CF BANKSHARES INC. - Annual Report: 2021 (Form 10-K)

Securities registered pursuant to Section 12(b) of the Act:

Securities registered pursuant to Section 12(g) of the Exchange Act: None

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act

YES [ ] NO [X]

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act

YES [ ] NO [X]

Indicate by check mark whether the registrant: (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. YES [X]     NO [  ]

Indicate by check mark whether the registrant has submitted electronically, every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (Section 232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files.)

YES [X] NO [ ]

‎

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

Large Accelerated Filer [ ] Accelerated Filer [X] Non-accelerated Filer [ ]  Smaller reporting company [X] 

Emerging growth company [ ]

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. [ ]

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. [X]

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act).

YES [ ] NO [X]

The aggregate market value of the voting and non-voting common equity of the registrant held by non-affiliates as of June 30, 2021 was $129.2 million based upon the closing price as reported on the Nasdaq® Capital Market for that date.

As of March 8, 2022, there were 5,258,604 shares of the registrant’s (Voting) Common Stock outstanding and 1,260,700 shares of the registrant’s Non-Voting Common Stock outstanding.

DOCUMENTS INCORPORATED BY REFERENCE

Portions of the registrant’s Proxy Statement for the Annual Meeting of Stockholders to be held on June 1, 2022, are incorporated herein by reference into Part III of this Form 10-K.

INDEX

Forward-Looking Statements

Statements in this Annual Report on Form 10-K (this “Form 10-K”) and in our other communications that are not statements of historical fact are forward-looking statements which are made in good faith by us. Forward-looking statements include, but are not limited to: (1) projections of revenues, income or loss, earnings or loss per share of common stock, capital structure and other financial items; (2) plans and objectives of the management or Boards of Directors of CF Bankshares, Inc. (the “Holding Company”) or CFBank, National Association (“CFBank”); (3) statements regarding future events, actions or economic performance; and (4) statements of assumptions underlying such statements. Words such as "estimate," "strategy," "may," "believe," "anticipate," "expect," "predict," "will," "intend," "plan," "targeted," and the negative of these terms, or similar expressions, are intended to identify forward-looking statements, but are not the exclusive means of identifying such statements. Various risks and uncertainties may cause actual results to differ materially from those indicated by our forward-looking statements, including, without limitation, those risks set forth in the section captioned “RISK FACTORS” in Part I, Item 1A of this Form 10-K.

Forward-looking statements are not guarantees of performance or results. A forward-looking statement may include a statement of the assumptions or bases underlying the forward-looking statement. We believe that we have chosen these assumptions or bases in good faith and that they are reasonable. We caution you, however, that assumptions or bases almost always vary from actual results, and the differences between assumptions or bases and actual results can be material. The forward-looking statements included in this Form 10-K speak only as of the date hereof. We undertake no obligation to publicly release revisions to any forward-looking statements to reflect events or circumstances after the date of such statements, except to the extent required by law.

PART I

Item 1. Business.

General

The Holding Company was organized as a Delaware corporation in September 1998 as the holding company for CFBank, in connection with CFBank’s conversion from a mutual to stock form of organization. CFBank was originally organized in 1892 and was formerly known as Central Federal Savings and Loan Association of Wellsville and more recently as Central Federal Bank. On December 1, 2016, CFBank converted from a federal savings institution to a national bank. Effective as of December 1, 2016 and in conjunction with the conversion of CFBank to a national bank, the Holding Company became a registered bank holding company and elected financial holding company status. Effective as of July 27, 2020, the Holding Company changed its name from Central Federal Corporation to CF Bankshares Inc. As a financial holding company, we are subject to regulation by the Board of Governors of the Federal Reserve System (the “FRB”). As used herein, the terms “we,” “us,” “our” and the “Company” refer to CF Bankshares, Inc. and its subsidiaries, unless the context indicates to the contrary.

The consolidated financial statements include the Holding Company and CFBank. Intercompany transactions and balances are eliminated in consolidation.

Central Federal Capital Trust I (the “Trust”), a wholly-owned subsidiary of the Holding Company, was formed in 2003 to raise additional funding for the Company through a pooled private offering of trust preferred securities. The Holding Company issued $5,155,000 of subordinated debentures to the Trust in exchange for ownership of all of the common stock of the Trust and the proceeds of the preferred securities sold by the Trust. The Holding Company is not considered the primary beneficiary of this trust (variable interest entity) and, therefore, the trust is not consolidated in the Company’s financial statements, but rather the subordinated debentures are shown as a liability.

Currently, the Company does not transact material business other than through CFBank. At December 31, 2021, the Company’s assets totaled $1.5 billion and stockholders’ equity totaled $125.3 million.

CFBank is a nationally chartered boutique commercial bank operating primarily in four (4) major metro markets: Columbus, Cleveland, and Cincinnati, Ohio, and Indianapolis, Indiana. CFBank focuses on serving the financial needs of closely held businesses and entrepreneurs, by providing comprehensive Commercial, Retail and Mortgage Lending services presence. In all regional markets, CFBank provides commercial loans and equipment leases, commercial and residential real estate loans and treasury management depository services, residential mortgage lending, and full-service commercial and retail banking services and products. CFBank seeks to differentiate itself from its competitors by providing individualized service coupled with direct customer access to decision makers, and ease of doing business. We believe that CFBank matches the sophistication of much larger banks, without the bureaucracy.

CFBank also offers its clients the convenience of online internet banking, mobile banking, and remote deposit capabilities.

Our revenues are derived principally from the generation of interest and fees on loans originated and noninterest income generated on the sale of loans. Our primary sources of funds are retail and business deposit accounts and certificates of deposit, brokered certificates of deposit and, to a lesser extent, principal and interest payments on loans and securities, Federal Home Loan Bank (FHLB) advances, other borrowings and proceeds from the sale of loans.

Most of our deposits and loans come from our market area. Our principal market area for loans and deposits includes the following Ohio counties: Franklin County through our office in Worthington, Ohio and our loan production office in Columbus, Ohio; Hamilton County through our offices in Glendale and Blue Ash, Ohio; Cuyahoga County, through our office in Woodmere, Ohio; and Summit County through our office in Fairlawn, Ohio. Because of CFBank’s concentration of business activities in Ohio, the Company’s financial condition and results of operations depend in large part upon economic conditions in Ohio.

Sale of Columbiana County, Ohio Branches

On December 29, 2020, CFBank entered into a Branch Purchase and Assumption Agreement (the “P&A Agreement”) with Consumers National Bank (“Consumers”) providing for the acquisition by Consumers of two branches of CFBank in Columbiana County, Ohio – CFBank’s drive-up branch location in Wellsville, Ohio and CFBank’s branch location in Calcutta, Ohio (the “Branches”).

On July 16, 2021, CBank completed its sale to Consumers of certain assets and liabilities associated with the Branches. Pursuant to the terms of the P&A Agreement, Consumers assumed certain deposit liabilities and acquired certain loans, as well as cash, real property, personal property and other fixed assets associated with the Branches.

During the third quarter of 2021, the Company recognized a combined gain on sale of deposits of $1.9 million related to the sale of the Branches.

Market Area and Competition

Our primary market areas are competitive markets for financial services and we face competition both in making loans and in attracting deposits. Direct competition comes from a number of financial institutions operating in our market area, many of which have a statewide or regional presence, and in some cases, a national presence. Many of these financial institutions are significantly larger and have greater financial resources than we do. Competition for loans and deposits comes from savings institutions, mortgage banking companies, commercial banks, credit unions, brokerage firms and insurance companies.

Lending Activities

Repositioning of Residential Mortgage Business Model. In early 2021, a shift in the mortgage industry resulted in significantly fewer refinance opportunities and lower margins on residential mortgage loans. In response, the Company has strategically scaled down its Residential Mortgage Business. Our Commercial Banking Business continues to experience strong growth and has become the primary driver of our earnings and performance.

Loan and Lease Portfolio Composition. Our loan and lease portfolio consists primarily of commercial, commercial real estate and multi-family mortgage loans, mortgage loans secured by single-family residences and, to a lesser degree, consumer loans. CFBank also finances a variety of commercial and residential construction projects. At December 31, 2021, gross loans receivable totaled $1.2 billion and increased approximately $317.3 million, or 34.8%, from $912.4 million at December 31, 2020. Commercial, commercial real estate and multi-family mortgage loans, including related construction loans, totaled $841.2 million in the aggregate and represented 68.4% of the gross loan portfolio at December 31, 2021, as compared to 80.0% of the gross loan portfolio at December 31, 2020. Commercial, commercial real estate and multi-family mortgage loan balances, including related construction loans, increased $111.4 million, or 15.3%, during 2021. Portfolio single-family residential mortgage loans, including related construction loans, totaled $362.2 million and represented 29.5% of total gross loans at year-end 2021, compared to 17.4% at year-end 2020. The remainder of our loan portfolio consists of consumer loans, which totaled $26.3 million, or 2.1% of gross loans receivable, at year-end 2021.

The types of loans originated are subject to federal and state laws and regulations. Interest rates charged on loans are affected by the demand for such loans, the supply of money available for lending purposes and the rates offered by competitors. In turn, these factors are affected by, among other things, economic conditions, fiscal policies of the federal government, monetary policies of the FRB and legislative tax policies.

‎

Loan Maturity. The following table shows the remaining contractual maturity of CFBank’s loan portfolio at December 31, 2021. Demand loans and other loans having no stated schedule of repayments or no stated maturity are reported as due within one year. The table does not include potential prepayments or scheduled principal amortization.

The following table sets forth at December 31, 2021, the dollar amount of total loans and leases receivable contractually due after one year (December 31, 2022), and whether such loans have fixed interest rates or adjustable interest rates.

Origination of Loans and Leases. Lending activities are conducted through our offices located in Franklin, Cuyahoga, Summit, and Hamilton Counties, Ohio and in Marion County, Indiana. We originate commercial, commercial real estate, multi-family and single-family residential mortgage loans and also expanded into business financial services in the Columbus, Cleveland, Cincinnati, and Akron, Ohio and Indianapolis, Indiana markets.

Commercial, commercial real estate and multi-family loans are originated with fixed, floating and ARM interest rates. Fixed-rate loans are typically limited to terms of three to five years. CFBank has also utilized interest-rate swaps to protect the related fixed-rate loans from changes in value due to changes in interest rates. See Note 18 in the accompanying Notes to Consolidated Financial Statements for additional information on interest-rate swaps.

CFBank participates in various loan programs offered by the Small Business Administration (the “SBA”), enabling us to provide our customers and small business owners in our markets with access to funding to support their businesses, as well as reduce credit risk associated with these loans. Individual loans include SBA guarantees of up to 75%.

During 2020, CFBank also originated loans under the SBA’s new 7(a) loan program, the Paycheck Protection Program (“PPP”). The Coronavirus Aid, Relief, and Economic Security Act of 2020, as amended (the “CARES Act”) authorized the SBA to temporarily guarantee PPP loans to provide funding to small businesses to pay certain payroll costs and benefits, and other expenses, during the COVID-19 pandemic. These loans are 100% guaranteed by the SBA and the full principal amount of the loans may qualify for forgiveness. The loans we originated have a maturity of two years, an interest rate of 1.00% and loan payments are deferred for the initial six months (which deferral period was subsequently extended to 10 months pursuant to the Paycheck Protection Program Flexibility Act of 2020). The majority of these loans have been pledged as collateral on borrowings under the FRB’s Paycheck Protection Program Lending Facility (“PPPLF”). See Note 10, FHLB Advances and Other Debt, in the accompanying Notes to Consolidated Financial Statements for additional information.

Single-Family Mortgage Lending. A significant lending activity has been the origination of permanent conventional mortgage loans secured by single-family residences located within and outside of our primary market area. Loan originations are primarily obtained through leads-based marketing and from our loan officers and their contacts within the local real estate industry and with existing or past customers and members of the local communities. We offer both fixed-rate and adjustable-rate mortgage (ARM) loans with maturities generally up to 30 years, priced competitively with current market rates. We offer several ARM loan programs with terms of up to 30 years and, with the majority of the programs, interest rates adjust with a maximum adjustment limitation of 2.0% per year and a 5.0% lifetime cap. The interest rate adjustments on ARM loans currently offered are indexed to a variety of established indices

and these loans do not provide for initial deep discount interest rates. We do not originate option ARM loans or loans with negative amortization.

The volume and types of single-family ARM loan originations are affected by market factors such as the level of interest rates, consumer preferences, competition and the availability of funds. In recent years, demand for single-family ARM loans has been weak due to consumer preference for fixed-rate loans as a result of the low interest rate environment. Consequently, our origination of ARM loans on single-family residential properties has not been significant as compared to our origination of fixed-rate loans.

All single-family mortgage loans sold are underwritten according to Federal Home Loan Mortgage Corporation (Freddie Mac) or Federal National Mortgage Association (Fannie Mae) guidelines, or are underwritten to comply with additional guidelines as may be required by the individual investor. CFBank is a direct endorsed underwriter, a designation by the Department of Housing and Urban Development that allows us to offer loans insured by the Federal Housing Authority (FHA). CFBank is approved by the Department of Veterans Affairs to originate and approve VA loans.

For the year ended December 31, 2021, single-family mortgage loans originated for sale totaled $2.4 billion, an increase of $129.5 million, or 5.8%, compared to $2.2 billion that was originated in 2020. The volume of refinance activity, which is very sensitive to market mortgage interest rates, has been a significant factor that impacts the level of residential loan originations. As market mortgage rates increase, our mortgage production, and the resultant gains on sales of loans, could decrease.

The performance of our mortgage lending business is impacted by market conditions and competition. Any changes could affect the value of our mortgage loans held for sale and mortgage banking derivatives and the performance of the mortgage lending business.

In early 2021, a shift in the mortgage industry resulted in significantly fewer refinance opportunities and lower margins on residential mortgage loans. In response, the Company has strategically scaled down its Residential Mortgage Business. Our Commercial Banking Business continues to experience strong growth and has become the primary driver of our earnings and performance.

For the year ended December 31, 2021, portfolio single-family mortgage loans originated by CFBank totaled $352.3 million, or 28.7% of total loans. Our policy is to originate quality loans that are evaluated for risk based on the borrower’s ability to repay the loan. Collateral positions are established by obtaining independent appraisal opinions. Mortgage insurance is generally required when the LTV exceeds 80%. In conjunction with competitive product offerings in the market, and the lack of availability for mortgage insurance, jumbo loans exceeding 80% are often originated without mortgage insurance.

Portfolio single-family residential ARM loans totaled $42.9 million, or 12.4% of the single-family mortgage loan portfolio, at December 31, 2021. These loans generally pose credit risks not inherent in fixed-rate loans, primarily because as interest rates rise, the borrowers’ payments rise, increasing the potential for default. Periodic and lifetime caps on interest rate increases help to reduce the credit risks associated with ARM loans, but also limit the interest rate sensitivity of such loans.

CFBank previously participated in a Mortgage Purchase Program with Northpointe Bank (Northpointe), a Michigan banking corporation, from December 2012 until CFBank discontinued its participation in the program in the first quarter of 2021. Pursuant to the terms of a participation agreement, CFBank purchased participation interests in loans made by Northpointe related to fully underwritten and pre-sold mortgage loans originated by various prescreened mortgage brokers located throughout the U.S. The underlying loans were individually (MERS) registered loans which were held until funded by the end investor. The mortgage loan investors included Fannie Mae and Freddie Mac, and other major financial institutions. This process on average took approximately 14 days. Given the short-term holding period of the underlying loans, common credit risks (such as past due, impairment and TDR, nonperforming, and nonaccrual classification) were substantially reduced. Therefore, no allowance was allocated by CFBank to these loans. These loans were 100% risk rated for CFBank capital adequacy purposes. Under the participation agreement, CFBank agreed to purchase a 95% ownership/participation interest in each of the aforementioned loans, and Northpointe maintained a 5% ownership interest in each loan it participated. CFBank exited this program during the first quarter of 2021. See Note 4 in the accompanying Notes to Consolidated Financial Statements included for additional information.

Commercial Real Estate and Multi-Family Residential Mortgage Lending. Origination of commercial real estate and multi-family residential mortgage loans continues to be a significant portion of CFBank’s lending activity. Commercial real estate and multi-family residential mortgage loan balances increased $113.9 million to $436.3 million at December 31, 2021. This represented an increase of 35.3% over the $322.4 million balance at December 31, 2020.

We originate commercial real estate loans that are secured by properties used for business purposes, such as manufacturing facilities, office buildings or retail facilities. We originate multi-family residential mortgage loans that are secured by apartment buildings, condominiums, and multi-family residential houses. Commercial real estate and multi-family residential mortgage loans are secured by properties generally located in our primary market area.

Underwriting policies provide that commercial real estate and multi-family residential mortgage loans may be made in amounts up to 85% of the lower of the appraised value or purchase price of the property. An independent appraisal of the property is required on all

loans greater than or equal to $500,000. In underwriting commercial real estate and multi-family residential mortgage loans, we consider the appraised value and net operating income of the property, the debt service ratio and the property owner’s and/or guarantor’s financial strength, expertise and credit history. We offer both fixed and adjustable rate loans. Fixed rate loans are generally limited to three to five years, at which time they convert to adjustable rate loans. At times, CFBank accommodates loans to borrowers who desire fixed-rate loans for longer than three to five years. We have utilized interest-rate swaps to protect these fixed-rate loans from changes in value due to changes in interest rates, as appropriate. See Note 18 in the accompanying Notes to Consolidated Financial Statements for additional information on interest-rate swaps. Adjustable-rate loans are tied to various market indices and generally adjust monthly or annually. Payments on both fixed and adjustable rate loans are based on 15 to 30 year amortization periods.

Commercial real estate and multi-family residential mortgage loans are generally considered to involve a greater degree of risk than single-family residential mortgage loans. Because payments on loans secured by commercial real estate and multi-family residential properties are dependent on successful operation or management of the properties, repayment of commercial real estate and multi-family residential mortgage loans may be subject to a greater extent to adverse conditions in the real estate market or the economy. As with single-family residential mortgage loans, adjustable rate commercial real estate and multi-family residential mortgage loans generally pose credit risks not inherent in fixed-rate loans, primarily because as interest rates rise, the borrowers’ payments rise, increasing the potential for default. Additionally, adjustable rate commercial real estate and multi-family residential mortgage loans generally do not contain periodic and lifetime caps on interest rate changes. We seek to minimize the additional risk presented by adjustable rate commercial real estate and multi-family residential mortgage loans through underwriting criteria that require such loans to be qualified at origination with sufficient debt coverage ratios under increasing interest rate stress scenarios.

Commercial real estate and multi-family residential mortgage loans also have larger loan balances to single borrowers or groups of related borrowers compared to single-family residential mortgage loans. Some of our borrowers also have more than one commercial real estate or multi-family residential mortgage loan outstanding with us. Additionally, some loans may be collateralized by junior liens. Consequently, an adverse development involving one or more loans or credit relationships can expose us to significantly greater risk of loss compared to an adverse development involving a single-family residential mortgage loan. We seek to minimize and mitigate these risks through underwriting policies which require such loans to be qualified at origination on the basis of the property’s income and debt coverage ratio and the financial strength of the property owners and/or guarantors.

Commercial Lending. The origination of commercial loans continues to be a significant component of our lending activity. During 2021, commercial loan balances decreased by $1.4 million, or 0.4%, to $336.9 million at year-end 2021. The decrease in commercial loan balances was primarily the result of PPP loan repayments of $104.8 million, partially offset by new and increased relationships. Commercial loans are generally secured by business equipment, inventory, accounts receivable and other business assets. In underwriting commercial loans, we consider the net operating income of the borrower, the debt service ratio and the financial strength, expertise and credit history of the business owners and/or guarantors. We offer both fixed and adjustable rate commercial loans. Fixed-rate loans are typically limited to a maximum term of five years. Adjustable-rate loans are tied to various market indices and generally adjust monthly or annually.

Included in Commercial loans at December 31, 2021 and December 31, 2020, were $445,000 and $105.3 million, respectively, of PPP loans. These loans are 100% guaranteed by the SBA and the full principal amount of the loans may qualify for forgiveness. The loans we originated have a maturity of two years, an interest rate of 1.00% and loan payments were deferred for the initial six months (which deferral period was subsequently extended to 10 months pursuant to the Paycheck Protection Program Flexibility Act of 2020). The majority of these loans have been pledged as collateral for borrowings by the Company under the PPPLF. See Note 10, FHLB Advances and Other Debt, in the accompanying Notes to Consolidated Financial Statements for additional information.

Commercial loans are generally considered to involve a greater degree of risk than loans secured by real estate. Because payments on commercial loans are dependent on successful operation of the business enterprise, repayment of such loans may be subject to a greater extent to adverse conditions in the economy. We seek to mitigate these risks through underwriting policies which require such loans to be qualified at origination on the basis of the enterprise’s income and debt coverage ratio and the financial strength of the business owners and/or guarantors.

Adjustable-rate commercial loans generally pose credit risks not inherent in fixed-rate loans, primarily because as interest rates rise, the borrowers’ payments rise, increasing the potential for default. Additionally, adjustable-rate commercial loans generally do not contain periodic and lifetime caps on interest rate changes. We seek to minimize the additional risk presented by adjustable-rate commercial loans through underwriting criteria that require such loans to be qualified at origination with sufficient debt coverage ratios under increasing interest rate scenarios.

Construction and Land Lending. With economic improvement in our market areas, there was also an increase in commercial building activity. During 2021, construction loans increased by $3.0 million, or 3.6%, to $83.4 million, as compared to the $80.4 million in the portfolio at year-end 2020. CFBank’s strong capital levels has allowed CFBank to take advantage of select market opportunities in this area within the risk tolerances we have identified.

Construction loans are made to finance the construction of residential and commercial properties generally located within our primary market area. Construction loans are fixed- or adjustable-rate loans which may convert to permanent loans with maturities of up to 30 years. Our policies provide that construction loans may be made in amounts generally up to 80% of the appraised value of the property, and an independent appraisal of the property is required. Loan proceeds are disbursed in increments as construction progresses and as inspections warrant and regular inspections are required to monitor the progress of construction. Land development loans generally do not exceed 75% of the actual cost or current appraised value of the property, whichever is less. Loans on raw land generally do not exceed 65% of the actual cost or current appraised value of the property, whichever is less.

Construction and land financing is considered to involve a higher degree of credit risk than long-term financing on improved, owner-occupied real estate. Risk of loss on a construction loan is dependent largely upon the accuracy of the initial estimate of the property’s value at completion of construction or development compared to the estimated cost (including interest) of construction. If the estimate of value proves to be inaccurate, we may be confronted with a project, when completed, having a value which is insufficient to assure full repayment. We attempt to reduce such risks on construction loans by requiring personal guarantees and reviewing current personal financial statements and tax returns, as well as other projects of the developer.

Consumer and Other Lending. The consumer loan portfolio generally consists of home equity lines of credit, home improvement loans, loans secured by deposits and purchased loans. At December 31, 2021, the consumer loan portfolio totaled $26.3 million, which was 2.1% of gross loans receivable. During 2021, the consumer loan portfolio increased $2.9 million, or 12.3%, over the year-end 2020 balance of $23.4 million.

Home equity lines of credit include those loans we originate for our portfolio and purchased loans. We offer a variable rate home equity line of credit product which we originate for our portfolio. The interest rate adjusts monthly at various margins above the prime rate of interest as disclosed in The Wall Street Journal. The margin is based on certain factors including the loan balance, value of collateral, election of auto-payment and the borrower’s FICO® score. The amount of the line is based on the borrower’s credit history, income and equity in the home. When combined with the balance of the prior mortgage liens, these lines generally may not exceed 89.9% of the appraised value of the property at the time of the loan commitment. The lines are secured by a subordinate lien on the underlying real estate and are, therefore, vulnerable to declines in property values in the geographic areas where the properties are located. Credit approval for home equity lines of credit requires income sufficient to repay principal and interest due, stability of employment, an established credit record and sufficient collateral.

Delinquencies and Classified Assets. Management and the Board of Directors monitors the status of all loans 30 days or more past due on a monthly basis through the analysis of past due statistics and trends for all loans. Procedures with respect to resolving delinquencies vary depending on the nature and type of the loan and period of delinquency. We make efforts, consistent with safety and soundness principles, to work with the borrower and develop action steps to have the loan brought current. If the loan is not brought current, it then becomes necessary to take additional legal actions including the repossession of collateral.

We maintain an internal credit rating system and loan review procedures specifically developed to monitor credit risk for commercial, commercial real estate and multi-family residential loans. Internal loan reviews for these loan types are performed at least annually, and more often for loans with higher credit risk. Loan officers maintain close contact with borrowers between reviews. Adjustments to loan risk ratings are based on the reviews and at any time information is received that may affect risk ratings. Additionally, an independent third party review of commercial, commercial real estate and multi-family residential loans is performed at least annually. Management uses the results of these reviews to help determine the effectiveness of the existing policies and procedures and to provide an independent assessment of our internal loan risk rating system.

Federal regulations and CFBank’s asset classification policy require use of an internal asset classification system as a means of reporting and monitoring assets. We have incorporated the regulatory asset classifications as a part of our credit monitoring and internal loan risk rating system. Loans are classified into risk categories based on relevant information about the ability of borrowers to service their debt, such as current financial information, historical payment experience, credit documentation, public information and current economic trends, among other factors. In accordance with regulations, problem loans are classified as special mention, substandard, doubtful or loss, and the classifications are subject to review by banking regulators. Loans designated as special mention are considered criticized assets. Loans designated as substandard, doubtful or loss are considered classified assets. Loans designated as special mention possess weaknesses that, if left uncorrected, may result in deterioration of the repayment prospects for the loan or of CFBank’s credit position at some future date. A loan is considered substandard if it is inadequately protected by the current net worth and paying capacity of the obligor or of the collateral pledged, if any. Loans so classified have a well-defined weakness or weaknesses that jeopardize the liquidation of the debt. They are characterized by the distinct possibility that there will be some loss if the deficiencies are not corrected. A loan considered doubtful has all of the weaknesses inherent in those classified substandard with the added characteristic that the weaknesses make collection or liquidation in full, on the basis of currently existing facts, condition and values, highly questionable and improbable. Loans designated as loss are considered uncollectible based on the borrower’s inability to make payments, and any value attached to collateral, if any, is based on liquidation value. Loans considered loss are generally uncollectible and have so little value that their continuance as assets is not warranted and are charged off, unless certain circumstances exist that could potentially warrant a specific reserve to be established.

See the section titled “Financial Condition - Allowance for loan losses” in Management’s Discussion and Analysis of Financial Condition and Results of Operations in Item 7 of this Form 10-K and Notes 1 and 4 in the accompanying Notes to Consolidated Financial Statements for detailed information on criticized and classified loans as of December 31, 2021 and 2020.

Classified loans include all nonaccrual loans, which are discussed in further detail in the section below titled “Nonperforming Assets”. In addition to nonaccrual loans, classified loans include the following loans that were identified as substandard assets, were still accruing interest at December 31, 2021, but exhibit weaknesses that could lead to nonaccrual status in the future:

Nonperforming Assets.

The $302,000 increase in nonperforming loans in 2021 compared to 2020 was primarily due to one consumer loan and one mortgage loan going into nonaccrual status during the third quarter, partially offset by two consumer loans being returned to accrual status during the first quarter and one single family residential loan paying off in the second quarter.

For the year ended December 31, 2021, the amount of additional interest income that would have been recognized on nonaccrual loans, if such loans had continued to perform in accordance with their contractual terms, was approximately $39,000. There was no interest income recognized on nonaccrual loans in 2021, except for $10,000 of interest income that was collected from the payoff of a mortgage loan.

Accounting Standards Update (ASU) No. 2011-02 to Receivables (ASC 310), A Creditor’s Determination of Whether a Restructuring is a Troubled Debt Restructuring, clarified the guidance for a creditor’s evaluation of whether it has granted a concession and whether a debtor is experiencing financial difficulties. With regard to determining whether a concession has been granted, the ASU clarified that creditors are precluded from using the effective interest method to determine whether a concession has been granted. In the absence of using the effective interest method, a creditor must now focus on other considerations such as the value of the underlying collateral, evaluation of other collateral or guarantees, the debtor’s ability to access other funds at market rates, interest rate increases and whether the restructuring results in a delay in payment that is insignificant. The Company applies the guidance in this ASU to identify its restructured loans as troubled debt restructurings (“TDRs”). There were no loans restructured in 2021 identified as a TDR.

As a component of management’s focus on the work out of troubled credits, the terms of certain loans were modified in TDRs, where concessions were granted to borrowers experiencing financial difficulties. The modification of the terms of such loans may have included one or a combination of the following: a reduction of the stated interest rate of the loan; an increase in the stated rate of interest lower than the current market rate for new debt with similar risk; an extension of the maturity date; or a change in the payment terms. Nonaccrual loans included $147,000 in TDRs at December 31, 2021, while non-accrual loans included $190,000 of TDRs at December 31, 2020.

At year-end 2021, there were a total of $2.8 million of TDRs, including $2.7 million in commercial real estate loans, $99,000 in single family residential loans and $74,000 in commercial loans, which were not included in nonperforming loans, where customers have established a sustained period of repayment performance, loans are current according to their modified terms, and repayment of the remaining contractual payments is expected.

See the section titled “Financial Condition - Allowance for loan losses” in Management’s Discussion and Analysis of Financial Condition and Results of Operations in Item 7 of this Form 10-K and Notes 1 and 4, in the accompanying Notes to Consolidated Financial Statements for additional information on nonperforming loans and TDRs as of December 31, 2021 and 2020.

For information on real estate owned (REO) and other foreclosed assets, see the section below titled “Foreclosed Assets.”

Allowance for Loan and Lease Losses (ALLL). The ALLL is a valuation allowance for probable incurred credit losses. The ALLL methodology is designed as part of a thorough process that incorporates management’s current judgments about the credit quality of the loan portfolio into a determination of the ALLL in accordance with generally accepted accounting principles and supervisory guidance. Management analyzes the adequacy of the ALLL quarterly through reviews of the loan portfolio, including: the nature and volume of the loan portfolio and segments of the portfolio; industry and loan concentrations; historical loss experience; delinquency statistics and the level of nonperforming loans; specific problem loans; the ability of borrowers to meet loan terms; an evaluation of collateral securing loans and the market for various types of collateral; various collection strategies; current economic condition, trends and outlook; and other factors that warrant recognition in providing for an adequate ALLL. See the section titled “Financial Condition - Allowance for loan losses” in Management’s Discussion and Analysis of Financial Condition and Results of Operations in Item 7 of this Form 10-K for a detailed discussion of management’s methodology for determining the appropriate level of the ALLL.

The ALLL totaled $15.5 million at December 31, 2021, and decreased $1.5 million, or 8.9%, from $17.0 million at December 31, 2020. The decrease in the ALLL is due to negative provision expense of $1.6 million, partially offset by net recoveries of $86,000 during the year ended December 31, 2021. The ratio of the ALLL to total loans was 1.26% at December 31, 2021, compared to 1.87% at December 31, 2020. The ratio of the ALLL to total loans, excluding loan balances subject to SBA guarantees, was 1.27% at December 31, 2021, compared to 2.15% at December 31, 2020.

We believe the ALLL is adequate to absorb probable incurred credit losses in the loan portfolio as of December 31, 2021; however, future additions to the allowance may be necessary based on factors including, but not limited to, deterioration in client business performance, recessionary economic conditions, declines in borrowers’ cash flows, and market conditions which result in lower real estate values. Additionally, various regulatory agencies, as an integral part of their examination process, periodically review the ALLL. Such agencies may require additional provisions for loan losses based on judgments and estimates that differ from those used by management. Management continues to diligently monitor credit quality in the existing portfolio and analyze potential loan opportunities carefully in order to manage credit risk. An increase in estimated probable incurred losses and an increase in required loan provision expense could occur if economic conditions and factors which affect credit quality, real estate values and general business conditions worsen.

The impact of economic conditions on the housing market, collateral values, and businesses’ and consumers’ ability to pay may increase the level of charge-offs in the future. Additionally, our commercial, commercial real estate and multi-family residential loan portfolios may be detrimentally affected by adverse economic conditions. Declines in these portfolios could expose us to losses which could materially affect the Company’s earnings, capital and profitability.

‎

The following table sets forth the ALLL in each of the categories listed at the dates indicated and the percentage of such amounts to the total ALLL and loans in each category as a percent of total loans. Although the ALLL may be allocated to specific loans or loan types, the entire ALLL is available for any loan that, in management’s judgment, should be charged off.

Foreclosed Assets

Assets acquired through or instead of loan foreclosure are initially recorded at fair value less costs to sell when acquired, establishing a new cost basis. If fair value declines subsequent to foreclosure, a valuation allowance is recorded through expense. Operating and maintenance costs after acquisition are expensed. REO and other foreclosed assets totaled $0 at December 31, 2021 and December 31, 2020. See the section titled “Financial Condition - Foreclosed Assets” in Management’s Discussion and Analysis of Financial Condition and Results of Operations in Item 7 of this Form 10-K and Note 5 in the accompanying Notes to Consolidated Financial Statements for information regarding foreclosed assets at December 31, 2021. Foreclosure activities are closely tied with general economic conditions and the ability of our customers to continue to meet their loan payment obligations and, therefore, the level of foreclosed assets may increase in the future if, among other things, economic conditions in our market area decline.

Investment Activities

National banks have the authority to invest in various types of liquid assets, including U.S. Treasury obligations, securities of various federal agencies, certificates of deposit of insured banks and savings institutions, bankers’ acceptances and federal funds. Subject to various restrictions, national banks may also invest their assets in commercial paper, municipal bonds, investment-grade corporate debt securities and mutual funds whose assets conform to the investments that a national bank is otherwise authorized to make directly.

The investment policy established by the Board of Directors is designed to provide and maintain adequate liquidity, generate a favorable return on investment without incurring undue interest rate and credit risk, and compliment lending activities. The policy provides authority to invest in U.S. Treasury and federal entity/agency securities meeting the policy’s guidelines, mortgage-backed securities and collateralized mortgage obligations insured or guaranteed by the United States government and its entities/agencies, municipal and corporate bonds and other investment instruments.

At December 31, 2021, the securities available for sale portfolio totaled $16.3 million. At December 31, 2021, all mortgage-backed securities in the securities portfolio were insured or guaranteed by Ginnie Mae, Freddie Mac or Fannie Mae.

Equity securities, consisting of preferred stock in another financial institution, totaled $5.0 million at December 31, 2021 and December 31, 2020.

Management evaluates debt securities for other-than-temporary impairment (OTTI) at least on a quarterly basis, and more frequently when economic or market conditions warrant such an evaluation. See Notes 1 and 3 in the accompanying Notes to Consolidated Financial Statements for a detailed discussion of management’s evaluation of securities for OTTI.

‎

The following table sets forth certain information regarding the amortized cost and fair value of securities at the dates indicated

The following table sets forth information regarding the amortized cost, weighted average yield and contractual maturity dates of debt securities as of December 31, 2021.

⁽¹⁾Interest yields are presented on a fully taxable equivalent basis using a 21 percent tax rate.

Sources of Funds

General. CFBank’s primary sources of funds are deposits, principal and interest payments on loans and securities, proceeds from sales of loans, borrowings, and funds generated from operations of CFBank. Contractual loan payments are a relatively stable source of funds, while deposit inflows and outflows and loan prepayments are significantly influenced by general market interest rates and economic conditions and competition. Borrowings may be used on a short-term basis for liquidity purposes or on a long-term basis to fund asset growth or manage interest rate risk in accordance with asset/liability management strategies.

The Holding Company, as a financial holding company, has more limited sources of liquidity than CFBank. In general, in addition to its existing liquid assets, sources of liquidity include funds raised in the securities markets through debt or equity offerings, dividends received from its subsidiaries or the sale of assets.

Dividends from CFBank serve as a potential source of liquidity to the Holding Company to meet its obligations. Generally, CFBank may pay dividends to the Holding Company without prior approval as long as the dividend does not exceed the total of the current calendar year-to-date earnings plus any earnings from the previous two years not already paid out in dividends, and as long as CFBank remains well capitalized after the dividend payment. See Note 17, Regulatory Capital Matters, in the accompanying Notes to Consolidated Financial Statements for additional information.

The Holding Company’s available cash and cash equivalents totaled $819,000 at December 31, 2021. Management believes that the Holding Company had adequate funds and liquidity sources at December 31, 2021 to meet its current and anticipated operating needs at this time. See the section titled “Liquidity and Capital Resources” for information regarding Holding Company liquidity and regulatory matters.

Deposits. CFBank offers a variety of deposit accounts with a range of interest rates and terms including savings accounts, retail and business checking accounts, money market accounts and certificates of deposit. Management regularly evaluates the internal cost of funds, surveys rates offered by competitors, reviews cash flow requirements for lending and liquidity and executes rate changes when necessary as part of its asset/liability management, profitability and liquidity objectives. Certificate of deposit accounts represent the largest portion of our deposit portfolio and totaled 48.5% of average deposit balances in 2021. The term of the certificates of deposit typically offered vary from seven days to five years at rates established by management. Specific terms of an individual account vary

according to the type of account, the minimum balance required, the time period funds must remain on deposit and the interest rate, among other factors.

The flow of deposits is influenced significantly by general economic conditions, changes in money market rates, prevailing interest rates and competition. Deposits are obtained predominantly from the areas in which CFBank’s offices are located. We rely primarily on a willingness to pay market-competitive interest rates to attract and retain retail deposits, as well as customer service and relationships with customers.

At December 31, 2021, CFBank had $278.1 million in brokered deposits with maturity dates from January 2022 through July 2026. At December 31, 2021, cash, unpledged securities and deposits in other financial institutions totaled $169.0 million.

CFBank is a participant in the Certificate of Deposit Account Registry Service® (CDARS) and Insured Cash Sweep (ICS) programs offered through Promontory Interfinancial Network. Promontory works with a network of banks to offer products that can provide FDIC insurance coverage in excess of $250,000 through these innovative products. CDARS one-way balances are considered brokered deposits by regulation. Customer balances in the CDARS reciprocal and ICS programs, which no longer qualify as brokered, totaled $58.4 million at December 31, 2021 and increased $11.5 million, or 24.4%, from $46.9 million at December 31, 2020.

As of December 31, 2021 and 2020, deposits exceeding the FDIC insured limit of $250,000 totaled $504.9 million and $433.2 million, respectively.

Certificate accounts in amounts of $250,000 or more totaled $236.1 million at December 31, 2021, maturing as follows:

The following table sets forth the distribution of average deposit account balances for the periods indicated and the weighted average interest rates on each category of deposits presented. Averages for the periods presented are based on month-end balances.

See the sections titled “Financial Condition – Deposits” and “Liquidity and Capital Resources” for additional information regarding deposits.

Borrowings. As part of our operating strategy, FHLB advances are used as an alternative to retail and brokered deposits to fund our asset growth. The advances are collateralized primarily by single-family mortgage loans, multi-family mortgage loans, 1-4 family commercial real estate loans and home equity lines of credit loans, securities and cash, and secondarily by CFBank’s investment in the capital stock of the FHLB of Cincinnati. FHLB advances are made pursuant to several credit programs, each of which has its own interest rate and range of maturities. The maximum amount that the FHLB will advance to member institutions fluctuates from time to time in accordance with the policies of the FHLB. FHLB advances totaled $65.0 million at December 31, 2021. Based on the collateral pledged, CFBank was eligible to borrow up to a total of $178.4 million at year-end 2021.

Prior to May 21, 2021, the Holding Company had a term loan in the original principal amount of $5.0 million with an additional $10.0 million revolving line-of-credit with a third-party bank That credit facility was refinanced into a new $35 million facility on May 21, 2021. The credit facility is revolving until May 21, 2024, at which time any then-outstanding balance will be converted to a 10-year term note on a graduated 10-year amortization. Borrowings on the credit facility bear interest at a fixed rate of 3.85% until May 21, 2026, and the interest rate then converts to a floating rate equal to PRIME with a floor of 3.25%. The purpose of the credit facility is to provide an additional source of liquidity for the Holding Company and to provide funds for the Holding Company to downstream as additional capital to CFBank to support growth. At December 31, 2021, the Company had an outstanding balance, net of unamortized debt issuance costs, of $24.3 million on the facility.

In addition to access to FHLB advances, CFBank has borrowing capacity available with the Federal Reserve Bank through the Borrower in Custody program. The borrowings are collateralized by commercial loans and commercial real estate loans. Based on the collateral pledged, CFBank was eligible to borrow up to a total of $72.2 million at year-end 2021. There were no amounts outstanding from the Federal Reserve Bank at December 31, 2021.

At December 31, 2021, CFBank had $65.0 million of availability in unused lines of credit with two commercial banks. There were no outstanding borrowings on these lines of credit at December 31, 2021 or December 31, 2020. If CFBank were to borrow on these lines of credit, interest would accrue daily at a variable rate based on the commercial bank’s cost of funds and current market returns.

During 2019, CFBank entered into a $25.0 million warehouse facility with a commercial bank. The warehouse facility was used to periodically fund loans held for sale from the close (funding) date until they were sold in the secondary market. Borrowings on the facility bore interest at the greater of (a) the 30-day LIBOR plus 2.00% or (b) 4.00% and were secured by the specific loans that were funded. This warehouse facility was closed during the third quarter of 2021. At December 31, 2021, the warehouse facility had no outstanding balance. See Note 10 in the accompanying Notes to Consolidated Financial Statements for additional information.

During 2020, CFBank entered into an additional $75 million warehouse facility with a commercial bank. The purpose of the warehouse facility was to periodically fund loans held for sale from the close (funding) date until sold in the secondary market. Borrowings on the facility bore interest at the greater of (a) the 30-day LIBOR plus 2.35% or (b) 2.90% and were secured by the specific loans that were funded. This warehouse facility was closed during the second quarter of 2021. This warehouse facility had no outstanding balance at December 31, 2021. See Note 10 in the accompany Notes to Consolidated Financial Statements for additional information.

To support the effectiveness of the PPP, the FRB introduced the PPPLF to extend credit to financial institutions that made PPP loans, with the related PPP loans used as collateral on the borrowings. The PPPLF borrowings have a fixed interest rate of 0.35% and a maturity equal to the maturity date of the related PPP loans, with the PPP loans maturing two years from the origination date of the PPP loan. At December 31, 2021, the Company’s PPP loans and related PPPLF funding had a weighted average life of approximately 0.2 years. At December 31, 2021, the principal balance of PPPLF advances outstanding was $450,000.

See the section titled “Financial Condition - Subordinated Debentures” in Management’s Discussion and Analysis of Financial Condition and Results of Operations in Item 7 of this Form 10-K for information regarding subordinated debentures issued by the Company in 2003 and 2018.

The following table sets forth certain information regarding short-term borrowings at or for the periods ended on the dates indicated

Personnel

As of December 31, 2021, the Company had 129 full-time and 5 part-time employees.

Regulation and Supervision

Set forth below is a brief description of certain laws and regulations that apply to us. This description, as well as other descriptions of laws and regulations contained in this Form 10-K, is not complete and is qualified in its entirety by reference to the applicable laws and regulations. The laws and regulations applicable to the Company are continually under review by the United States Congress and state legislatures and federal and state regulatory agencies, and a change in statutes, regulations or regulatory policies applicable to the Company could have a material effect on the Company’s business.

Overview

The Holding Company and CFBank are subject to examination and comprehensive federal regulation and oversight by federal banking agencies. Such regulation and oversight is intended primarily for the protection of consumers, depositors, borrowers, the FDIC’s Deposit Insurance Fund (the “DIF”) and the banking system as a whole and not for the protection of shareholders. Applicable laws and regulations restrict permissible activities and investments and require actions to protect loan, deposit, brokerage, fiduciary and other customers, as well as the DIF. They also may restrict the Holding Company’s ability to repurchase its stock or to receive dividends from CFBank and impose capital adequacy and liquidity requirements.

As a financial holding company, the Holding Company is subject to regulation by the Federal Reserve Board (the “FRB”) under the Bank Holding Company Act and to inspection, examination and supervision by the FRB. The Holding Company is also subject to the disclosure and regulatory requirements of the Securities Act of 1933, as amended (the “Securities Act”), and the Securities Exchange Act of 1934, as amended (the “Exchange Act”), as administered by the SEC. The Holding Company’s common stock trades on the NASDAQ Capital Market under the symbol “CFBK,” which subjects the Holding Company to various requirements under the NASDAQ Marketplace Rules.

CFBank, as a national banking association, is subject to regulation, supervision and examination primarily by the Office of the Comptroller of the Currency (the “OCC”). In addition, CFBank is subject to regulation and examination by the FDIC, which insures the deposits of CFBank to the maximum extent permitted by law, and certain other requirements established by the FDIC.

The Dodd-Frank Wall Street Reform and Consumer Protection Act of 2010 (the “Dodd-Frank Act”) established the Consumer Financial Protection Bureau (the “CFPB”), which regulates consumer financial products and services and certain financial services providers. The CFPB is authorized to prevent unfair, deceptive or abusive acts or practices and ensures consistent enforcement of laws so that consumers have access to fair, transparent and competitive markets for consumer financial products and services. Since its establishment, the CFPB has exercised extensively its rulemaking and interpretative authority.

Federal law provides federal banking regulators, including the OCC, the FRB and the FDIC, with substantial enforcement powers. The enforcement authority of the OCC and the FRB over national banks and their holding companies includes, among other things, the ability to assess civil money penalties, to issue cease and desist or removal orders and to initiate injunctive actions. In general, these enforcement actions may be initiated for violations of laws and regulations and unsafe and unsound practices. Other actions or inactions may also provide the basis for enforcement action.

Regulation of the Holding Company

General. As a financial holding company, the Holding Company’s activities are subject to extensive regulation by the FRB. The Holding Company is required to file reports with the FRB and such additional information as the FRB may require, and is subject to regular examinations by the FRB. The FRB also has extensive enforcement authority over financial holding companies, including, among other things, the ability to assess civil money penalties, issue cease and desist or removal orders, and require that a financial holding company divest subsidiaries (including a subsidiary bank). In general, the FRB may initiate enforcement actions for violations of laws and regulations and unsafe or unsound practices.

Source of Strength. A financial holding company is required by law and FRB policy to act as a source of financial strength to each subsidiary bank and to commit resources to support such subsidiary bank. The FRB may require a financial holding company to contribute additional capital to an undercapitalized subsidiary bank and may disapprove of the payment of dividends to shareholders if the FRB believes the payment of such dividends would be an unsafe or unsound practice.

Prior FRB Approval. The Bank Holding Company Act (the “BHCA”) requires the prior approval of the FRB in any case where a financial holding company proposes to:

acquire direct or indirect ownership or control of more than 5% of the voting shares of any bank that is not already majority-owned by the financial holding company;

acquire all or substantially all of the assets of another bank or another financial or bank holding company; or

merge or consolidate with any other financial or bank holding company.

In April 2020, the FRB adopted a final rule to revise its regulations related to determinations of whether a company has the ability to exercise a controlling influence over another company for purposes of the BHCA. The final rule expands and codifies the presumptions for use in such determinations. By codifying the presumptions, the final rule provides greater transparency on the types of relationships that the FRB generally views as supporting a facts-and-circumstances determination that one company controls another company. The FRB’s final rule applies to questions of control under the BHCA, but does not extend to the Change in Bank Control Act.

Financial Holding Company Status. A qualifying bank holding company may elect to become a financial holding company and thereby affiliate with securities firms and insurance companies and engage in other activities that are financial in nature and not otherwise permissible for a bank holding company, if the holding company is “well managed” and “well capitalized” and each of its subsidiary banks is well capitalized under the Federal Deposit Insurance Corporation Act of 1991 prompt corrective action provisions, is well managed, and has at least a satisfactory rating under the Community Reinvestment Act (the “CRA”). The Holding Company became a financial holding company effective as of December 1, 2016.

No regulatory approval is required for a financial holding company to acquire a company, other than a bank or savings association, engaged in activities that are financial in nature or incidental to activities that are financial in nature, as determined by the FRB. The Financial Services Modernization Act defines “financial in nature” to include:

securities underwriting, dealing and market making;

sponsoring mutual funds and investment companies;

insurance underwriting and agency;

merchant banking; and

activities that the FRB has determined to be closely related to banking.

A national bank also may engage, subject to limitations on investment, in activities that are financial in nature, other than insurance underwriting, insurance company portfolio investment, real estate development and real estate investment, through a financial subsidiary of the bank, if the bank is well capitalized and well managed and has at least a satisfactory CRA rating. If a financial holding company or a subsidiary bank fails to maintain all requirements for the holding company to maintain financial holding company status, material restrictions may be placed on the activities of the financial holding company and its subsidiaries and on the ability of the holding company to enter into certain transactions and obtain regulatory approvals for new activities and transactions. The financial holding company could also be required to divest of subsidiaries that engage in activities that are not permitted for bank holding companies that are not financial holding companies. If restrictions are imposed on the activities of a financial holding company, the existence of such restrictions may not be made publicly available pursuant to confidentiality regulations of the bank regulatory agencies.

Each subsidiary bank of a financial holding company is subject to certain restrictions on the maintenance of reserves against deposits, extensions of credit to the financial holding company or any of its subsidiaries, investments in the stock or other securities of the financial holding company or its subsidiaries and the taking of such stock or securities as collateral for loans to any borrower. Further, a financial holding company and its subsidiaries are prohibited from engaging in certain tying arrangements in connection with any extension of credit, lease or sale of property or furnishing of any services. Various consumer laws and regulations also affect the operations of these subsidiaries.

Economic Growth, Regulatory Relief and Consumer Protection Act

On May 25, 2018, the Economic Growth, Regulatory Relief and Consumer Protection Act (the "Regulatory Relief Act") was signed into law. The Regulatory Relief Act repealed or modified certain provisions of the Dodd-Frank Act and eased restrictions on all but the largest banks (those with consolidated assets in excess of $250 billion). Bank holding companies with consolidated assets of less than $100 billion, including the Company, are no longer subject to enhanced prudential standards. The Regulatory Relief Act also relieves bank holding companies and banks with consolidated assets of less than $100 billion, including the Company, from certain record-keeping, reporting and disclosure requirements. Certain other regulatory requirements applied only to banks with consolidated assets in excess of $50 billion and so did not apply to the Company even before the enactment of the Regulatory Relief Act.

Transactions with Affiliates, Directors, Executive Officers and Shareholders

Sections 23A and 23B of the Federal Reserve Act and FRB Regulation W generally:

limit the extent to which a bank or its subsidiaries may engage in “covered transactions” with any one affiliate;

limit the extent to which a bank or its subsidiaries may engage in “covered transactions” with all affiliates; and

require that all such transactions be on terms (including interest rates charged and collateral required) substantially the same, or at least as favorable to the bank or subsidiary, as those provided to a non-affiliate.

An affiliate of a bank is any company or entity which controls, is controlled by or is under common control with the bank. The term “covered transaction” includes the making of loans to an affiliate, the purchase of assets from an affiliate, the issuance of a guarantee on behalf of an affiliate, the purchase of securities issued by an affiliate and other similar types of transactions with an affiliate.

A bank’s authority to extend credit to executive officers, directors and greater than 10% shareholders, as well as entities such persons control, is subject to Sections 22(g) and 22(h) of the Federal Reserve Act and Regulation O promulgated thereunder by the FRB. Among other things, these loans must be made on terms (including interest rates charged and collateral required) substantially the same as those offered to unaffiliated individuals or be made as part of a benefit or compensation program and on terms widely available to employees, and must not involve a greater than normal risk of repayment. In addition, the amount of loans a bank may make to these persons is based, in part, on the bank’s capital position, and specified approval procedures must be followed in making loans which exceed specified amounts.

Regulation of CFBank

General. CFBank, as a national bank, is subject to regulation, periodic examination, enforcement authority and oversight by the OCC extending to all aspects of CFBank’s operations. OCC regulations govern permissible activities, capital requirements, dividend limitations, investments, loans and other matters. CFBank also is subject to regulation and examination by the FDIC, which insures the deposits of CFBank to the maximum extent permitted by law. Furthermore, CFBank is subject, as a member bank, to certain rules and regulations of the FRB, many of which restrict activities and prescribe documentation to protect consumers. In addition, the establishment of branches by CFBank is subject to prior approval of the OCC. The OCC has broad enforcement powers over national banks, including the power to impose fines and other civil and criminal penalties and to appoint a conservator or receiver if any of a number of conditions are met.

The CFPB regulates consumer financial products and services provided by CFBank through interpretations designed to protect consumers.

Regulatory Capital. National banks are required to maintain a minimum level of regulatory capital. The OCC has adopted risked-based capital guidelines for national banks, which guidelines include both a definition of capital and a framework for calculating risk weighted assets by assigning assets and off-balance-sheet items to broad risk categories.

In July 2013, the United States banking regulators issued new capital rules applicable to smaller banking organizations which also implement certain of the provisions of the Dodd-Frank Act (the “Basel III Capital Rules”). Community banking organizations, including CFBank, began transitioning to the new rules on January 1, 2015. The new minimum capital requirements became effective on January 1, 2015, whereas a new capital conservation buffer and deductions from common equity capital phased in from January 1, 2016 through January 1, 2019, and most deductions from common equity tier 1 capital were phased in from January 1, 2015 through January 1, 2019.

The Basel III Capital Rules include (a) a minimum common equity tier 1 capital ratio of 4.5%, (b) a minimum Tier 1 capital ratio of 6.0%, (c) a minimum total capital ratio of 8.0%, and (d) a minimum leverage ratio of 4.0%.

Common equity for the common equity tier 1 capital ratio generally includes common stock (plus related surplus), retained earnings, accumulated other comprehensive income (unless an institution elects to exclude such income from regulatory capital), and limited amounts of minority interests in the form of common stock, subject to applicable regulatory adjustments and deductions.

Tier 1 capital generally includes common equity as defined for the common equity tier 1 capital ratio, plus certain non-cumulative preferred stock and related surplus, cumulative preferred stock and related surplus and trust preferred securities that have been grandfathered (but which are not permitted going forward), and limited amounts of minority interests in the form of additional Tier 1 capital instruments, less certain deductions.

Tier 2 capital, which can be included in the total capital ratio, generally consists of other preferred stock and subordinated debt meeting certain conditions plus limited amounts of the allowance for loan and lease losses, subject to specified eligibility criteria, less applicable deductions.

The deductions from common equity tier 1 capital include goodwill and other intangibles, certain deferred tax assets, mortgage-servicing assets above certain levels, gains on sale in connection with a securitization, investments in a banking organization’s own capital instruments and investments in the capital of unconsolidated financial institutions (above certain levels).

Under the guidelines, capital is compared to the relative risk related to the balance sheet. To derive the risk included in the balance sheet, one of several risk weights is applied to different balance sheet and off-balance sheet assets, primarily based on the relative credit risk of the counterparty. The capital amounts and classification are also subject to qualitative judgments by the regulators about components, risk weightings and other factors.

The Basel III Capital Rules also place restrictions on the payment of capital distributions, including dividends, and certain

discretionary bonus payments to executive officers if the banking organization does not hold a capital conservation buffer of greater than 2.5 percent composed of common equity tier 1 capital above its minimum risk-based capital requirements, or if its eligible retained income is negative in that quarter and its capital conservation buffer ratio was less than 2.5 percent at the beginning of the quarter.

In September 2019, the FRB, along with other federal bank regulatory agencies, issued a final rule, effective January 1, 2020, that gave community banks, including CFBank, the option to calculate a simple leverage ratio to measure capital adequacy if the community banks met certain requirements. Under the rule, a community bank is eligible to elect the Community Bank Leverage Ratio ("CBLR") framework if it had less than $10 billion in total consolidated assets, limited amounts of certain assets and off-balance sheet exposures, and a leverage ratio greater than 9.0%. Qualifying institutions that elected to use the CBLR framework (each, a “CBLR Bank”) and that maintain a leverage ratio of greater than 9.0% will be considered to have satisfied the risk-based and leverage capital requirements in the regulatory agencies' generally applicable capital rules and to have met the well-capitalized ratio requirements. No CBLR Bank was required to calculate or report risk-based capital, and each CBLR Bank could opt out of the framework at any time, without restriction, by reverting to the generally applicable risk-based capital rule. Pursuant to the CARES Act, on August 26, 2020, the federal banking agencies adopted a final rule that temporarily lowered the CBLR threshold and provided a gradual transition back to the prior level. Specifically, the CBLR threshold was reduced to 8.0% for the remainder of 2020, increased to 8.5% for 2021, and returned to 9.0% on January 1, 2022. This final rule became effective on October 1, 2020. The Company did not utilize the CBLR in assessing capital adequacy and, instead, continued to follow existing capital rules.

In December 2018, the federal banking agencies issued a final rule to address regulatory capital treatment of credit loss allowances under the current expected credit loss (“CECL”) model (accounting standard). The rule revises the federal banking agencies’ regulatory capital rules to identify which credit loss allowances under the CECL model are eligible for inclusion in regulatory capital and to provide banking organizations the option to phase in over three years the day-one adverse effects on regulatory capital that may result from the adoption of the CECL model.

The federal banking agencies have established a system of prompt corrective action to resolve certain of the problems of undercapitalized institutions. This system is based on five capital level categories for insured depository institutions: “well capitalized,” “adequately capitalized,” “undercapitalized,” “significantly undercapitalized” and “critically undercapitalized.”

The federal banking agencies may (or in some cases must) take certain supervisory actions depending upon a bank’s capital level. For example, the banking agencies must appoint a receiver or conservator for a bank within 90 days after the bank becomes “critically undercapitalized” unless the bank’s primary regulator determines, with the concurrence of the FDIC, that other action would better achieve regulatory purposes. Banking operations otherwise may be significantly affected depending on a bank’s capital category. For example, a bank that is not “well capitalized” generally is prohibited from accepting brokered deposits and offering interest rates on deposits higher than the prevailing rate in its market, and the holding company of any undercapitalized depository institution must guarantee, in part, specific aspects of the bank’s capital plan for the plan to be acceptable.

In order to be “well-capitalized”, a bank must have a common equity tier I capital ratio of at least 6.5%, a total risk-based capital of at least 10.0%, a Tier 1 risk-based capital ratio of at least 8.0% and a leverage ratio of at least 5.0%, and the bank must not be subject to any written agreement, order, capital directive or prompt corrective action directive to meet and maintain a specific capital level for any capital measure. The Company’s management believes that CFBank met the ratio requirements to be deemed “well-capitalized” according to the guidelines described above as of December 31, 2021.

The Holding Company currently qualifies under the FRB’s Small Bank Holding Company Policy Statement for exemption from the FRB’s consolidated risk-based capital and leverage rules at the holding company level. In April 2015, the FRB issued a final rule which increased the size limitation for qualifying bank holding companies under the Small Bank Holding Company Policy Statement from $500 million to $1 billion of total consolidated assets. In August 2018, the FRB issued an interim final rule, as required by the Regulatory Relief Act, to further increase the size limitation under the Small Bank Holding Company Policy Statement to $3 billion of total consolidated assets.

FDIC Regulation and Insurance of Accounts. CFBank’s deposits are insured up to the applicable limits by the FDIC, and such insurance is backed by the full faith and credit of the United States Government. The general deposit insurance limit is $250,000 per separately insured depositor. As insurer, the FDIC imposes deposit insurance premiums and is authorized to conduct examinations of and to require reporting by FDIC-insured institutions, to prohibit any insured institution from engaging in any activity the FDIC determines to pose a threat to the DIF, and to take enforcement actions against insured institutions. The FDIC may terminate insurance of deposits of any insured institution if the FDIC finds that the insured institution has engaged in unsafe and unsound practices, is in an unsafe or unsound condition or has violated any applicable law, regulation, rule, order or condition imposed by the FDIC or any other regulatory agency.

The FDIC assesses quarterly deposit insurance premiums on each insured institution based on risk characteristics of the insured institution and may also impose special assessments in emergency situations. The premiums fund the DIF. Pursuant to the Dodd-

Frank Act, the FDIC has established 2.0% as the designated reserve ratio (“DRR”), which is the amount in the DIF as a percentage of all DIF insured deposits. In March 2016, the FDIC adopted final rules designed to meet the statutory minimum DRR of 1.35% by September 30, 2020, the deadline imposed by the Dodd-Frank Act. The Dodd-Frank Act requires the FDIC to offset the effect on insured institutions with assets of less than $10 billion of the increase in the statutory minimum DRR to 1.35% from the former statutory minimum of 1.15%. Although the FDIC's rules reduced assessment rates on all banks, they imposed a surcharge on banks with assets of $10 billion or more to be paid until the DRR reached 1.35%. The DRR met the statutory minimum of 1.35% on September 30, 2018. As a result, the previous surcharge imposed on banks with assets of $10 billion or more was lifted. In addition, preliminary assessment credits have been determined by the FDIC for banks with assets of less than $10 billion, which had previously contributed to the increase of the DRR to 1.35%. On June 30, 2019, the DRR reached 1.40%, and the FDIC applied credits for banks with assets of less than $10 billion ("small bank credits") beginning September 30, 2019. As of June 30, 2021, the DRR fell below the minimum DRR to 1.30%. As a result, the FDIC adopted a restoration plan requiring the restoration of the DRR to 1.35% within eight years (September 30, 2028). This restoration plan maintained the scheduled assessment rates for all insured institutions. As of September 30, 2021, the DRR was 1.27%. The FDIC rules further changed the method of determining risk-based assessment rates for established banks with less than $10 billion in assets to better ensure that banks taking on greater risks pay more for deposit insurance than banks that take on less risk.

Limitations on Dividends and Other Capital Distributions. Banking regulations impose various restrictions on distributions of capital, which include dividends, stock redemptions or repurchases, cash-out mergers and other transactions charged to the capital account.

Generally, for national banks such as CFBank, it is required that before and after the proposed distribution the institution remain well-capitalized. National banks may make capital distributions during any calendar year equal to the greater of 100% of net income for the year-to-date plus retained net income for the two preceding years. However, an institution deemed to be in need of more than normal supervision by the OCC may have its dividend authority restricted by the OCC. In addition, to the extent that a national bank has a negative accumulated deficit, any distributions or dividends by the bank are subject to prior non-objection by the OCC.

The ability of the Holding Company to pay dividends on its common stock is dependent upon the amount of cash and liquidity available at the Holding Company level, as well as the receipt of dividends and other distributions from CFBank to the extent necessary to fund such dividends. As of December 31, 2021, the Holding Company had a total of $819,000 of cash at the Holding Company level. At December 31, 2021, the Holding Company also had $10.3 million available on its revolving line-of-credit facility.

The Holding Company also is subject to various legal and regulatory policies and requirements impacting the Holding Company’s ability to pay dividends on its stock. In addition, the Holding Company’s ability to pay dividends on its stock is conditioned upon the payment, on a current basis, of quarterly interest payments on the subordinated debentures underlying the Company’s trust preferred securities. Finally, under the terms of the Company’s fixed-to-floating rate subordinated debt, the Holding Company’s ability to pay dividends on its stock is conditioned upon the Holding Company continuing to make required principal and interest payments, and not incurring an event of default, with respect to the subordinated debt. See Note 17, Regulatory Capital Matters, in the accompanying Notes to Consolidated Financial Statements for additional information.

Federal income tax laws provided deductions, totaling $2.3 million, for thrift bad debt reserves established before 1988. Accounting standards do not require a deferred tax liability to be recorded on this amount, which otherwise would total $473,000 at year-end 2021. However, if CFBank were wholly or partially liquidated or otherwise ceases to be a bank, or if tax laws were to change, this amount would have to be recaptured and a tax liability recorded. Additionally, any distributions in excess of CFBank’s current or accumulated earnings and profits would reduce amounts allocated to its bad debt reserve and create a tax liability for CFBank.

Federal Home Loan Bank

The Federal Home Loan Banks (“FHLBs”) provide credit to their members in the form of advances. CFBank is a member of the FHLB of Cincinnati. As an FHLB member, CFBank must maintain an investment in the capital stock of the FHLB of Cincinnati.

Upon the origination or renewal of a loan or advance, each FHLB is required by law to obtain and maintain a security interest in certain types of collateral. Each FHLB is required to establish standards of community investment or service that its members must maintain for continued access to long-term advances from the FHLB. The standards take into account a member’s performance under the CRA and the member’s record of lending to first-time home buyers.

Community Reinvestment Act

The CRA requires CFBank’s primary federal regulatory agency, the OCC, to assess CFBank’s record in meeting the credit needs of the communities it serves. The OCC assigns one of four ratings: outstanding, satisfactory, needs to improve or substantial noncompliance. The rating assigned to a financial institution is considered in connection with various applications submitted by the financial institution or its holding company to its banking regulators, including applications to acquire another financial institution or

to open or close a branch office. In addition, all subsidiary banks of a financial holding company must maintain a satisfactory or outstanding rating in order for the financial holding company to avoid limitations on its activities.

Consumer Protection Laws and Regulations

Banks are subject to regular examination to ensure compliance with federal consumer protection statutes and regulations, including, but not limited to, the following:

The Equal Credit Opportunity Act (prohibiting discrimination in any credit transaction on the basis of any of various criteria);

The Truth in Lending Act (requiring that credit terms are disclosed in a manner that permits a consumer to understand and compare credit terms more readily and knowledgeably);

The Fair Housing Act (making it unlawful for a lender to discriminate in its housing-related lending activities against any person on the basis of certain criteria);

The Home Mortgage Disclosure Act (requiring financial institutions to collect data that enables regulatory agencies to determine whether financial institutions are serving the housing credit needs of the communities in which they are located); and

The Real Estate Settlement Procedures Act (requiring that lenders provide borrowers with disclosures regarding the nature and cost of real estate settlements and prohibits abusive practices that increase borrowers’ costs).

The banking regulators also use their authority under the Federal Trade Commission Act to take supervisory or enforcement action with respect to unfair or deceptive acts or practices by banks that may not necessarily fall within the scope of a specific banking or consumer finance law.

COVID-19 Legislation and Initiatives

In response to the novel COVID-19 pandemic (“COVID-19”), the Coronavirus Aid, Relief, and Economic Security Act of 2020, as amended (the “CARES Act”), was signed into law on March 27, 2020, to provide national emergency economic relief measures. Many of the CARES Act’s programs are dependent upon the direct involvement of U.S. financial institutions, such as the Holding Company and CFBank, and have been implemented through rules and guidance adopted by federal departments and agencies, including the U.S. Department of Treasury, the FRB and other federal banking agencies, including those with direct supervisory jurisdiction over the Holding Company and CFBank. Furthermore, as COVID-19 evolves, federal regulatory authorities continue to issue additional guidance with respect to the implementation, lifecycle, and eligibility requirements for the various CARES Act programs as well as industry-specific recovery procedures for COVID-19. In addition, it is possible that Congress will enact supplementary COVID-19 response legislation, including amendments to the CARES Act or new bills comparable in scope to the CARES Act. For example, on December 27, 2020, the Consolidated Appropriations Act, 2021 (the “CAA”) was signed into law, which, among other things, allowed certain banks to temporarily postpone implementation of the current expected credit loss model (accounting standard), which is described above. The Company is continuing to assess the impact of the CARES Act and other statues, regulations and supervisory guidance related to COVID-19.

The CARES Act created the PPP as a new guaranteed, unsecured loan program to fund operational costs of eligible businesses, organizations and self-employed persons during COVID-19. These loans are eligible to be forgiven if certain conditions are satisfied and are fully guaranteed by the SBA. In June 2020, the Paycheck Protection Program Flexibility Act was enacted, which, among other things, gave borrowers additional time and flexibility to use PPP loan proceeds. After previously being extended by Congress, the application deadline for PPP loans expired on May 31, 2021. No collateral or personal guarantees were required for PPP loans. In addition, neither the government nor lenders have been permitted to charge the recipients of PPP loans any fees. On December 27, 2020, the President signed into law omnibus federal spending and economic stimulus legislation titled the “Consolidated Appropriations Act, 2021” that included the Economic Aid to Hard-Hit Small Businesses, Nonprofits, and Venues Act (the “HHSB Act”). Among other things, the HHSB Act renewed the PPP, allocating $284.45 billion for both new first-time PPP loans under the existing PPP and the expansion of existing PPP loans for certain qualified, existing PPP borrowers. In addition to extending and amending the PPP, the HHSB Act also creates a new grant program for “shuttered venue operators.” As a participating lender in the PPP, CFBank continues to monitor legislative, regulatory, and supervisory developments related thereto.

On September 29, 2020, the federal bank regulatory agencies issued a final rule that neutralizes the regulatory capital and liquidity coverage ratio effects of participating in certain COVID-19 liquidity facilities due to the fact there is no credit or market risk in association with exposures pledged to such facilities. As a result, the final rule supports the flow of credit to households and businesses affected by COVID-19.

On December 2, 2020, the federal bank regulatory agencies issued an interim final rule that provides temporary relief for specified community banking organizations related to certain regulations and reporting requirements as a result, in large part, of their growth in size from the response to COVID-19. Community banking organizations are subject to different rules and requirements based on their risk profile and asset size. Due to their involvement in federal COVID-19 response programs (such as the PPP) and other lending that supports the U.S. economy, many community banking organizations experienced rapid and unexpected increases in their sizes, which were generally expected to be temporary. The temporary increase in size could have subjected community banking organizations to new regulations or reporting requirements. However, community banking organizations, such as the Holding Company and CFBank, under $10.0 billion in total assets as of December 31, 2019 were permitted to use asset data as of December 31, 2019, to determine the applicability of various regulatory asset thresholds during calendar years 2020 and 2021. As such, it was not until January 1, 2022 that asset growth again triggered new regulatory requirements for these community banking organizations.

Patriot Act and Anti-Money Laundering

In response to the terrorist events of September 11, 2001, the Uniting and Strengthening of America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001 (the “Patriot Act”) was signed into law in October 2001. The Patriot Act gives the United States government powers to address terrorist threats through enhanced domestic security measures, expanded surveillance powers, increased information sharing and broadened anti-money laundering requirements. Title III of the Patriot Act takes measures intended to encourage information sharing among bank regulatory agencies and law enforcement bodies. Further, certain provisions of Title III impose affirmative obligations on a broad range of financial institutions. Among other requirements, Title III and related regulations require regulated financial institutions to establish a program specifying procedures for obtaining identifying information from customers seeking to open new accounts and establish enhanced due diligence policies, procedures and controls designed to detect and report suspicious activity. CFBank has established policies and procedures that are believed to be compliant with the requirements of the Patriot Act.

The Anti-Money Laundering Act of 2020 (the “AMLA”), which amends the Bank Secrecy Act of 1970 (the “BSA”), was enacted in January 2021. The AMLA is intended to be a comprehensive reform and modernization to U.S. bank secrecy and anti-money laundering laws. Among other things, it codifies a risk-based approach to anti-money laundering compliance for financial institutions; requires the development of standards for evaluating technology and internal processes for BSA compliance; expands enforcement-related and investigation-related authority, including increasing available sanctions for certain BSA violations and instituting BSA whistleblower initiatives and protections.

Office of Foreign Assets Control Regulation

The U.S. Treasury Department’s Office of Foreign Assets Control (“OFAC”) administers and enforces economic and trade sanctions against targeted foreign countries and regimes, under authority of various laws, including designated foreign countries, nationals and others. OFAC publishes lists of specially designated targets and countries. CFBank is responsible for, among other things, blocking accounts of, and transactions with, such targets and countries, prohibiting unlicensed trade and financial transactions with them and reporting blocked transactions after their occurrence. Failure to comply with these sanctions could have serious financial, legal and reputational consequences, including causing applicable bank regulatory authorities not to approve merger or acquisition transactions when regulatory approval is required or to prohibit such transactions even if approval is not required. Regulatory authorities have imposed cease and desist orders and civil money penalties against institutions found to be violating these obligations.

Corporate Governance

As mandated by the Sarbanes-Oxley Act of 2002, the SEC has adopted rules and regulations governing, among other issues, corporate governance, auditing and accounting, executive compensation and enhanced and timely disclosure of corporate information. The Nasdaq Stock Market has also adopted corporate governance rules. The Board of Directors of the Company has taken a series of actions to strengthen and improve the Company’s already strong corporate governance practices in light of the rules of the SEC and Nasdaq. The Board of Directors has adopted charters for the Board’s various committees, including the Audit Committee, the Compensation Committee, and the Nominating and Corporate Governance Committee, as well as a Code of Business Conduct and Ethics governing the directors, officers and employees of the Company.

Executive and Incentive Compensation

The Dodd-Frank Act requires that the federal banking agencies, including the FRB and the FDIC, issue a rule related to incentive-based compensation. No final rule implementing this provision of the Dodd-Frank Act has, as of the date of the filing of this Annual Report on Form 10-K, been adopted, but a proposed rule was published in 2016 that expanded upon a prior proposed rule published in 2011. The proposed rule is intended to: (i) prohibit incentive-based payment arrangements that the banking agencies determine could encourage certain financial institutions to take inappropriate risks by providing excessive compensation or that could lead to material financial loss; (ii) require the board of directors of those financial institutions to take certain oversight actions related to incentive-based compensation; and (iii) require those financial institutions to disclose information concerning incentive-based compensation

arrangements to the appropriate federal regulator. Although a final rule has not been issued, the Company has undertaken efforts to ensure that the Company’s incentive compensation plans do not encourage inappropriate risks, consistent with the principles identified above.

In June 2010, the FRB, the OCC and the FDIC issued comprehensive final guidance on incentive compensation policies intended to ensure that the incentive compensation policies of banking organizations do not undermine the safety and soundness of such organizations by encouraging excessive risk-taking. The guidance, which covers all employees that have the ability to materially affect the risk profile of an organization, either individually or as part of a group, is based upon the key principles that a banking organization's incentive compensation arrangements should (i) provide incentives that do not encourage risk-taking beyond the organization's ability to effectively identify and manage risks, (ii) be compatible with effective internal controls and risk management and (iii) be supported by strong corporate governance, including active and effective oversight by the organization's board of directors. These three principles are incorporated into the proposed joint compensation regulations under the Dodd-Frank Act, described above.

The FRB and the OCC review, as part of their respective regular, risk-focused examination process, the incentive compensation arrangements of banking organizations, such as the Holding Company and CFBank, that are not “large, complex banking organizations.” These reviews are tailored to each organization based on the scope and complexity of the organization’s activities and the prevalence of incentive compensation arrangements. Deficiencies will be incorporated into the organization's supervisory ratings, which can affect the organization's ability to make acquisitions and take other actions. Enforcement actions may be taken against a banking organization if its incentive compensation arrangements, or related risk-management control or governance processes, pose a risk to the organization's safety and soundness and the organization is not taking prompt and effective measures to correct the deficiencies.

Pursuant to rules adopted by the stock exchanges and approved by the SEC in January 2013 under the Dodd-Frank Act, public company compensation committee members must meet heightened independence requirements and consider the independence of compensation consultants, legal counsel and other advisors to the compensation committee. A compensation committee must have the authority to hire advisors and to have the public company fund reasonable compensation of such advisors.

Public companies will be required, once stock exchanges impose additional listing requirements under the Dodd-Frank Act, to implement “clawback” procedures for incentive compensation payments and to disclose the details of the procedures which allow recovery of incentive compensation that was paid on the basis of erroneous financial information necessitating a restatement due to material noncompliance with financial reporting requirements. This clawback policy is intended to apply to compensation paid within a three-year look-back window of the restatement and would cover all executives who received incentive awards.

SEC regulations require public companies such as the Holding Company to provide various disclosures about executive compensation in annual reports and proxy statements and to present to their shareholders a non-binding vote on the approval of executive compensation.

Financial Privacy Provisions

Federal and state regulations limit the ability of banks and other financial institutions to disclose non-public information about consumers to non-affiliated third parties. These limitations require disclosure of privacy policies to consumers and, in some circumstances, allow consumers to prevent disclosure of certain personal information to a non-affiliated third party. These regulations affect how consumer information is transmitted through diversified financial companies and conveyed to outside vendors.

CFBank is also subject to regulatory guidelines establishing standards for safeguarding customer information. These guidelines describe the federal bank regulatory agencies' expectations for the creation, implementation and maintenance of an information security program, which would include administrative, technical and physical safeguards appropriate to the size and complexity of the institution and the nature and scope of its activities. The standards set forth in the guidelines are intended to ensure the security and confidentiality of customer records and information, protect against any anticipated threats or hazards to the security or integrity of such records and protect against unauthorized access to or use of such records or information that could result in substantial harm or inconvenience to any customer.

Cybersecurity

In March 2015, federal regulators issued two related statements regarding cybersecurity. One statement indicates that financial institutions should design multiple layers of security controls to establish several lines of defense and to ensure that their risk management processes also address the risk posed by compromised customer credentials, including security measures to reliably authenticate customers accessing Internet-based services of the financial institution. The other statement indicates that a financial institution’s management is expected to maintain sufficient business continuity planning processes to ensure the rapid recovery, resumption and maintenance of the financial institution’s operations after a cyber attack involving destructive malware. A financial institution is also expected to develop appropriate processes to enable recovery of data and business operations and address rebuilding

network capabilities and restoring data if the financial institution or its critical service providers fall victim to this type of cyber-attack. If CFBank fails to observe the regulatory guidance, it could be subject to various regulatory sanctions, including financial penalties.

In February 2018, the SEC published interpretive guidance to assist public companies in preparing disclosures about cybersecurity risks and incidents. These SEC guidelines, and any other regulatory guidance, are in addition to notification and disclosure requirements under state and federal banking law and regulations.

In November 2021, the OCC, the FRB and the FDIC issued a final rule requiring banking organizations that experience a computer-security incident to notify certain entities. A computer-security incident occurs when actual or potential harm to the confidentiality, integrity, or availability of an information system or the information occurs, or there is a violation or imminent threat of a violation to banking security policies and procedures. The affected bank must notify its respective federal regulator of the computer-security incident as soon as possible and no later than 36 hours after the bank determines a computer-security incident has occurred. These notifications are intended to promote early awareness of threats to banking organizations and will help banks react to those threats before they manifest into bigger incidents. This rule also requires bank service providers to notify its customers of a computer-security incident.

State regulators have also been increasingly active in implementing privacy and cybersecurity standards and regulations. Recently, several states have adopted regulations requiring certain financial institutions to implement cybersecurity programs and providing detailed requirements with respect to these programs, including data encryption requirements. Many states have also recently implemented or modified their data breach notification and data privacy requirements. The Company expects this trend of state-level activity in those areas to continue, and is continually monitoring developments in the states in which our customers are located.

In the ordinary course of business, the Company relies on electronic communications and information systems to conduct its operations and to store sensitive data. The Company employs significant resources, processes and technology to manage and maintain cybersecurity controls. The Company employs a variety of preventative and detective tools to monitor, block, and provide alerts regarding suspicious activity, as well as to report on any suspected advanced persistent threats. Notwithstanding the strength of the Company’s defensive measures, the threat from cyber attacks is severe, attacks are sophisticated and increasing in volume, and attackers respond rapidly to changes in defensive measures. Although to date the Company has not detected a significant compromise, significant data loss or any material financial losses related to cybersecurity attacks, the Company’s systems and those of its customers and third-party service providers are under constant threat and it is possible that the Company could experience a significant event in the future. Risks and exposures related to cybersecurity attacks are expected to remain high for the foreseeable future due to the rapidly evolving nature and sophistication of these threats, as well as due to the expanding use of Internet banking, mobile banking and other technology-based products and services by us and our customers.

Effect of Environmental Regulation

Compliance with federal, state and local provisions regulating the discharge of materials into the environment, or otherwise relating to the protection of the environment, has not had a material effect upon the capital expenditures, earnings or competitive position of the Company. In the opinion of management, the Company does not have exposure to material costs associated with compliance with environmental laws and regulations or material expenditures related to environmental hazardous waste mitigation or cleanup.

The Company believes its primary exposure to environmental risk is through the lending activities of CFBank. In cases where management believes environmental risk potentially exists, CFBank mitigates its environmental risk exposure by requiring environmental site assessments at the time of loan origination to confirm collateral quality as to commercial real estate parcels posing higher than normal potential for environmental impact, as determined by reference to present and past uses of the subject property and adjacent sites. In addition, environmental assessments are typically required prior to any foreclosure activity involving non-residential real estate collateral.

Federal and State Taxation

Federal Taxation General. We report income on a calendar year, consolidated basis using the accrual method of accounting, and we are subject to federal income taxation in the same manner as other corporations, with some exceptions discussed below. The following discussion of tax matters is intended only as a summary and does not purport to be a comprehensive description of the tax rules applicable to the Company and CFBank.

Our deferred tax assets are composed of U.S. net operating losses (“NOLs”), and other temporary book to tax differences. When determining the amount of deferred tax assets that are more-likely-than-not to be realized, and therefore recorded as a benefit, the Company conducts a regular assessment of all available information. This information includes, but is not limited to, taxable income in prior periods, projected future income and projected future reversals of deferred tax items. Based on these criteria, the Company determined as of December 31, 2021 that no valuation allowance was required against the net deferred tax asset.

In 2012, a recapitalization program through the sale of $22.5 million in common stock improved the capital levels of CFBank and

provided working capital for the Holding Company. The result of the change in stock ownership associated with the stock offering, however, was that the Company incurred an ownership change within the guidelines of Section 382 of the Internal Revenue Code of 1986. At year-end 2021, the Company had net operating loss carryforwards of $22.3 million, which expire at various dates from 2024 to 2032. As a result of the ownership change, the Company's ability to utilize carryforwards that arose before the 2012 stock offering closed is limited to $163,000 per year. Due to this limitation, management determined it is more likely than not that $20.5 million of net operating loss carryforwards will expire unutilized. As required by accounting standards, the Company reduced the carrying value of deferred tax assets, and the corresponding valuation allowance, by the $7.0 million tax effect of this lost realizability.

Federal income tax laws provided additional deductions, totaling $2.3 million, for thrift bad debt reserves established before 1988. Accounting standards do not require a deferred tax liability to be recorded on this amount, which otherwise would have totaled $473,000 at year-end 2021. However, if CFBank were wholly or partially liquidated or otherwise ceases to be a bank, or if tax laws were to change, this amount would have to be recaptured and a tax liability recorded. Additionally, any distributions in excess of CFBank’s current or accumulated earnings and profits would reduce amounts allocated to its bad debt reserve and create a tax liability for CFBank. See Note 13 in the accompanying Notes to Consolidated Financial Statements for additional information.

Distributions. Under the Small Business Job Protection Act of 1996, if CFBank makes “non-dividend distributions” to the Company, such distributions will be considered to have been made from CFBank’s unrecaptured tax bad debt reserves (including the balance of its reserves as of December 31, 1987) to the extent thereof, and then from CFBank’s supplemental reserve for losses on loans, to the extent thereof, and an amount based on the amount distributed (but not in excess of the amount of such reserves) will be included in CFBank’s taxable income. Non-dividend distributions include distributions in excess of CFBank’s current and accumulated earnings and profits, as calculated for federal income tax purposes, distributions in redemption of stock, and distributions in partial or complete liquidation. Dividends paid out of CFBank’s current or accumulated earnings and profits will not be so included in CFBank’s taxable income.

Ohio Taxation

The consolidated organization is subject to the Ohio Financial Institutions Tax (“FIT”). The FIT is a business privilege tax for financial institutions doing business or domiciled in the State of Ohio. The three-tier structure charges financial institutions based on total capital at the prior calendar year-end based on regulatory reporting requirements.

Delaware Taxation

As a Delaware corporation not earning income in Delaware, the Company is exempted from Delaware corporate income tax, but is required to file an annual report with and pay an annual franchise tax to the State of Delaware.

Available Information

Our website address is www.CF.Bank. We make available free of charge through our website our annual report on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K and any amendments to these reports as soon as reasonably practicable after we electronically file such reports with the Securities Exchange Commission (SEC). These reports can be found on our website under the caption “Investor Relations – SEC Filings.” Investors also can obtain copies of our filings from the SEC website at www.sec.gov.

Item 1A. Risk Factors.

The following are certain risk factors that could impact our business, financial results and results of operations. Investing in our common stock involves risks, including those described below. These risk factors should be considered by prospective and current investors in our common stock when evaluating the disclosures contained in this Form 10-K and in other reports that we file with the SEC. These risk factors could cause actual results and conditions to differ materially from those projected in forward-looking statements. If any of the events described in the following risk factors actually occur, or if additional risks and uncertainties not presently known to us or that we believe are immaterial do materialize, then our business, financial condition or results of operations could be materially adversely impacted. In addition, the trading price of our common stock could decline due to any of the events described in these risk factors.

Economic, Market and Political Risks

The economic impact of the ongoing COVID-19 pandemic, or an outbreak of another highly infectious or contagious disease, could adversely affect our business, financial condition and results of operations.

The ongoing COVID-19 pandemic has negatively impacted global, national and local economies, disrupted global and national supply chains, lowered equity market valuations, and created significant volatility and disruption in financial markets. In addition, the pandemic resulted in temporary closures of many businesses and the institution of social distancing and sheltering in place

requirements in many states and communities and may result in the same or similar restrictions in the future. As a result, the demand for CFBank’s products and services has been and may continue to be significantly impacted, which could adversely affect our revenue and results of operations. Furthermore, the COVID-19 pandemic could result in the recognition of credit losses in our loan portfolios and increases in our allowance for credit losses, particularly if businesses remain required to operate at diminished capacities or are required to close again, the impact on the global, national and local economies worsen, or more customers draw on their lines of credit or seek additional loans to help finance their businesses. Our business operations may also be disrupted if significant portions of our workforce are unable to work effectively, including because of illness, quarantines, government actions, or other restrictions in connection with COVID-19. The extent to which COVID-19 impacts our business, results of operations, and financial condition, as well as our regulatory capital and liquidity ratios, will depend on future developments, which are highly uncertain and cannot be predicted, including the scope and duration of the pandemic and actions taken by governmental authorities and other third parties in response to the pandemic.

As of December 31, 2021, we continued to hold and service a limited number of PPP loans. These PPP loans are subject to the provisions of the CARES Act and to complex and evolving rules and guidance issued by the SBA and other government agencies. We expect that the great majority of our PPP borrowers will seek full or partial forgiveness of their loan obligations. We have credit risk on the PPP loans if the SBA determines that there is a deficiency in the manner in which we originated, funded or serviced loans, including any issue with the eligibility of a borrower to receive a PPP loan. We could face additional risks in our administrative capabilities to service our PPP loans, and risk with respect to the determination of loan forgiveness. In the event of a loss resulting from a default on a PPP loan and a determination by the SBA that there was a deficiency in the manner in which we originated, funded or serviced the PPP loan, the SBA may deny its liability under the guaranty, reduce the amount of the guaranty or, if the SBA has already paid under the guaranty, seek recovery of any loss related to the deficiency.

The spread of COVID-19, including new variants thereof, has also caused us to modify our business practices, including employee travel, employee work locations, and cancellation of physical participation in meetings, events and conferences. Further, technology in employees’ homes may not be as robust as in our offices and could cause the networks, information systems, applications, and other tools available to such employees to be more limited or less reliable. The continuation of these work-from-home measures also introduces additional operational risk, including increased cybersecurity risk from phishing, malware, and other cybersecurity attacks, all of which could expose us to risks of data or financial loss and could seriously disrupt our operations and the operations of any impacted customers.

COVID-19, including the spread of new variants thereof, or a new pandemic could subject us to any of the following risks, any of which could, individually or in the aggregate, have a material adverse effect on our business, financial condition, liquidity, and results of operations:

demand for our products and services may decline, making it difficult to grow assets and income;

if the economy is unable to fully reopen or experiences additional or new closures or downturns as a result of the COVID-19 pandemic, loan delinquencies, problem assets, and foreclosures may increase, resulting in increased charges and reduced income;

collateral for loans, especially real estate, may decline in value, which could cause loan losses to increase;

our allowance for loan losses may have to be increased if borrowers experience financial difficulties beyond forbearance periods, which will adversely affect our net income;

the net worth and liquidity of loan guarantors may decline, impairing their ability to honor commitments to us;

a prolonged weakness in economic conditions resulting in a reduction of future projected earnings could result in our recording a valuation allowance against our current outstanding deferred tax assets;

we rely on third party vendors for certain services and the unavailability of a critical service due to COVID-19 could have an adverse effect on us; and

continued adverse economic conditions could result in protracted volatility in the price of our common shares.

Moreover, our future success and profitability substantially depend on the management skills of our executive officers and directors, many of whom have held officer and director positions with us for many years. The unanticipated loss or unavailability of key employees due to COVID-19, including new variants thereof, or any similar pandemic could harm our ability to operate our business or execute our business strategy. We may not be successful in finding and integrating suitable successors in the event of key employee loss or unavailability.

Even after the COVID-19 pandemic subsides, the U.S. economy will likely require time to recover, the length of which is unknown and during which the United States may experience a recession or market correction. Our business could be materially and adversely affected by such recession or market correction.

We continue to closely monitor the impact of COVID-19 and related risks as they evolve. To the extent the effects of COVID-19 adversely impact our business, financial condition, liquidity or results of operations, it may also have the effect of heightening many of the other risks described in this section.

Changes in economic and political conditions could adversely affect our earnings through declines in deposits, loan demand, the ability of our customers to repay loans and the value of the collateral securing our loans.

Our success depends to a significant extent upon local and national economic and political conditions, as well as governmental fiscal and monetary policies. Conditions such as inflation, recession, unemployment, changes in interest rates, fiscal and monetary policy, an increasing federal government budget deficit, slowing gross domestic product, tariffs, a U.S. withdrawal from or significant renegotiation of trade agreements, trade wars, and other factors beyond our control may adversely affect CFBank’s deposit levels and composition, the quality of investment securities available for purchase, demand for loans, the ability of CFBank’s borrowers to repay their loans, and the value of the collateral securing loans made by CFBank. Recent political developments in Russia and Ukraine are likely to result in substantial changes in economic and political conditions for the U.S. and the remainder of the world. Disruptions in U.S. and global financial markets, and changes in oil production and supply in the Middle East and Russia, also affect the economy and stock prices in the U.S., which can affect our earnings capital, as well as the ability of our customers to repay loans.

Because we have a significant amount of real estate loans, decreases in real estate values could adversely affect the value of property used as collateral and our ability to sell the collateral upon foreclosure. Adverse changes in the economy, including those resulting from the ongoing COVID-19 pandemic, may also have a negative effect on the ability of our borrowers to make timely repayments of their loans, which would have an adverse impact on our earnings and cash flows. Moreover, our market activities are concentrated in the following Ohio counties: Franklin County, and contiguous counties through our office in Worthington, Ohio and loan production office in Columbus, Ohio; Cuyahoga County, and contiguous counties through our agency office in Woodmere, Ohio, Hamilton County, and contiguous counties through our office in Glendale, Ohio, Summit County, and contiguous counties through our office in Fairlawn, Ohio; and in Marion County, Indiana through our presence in the Indianapolis market. Our success depends on the general economic conditions of these areas, particularly given that a significant portion of our lending relates to real estate located in these regions. Therefore, adverse changes in the economic conditions in these areas could adversely impact our earnings and cash flows.

Changing interest rates may decrease our earnings and asset values.

Management is unable to accurately predict future market interest rates, which are affected by many factors, including, but not limited to inflation, recession, changes in employment levels, changes in the money supply and domestic and international disorder and instability in domestic and foreign financial markets. Changes in the interest rate environment may reduce our profits. Net interest income is a significant component of our net income, and consists of the difference, or spread, between interest income generated on interest-earning assets and interest expense incurred on interest-bearing liabilities. Net interest spreads are affected by the difference between the maturities and repricing characteristics of interest-earning assets and interest-bearing liabilities. Although certain interest-earning assets and interest-bearing liabilities may have similar maturities or periods to which they reprice, they may react in different degrees to changes in market interest rates. In addition, residential mortgage loan origination and refinancing volumes are affected by market interest rates on loans. Rising interest rates generally are associated with a lower volume of loan originations and refinancings, while falling interest rates are usually associated with higher loan originations and refinancings. Our ability to generate gains on sales of mortgage loans is significantly dependent on the level of originations. Cash flows are affected by changes in market interest rates. Generally, in rising interest rate environments, loan prepayment rates are likely to decline, and in falling interest rate environments, loan prepayment rates are likely to increase. A majority of our commercial, commercial real estate and multi-family residential real estate loans are adjustable rate loans and an increase in the general level of interest rates may adversely affect the ability of some borrowers to pay the interest on and principal of their obligations, especially borrowers with loans that have adjustable rates of interest. Changes in interest rates, prepayment speeds and other factors may also cause the value of our loans held for sale to change. Accordingly, changes in levels of market interest rates could materially and adversely affect our net interest spread, loan volume, asset quality, value of loans held for sale and cash flows, as well as the market value of our securities portfolio and overall profitability.

A transition away from LIBOR as a reference rate for financial contracts could negatively affect our income and expenses and the value of various financial contracts.

LIBOR is used extensively in the U.S. and globally as a benchmark for various commercial and financial contracts, including adjustable rate mortgages, corporate debt, interest rate swaps and other derivatives. LIBOR is set based on interest rate information reported by certain banks, which may stop reporting such information after 2021. On July 27, 2017, the United Kingdom’s Financial Conduct Authority (“FCA”) announced that it intends to stop persuading or compelling banks to submit LIBOR rates after 2021. On November 30, 2020, to facilitate an orderly LIBOR transition, the OCC, the FDIC, and the FRB jointly announced that entering into new contracts using LIBOR as a reference rate after December 31, 2021, would create a safety and soundness risk. On March 5, 2021, the FCA announced that all LIBOR settings will either cease to be provided by any administrator or no longer be representative immediately after December 31, 2021, in the case of 1-week and 2-month LIBOR, and immediately after June 30, 2023, in the case of the remaining LIBOR settings. In the U.S., efforts to identify a set of alternative U.S. dollar reference interest rates are ongoing, and

the Alternative Reference Rate Committee (“ARRC”) has recommended the use of a Secured Overnight Funding Rate (“SOFR”). SOFR is different from LIBOR in that it is a backward looking secured rate rather than a forward looking unsecured rate. These differences could lead to a greater disconnect between our costs to raise funds for SOFR as compared to LIBOR. For cash products and loans, ARRC has also recommended Term SOFR, which is a forward looking SOFR based on SOFR futures and may in part reduce differences between SOFR and LIBOR. There are operational issues which may create a delay in the transition to SOFR or other substitute indices, leading to uncertainty across the industry. These consequences cannot be entirely predicted and could have an adverse impact on the market value for or value of LIBOR-linked securities, loans, and other financial obligations or extensions of credit.

The Company’s primary exposure to LIBOR relates to its promissory notes with borrowers, swap contracts with clients, offsetting swap contracts with third parties related to the swap contracts with clients, the Company’s LIBOR-based borrowings and CFBank’s swap contracts which can be tied to LIBOR. The Company’s contracts generally include a LIBOR term (for example, one month, three month, or one year) plus an incremental margin rate. The Company is working through this transition via a multi-disciplinary project team. We do not believe the change to a benchmark like SOFR will have a material impact on our financial condition, results of operations or cash flows.

Risks Related to Our Lending Activities

Our allowance for loan losses may not be adequate to cover actual losses. Higher loan losses could require us to increase our allowance for loan losses through a charge to earnings.

When we loan money we incur the risk that our borrowers will not repay their loans. We reserve for loan losses by establishing an allowance through a charge to earnings. The amount of this allowance is based on our assessment of probable incurred credit losses in our loan portfolio. The process for determining the amount of the allowance is critical to our financial condition and results of operations. It requires subjective and complex judgments about the future, including forecasts of economic or market conditions that might impair the ability of our borrowers to repay their loans. It also requires that we make various assumptions and judgments about the collectability of our loan portfolio, including the creditworthiness of our borrowers and the value of the real estate and other assets serving as collateral for the repayment of many of our loans. The allowance for loan losses may not be sufficient to cover probable losses in our loan portfolio. We might underestimate the loan losses inherent in our loan portfolio and have loan losses in excess of the amount reserved. We might increase the allowance because of changing economic conditions. For example, when real estate values decline, the potential severity of loss on a real estate-secured loan can increase significantly, especially in the case of loans with high loan-to-value ratios. A decline in the national economy or in the local economies of the areas in which our loans are concentrated could result in an increase in loan delinquencies, foreclosures or repossessions resulting in increased charge-off amounts and the need for additional loan loss allowances in future periods. In addition, our determination as to the amount of our allowance for loan losses is subject to review by our regulators as part of their examination process, which may result in the establishment of an additional allowance based upon the judgment of the regulators after a review of the information available at the time of their examination. The additions to our allowance for loan losses would be made through increased provisions for loan losses, which would reduce our income and could materially and adversely affect our financial condition, earnings and profitability.

In addition, bank regulators periodically review our allowance for loan losses and may require us to increase our allowance for loan losses or recognize further loan charge-offs. Moreover, the Financial Accounting Standards Board (“FASB”) has changed its requirements for establishing the allowance for loan losses.

On June 16, 2016, the FASB issued Accounting Standard Update (“ASU”) 2016-13 “Financial Instruments - Credit Losses”, which replaces the incurred loss model with an expected loss model, and is referred to as the current expected credit loss (“CECL”) model. Under the incurred loss model, loans are recognized as impaired when there is no longer an assumption that future cash flows will be collected in full under the originally contracted terms. The FASB voted to defer the effective date for this ASU for smaller reporting companies, such as the Company, to annual reporting periods and interim reporting periods within those annual periods, beginning after December 15, 2022. Under the CECL model, financial institutions will be required to use historical information, current conditions and reasonable forecasts to estimate the expected loss over the life of the loan. The transition to the CECL model will bring with it significantly greater data requirements and changes to methodologies to accurately account for expected losses under the new parameters. If the methodologies and assumptions that we use in the CECL model are proven to be incorrect, or inadequate, the allowance for credit losses may not be sufficient, resulting in the need for additional allowance for credit losses to be established, which could have a material adverse impact on our financial condition and results of operations.

We may further experience increased delinquencies, credit losses, and corresponding charges to capital, which could require us to increase our provision for loan losses associated with impacts related to the coronavirus outbreak due to quarantines, market downturns, increased unemployment rates, changes in consumer behavior related to pandemic fears, and related emergency response legislation. We cannot predict the full impact of the coronavirus outbreak or any other future global pandemic on our business, but we may experience increased delinquencies and credit losses as a result of the outbreak. Further, if real estate markets or the economy in general deteriorate (due to the coronavirus outbreak or otherwise), CFBank may experience increased delinquencies and credit losses.

The allowance for loan losses may not be sufficient to cover actual loan-related losses. Additionally, banking regulators may require CFBank to increase its allowance for loan losses in the future, which could have a negative effect on the Company’s financial condition and results of operations. Additions to the allowance for loan losses will result in a decrease in net earnings and capital and could hinder our ability to grow our assets.

Any increase in our allowance for loan losses or loan charge-offs, including increased required by applicable regulatory authorities, could have a material adverse effect on our financial condition and results of operations.

Our emphasis on commercial, commercial real estate and multi-family residential real estate lending may expose us to increased lending risks.

Because payments on commercial loans are dependent on successful operation of the borrowers’ business enterprises, repayment of such loans may be subject to a greater extent to adverse conditions in the economy. Because payments on loans secured by commercial real estate properties are dependent on successful operation or management of the properties, repayment of commercial real estate loans may be subject to a greater extent to adverse conditions in the real estate market or the economy. Commercial real estate and multi-family residential mortgage loans also have larger loan balances to single borrowers or groups of related borrowers compared to single-family residential mortgage loans. Some of our borrowers also have more than one commercial real estate or multi-family residential mortgage loan outstanding with us. Additionally, some loans may be collateralized by junior liens. Consequently, an adverse development involving one or more loans or credit relationships can expose us to significantly greater risk of loss compared to an adverse development involving a single-family residential mortgage loan.

Our adjustable-rate loans may expose us to increased lending risks.

While adjustable-rate loans better offset the adverse effects of an increase in interest rates as compared to fixed-rate loans, the increased payments required of adjustable-rate loan borrowers upon an interest rate adjustment in a rising interest rate environment could cause an increase in delinquencies and defaults. The marketability of the underlying property also may be adversely affected in a rising interest rate environment. In addition, although adjustable-rate loans help make our asset base more responsive to changes in interest rates, the extent of this interest sensitivity is limited by the annual and lifetime interest rate adjustment limits.

We may be required to repurchase loans we have sold or indemnify loan purchasers under the terms of the sale agreements, which could adversely affect our liquidity, results of operations and financial condition.

When we sell a mortgage loan, we may agree to repurchase or substitute a mortgage loan if we are later found to have breached any representation or warranty we made about the loan or if the borrower is later found to have committed fraud in connection with the origination of the loan. While we have underwriting policies and procedures designed to avoid breaches of representations and warranties as well as borrower fraud, there can be no assurance that no breach or fraud will ever occur. Required repurchases, substitutions or indemnifications could have an adverse effect on our liquidity, results of operations and financial condition.

We depend upon the accuracy and completeness of information about customers and counterparties.

In deciding whether to extend credit or enter into other transactions with customers and counterparties, we may rely on information provided to us by customers and counterparties, including financial statements and other financial information. We may also rely on representations of customers and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors. For example, in deciding whether to extend credit to a business, we may assume that the customer’s audited financial statements conform with GAAP and present fairly, in all material respects, the financial condition, results of operations and cash flows of the customer. We may also rely on the audit report covering those financial statements. Our financial condition, results of operations and cash flows could be negatively impacted to the extent that we rely on financial statements that do not comply with GAAP or on financial statements and other financial information that are materially misleading.

Our business and financial results are subject to risks associated with the creditworthiness of our customers and counterparties.

Credit risk is inherent in the financial services business and results from, among other things, extending credit to customers, purchasing securities, and entering into financial derivative transactions and certain guarantee contracts. Credit risk is one of our most significant risks, particularly given the high percentage of our assets represented directly or indirectly by loans, and the importance of lending to our overall business. We manage credit risk by assessing and monitoring the creditworthiness of our customers and counterparties and by diversifying our loan portfolio. Many factors impact credit risk.

A borrower’s ability to repay a loan can be adversely affected by individual factors, such as business performance, job losses or health issues. A weak or deteriorating economy and changes in the United States or global markets also could adversely impact the ability of our borrowers to repay outstanding loans. Any decrease in our borrowers’ ability to repay loans would result in higher levels of nonperforming loans, net charge-offs, and provision for loan losses.

Despite maintaining a diversified loan portfolio, in the ordinary course of business, we may have concentrated credit exposure to a particular person or entity, industry, region or counterparty. Events adversely affecting specific customers, industries, regions or markets, a decrease in the credit quality of a customer base or an adverse change in the risk profile of a market, industry, or group of customers could adversely affect us.

Our credit risk may be exacerbated when collateral held by us to secure obligations to us cannot be realized upon or is liquidated at prices that are not sufficient to recover the full amount of the loan or derivative exposure due us.

Due in part to improvement in local and general economic conditions, as well as actions we have taken to manage our loan portfolio, our provision for loan losses has declined in recent years. However, if we experience higher levels of provision for loan losses in the future, our net income could be negatively affected.

Risks Related to Our Business Operations

We may not be able to effectively manage our growth.

We have experienced significant growth in the amount of our total loans in the past several years. Since January 1, 2016, our total net loans have grown by $917.1 million, or 308.7%, and our total assets have grown by $1.1 billion, or 325.7%. Our continued growth may place significant demands on our operations and management, and our future operating results depend to a large extent on our ability to successfully manage our growth. We may not successfully implement improvements to, or integrate, our management information and control systems, procedures and processes in an efficient or timely manner and may discover deficiencies in existing systems and controls. In particular, our controls and procedures must be able to accommodate increases in our loan volume and our growth and expansion. If we are unable to manage our loan growth and/or expanded operations, we may experience compliance and operational problems, have to slow the pace of growth, or have to incur additional expenditures beyond current projections to support such growth, any one of which could materially and adversely affect us.

Future acquisitions or other expansion may adversely affect our financial condition and results of operations.

In the future, we may acquire other financial institutions or branches or assets of other financial institutions. We may also open new branches, enter into new lines of business, or offer new products or services. Any future acquisition or expansion of our business will involve a number of expenses and risks, which may include some or all of the following:

the time and expense associated with identifying and evaluating potential acquisitions or expansions;

the potential inaccuracy of estimates and judgments used to evaluate credit, operations, management and market risk with respect to target institutions;

the time and costs of evaluating new markets, hiring local management and opening new offices, and the delay between commencing these activities and the generation of profits from the expansion;

any financing required in connection with an acquisition or expansion;

the diversion of management’s attention to the negotiation of a transaction and the integration of the operations and personnel of the combining businesses;

entry into unfamiliar markets and the introduction of new products and services into our existing business;

the possible impairment of goodwill associated with an acquisition and possible adverse short-term effects on our results of operations; and

the risk of loss of key employees and customers.

We may incur substantial costs to expand, and we can give no assurance that such expansion will result in the levels of profits we expect. Neither can we assure that integration efforts for any future acquisitions will be successful. We may issue equity securities in connection with acquisitions, which could dilute the economic and voting interests of our existing stockholders.

We face strong competition from other financial institutions, financial services companies and other organizations offering services similar to those offered by us, which could result in our not being able to sustain or grow our loan and deposit businesses.

We conduct our business operations primarily in Franklin, Cuyahoga, Hamilton, and Summit, Counties, Ohio, and in Marion County, Indiana, and make loans generally throughout Ohio and Indiana, and residential mortgage loans on a national basis. Increased competition within these markets may result in reduced loan originations and deposits. Ultimately, we may not be able to compete successfully against current and future competitors. Many competitors offer the types of loans and banking services that we offer. These competitors include other savings associations, community banks, regional banks and money center banks. We also face competition from many other types of financial institutions, including finance companies, brokerage firms, insurance companies, credit unions, mortgage banks and other financial intermediaries. Our competitors with greater resources may have a marketplace

advantage enabling them to maintain numerous banking locations and mount extensive promotional and advertising campaigns.

Additionally, financial intermediaries not subject to bank regulatory restrictions and banks and other financial institutions with larger capitalization have larger lending limits and are thereby able to serve the credit needs of larger clients. These institutions, particularly to the extent they are more diversified than we are, may be able to offer the same loan products and services that we offer at more competitive rates and prices. If we are unable to attract and retain banking clients, we may be unable to sustain current loan and deposit levels or increase our loan and deposit levels, and our business, financial condition and future prospects may be negatively affected.

We rely heavily on our management team, and the unexpected loss of key management may adversely affect our operations.

Our current management team was put in place following the completion of the Company’s common stock offering in August 2012. Our performance since August 2012 has been strongly influenced by our ability to attract and to retain senior management experienced in banking in the markets we serve. Our ability to retain executive officers and the current management team will continue to be important to successful implementation of our strategies. The unexpected loss of services of any key management personnel, or the inability to recruit and retain qualified personnel in the future, could have an adverse effect on our business and financial results.

We are exposed to operational risk.

Similar to any large organization, we are exposed to many types of operational risk, including those discussed in more detail elsewhere in this Item, such as reputational risk, legal and compliance risk, the risk of fraud or theft by employees or outsiders, unauthorized transactions by employees or operational errors, including clerical or record-keeping errors or those resulting from faulty or disabled computer or telecommunications systems. Many of these risks are heightened in light of COVID-19.

We may be subject to disruptions of our operating systems arising from events that are wholly or partially beyond our control, which may include, for example, computer viruses, cyber-attacks, spikes in transaction volume and/or customer activity, electrical or telecommunications outages, or natural disasters. We could be adversely affected by operating systems disruptions if new or upgraded business management systems are defective, not installed properly or not properly integrated into existing operating systems. Although we have programs in place related to business continuity, disaster recovery and information security to maintain the confidentiality, integrity and availability of our operating systems, business applications and customer information, such disruptions may give rise to interruptions in service to customers, loss of data privacy and loss or liability to us.

Any failure or interruption in our operating or information systems, or any security or data breach, could cause reputational damage, jeopardize the confidentiality of customer information, result in a loss of customer business, subject us to regulatory intervention or expose us to civil litigation and financial loss or liability, any of which could have a material adverse effect on us.

Negative public opinion can result from our actual or alleged conduct in any number of activities, including lending practices, corporate governance and acquisitions, social media and other marketing activities, the implementation of environmental, social and governance (ESG) practices, and from actions taken by governmental regulators and community organizations in response to any of the foregoing. Negative public opinion could adversely affect our ability to attract and keep customers, could expose us to potential litigation or regulatory action, and could have a material adverse effect on our stock price or result in heightened volatility of our stock price.

Given the volume of transactions we process, certain errors may be repeated or compounded before they are discovered and successfully rectified. Our necessary dependence upon automated systems to record and process our transaction volume may further increase the risk that technical system flaws or employee tampering or manipulation of those systems will result in losses that are difficult to detect, which may give rise to disruption of service to customers and to financial loss or liability. We are further exposed to the risk that our external vendors may be unable to fulfill their contractual obligations (or will be subject to the same risk of fraud or operational errors by their respective employees as we are) or that our (or our vendors’) consumer compliance, business continuity, and data security systems will prove to be inadequate.

Unauthorized disclosure of sensitive or confidential client information or breaches in security of our systems could severely harm our business.

As part of our financial institution business, we collect, process and store sensitive consumer data by utilizing computer systems and telecommunications networks operated by both us and third-party service providers. Our necessary dependence upon automated systems to record and process transactions poses the risk that technical system flaws, employee errors, tampering or manipulation of those systems, or attacks by third parties will result in losses and may be difficult to detect. We have security and backup and recovery systems in place, as well as a business continuity plan, to ensure the computer systems will not be inoperable, to the extent possible. The Company also routinely reviews documentation of such controls and backups related to third-party service providers. Our inability to use or access these information systems at critical points in time could unfavorably impact the timeliness and

efficiency of our business operations. In recent years, some banks have experienced denial of service attacks in which individuals or organizations flood the bank's website with extraordinarily high volumes of traffic, with the goal and effect of disrupting the ability of the bank to process transactions. Other businesses have been victims of ransomware attacks in which the business becomes unable to access its own information and is presented with a demand to pay a ransom in order to once again have access to its information.

We could be adversely affected if one of our employees causes a significant operational break-down or failure, either as a result of human error or where an individual purposefully sabotages or fraudulently manipulates our operations or systems. We are further exposed to the risk that the third-party service providers may be unable to fulfill their contractual obligations (or will be subject to the same risks as faced by us). These disruptions may interfere with service to our customers, cause additional regulatory scrutiny and result in a financial loss or liability. We are also at risk of the impact of natural disasters, terrorism and international hostilities on our systems or for the effects of outages or other failures involving power or communications systems operated by others.

Misconduct by employees could include fraudulent, improper or unauthorized activities on behalf of clients or improper use of confidential information. We may not be able to prevent employee errors or misconduct, and the precautions we take to detect this type of activity might not be effective in all cases. Employee errors or misconduct could subject us to civil claims for negligence or regulatory enforcement actions, including fines and restrictions on our business.

In addition, there have been instances where financial institutions have been victims of fraudulent activity in which criminals pose as customers to initiate wire and automated clearinghouse transactions out of customer accounts. The massive breach of the systems of a credit bureau in 2019 presents additional threats as criminals now have more information than ever before about a larger portion of our country's population, which could be used by criminals to pose as customers initiating transfers of money from customer accounts. Although we have policies and procedures in place to verify the authenticity of our customers, we cannot assure that such policies and procedures will prevent all fraudulent transfers.

We have implemented security controls to prevent unauthorized access to our computer systems, and we require that our third-party service providers maintain similar controls. However, the Company’s management cannot be certain that these measures will be successful. A security breach of the computer systems and loss of confidential information, such as customer account numbers and related information, could result in a loss of customers’ confidence and, thus, loss of business. We could also lose revenue if competitors gain access to confidential information about our business operations and use it to compete with us. While we maintain specific "cyber" insurance coverage, which would apply in the event of various breach scenarios, the amount of coverage may not be adequate in any particular case. Furthermore, because cyber threat scenarios are inherently difficult to predict and can take many forms, some breaches may not be covered under our cyber insurance coverage.

Further, we may be impacted by data breaches at retailers and other third parties who participate in data interchanges with us and our customers that involve the theft of customer credit and debit card data, which may include the theft of our debit card personal identification numbers (PINs) and commercial card information used to make purchases at such retailers and other third parties. Such data breaches could result in us incurring significant expenses to reissue debit cards and cover losses, which could result in a material adverse effect on our results of operations.

To date, we have not experienced any material losses relating to cyber-attacks or other information security breaches, but there can be no assurance that we will not suffer such attacks or attempted breaches, or incur resulting losses in the future. Our risk and exposure to these matters remains heightened because of, among other things, the evolving nature of these threats, and our plans to continue to implement internet and mobile banking capabilities to meet customer demand. As cyber and other data security threats continue to evolve, we may be required to expend significant additional resources to continue to modify and enhance its protective measures or to investigate and remediate any security vulnerabilities.

Our assets at risk for cyber-attacks include financial assets and non-public information belonging to customers. We use several third-party vendors who have access to our assets via electronic media. Certain cyber security risks arise due to this access, including cyber espionage, blackmail, ransom, and theft. As cyber and other data security threats continue to evolve, we may be required to expend significant additional resources to continue to modify and enhance our protective measures or to investigate and remediate any security vulnerabilities.

All of the types of cyber incidents discussed above could result in damage to our reputation, loss of customer business, costs of incentives to customers or business partners in order to maintain their relationships, litigation, increased regulatory scrutiny and potential enforcement actions, repairs of system damage, increased investments in cybersecurity (such as obtaining additional technology, making organizational changes, deploying additional personnel, training personnel and engaging consultants), increased insurance premiums, and loss of investor confidence and a reduction in the price of our common shares, all of which could result in financial loss and material adverse effects on our results of operations and financial condition

Our business could be adversely affected through third parties who perform significant operational services on our behalf.

The third parties performing operational services for the Company are subject to risks similar to those faced by the Company relating

to cybersecurity, breakdowns or failures of their own systems, or misconduct of their employees. Like many other community banks, CFBank also relies, in significant part, on a single vendor for the systems which allow CFBank to provide banking services to CFBank’s customers, for which the systems are maintained on CFBank’s behalf by this single vendor.

One or more of the third parties utilized by us may experience a cybersecurity event or operational disruption and, if any such event does occur, it may not be adequately addressed, either operationally or financially, by such third party. Further, the operations of our third-party vendors could fail or otherwise become delayed as a result of COVID-19. Certain of these third parties may have limited indemnification obligations to us in the event of a cybersecurity event or operational disruption, or may not have the financial capacity to satisfy their indemnification obligations.

Financial or operational difficulties of a third party provider could also impair our operations if those difficulties interfere with such third party’s ability to serve the Company. If a critical third-party provider is unable to meet the needs of the Company in a timely manner, or if the services or products provided by such third party are terminated or otherwise delayed and if the Company is not able to develop alternative sources for these services and products quickly and cost-effectively, our business could be materially adversely effected.

Additionally, regulatory guidance adopted by federal banking regulators addressing how banks select, engage and manage their third-party relationships, affects the circumstances and conditions under which we work with third parties and the cost of managing such relationships.

Derivative transactions may expose us to unexpected risk and potential losses.

We are party to a number of derivative transactions. Many of these derivative instruments are individually negotiated and non-standardized, which can make exiting, transferring or settling the position difficult. We carry borrowings which contain embedded derivatives. These borrowing arrangements require that we deliver underlying securities to the counterparty as collateral. We are dependent on the creditworthiness of the counterparties and are therefore susceptible to credit and operational risk in these situations.

Derivative contracts and other transactions entered into with third parties are not always confirmed by the counterparties on a timely basis. While the transaction remains unconfirmed, we are subject to heightened credit and operational risk and, in the event of a default, we may find it more difficult to enforce the underlying contract. In addition, as new and more complex derivative products are created, covering a wider array of underlying credit and other instruments, disputes about the terms of the underlying contracts could arise, which could impair our ability to effectively manage our risk exposures from these products and subject us to increased costs. Any regulatory effort to create an exchange or trading platform for credit derivatives and other over-the-counter derivative contracts, or a market shift toward standardized derivatives, could reduce the risk associated with such transactions, but under certain circumstances could also limit our ability to develop derivatives that best suit our needs and those of our clients and adversely affect our profitability.

Legislative, Legal and Regulatory Risks

We operate in a highly regulated industry, and the laws and regulations that govern our operations, corporate governance, executive compensation and financial accounting, or reporting, including changes in, or failure to comply with the same, may adversely affect the Company.

The banking industry is highly regulated. We are subject to supervision, regulation and examination by various federal and state regulators, including the FRB, the SEC, the CFPB, the OCC, the FDIC, Financial Industry Regulatory Authority, Inc. (also known as FINRA), and various state regulatory agencies. The statutory and regulatory framework that governs the Company is generally designed to protect depositors and customers, the DIF, the U.S. banking and financial system, and financial markets as a whole and not to protect shareholders. These laws and regulations, among other matters, prescribe minimum capital requirements, impose limitations on our business activities (including foreclosure and collection practices), limit the dividends or distributions that we can pay, and impose certain specific accounting requirements that may be more restrictive and may result in greater or earlier charges to earnings or reductions in capital than would otherwise be required under generally accepted accounting principles in the United States of America. Compliance with laws and regulations can be difficult and costly, and changes to laws and regulations often impose additional compliance costs. Both the scope of the laws and regulations and the intensity of the supervision to which we are subject have increased in recent years in response to the perceived state of the financial services industry, as well as other factors such as technological and market changes. Such regulation and supervision may increase our costs and limit our ability to pursue business opportunities. Further, our failure to comply with these laws and regulations, even if the failure was inadvertent or reflects a difference in interpretation, could subject the Company to restrictions on business activities, fines, and other penalties, any of which could adversely affect results of operations, the capital base, and the price of our common shares. Further, any new laws, rules, or regulations could make compliance more difficult or expensive or otherwise adversely affect our business and financial condition.

Legislative or regulatory changes or actions could adversely impact our business.

Regulations affecting banks and financial services businesses are undergoing continuous change, particularly in light of COVID-19 and the stimulus programs issued in connection therewith, and management cannot predict the effect of those changes. While such changes are generally intended to lessen the regulatory burden on financial institutions, the impact of any changes to laws and regulations or other actions by regulatory agencies could adversely affect our business. Regulatory authorities have extensive discretion in connection with their supervisory and enforcement activities, including the ability to impose restrictions on the operation of an institution and the ability to determine the adequacy of an institution’s allowance for loan losses. Failure to comply with applicable laws, regulations and policies could result in sanctions being imposed by the regulatory agencies, including the imposition of civil money penalties, which could have a material adverse effect on our operations and financial condition. Even the reduction of regulatory restrictions could have an adverse effect on us if such lessening of restrictions increases competition within our industry or market areas.

Deposit insurance premiums may increase and have a negative effect on our results of operations.

The DIF maintained by the FDIC to resolve bank failures is funded by fees assessed on insured depository institutions. The costs of resolving bank failures increased for a period of time and decreased the DIF. The FDIC collected a special assessment in 2009 to replenish the DIF and also required a prepayment of an estimated amount of future deposit insurance premiums. If the costs of future bank failures increase, the deposit insurance premiums required to be paid by CFBank may also increase. The FDIC recently adopted rules revising its assessments in a manner benefitting banks, such as CFBank, with assets totaling less than $10 billion. There can be no assurance, however, that assessments will not be changed in the future.

We may be the subject of litigation which could result in legal liability and damage to our business and reputation.

From time to time, we may be subject to claims or legal action from customers, employees or others. Financial institutions like the Company and CFBank are facing a growing number of significant class actions, including those based on the manner of calculation of interest on loans and the assessment of overdraft fees. Future litigation could include claims for substantial compensatory and/or punitive damages or claims for indeterminate amounts of damages. We are also involved from time to time in other reviews, investigations and proceedings (both formal and informal) by governmental and other agencies regarding our business. These matters also could result in adverse judgments, settlements, fines, penalties, injunctions or other relief. Like other large financial institutions, we are also subject to risk from potential employee misconduct, including non-compliance with policies and improper use or disclosure of confidential information. Substantial legal liability or significant regulatory action against us could materially adversely affect our business, financial condition or results of operations and/or cause significant reputational harm to our business.

Noncompliance with the Bank Secrecy Act (BSA) and other anti-money laundering statutes and regulations could cause a material financial loss.

The BSA and the Patriot Act contain anti-money laundering and financial transparency provisions intended to detect and prevent the use of the U.S. financial system for money laundering and terrorist financing activities. The BSA, as amended by the Patriot Act and the AMLA, requires depository institutions and their holding companies to undertake activities including maintaining an anti-money laundering program, verifying the identity of clients, monitoring for and reporting suspicious transactions, reporting on cash transactions exceeding specified thresholds, and responding to requests for information by regulatory authorities and law enforcement agencies. Financial Crimes Enforcement Network (also known as FinCEN), a unit of the Treasury Department that administers the BSA, is authorized to impose significant civil money penalties for violations of those requirements and has recently engaged in coordinated enforcement efforts with the federal bank regulatory agencies, as well as the U.S. Department of Justice, Drug Enforcement Administration, and Internal Revenue Service. The AMLA is intended to be a comprehensive reform and modernization to U.S. bank secrecy and anti-money laundering laws, which includes a codified risk-based approach to anti-money laundering compliance for financial institutions; requires the development of standards for evaluating technology and internal processes for BSA compliance; expands enforcement-related and investigation-related authority, including increasing available sanctions for certain BSA violations and instituting BSA whistleblower incentives and protections.

There is also increased scrutiny of compliance with the rules enforced by the Office of Foreign Assets Control (also known as OFAC). If the Company’s policies, procedures, and systems are deemed deficient, or if the policies, procedures, and systems of the financial institutions that the Company has already acquired or may acquire in the future are deficient, the Company may be subject to liability, including fines and regulatory actions such as restrictions on CFBank’s ability to pay dividends and the necessity to obtain regulatory approvals to proceed with certain planned business activities, including acquisition plans, which could negatively impact our business, financial condition, and results of operations. Failure to maintain and implement adequate programs to combat money laundering and terrorist financing could also have serious reputational consequences for the Company.

Risks Related to our Capital and Capital Stock

We are a holding company and depend on our subsidiary bank for dividends.

The Holding Company is a legal entity separate and distinct from its subsidiaries and affiliates. The Holding Company’s ability to support its operations, pay dividends on its common shares and service its debt is dependent upon the amount of cash and liquidity available at the Holding Company level, as well as the receipt of dividends and other distributions from CFBank to the extent necessary to fund such dividends. As of December 31, 2021 the Holding Company had a total of $819,000 of cash at the Holding Company level.

In the event that CFBank is unable to pay dividends to the Holding Company, the Holding Company may not be able to service its debt, pay its other obligations or pay dividends on its outstanding stock. Accordingly, the Holding Company’s inability to receive dividends from CFBank could also have a material adverse effect on our business, financial condition and results of operations.

Various federal and state statutory provisions and regulations limit the amount of dividends that CFBank may pay to the Holding Company without regulatory approval. Generally, financial institutions may pay dividends without prior approval as long as the dividend does not exceed the total of the current calendar year-to-date earnings plus any earnings from the previous two years not already paid out in dividends, and as long as the financial institution remains well capitalized after the dividend payment.

The ability of CFBank to pay dividends in the future is currently influenced, and could be further influenced, by bank regulatory policies and capital guidelines and may restrict the Holding Company’s ability to declare and pay dividends on its common shares. The ability of CFBank and any other subsidiaries to pay dividends to the Holding Company is also subject to their profitability, financial condition, capital expenditures and other cash flow requirements and contractual obligations. There can be no guaranty that CFBank will be able or permitted to pay dividends to the Holding Company in the future, and any such future dividends by CFBank would be based on future earnings and, if necessary, regulatory approval.

We may elect or need to raise additional capital in the future, but capital may not be available when it is needed.

We are required by federal regulatory authorities to maintain adequate levels of capital to support our operations. In addition, federal banking agencies have recently finalized extensive changes to their capital requirements, including the adoption of the Basel III Capital Rules as discussed above, which result in higher capital requirements and more restrictive leverage and liquidity ratios than those previously in place. The final impact on us is unknown at this time, but could potentially require us to raise additional capital in the future. Our ability to raise additional capital, if needed, will depend on conditions in the capital markets, economic conditions and a number of other factors, many of which are outside our control, and are based on our financial performance. Accordingly, we cannot be assured of our ability to raise additional capital if needed or on terms acceptable to us. If we cannot raise additional capital when needed or on acceptable terms, it may have a material adverse effect on our financial condition, results of operations and prospects.

Although publicly traded, our Common Stock has less liquidity than the average liquidity of stocks listed on NASDAQ.

Although our common stock is listed for trading on NASDAQ, our common stock has less liquidity than the average liquidity for companies listed on NASDAQ. A public trading market having the desired characteristics of depth, liquidity and orderliness depends on the presence in the marketplace of willing buyers and sellers of our common stock at any given time. This marketplace depends on the individual decisions of investors and general economic and market conditions over which we have no control. This limited market may affect your ability to sell your shares on short notice, and the sale of a large number of shares at one time could temporarily depress the market price of our common stock. For these reasons, our common stock should not be viewed as a short-term investment.

The market price of our Common Stock may be subject to fluctuations and volatility.

The market price of our common stock may fluctuate significantly due to, among other things, changes in market sentiment regarding our operations or business prospects, the banking industry generally or the macroeconomic outlook. Factors that could impact our trading price include:

our operating and financial results, including how those results vary from the expectations of management, securities analysts and investors;

developments in our business or operations or in the financial sector generally;

future offerings by us of debt or preferred shares, which would be senior to our common stock upon liquidation and for purposes of dividend distributions;

legislative or regulatory changes affecting our industry generally or our business and operations specifically;

the operating and stock price performance of companies that investors consider to be comparable to us;

announcements of strategic developments, acquisitions and other material events by us or our competitors;

actions by our current stockholders, including future sales of common shares by existing stockholders, including our directors and executive officers; and

other changes in U.S. or global financial markets, global economies and general market conditions, such as interest or foreign exchange rates, stock, commodity, credit or asset valuations or volatility.

Equity markets in general and our common stock in particular have experienced considerable volatility over the past few years. The market price of our common stock may continue to be subject to volatility unrelated to our operating performance or business prospects. Increased volatility could result in a decline in the market price of our common stock.

Provisions in the Holding Company’s Amended and Restated Certificate of Incorporation and statutory provisions could discourage a hostile acquisition of control.

The Holding Company’s Amended and Restated Certificate of Incorporation contains certain provisions that could discourage non-negotiated takeover attempts that certain stockholders might deem to be in their interests or through which stockholders might otherwise receive a premium for their shares over the then current market price and that may tend to perpetuate existing management. The Amended and Restated Certificate of Incorporation restricts the ability of an acquirer to vote more than 10% of our outstanding common stock. The provisions of the Amended and Restated Certificate of Incorporation also include: the classification of the terms of the members of the board of directors; supermajority provisions for the approval of certain business combinations; elimination of cumulative voting by stockholders in the election of directors; certain provisions relating to meetings of stockholders; and provisions allowing the board of directors to consider nonmonetary factors in evaluating a business combination or a tender or exchange offer. The provisions in the Amended and Restated Certificate of Incorporation requiring a supermajority vote for the approval of certain business combinations and containing restrictions on acquisitions of the Company’s equity securities provide that the supermajority voting requirements or acquisition restrictions do not apply to business combinations or acquisitions meeting specified board of directors’ approval requirements.

The Amended and Restated Certificate of Incorporation also authorizes the issuance of 1,000,000 shares of preferred stock, as well as 9,090,909 shares of common stock. These shares could be issued without further stockholder approval on terms or in circumstances that could deter a future takeover attempt.

Additionally, federal banking laws contain various restrictions on acquisitions of control of national banks and their holding companies.

The Amended and Restated Certificate of Incorporation, as well as certain provisions of state and federal law, may have the effect of discouraging or preventing a future takeover attempt in which stockholders of the Company otherwise might receive a substantial premium for their shares over then current market prices.

General Risk Factors

Adverse changes in the financial markets may adversely impact our results of operations.

While we generally invest in securities issued by U.S. government agencies and sponsored entities and U.S. state and local governments with limited credit risk, certain investment securities we hold possess higher credit risk since they represent beneficial interests in structured investments collateralized by residential mortgages, debt obligations and other similar asset-backed assets. Even securities issued by governmental agencies and entities may entail risk depending on political and economic changes. Regardless of the level of credit risk, all investment securities are subject to changes in market value due to changing interest rates, implied credit spreads and credit ratings.

We are at risk of increased losses from fraud.

Criminals are committing fraud at an increasing rate and are using more sophisticated techniques. In some cases, these individuals are part of larger criminal rings, which allow them to be more effective. Such fraudulent activity has taken many forms, ranging from wire fraud, debit card fraud, check fraud, mechanical devices attached to ATM machines, social engineering and phishing attacks to obtain personal information, or impersonation of clients through the use of falsified or stolen credentials. Additionally, an individual or business entity may properly identify itself, yet seek to establish a business relationship for the purpose of perpetrating fraud. An emerging type of fraud even involves the creation of synthetic identification in which fraudsters "create" individuals for the purpose of perpetrating fraud. Further, in addition to fraud committed directly against the Company, the Company may suffer losses as a result of fraudulent activity committed against third parties. Increased deployment of technologies, such as chip card technology, defray and reduce certain aspects of fraud; however, criminals are turning to other sources to steal personally identifiable information, such as unaffiliated healthcare providers and government entities, in order to impersonate the consumer and thereby commit fraud.

Changes in tax laws could adversely affect our performance.

We are subject to extensive federal, state and local taxes, including income, excise, sales/use, payroll, franchise, financial institutions tax, withholding and ad valorem taxes. Changes to tax laws could have a material adverse effect on our results of operations, fair

values of net deferred tax assets and obligations of states and political subdivisions held in our investment securities portfolio. In addition, our customers are subject to a wide variety of federal, state and local taxes. Changes in taxes paid by our customers may adversely affect their ability to purchase homes or consumer products, which could adversely affect their demand for our loans and deposit products. In addition, such negative effects on our customers could result in defaults on the loans we have made and decrease the value of mortgage-backed securities in which we have invested.

Changes in accounting standards, policies, estimates or procedures could impact our reported financial condition or results of operations.

The accounting standard setters, including the FASB, the SEC and other regulatory bodies, periodically change the financial accounting and reporting guidance that governs the preparation of our consolidated financial statements. The pace of change continues to accelerate and changes in accounting standards can be hard to predict and could materially impact how we record and report our financial condition and results of operations. In some cases, we could be required to apply new or revised guidance retroactively, resulting in the restatement of prior period financial statements.

The preparation of consolidated financial statements in conformity with GAAP requires management to make significant estimates that affect the financial statements. Due to the inherent nature of these estimates, actual results may vary materially from management’s estimates. In June 2016, FASB issued a new accounting standard for recognizing current expected credit losses, commonly referred to as CECL. CECL will result in earlier recognition of credit losses and requires consideration of not only past and current events but also reasonable and supportable forecasts that affect collectability. The Company will be required to comply with the new standard beginning January 1, 2023. Upon adoption of CECL, credit loss allowances may increase, which would decrease retained earnings and regulatory capital. The federal banking regulators have adopted a regulation that will allow banks to phase in the day-one impact of CECL on regulatory capital over three years. CECL implementation poses operational risk, including the failure to properly transition internal processes or systems, which could lead to call report errors, financial misstatements, or operational losses.

We need to constantly update our technology in order to compete and meet customer demands.

The financial services market, including banking services, is undergoing rapid technological changes with frequent introductions of new technology-driven products and services. In addition to better serving customers, the effective use of technology increases efficiency and may enable us to reduce costs. Our future success will depend, in part, on our ability to use current technology to provide products and services that provide convenience to customers and to create additional efficiencies in our operations. Some of our competitors have substantially greater resources to invest in technological improvements. We may not be able to effectively implement new technology-driven products and services or be successful in marketing these products and services to our customers. Failure to successfully keep pace with technological changes affecting the financial services industry could negatively affect our growth, revenue and profit.

Climate change, severe weather, natural disasters, acts of war or terrorism and other external events could significantly impact our business.

Natural disasters, including severe weather events of increasing strength and frequency due to climate change, acts of war or terrorism, and other adverse external events could have a significant impact on our ability to conduct business or upon third parties who perform operational services for us or our customers. Such events could affect the stability of our deposit base, impair the ability of borrowers to repay outstanding loans, impair the value of collateral securing loans, cause significant property damage, result in lost revenue or cause us to incur additional expenses.

Item 1B. Unresolved Staff Comments

Not Applicable

Item 2. Properties.

We conducted our business through five branch offices located in Franklin, Cuyahoga, Hamilton, and Summit, Ohio, and through a loan production office located in Franklin County, Ohio as of December 31, 2021. The net book value of the Company’s properties totaled $4.8 million at December 31, 2021. CFBank also leases its branch offices in Woodmere, Ohio, Fairlawn, Ohio, Glendale, Ohio and Blue Ash, Ohio, and its loan production office in Columbus. See Note 8 in the accompanying Notes to Consolidated Financial Statements for further discussion.

Locations

Administrative Office (owned facility):

7000 N. High Street

Worthington, Ohio 43085

Branch Offices:

Worthington Branch (owned facility)

7000 N. High Street

Worthington, Ohio 43085

Eton Branch (leased facility)

28879 Chagrin Blvd.

Woodmere, Ohio 44122

Fairlawn Branch (leased facility)

3009 Smith Road, Suite 100

Fairlawn, Ohio 44333

Glendale Branch (leased facility)

38 Village Square

Glendale, Ohio 44122

Blue Ash Branch (leased facility)

10300 Alliance Rd. #150

Cincinnati, Oh 45242

Loan Production Office (leased facility):

8101 North High Street, Suite 180

Columbus, Ohio 43235

Item 3. Legal Proceedings.

We may, from time to time, be involved in various legal proceedings in the normal course of business. Periodically, there have been various claims and lawsuits involving CFBank, such as claims to enforce liens, condemnation proceedings on properties in which CFBank holds security interests, claims involving the making and servicing of real property loans and other issues incident to our banking business. We are not a party to any pending legal proceeding that management believes would have a material adverse effect on our financial condition or operations, if decided adversely to us.

Item 4. Mine Safety Disclosures.

Not Applicable

PART II

Item 5. Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities.

(a)Market and Dividend Information

The (voting) common stock of CF Bankshares Inc. trades on the Nasdaq® Capital Market under the symbol “CFBK.” As of December 31, 2021, there were 5,239,548 shares of (voting) common stock outstanding and held by approximately 352 shareholders of record. As of December 31, 2021, the Company also had an aggregate of 1,260,700 shares of non-voting common stock outstanding which were held by two shareholders of record.

There was $0.13 per share in dividends declared or paid on our common stock during 2021. The Company presently anticipates continuing to pay dividends in the future at similar levels, subject to compliance with applicable legal and regulatory requirements. The Holding Company is subject to various legal and regulatory policies and guidelines impacting the Holding Company’s ability to pay dividends on its stock. In addition, banking regulations limit the amount of dividends that can be paid to the Holding Company by CFBank without prior regulatory approval and, thus, can limit the availability of funds available to the Holding Company for the payment of dividends on its stock. The Holding Company’s ability to pay dividends on its common stock is also conditioned upon the Holding Company continuing to make certain payments on, and no event of default occurring under, the Company’s fixed-to-floating rate subordinated debt and the subordinated

debentures underlying the Holding Company’s trust preferred securities. Additional information is contained in the sections titled “Financial Condition - Stockholders’ equity” and “Liquidity and Capital Resources” in Management’s Discussion and Analysis of Financial Condition and Results of Operations in Item 7 of this Form 10-K and in Notes 16 and 17 in the accompanying Notes to Consolidated Financial Statements.

(b)Not applicable.

(c)The following table provides information concerning purchases of the Holding Company’s shares of common stock made by or on behalf of the Company or any “affiliated purchaser” as defined in Rule 10b-18(a)(3) under the Securities Exchange Act of 1934, as amended, during the three months ended December 31, 2021.

⁽¹⁾On January 28, 2021, the Board of Directors of the Company authorized a new stock repurchase program pursuant to which the Company may repurchase up to 250,000 of the Company’s outstanding common stock on or before February 27, 2022. On October 5, 2021, the Company announced that its Board of Directors approved an increase in the maximum number of shares that the Company may repurchase under the program to 350,000 and further extended the stock repurchase program through June 30, 2022. Under the stock repurchase program, the Company may purchase shares of its common stock from time to time through various means, including open market transactions and privately negotiated transactions.

⁽²⁾Includes 646 shares of common stock surrendered to the Company for the payment of the exercise price and taxes upon the exercise of stock options.

⁽³⁾Includes 3,876 shares of common stock surrendered to the Company for the payment of the exercise price and taxes upon the exercise of stock options.

Item 6. [Reserved]

Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations

FORWARD LOOKING STATEMENTS

Statements in this annual report that are not statements of historical fact are forward-looking statements which are made in good faith by us. Forward-looking statements include, but are not limited to: (1) projections of revenues, income or loss, earnings or loss per common share, capital structure and other financial items; (2) plans and objectives of the management or Boards of Directors of CF Bankshares Inc. (the “Holding Company”) or CFBank, National Association (“CFBank” and, together with the Holding Company, the “Company”); (3) statements regarding future events, actions or economic performance; and (4) statements of assumptions underlying such statements. Words such as "estimate," "strategy," "may," "believe," "anticipate," "expect," "predict," "will," "intend," "plan," "targeted," and the negative of these terms, or similar expressions, are intended to identify forward-looking statements, but are not the exclusive means of identifying such statements. Various risks and uncertainties may cause actual results to differ materially from those indicated by our forward-looking statements, including, without limitation, those risks detailed from time to time in our reports filed with the SEC, including those identified in “Item 1A. Risk Factors” of Part I in this Form 10-K.

Forward-looking statements are not guarantees of performance or results. A forward-looking statement may include a statement of the assumptions or bases underlying the forward-looking statement. We believe that we have chosen these assumptions or bases in good faith and that they are reasonable. We caution you, however, that assumptions or bases almost always vary from actual results, and the differences between assumptions or bases and actual results can be material. The forward-looking statements included in this quarterly report speak only as of the date of the report. We undertake no obligation to publicly release revisions to any forward-looking statements to reflect events or circumstances after the date of such statements, except to the extent required by law.

‎

CONDENSED CONSOLIDATED FINANCIAL DATA

The following information should be read in conjunction with our Consolidated Financial Statements, the related Notes and Management’s Discussion and Analysis of Financial Condition and Results of Operations contained in this report.