UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D. C. 20549

FORM 10‑K

ANNUAL REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE

SECURITIES EXCHANGE ACT OF 1934

For the fiscal year ended December 31, 2024

Commission file number: 0-13273

(540) 896-8941

Registrant’s telephone number, including area code

Securities registered pursuant to Section 12(b) of the Act:

Securities registered pursuant to Section 12(g) of the Act:

Common Stock - $5 Par value per share

Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities  Act. Yes ☐    No ☒

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act. Yes ☐   No ☒

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days.   Yes ☒    No ☐

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes ☒    No ☐ 

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☐

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those error corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant’s executive officers during the relevant recovery period pursuant to §240.10D-1(b). ☐

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act). Yes ☐    No ☒

The registrant’s Common Stock is quoted on the OTC Market’s OTCQX tier under the symbol FMBM. The aggregate market value of the 3,148,592 shares of Common Stock of the registrant issued and outstanding held by non-affiliates on June 30, 2024 was approximately $50,849,761 based on the closing sales price of $16.15 per share on that date. For purposes of this calculation, the term “affiliate” refers to all directors and executive officers of the registrant, plus the F&M Bank Corp. Stock Bonus Plan.

As of the close of business on March 17, 2025, there were 3,529,262 shares of the registrant's Common Stock outstanding.

DOCUMENTS INCORPORATED BY REFERENCE:

Part III:  Portions of the Proxy Statement for the Annual Meeting of Shareholders to be held on May 17, 2025, which the registrant plans to file with the Securities and Exchange Commission subsequent to the date hereof.

Table of Contents

PART I

Item 1. Business.

Business

F & M Bank Corp. (the “Company”), incorporated in Virginia in 1983, is a one-bank holding company under the Bank Holding Company Act of 1956 that has elected to become a financial holding company. The Company owns 100% of the outstanding stock of its banking subsidiary, Farmers & Merchants Bank (“Bank”) and VSTitle, LLC (“VST”). VBS Mortgage, LLC (“F&M Mortgage”), is a wholly owned subsidiary of the Bank. The Company dissolved TEB Life Insurance Company (“TEB”) on November 8, 2023. Farmers & Merchants Financial Services, Inc. (“FMFS”) was formerly a wholly owned subsidiary of the Bank. FMFS was dissolved effective April 25, 2024, and its legal existence was subsequently terminated on June 7, 2024. The operations, assets, and liabilities of FMFS were transferred to the Bank. The Company’s and the Bank’s headquarters are located in Timberville, Virginia, and its primary operations centers are located in the Shenandoah Valley of Virginia.

On April 15, 1908, the Bank was chartered as a state-chartered bank under the laws of the Commonwealth of Virginia. As a commercial bank, the Bank offers a wide range of banking services including commercial and individual demand and time deposit accounts, commercial and individual loans, internet and mobile banking, drive-in banking services, ATMs, as well as a courier service for its commercial banking customers. The Bank makes various types of commercial and consumer loans and has a large portfolio of residential mortgages and indirect auto loans. The local economy is diverse with strong employment in the agricultural, manufacturing, service and governmental sectors.

On November 3, 2008, the Bank acquired a 70% ownership interest in F&M Mortgage. On April 30, 2020, the Bank acquired the remaining 30% interest to have 100% ownership of F&M Mortgage. F&M Mortgage originates both conventional and government agency sponsored mortgages for sale in the secondary market and to be held in the Bank’s mortgage portfolio.

On January 1, 2017, the Company acquired a 76% ownership interest in VST; F&M Mortgage owned the remaining minority interest and, on January 3, 2022, the Company purchased F&M Mortgage’s minority interest in VST to have 100% ownership. VST provides title insurance services to the customers in our market area, including F&M Mortgage and the Bank.

Available Information

The Company files annual, quarterly and other reports under the Securities Exchange Act of 1934, as amended (the “Exchange Act”) with the Securities and Exchange Commission (“SEC”). The Company’s filings are available through the SEC’s website at www.sec.gov. More information about the Company can be found at www.fmbankva.com. Except as otherwise expressly stated, the information contained on our website or available by hyperlink from our website is not a part of this report and is not incorporated by reference into this report or any other documents we file with, or furnish to, the SEC.

Competition

The Bank's offices face strong competition in the markets it serves. The Company competes with large national and regional financial institutions, other independent community banks, nationally chartered savings banks, credit unions, consumer finance companies, mortgage companies, loan production offices, marketplace lenders and other financial technology firms and mutual funds. Competition for loans and deposits is affected by a variety of factors including interest rates, types of products offered, the number and location of branch offices, marketing strategies and the reputation of the Bank within the communities served.

Human Capital

On December 31, 2024, the Bank had 169 full-time equivalent employees. None of the Company’s employees are represented by a union or covered under a collective bargaining agreement. No one employee devotes full-time services to F&M Bank Corp. As a financial institution, our ability to attract, develop and retain highly qualified employees is critical to our success. We believe our people provide significant value to our Company and its shareholders.

Regulation and Supervision

General.The operations of the Company and the Bank are subject to extensive federal and state laws and regulations, which apply to bank holding companies, financial holding companies and state member banks of the Federal Reserve System. The common stock of the Company is registered pursuant to and subject to the periodic reporting requirements of the Exchange Act. These include, but are not limited to, the filing of annual, quarterly, and other current reports with the SEC. As an Exchange Act reporting company, the Company is directly affected by the Sarbanes-Oxley Act of 2002 (“Sarbanes-Oxley”).

The Company, as a bank holding company and a financial holding company, is subject to the provisions of the Bank Holding Company Act of 1956, as amended (the "Act") and is supervised by the Board of Governors of the Federal Reserve System (the “Federal Reserve Board”). The Act generally requires the Company to secure the prior approval of the Federal Reserve Board before the Company acquires ownership or control of more than 5% of the voting shares or substantially all the assets of another financial institution, including another bank.

As a financial holding company, the Company is required to file with the Federal Reserve Board an annual report and such additional information as it may require pursuant to the Act. The Federal Reserve Board may also conduct examinations of F & M Bank Corp. and any or all of its subsidiaries. Under the Act and the regulations of the Federal Reserve Board, a bank holding company and its subsidiaries are prohibited from engaging in certain tie-in arrangements in connection with an extension of credit, provision of credit, sale or lease of property or furnishing of services.

The permitted activities of a bank holding company are limited to managing or controlling banks, furnishing services to or performing services for its subsidiaries, and engaging in other activities that the Federal Reserve Board determines by regulation or order to be so closely related to banking or managing or controlling banks as to be a proper incident thereto. In addition, bank holding companies that qualify and elect to be financial holding companies, such as the Company, may engage in any activity, or acquire and retain the shares of a company engaged in any activity, that is either (i) financial in nature or incidental to such financial activity (as determined by the Federal Reserve Board in consultation with the Secretary of the Treasury) or (ii) complementary to a financial activity and does not pose a substantial risk to the safety and soundness of depository institutions or the financial system generally (as solely determined by the Federal Reserve Board). Activities that are financial in nature include but are not limited to securities underwriting and dealing, insurance underwriting, and making merchant banking investments. Since 1994, the Company has entered into agreements with the Virginia Community Development Corporation to purchase equity positions in several Low-Income Housing Funds; these funds provide housing for low-income individuals throughout Virginia. Approval of the Federal Reserve Board is necessary to engage in certain of the activities described above or to acquire interests in companies engaging in these activities.

The Bank, as a state member bank, is supervised and regularly examined by the Virginia Bureau of Financial Institutions and the Federal Reserve Board; such supervision and examination by the Virginia Bureau of Financial Institutions and the Federal Reserve Board is intended primarily for the protection of depositors and not the shareholders of the Company.

Payment of Dividends.The Company is a legal entity, separate and distinct from its subsidiaries. A significant portion of the revenues of the Company result from dividends paid to it by the Bank. There are various legal limitations applicable to the payment of dividends by the Bank to the Company. Under the current regulatory guidelines, prior approval from the Federal Reserve Board is required if cash dividends declared in any given year exceed net income for that year, plus retained net profits of the two preceding years. A bank also may not declare a dividend out of or in excess of its net undivided profits without regulatory approval. The payment of dividends by the Bank or the Company may also be limited by other factors, such as requirements to maintain capital above regulatory guidelines.

Bank regulatory agencies have the authority to prohibit the Bank or the Company from engaging in an unsafe or unsound practice in conducting their businesses. The payment of dividends, depending on the financial condition of the Bank, or the Company, could be deemed to constitute such an unsafe or unsound practice. Based on the Bank’s current financial condition, the Company does not expect that any of these laws will have any impact on its ability to obtain dividends from the Bank.

The Company also is subject to regulatory restrictions on payment of dividends to its shareholders. Regulators have indicated that bank holding companies should generally pay dividends only if the organization’s net income available to common shareholders over the past year has been sufficient to fully fund the dividends and the prospective rate of earnings retention appears consistent with the organization’s capital needs, asset quality, and overall financial condition. Further, a bank holding company should inform and consult with the Federal Reserve Board prior to declaring a dividend that exceeds earnings for the period (e.g., quarter) for which the dividend is being paid or that could result in a material adverse change to the organization’s capital structure.

Capital Requirements. The Federal Reserve Board and other federal banking agencies have issued risk-based capital requirements for assessing bank capital adequacy. Virginia chartered banks must also satisfy the capital requirements adopted by the Virginia Bureau of Financial Institutions.

At December 31, 2024, the "Basel III" capital and leverage ratios were as follows:

An institution will be subject to limitations on paying dividends, engaging in share repurchases, and paying discretionary bonuses if its capital level falls below the buffer amount. These limitations will establish a maximum percentage of eligible retained income that can be utilized for such activities.

The guidelines also provide that banking organizations experiencing internal growth or making acquisitions will be expected to maintain strong capital positions substantially above the minimum supervisory levels, without significant reliance on intangible assets.

In July 2023, the Federal Reserve Board and the FDIC issued proposed rules to implement the final components of the Basel III agreement, often known as the “Basel III endgame.” These proposed rules contain provisions that apply to banks with $100 billion or more in total assets and that will significantly alter how those banks calculate risk-based assets. These proposed rules do not apply to holding companies or banks with less than $100 billion in assets, such as the Company and the Bank, but the final impacts of these rules cannot yet be predicted.

As directed by the Economic Growth, Regulatory Relief and Consumer Protection Act (the “Economic Growth Act”), the federal banking regulators in 2019 jointly issued a final rule that permits qualifying banks that have less than $10 billion in total consolidated assets to elect to be subject to a 9% “community bank leverage ratio” (“CBLR”). A qualifying bank that has chosen the proposed framework would not be required to calculate the existing risk-based and leverage capital requirements and would be considered to have met the capital ratio requirements to be “well capitalized” under prompt corrective action rules, provided it has a community bank leverage ratio greater than 9%. The Bank has elected to not adopt the CBLR framework.

Pursuant to the Federal Reserve’s Small Bank Holding Company and Savings and Loan Holding Company Policy Statement, qualifying bank holding companies with total consolidated assets of less than $3 billion, such as the Company, are not subject to consolidated regulatory capital requirements.

Source of Strength. Federal Reserve Board policy has historically required bank holding companies to act as a source of financial and managerial strength to their subsidiary banks. The Dodd-Frank Act codified this policy as a statutory requirement. Under this requirement, the Company is expected to commit resources to support the Bank, including at times when the Company may not be in a financial position to provide such resources. Any capital loans by a bank holding company to any of its subsidiary banks are subordinate in right of payment to depositors and to certain other indebtedness of such subsidiary banks. In the event of a bank holding company's bankruptcy, any commitment by the bank holding company to a federal bank regulatory agency to maintain the capital of a subsidiary bank will be assumed by the bankruptcy trustee and entitled to priority of payment.

Safety and Soundness. There are a number of obligations and restrictions imposed on bank holding companies and their subsidiary banks by law and regulatory policy that are designed to minimize potential loss to the depositors of such depository institutions and the FDIC insurance fund in the event of a depository institution default. For example, under the Federal Deposit Insurance Corporation Improvement Act of 1991, to avoid receivership of an insured depository institution subsidiary, a bank holding company is required to guarantee the compliance of any subsidiary bank that may become "undercapitalized" with the terms of any capital restoration plan filed by such subsidiary with its appropriate federal bank regulatory agency up to the lesser of (i) an amount equal to 5% of the institution's total assets at the time the institution became undercapitalized or (ii) the amount that is necessary (or would have been necessary) to bring the institution into compliance with all applicable capital standards as of the time the institution fails to comply with such capital restoration plan.

Under the Federal Deposit Insurance Act, the federal bank regulatory agencies have adopted guidelines prescribing safety and soundness standards. These guidelines establish general standards relating to internal controls and information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth and compensation, fees and benefits. In general, the guidelines require, among other things, appropriate systems and practices to identify and manage the risk and exposures specified in the guidelines.

Transactions with Affiliates.Sections 23A and 23B of the Federal Reserve Act and Federal Reserve Regulation W establish parameters for a bank to conduct “covered transactions” with its affiliates, with the objective of limiting risk to the insured bank. Generally, Sections 23A and 23B (i) limit the extent to which the bank or its subsidiaries may engage in “covered transactions” with any one affiliate to an amount equal to 10% of such bank’s capital stock and surplus, and limit the aggregate of all such transactions with all affiliates to an amount equal to 20% of such capital stock and surplus and (ii) require that all such transactions be on terms substantially the same, or at least as favorable, to the bank or subsidiary as those that would be provided to a non-affiliate. The term “covered transaction” includes the making of loans to the affiliate, purchase of assets from the affiliate, issuance of a guaranty on behalf of the affiliate and several other types of transactions.

Under the Dodd-Frank Act, restrictions on transactions with affiliates are enhanced by (i) including among “covered transactions” transactions between bank and affiliate-advised investment funds; (ii) including among “covered transactions” transactions between a bank and an affiliate with respect to securities repurchase agreements and derivatives transactions; (iii) adopting stricter collateral rules; and (iv) imposing tighter restrictions on transactions between banks and their financial subsidiaries.

Transactions with Insiders. The Federal Reserve Act and related regulations impose specific restrictions on loans to directors, executive officers and principal shareholders of banks. Under Section 22(h) of the Federal Reserve Act, loans to a director, an executive officer and to a principal shareholder of a bank, and some affiliated entities of any of the foregoing, may not exceed, together with all other outstanding loans to such person and affiliated entities, the bank’s loan-to-one borrower limit. Loans in the aggregate to insiders and their related interests as a class may not exceed two times the bank’s unimpaired capital and unimpaired surplus until the bank’s total deposits equal or exceed $100,000,000, at which time the aggregate is limited to the bank’s unimpaired capital and unimpaired surplus. Section 22(h) also prohibits loans, above amounts prescribed by the appropriate federal banking agency, to directors, executive officers and principal shareholders of a bank or bank holding company, and their respective affiliates, unless such loan is approved in advance by a majority of the Board of Directors of the bank with any “interested” director not participating in the voting. The FDIC has prescribed the loan amount, which includes all other outstanding loans to such person, as to which such prior board of directors approval is required, as being the greater of $25,000 or 5% of capital and surplus (up to $500,000). Section 22(h) requires that loans to directors, executive officers and principal shareholders be made on terms and underwriting standards substantially the same as offered in comparable transactions to other persons.

Limits on Incentive Compensation. The Federal Reserve reviews incentive compensation arrangements of bank holding companies such as the Company as part of its regular, risk-focused supervisory process. The federal banking agencies have also issued guidance designed to help ensure that incentive compensation policies at banking organizations do not encourage excessive risk-taking or undermine the safety and soundness of banking organizations. The guidance, which covers all employees that have the ability to materially affect the risk profile of an organization, either individually or as part of a group, is based upon the key principles that a banking organization’s incentive compensation arrangements should (i) provide employees incentives that appropriately balance risk and reward and, thus, do not encourage risk-taking beyond the organization’s ability to effectively identify and manage risks, (ii) be compatible with effective internal controls and risk management, and (iii) be supported by strong corporate governance, including active and effective oversight by the organization’s board of directors. Any deficiencies in compensation practices that are identified may be incorporated into the organization’s supervisory ratings, which can affect its ability to make acquisitions or perform other actions. The guidance provides that enforcement actions may be taken against a banking organization if its incentive compensation arrangements or related risk-management control or governance processes pose a risk to the organization’s safety and soundness and the organization is not taking prompt and effective measures to correct the deficiencies.

Anti-Money Laundering Laws and Regulations. The Bank is subject to several federal laws that are designed to combat money laundering, terrorist financing, and transactions with persons, companies or foreign governments designated by U.S. authorities (“AML laws”). This category of laws includes the Bank Secrecy Act of 1970, the Money Laundering Control Act of 1986, the USA PATRIOT Act of 2001, and the Anti-Money Laundering Act of 2020.

The AML laws and their implementing regulations require insured depository institutions, broker-dealers, and certain other financial institutions to have policies, procedures, and controls to detect, prevent, and report money laundering and terrorist financing. The AML laws and their regulations also provide for information sharing, subject to conditions, between federal law enforcement agencies and financial institutions, as well as among financial institutions, for counter-terrorism purposes. Federal banking regulators are required, when reviewing bank holding company acquisition and bank merger applications, to take into account the effectiveness of the anti-money laundering activities of the applicants. The Company believes it has implemented appropriate internal practices, procedures, and controls to comply with these obligations.

Dodd-Frank Act. The Dodd-Frank Act was signed into law in July 2010. Its wide-ranging provisions affect all federal financial regulatory agencies and nearly every aspect of the American financial services industry.

The Dodd-Frank Act contains provisions designed to reform mortgage lending, which includes the requirement of additional disclosures for consumer mortgages. In addition, the Federal Reserve has issued rules that have the effect of limiting the fees charged to merchants for debit card transactions. These rules limit the amount of interchange fee income available explicitly to larger banks and indirectly to us. The Dodd-Frank Act also contains provisions that affect corporate governance and executive compensation.

In May 2018, the Economic Growth Act was enacted to modify or remove certain regulatory financial reform rules and regulations, including some of those implemented under the Dodd-Frank Act. While the Economic Growth Act maintains most of the regulatory structure established by the Dodd-Frank Act, it amends certain aspects of the regulatory framework for small depository institutions with assets of less than $10 billion, such as the Bank, and for large banks with assets of more than $50 billion.

Among other matters, the Economic Growth Act expanded the definition of qualified mortgages which may be held by a financial institution with total consolidated assets of less than $10 billion, exempts community banks from the Volcker Rule, and included additional regulatory relief regarding regulatory examination cycles, call reports, mortgage disclosures and risk weights for certain high-risk commercial real estate loans.

Consumer Financial Protection. The Bank is subject to federal and state consumer protection laws that extensively govern its relationship with its customers. These laws include the Equal Credit Opportunity Act, the Fair Credit Reporting Act, the Truth in Lending Act, the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, the Service Members Civil Relief Act, laws governing flood insurance, federal and state laws prohibiting unfair and deceptive business practices, foreclosure laws, and various regulations that implement some or all of the foregoing. These laws and regulations mandate certain disclosure requirements and regulate the manner in which financial institutions must deal with customers when taking deposits, making loans, collecting loans and providing other services.

If the Bank fails to comply with these laws and regulations, it may be subject to various penalties. Failure to comply with consumer protection requirements may also result in failure to obtain any required bank regulatory approval for merger or acquisition transactions the Company may wish to pursue or being prohibited from engaging in such transactions even if approval is not required.

Community Reinvestment Act. The Community Reinvestment Act (“CRA”) requires depository institutions to assist in meeting the credit needs of their market areas consistent with safe and sound banking practice. Under the CRA, each depository institution is required to help meet the credit needs of its market areas by, among other things, providing credit to low- and moderate-income individuals and communities. Depository institutions are periodically examined for compliance with the CRA and are assigned ratings. Banking regulators consider CRA ratings when considering approval of a proposed transaction. The Bank received a rating of “satisfactory” in its most recent CRA examination.

CRA regulations provide for certain disclosure obligations. Each institution must post a notice advising the public of its right to comment to the institution and its regulator on the institution’s CRA performance and to review the institution’s CRA public file. Each lending institution must maintain for public inspection a file that includes a listing of branch locations and services, a summary of lending activity, a map of its communities and any written comments from the public on its performance in meeting community credit needs. Applicable law requires public disclosure of a financial institution’s written CRA evaluations. This promotes enforcement of CRA requirements by providing the public with the status of a particular institution’s community reinvestment record.

Furthermore, if after becoming a financial holding company and undertaking activities not permissible for a bank holding company, the company fails to continue to meet any of the prerequisites for financial holding company status, the company must enter into an agreement with the Federal Reserve to comply with all applicable capital and management requirements. If the company does not return to compliance within 180 days, the Federal Reserve may order the company to divest its subsidiary banks or the company may discontinue or divest investments in companies engaged in activities permissible only for a bank holding company that has elected to be treated as a financial holding company.

On October 24, 2023, the federal bank regulatory agencies jointly issued a final rule to modernize CRA regulations consistent with the following key goals: (i) to encourage banks to expand access to credit, investment, and banking services in low to moderate income communities; (ii) to adapt to changes in the banking industry, including internet and mobile banking and the growth of non-branch delivery systems; (iii) to provide greater clarity and consistency in the application of the CRA regulations, including adoption of a new metrics-based approach to evaluating bank retail lending and community development financing; and (iv) to tailor CRA evaluations and data collection to bank size and type, recognizing that differences in bank size and business models may impact CRA evaluations and qualifying activities. Most of the final CRA rule’s requirements will be applicable beginning January 1, 2026, with certain requirements, including the data reporting requirements, applicable as of January 1, 2027. The Bank is evaluating the expected impact of the modified CRA regulations.

Cybersecurity. The federal banking agencies have adopted guidelines for establishing information security standards and cybersecurity programs for implementing safeguards under the supervision of a financial institution’s Board of Directors. These guidelines, along with related regulatory materials, increasingly focus on risk management and processes related to information technology and the use of third parties in the provision of financial products and services. The federal banking agencies expect financial institutions to establish lines of defense and ensure that their risk management processes also address the risk posed by compromised customer credentials, and also expect financial institutions to maintain sufficient business continuity planning processes to ensure rapid recovery, resumption and maintenance of the institution’s operations after a cyber-attack. If the Bank fails to meet the expectations set forth in this regulatory guidance, it could be subject to various regulatory actions and any remediation efforts may require significant resources of the Bank.

On November 18, 2021, the federal bank regulatory agencies issued a final rule to improve the sharing of information about cyber incidents that may affect the U.S. banking system. The rule requires a banking organization to notify its primary federal regulator of any significant computer-security incident as soon as possible and no later than 36 hours after the banking organization determines that a cyber incident has occurred. Notification is required for incidents that have materially affected—or are reasonably likely to materially affect—the viability of a banking organization’s operations, its ability to deliver banking products and services, or the stability of the financial sector. In addition, the rule requires a bank service provider to notify affected banking organization customers as soon as possible when the provider determines that it has experienced a computer-security incident that has materially affected or is reasonably likely to materially affect banking organization customers for four or more hours. The rule became effective May 1, 2022. With increased focus on cybersecurity, we are continuing to monitor legislative, regulatory, and supervisory developments related thereto. We had no material cybersecurity incidents in 2023. See “Item 1C. Cybersecurity” for more information.

Future Regulation. Congress may enact legislation from time to time that affects the regulation of the financial services industry, and state legislatures may enact legislation from time to time affecting the regulation of financial institutions chartered by or operating in those states. Federal and state regulatory agencies also periodically propose and adopt changes to their regulations or change the application of existing regulations. The substance or impact of pending or future legislation or regulation, or the application thereof, cannot be predicted, although enactment of the proposed legislation could impact the regulatory structure under which the Company and the Bank operate and may significantly increase costs, impede the efficiency of internal business processes, require an increase in regulatory capital, require modifications to business strategy, and limit the ability to pursue business opportunities in an efficient manner. Management expects that financial institutions will remain heavily regulated, and that additional laws or regulations may be adopted further regulating specific banking practices.

Effect of Governmental Monetary Policies. The Company’s operations are affected not only by general economic conditions but also by the policies of various regulatory authorities. In particular, the Federal Reserve uses monetary policy tools to impact money market and credit market conditions and interest rates to influence general economic conditions. These policies have a significant impact on overall growth and distribution of loans, investments, and deposits; they affect market interest rates charged on loans or paid for deposits and can significantly influence employment and inflation rates. Federal Reserve monetary policies have had a significant effect on the operating results of commercial banks, including the Company, in the past and are expected to do so in the future.

Operating Revenue

The following table displays components that contributed 15% or more of the Company’s total operating revenue for the years ended December 31, 2024 and 2023:

Executive Officers of the Company

Aubrey Michael (Mike) Wilkerson, 66, has served as Chief Executive Officer of the Company and the Bank since April 2023. Prior to that he served as Executive Vice President/Chief Lending Officer from January 2022 to April 2023, and Executive Vice President/Chief Strategy Officer and Northern Shenandoah Valley Market Executive since January 2021. Mr. Wilkerson began his banking career at Wachovia Bank on January 4, 1982. Mr. Wilkerson’s banking career includes experience in Dealer Financial Services, Retail Banking, Private Banking, Commercial Banking and senior strategic leadership positions. From 2012 to 2018, Mr. Wilkerson was the Business Banking Division Executive for Virginia, Maryland and Washington, DC at Wachovia. Most recently, Mr. Wilkerson served as the Commercial Banking Market Executive from 2018 through 2020 for Western Mid-Atlantic Region at Wells Fargo.

Barton E. Black, 54, has served as President of the Company and Bank since April 2023. Prior to that he served as Executive Vice President/Chief Operating Officer from June 2020 to April 2023, and as Executive Vice President/Chief Strategy & Risk Officer from March 2019 to May 2020. Prior to joining the Company, he served as Managing Director at Strategic Risk Associates, a financial services consulting company based in Virginia, from August 2012 through February 2019.

Lisa F. Campbell, 57, has served as Executive Vice President/Chief Financial Officer of the Company and the Bank since October 2022. Prior to joining the Company, she served as Group Vice President and Chief Financial Officer for Fidelity Bancshares N.C., Inc. in Fuquay-Varina, North Carolina from August 2014 to October 2022. Previously, she served as Executive Vice President, Chief Operating Officer and Chief Financial Officer for New Century Bancorp, Inc. in Dunn, North Carolina from March 2000 to August 2014 and as Senior Vice President and Controller for Triangle Bancorp, Inc. in Raleigh, North Carolina from September 1997 to March 2000. Ms. Campbell also worked in public accounting from September 1990 through September 1997.

Charles C. Driest, 47, has served as Executive Vice President/Chief Experience Officer since April 2023. Prior to that he served as Senior Vice President/Director of Digital Banking from January 2022 to April 2023. Prior to joining the company, he served as Senior Vice President, Director of Digital Banking at Essex Bank from July 2017 to January 2022. Mr. Driest holds a Master of Business Administration (MBA) – Finance from St. John’s University.

Paul E. Eberly, 43, has served as Executive Vice President/Chief Development Officer since September 2022, Executive Vice President/Chief Credit Officer from September 2020 until September 2022, Senior Vice President/Agricultural & Rural Programs Leader from January 2020 until September 2020, and Vice President/Agricultural & Rural Programs Leader from January 2019 until January 2020. He also served in various sales, lending, credit, risk management and other leadership roles within the Farm Credit System from June 2005 until January 2019. Mr. Eberly has been in the banking and finance industry since 2005.

Melody Emswiler, 51, has served as Executive Vice President/Chief Human Resources Officer since January 2022, Senior Vice President/Human Resources Director from January 2019 to December 2021, Vice President/Director of Human Resources from February 2015 to December 2018, and Assistant Vice President/Human Resources Manager from February 2011 to January 2015. Ms. Emswiler has been in the human resources profession since 1997.

Jason C. Withers, 42, has served as Executive Vice President/Chief Credit Officer since September 2022, and Senior Vice President/Credit Manager from March 2021 to September 2022. Prior to joining the Company, he served as a Senior Credit Analyst at Blue Ridge Bank, from April 2017 to March 2021, and as a Credit Analyst for CresCom Bank from March 2010 to March 2017.

Item 1A. Risk Factors.

Item not required for smaller reporting companies.

Item 1B. Unresolved Staff Comments.

Item not required for non-accelerated filers.

Item 1C. Cybersecurity.

Risk Management and Strategy

The Program is designed to adapt to an evolving landscape of emerging cybersecurity threats and advancing technology to determine the Company’s cybersecurity preparedness. Through routine data gathering, emerging risks, internal incidents, technology investments and internal controls, our Program and overall cybersecurity risk strategy is adjusted as needed.

The Program is supported by regular training of information security employees and awareness training and activities for executives, directors, and employees through which we communicate our cybersecurity policies, standards, processes, and practices to foster a culture of cybersecurity risk management across the Company.

Integrated Risk Management

The Program is integrated into the Company’s enterprise risk management framework and functions to identify risk, form a strategy to manage risk, implement the strategy, test the implementation, and monitor our technology environment to control risk. The information technology team works closely with stakeholders across security, risk, compliance, operations, other business stakeholders, and senior leadership to conduct an annual cybersecurity risk assessment utilizing the FFIEC Cybersecurity Assessment Tool.

Engagement of Third Parties in Connection with Risk Management

The Company engages various third parties to evaluate the effectiveness and maturity of the Program. The Company engages an independent third party to audit the cybersecurity risk strategy and preparedness. The Company also maintains cybersecurity insurance, however, the costs related to cybersecurity threats or disruptions may not be fully insured. The Company also engages third parties to perform regular penetration tests, vulnerability scans, disaster recovery tests and cyber exercises to simulate threat actor attacks. Our relationships with third parties enable us to leverage their cybersecurity expertise and industry knowledge to assess our Program and adjust as needed.

Oversight of Third-party Risks

Our third-party service providers, suppliers, and vendors face their own risks from cybersecurity threats that could impact the Company in certain circumstances. In response, we have implemented processes for overseeing and managing these risks. The processes include limiting the exposure of our information systems to external systems to the least practical amount, assessing the third parties’ information security practices before allowing them to access our information systems or data, requiring third parties to implement appropriate cybersecurity controls in our agreements with them, conducting ongoing monitoring of their compliance with those requirements, and requiring third parties to agree to contractual requirements designed to ensure cybersecurity concepts are appropriately addressed.

Risks from Cybersecurity Threats

As of the date of this report, we have not encountered any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected or are reasonably likely to materially affect the Company, including its business strategy, results of operations, or financial condition.

Governance

Board of Directors Oversight

Our Board’s Operational Risk Committee oversees cybersecurity risk.

Management's Role in Cybersecurity Risk Management

Given the important role of technology in the Company’s operations and customer service, the Company has established an Information Technology Steering Committee, which consists of our IT Manager, President, Chief Financial Officer, Chief Experience Officer, Director of Risk Management and Information Security Officer. The Information Technology Steering Committee reviews, monitors, aligns, and prioritizes all significant strategic information technology initiatives and security risks. The Information Technology Steering Committee reports to the Operational Risk Committee and minutes of the committee’s meetings are subsequently reported by the Operational Risk Committee to the Company’s Board of Directors. Our IT Manager, in collaboration with our Information Security Officer, makes quarterly reports to the Information Technology Steering Committee. Such reports include updates related to key metrics, key risk indicators, key performance indicators, penetration test results, risk assessment results, project updates, incident reports, compliance matters, and operational issues.

Risk Management Personnel

The Information Security Officer has the primary responsibility for managing the Program to identify, assess, manage, and control cybersecurity risk. The Information Security Officer reports directly to the President. The Information Security Officer has approximately 16 years of experience in cybersecurity, information security risk management, identity and access management, security architecture, vulnerability management, threat intelligence, security operations and incident management and response.

Monitoring Cybersecurity Incidents

The Information Security Officer is continually informed of and monitors cybersecurity risks and incidents. In the event of a cybersecurity incident, the Company has developed an incident response plan to timely report cybersecurity incidents to the executive management team, the Operational Risk Committee and Board of Directors, as necessary. In addition to facilitating timely evaluation, escalation and reporting of cybersecurity incidents, this plan also sets forth the process for identifying and assessing the severity of cybersecurity incidents, as well as monitoring post-incident mitigation and remediation.

Reporting to Board of Directors

The Operational Risk Committee receives reports from the President, Information Security Officer, and Director of Risk Management, and briefings on our information security and enterprise risk management programs at least quarterly, including the results of any external audits, bank regulatory examinations and evaluations, as well as maturity assessments of our information security program.

Item 2. Properties.

The Company owns or leases buildings that are used in the normal course of business. The Company’s corporate headquarters are located at 205 South Main Street, Timberville, Virginia 22853. At December 31, 2024, the Bank operated fourteen branches and a dealer finance division in the Shenandoah Valley of Virginia. See Note 1 - Nature of Banking Activities and Significant Accounting Policies and Note 5 - Bank Premises and Equipment and Note 6 - Leases in Notes to the Consolidated Financial Statements for information with respect to the amounts at which bank premises and equipment are carried and commitments under long-term leases.

Item 3. Legal Proceedings.

In the normal course of business, the Company may become involved in litigation arising from banking, financial, or other activities of the Company. Management, after consultation with legal counsel, does not anticipate that the ultimate outcome in such legal proceedings, in the aggregate, will have a material adverse effect on the Company’s business, financial condition, or results of operations.

Item 4. Mine Safety Disclosures.

None.

PART II

Item 5. Market for Registrant’s Common Equity, Related Shareholder Matters and Issuer Purchases of Equity Securities.

Information on Common Stock, Market Prices and Dividends.

The Company’s Common Stock is quoted on the OTC Markets Group’s OTCQX Market under the symbol “FMBM.”

As of March 12, 2025, the Company had approximately 2,586 shareholders of record.

During 2024 and 2023, the Company declared four quarterly dividends of $0.26 per share for an annual total of $1.04 per share. The Company’s Board of Directors determines the payment of dividends based on a number of factors, including the Company’s historic and projected financial condition, liquidity and results of operations, capital levels and needs, tax considerations, any acquisitions or potential acquisitions, statutory and regulatory prohibitions and other limitations, the terms of contractual arrangements that restrict the ability to pay cash dividends, general economic conditions, and other factors deemed relevant by our Board of Directors. The Company is not obligated to pay dividends on its common stock, and is subject to certain regulatory restrictions on paying dividends.

Because the Company is a financial holding company and does not engage directly in business activities of a material nature, the ability to pay dividends to shareholders depends, in large part, upon the receipt of dividends from the Bank, which is also subject to numerous limitations on the payment of dividends under federal banking laws, regulations and policies. Regulatory restrictions on the ability of the Bank to transfer funds to the Company at December 31, 2024 are set forth in Note 21 - Parent Company Financial Information in Notes to Consolidated Financial Statements.

There were no repurchases of the Company's common stock during 2024.

Transfer Agent and Registrar

Broadridge Corporate Issuer Solutions

PO Box 1342

Brentwood, NY 11717

Stock Performance

The following graph compares the cumulative total return to the shareholders of the Company for the last five fiscal years with the total return of the Russell 2000 Index and the S&P U.S. BMI Banks Index, as reported by SNL Financial, LC, assuming an investment of $100 in the Company’s common stock on December 31, 2019, and the reinvestment of dividends.

Item 6. [Reserved]

Item 7. Management’s Discussion and Analysis of Financial Condition and Results of Operations

Forward-Looking Statements

Certain information contained in this report may include “forward-looking statements” within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Exchange Act.  These forward-looking statements are generally identified by phrases such as “we expect,” “we believe” or words of similar import. Such forward-looking statements are subject to known and unknown risks including, but not limited to:

Although the Company believes that our expectations with respect to the forward-looking statements are based upon reliable assumptions within the bounds of our knowledge of our business and operations, there can be no assurance that our actual results, performance or achievements will not differ materially from any future results, performance or achievements expressed or implied by such forward-looking statements.

The following discussion provides information about the major components of the results of operations and financial condition, liquidity and capital resources of F&M Bank Corp. and its subsidiaries. This discussion and analysis should be read in conjunction with the Consolidated Financial Statements and the Notes to the Consolidated Financial Statements presented in Item 8, Financial Statements and Supplementary Information, of this Form 10-K.

Lending Policies

Credit Policies

The principal risk associated with each of the segments of loans in our portfolio is the creditworthiness of our borrowers. Within each segment, such risk is increased or decreased, depending on prevailing economic conditions. To manage the risk, the Bank’s Credit Administration Department ensures that the underwriting process follows the written policies and procedures approved by the Board of Directors. The loan policy gives loan amount approval limits to individual loan officers based on their position and level of experience and to our loan committees based on the size of the lending relationship. The risk associated with real estate and construction loans, commercial loans and consumer loans varies, based on market employment levels, fluctuations in the value of real estate and other conditions that affect the ability of borrowers to repay indebtedness. The risk associated with real estate construction loans varies, based on the supply and demand for the type of real estate under construction.

The Bank has a loan review process to monitor and manage the portfolio, identify concentrations and credit deterioration, establish loss exposure and assess compliance with the loan policy.

The Bank uses a management loan committee and a directors’ loan committee to approve loans. The management loan committee consists of members of senior management, credit administration and senior lenders; the directors’ loan committee consists of  six directors appointed by the Board of Directors. Both committees approve new, renewed and or modified loans that exceed individual officer loan authorities. The directors’ loan committee also reviews any changes to the lending policies, which are then approved by the Board of Directors.

Construction and Development Lending

The Bank makes construction loans, primarily residential, and land acquisition and development loans. The residential construction loans are secured by residential houses under construction and the underlying land for which the loan was obtained. The land acquisition and development loans are secured by the land for which the loan was obtained. The average life of a construction loan is approximately 12 months, and it is typically re-priced as the prime rate of interest changes. Construction lending entails significant additional risks, compared with residential mortgage lending. Construction loans often involve larger loan balances concentrated with single borrowers or groups of related borrowers. Another risk involved in construction lending is attributable to the fact that loan funds are advanced upon the security of the land or home under construction, which value is estimated prior to the completion of construction. Thus, it is more difficult to evaluate accurately the total loan funds required to complete a project and related loan-to-value ratios. To mitigate the risks associated with construction lending, loan amounts are limited to 75% to 90% of appraised value, in addition to analyzing the creditworthiness of the borrower. In addition, a first lien on the property is obtained as security for construction loans and typically requires personal guarantees from the borrower’s principal owners. The Bank further mitigates risk by advancing funds for the construction in increments based on the progress of construction.

Commercial Real Estate Lending

Commercial real estate loans are secured by various types of commercial real estate in our market area, including multi-family residential buildings, commercial buildings and offices, shopping centers and churches. Commercial real estate lending entails significant additional risks compared with residential mortgage lending. Commercial real estate loans typically involve larger loan balances concentrated with single borrowers or groups of related borrowers. Additionally, the payment experience on loans secured by income producing properties is typically dependent on the successful operation of a business or a real estate project and thus may be subject, to a greater extent, to adverse conditions in the real estate market or in the economy in general. The Bank’s commercial real estate loan underwriting criteria require an examination of debt service coverage ratios and the borrower’s creditworthiness, prior credit history and reputation; as well as an evaluation of the location of the property securing the loan and personal guarantees or endorsements of the borrower’s principal owners.

Commercial & Industrial – Non-Real Estate

Business loans generally have a higher degree of risk than residential mortgage loans but have higher yields. To manage these risks, the Bank obtains appropriate collateral and personal guarantees from the borrower’s principal owners and monitors the financial condition of business borrowers. Residential mortgage loans generally are made based on the borrower’s ability to repay from employment and other income and are secured by real estate whose value tends to be readily ascertainable. In contrast, business loans typically are made based on the borrower’s ability to make repayment from cash flow from its business and are secured by business assets, such as accounts receivable, equipment and inventory. As a result, the availability of funds for the repayment of business loans is substantially dependent on the success of the business itself. Furthermore, the collateral for business loans may depreciate over time and generally cannot be appraised with as much precision as residential real estate.

Consumer Lending

The Bank offers various consumer loans, including personal loans, automobile loans, deposit account loans, installment and demand loans, and home equity loans.

The underwriting standards for consumer loans include a determination of the applicant’s payment history on other debts and an assessment of their ability to meet existing obligations and payments on the proposed loan. The stability of the applicant’s monthly income may be determined by verification of gross monthly income from primary employment and additionally from any verifiable secondary income. Although creditworthiness of the applicant is of primary consideration, the underwriting process also includes an analysis of the value of the security in relation to the proposed loan amount. For home equity lines of credit and loans the Bank requires title insurance, hazard insurance and, if required, flood insurance.

Residential Mortgage Lending

The Bank makes residential mortgage loans for the purchase or refinance of existing loans with loan-to-value limits generally ranging between 80% and 90% depending on the age of the property, the borrower’s income, and the borrower’s credit worthiness. Loans that are retained in our portfolio generally carry adjustable rates that can change every one, three or five years, based on amortization periods of twenty to thirty years.

Loans Held for Sale

The Bank makes fixed rate mortgage loans with terms of typically fifteen or thirty years through its subsidiary F&M Mortgage. These loans are funded by F&M Mortgage utilizing a line of credit at the Bank until sold to investors in the secondary market or transferred to the Bank and held in the loan portfolio.

Dealer Finance Division

The Dealer Finance Division specializes in providing automobile financing through a network of automobile dealers in the Shenandoah Valley.

Critical Accounting Policies

The Company’s financial statements are prepared in accordance with accounting principles generally accepted in the United States of America (“GAAP”). The financial information contained within the statements is, to a significant extent, financial information that is based on measures of the financial effects of transactions and events that have already occurred. A variety of factors could affect the ultimate value that is obtained when earning income, recognizing an expense, recovering an asset or relieving a liability. In addition, GAAP itself may change from one previously acceptable method to another method. Although the economics of the transactions would be the same, the timing of events that would impact the transactions could change.

Allowance for Credit Losses

The allowance for credit losses represents our estimate of all expected credit losses for financial assets held at the reporting date based on historical experience, current conditions, and projections including reasonable and supportable forecasts. It is a valuation account that is deducted from the financial assets’ amortized cost basis to present the net amount expected to be collected on the financial asset. Financial assets are charged-off against the allowance when management believes the uncollectibility of a financial asset is confirmed. Expected recoveries do not exceed the aggregate of amounts previously charged-off and expected to be charged-off.

The Company’s loan portfolio is the largest financial asset that is in scope of this critical accounting estimate. Determining the amount of the allowance for credit losses is considered a critical accounting estimate, because it is based on the evaluation of the size and current risk characteristics of the loan portfolio, past events, current conditions, reasonable and supportable forecasts, and prepayment experience as related to credit contractual terms. Management estimates the allowance balance using relevant available information from internal and external sources. Historical credit loss experience provides the basis for the estimation of expected credit losses; adjustments to historical loss information are made for differences in current loan-specific risk characteristics, such as differences in underwriting standards, portfolio mix, and delinquency levels, as well as for changes in environmental conditions, such as changes in unemployment rates, property values, or other relevant factors. The model methodology used for funded credits, along with taking into consideration the probability of drawdowns or funding on unfunded commitments and whether such commitments are irrevocable or not by the Company, is how the Company determines the allowance for credit losses for unfunded commitments. These evaluations are conducted at least quarterly and more frequently, if deemed necessary.

The Company’s allowance model uses a remaining life or weighted average remaining maturity method with the portfolio segmented by federal call codes. Management considers the national unemployment rate, national gross domestic product, and the core inflation index as external economic variables in developing the allowance and utilizes economic projections published by The Federal Reserve Bank of St. Louis for reasonable and supportable forecasts. The Company uses a reasonable and supportable period forecast period of 12 months. The qualitative estimate of the allowance for credit losses on loans (“ACLL”) is sensitive to these forecasts as economic conditions are the most influential qualitative factor. In evaluating the level of the allowance, we consider a range of possible assumptions and outcomes related to the various factors identified above. See Note 1 – Nature of Banking Activities and Significant Accounting Policies in Notes to the Consolidated Financial Statements for additional information concerning the determination of the allowance for credit losses on loans.

Results of Operations

Net Income

Net income for 2024 was $7.3 million, an increase of $4.5 million or 162.90% from 2023’s net income of $2.8 million. Basic and diluted earnings per share were $2.07 and $0.80 for 2024 and 2023, respectively. The increase in net income for 2024 was the result of an increase in net interest income of $2.2 million coupled with a decrease in noninterest expense of $4.3 million.

Return on average assets (“ROA”) measures how efficiently the Company uses its assets to produce net income. Some factors reflected within this measurement include the Company’s asset mix, funding sources, pricing, fee generation, and cost control. The ROA of the Company, on an annualized basis, was 0.55% and 0.22% for 2024 and 2023, respectively.

Return on average equity (“ROE”) measures the utilization of shareholders’ equity in generating net income. This measurement is affected by the same factors as ROA with consideration to how much of the Company’s assets are funded by the shareholders. The ROE for the Company was 8.86% and 3.87% for 2024 and 2023, respectively.

Net Interest Income and Net Interest Margin

Net interest income is the principal component of the Company’s income stream and represents the difference, or spread, between interest and fee income generated from earning assets and the interest expense paid on deposits and borrowed funds. Net interest income was $33.9 million for 2024 and $31.7 million for 2023, which represents an increase of $2.2 million or 7.02%. Total interest income was $64.5 million for 2024 and $56.4 million for 2023, which represents an increase of $8.1 million or 14.31% for 2024. Total interest expense was $30.6 million for 2024 and $24.7 million for 2023, which represents an increase of $5.8 million or 23.66% in 2024. The increase in total interest income, total interest expense and net interest income during 2024 was driven by the growth in interest-earning assets, interest-bearing liabilities and the repricing of assets and liabilities into higher rates.

The net interest margin increased 7 basis points from 2.70% for 2023 to 2.77% for 2024. The net interest margin is calculated by dividing net interest income by total average earning assets. Higher loan balances and the repricing of adjustable-rate loans contributed to an increase of $6.8 million in loan interest income, and income from cash and securities increased $1.2 million due to higher average balances of federal funds sold in 2024. As a result, the yield on earning assets increased by 46 basis points to 5.27%.

Higher rates paid on time deposits coupled with growth in that deposit category resulted in an increase of $7.0 million in deposit interest expense. The increase in deposit interest expense was offset by lower interest expense on short-term borrowings, which declined by $1.2 million due to the gradual paydown of Federal Home Loan Bank (“FHLB”) advances during the year. The cost of funds for the year was 2.51%, which was 38 basis points higher than 2023.

The table titled “Consolidated Average Balances, Yields and Rates” displays the composition of interest earning assets and interest bearing liabilities and their respective yields and rates for the years ended December 31, 2024 and 2023.

Consolidated Average Balances, Yields and Rates (dollars in thousands)¹

Volume and Rate Analysis

Changes in the cost of funds attributable to rate and volume variances are reflected in the following table (dollars in thousands), which illustrates the effect of changes in interest income and interest expense, and distinguishes between the changes resulting from the increases or decreases in the outstanding balances of interest-earning assets and interest-bearing liabilities (volume), and the changes resulting from increases or decreases in average interest rates on such assets and liabilities (rate). Changes related to both volume and rate have been allocated proportionally.