending on small and mid-sized businesses and individuals. Loan types include commercial and agricultural, commercial real estate, construction for commercial and residential properties, residential real estate, home equity and various consumer loan products. The Bank believes its prudent lending policies align its underwriting and portfolio management with its risk tolerance and income strategies. Underwriting and documentation requirements are tailored to the unique characteristics and inherent risks of each loan category.

Deposit products offered by the Bank include interest-bearing and non-interest bearing demand deposit accounts, money market deposit accounts, savings accounts, certificates of deposit, health savings accounts and individual retirement accounts. Deposit accounts are offered to both individuals and commercial businesses. Business and consumer debit and credit cards are available. NBB offers other miscellaneous services normally provided by commercial banks, such as letters of credit, night depository, safe deposit boxes, utility payment services and automatic funds transfer. NBB conducts a general trust business that has wealth management, trust and estate services for individual and business customers.

As of December 31, 2025, NBB had total assets of $1,821,703 and total deposits of $1,646,795. NBB’s net income for 2025 was $16,858, which produced a return on average assets of 0.93% and a return on average equity of 10.93%. Refer to Note 11 of Notes to Consolidated Financial Statements for NBB’s risk-based capital ratios.

National Bankshares Financial Services, Inc.

In 2001, National Bankshares Financial Services, Inc. was formed in Virginia as a wholly-owned subsidiary of NBI. NBFS offers non-deposit investment products and insurance products for sale to the public. NBFS works cooperatively with Osaic, Inc. to provide investments and with Bearing Insurance Group, LLC for insurance products. NBFS does not significantly contribute to NBI’s net income.

Acquisition of Frontier Community Bank

On June 1, 2024 (the "acquisition date"), the Company completed its acquisition of FCB, a Virginia chartered commercial bank, in accordance with the definitive merger agreement, dated January 23, 2024, by and among the Company, the Bank, and FCB. For more information on the completed acquisition, see Note 22: Business Combination.

3

Table of Contents

Operating Revenue

The following table displays components that contributed 15% or more of the Company’s total operating revenue for the years indicated.

Market Area

The Company serves customers through its offices in southwest, western and central Virginia. Although largely rural, the market area is home to several major state-supported universities, including Virginia Polytechnic Institute and State University (“Virginia Tech”) and Radford University. The branches acquired in 2024 and the loan production office in Charlottesville also service areas that contain the University of Virginia, James Madison University, Virginia Military Institute, Washington and Lee University, Liberty University, and Mary Baldwin University.

In addition to education, the market area has a diverse economic base with manufacturing, agriculture, tourism, healthcare, retail and service industries. Large manufacturing facilities in the region include Celanese Acetate, the largest employer in Giles County, and Volvo Heavy Trucks, the largest company in Pulaski County. Tazewell County's economic base is centered on the coal mining industry and agriculture. Montgomery County, Bluefield in Tazewell County, Abingdon in Washington County and the cities of Roanoke, Charlottesville, Waynesboro, Lynchburg and Staunton are regional retail centers and have facilities to provide basic health care for the regions.

NBI’s market area offers the advantages of a good quality of life, scenic beauty, moderate climate and historical and cultural attractions. Because NBI’s market area is economically diverse and includes large public employers, it has historically avoided the most extreme effects of past economic downturns. Future economic challenges may impact unemployment and other economic indicators that could negatively affect the Company’s market.

Competition

The banking and financial services industry is highly competitive. The competitive business environment is a result of changes in regulation, changes in technology and product delivery systems and competition from other financial institutions as well as non-traditional financial services. NBB competes for loans and deposits with other commercial banks, credit unions, securities and brokerage companies, mortgage companies, insurance companies, retailers, automobile companies and other nonbank financial service providers. Many of these competitors are much larger in total assets and capitalization, have greater access to capital markets and offer a broader array of financial services than NBB. In order to compete, NBB relies upon a deep knowledge of its markets, a service-based business philosophy, personal relationships with customers, speci alized services tailored to meet customers’ needs and the convenience of office locations and technological access. In addition, the Bank is competitive with other financial institutions in its market area with respect to interest rates paid on deposit accounts, interest rates charged on loans and other service charges on loans and deposit accounts.

Organization and Employment

NBI, NBB and NBFS are organized in a holding company/subsidiary structure. As of December 31, 2025, NBB had 243 full time employees and 11 part time employees. NBFS had two full time employees and 1 part time employee.. NBB performs services for and charges commensurate fees to NBI and NBFS.

Regulation, Supervision and Government Policy

NBI and NBB are subject to state and federal banking laws and regulations that provide for general regulatory oversight of all aspects of their operations. As a result of substantial regulatory burdens on banking, financial institutions like NBI and NBB are at a disadvantage to other competitors who are not as highly regulated, and NBI and NBB’s costs of doing business are accordingly higher. The following is a brief summary of certain laws, rules and regulations that affect NBI and NBB.

National Bankshares, Inc.

NBI is a bank holding company qualified as a financial holding company under the BHCA, which is administered by the Board of Governors of the Federal Reserve System (the “Federal Reserve”). As such, NBI is subject to the supervision, examination, and reporting requirements of the BHCA and the regulations of the Federal Reserve. NBI is required to furnish to the Federal Reserve an annual report of its operations at the end of each fiscal year and such additional information as the Federal Reserve may require pursuant to the BHCA. The Federal Reserve is authorized to examine NBI and its subsidiaries. With some limited exceptions, the BHCA requires

4

Table of Contents

a bank holding company to obtain prior approval from the Federal Reserve before acquiring or merging with a bank or before acquiring more than 5% of the voting shares of a bank unless it already controls a majority of shares.

The Bank Holding Company Act. Under the BHCA, a bank holding company is generally prohibited from engaging in nonbanking activities unless the Federal Reserve has found those activities to be incidental to banking. Amendments to the BHCA that were included in the Gramm-Leach-Bliley Act of 1999 (see below) permitted any bank holding company with bank subsidiaries that are well-capitalized, well-managed and which have a satisfactory or better rating under the Community Reinvestment Act (see below) to file an election with the Federal Reserve to become a financial holding company. A financial holding company may engage in any activity that is (i) financial in nature, (ii) incidental to a financial activity or (iii) complementary to a financial activity. Financial activities include insurance underwriting, insurance agency activities, securities dealing and underwriting and providing financial, investment or economic advising services. NBI is a financial holding company that currently engages in insurance agency activities and provides financial, investment or economic advising services.

The Virginia Banking Act. The Virginia Banking Act requires all Virginia bank holding companies to register with the Virginia State Corporation Commission (the “Commission”). NBI is required to report to the Commission with respect to its financial condition, operations and management. The Commission may also make examinations of any bank holding company and its subsidiaries and must approve the acquisition by a Virginia bank holding company of ownership or control of more than 5% of the voting shares of any Virginia bank or bank holding company.

The Gramm-Leach-Bliley Act. The Gramm-Leach-Bliley Act (“GLBA”) permits significant combinations among different sectors of the financial services industry, allows for expansion of financial service activities by bank holding companies and offers financial privacy protections to consumers. GLBA preempts most state laws that prohibit financial holding companies from engaging in insurance activities. GLBA permits affiliations between banks and securities firms in the same holding company structure, and it permits financial holding companies to directly engage in a broad range of securities and merchant banking activities.

The Sarbanes-Oxley Act. The Sarbanes-Oxley Act (“SOX”) protects investors by improving the accuracy and reliability of corporate disclosures. It impacts all companies with securities registered under the Securities Exchange Act of 1934 (the “Exchange Act”), including NBI. SOX creates increased responsibility for chief executive officers and chief financial officers with respect to the content of filings with the Securities and Exchange Commission (the “SEC”). Section 404 of SOX and related SEC rules focused increased scrutiny by internal and external auditors on NBI’s systems of internal controls over financial reporting, which is designed to ensure that those internal controls are effective in both design and operation. SOX sets out enhanced requirements for audit committees, including independence and expertise, and it includes stronger requirements for auditor independence and limits the types of non-audit services that auditors can provide. Finally, SOX contains additional and increased civil and criminal penalties for violations of securities laws.

Capital and Related Requirements. The Federal Reserve's Small Bank Holding Company Policy Statement (the "Statement") sets forth requirements for designation as a small bank holding company and related expectations for capital and reporting requirements. Qualified bank holding companies that have consolidated total assets of less than $3 billion are exempt from reporting consolidated regulatory capital ratios and from minimum regulatory capital requirements. The Company qualifies as a small bank holding company.

The Bank continues to be subject to various capital requirements administered by banking agencies as described below. Failure to meet minimum capital requirements can trigger certain mandatory and discretionary actions by regulators that could have a direct material effect on the Company’s consolidated financial statements.

Dodd-Frank Wall Street Reform and Consumer Protection Act. The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the "Dodd-Frank Act") sets forth requirements for consumer mortgage lending, provisions for corporate governance and executive compensation, directed rule-making by the Federal Reserve limiting fees charged to merchants for credit and debit card transactions and established the Consumer Financial Protection Bureau (the “CFPB”). The CFPB has rule marking authority over financial institutions with regard to consumer protection and oversees the enforcement of all federal laws intended to ensure fair access to credit. For smaller financial institutions such as NBI and NBB, the CFPB coordinates its examination activities through their primary regulators.

During 2025, the CFPB reduced its staff by over 80%. The reduction in force is the subject of litigation, and the staffing cuts are currently stayed pending the federal circuit court’s rehearing of the case. The impact of these developments on banking organizations is uncertain. States and state attorneys general may increase regulatory, investigative and enforcement activity with respect to consumer protection, in response to changes in regulation, supervision and enforcement of consumer protection laws by federal regulators.

Notwithstanding ongoing, legal, budgetary and structural challenges affecting the CFPB, the CFPB remains an active federal regulatory agency with continuing supervisory and enforcement authority and retains its broad authority to pursue enforcement actions, including investigations, civil actions and cease and desist proceedings. The CFPB may also refer civil and criminal findings to the Department of Justice for prosecution. NBB is also subject to other federal and state consumer protection laws and regulations that, among other things, prohibit unfair, deceptive and abusive, corrupt or fraudulent business practices, untrue or misleading advertising and unfair competition.

Source of Strength. Federal Reserve policy has historically required bank holding companies to act as a source of financial and managerial strength to their subsidiary banks. The Dodd-Frank Act codified this policy as a statutory requirement. Under this requirement, the Company is expected to commit resources and capital to support NBB, including at times when the Company may not be in a financial position to provide such resources. Any capital loans by a bank holding company to any of its subsidiary banks are subordinate in right of payment to depositors and to certain other indebtedness of such subsidiary banks. In the event of a bank holding

5

Table of Contents

company’s bankruptcy, any commitment by the bank holding company to a federal bank regulatory agency to maintain the capital of a subsidiary bank will be assumed by the bankruptcy trustee and entitled to priority of payment.

The National Bank of Blacksburg

NBB is a national banking association incorporated under the laws of the United States, and the bank is subject to regulation and examination by the Office of the Comptroller of the Currency (the “OCC”). NBB’s deposits are insured by the Federal Deposit Insurance Corporation (the “FDIC”) up to the limits of applicable law. The OCC, as the primary regulator, and the FDIC regulate and monitor all areas of NBB’s operation. These areas include adequacy of capitalization and loss reserves, loans, deposits, business practices related to the charging and payment of interest, investments, borrowings, payment of dividends, security devices and procedures, establishment of branches, corporate reorganizations and maintenance of books and records. NBB is required to maintain certain capital ratios. It must also prepare quarterly reports on its financial condition for the OCC and conduct an annual audit of its financial affairs. The OCC requires NBB to adopt internal control structures and procedures designed to safeguard assets and monitor and reduce risk exposure. While appropriate for the safety and soundness of banks, these requirements add to overhead expense for NBB and other banks.

The Community Reinvestment Act. NBB is subject to the provisions of the Community Reinvestment Act (“CRA”), which imposes an affirmative obligation on financial institutions to meet the credit needs of the communities they serve, including low and moderate income neighborhoods. The OCC monitors NBB’s compliance with the CRA and assigns public ratings based upon the bank’s performance in meeting stated assessment goals. Unsatisfactory CRA ratings can result in restrictions on bank operations or expansion. NBB received a “satisfactory” rating in its last CRA examination by the OCC.

On October 24, 2023, the federal bank regulatory agencies issued a final rule to modernize their respective CRA regulations. The revised rules would have substantially altered the methodology for assessing compliance with the CRA, and likely would have made it more challenging and/or costly for NBB to maintain its “satisfactory” rating. Following its finalization on March 29, 2024, the 2023 modernization rule became subject to an ongoing injunction. On July 16, 2025, the federal bank regulatory agencies issued a joint proposal to rescind the 2023 modernization rule. The agencies continue to apply the CRA rules as they existed before the 2023 modernization, considering the injunction and pending finalization of the rescission of the modernization rule.

Privacy Legislation. Several recent laws, including the Right to Financial Privacy Act and the GBLA, and related regulations issued by the federal bank regulatory agencies, also provide new protections against the transfer and use of customer information by financial institutions. A financial institution must provide to its customers information regarding its policies and procedures with respect to the handling of customers’ personal information. Each institution must conduct an internal risk assessment of its ability to protect customer information. These privacy provisions generally prohibit a financial institution from providing a customer’s personal financial information to unaffiliated parties without prior notice and approval from the customer.

In October 2024, the CFPB issued a final rule regarding personal financial data rights that is designed to promote “open banking.” The final rule requires, among other things, that data providers, including any financial institution, make available to consumers and certain authorized third parties, upon request, certain covered transaction, account, and payment information. Institutions with at least $1.5 billion but less than $3 billion in total assets, including the Company, were required to comply with the final rule by April 1, 2029. On the same day the final rule was released, certain industry participants filed a complaint against the CFPB challenging the final rule. This legal challenge has since been paused to allow time for the CFPB to assess the rule and determine whether it aligns with the agency’s current policy objectives.

Consumer Laws and Regulations. There are a number of laws and regulations that regulate banks’ consumer loan and deposit transactions. Among these are the Truth in Lending Act, the Truth in Savings Act, the Expedited Funds Availability Act, the Equal Credit Opportunity Act, the Fair Housing Act, the Fair Credit Reporting Act, the Electronic Funds Transfer Act, the Fair Debt Collections Practices Act, the Home Mortgage Disclosure Act, the Service Members Civil Relief Act, laws governing flood insurance, federal and state laws prohibiting unfair and deceptive business practices, foreclosure laws and various regulations that implement some or all of the foregoing. NBB is required to comply with these laws and regulations in its dealings with customers. In addition, the CFPB has adopted and may continue to refine rules regulating consumer mortgage lending pursuant to the Dodd-Frank Act. There are numerous disclosure and other compliance requirements associated with the consumer laws and regulations.

Deposit Insurance. NBB has deposits that are insured by the FDIC. The FDIC maintains a Deposit Insurance Fund (“DIF”) that is funded by risk-based insurance premium assessments on insured depository institutions. Assessments are determined based upon several factors, including the level of regulatory capital and the results of regulatory examinations. The FDIC may adjust assessments if the insured institution’s risk profile changes or if the size of the DIF declines in relation to the total amount of insured deposits. An institution’s assessment base is consolidated total assets less its average tangible equity as defined by the FDIC. The FDIC has authority to impose special measures to boost the deposit insurance fund such as prepayments of assessments and additional special assessments.

After giving primary regulators an opportunity to first take action, the FDIC may initiate an enforcement action against any depository institution it determines is engaging in unsafe or unsound actions or which is in an unsound condition, and the FDIC may terminate that institution’s deposit insurance. NBB has no knowledge of any matter that would threaten its FDIC insurance coverage.

Capital Requirements. NBB is subject to the rules implementing the Basel III capital framework and certain related provisions of the Dodd-Frank Act (the “Basel III Capital Rules”) as applied by the OCC. The Basel III Capital Rules require NBB to comply with minimum capital ratios plus a “capital conservation buffer” designed to absorb losses during periods of economic stress. The following table presents the required minimum ratios along with the required minimum ratios including the capital conservation buffer:

6

Table of Contents

Risk-weighted assets are assets on the balance sheet as well as certain off-balance sheet items, such as standby letters of credit, to which weights between 0% and 1250% are applied, according to the risk of the asset type. Common Equity Tier 1 Capital (“CET1”) is capital according to the balance sheet, adjusted for goodwill and intangible assets and other prescribed adjustments. At NBB’s election, CET1 is also adjusted to exclude accumulated other comprehensive income or loss. Tier 1 Capital is CET1 adjusted for additional capital deductions. Total Capital is Tier 1 Capital increased for the allowance for credit losses and adjusted for other items. The Leverage Ratio is the ratio of Tier 1 Capital to total average assets, less goodwill and intangibles and certain deferred tax assets. As of December 31, 2025, NBB’s capital ratios exceeded the minimum ratios including the capital conservation buffer.

NBB is also subject to the “prompt corrective action” regulations pursuant to Section 38 of the Federal Deposit Insurance Act, as amended, which incorporates a CET1 ratio and increases certain other capital ratios. To be classified as well capitalized under the regulations, NBB must have the following minimum capital ratios: (i) a CET1 ratio of at least 6.5%; (ii) a Tier 1 Capital to Risk Weighted Assets ratio of at least 8.0%; (iii) a Total Capital to Risk Weighted Assets ratio of at least 10.0%; and (iv) a Leverage Ratio of at least 5.0%. NBB exceeded the thresholds to be considered well capitalized as of December 31, 2025.

Limits on Dividend Payments. A significant portion of NBI’s income is derived from dividends paid by NBB. As a national bank, NBB may not pay dividends from its capital, and it may not pay dividends if the bank would become undercapitalized, as defined by regulation, after paying the dividend. Without prior OCC approval, NBB’s dividend payments in any calendar year are restricted to the bank’s retained net income for that year, as that term is defined by the laws and regulations, combined with retained net income from the preceding two years, less any required transfer to surplus.

The OCC and FDIC have authority to limit dividends paid by NBB if the payments are determined to be an unsafe and unsound banking practice. Any payment of dividends that depletes the bank’s capital base could be deemed to be an unsafe and unsound banking practice.

Branching. As a national bank, NBB is required to comply with the state branch banking laws of Virginia, the state in which the main office of the bank is located. NBB must also have the prior approval of the OCC to establish a branch or acquire an existing banking operation. Under Virginia law, NBB may open branch offices or acquire existing banks or bank branches anywhere in the state. Virginia law also permits banks domiciled in the state to establish a branch or to acquire an existing bank or branch in another state. The Dodd-Frank Act permits the OCC to approve applications by national banks like NBB to establish de novo branches in any state in which a bank located in that state is permitted to establish a branch.

Mortgage Banking Regulation. NBB is subject to rules and regulations that, among other things, establish standards for mortgage loan origination, prohibit discrimination, provide for inspections and appraisals of property, require credit reports on prospective borrowers, in some cases restrict certain loan features and fix maximum interest rates and fees, require the disclosure of certain basic information to mortgagors concerning credit and settlement costs, limit payment for settlement services to the reasonable value of the services rendered and require the maintenance and disclosure of information regarding the disposition of mortgage applications based on race, gender, geographical distribution and income level. NBB is also subject to rules and regulations that require the collection and reporting of significant amounts of information with respect to mortgage loans and borrowers. NBB’s mortgage origination activities are subject to the Federal Reserve’s Regulation Z, which implements the Truth in Lending Act. Certain provisions of Regulation Z require creditors to make a reasonable and good faith determination based on verified and documented information that a consumer applying for a mortgage loan has a reasonable ability to repay the loan according to its terms.

Anti-Money Laundering Laws and Regulations. The Company is subject to several federal laws that are designed to combat money laundering, terrorist financing, and transactions with persons, companies or foreign governments designated by U.S. authorities (“AML laws”). This category of laws includes the Bank Secrecy Act of 1970, the Money Laundering Control Act of 1986, the USA PATRIOT Act of 2001, and the Anti-Money Laundering Act of 2020.

The AML laws and their implementing regulations require insured depository institutions, broker-dealers, and certain other financial institutions to have policies, procedures, and controls to detect, prevent, and report money laundering and terrorist financing. The AML laws and their regulations also provide for information sharing, subject to conditions, between federal law enforcement agencies and financial institutions, as well as among financial institutions, for counter-terrorism purposes. Federal banking regulators are required, when reviewing bank holding company acquisition and bank merger applications, to take into account the effectiveness of the anti-money laundering activities of the applicants. To comply with these obligations, the Company has implemented appropriate internal practices, procedures, and controls.

Office of Foreign Assets Control. The U.S. Treasury Department’s Office of Foreign Assets Control (“OFAC”) is responsible for administering and enforcing economic and trade sanctions against specified foreign parties, including countries and regimes, foreign individuals and other foreign organizations and entities. OFAC publishes lists of prohibited parties that are regularly consulted by the Company in the conduct of its business in order to assure compliance. The Company is responsible for, among other things, blocking accounts of, and transactions with, prohibited parties identified by OFAC, avoiding unlicensed trade and financial transactions with such

7

Table of Contents

parties and reporting blocked transactions after their occurrence. Failure to comply with OFAC requirements could have serious legal, financial and reputational consequences for the Company.

Incentive Compensation. The Interagency Guidance on Sound Incentive Compensation Policies, issued by federal banking agencies, covers all employees that have the ability to materially affect the risk profile of a financial institution, either individually or as part of a group, and is based upon the key principles that a financial institution’s incentive compensation arrangements should (i) provide incentives that do not encourage risk-taking beyond the institution’s ability to effectively identify and manage risks, (ii) be compatible with effective internal controls and risk management, and (iii) be supported by strong corporate governance, including active and effective oversight by the financial institution’s board of directors.

Section 956 of the Dodd-Frank Act requires the federal banking agencies and the SEC to establish joint regulations or guidelines prohibiting incentive-based payment arrangements at specified regulated entities that encourage inappropriate risk-taking by providing an executive officer, employee, director or principal shareholder with excessive compensation, fees, or benefits or that could lead to material financial loss to the entity. Despite numerous proposals, no regulation has been finalized.

The Federal Reserve will review, as part of the regular, risk-focused examination process, the incentive compensation arrangements of financial institutions, such as the Company, that are not “large, complex banking organizations.” These reviews will be tailored to each financial institution based on the scope and complexity of the institution’s activities and the prevalence of incentive compensation arrangements. The findings of the supervisory initiatives will be included in reports of examination. Deficiencies will be incorporated into the institution’s supervisory ratings, which can affect the institution’s ability to make acquisitions and take other actions. Enforcement actions may be taken against a financial institution if its incentive compensation arrangements, or related risk-management control or governance processes, pose a risk to the institution’s safety and soundness and the financial institution is not taking prompt and effective measures to correct the deficiencies. As of December 31, 2025, the Company had not been made aware of any instances of non-compliance with the final guidance.

The Nasdaq Stock Market, LLC, the exchange on which our common stock is listed, enacted a listing rule that became effective in 2023 requiring listed companies to adopt policies mandating the recovery or “clawback” of excess incentive compensation earned by a current or former executive officer during the three fiscal years preceding the date the listed company is required to prepare an accounting restatement, including to correct an error that would result in a material misstatement if the error were corrected in the current period or left uncorrected in the current period. The Company has adopted a clawback policy compliant with such rule, a copy of which is included as Exhibit 97.1 to this Form 10-K.

Cybersecurity. In March 2015, federal regulators issued two related statements regarding cybersecurity. One statement indicates that financial institutions should design multiple layers of security controls to establish lines of defense and to ensure that their risk management processes also address the risk posed by compromised customer credentials, including security measures to reliably authenticate customers accessing internet-based services of the financial institution. The other statement indicates that a financial institution’s management is expected to maintain sufficient business continuity planning processes to ensure the rapid recovery, resumption and maintenance of the institution’s operations after a cyber-attack involving destructive malware. A financial institution is also expected to develop appropriate processes to enable recovery of data and business operations and address rebuilding network capabilities and restoring data if the institution or its critical service providers fall victim to this type of cyber-attack. If the Company fails to observe the regulatory guidance, it could be subject to various regulatory sanctions, including financial penalties.

On November 18, 2021, the federal bank regulatory agencies issued a final rule, effective April 1, 2022, imposing new notification requirements for cybersecurity incidents. The rule requires financial institutions to notify their primary federal regulator as soon as possible and no later than 36 hours after the institution determines that a cybersecurity incident has occurred that has materially disrupted or degraded, or is reasonably likely to materially disrupt or degrade, the institution’s: (i) ability to carry out banking operations, activities, or processes, or deliver banking products and services to a material portion of its customer base, in the ordinary course of business, (ii) business line(s), including associated operations, services, functions, and support, that upon failure would result in a material loss of revenue, profit, or franchise value, or (iii) operations, including associated services, functions and support, as applicable, the failure or discontinuance of which would pose a threat to the financial stability of the United States.

In July 2023, the SEC issued a final rule to enhance and standardize disclosures regarding cybersecurity risk management, strategy, governance, and incident reporting by public companies that are subject to the reporting requirements of the Exchange Act. Specifically, the final rule requires current reporting about material cybersecurity incidents, periodic disclosures about a registrant’s policies and procedures to identify and manage cybersecurity risk, management’s role in implementing cybersecurity policies and procedures, and the board of directors’ cybersecurity expertise, if any, and its oversight of cybersecurity risk. See Item 1C. Cybersecurity of this Form 10-K for a discussion of the Company’s cybersecurity risk management, strategy and governance.

Fair Access to Financial Services. In August 2025, President Trump signed Executive Order 14331, “Guaranteeing Fair Banking Access for All Americans,” which states that it is the policy of the United States that no American should be denied access to financial services because of their constitutionally or statutorily protected beliefs, affiliations, or political views. The Executive Order directs the Treasury Secretary and federal banking regulators to address politicized or unlawful debanking activities. In recent years, certain states have also enacted, or have proposed to enact, statutes, regulations or policies that prohibit financial institutions from denying or canceling products or services to a person or business, or otherwise discriminating against a person or business in making available products or services, on the basis of certain social or political factors or other activities.

Artificial Intelligence. CFPB and other federal regulatory guidance reiterates that creditors are not excused from the adverse action notice requirements under the Equal Credit Opportunity Act if they rely on complex algorithmic underwriting models. States have also

8

Table of Contents

started to regulate the use of artificial intelligence technologies. In July 2024, the federal banking agencies issued a final rule that requires, among other things, financial institutions to ensure that their automated valuation models for property valuation follow certain quality control standards, including a requirement that such valuation models comply with nondiscrimination laws.

Monetary Policy

The monetary and interest rate policies of the Federal Reserve, as well as general economic conditions, affect the business and earnings of NBI. NBB and other banks are particularly sensitive to interest rate fluctuations. The spread between the interest paid on deposits and that which is charged on loans is the most important component of the bank’s earnings. In addition, interest earned on securities investments has a significant effect on earnings. U.S. fiscal policy, including deficits requiring increased governmental borrowing also can affect interest rates. As conditions change in the national and international economy and in the money markets, the Federal Reserve’s actions, particularly with regard to interest rates, and the effects of fiscal policies can impact loan demand, deposit levels and earnings at NBB. It is not possible to accurately predict the effects on NBI of economic and interest rate changes.

Other Legislative and Regulatory Concerns

Federal and state laws and regulations are regularly proposed that could affect the regulation of financial institutions. New, revised or rescinded regulations could add to the regulatory burden on banks and other financial service providers and increase the costs of compliance, or they could change the products that can be offered and the manner in which financial institutions do business. We cannot foresee how regulation of financial institutions may change in the future and how those changes might affect NBI.

Company Website

NBI maintains a website at www.nationalbankshares.com. The Company’s annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K and all amendments to those reports are made available on its website as soon as is practical after the material is electronically filed with the SEC. The Company’s proxy materials for the 2026 annual meeting of stockholders will also be posted on a separate website at www.investorvote.com/NKSH. Access through the Company’s websites to the Company’s filings is free of charge. The SEC maintains an internet site (http://www.sec.gov) that contains reports, proxy, and information statements, and other information the Company files electronically with the SEC.

9

Table of Contents

Executive Officers of the Company

The following table presents the executive officers of the Company; their age; their terms of office as officers; the positions and offices within the Company held by each officer; and thier principal occupation or employment during the past five years.