TrustCo Bank Corporation

03/14/2025 | Press release | Distributed by Public on 03/14/2025 14:29

Annual Report for Fiscal Year Ending 12-31, 2024 (Form 10-K)

UNITED STATES
SECURITIES AND EXCHANGE COMMISSION
Washington, D.C. 20549
FORM 10-K

☒ Annual Report Pursuant to Section 13 or 15(d) of the Securities Exchange Act of 1934
For the Fiscal Year Ended December 31, 2024
Or
☐ Transition Report Pursuant to Section 13 or 15(d) of the Securities Exchange Act of 1934

For the transition period from ____________________ to ____________________

Commission file number 000-10592

TRUSTCO BANK CORP NY
(Exact name of registrant as specified in its charter)

NEW YORK
14-1630287
(State or other jurisdiction of incorporation or organization)
(I.R.S. Employer Identification No.)

5 SARNOWSKI DRIVE, GLENVILLE, NEW YORK
12302
(Address of principal executive offices)
(Zip Code)

Registrant's telephone number, including area code: (518) 377-3311

Securities registered pursuant to Section 12(b) of the Act:

Title of each class
Trading Symbol(s)
Name of exchange on which registered
Common Stock, $1.00 par value
TRST
The Nasdaq Global Select Market

Securities registered pursuant to Section 12(g) of the Act: None


Indicate by check mark if the registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act.
Yes No

Indicate by check mark if the registrant is not required to file reports pursuant to Section 13 or Section 15(d) of the Act.
Yes No

Indicate by check mark whether the registrant (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. Yes.No.

Indicate by check mark whether the registrant has submitted electronically every Interactive Data File required to be submitted pursuant to Rule 405 of Regulation S-T (§ 232.405 of this chapter) during the preceding 12 months (or for such shorter period that the registrant was required to submit such files). Yes.No.

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of "large accelerated filer," "accelerated filer," "smaller reporting company," and "emerging growth company" in Rule 12b-2 of the Exchange Act.

Large accelerated filer

Accelerated filer ☒
Non-accelerated filer ☐ Smaller reporting company ☐
Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐
Indicate by check mark whether the registrant has filed a report on and attestation to its management's assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report. ☒

If securities are registered pursuant to Section 12(b) of the Act, indicate by check mark whether the financial statements of the registrant included in the filing reflect the correction of an error to previously issued financial statements. ☐

Indicate by check mark whether any of those errors corrections are restatements that required a recovery analysis of incentive-based compensation received by any of the registrant's executive officers during the relevant recovery period pursuant to §240.10D-1(b).

Indicate by check mark whether the registrant is a shell company (as defined in Rule 12b-2 of the Act).
Yes. ☐ No.

The aggregate market value of the common stock held by non-affiliates as of June 30, 2024, the last business day of the Company's second quarter, was $529.8 million (based upon the closing price of $28.77 on June 28, 2024 as reported on the Nasdaq Global Select Market).

The number of shares outstanding of the registrant's common stock as of March 7, 2025 was19,019,749.

Documents Incorporated by Reference

Documents Incorporated by Reference: Portions of the registrant's Annual Report to Shareholders for the year ended December 31, 2024 are incorporated by reference into Parts I and II of this report, and portions of the registrant's Proxy Statement filed for its 2025 Annual Meeting of Shareholders to be filed within 120 days of the registrant's fiscal year end are incorporated into Part III of this report to the extent described herein.

INDEX

Description

Page




PART I



Item 1
Business
3

Item 1A
Risk Factors
22

Item 1B
Unresolved Staff Comments
37

Item 1C
Cybersecurity
38

Item 2
Properties
39

Item 3
Legal Proceedings
39

Item 4
Mine Safety Disclosures
39




PART II



Item 5
Market for the Registrant's Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities
41

Item 6
[Reserved]
41

Item 7
Management's Discussion and Analysis of Financial Condition and Results of Operations
41

Item 7A
Quantitative and Qualitative Disclosures about Market Risk
42

Item 8
Financial Statements and Supplementary Data
42

Item 9
Changes in and Disagreements with Accountants On Accounting and Financial Disclosure
42

Item 9A
Controls and Procedures
42

Item 9B
Other Information
43

Item 9C
Disclosure Regarding Foreign Jurisdictions that Prevent Inspections
43
PART III



Item 10
Directors, Executive Officers and Corporate Governance
43

Item 11
Executive Compensation
43

Item 12
Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters
44

Item 13
Certain Relationships and Related Transactions, and Director Independence
44

Item 14
Principal Accountant Fees and Services
44




PART IV



Item 15
Exhibits, and Financial Statement Schedules
44

Item 16
Form 10-K Summary
49


EXHIBITS INDEX
45






Signatures
50

2
Index
CAUTIONARY NOTE REGARDING FORWARD-LOOKING STATEMENTS
Statements included in this Annual Report on Form 10-K for the year ended December 31, 2024 ("2024 Form 10-K") and in future filings by TrustCo with the Securities and Exchange Commission ("SEC"), in TrustCo's press releases, and in oral statements made with the approval of an authorized executive officer that are not historical or current facts, are "forward-looking statements" made pursuant to the safe harbor provisions of the Private Securities Litigation Reform Act of 1995 and are subject to certain risks and uncertainties that could cause actual results to differ materially from historical earnings and those presently anticipated or projected. Forward-looking statements can be identified by the use of such words such as may, will, should, could, would, estimate, project, believe, intend, anticipate, plan, seek, expect and similar expressions. TrustCo wishes to caution readers not to place undue reliance on any such forward-looking statements, which speak only as of the date made.

The risk factors listed in Item 1A, Risk Factors of this 2024 Form 10-K and TrustCo's Annual Report to Shareholders for the year ended December 31, 2024 Annual Report to Shareholders, which is included as Exhibit 13 hereto, and in TrustCo's other filings with the SEC, among others, in some cases have affected and, in the future, could affect TrustCo's actual results and could cause TrustCo's actual financial performance to differ materially from that expressed in any forward-looking statement. Additionally, many of these risks and uncertainties are currently elevated by and may or will continue to be heightened by volatility in financial markets and macroeconomic or geopolitical concerns related to continued elevated interest rates, global political hostilities (including China-Taiwan and U.S.-China relations), global military conflicts (including the conflicts in the Ukraine and the Middle East), and U.S. and foreign tariff policies.

You should not rely upon forward-looking statements as predictions of future events. Although TrustCo believes that the expectations reflected in the forward-looking statements are reasonable, it cannot guarantee that the future results, levels of activity, performance or events and circumstances reflected in the forward-looking statements will be achieved or occur. The Company disclaims any obligation to subsequently revise any forward-looking statements to reflect events or circumstances after the date of such statements, or to reflect the occurrence of anticipated or unanticipated events.

PART I
Item 1.
Business
General
TrustCo Bank Corp NY ("TrustCo"or the "Company") is a savings and loan holding company having its principal place of business at 5 Sarnowski Drive, Glenville, New York 12302. TrustCo was incorporated under the laws of New York in 1981 to be the parent holding company of The Schenectady Trust Company, which subsequently was renamed Trustco Bank New York and, later, Trustco Bank, National Association. The Company's principal subsidiary, Trustco Bank (also referred to as the "Bank"), is the successor by merger to Trustco Bank, National Association.
Through policy and practice, TrustCo continues to emphasize that it is an equal opportunity employer. There were 737 full-time equivalent employees of TrustCo at year-end. TrustCo had 6,961 shareholders of record as of December 31, 2024 and the closing price of the TrustCo common stock on December 31 (the last trading day of 2024) was $33.31.
3
Index
Subsidiaries
Trustco Bank
Trustco Bank is a federal savings bank engaged in providing general banking services to individuals and business.
The Bank provides a wide range of both personal and business banking services, including a full array of deposit products for both individuals and businesses. Trustco Bank also offers trust and investment services through its Financial Services Department. The Bank is supervised and regulated by the federal Office of the Comptroller of the Currency ("OCC"). Its deposits are insured by the Federal Deposit Insurance Corporation ("FDIC") to the extent permitted by law. The Bank's subsidiary, Trustco Realty Corp., is a real estate investment trust (or "REIT") that was formed to acquire, hold and manage real estate mortgage assets, including residential mortgage loans and mortgage backed securities. The income earned on these assets, net of expenses, is distributed in the form of dividends. Under current New York State tax law, 60% of the dividends received by the Bank from Trustco Realty Corp. are excluded from total taxable income for New York State income tax purposes. The Bank accounted for substantially all of TrustCo's 2024 consolidated net income and average assets. The Bank's other active subsidiaries, Trustco Insurance Agency, Inc. and ORE Property, Inc., did not engage in any significant business activities during 2024 and 2023.
Trustco Financial Services, the name under which Trustco Bank's trust department operates, serves as executor of estates and trustee of personal trusts, provides asset and wealth management services, provides estate planning and related advice, provides custodial services, and acts as trustee for various types of employee benefit plans and corporate pension and profit sharing trusts. The aggregate market value of the assets under trust, custody, or management of the trust department of the Bank was approximately $1.15 billion as of December 31, 2024.
The daily operations of the Bank remain the responsibility of its officers, subject to the oversight of its Board of Directors and overall supervision by TrustCo. The activities of the Bank are included in TrustCo's consolidated financial statements.
ORE Subsidiary Corp.
In 1993, TrustCo created ORE Subsidiary Corp., a New York corporation, to hold and manage certain foreclosed properties acquired by the Bank. The accounts of this subsidiary are included in TrustCo's consolidated financial statements.
Our Market Area
At year-end 2024, the Bank operated 154 automatic teller machines and 136 banking offices in Albany, Columbia, Dutchess, Greene, Montgomery, Orange, Putnam, Rensselaer, Rockland, Saratoga, Schenectady, Schoharie, Ulster, Warren, Washington, and Westchester counties of New York, Brevard, Charlotte, Flagler, Hillsborough, Indian River, Lake, Manatee, Martin, Orange, Osceola, Palm Beach, Polk, Sarasota, Seminole, and Volusia counties in Florida, Bennington County in Vermont, Berkshire County in Massachusetts and Bergen County in New Jersey. The largest part of such business consists of accepting deposits and making loans and investments. Trustco Bank also lends in Essex and Fulton counties of New York, Essex, Hudson, Morris, and Passaic counties of New Jersey, Collier, Lee, Marion, Pasco, Pinellas, St. Johns, St. Lucie, and Sumter counties of Florida, where it has no branch locations. The Bank's locations are selected to be easily accessible and provide convenient services to businesses and individuals throughout our market area.
Our market area has a high level of retail and commercial business activity. Businesses are concentrated in the service sector and retail trade areas. Major employers in our market area include certain medical centers, municipalities, and school districts.
Competition
TrustCo faces strong competition in its market areas, both in attracting deposits and making loans. The Company's most direct competition for deposits, historically, has come from commercial banks, savings associations, and credit unions that are located or have branches in the Bank's market areas. The competition ranges from other locally based commercial banks, savings banks, and credit unions to branch offices of the largest financial institutions in the United States. In its principal market areas, the Capital District area of New York State and central Florida, TrustCo's principal competitors are local branch operations of super-regional banks, branch offices of money center banks, and locally based commercial banks and savings institutions. The Bank is the largest depository institution headquartered in the Capital District area of New York State. The Company also faces competition for deposits from national brokerage houses, short-term money market funds, and other corporate and government securities mutual funds.
4
Index
Factors affecting the acquisition of deposits include pricing, office locations and hours of operation, the variety of deposit accounts offered, and the quality of customer service provided. Competition for loans has increased as interest rates have remained elevated and housing inventory has tightened in many of the Bank's market areas. Commercial banks, savings institutions, traditional mortgage brokers affiliated with local offices, and nationally franchised real estate brokers are all active and aggressive competitors. The Company competes in this environment by providing a full range of financial services based on a tradition of financial strength and integrity dating from its inception. The Company also expects competition to increase in the future as a result of legislative, regulatory and technological changes and the continuing trend of consolidation in the financial services industry. Technological advances, for example, have lowered barriers to entry, allowed banks and other financial services companies to expand their geographic reach by providing services over the internet, and made it possible for non-depository institutions to offer products and services that traditionally have been provided by banks. The Company competes for loans principally through the interest rates and loan fees it charges and the efficiency and quality of services it provides to borrowers. Furthermore, management believes that a community-based financial organization is better positioned to establish personalized financial relationships with both commercial customers and individual households. The Company's community commitment and involvement in its primary market areas, as well as its commitment to quality and personalized financial services, are factors that contribute to the Company's competitiveness.
Lending Activities

One of our core goals is to support the communities in which we operate. We seek loans from within our primary market area, which generally is defined as the counties in which our banking offices are located. Approval of all loans is subject to our policies and standards described in more detail below. We have adopted comprehensive lending policies, underwriting standards and loan review procedures. Management and our Board of Directors reviews and approves these policies and procedures on a regular basis. Management has also implemented reporting systems designed to monitor loan originations, loan quality, concentrations of credit, loan delinquencies, nonperforming loans, and potential problem loans. Our management and various committees periodically review our lines of business to monitor asset quality trends and the appropriateness of credit policies. In addition, we establish total borrower exposure limits and monitor concentration risk. As part of this process, the overall composition of the portfolio is reviewed to gauge diversification of risk, client concentrations, industry group, loan type, geographic area, or other relevant classifications of loans. Specific segments of the portfolio are monitored and reported to our Board on a quarterly basis. We recognize that exceptions to the below-listed policy guidelines may occur and have established procedures for approving exceptions to these policy guidelines.

Residential Real Estate Loans

We originate 1-4 family, owner-occupied residential real estate loans. Historically, vast majority of residential loan originations are fixed-rate loans which are held in portfolio. Residential real estate loans also include home equity lines of credit, or HELOCs, and home equity loans. Our home equity portfolio includes revolving open-ended equity loans with interest-only or minimal monthly principal payments and closed-end amortizing loans. Open-ended equity loans typically have an interest-only draw period followed by a repayment period.

Commercial Loans

Commercial loans are primarily made based on identified cash flows of the borrower with consideration given to underlying collateral and personal or other guarantees. Our policy sets forth guidelines for debt service coverage ratios, loan-to-value ("LTV") ratios and documentation standards. Specifically, we have established debt service coverage ratio limits that require a borrower's cash flow to be sufficient to cover principal and interest payments on all new and existing debt. The majority of our commercial loans are secured by the assets being financed or other business assets such as accounts receivable or inventory.

Commercial Real Estate Loans

Commercial real estate loans are primarily made based on identified cash flows of the borrower with consideration given to underlying real estate collateral and personal guarantees. We have adopted guidelines for debt service coverage ratios, LTV ratios and documentation standards for commercial real estate loans. Specifically, our policy establishes a maximum LTV specific to property type and minimum debt service coverage ratio limits that require a borrower's cash flow to be sufficient to cover principal and interest payments on all new and existing debt. Commercial real estate loans may be fixed or variable-rate loans with interest rates tied to indexes. Generally, we require appraisals for loans that are secured by real property.

5
Index
Consumer Loans

Our consumer loan portfolio includes personal installment loans, automobile financing, and overdraft lines of credit. The majority of our consumer loans are short-term and have fixed rates of interest that are priced based on current market interest rates and the financial strength of the borrower.

Investment Activities

The goals of our investment policy are to provide and maintain liquidity to meet deposit withdrawal and loan funding needs, to help mitigate interest rate and market risk, to diversify our assets, and to generate a reasonable rate of return on funds within the context of our interest rate and credit risk objectives. The Board reviews and approves our investment policy annually. Authority to make investments under the approved investment policy guidelines is delegated to our selected senior management. Investment activity is summarized and reported to the Board. We classify the majority of our securities as available-for-sale. The breakdown of investment portfolio is described in detail in the 2024 Annual Report to Shareholders for the year ended December 31, 2024.

Sources of Funds

General. Deposits, borrowings and loan repayments are the major sources of our funds for lending and other investment purposes. Scheduled loan repayments are a relatively stable source of funds, while deposit inflows and outflows and loan prepayments are significantly influenced by general interest rates and money market conditions.

Deposit Accounts. Deposits are attracted from within our market area by the sales efforts of our branch network, commercial loan officers, advertising and through our website. We offer a broad selection of deposit instruments, including noninterest-bearing demand deposits (such as checking accounts), interest-bearing demand accounts (such as NOW and money market accounts), savings accounts and term certificates of deposit. We also offer a variety of deposit accounts designed for businesses operating in our market area. Our business banking deposit products include a commercial checking account, sweep accounts, money market accounts and checking accounts specifically designed for businesses. We also offer remote deposit capture products for customers to meet their online banking needs.

Deposit account terms vary according to the minimum balance required, the time periods the funds must remain on deposit, and the interest rate, among other factors. In determining the terms of our deposit accounts, we consider the rates offered by our competition, our liquidity needs, profitability to us, and customer preferences and concerns. We generally review our deposit mix and pricing on a weekly basis. Our deposit pricing strategy has generally been to offer competitive rates and to periodically offer special rates in order to attract deposits of a specific type or term.

Supervision and Regulation
Banking is a highly regulated industry, with numerous federal and state laws and regulations governing the organization and operation of banks and their affiliates. As a savings and loan holding company, TrustCo and its non-bank subsidiaries are supervised and regulated by the Board of Governors of the Federal Reserve System ("Federal Reserve Board"). The OCC is the Bank's primary federal regulator and supervises and examines the Bank. Under the Home Owners'Loan Act of 1934 and OCC regulations, Trustco Bank must obtain prior OCC approval for acquisitions, and its business operations and activities are restricted. Because the FDIC provides deposit insurance to the Bank, the Bank also is subject to its supervision and regulation even though the FDIC is not the Bank's primary federal regulator.
It is anticipated that the Trump administration and the current U.S. Congress likely will not increase the regulatory burden on community banking organizations and may seek to reduce and streamline certain prudential and regulatory requirements applicable to community banking organizations at a federal level based on statements made by relevant congressional leaders and the acting leaders of certain banking agencies. At this time, however, it is not possible to predict with any certainty the actual impact the Trump administration may have on the banking industry or our operations.
6
Index
The following summary of laws and regulations applicable to the Company and those applicable to the Bank is not intended to be a complete description of those laws and regulations or their effects on the Company and the Bank. The summary is qualified in its entirety by reference to the particular statutory and regulatory provisions described. Changes in applicable law or regulation, and in their interpretation and application by regulatory agencies and other governmental authorities, cannot be predicted, but may have a material effect on our business, financial condition or results of operations.
Dividends
Most of TrustCo's revenues consist of cash dividends paid to TrustCo by the Bank, payment of which is subject to various regulatory limitations, including continued compliance with minimum regulatory capital requirements, and the receipt of regulatory approval (or non-objection) from the Bank's and the Company's regulators.
OCC regulations impose limitations upon all capital distributions by the Bank, including cash dividends. Under the regulations, an application to and the approval of the OCC is required prior to any capital distribution if the institution does not meet the criteria for "expedited treatment"of applications under OCC regulations (generally, examination ratings in the two top categories), the total capital distributions for the calendar year exceed net income for that year plus the amount of retained net income for the preceding two years, the institution would be undercapitalized following the distribution, or the distribution would otherwise be contrary to a statute, regulation, or agreement with the OCC. If an application is not required, the institution must still provide prior notice of the capital distribution to the OCC and the Federal Reserve Board if, like the Bank, the institution is a subsidiary of a savings and loan holding company. The OCC may not approve a dividend if the institution would be undercapitalized following the distribution, the proposed capital distribution raises safety and soundness concerns, or the capital distribution would violate a prohibition contained in any statute, regulation, or agreement between the bank and a regulator or a condition imposed in a previously approved application or notice.
As noted above, a savings institution, such as the Bank, that is a subsidiary of a savings and loan holding company and that proposes to make a capital distribution must also submit written notice to the Federal Reserve Board prior to such distribution, and Federal Reserve Board may object to the distribution based on safety and soundness or other concerns. The Federal Reserve Board may deny a dividend notice if following the dividend, the savings association will be less than adequately capitalized, the proposed dividend raises safety and soundness concerns, or the proposed dividend violates a prohibition contained in any statute, regulation, enforcement action, or agreement between the association or holding company and an appropriate federal banking agency, a condition imposed on the association or holding company in an application or notice approved by an appropriate federal banking agency, or any formal or informal enforcement action involving the association or holding company.
Compliance with regulatory standards regarding capital distributions could also limit the amount of dividends that TrustCo may pay to its shareholders.
See Note 14 to the consolidated financial statements contained in TrustCo's Annual Report to Shareholders for the year ended December 31, 2024 for information concerning the Bank's regulatory capital requirements.
Regulatory Capital Requirements and Prompt Corrective Action.
Regulatory Capital Rules. The Company and the Bank are subject to regulatory capital requirements contained in rules published by the Federal Reserve Board, OCC, and FDIC that establish a comprehensive capital framework for all U.S. banking organizations, including the Company and the Bank.
7
Index
The capital rules, among other things, provide a "Common Equity Tier 1"("CET1") capital measure, Tier 1 capital and total capital to risk-weighted assets ratios and a Tier 1 capital to average consolidated assets (or "leverage") ratio. CET1 capital is generally defined as common stock instruments that meet eligibility criteria in the final capital rule (principally, instruments representing the most subordinated claim upon liquidation, having no maturity date and being redeemable via discretionary purchases only with regulatory approval, not being subject to any expectations that the stock will be repurchased, redeemed, or cancelled, and not being secured by the banking organization or any related entity), retained earnings, accumulated other comprehensive income, and common equity Tier 1 minority interests, subject to certain limitations. Tier 1 capital for the Company and the Bank consists of CET1 capital plus "additional Tier 1 capital,"which generally includes certain noncumulative perpetual preferred stock and related surplus and minority interests in equity accounts of consolidated subsidiaries. Total capital includes Tier 1 capital and Tier 2 capital. Tier 2 capital is comprised of capital instruments and related surplus meeting specified requirements, and may include cumulative preferred stock and long-term perpetual preferred stock, mandatory convertible securities, intermediate preferred stock, and subordinated debt. Also included in Tier 2 capital is the allowance for loan and lease losses limited to a maximum of 1.25% of risk-weighted assets and, for institutions that have exercised an opt-out election regarding the treatment of accumulated other comprehensive income ("AOCI"), up to 45% of net unrealized gains on available-for-sale equity securities with readily determinable fair market values. Institutions that have not exercised the AOCI opt-out have AOCI incorporated into common equity Tier 1 capital (including unrealized gains and losses on available-for-sale-securities). The Company has made this opt-out election. Calculation of all types of regulatory capital is subject to deductions and adjustments specified in the regulations.
Under the capital rules, the minimum capital ratios are:

4.5% CET1 to risk-weighted assets;

6.0% Tier 1 capital to risk-weighted assets;

8.0% Total capital to risk-weighted assets; and

4.0% Tier 1 capital to average consolidated assets as reported on consolidated financial statements (the "leverage ratio").
At December 31, 2024, the Bank had a Tier 1 leverage ratio (Tier 1 capital to total average consolidated assets) of 10.62%, CET1 capital ratio (CET1 capital to risk-weighted assets) of a 18.54%, Tier 1 capital ratio (Tier 1 capital to risk-weighted assets) of 18.54%, and a total capital ratio (total capital to risk-weighted assets) of 19.80%. Also at December 31, 2024, the Company had a Tier 1 leverage ratio (Tier 1 capital to total average consolidated assets) of 11.05%, CET1 capital ratio (CET1 capital to risk-weighted assets) of 19.30%, a Tier 1 capital ratio (Tier 1 capital to risk-weighted assets) of 19.30% and a total capital ratio (total capital to risk-weighted assets) of 20.56%.
In order to avoid constraints on dividends, equity repurchases and certain compensation, the capital rules require the Company's and the Bank's capital to exceed the regulatory standards plus a capital conservation buffer. To meet the requirement, the organization must maintain an amount of CET1 capital that exceeds the buffer level of 2.5% above each of the minimum risk-weighted asset ratios, (i) CET1 to risk-weighted assets of more than 7.0%, (ii) Tier 1 capital to risk-weighted assets of more than 8.5%, and (iii) total capital (Tier 1 plus Tier 2) to risk-weighted assets of more than 10.5%.
The OCC has the ability to establish an individual minimum capital requirement for a particular institution, which would vary from the capital levels that would otherwise be required under the capital regulations, based on such factors as concentrations of credit risk, levels of interest rate risk, and the risks of non-traditional activities, as well as others. The OCC has not imposed any such requirement on the Bank.
The capital rules contain standards for the calculation of risk-weighted assets. The exposure amount for on-balance sheet assets is generally the carrying value of the exposure as determined under GAAP. A bank may assign a 50% risk weight to a first-lien residential mortgage exposure that:

is secured by property that is owner-occupied or rented,

is made in accordance with "prudent underwriting standards,"including loan-to-value ratios,

is not 90 days or more past due or in nonaccrual status, and

is not restructured or modified.
8
Index
Other first-lien residential exposures, as well as junior-lien exposures if the bank does not hold the first lien, are assigned a 100% risk weight.
If a banking organization has elected to opt out of the AOCI provisions discussed above, the exposure amount for available for sale or held-to-maturity debt securities is the carrying value (including accrued but unpaid interest and fees) of the exposure, less any net unrealized gains plus any unrealized losses. Exposures to debt directly and unconditionally guaranteed by the U.S. federal government and its agencies receive a 0% risk weight. Exposures conditionally guaranteed by the federal government, Federal Reserve Board, or a federal government agency would receive a 20% risk weight. Further, the capital rules assign a 20% risk weight to non-equity exposures to government-sponsored entities ("GSEs") and a 100% risk weight to preferred stock issued by a GSE. A GSE is defined as an entity established or chartered by the federal government to serve public purposes but whose debt obligations are not "explicitly guaranteed"by the full faith and credit of the federal government. Banking organizations must assign a 20% risk weight to general obligations of a public sector entity (for example, a state, local authority or other governmental subdivision below the sovereign level) that is organized under U.S. law and a 50% risk weight for a revenue obligation of such an entity.
In December 2017, the Basel Committee published standards that it described as the finalization of the Basel III post-crisis regulatory reforms. Among other things, these standards revise the Basel Committee's standardized approach for credit risk (including recalibrating risk weights and introducing new capital requirements for certain "unconditionally cancellable commitments," such as unused credit card and home equity lines of credit) and provide a new standardized approach for operational risk capital. Under the Basel framework, these standards generally became effective on January 1, 2023, with an aggregate output floor phasing in through January 1, 2028.
Prompt Corrective Action. Federal banking regulations also establish a "prompt corrective action"capital framework for the classification of insured depository institutions, such as Trustco Bank, into five categories: well capitalized, adequately capitalized, undercapitalized, significantly undercapitalized, and critically undercapitalized. Under the prompt corrective action rules currently in effect, an institution is deemed to be (a) "well-capitalized"if it has total risk-based capital of 10.0% or more, has a Tier 1 risk-based capital ratio of 8.0% or more, has a CET1 risk based capital ratio of 6.5% or more, and has leverage capital ratio of 5.0% or more and is not subject to any order or final capital directive to meet and maintain a specific capital level for any capital measure; (b) "adequately capitalized"if it has a total risk-based capital ratio of 8.0% or more, a Tier 1 risk-based capital ratio of 6.0% or more, a CET1 risk based capital ratio of 4.5% or more and has a leverage capital ratio of 4.0% or more (3.0% under certain circumstances) and does not meet the definition of well-capitalized; (c) "undercapitalized"if it has a total risk-based capital ratio that is less than 8.0%, a Tier 1 risk-based capital ratio that is less than 6.0%, a CET1 capital ratio less than 4.5% or a Tier 1 leverage capital ratio that is less than 4.0%; (d) "significantly undercapitalized"if it has a total risk-based capital ratio that is less than 6.0%, a Tier 1 risk-based capital ratio that is less than 4.0%, a CET1 capital ratio less than 3% or a Tier 1 leverage capital ratio that is less than 3.0%; and (e) "critically undercapitalized"if it has a ratio of tangible equity to total assets that is equal to or less than 2.0%. The federal banking agencies are required to take certain supervisory actions (and may take additional discretionary actions) with respect to an undercapitalized institution or its holding company. Such actions could have a direct material effect on an institution's or its holding company's financial condition and activities. In certain situations, a federal banking agency may reclassify a well-capitalized institution as adequately capitalized and may require an adequately capitalized or undercapitalized institution to comply with supervisory actions as if the institution were in the next lower category.
A depository institution is generally prohibited from making any capital distributions (including payment of a dividend) or paying any management fee to its parent holding company if the depository institution would thereafter be undercapitalized. Undercapitalized institutions also are subject to growth limitations and are required to submit a capital restoration plan to the regulatory agencies. The agencies may not accept such a plan without determining, among other things, that the plan is based on realistic assumptions and is likely to succeed in restoring the depository institution's capital. In addition, for a capital restoration plan to be acceptable, the depository institution's parent holding company must guarantee that the institution will comply with such capital restoration plan. The aggregate liability of the parent holding company is limited to the lesser of (i) an amount equal to 5.0% of the depository institution's total assets at the time it became undercapitalized and (ii) the amount which is necessary (or would have been necessary) to bring the institution into compliance with all capital standards applicable with respect to such institution as of the time it fails to comply with the plan. If a depository institution fails to submit an acceptable plan, it is treated as if it is "significantly undercapitalized."
9
Index
"Significantly undercapitalized"depository institutions may be subject to a number of requirements and restrictions, including orders to sell sufficient voting stock to become "adequately capitalized,"requirements to reduce total assets, and cessation of receipt of deposits from correspondent banks. "Critically undercapitalized"institutions are subject to the appointment of a receiver or conservator.
At December 31, 2024 and 2023, each of TrustCo and Trustco Bank met all capital adequacy requirements to which it was subject under the OCC and Federal Reserve Board regulations. As of December 31, 2024, the most recent notification from the OCC categorized the Bank as "well capitalized" under the regulatory framework for prompt corrective action.
Economic Growth, Regulatory Relief and Consumer Protection Act. In May 2018, the Economic Growth, Regulatory Relief and Consumer Protection Act (the "Regulatory Relief Act"), was enacted to modify or remove certain financial reform rules and regulations. The Regulatory Relief Act amends certain aspects of the regulatory framework for small depository institutions with assets of less than $10 billion and for large banks with assets of more than $50 billion. Many of these changes resulted in meaningful regulatory changes for community banks such as the Bank, and their holding companies.
The Regulatory Relief Act also expanded the definition of qualified mortgages that may be held by a financial institution and simplified the regulatory capital rules for financial institutions and their holding companies with total consolidated assets of less than $10 billion by instructing the federal banking regulators to establish a single "Community Bank Leverage Ratio" of 9 percent. Any qualifying depository institution or its holding company that exceeds the "community bank leverage ratio" will be considered to have met generally applicable leverage and risk-based regulatory capital requirements and any qualifying depository institution that exceeds the ratio will be considered to be "well capitalized" under the prompt corrective action rules. In addition, the Regulatory Relief Act included regulatory relief for community banks regarding regulatory examination cycles, call reports, the Volcker Rule (proprietary trading prohibitions), mortgage disclosures and risk weights for certain high-risk commercial real estate loans. The new rule was effective as of January 1, 2020. Although TrustCo would qualify to take advantage of the community bank leverage ratio framework, it has decided it would not opt-in to the framework.
Holding Company Activities
The activities of savings and loan holding companies are governed, and limited, by the Home Owners'Loan Act and the Federal Reserve Board's regulations. In general, TrustCo's activities are limited to those permissible for "multiple"savings and loan holding companies (that is, savings and loan holding companies owning more than one savings association subsidiary) as of March 5, 1987, activities permitted for bank holding companies as of November 12, 1999, and activities permissible for "financial holding companies"(which are described below). Activities permitted to multiple savings and loan holding companies include certain real estate investment activities, and other activities permitted to bank holding companies under the Bank Holding Company Act. Activities permissible for a financial holding company are those considered financial in nature (including securities and insurance activities) or those incidental or complementary to financial activities.
A savings and loan holding company is prohibited from, directly or indirectly, acquiring more than 5% of the voting stock of another financial institution or savings and loan holding company without the prior written approval of the Federal Reserve Board. In evaluating applications by holding companies to acquire savings institutions, the Federal Reserve Board considers the financial and managerial resources and future prospects of the company and institution involved, the effect of the acquisition on the risk to the deposit insurance fund, the convenience and needs of the community and competitive factors.
The financial impact of a holding company on its subsidiary institution is a matter that is evaluated by the Federal Reserve Board, and the Federal Reserve Board has authority to order cessation of activities or divestiture of subsidiaries deemed to pose a threat to the safety and soundness of the institution. The Federal Reserve's long-standing "source of strength"doctrine requires that bank or thrift holding companies serve as a source of financial strength for their depository institution subsidiaries. The phrase "source of financial strength"is defined as "the ability of a company that directly or indirectly owns or controls an insured depository institution to provide financial assistance to such insured depository institution in the event of the financial distress of the insured depository institution."The federal banking agencies are authorized to adopt regulations with respect to this requirement.
10
Index
Securities Regulation and Corporate Governance
The Company's common stock is registered with the SEC under Section 12(b) of the Exchange Act, and the Company is subject to restrictions, reporting requirements and review procedures under federal securities laws and regulations. The Company is also subject to the rules and reporting requirements of The Nasdaq Stock Market LLC, on which its common stock is traded.
The Dodd-Frank Wall Street Reform and Consumer Protection Act (the "Dodd-Frank Act") significantly changed the regulation of financial institutions, such as community banks, thrifts, and small bank and thrift holding companies, and the financial services industry. Among other things, the Dodd-Frank Act abolished the Office of Thrift Supervision and transferred its functions to the other federal banking agencies, relaxed rules regarding interstate branching, allowed financial institutions to pay interest on business checking accounts, and imposed new capital requirements on bank and thrift holding companies. The Dodd-Frank Act has affected our business in substantial ways, including by causing us to incur higher operating costs to comply with the Dodd-Frank Act. Certain provisions of the Dodd-Frank Act have yet to be fully implemented and may be impacted by future legislation, rulemaking or executive orders. Our management continues to monitor the ongoing implementation of the Dodd-Frank Act and as new regulations are issued, will assess their effect on our business, financial condition and results of operations.
The Sarbanes-Oxley Act of 2002 is intended to improve corporate responsibility, to provide for enhanced penalties for accounting and auditing improprieties at publicly traded companies and to protect investors by improving the accuracy and reliability of corporate disclosures pursuant to the securities laws. The Company has policies, procedures and systems designed to comply with these regulations, and it reviews and documents such policies, procedures and systems to ensure continued compliance with these regulations.
Although the Company has and will continue to incur additional expense in complying with the corporate governance provisions of federal law and the resulting regulations, management does not expect that such compliance will have a material impact on the Company's financial condition or results of operations.
Federal Savings Institution Regulation
Business Activities. Federal law and regulations govern the activities of federal savings banks such as the Bank. These laws and regulations delineate the nature and extent of the activities in which federal savings banks may engage. In particular, certain lending authority for federal savings banks, e.g., commercial, non-residential real property loans and consumer loans, is limited to a specified percentage of the institution's capital or assets.
Insurance of Deposit Accounts. Deposits of Trustco Bank are insured by the Deposit Insurance Fund ("DIF") of the FDIC, and the Bank is subject to deposit insurance assessments to maintain the DIF. The FDIC determines insurance premiums based on a number of factors, primarily the risk of loss that insured institutions pose to the DIF. Deposit insurance assessments are based on average consolidated total assets minus average tangible equity. Under the FDIC's risk-based assessment system, insured institutions with less than $10 billion in assets, such as the Bank, are assigned to one of three categories based on their composite examination ratings, with higher-rated, less risky institutions paying lower assessments. A range of initial base assessment rates applies to each category, adjusted downward based on unsecured debt issued by the institution to produce total base assessment rates. Total base assessment rates currently range from 2.5 to 18 basis points for banks in the least risky category to 13 to 32 basis points for banks in the most risky category, all subject to further adjustment upward if the institution holds more than a limited amount of unsecured debt issued by another FDIC-insured institution.
11
Index
The FDIC has the authority to raise or lower assessment rates, subject to limits, and to impose special additional assessments. The Dodd-Frank Act set the minimum reserve ratio to not less than 1.35% of estimated insured deposits or the comparable percentage of the FDIC's assessment base. The act also required the FDIC to take the steps necessary to attain the 1.35 percent ratio by September 30, 2020, subject to an offsetting requirement for certain institutions. In September 2020, the FDIC announced that the ratio declined to 1.30% due largely to consequences of the COVID-19 pandemic and adopted a plan to restore the fund to the 1.35% ratio (the "Restoration Plan") within eight years but did not change its assessment rate schedule. The Restoration Plan requires the FDIC to update its analysis and projections for the fund balance and reserve ratio at least semiannually and, if necessary, recommend any modifications, such as increasing assessment rates. In the semiannual update for the Restoration Plan in June 2022, the FDIC projected that the reserve ratio was at risk of not reaching the statutory minimum of 1.35 percent by September 30, 2028, the statutory deadline to restore the reserve ratio. Based on this update, the FDIC Board approved an amended Restoration Plan, and concurrently proposed an increase in initial base deposit insurance assessment rate schedules uniformly by 2 basis points, applicable to all insured depository institutions. In October 2022, the FDIC Board finalized the increase with an effective date of January 1, 2023, applicable to the first quarterly assessment period of 2023 (i.e., January 1 through March 31, 2023).

FDIC deposit insurance expense totaled $2.6 million in 2024, $2.9 million in 2023 and $1.8 million in 2022. FDIC deposit insurance expense includes deposit insurance assessments and, until 2019, Financing Corporation ("FICO") assessments related to outstanding bonds issued by FICO in the late 1980s to recapitalize the now defunct Federal Savings & Loan Insurance Corporation. The final FICO assessment was collected in 2019. Future changes in insurance premiums could have an adverse effect on the operating expenses and results of operations of Trustco Bank, and the Bank cannot predict what insurance assessment rates will be in the future.
On November 16, 2023, the FDIC approved a final rule to implement a special assessment on certain banking organizations with financial institution subsidiaries with more than $5 billion in assets, in order to recover the costs associated with protecting uninsured depositors following the closures of Silicon Valley Bank and Signature Bank in March 2023. Under the rule, the assessment base for the special assessment is equal to an insured depository institution's estimated uninsured deposits reported as of December 31, 2022, adjusted to exclude the first $5 billion of uninsured deposits. The total amount of the special assessment is to be paid in ten equal quarterly installments that began with the invoice for the first quarter of 2024 (received in June 2024) and ends with the invoice for the second quarter of 2026. Because the Bank's uninsured deposits at the measurement date were below $5 billion, the Company will not be subject to this special assessment.

Insurance of deposits may be terminated by the FDIC upon a finding that the institution has engaged in unsafe or unsound practices, is in an unsafe or unsound condition to continue operations or has violated any applicable law, regulation, rule, order or condition imposed by the FDIC or the OCC. The Bank does not know of any practice, condition or violation that might lead to termination of its deposit insurance.

Pause on Major Federal Reserve Board Rulemakings
The Federal Reserve Board's Vice Chair of Supervision, Michael Barr, stepped down from the position, effective February 28, 2025. The Federal Reserve Board stated that it will not issue any major rulemakings from the time of the announcement until a new vice chair for supervision is confirmed by the U.S. Senate.

Other Regulation
Assessments. The Bank is required to pay assessments to the OCC to fund the agency's operations. The general assessments, paid on a semi-annual basis, is computed upon the Bank's total assets, including consolidated subsidiaries, as reported in the Bank's latest quarterly financial report. The OCC's assessment schedule includes a surcharge for institutions that require increased supervisory resources. The assessments paid by the Bank for the year ended December 31, 2024 totaled approximately 657 thousand.
12
Index
Community Reinvestment Act. The Community Reinvestment Act ("CRA") requires each savings institution, as well as commercial banks and certain other lenders, to identify the communities served by the institution's offices and to identify the types of credit the institution is prepared to extend within those communities. The CRA also requires the OCC to assess an institution's performance in meeting the credit needs of its identified communities as part of its examination of the institution, and to take such assessments into consideration in reviewing applications with respect to branches, mergers and other business combinations, including acquisitions by savings and loan holding companies. An unsatisfactory CRA rating may be the basis for denying such an application and community groups have successfully protested applications on CRA grounds. In connection with its assessment of CRA performance, the OCC assigns CRA ratings of "outstanding," "satisfactory," "needs to improve" or "substantial noncompliance." The Bank was rated "satisfactory" in its last CRA examination. Institutions are evaluated based on (i) its record of helping to meet the credit needs of its assessment area through lending activities; (ii) its qualified investments; and (iii) the availability and effectiveness of the institution's system for delivering retail banking services. An institution that is found to be deficient in its performance in meeting its community's credit needs may be subject to enforcement actions, including cease and desist orders and civil money penalties. In December 2021, the OCC issued a final rule rescinding its June 2020 Community Reinvestment Act Rule and replacing it with the rules that were jointly adopted by the federal bank regulatory agencies. This action is intended to facilitate the ongoing interagency work to modernize the CRA regulatory framework and promote consistency for all insured depository institutions. The final rule became effective on January 1, 2022. On October 24, 2023, the federal banking agencies, including the OCC, issued a final rule designed to strengthen and modernize the regulations implementing the CRA. The changes are designed to encourage banks to expand access to credit, investment and banking services in low- and moderate-income communities, adapt to changes in the banking industry, including mobile and internet banking, provide greater clarity and consistency in the application of the CRA regulations and tailor CRA evaluations and data collection to bank size and type. Under the revised framework, banks with assets of at least $2 billion are considered large banks and will have their retail lending, retail services and products, community development financing, and community development services subject to periodic evaluation. Depending on a large bank's geographic concentrations of lending, the evaluation of retail lending may include assessment areas in which the bank extends loans but does not operate any deposit-taking facilities, in addition to assessment areas in which the bank has deposit-taking facilities. The rule became effective on April 24, 2024. Most provisions of the final rule are expected to apply beginning January 1, 2026, and the remaining provisions are expected to apply beginning January 1, 2027. In March of 2024, a preliminary injunction was granted that provides a day-for-day extension for each day the injunction remains in place. The court's decision granting a preliminary injunction is on appeal to the U.S. Court of Appeals for the Fifth Circuit. Uncertainty consequently remains around the actual implementation date, as well as around which elements of the final rule may be implemented. The Company continues to monitor the outcome of this rule.

Commercial Real Estate Lending Concentrations. The federal banking agencies have issued guidance on sound risk management practices for concentrations in commercial real estate lending. The particular focus is on exposure to commercial real estate loans that are dependent on the cash flow from the real estate held as collateral and that are likely to be sensitive to conditions in the commercial real estate market (as opposed to real estate collateral held as a secondary source of repayment or as an abundance of caution). The purpose of the guidance is not to limit a bank's commercial real estate lending but to guide banks in developing risk management practices and capital levels commensurate with the level and nature of real estate concentrations. The guidance directs the FDIC and other federal bank regulatory agencies to focus their supervisory resources on institutions that may have significant commercial real estate loan concentration risk. A bank that has experienced rapid growth in commercial real estate lending, has notable exposure to a specific type of commercial real estate loan, or is approaching or exceeding the following supervisory criteria may be identified for further supervisory analysis with respect to real estate concentration risk:


Total reported loans for construction, land development and other land represent 100% or more of the bank's capital; or

Total commercial real estate loans (as defined in the guidance) represent 300% or more of the bank's total capital or the outstanding balance of the bank's commercial real estate loan portfolio has increased 50% or more during the prior 36 months.

In addition, on June 29, 2023, in response to the increased risk relating to commercial real estate loans, the federal banking agencies issued a final Interagency Policy Statement on prudent Commercial Real Estate Loan Accommodations and Workouts. The new policy statement updates, expands on and supersedes existing guidance from 2009. Most notably, it (i) adds a new discussion of short-term loan accommodations, (ii) expands guidance regarding the evaluation and assessment of guarantors to also encompass loan sponsors, (iii) incorporates information about changes to accounting principles since 2009, and (iv) updates and expands the illustrative examples of commercial real estate loan workouts. Furthermore, on December 18, 2023, the FDIC issued an advisory on Managing Commercial Real Estate Concentrations in a Challenging Economic Environment, which conveys certain key risk management practices for FDIC-supervised institutions to consider in managing commercial real estate loan concentrations in the current economic environment.

13
Index
Although the Bank has a material amount of commercial real estate loans, it remains significantly below these thresholds. The guidance provides that the strength of an institution's lending and risk management practices with respect to such concentrations will be taken into account in supervisory guidance on evaluation of capital adequacy.

Qualified Thrift Lender Test. As a savings institution regulated by the OCC, the Bank must be a "qualified thrift lender"under either the Qualified Thrift Lender ("QTL") test under the Home Owners'Loan Act or the Internal Revenue Code's Domestic Building and Loan Association ("DBLA") test to avoid certain restrictions on its and the Company's operations and activities. A savings institution may use either test to qualify and may switch from one test to the other; however, the institution must meet the time requirements of the respective test, that is, nine out of the preceding 12 months for the QTL test and at the close of the taxable year for the DBLA test.
Under the QTL test, the savings institution must hold qualified thrift investments equal to at least 65% of the institution's portfolio assets. The savings institution's actual thrift investment percentage is the ratio of its qualified thrift investments divided by its portfolio assets. Portfolio assets are total assets minus goodwill and other intangible assets, office property, and liquid assets not exceeding 20% of total assets. An institution ceases to meet the QTL test when its actual thrift investment percentage falls below 65% of portfolio assets for four months within any 12-month period. To be a qualified thrift lender under the DBLA test, a savings association must meet a "business operations test"and a "60% of assets test."The business operations test requires the business of a DBLA to consist primarily of acquiring the savings of the public and investing in loans. An institution meets the public savings requirement when it meets one of two conditions: (i) the institution acquires its savings accounts in conformity with OCC rules and regulations and (ii) the general public holds more than 75% of its deposits, withdrawable shares, and other obligations. An institution meets the investing in loans requirement when more than 75% of its gross income consists of interest on loans and government obligations, and various other specified types of operating income that financial institutions ordinarily earn. The 60% of assets test requires that at least 60% of a DBLA's assets must consist of assets that thrifts normally hold, except for consumer loans that are not educational loans.
These are significant consequences for failing the QTL Test, including activities limitations and branching restrictions. In addition, an institution that fails the QTL test would be prohibited from paying dividends, except under circumstances that are permissible for a national bank, that are necessary to meet the obligations of the institution's holding company, and that are specifically approved by both the OCC and Federal Reserve Bank after a written request submitted by the thrift at least 30 days in advance of the proposed payment. Finally, failure of the QTL Test will subject the institution to enforcement action. If the Bank fails the qualified thrift lender test, within one year of such failure the Company must register as, and will become subject to, the activities restrictions applicable to bank holding companies, unless the Bank requalifies within the year. The activities authorized for a bank holding company are generally more limited than are the activities authorized for a savings and loan holding company. If the Bank fails the test a second time, the Company must immediately register as, and become subject to, the restrictions applicable to a bank holding company. The Bank is currently, and expects to remain, in compliance with the qualified thrift lender test.
Transactions with Affiliates and Other Related Parties. The Bank's transactions with "affiliates"(generally, any company that controls or is under common control with the Bank, including TrustCo) is limited by Sections 23A and 23B of the Federal Reserve Act and the Federal Reserve Board's implementing Regulation W. Under these laws, the aggregate amount of "covered transactions"between the Bank and any one affiliate is limited to 10% of the Bank's capital stock and surplus, and the aggregate amount of covered transactions by the Bank with all of its affiliates is limited to 20% of capital stock and surplus. Certain covered transactions (primarily credit-related transactions) are required to be secured by collateral in an amount and of a type described in Section 23A and Regulation W. Transactions by the Bank with its affiliates must be on terms and under circumstances that are at least as favorable to the Bank as those prevailing at the time for comparable transactions with non-affiliates. In addition, savings institutions are prohibited from lending to any affiliate that is engaged in activities that are not permissible for bank holding companies, and no savings institution may purchase the securities of any affiliate other than a subsidiary.
The definition of "covered transactions"as used in Section 23A includes credit exposure on derivatives transactions and securities lending and borrowing transactions, as well as the acceptance of affiliate-issued debt obligations as collateral for a loan or an extension of credit.
14
Index
The Bank also is restricted in its ability to extend credit to its directors, executive officers and 10% shareholders, as well as to entities controlled by such persons. Extensions of credit to those insiders must be made on terms that are substantially the same as, and follow credit underwriting procedures that are not less stringent than, those prevailing for comparable transactions with unaffiliated persons; may not involve more than the normal risk of repayment or present other unfavorable features and may not exceed certain limitations on the amount of credit extended to such persons, individually and in the aggregate. In addition, extensions of credit in excess of certain limits must be approved by the Bank's board of directors.
Certain non-credit transactions between an insured depository institution and its insiders, such as asset purchase and sales, are prohibited unless the transaction is on market terms and, if the transaction represents more than 10% of the capital stock and surplus of the institution, has been approved in advance by a majority of the disinterested members of the board of directors of the institution.
Safety and Soundness Regulations.The federal banking agencies (including the OCC) have adopted certain safety and soundness standards for all insured depository institutions. These standards relate to, among other things, internal controls, information systems and internal audit systems; loan documentation; credit underwriting; interest rate risk exposure; asset growth; asset quality; earnings and compensation, fees, and benefits, as well as other operational and managerial standards as the agency deems appropriate. Interagency Guidelines Establishing Standards for Safety and Soundness set forth the safety and soundness standards that the federal banking agencies use to identify and address problems at insured depository institutions before capital becomes impaired. If the appropriate federal banking agency (the OCC in the case of the Bank) determines that an institution fails to meet any standard prescribed by the guidelines, the agency may require the institution to submit to the agency an acceptable plan to achieve compliance with the standard. The Bank is subject to periodic examinations by the OCC regarding these and related matters. During these examinations, the examiners may require the Bank to increase its allowance for loan losses, change the classification of loans, and/or recognize additional charge-offs based on their judgments, which can impact our capital and earnings.
Enforcement. The Federal Reserve Board and the OCC have extensive enforcement authority over savings institutions and their holding companies, including the Bank and TrustCo. This includes enforcement authority with respect to the actions of the Bank's and TrustCo's directors, officers and other "institution-affiliated parties,"including attorneys and auditors. This enforcement authority also includes, among other things, the ability to assess civil money penalties, issue cease-and-desist or removal orders and initiate injunctive actions. In general, these enforcement actions may be initiated for violations of laws and regulations and unsafe or unsound practices. Public disclosure of final enforcement actions by the OCC and the Federal Reserve is required.
Institutions in Troubled Condition. Certain events, including entering into a formal written agreement with a bank's regulator or being informed by the regulator that the bank is in troubled condition, will require that a bank give prior notice to their primary regulator before adding or replacing any member of the board of directors, employing any person as a senior executive officer, or changing the responsibilities of any senior executive officer so that the person would assume a different senior executive position. Troubled condition banks are prohibited from making, or agreeing to make, certain "golden parachute payments"to institution-affiliated parties, subject to certain exceptions.
Consumer Laws and Regulations. In addition to the other laws and regulations discussed above, the Bank is subject to consumer laws and regulations designed to protect consumers in transactions with financial institutions. These laws and regulations include, among others, the Truth in Lending Act, the Truth in Savings Act, the Electronic Funds Transfer Act, the Expedited Funds Availability Act, the Equal Credit Opportunity Act, the Fair Housing Act, the Fair Credit Reporting Act and the Real Estate Settlement Procedures Act. These laws and regulations mandate certain disclosure requirements and regulate the manner in which financial institutions must deal with customers when taking deposits from, making loans to, or engaging in other types of transactions with, such customers.
The federal Consumer Financial Protection Bureau ("CFPB") has adopted rules related to mortgage loan origination and mortgage loan servicing. In particular, the CFPB has issued a rule implementing the ability-to-repay and qualified mortgage ("QM") provisions of the Truth in Lending Act, as amended by the Dodd-Frank Act (the "QM Rule"). The ability-to-repay provision requires creditors to make reasonable, good faith determinations that borrowers are able to repay their mortgages before extending the credit based on a number of factors and consideration of financial information about the borrower from reasonably reliable third-party documents. Under the Dodd-Frank Act and the QM Rule, loans meeting the definition of "qualified mortgage"are entitled to a presumption that the lender satisfied the ability-to-repay requirements. The presumption is a conclusive presumption/safe harbor for prime loans meeting the QM requirements, and a rebuttable presumption for higher-priced/subprime loans meeting the QM requirements.
15
Index
In February 2025, President Trump took significant actions affecting the CFPB. He dismissed Director Rohit Chopra and appointed Treasury Secretary Scott Bessent as Acting Director. Subsequently, the Office of Management and Budget Director, Russell Vought, was named Acting Director, during which time the CFPB's operations were halted, its headquarters closed, and its employees instructed to cease work. These moves have been met with legal challenges and public debate regarding the future of the agency.

Unclaimed Property Laws. Unclaimed property (escheatment) laws vary by state but generally require holders of customer property (including money) to turn over such property to the applicable state after holding the property for the statutorily prescribed period of time. These laws are not uniform and impose varying requirements on entities, like the Bank, which may hold funds that are required to be escheated to the applicable states.
Volcker Rule.The Dodd-Frank Act required the federal financial regulatory agencies to adopt rules that prohibit certain banks and their affiliates from engaging in proprietary trading and investing in certain covered funds. The statutory provision is commonly called the "Volcker Rule," and is not applicable to depository institutions and their holding companies whose total assets do not exceed $10 billion. As of December 31, 2024, the Company's total assets on a consolidated basis did not exceed $10 billion.
Office of Foreign Assets and Control Regulation. The U.S. Treasury Department's Office of Foreign Assets Control, or OFAC, administers and enforces economic and trade sanctions against targeted foreign countries and regimes, under authority of various laws, including designated foreign countries, nationals and others. OFAC publishes lists of specially designated targets and countries. The Company is responsible for, among other things, blocking accounts of, and transactions with, such targets and countries, prohibiting unlicensed trade and financial transactions with them and reporting blocked transactions after their occurrence. Failure to comply with these sanctions could have serious legal and reputational consequences, including causing applicable bank regulatory authorities not to approve merger or acquisition transactions when regulatory approval is required or to prohibit such transactions even if approval is not required.
Bank Secrecy Act/Anti-Money Laundering and Customer Identification. Anti-money laundering ("AML") and financial transparency laws and regulations, including the Bank Secrecy Act, impose strict standards for gathering and verifying customer information in order to ensure funds or other assets are not being placed in U.S. financial institutions to facilitate terrorist financing and laundering of funds. Applicable laws require financial institutions to have AML programs in place and require the federal banking agencies to consider a holding company's effectiveness in combating money laundering when ruling on certain merger or acquisition applications. In addition, failure to comply with these requirements could lead to significant fines and penalties or the imposition of corrective orders. In July 2024, the federal banking agencies, including the FRB and OCC, proposed amendments to update the requirements for supervised institutions to establish, implement and maintain effective, risk-based and reasonably designed AML and countering the financing of terrorism ("CFT") programs. The proposed amendments would require supervised institutions to identify, evaluate and document the regulated institution's money laundering, terrorist financing and other illicit finance activity risks, as well as consider, as appropriate, the U.S. Department of the Treasury's Financial Crimes Enforcement Network's ("FinCEN") published national AML/CFT priorities.

Guidance for Third-Party Relationships.On June 9, 2023, the OCC, Federal Reserve, and FDIC issued final interagency guidance on risk management of third-party relationships, including third-party lending relationships. The interagency guidance is based, in part, on the OCC's previously existing third-party risk management guidance from 2013 and seeks to, among other things, promote consistency in third-party risk management and provide sound risk management guidance for third-party relationships commensurate with a bank's risk profile and complexity as well as the criticality of the activity. The final interagency guidance replaces each agency's existing guidance on this topic (including the OCC's 2020 Frequently Asked Questions on Third-Party Relationships) and is directed to all banking organizations supervised by the OCC, Federal Reserve, and FDIC. Additionally, third party relationship risk management and banking as a service arrangements (including with respect to deposit products and services) have been topics of focus for federal bank regulators in 2024 and further rulemaking activity or guidance may be forthcoming.

16
Index
Consumer Privacy and Cybersecurity.Federal regulations generally require that the Company disclose its privacy policy and practices concerning its sharing of "non-public personal information," to individual customers at the time of establishing the customer relationship and annually thereafter. In addition, the Company is required to provide its customers with the ability to "opt-out" of having their personal information shared with unaffiliated third parties in certain circumstances.
State privacy laws currently in effect and laws taking effect in the near future impact how companies can process other categories of personal information. These laws require substantial disclosures to consumers about personal information collection, use and sharing practices, while also allowing consumers the right to access, delete, correct, or move their data.
In addition, federal banking agencies, through the Federal Financial Institutions Examination Council, have adopted guidelines to encourage financial institutions to address cybersecurity risks and identify, assess and mitigate these risks, both internally and at critical third-party service providers. For example, federal banking regulators have highlighted that financial institutions should establish several lines of defense and design their risk management processes to address the risk posed by compromised customer credentials. Further, financial institutions are expected to maintain sufficient business continuity planning processes designed to facilitate a recovery, resumption and maintenance of the institution's operations after a cyber-attack.
In November 2021, the federal banking agencies adopted new rules requiring banking organizations to notify their primary regulator within 36 hours of becoming aware of a "computer-security incident" that rises to the level of a "notification incident." A notification incident is a "computer-security incident" that has materially disrupted or degraded, or is reasonably likely to materially disrupt or degrade, the banking organization's ability to deliver services to a material portion of its customer base, jeopardize the viability of key operations of the banking organization, or impact the stability of the financial sector. Bank service providers are also required to notify any affected bank to or on behalf of which the service provider provides services "as soon as possible" after determining that it has experienced an incident that materially disrupts or degrades, or is reasonably likely to materially disrupt or degrade, covered services provided to such bank for four or more hours. Compliance with the new rules was required by May 1, 2022.

Further, on July 26, 2023, the SEC adopted final rules that require public companies to promptly disclose material cybersecurity incidents on Form 8-K and detailed information regarding their cybersecurity risk management and governance on an annual basis on Form 10-K. Companies are required to report on Form 8-K any cybersecurity incident they determine to be material within four business days of making that determination. The Form 8-K must describe the incident's material impact or reasonably likely material impact on the company, including its financial condition and results of operations. If any required information about the incident or its impact is not yet determined or is unavailable at the required time of the filing, the company must include a statement to this effect in the Form 8- K and file an amendment to the Form 8-K when that information becomes available. A company must make its materiality determination after it has discovered a cybersecurity incident "without unreasonable delay." In addition to incident reporting, the rules will require companies to describe their cybersecurity processes and governance.

Personal Data Financial Rights. On October 22, 2024, the CFPB issued a final rule to implement Section 1033 of the Dodd-Frank Act, which gives individuals the right to obtain data regarding consumer financial products and services they have obtained. The final rule requires certain entities, including TrustCo and Trustco Bank, to comply with an established framework to govern consumer access to electronic financial data. Compliance with the rule will be phased in over several years with TrustCo required to be in compliance by April 1, 2028. Following the issuance of this rule, two trade associations and a national bank headquartered in Kentucky filed a lawsuit challenging the rule in the United States District Court for the Eastern District of Kentucky. In this lawsuit, the plaintiffs alleged that the CFPB exceeded its statutory authority in adopting the rule. In February 2025, the court granted a joint motion to temporarily stay the litigation proceedings and tolled the compliance deadlines under Section 1033 of the Dodd-Frank Act by 30 days. TrustCo is monitoring developments in this case.

Identity Theft Protection. The Fair Credit Reporting Act's Red Flags Rule requires financial institutions with covered accounts (e.g., consumer bank accounts and loans) to develop, implement and administer an identity theft prevention program. This program must include reasonable policies and procedures to detect suspicious patterns or practices that indicate the possibility of identity theft, such as inconsistencies in personal information or changes in account activity.

17
Index
Federal Home Loan Bank of New York. The Bank is a member of Federal Home Loan Bank ("FHLB") of New York, which is one of 11 regional FHLBs that serve as reserve or central banks for their members. The FHLBs are funded primarily from proceeds derived from the sale of consolidated obligations of the FHLB system and makes loans or advances to members. The FHLBs also provide access to a line of credit and letters of credit in accordance with policies and procedures established by the Board of Directors of FHLB. The loans, lines of credit and letters of credit are subject to the oversight of the Federal Housing Finance Agency. At December 31, 2024, the Bank had no FHLB advances and an available borrowing capacity with the FHLB which approximates the balance of securities and/or loans pledged against such borrowings. The Bank is also required to purchase and maintain stock in the FHLB of New York at or above levels specified in the FHLB of New York capital plan. As of December 31, 2024 and 2023, the Bank owned $6.5 million and $6.2 million, respectively, in FHLB of New York stock, which was in compliance with its obligations.
Mergers and Acquisitions. The Bank Holding Company Act of 1956, the Bank Merger Act, the Change in Bank Control Act and other federal and state statutes regulate acquisitions of interests in commercial banks. The BHC Act requires the prior approval of the FRB for the direct or indirect acquisition by a bank holding company of more than 5.0% of the voting shares of a commercial bank or its parent holding company and for a person, other than a bank holding company, to acquire 25% or more of any class of voting securities of a bank or bank holding company. Under the Bank Merger Act, the prior approval of the appropriate bank regulatory agencies is required for a member bank to merge with another bank or purchase the assets or assume the deposits of another bank. In reviewing applications seeking approval of merger and acquisition transactions, the bank regulatory authorities will consider, among other things, the competitive effect and public benefits of the transactions, the capital position of the combined organization, the risks to the stability of the U.S. banking or financial system, the applicant's performance record under the CRA and fair housing laws and the effectiveness of the subject organizations in combating money laundering activities.
Late in the preceding presidential administration, the standards by which bank and financial institution acquisitions would be evaluated were undergoing review and change by the OCC, FDIC and DOJ, but not by the Federal Reserve. These reviews and changes were incorporated into non-binding guidance. The DOJ withdrew its 1995 Bank Merger Guidelines and issued the 2024 Banking Addendum to its 2023 Merger Guidelines. The DOJ clarified that it will assess competition considerations in connection with bank and BHC mergers using its 2023 Merger Guidelines, which is the general merger review framework the DOJ now uses to evaluate transactions in all segments of the economy, and the 2024 Banking Addendum. The 2024 Banking Addendum provides guidance on how the DOJ will assess competition in the context of bank and bank holding company mergers. An analysis under the 2023 Merger Guidelines and 2024 Banking Addendum may include consideration of theories of harm and relevant markets not considered under the 1995 Bank Merger Guidelines, which focused primarily on concentrations of deposits and branches. In March 2025, the FDIC proposed rescinding its 2024 Statement of Policy on Bank Merger Transactions and indicated that it will conduct a broader review of its bank merger process. Whether and how the guidance might be further changed or interpreted by the new presidential administration is uncertain.
Cannabis Banking. The Marijuana Regulation and Taxation Act was signed into law in New York on March 31, 2021, legalizing the possession and sale of recreational marijuana in New York State for adults aged 21 or older and the state has issued adult-use cannabis cultivation, processing and retail dispensary licenses. We have implemented a program to provide financial products and services to legal cannabis-related businesses and partner with other financial institutions who provide such services.
Offering financial products and services to the cannabis industry presents a unique set of regulatory risks due to the conflict between state and federal laws, as marijuana remains illegal at the federal level. In January 2018, the U.S. DOJ rescinded the "Cole Memo" and related memoranda which characterized the enforcement of the Controlled Substances Act against persons and entities complying with state regulatory systems permitting the use, manufacture and sale of medical marijuana as an inefficient use of their prosecutorial resources and discretion. The impact of the DOJ's rescission of the Cole Memo and related memoranda is unclear, but in the future may result in increased enforcement actions against the regulated cannabis industry generally. The former United States Attorney General previously indicated that the DOJ, under his leadership, would not pursue cases against parties who comply with the laws in states which have legalized and are effectively regulating marijuana. However, enforcement policies and practices may be more restrictive under the current presidential administration. In addition, federal prosecutors have significant discretion and there can be no assurance that the federal prosecutor for any district in which we operate will not choose to strictly enforce the federal laws governing cannabis. In the future, enforcement actions may be taken against cannabis-related businesses or financial services providers that are viewed as aiding and abetting such activities.
18
Index
Finally, FinCEN published guidelines in 2014 for financial institutions servicing state-legal cannabis businesses. These guidelines clarify how financial institutions can provide services to marijuana-related businesses "in a manner consistent with their obligations to know their customers and to report possible criminal activity." The Bank has and will continue to follow this and other FinCEN guidance in the areas of cannabis banking.
Compensation Practices. Our compensation practices are subject to oversight by the FRB and the OCC. Applicable regulatory guidance on incentive compensation seek to ensure that the incentive compensation practices of banking organizations do not encourage excessive risk-taking and undermine the safety and soundness of those organizations. The guidance provides that supervisory findings with respect to incentive compensation will be incorporated, as appropriate, into the organization's supervisory ratings. To be consistent with safety and soundness, incentive compensation arrangements at a banking organization should comply with the following principles:

Provide employees incentives that appropriately balance risk and reward;

Be compatible with effective controls and risk management; and

Be supported by strong corporate governance, including active and effective oversight by the organization's board of directors.
The Board maintains a Compensation Committee made up of independent directors which exercises full oversight over the Company's executive compensation program. The Compensation Committee annually reviews a comprehensive risk assessment which addresses all aspects of the program and the controls that exist to mitigate any associated risk. Detailed disclosure of our compensation practices is set forth in the annual Proxy Statement.
In addition, on October 2022, the SEC adopted a final rule implementing the incentive-based compensation recovery ("clawback") provisions of the Dodd-Frank Act. The final rule directs national securities exchanges and associations, including Nasdaq, to require listed companies to develop and implement clawback policies to recover erroneously awarded incentive-based compensation from current or former executive officers in the event of a required accounting restatement due to material noncompliance with any financial reporting requirement under the securities laws, and to disclose their clawback policies and any actions taken under these policies. On June 9, 2023, the SEC approved the Nasdaq proposed clawback listing standards, including the amendments that delay the effective date of the rules to October 2, 2023. The Board approved the adoption of an Executive Compensation Clawback Policy in October 2023 pursuant to the Nasdaq listing standards and SEC rules. A copy of the Company's clawback policy is included as an exhibit to this 2024 Form 10-K.

The U.S. financial regulators, including the FRB, the OCC, and the SEC, jointly proposed regulations in 2011 and again in 2016 to implement the incentive compensation requirements of Section 956 of the Dodd-Frank Act. These regulations have not been finalized.
Climate-Related Risk Management and Regulation. Climate change may be associated with rising sea levels as well as extreme weather conditions such as more intense hurricanes, thunderstorms, tornadoes, drought and snow or ice storms. Extreme weather conditions may increase our costs or cause damage to our facilities, and any damage resulting from extreme weather may not be fully insured. Many of our facilities are located near coastal areas or waterways where rising sea levels or flooding could disrupt our operations or adversely impact our facilities. Furthermore, periods of extended inclement weather or associated flooding may inhibit construction activity adversely affecting the use of some of our lending products. Any such events could have a material adverse effect on our costs or results of operations. These same issues also could impact the value of mortgage collateral and the security for residential and commercial loans.

19
Index
As a mortgage lender, Trustco Bank has identified credit, market, liquidity, and operational factors as climate-related risks. Adverse climate factors could impact the ability of loan customers to timely repay their loans. Adverse climate impacts also could adversely impact the stock and bond markets which could adversely affect TrustCo's non-interest income earning potential. Severe physical impacts from climate change, such as rising sea levels, could reduce the value of residential and/or commercial portfolio. These two factors, given sufficiently severe impacts, could affect liquidity. Additionally, severe weather and other climate events could impact hiring and retention of employees, facilities management, retail services, and technology infrastructure, thus creating operational risk.

Furthermore, climate change and the risks it may pose to financial institutions is an area of increased focus by the federal and state legislative bodies and regulators, including the federal banking agencies. In the future, new regulations or guidance may be issued, or other regulatory or supervisory actions may be taken, in this area by the federal banking agencies or other regulatory agencies, or new statutory requirements may be adopted. For example, the federal banking agencies have issued principles for climate-related financial risk management, which are designed to support the identification and management of climate-related financial risks at regulated institutions with more than $100 billion in total consolidated assets. As the Bank has less than $10 billion in total assets as of December 31, 2024, these principles do not apply to the Company. In March 2024, the SEC adopted final rules for "The Enhancement and Standardization of Climate-Related Disclosures for Investors," which would have required issuers to provide climate-related disclosures. In April 2024, the SEC stayed the effectiveness of the final rules pending the outcome of certain legal challenges. In addition, many states have adopted, or are considering, laws that address climate and social issues. If the states in which we do business adopt such laws, it may increase our compliance costs. Such laws may also include provisions that conflict with other state and federal regulations or limit our ability to conduct business in certain jurisdictions.

Other Governmental Initiatives. From time to time, various legislative and regulatory initiatives are introduced in Congress, as well as by regulatory authorities. These initiatives may include proposals to expand or contract the powers of bank holding companies and depository institutions, proposals to change the financial institution regulatory environment, or proposals that affect public companies generally. Such legislation could change banking laws and the operating environment of the Company in substantial, but unpredictable ways. The Company cannot predict whether any such legislation will be enacted, and, if enacted, the effect that it, or any implementing regulations would have on its financial condition or results of operations.

Human Capital Resources
Our Human Capital Strategic Plan guides us on our journey to foster a work environment that promotes the exchange of different ideas, philosophies, and perspectives.

Headcount

As of December 31, 2024, we had 791 employees (which collectively amount to 737 full-time equivalents), all based in the United States, with 551 employees (69.5%) at bank branches, 220 (28%) located in corporate offices and 20 (2.5%) in call centers.

Hiring & Promotion Practices

At TrustCo and Trustco Bank we are continuously educating our hiring managers about recruitment and selection processes, and we strive to build our workforce from within when possible. All employees are eligible to apply for open department and branch positions following their introductory period, and during 2024, 153 (roughly 19%) of our employees were promoted within the Bank. If the best candidate for an available position is not identified from within our existing talent pool, we will look externally for the best talent, and our recruitment strategy focuses on searching for candidates directly through our participation in job fairs and social media advertising, and through our professional networks and other associations that represent diverse groups. Additionally, we have an active recruitment incentive program which awards existing employees for referring new employees to the Bank, which in turn helps us diversify our workforce.

20
Index
Talent Development

We believe in investing for the future which includes the future of our workforce, and we actively encourage and support the growth of our employees throughout their educational and career development, ensuring employees are given opportunities to develop and refine their skills to be successful within the Bank's competitive environment. We aim to accomplish this through a multitude of training and development programs, which include opportunities to engage in interdepartmental experiential learning, voluntary training seminars, ongoing training through our Cornerstone platform (a learning management system), tuition reimbursement program, BSA-AML certificate program with SUNY Schenectady County Community College and certification reimbursement for certain levels of employment. The Company conducts a comprehensive new employee orientation for all new hires. All employees are required to complete a minimum number of hours of Compliance, BSA/Anti-Money Laundering, Enterprise Risk, Information Security/Cyber Security and technical training annually via the Cornerstone Platform. Employees are also periodically assigned Professional Skills training via Cornerstone. Members of the Board of Directors receive regular training on an array of timely and relevant regulatory and governance topics. Currently, we have 40 (5.0%) employees who hold professional certificates and/or licenses. Additionally, our employees participated in over 25,000 hours of training, which included a recently expanded and enhanced Leadership Program.

Employee Feedback

Through our training and mentoring programs, we actively encourage employee feedback. Following each training session, employees complete evaluations designed to provide constructive feedback on their trainer's knowledge, the overall training structure, and the employee's confidence in their ability to be successful in their new role. We are also gathering data on an ongoing basis which focuses on the tenure of current staff. We've consistently maintained or improved our average tenure over the past four years, with an average tenure of approximately 5 years currently. Furthermore, the Human Resources Department conducts stay and exit interviews, which capture feedback from high turnover positions. These interviews are used to improve processes and procedures and inform future policy.

Non-discrimination

We recognize that everyone deserves the protection of longstanding federal civil-rights laws that protect individuals from discrimination based on race, color, religion, sex, or national origin and our training, recruiting and recognition practices support and advance these goals.

Employee Compensation and Benefits

Our human capital strategy objectives include identifying, recruiting, retaining, incentivizing and integrating our existing and future employees. We strive to attract and retain the most talented employees by offering compensation and benefit structures that support their health, financial and emotional well-being, which includes competitive base salaries, annual bonuses, generous paid time off balances and Holiday Pay, an Employee Stock Purchase Club Program, life insurance, a 401(k) plan, the Trustco Bank Scholarship Program, a Tuition Reimbursement Program, an Employee Assistance Program for mental and emotional support and various Company-organized wellness competitions.

Employee Recruitment and Retention

Payment of Equity Awards to More Employees: Since 2019, TrustCo has made equity awards deeper into the corporate organization to recognize and provide additional incentive compensation to individuals who consistently made an exceptional contribution to the bank by originating more mortgage loans and greater deposits. That practice has since been expanded to include Assistant Vice Presidents and other departmental team members who play key roles in the day-to-day activities that are essential to the bank's overall success. These two actions have been highly successful. In a time when employee attrition is prevalent and presents significant challenges for companies throughout the country, Trustco Bank has retained 85% of the employees receiving officer equity awards.

Foreign Operations
Neither TrustCo nor the Bank engage in any operations in foreign countries or have outstanding loans to foreign debtors.
21
Index
Disclosure Pursuant to Subpart 1400 of Regulation S-K
The financial disclosures related to the Company as required under Subpart 1400 of Regulation S-K are incorporated herein by reference from TrustCo's Annual Report to Shareholders for the year ended December 31, 2024 (the "Annual Report to Shareholders"), which is attached as Exhibit 13 hereto and incorporated herein by reference. See the cross-references below to locate such disclosures in the Annual Report to Shareholders.

Disclosure

Page Number in Annual
Report to Shareholders





I.
Distribution of assets, liabilities, and shareholders' equity; interest rates and interest differential




A.
Average balance sheets

20


B.
Interest income/expense and resulting yield or rate on average interest-earning assets and interest-bearing liabilities

20


C.
Rate/volume variances

22

II.
Investments in debt securities




A.
Maturity schedule and weighted average yield

17

III.
Loan Portfolio




A.
Maturity schedule

14

IV.
Allowance for Credit Losses




A.
Credit ratios - Factors driving material changes in credit ratios or related components

24,25,26


B.
Allocation of the allowance for credit losses

27

V.
Deposits




A.
Average balances and rates

20


B.
Uninsured and time deposits over $250,000

19

This information should not be construed to imply any conclusion on the part of the management of TrustCo that the results, causes, or trends indicated therein will continue in the future. The nature and effects of governmental monetary policy, supervision and regulation, future legislation, inflation and other economic conditions and many other factors which affect interest rates, investments, loans, deposits, and other aspects of TrustCo's operations are extremely complex and could make historical operations, earnings, assets, and liabilities not indicative of what may occur in the future.
Availability of Reports
TrustCo's annual reports on Form 10-K, quarterly reports on Form 10-Q, current reports on Form 8-K, and all amendments to those reports can be obtained free of charge from its website, www.trustcobank.comunder the "Investor Relations"tab. These reports are available on the website as soon as reasonably practicable after they are electronically filed with or furnished to the SEC. These reports are also available on the SEC's website at http://www.sec.gov. Various other documents related to corporate operations, including the Company's Corporate Governance Guidelines, the charters of its principal Board committees, and the Company's Code of Conduct are available on the website. The information found on the Company's website is not incorporated by reference in this or any other report the Company files or furnishes to the SEC.
Item 1A.
Risk Factors
The following are general risk factors affecting the Company. Additional risks and uncertainties not currently known to us or that we currently deem to be immaterial also may materially and adversely affect our business operations. Any of these risks could materially and adversely affect our business, financial condition or results of operations. In such cases, you may lose all or part of your investment.
22
Index
Risks Related to Our Lending Activities
Changes in interest rates may significantly impact our financial condition and results of operations
Like other financial institutions, we are subject to interest rate risk. Our primary source of income is net interest income, which is the difference between interest earned on loans and investments, and interest paid on deposits and borrowings. The level of net interest income is primarily a function of the average balance of our interest-earning assets, the average balance of our interest-bearing liabilities, and the spread between the yield on such assets and the cost of such liabilities. These factors are influenced by both the pricing and mix of our interest-earning assets and our interest-bearing liabilities which, in turn, are impacted by such external factors as the local economy, competition for loans and deposits, the monetary policy of the Federal Open Market Committee of the FRB (the "FOMC"), and market interest rates.

Over any specific period of time, our interest-earning assets may be more sensitive to changes in market interest rates than our interest-bearing liabilities, or vice-versa. In addition, the individual market interest rates underlying our loan and deposit products may not change to the same degree over a given time period. In any event, if market interest rates should move contrary to our position, earnings may be negatively affected. After the benchmark federal funds interest rate reached a peak range between 5.25 percent and 5.50 percent in 2023 into 2024, the FOMC reduced the federal funds rate by 50 basis points in September 2024 and by an additional 25 basis points in November 2024, to a range of 4.50 percent to 4.75 percent. While the FOMC has initiated a rate easing cycle, the range of potential rate paths over the coming year is wide and will ultimately be driven by the path of inflation, labor market performance and economic growth.

There can be no assurances as to any future FOMC conduct. If the FOMC increases the targeted federal funds rates, overall interest rates likely will rise, which will positively impact our interest income but may further negatively impact the entire national economy, including the housing industry in the markets we serve, by reducing refinancing activity and new home purchases. In addition, deflationary pressures, while possibly lowering our operational costs, could have a significant negative effect on our borrowers and the values of collateral securing loans, which could negatively affect our financial performance. A significant portion of our loans have fixed interest rates (or, if adjustable, are initially fixed for periods of five to 10 years) and longer terms than our deposits and borrowings. Our net interest income could be adversely affected if the rates we pay on deposits and borrowings increase more rapidly than the rates we earn on loans.

We also are subject to reinvestment risk associated with changes in interest rates. Changes in interest rates may affect the average life of loans and mortgage-related securities. Increases in interest rates may decrease loan demand and/or may make it more difficult for borrowers to repay adjustable rate loans. Decreases in interest rates often result in increased prepayments of loans and mortgage-related securities, as borrowers refinance their loans to reduce borrowing costs. Under these circumstances, we are subject to reinvestment risk to the extent that we are unable to reinvest the cash received from such prepayments in loans or other investments that have interest rates that are comparable to the interest rates on existing loans and securities. Conversely, increases in interest rates often result in slowed prepayments of loans and mortgage-related securities, reducing cash flows and reinvestment opportunities.
Changes in interest rates also affect the value of the Bank's interest-earning assets, and in particular the Bank's securities portfolio. Generally, the value of fixed-rate securities fluctuates inversely with changes in interest rates. Unrealized gains and losses on securities available for sale are reported as a separate component of equity, net of tax. Decreases in the fair value of securities available for sale resulting from increases in interest rates could have an adverse effect on shareholders'equity.

External economic factors, such as changes in monetary policy and inflation and deflation, may have an adverse effect on our business, financial condition and results of operations.

Inflation rose sharply at the end of 2021 and remained elevated throughout 2022 at levels not seen for over 40 years. Inflationary pressures dissipated over the course of 2023 and 2024, with the annual inflation rate in the United States decreasing to 2.9% during December 2024 from its high of 9.1% in June 2022, as reported by the U.S. Bureau of Labor Statistics. Virtually all our assets and liabilities are monetary in nature. As a result, interest rates tend to have a more significant impact on our performance than general levels of inflation or deflation. Interest rates do not necessarily move in the same direction or by the same magnitude as the prices of goods and services. Nevertheless, small to medium-sized businesses may be impacted more during periods of high inflation as they are not able to leverage economics of scale to mitigate cost pressures compared to larger businesses. Consequently, the ability of our business customers to repay their loans has deteriorated and may continue to deteriorate, and in some cases this deterioration has occurred and may in the future occur quickly, which can adversely impact our results of operations and financial condition. Furthermore, a prolonged period of inflation has caused and may continue to cause wages and other costs to the Company to increase, which could adversely affect our results of operations and financial condition.

23
Index
We are exposed to credit risk in our lending activities.
There are inherent risks associated with our lending and trading activities. Loans to individuals and business entities, our single largest asset group, depend for repayment on the willingness and ability of borrowers to perform as contracted. A material adverse change in the ability of a significant portion of our borrowers to meet their obligation to us, due to changes in economic conditions, interest rates, natural disaster, acts of war, or other causes over which we have no control, could adversely impact the ability of borrowers to repay outstanding loans or the value of the collateral securing these loans, and could have a material adverse impact on our earnings and financial condition.
Weakness in the residential real estate markets could adversely affect our performance.
As of December 31, 2024, consumer residential real estate loans represented approximately 94.1% of our total loan portfolio. A general decline in home values would adversely affect the value of collateral securing the residential real estate that we hold, as well as the volume of loan originations and the amount we realize on the sale of real estate loans. Additionally, if insurance obtained by our borrowers is insufficient to cover any losses sustained to the collateral, the decreases in the value of collateral securing our loans as a result of natural disasters or other related events could adversely impact our financial condition and results of operations. If insurance coverage is unavailable to our borrowers due to the reluctance of insurance companies to renew policies covering the collateral or due to other factors, the resulting increase in cost of home ownership could affect the ability of borrowers to repay loans. These factors could result in higher delinquencies and greater charge-offs in future periods, which could materially adversely affect our business, financial condition or results of operations.
Our commercial loan portfolio is increasing and the inherently higher risk of loss may lead to additional provisions for credit losses or charge-offs, which would negatively impact earnings and capital.
Commercial loans generally expose a lender to greater risk of non-payment and loss than one- to four-family residential mortgage loans because repayment of the loans often depends on the successful operation of the business and the income stream of the borrowers. Such loans typically involve larger loan balances to single borrowers or groups of related borrowers compared to one- to four-family residential mortgage loans. Also, some of our commercial borrowers have more than one loan outstanding with us. Consequently, an adverse development with respect to one loan or one credit relationship can expose us to a significantly greater risk of loss compared to an adverse development with respect to a one- to four-family residential mortgage loan. Commercial business loans expose us to additional risk since they typically are dependent on the borrower's ability to make repayments from the cash flows of the business and are secured by non-real estate collateral that may depreciate over time. Further, our commercial business loans may be secured by collateral other than real estate, such as inventory and accounts receivable, the value of which may be more difficult to appraise, control or collect and may be more susceptible to fluctuation in value at the time of default. In addition, if we foreclose on these loans, our holding period for the collateral may be longer than for a single or multi-family residential property if there are fewer potential purchasers of the collateral.
Banking regulatory authorities may require banks with higher levels of investor real estate loans to implement enhanced risk management practices - including stricter underwriting, additional internal controls and risk management policies, more detailed reporting, and portfolio stress testing - as well as potential higher allowances for credit losses and capital levels as a result of investor real estate lending growth and exposure. Our failure to adequately implement enhanced risk management policies, procedures and controls could adversely affect our ability to manage the investor real estate segment of our loan portfolio and could result in an increased rate of delinquencies in, and increased losses from, our loan portfolio, which could have a material adverse effect on our business, financial condition and results of operations.
24
Index
Furthermore, a downturn in the real estate market in our primary market areas could result in an increase in the number of borrowers who default on their loans and a reduction in the value of the collateral securing their loans, which in turn could have an adverse effect on our profitability and asset quality. If we are required to liquidate the collateral securing a loan to satisfy the debt during a period of reduced real estate values, our earnings and shareholders' equity could be adversely affected. Unexpected decreases in investor real estate prices coupled with slow economic growth and elevated levels of unemployment could drive losses beyond those which are provided for in our allowance for loan losses. We also may incur losses on investor real estate loans due to declines in occupancy rates and rental rates, which may decrease property values and may decrease the likelihood that a borrower may find permanent financing alternatives. Any of these events could increase our costs, require management's time and attention, and materially and adversely affect our business, financial condition and results of operations.
Additionally, if insurance obtained by our borrowers is insufficient to cover any losses sustained to the collateral, the decreases in the value of collateral securing our loans as a result of natural disasters or other related events could adversely impact our financial condition and results of operations. If insurance coverage is unavailable to our borrowers due to the reluctance of insurance companies to renew policies covering the collateral or due to other factors, the resulting increase in cost of investor real estate ownership could affect the ability of borrowers to repay loans.
The combination of these factors could result in deterioration in the fundamentals underlying the commercial real estate market and the deterioration in value of some of our loans, as well as the ability of our borrowers to repay the amounts due under their loans. As a result, our business, results of operations or financial condition may also be adversely affected. Specifically, the office property segment, which represents 9.6% percent of our total loan portfolio, is undergoing a structural shift given the rise of a remote work environment resulting in heightened vacancies and potentially reduced leasing needs. It is anticipated that this heightened risk environment for the office segment may take several years to resolve.
If our allowance for credit losses on loans ("ACLL") is not sufficient to cover expected loan losses, our earnings could decrease.
Our borrowers may not repay their loans according to the terms of the loans, and, as a result of potential declines in home prices, the collateral securing the payment of these loans may be insufficient to pay any remaining loan balance. We may experience significant loan losses, which could have a material adverse effect on our operating results. TrustCo adopted ASU No. 2016-13, Financial Instruments - Credit Losses (Topic 326): Measurement of Credit Losses on Financial Instruments("CECL") effective January 1, 2022. This standard requires financial institutions to determine periodic estimates of lifetime expected credit losses on financial instruments and other commitments to extend credit. When determining the amount of the ACLL, we make various assumptions and judgments about the collectability of our loan portfolio, including the creditworthiness of our borrowers and the value of the real estate and other assets serving as collateral for the repayment of many of our loans, as well as about the current and expected future economic environment. In deciding on the adequacy of the allowance for credit losses, management reviews past due information, historical charge-off and recovery data, nonperforming loan activity and reasonable and supportable forecasts. Also, there are a number of other factors that are taken into consideration, including: the magnitude, nature and trends of recent loan charge-offs and recoveries, the growth in the loan portfolio and the implication that it has in relation to the economic climate in the Bank's market territories, and the economic environment in the Upstate New York territory (the Company's largest geographical area) primarily over the last several years, as well as in the Company's other market areas. A significant portion of the ACLL is determined using qualitative factors. The determination of qualitative factors involves subjective judgement and subjective measurement. We cannot predict loan losses with certainty that charge-offs in future periods will not exceed our estimate of expected losses as determined through our ACLL. If our assumptions and analysis prove to be incorrect, including with respect to the economic environment, our ACLL may not be sufficient to cover expected losses in our loan portfolio, resulting in additions to our ACLL which is maintained through provisions for credit losses. In addition, regulatory agencies, as an integral part of their examination process, may require additions to the allowance based on their judgment about information available to them at the time of their examination. Material additions to our ACLL would materially decrease our net income.
25
Index
We may not be able to meet the cash flow requirements of our depositors or borrowers or meet our operating cash needs to fund corporate expansion and other activities.

Liquidity is the ability to meet cash flow needs on a timely basis at a reasonable cost. The liquidity of Trustco Bank is used to make loans and to repay deposit liabilities as they become due or are demanded by customers. Liquidity policies and limits have been established by our Board, and our management monitors the overall liquidity position of Trustco Bank to ensure that various alternative strategies exist to cover unanticipated events that could affect liquidity. Trustco Bank is also a member of the Federal Home Loan Bank which provides funding to members through advances and other extensions of credit that are typically collateralized with securities or mortgage-related assets. Our securities portfolio can be used as a secondary source of liquidity, and additional liquidity could be obtained from securities sold under repurchase agreements, non-core deposits, and debt or equity securities issuances in public or private transactions. If we were unable to access any of these funding sources when needed, we might not be able to meet the needs of our customers, which could adversely affect our financial condition, our results of operations, cash flows and our level of regulatory capital.

We are subject to claims and litigation pertaining to fiduciary responsibility and lender liability.

Some of the services we provide, such as trust and investment services, require us to act as fiduciaries for our customers and others. In addition, loan workout and other activities may expose us or Trustco Bank to legal actions, including lender liability or environmental claims. From time to time, third parties make claims and take legal action against us pertaining to the performance of our fiduciary responsibilities or loan-related activities. If these claims and legal actions are not resolved in a manner favorable to us, we may be exposed to significant financial liability and/or our reputation could be damaged. Either of these results may adversely impact demand for our products and services or otherwise have a harmful effect on our business and, in turn, on our financial condition, results of operations and prospects.

We have implemented a program to provide financial products and services to customers that do business in the cannabis industry and the strict enforcement of federal laws and regulations regarding cannabis could result in our inability to continue to provide financial products and services to these customers. We could have legal action taken against us by the federal government and exposure to additional liabilities and regulatory compliance costs.

Offering financial products and services to the cannabis industry presents a unique set of regulatory risks due to the conflict between state and federal laws. While the possession and sale of recreational marijuana is legal for adults aged 21 and older in New York State, cannabis remains classified as a Schedule I controlled substance under the federal Controlled Substances Act. Enforcement policies and practices may be highly variable between political administrations. In addition, federal prosecutors have significant discretion and there can be no assurance that the federal prosecutor for any district in which we or our customers operate will not choose to strictly enforce the federal laws governing cannabis.

Any enforcement action against a cannabis-related business customer of ours could affect our results of operation and financial condition. Additionally, as the possession and use of cannabis remains illegal under the Controlled Substances Act, we may be deemed to be aiding and abetting illegal activities through the services that we provide to such customers and could have legal action taken against us by the federal government, including imprisonment and fines. FinCEN published guidelines in 2014 for financial institutions servicing state-legal cannabis businesses. These guidelines clarify how financial institutions can provide services to marijuana-related businesses in a "manner consistent with their obligations to know their customers and to report possible criminal activity." The Bank has and will continue to follow this and other FinCEN guidance in the areas of cannabis banking. However, there can be no assurance that compliance with FinCEN's guidelines will protect us from federal prosecution or other regulatory sanctions. Any change in position or potential action taken against us could result in significant financial damage to us and our stockholders.

Additionally, while we believe our Bank Secrecy Act/Anti-Money Laundering ("BSA/AML") policies and practices for our cannabis banking program are sufficient, the recreational cannabis business is considered high-risk, and our BSA/AML program will be subject to increased regulatory scrutiny. Any real or perceived shortcomings in our BSA/AML program may result in regulatory action against us and may prevent us from undertaking mergers and acquisitions or other expansion activities.

26
Index
Risks Related to Our Operations

We are dependent upon the services of our management team.
We are dependent upon the ability and experience of a number of our key management personnel who have substantial experience with our operations, the financial services industry and the markets in which we offer our services. It is possible that the loss of the services of one or more of our senior executives or key managers would have an adverse effect on our operations. Our success also depends on our ability to continue to attract, manage and retain other qualified middle management personnel as we grow. We cannot assure you that we will continue to attract or retain such personnel.
Our disclosure controls and procedures may not prevent or detect all errors or acts of fraud.
Our disclosure controls and procedures are designed to reasonably assure that information required to be disclosed by TrustCo in reports we file or submit under the Exchange Act is accumulated and communicated to management, and recorded, processed, summarized, and reported within the time periods specified in the SEC's rules and forms. We believe that any disclosure controls and procedures or internal controls and procedures, no matter how well conceived and operated, can provide only reasonable, not absolute, assurance that the objectives of the control system are met.
These inherent limitations include the realities that judgments in decision-making can be faulty and that breakdowns can occur because of simple error or mistakes. Additionally, controls can be circumvented by the individual acts of some persons, by collusion of two or more people, or by an unauthorized override of the controls. Accordingly, because of the inherent limitations in our control system, misstatements due to error or fraud may occur and not be detected.
If the business continuity and disaster recovery plans that we have in place are not adequate to continue our operations in the event of a disaster, the business disruption can adversely impact our operations.
External events, including terrorist or military actions, or an outbreak of disease, and resulting political and social turmoil could cause unforeseen damage to our physical facilities or could cause delays or disruptions to operational functions, including information processing and financial market settlement functions. Additionally, our customers, vendors and counterparties could suffer from such events. Should these events affect us, or our customers, or vendors or counterparties with which we conduct business, our results of operations could be adversely affected.
The Company's risk management framework may not be effective in mitigating risk and loss.
The Company maintains an enterprise risk management program that is designed to identify, quantify, monitor, report, and control the risks that it faces. These risks include interest rate, credit, liquidity, operations, reputation, compliance, and litigation. While the Company assesses and improves this program on an ongoing basis, there can be no assurance that its approach and framework for risk management and related controls will effectively mitigate all risk and limit losses in its business. If conditions or circumstances arise that expose flaws or gaps in the Company's risk management program, or if its controls break down, the performance and value of its business could be adversely affected.

New lines of business or new products and services may subject us to additional risks.
From time to time, we may develop and grow new lines of business or offer new products and services within our existing lines of business. There are substantial risks and uncertainties associated with these efforts, particularly in instances where the markets are not fully developed. In developing and marketing new lines of business and/or new products and services, we may invest significant time and resources. Initial timetables for the introduction and development of new lines of business and/or new products or services may not be achieved and price and profitability targets may not prove feasible. External factors, such as compliance with regulations, competitive alternatives, and shifting market preferences, may also impact the successful implementation of a new line of business or a new product or service. Furthermore, any new line of business and/or new product or service could have a significant impact on the effectiveness of our system of internal controls. Failure to successfully manage these risks in the development and implementation of new lines of business or new products or services could have a material adverse effect on our business, results of operations and financial condition. All service offerings, including current offerings and those which may be provided in the future, may become more risky due to changes in economic, competitive and market conditions beyond our control.

27
Index
We are exposed to climate risk.

Climate change may be associated with rising sea levels as well as extreme weather conditions such as more intense hurricanes, thunderstorms, tornadoes, drought and snow or ice storms. Extreme weather conditions may increase our costs or cause damage to our facilities, and any damage resulting from extreme weather may not be fully insured. Many of our facilities are located near coastal areas or waterways where rising sea levels or flooding could disrupt our operations or adversely impact our facilities. Furthermore, periods of extended inclement weather or associated flooding may inhibit construction activity adversely affecting the use of some of our lending products. Any such events could have a material adverse effect on our costs or results of operations. These same issues also could impact the value of mortgage collateral and the security for residential and commercial loans.

As a mortgage lender, Trustco Bank has identified credit, market, liquidity, and operational factors as climate-related risks. Adverse climate factors could impact the ability of loan customers to timely repay their loans. Adverse climate impacts also could adversely impact the stock and bond markets which could adversely affect TrustCo's non-interest income earning potential. Severe physical impacts from climate change, such as rising sea levels, could reduce the value of residential and/or commercial portfolio. These two factors, given sufficiently severe impacts, could affect liquidity.

Additionally, severe weather and other climate events could impact hiring and retention of employees, facilities management, retail services, and technology infrastructure, thus creating operational risk.

Societal responses to climate change could adversely affect our business and performance, including indirectly through impacts on our customers.

Concerns over the long-term impacts of climate change have led and will continue to lead to governmental efforts around the world to mitigate those impacts. Consumers and businesses also may change their behavior on their own as a result of these concerns. We and our customers will need to respond to new laws and regulations as well as consumer and business preferences resulting from climate change concerns. We and our customers may face cost increases, asset value reductions, operating process changes, and the like. The impact on our customers will likely vary depending on their specific attributes, including reliance on or role in carbon intensive activities. Among the impacts to us could be a drop in demand for our products and services, particularly in certain sectors. In addition, we could face reductions in creditworthiness on the part of some customers or in the value of assets securing loans. Our efforts to take these risks into account in making lending and other decisions, including increasing our business with climate-friendly companies, may not be effective in protecting us from the negative impact of new laws and regulations or changes in consumer or business behavior.

Environmental, social and governance ("ESG") and diversity, equity and inclusion ("DEI") risks could adversely affect our reputation and shareholder, employee, client and third party relationships and may negatively affect our stock price.

Our business faces increasing public investor, activist, legislative and regulatory scrutiny related to ESG, anti-ESG, DEI and anti-DEI activities and developments. We risk damage to our brand and reputation if we fail to act responsibly in a number of areas, such as diversity, equity, inclusion, environmental stewardship, human capital management, support for our local communities, corporate governance and transparency, or fail to consider ESG factors in our business operations.

Furthermore, as a result of our diverse base of clients and business partners, we may face potential negative publicity based on the identity of our clients or business partners and the public's (or certain segments of the public's) view of those entities. Such publicity may arise from traditional media sources or from social media and may increase rapidly in size and scope. If our client or business partner relationships were to become intertwined in such negative publicity, our ability to attract and retain clients, business partners, and employees may be negatively impacted, and our stock price may also be negatively impacted. Additionally, we may face pressure to not do business in certain industries that are viewed as harmful to the environment or are otherwise negatively perceived, which could impact our growth.

28
Index
Additionally, investors and shareholder advocates are placing ever increasing emphasis on how corporations address ESG issues in their business strategy when making investment decisions and when developing their investment theses and proxy recommendations. We may incur meaningful costs with respect to our ESG efforts and if such efforts are negatively perceived, our reputation and stock price may suffer.

In response to ESG developments (including, in particular DEI initiatives), there are increasing instances of anti-ESG legislation and anti-DEI executive orders, adverse media coverage, regulation, and litigation that could have unintended impacts on ordinary banking operations and increase litigation or reputational risk related to actions we choose to take and impact the results of our operations. If legislatures in the states in which we operate adopt legislation intended to protect certain industries by limiting or prohibiting consideration of business and industry factors in lending activities, certain portions of our lending operations may be impacted.

Risks Related to Market Conditions
A prolonged economic downturn, especially one affecting our geographic market area, will adversely affect our operations and financial results.
Our primary lending emphasis is the origination of one-to-four family first mortgage loans on residential properties; therefore, we are particularly exposed to downturns in the U.S. housing market. The primary risks inherent in our one- to four-family loan portfolio are declines in economic conditions, elevated levels of unemployment or underemployment, and declines in residential real estate values. Any one or a combination of these events may have an adverse impact on borrowers'ability to repay their loans, which could result in increased delinquencies, non-performing assets, loan losses, and future loan loss provisions.
Additionally, we have a concentration of loans secured in New York and Florida. Approximately 62.3% of our loan portfolio is comprised of loans secured by property located in our markets in and around New York, and approximately 34.8% is comprised of loans secured by property located in Florida. This makes us vulnerable to a downturn in the local economy and real estate markets. Adverse conditions in the local economy such as inflation, unemployment, recession, natural disasters, or other factors beyond our control could impact the ability of our borrowers to repay their loans. Decreases in local real estate values could adversely affect the value of the property used as collateral for our loans, which could cause us to realize a loss in the event of a foreclosure. Currently, there is not a single employer or industry in the area on which the majority of our customers are dependent.
Instability in global economic conditions and geopolitical matters, as well as volatility in financial markets, could have a material adverse effect on our results of operations and financial condition.

Instability in global economic conditions and geopolitical matters, as well as volatility in financial markets, could have a material adverse effect on our results of operations and financial condition. The macroeconomic environment in the United States is susceptible to global events and volatility in financial markets. Unfavorable or uncertain economic and market conditions could lead to credit quality concerns related to borrower repayment ability and collateral protection as well as reduced demand for the products and services we offer. In addition, economic conditions in foreign countries, including global political hostilities (including China-Taiwan and U.S.-China relations), global military conflicts (including the conflicts in the Ukraine and the Middle East), and U.S. and foreign tariff policies, could affect the stability of global financial markets, which could hinder domestic economic growth. If the national, regional and local economies experience worsening economic conditions, including high levels of unemployment, our growth and profitability could be constrained. Weak economic conditions are characterized by, among other indicators, deflation, elevated levels of unemployment, fluctuations in debt and equity capital markets, increased delinquencies on commercial, mortgage and consumer loans, residential and commercial real estate, price declines and lower home sales and commercial activity. Furthermore, trade negotiations between the U.S. and other nations remain uncertain and could adversely impact economic and market conditions for the Company, our customers, and counterparties.

29
Index
In addition, the inflationary outlook in the United States remains uncertain. While inflation has eased from its recent peak of 9.1% in June 2022, further inflationary pressures could result in the Federal Reserve Board discontinuing its lowering of interest rates or increasing interest rates for a prolonged period of time, which may expose the Company to interest rate risk. In addition, higher interest rates could slow economic growth and lead to a recessionary environment, which could negatively impact the Company's growth, credit quality, net interest margin and its financial results. The risks to our business from inflation depends on the durability of the current inflationary pressures in our markets. Transitory increases in inflation are unlikely to have a material impact on our business or earnings. However, more persistent inflation could lead to tighter-than-expected monetary policy which could, in turn, increase the borrowings costs of our customers, making it more difficult for them to repay their loans or other obligations. Actions taken by the Federal Reserve Board, including changes in its target funds rate, balance sheet management and lending facilities are beyond our control and difficult to predict. These actions can affect interest rates and the value of financial instruments and other assets and liabilities and can impact our borrowers. Sudden changes in monetary policy, for example, in response to high inflation, have led and may in the future lead to financial market volatility, increases in market interest rates and a continued flattening or inversion of the yield curve. This has resulted in and may continue to result in volatility of equity and other markets, further volatility of the U.S. dollar, a widening in credit spreads and higher interest rates and recessionary concerns, and could result in elevated unemployment, which could impact investor risk appetite and our borrowers, potentially increasing delinquency rates. Financial market volatility could also result from uncertainty about the timing and extent of rate cuts by the Federal Reserve Board in response to moderating inflation and/or weakening economic conditions. Higher inflation, or volatility and uncertainty related to inflation, could also reduce demand for our products, adversely affect the creditworthiness of our borrowers or result in lower values for our investment securities and other interest-earning assets.

Any downgrade in the credit rating of the U.S. government or default by the U.S. government as a result of political conflicts over legislation to raise the U.S. government's debt limit may have a material adverse effect on us.

Recent federal budget deficit concerns and political conflict over legislation to raise the U.S. government's debt limit have increased the possibility of a default by the U.S. government on its debt obligations, related credit-rating downgrades, or an economic recession in the United States. On January 21, 2025, the U.S. Treasury began taking extraordinary measures to prevent a default on U.S. government debt, which measures are expected to continue until such time as the U.S. Congress increases the debt ceiling. However, it is unclear how long such extraordinary measures will forestall a default in the event of extended Congressional negotiations or inaction. Many of our investment securities are issued by the U.S. government, including certain government agencies and sponsored entities. As a result of uncertain domestic political conditions, including the possibility of the federal government defaulting on its obligations for a period of time due to debt ceiling limitations or other unresolved political issues, investments in financial instruments issued or guaranteed by the federal government may pose liquidity risks. In 2011, Standard & Poor's lowered its long-term sovereign credit rating on the U.S. from AAA to AA+. On August 1, 2023, Fitch Ratings also downgraded its U.S. long-term sovereign credit rating from AAA to AA+. A downgrade, or a similar action by other rating agencies, in response to current political dynamics, as well as sovereign debt issues facing the governments of other countries, could generally have a material adverse impact on financial markets and economic conditions in the U.S. and worldwide and, therefore, materially adversely affect our business, financial condition and results of operations.

The soundness of other financial institutions could adversely affect us.

Our ability to engage in routine funding transactions could be adversely affected by the actions and commercial soundness of other financial institutions. Financial services institutions are interrelated as a result of trading, clearing, counterparty, or other relationships. We have exposure to many different counterparties, and we routinely execute transactions with counterparties in the financial services industry, including brokers and dealers, banks, investment banks, mutual funds, and other institutional entities. As a result, defaults by, or even rumors or questions about, one or more financial services institutions, or the financial services industry generally, have led to market-wide liquidity problems and could lead to losses or defaults by us or by other institutions. Many of these transactions expose us to credit risk in the event of default of our counterparty or client. Any such losses could be material and could materially and adversely affect our business, financial condition and results of operations. On November 16, 2023, the FDIC approved a final rule to implement a special assessment on certain banking organizations with financial institution subsidiaries with more than $5 billion in assets, in order to recover the costs associated with protecting uninsured depositors following the closures of Silicon Valley Bank and Signature Bank in March 2023. In the event that there are similar negative developments in the banking industry in the future, there may be increased regulatory scrutiny and new regulations directed towards regional banks similar in size to us, which may increase our costs of doing business and reduce our profitability.

30
Index
Any government shutdown could adversely affect the U.S. and global economy and our liquidity, financial condition and earnings.

Disagreement over the federal budget has previously caused the U.S. federal government to shut down for periods of time. On December 21, 2024, President Biden signed a bipartisan continuing resolution to extend federal spending and avert a government shutdown through March 14, 2025. Accordingly, without a final agreement regarding the federal budget in place prior to the expiration of the continuing resolution, or another continuing resolution, it is still possible that a partial shutdown of the U.S. government may occur. An extended period of shutdown of portions of the U.S. federal government could negatively impact the financial performance of certain customers and could negatively impact customers' future access to certain loan and guaranty programs. Continued adverse political and economic conditions could have a material adverse effect on our business, financial condition and results of operations. During any protracted federal government shutdown, we may not be able to close certain loans and we may not be able to recognize non-interest income on the sale of loans. Some of the loans we originate are sold directly to government agencies, and some of these sales may be unable to be consummated during a shutdown. In addition, we believe that some borrowers may decide not to proceed with their home purchase and not close on their loans, which would result in a permanent loss of the related non-interest income. A federal government shutdown could also result in reduced income for government employees or employees of companies that engage in business with the federal government, which could result in greater loan delinquencies, increased in our non-performing, criticized, and classified assets, and a decline in demand for our products and services.

The trust wealth management fees we receive may decrease as a result of poor investment performance, in either relative or absolute terms, which could decrease our revenues and net earnings.

Our Trustco Financial Services department derives its revenues primarily from investment management fees based on assets under management. Our ability to maintain or increase assets under management is subject to a number of factors, including investors' perception of our past performance, in either relative or absolute terms, market and economic conditions, and competition from investment management companies. Financial markets are affected by many factors, all of which are beyond our control, including general economic conditions, securities market conditions, the level and volatility of interest rates and equity prices, competitive conditions, monetary and fiscal policy and investor sentiment. A decline in the value of the assets under management would decrease our income. Further certain of our investment advisory and wealth management clients can terminate, with little or no notice, their relationships with us, reduce their aggregate assets under management, or shift their funds to other types of accounts with different rate structures.

Risks Related to Compliance and Regulation

The regulatory capital rules could slow our growth, cause us to seek to raise additional capital, or both.

As discussed under "Regulation and Supervision - Regulatory Capital Requirements and Prompt Corrective Action,"the Company and the Bank are subject to regulatory capital requirements. The capital rules impose stringent capital requirements on the Company and the Bank and generally require banking organizations to hold high-quality capital to act as a financial cushion to absorb losses and help banking organizations better withstand periods of financial stress.

The application of these stringent capital requirements for us could, among other things, result in lower returns on equity, require us to limit the growth we may otherwise seek, require the raising of additional capital, and result in regulatory actions such as prohibitions on the payment of dividends, the payment of bonuses to employees or the repurchase of shares if we were unable to comply with such requirements. If Trustco Bank fails to comply with its capital requirements, the OCC will have the authority to take "prompt corrective action," depending on the Bank's capital level. Currently, the Bank is considered "well-capitalized" for prompt corrective action purposes. If it were to be designated by the OCC in one of the lower capital levels - "undercapitalized," "significantly undercapitalized" or "critically undercapitalized" - the Bank would be required to raise additional capital and also would be subject to progressively more severe restrictions on operations, management, and capital distributions; replacement of senior executive officers and directors; and, if it became "critically undercapitalized," to the appointment of a conservator or receiver.

We currently anticipate that we will continue to be well-capitalized in accordance with the regulatory standards.

31
Index
Changes in laws and regulations and the cost of regulatory compliance with new laws and regulations may adversely affect our operations and our income.

We are subject to extensive regulation, supervision, and examination by the OCC, Federal Reserve Board, and FDIC. These regulatory authorities have extensive discretion in connection with their supervisory and enforcement activities, including the ability to impose restrictions on a bank's operations, reclassify assets, determine the adequacy of a bank's loss allowances, and determine the level of deposit insurance premiums assessed. The Dodd-Frank Act significantly affected the lending, deposit, investment, trading, and operating activities of financial institutions and their holding companies and will continue to do so. Changes in banking regulations and oversight, and the regulation of other agencies, such as the CFPB and the U.S. Department of Housing and Urban Development, whether in the form of regulatory policy, new regulations or legislation, or additional deposit insurance premiums, have impacted our operations and may continue to have a material impact on our operations in the future. New or revised rules may increase our regulatory compliance burden and costs and restrict the financial products and services we offer to our customers.

Further, there may be additional laws and regulations, or changes in policy, affecting lending and funding practices, regulatory capital limits, interest rate risk management, and liquidity standards, and future responses may result in significant changes. The federal bank regulatory agencies may require us to maintain capital ratios in excess of regulatory requirements, and new laws and regulations may increase our costs of regulatory compliance and of doing business, and otherwise affect our operations. New laws and regulations may significantly affect the markets in which we do business, the markets for and value of our loans and investments, the products we offer, the fees we can charge and our ongoing operations, costs, and profitability.

We are subject to numerous laws designed to protect consumers, including the CRA and fair lending laws, and a failure to comply with these laws could lead to a wide variety of sanctions.

The CRA, the Equal Credit Opportunity Act, the Fair Housing Act, and other fair lending laws and regulations (collectively, fair lending laws) impose community investment and nondiscriminatory lending requirements on financial institutions. The CFPB, the Department of Justice and other federal and state agencies are responsible for enforcing these federal laws and regulations and comparable state provisions. Various federal banking agencies have recently completed significant changes to their respective CRA regulations. Federal, state or local consumer lending laws may restrict our ability to originate certain mortgage loans or increase our risk of liability with respect to such loans. A successful regulatory challenge to an institution's performance under the fair lending laws could result in a wide variety of sanctions, including damages and civil money penalties, injunctive relief, restrictions on mergers and acquisitions, restrictions on expansion and restrictions on entering new business lines. Private parties may also have the ability to challenge an institution's performance under fair lending laws in private class action litigation. Such actions could have a material adverse effect on our business, financial condition and results of operations.

Changes in cybersecurity or privacy regulations may increase our compliance costs, limit our ability to gain insight from data and lead to increased scrutiny.
We collect, process, store, share, disclose and use information from and about our customers, plan participants and website and application users, including personal information and other data. Any actual or perceived failure by us to comply with our privacy policies, privacy-related obligations to customers or third parties, data disclosure and consent obligations or data security legal obligations may result in governmental enforcement actions, litigation or public statements critical of us. Such actual or perceived failures could also cause our customers to lose trust in us, which could have an adverse effect on our business.
Restrictions on data collection and use may limit opportunities to gain business insights useful to running our business and offering innovative products and services.
32
Index
We are subject to numerous federal, state, and international regulations regarding the privacy and security of personal information. These laws vary widely by jurisdiction and are constantly evolving. Privacy regulations with a significant impact on our operations include the NYDFS 23 NYCRR Part 500 Cybersecurity Requirements for Financial Services Companies, Gramm-Leach-Bliley Title V Subtitle A- Safeguards Rule, and FDIC Part 364 Appendix B- Interagency Guidelines Establishing Information Security Standards. Similar legislation is being enacted around the world with requirements and protections specific to data security requirements, notification requirements for data breaches, the right to access personal data and the right to be forgotten. These and other changes in cybersecurity and privacy regulations or the enactment of new regulations may increase our compliance costs and failure to comply with these regulations may lead to reputational damage, fines or civil damages and increased regulatory scrutiny.
Non-compliance with the Bank Secrecy Act, or other laws and regulations could result in fines or sanctions.
The Bank Secrecy Act and other applicable requirements require financial institutions to develop programs to prevent financial institutions from being used for money laundering and terrorist activities. If such activities are detected, financial institutions are obligated to file suspicious activity reports with the U.S. Treasury's Office of Financial Crimes Enforcement Network. These rules require financial institutions to establish procedures for identifying and verifying the identity of customers seeking to open new financial accounts. Failure to comply with these regulations could result in fines or sanctions. Recently, several banking institutions have received large fines for non-compliance with these laws and regulations. While we have developed policies and procedures designed to assist in compliance with these laws and regulations, these policies and procedures may not be effective in preventing violations of these laws and regulations.
Changes in tax laws may adversely affect us, and the Internal Revenue Service or a court may disagree with our tax positions, which may result in adverse effects on our business, financial condition, and results of operations or cash flows.
The Company operates in an environment that imposes income taxes on its operations at both the federal and state levels to varying degrees. Strategies and operating routines have been implemented to minimize the impact of these taxes. Consequently, any change in tax legislation could significantly alter the effectiveness of these strategies. The Tax Cuts and Jobs Act (which we refer to as the "Tax Act"), enacted in December 2017, significantly affected United States tax law, including by changing how the United States imposes tax on certain types of income of corporations and by reducing the United States federal corporate income tax rate to 21%. It also imposed new limitations on a number of tax benefits, including certain executive compensation deductions, deductions for certain transportation fringe benefits provided to employees and entertainment expenses, among others. There can be no assurance that future tax law changes will not increase the rate of the corporate income tax significantly; impose new limitations on deductions, credits or other tax benefits; or make other changes that may adversely affect the performance of an investment in our stock. In addition, we have taken and may in the future take positions with respect to a number of unsettled issues for which Internal Revenue Services ("IRS") guidance is unavailable. There is no assurance that the IRS or a court will agree with the positions taken by us, in which case tax penalties and interest may be imposed that could adversely affect our business, financial condition, results of operations and cash flows.

Furthermore, on August 16, 2022, the U.S. government enacted the Inflation Reduction Act of 2022, which imposed a one percent excise tax on the value of corporate share repurchases (net of issuance). On December 27, 2022, the Internal Revenue Services issued Notice 2023-2 which provides interim guidance on the implementation of the excise tax on stock repurchases. The excise tax is a non-deductible tax of one percent of the fair market value of the Corporation's stock repurchases, net of the fair market value of stock issued by the corporation, including restricted stock issuances and stock option exercises, and further excluding certain statutory exceptions, such as ESOP repurchases and contributions, repurchases made as part of a tax-free reorganization where no gain or loss is recognize and certain other qualified activities, occurring after December 31, 2022 in excess of $1.0 million. Although we did not have any excise tax on stock repurchases in fiscal 2024, the tax may impact our future financial results.

33
Index
The changes in the federal tax laws may have an adverse effect on the market for, and the valuation of, residential properties, and on the demand for such loans in the future, and could make it harder for borrowers to make their loan payments. In addition, these changes may also have a disproportionate effect on taxpayers in states with high residential home prices and high state and local taxes, like New York. If home ownership becomes less attractive, demand for mortgage loans could decrease. The value of the properties securing loans in our loan portfolio may be adversely impacted as a result of the changing economics of home ownership, which could require an increase in our provision for loan losses, which would reduce our profitability and could materially adversely affect our business, financial condition and results of operations.
Our ability to pay dividends is subject to regulatory limitations and other limitations that may affect our ability to pay dividends to our stockholders or to repurchase our common stock.
TrustCo is a separate legal entity from its subsidiary Trustco Bank, and does not have significant operations of its own. The availability of dividends from Trustco Bank is limited by various statutes and regulations. It is possible, depending upon the financial condition of the Bank and other factors that the OCC or the Federal Reserve Board could assert that payment of dividends or other payments may result in an unsafe or unsound practice. In addition, TrustCo is subject to consolidated capital requirements and is required to serve as a source of strength to Trustco Bank. If the Bank is unable to pay dividends to TrustCo, or if TrustCo is required to retain capital or contribute capital to the Bank, we may not be able to pay dividends on our common stock or to repurchase shares of common stock.
We may be subject to a higher effective tax rate if Trustco Realty Corp. ("Trustco Realty") fails to qualify as a real estate investment trust ("REIT").

Trustco Realty, a subsidiary of Trustco Bank, operates as a REIT for tax purposes. Trustco Realty was established to acquire, hold and manage mortgage assets and other authorized investments to generate net income for distribution to its shareholders. Qualification as a REIT involves application of specific provisions of the Internal Revenue Code relating to various asset tests and gross income tests. If Trustco Realty fails to meet any of the required provisions for REITs, it could no longer qualify as a REIT and the resulting tax consequences would increase our effective tax rate or cause us to have a tax liability for prior years.

Changes in accounting standards could impact reported earnings.

The accounting standard setting bodies, including the Financial Accounting Standards Board, the SEC and other regulatory bodies, periodically change financial accounting and reporting standards that govern the preparation of our consolidated statements. These changes can be hard to predict and can materially impact how the Company records and reports its financial condition and results of operations. In some cases, we could be required to apply a new or revised accounting standard retroactively, which could affect beginning of period financial statement amounts.

Risks Related to Competition

Strong competition within the Bank's market areas could hurt profits and slow growth.

The Bank faces intense competition both in making loans and attracting deposits. This competition comes principally from other banks, savings and loan associations, credit unions, mortgage companies, other lenders, and institutions offering uninsured investment alternatives. Many of our competitors have competitive advantages, including greater financial resources and higher lending limits, a wider geographic presence, more accessible branch office locations, more aggressive marketing campaigns and better brand recognition, and the ability to offer a wider array of services or more favorable pricing alternatives, as well as lower origination and operating costs.

Competition has made it more difficult for the Bank to make new loans and at times has forced the Bank to offer higher deposit rates. Price competition for loans and deposits might result in the Bank earning less on loans and paying more on deposits, which would reduce net interest income. Competition also makes it more difficult to grow loans and deposits and to hire and retain experienced employees. Management expects competition to increase in the future as a result of legislative, regulatory and technological changes and the continuing trend of consolidation in the financial services industry. The Bank's profitability depends upon its continued ability to compete successfully in its market areas.

34
Index
Consumers and businesses are increasingly using non-banks to complete their financial transactions, which could adversely affect our business and results of operations.
Technology and other changes are allowing consumers and businesses to complete financial transactions that historically have involved banks through alternative methods. For example, the wide acceptance of Internet-based commerce has resulted in a number of alternative payment processing systems and lending platforms in which banks play only minor roles. Customers can now maintain funds in prepaid debit cards or digital currencies, and pay bills and transfer funds directly without the direct assistance of banks. The diminishing role of banks as financial intermediaries has resulted and could continue to result in the loss of fee income, as well as the loss of customer deposits and the related income generated from those deposits. The loss of these revenue streams and the potential loss of lower cost deposits as a source of funds could have a material adverse effect on our business, financial condition and results of operations.
Risks Related to Cybersecurity, Third Parties, and Technology
Our business could be adversely affected by third-party service providers, data breaches, and cyber-attacks.

We rely heavily on third-party service providers for much of our communications, information, operating and financial controls systems, and technology. We face the risk of operational disruption, failure, or capacity constraints due to our dependency on third-party service providers for components of our business infrastructure. While we have selected these third-party service providers through our third party risk management program, we do not control their operations. As such, any failure on the part of these business partners to perform their various responsibilities could also adversely affect our business and operations. Any failure or interruption or breach in security of these systems could result in failures or interruptions in our customer relationships management, general ledger, deposit, servicing, and/or loan origination systems. Third (and fourth) party security incidents and supply-chain attacks have become increasingly common. We cannot assure you that such incidents, failures or interruptions will not occur again in the future or, if they do occur, that they will be adequately addressed by us or the third parties on which we rely. The occurrence of any failure or interruption could have a material adverse effect on our business, financial condition, results of operations, and cash flows. If any of our third-party service providers experience financial, operational, or technological difficulties, or if there is any other disruption in our relationships with them, we may be required to locate alternative sources of such services, We cannot assure you that we could negotiate terms that are as favorable to us, or could obtain services with similar functionality as found in our existing systems, without the need to expend substantial resources, if at all.

Furthermore, our assets that are at risk for cyber-attacks include financial assets and non-public information belonging to customers. We use several third-party service providers who have access to our assets via electronic media. Certain cyber security risks arise due to this access, including cyber espionage, blackmail, ransom, and theft. We employ preventive and detective controls to protect our assets and provide recurring information security training to all employees. Although to date we have not experienced any material losses or other material consequences to date relating to technology failure, cyberattacks or other information or security breaches, whether directed at us or at third parties, there can be no assurance that our controls and procedures in place to monitor and mitigate the risks of cyber threats, including the remediation of critical information security and software vulnerabilities, will be sufficient and/or timely as to prevent material losses or consequences in the future, particularly in light of the increased sophistication and evolving nature of cyber criminals' activity. Our risk and exposure to these cybersecurity incidents remains heightened because of, among other things, our implementation of Internet and mobile banking to meet customer demand, our expanded internal usage of web-based products and applications, the current economic and political environment, and our regulatory obligations and the regulatory scrutiny within our industry. As cyber and other data security threats continue to evolve, we may be required to expend significant additional resources to continue to modify and enhance our protective measures or to investigate and remediate any security vulnerabilities.
35
Index
The development and use of artificial intelligence ("AI") presents risks and challenges that may adversely impact our business.
We or our third-party vendors, clients or counterparties may develop or incorporate AI technology in certain business processes, services or products. The development and use of AI presents a number of risks and challenges to our business. The legal and regulatory environment relating to AI is uncertain and rapidly evolving, both in the United States and internationally, and includes regulatory schemes targeted specifically at AI as well as provisions in intellectual property, privacy, consumer protection, employment and other laws applicable to the use of AI. These evolving laws and regulations could require changes in our implementation of AI technology and increase our compliance costs and the risk of non-compliance. AI models, particularly generative AI models, may produce output or take action that is incorrect, that result in the release of private, confidential or proprietary information, that reflect biases included in the data on which they are trained, infringe on the intellectual property rights of others or that is otherwise harmful. In addition, the complexity of many AI models makes it challenging to understand why they are generating particular outputs. This limited transparency increases the challenges associated with assessing the proper operation of AI models, understanding and monitoring the capabilities of the AI models, reducing erroneous output, eliminating bias and complying with regulations that require documentation or explanation of the basis on which decisions are made.
Further, we may rely on AI models developed by third parties, and would be dependent in part on the manner in which those third parties develop, train and deploy their models, including risks arising from the inclusion of any unauthorized material in the training data for their models, the effectiveness of the steps these third parties have taken to limit the risks associated with the output of their models and other matters over which we may have limited visibility. Any of these risks could expose us to liability or adverse legal or regulatory consequences and harm our reputation and the public perception of our business or the effectiveness of our security measures.
We are also exposed to risks arising from the use of AI technologies by bad actors to commit fraud and misappropriate funds and to facilitate cyberattacks. Generative AI, if used to perpetrate fraud or launch cyberattacks, could create panic at a particular financial institution or securities exchange, which could pose a threat to financial stability.
A failure in or breach of our operational or security systems or infrastructure, or those of third parties, could disrupt our businesses, and adversely impact our results of operations, liquidity and financial condition, as well as cause reputational harm.
The potential for operational risk exposure exists throughout our organization and, as a result of our interactions with, and reliance on, third parties, is not limited to our own internal operational functions. Our operational and security systems, infrastructure, including our computer systems, data management, and internal processes, as well as those of third parties, are integral to our performance. We rely on our employees and third parties in our day-to-day and ongoing operations, who may, as a result of human error, misconduct, malfeasance or failure, or breach of third-party systems or infrastructure, expose us to risk. We have taken measures to implement backup systems and other safeguards to support our operations, but our ability to conduct business may be adversely affected by any significant disruptions to us or to third parties with whom we interact and rely. For example, strategic technology project implementation challenges have caused immaterial business interruptions in the past and may cause more interruptions in the future. In addition, our ability to implement backup systems and other safeguards with respect to third-party systems is more limited than with respect to our own systems. Our financial, accounting, data processing, backup or other operating or security systems and infrastructure may fail to operate properly or become disabled or damaged as a result of a number of factors including events that are wholly or partially beyond our control which could adversely affect our ability to process these transactions or provide these services. There have been and there could be in the future sudden increases in customer transaction volume; electrical, telecommunications, or other major physical infrastructure outages; natural disasters such as earthquakes, tornadoes, hurricanes, and floods; disease pandemics; and events arising from local or larger scale political or social matters, including terrorist acts. We continuously update these systems to support our operations and growth and to remain compliant with all applicable laws, rules and regulations globally. This updating entails significant costs and creates risks associated with implementing new systems and integrating them with existing ones, including business interruptions. Operational risk exposures could adversely impact our results of operations, liquidity and financial condition, as well as cause reputational harm.
Unauthorized disclosure of sensitive or confidential client or customer information, whether through a breach of our computer systems or otherwise, could severely harm our business.
As part of our financial institution business, we collect, process, and retain sensitive and confidential customer information. Despite the security measures we have in place, our facilities and systems, and those of our third-party service providers, have been and may be vulnerable to security breaches, acts of vandalism, computer viruses, misplaced or lost data, programming and/or human errors, or other similar events in the future. If information security is breached, information can be lost or misappropriated, resulting in financial loss or costs to us. Any security breach involving confidential customer information, whether by us or by our vendors, could severely damage our reputation, expose us to the risks of litigation and regulatory liability or disrupt our operations and have a material adverse effect on our business operations.
36
Index
We could suffer a material adverse impact from interruptions in the effective operation of, or security breaches affecting, our computer systems.
We rely heavily on information systems to conduct our business and to process, record, and monitor our transactions. Risks to the systems result from a variety of factors, including the potential for bad acts on the part of hackers, criminals, employees and others. As one example, some banks in recent years have experienced denial of service attacks in which individuals or organizations flood the bank's website with extraordinarily high volumes of traffic, with the goal and intended effect of disrupting the ability of the bank to process transactions. We are also at risk for the impact of natural disasters, terrorism, and international hostilities on our systems or for the effects of outages or other failures involving power or communications systems operated by others. These risks also arise from the same types of threats to businesses with which we deal.
Potential adverse consequences of attacks on our computer systems or other threats include damage to our reputation, loss of customer business, litigation, and increased regulatory scrutiny, which might also result in financial loss and require additional efforts and expense to attempt to prevent such adverse consequences in the future.
Risk Related to Ownership of Our Securities
Provisions in our articles of incorporation and bylaws and New York law may discourage or prevent takeover attempts, and these provisions may have the effect of reducing the market price of our stock.
Our articles of incorporation and bylaws include several provisions that may have the effect of discouraging or preventing hostile takeover attempts, and therefore, making the removal of incumbent management difficult. The provisions include requirements of supermajority votes to approve certain business transactions. In addition, New York law contains several provisions that may make it more difficult for a third party to acquire control of us without the approval of the Board, and may make it more difficult or expensive for a third party to acquire a majority of our outstanding stock. To the extent that these provisions are effective in discouraging or preventing takeover attempts, they may tend to reduce the market price for our stock.
We cannot guarantee that our allocation of capital to various alternatives, including stock repurchase plans, will enhance long-term stockholder value.
Our business plan calls for us to execute a variety of strategies to allocate and deploy any excess capital including, but not limited to, continued organic balance sheet growth and diversification, implementation of stock repurchase plans and payment of regular cash dividends. Additionally, we will carefully consider acquisition opportunities to further deploy capital when we expect such opportunities to significantly enhance long-term shareholder value. If we are unable to effectively and timely deploy capital through these strategies, it may constrain growth in earnings and return on equity and thereby diminish potential growth in stockholder value.
On March 29, 2024, we announced that our Board authorized a new stock repurchase plan to acquire up to 200,000 shares of the Company's outstanding common stock. Repurchases are made at management's discretion at prices management considers to be attractive and in the best interests of both the Company and its stockholders, subject to the availability of stock, general market conditions, the trading price of the stock, alternative uses for capital, and the Company's financial performance.
The Inflation Reduction Act of 2022, which was signed into law on August 16, 2022, contains a number of changes to U.S. federal tax laws. One such change is a 1% excise tax on stock repurchases, which will increase the cost of stock repurchases and may impact our future decisions on how to return value to stockholders in the most efficient manner.
Item 1B
Unresolved Staff Comments
None.
37
Index
Item 1C
Cybersecurity

Cybersecurity Risk Management and Strategy

At TrustCo, we recognize the importance of information security practices designed to protect the confidentiality, integrity, and availability of company information and the personal information that our customers share with us. TrustCo Bank maintains a formal enterprise wide risk management ("ERM") program which identifies, measures, monitors, and controls risk. The ERM Program and framework is designed to ensure that all elements of the risk management process are in place and operating effectively across all risk categories. Risk categories include credit, interest rate risk, liquidity, price, operational, compliance, reputation, and strategic risks. Cybersecurity risk is a critical component of our technology risk management program, specifically our information security program given the increasing reliance on technology and potential of cyber risk threats. Using guidance set forth in our ERM program, we have implemented an Information Security Program to lead and support the management of information security risks in accordance with our risk profile and business strategy. We utilize the Federal Financial Institutions Examination Council ("FFIEC") Cybersecurity Assessment Tool to benchmark these controls and procedures.

Our Information Security Program includes a number of components designed to identify, analyze, and respond to cybersecurity risks, including reliance on a layered system of preventative and detective technologies, controls, and policies designed to detect, mitigate, and contain cybersecurity threats. As part of our Information Security Program, we maintain an Information Security Policy that outlines internal controls and procedures designed to protect information systems. Information security program risk assessments and third-party attestations and assessments are conducted periodically by both internal and external resources. We leverage qualified third-party security assessors to identify vulnerabilities through both internal and external penetration tests and perform internal cybersecurity maturity assessments. In addition, our internal audit team conducts an information security and information technology audit on an annual basis. We are also subject to examinations by applicable regulators. We conduct annual cybersecurity awareness training for employees to enhance awareness of how to detect and respond to cybersecurity threats, as well as periodic phishing training campaigns. We also provide quarterly cybersecurity updates for our employees, and table-top exercises are conducted annually to simulate a response to a cybersecurity incident.

As part of our Information Security Program, TrustCo maintains a formal Third-Party Risk Management program that provides oversight of cybersecurity risks related to supplier relationships. During supplier onboarding, we perform risk-based due diligence for suppliers with access to confidential TrustCo information or that require technical integration with TrustCo systems. This program includes encryption and password requirements for our suppliers, as well as ongoing monitoring and assessment, and contract review.

Furthermore, we recognize the growing risk associated with highly sophisticated actors targeting corporations and maintain an Incident Response Plan, which is part of our broader business continuity planning. We have access through our insurer to computer forensics firms and specialized legal counsel in case of a cybersecurity incident. While we maintain cybersecurity insurance to assist in the cost of recovery from a cybersecurity incident, such coverage may not be sufficient to cover all costs resulting from such incidents.

We did not experience any material losses relating to cybersecurity threats or incidents for the year ended December 31, 2024. We are not aware of any risks from cybersecurity threats, including as a result of any previous cybersecurity incidents, that have materially affected us or are reasonably likely to materially affect us, including our business strategy, results of operations, or financial condition. However, the sophistication of and risks from cybersecurity threats and incidents continue to increase, and the preventative actions that we have taken and continue to take to reduce the risk of cybersecurity threats and incidents and protect our systems and information may not successfully protect against all cybersecurity threats and incidents.For more information on the risks that we face from cybersecurity threats, see "Risk Factors - Risks Related to Cybersecurity, Third Parties, and Technology." in Part I, Item 1A of this report.

38
Index
Cybersecurity Governance

The Board has overall responsibility for risk oversight and has delegated oversight of our cybersecurity program to both our Risk Committee and our Audit Committee. The Risk Committee directly oversees information technology and information security risks through regular reports from management on information technology, cyber security, and related risk assessments. The Risk Committee also receives annual reports on the Information Security Program and approves the Information Security Policy. In addition, the Audit Committee of the Board monitors internal audit's coverage of cybersecurity governance, risks, and related controls, including any identified deficiencies, from cybersecurity or other risks, that could adversely affect the ability to record, process, summarize, and report financial data. The Risk Committee coordinates with the Audit Committee for review of information security matters, as needed. The Board also receives an annual update on the Company's enterprise services, which includes both information technology and information security.

Our Information Security Program is run by our Senior Vice President, Chief Risk Officer, Chief Compliance Officer and Information Security Officer ("ISO"), who reports to our Executive Vice President, Chief Operating Officer ("EVP").Our ISO is informed about and monitors prevention, detection, mitigation, and remediation efforts through regular communication and reporting from professionals in the information security team, and through the use of technological tools and software and results from third party audits. Our management-level IT Steering Committee meets on a monthly basis to discuss cybersecurity and related topics.Our ISO and EVP have extensive experience assessing and managing cybersecurity programs and cybersecurity risk. Our ISO has served in that position since 2013, is a Certified Information Security Manager, and has over 20 years of experience working at TrustCo. Our EVP, who has been an employee of TrustCo since 1986, has served in his role as Executive Vice President of TrustCo since 2013.Our ISO and EVP report directly to the Risk Committee on our cybersecurity program and efforts to prevent, detect, mitigate, and remediate issues.

Item 2.
Properties
TrustCo's executive offices are located at 5 Sarnowski Drive, Glenville, New York, 12302, in a facility owned by the Company. The Company operates 136 banking offices located in New York, New Jersey, Vermont, Massachusetts and Florida. As of December 31, 2024, 23 of such properties are owned and 113 are leased from others on market terms. The lease terms for our banking offices are not individually material. Lease expirations range from 1 month to 19.8 years. In the opinion of management, the physical properties of TrustCo and the Bank are suitable and adequate to meet our requirements and are being fully utilized.
Item 3.
Legal Proceedings
The nature of TrustCo's business generates a certain amount of litigation against TrustCo and its subsidiaries involving matters arising in the ordinary course of business. In the opinion of management of TrustCo, there are no proceedings pending to which TrustCo or any of its subsidiaries is a party, or of which its property is the subject which, if determined adversely to TrustCo or such subsidiaries, would be material in relation to TrustCo's consolidated shareholders'equity and financial condition.
Item 4.
Mine Safety Disclosures
Not applicable.
39
Index
Information about our Executive Officers
Our executive officers as of March 14, 2025, are listed below, along with their ages on that date, positions and offices held with the company, and principal occupations and employment, focused primarily on the past five years.
Name, Age and
Position
With Trustco

Recent Business Experience

Year First
Became
Executive of
TrustCo





Robert J. McCormick,
Age 61,
Chairman, President and Chief Executive Officer

Chairman, President and Chief Executive Officer of TrustCo from January 2009 to December 2010, President and Chief Executive Officer of TrustCo since January 2004, Executive Officer of TrustCo since 2001 and President and Chief Executive Officer of Trustco Bank since November 2002. Chairman of TrustCo and Trustco Bank from November 2008 to December 2010. Director of TrustCo and Trustco Bank since 2005. Joined Trustco Bank in 1995.

2001





Robert M. Leonard,
Age 62,
Executive Vice President and Chief Operating Officer

Executive Vice President of TrustCo and Trustco Bank from 2013 to present. Senior Vice President of TrustCo and Trustco Bank from 2010 to 2013. Secretary of TrustCo and Trustco Bank from 2003 to 2006 and 2009 to 2016. Assistant Secretary of TrustCo and Trustco Bank from 2006 to 2009. Executive Officer of TrustCo and Trustco Bank from 2003 to present. Joined Trustco Bank in 1986.

2003





Michael M. Ozimek
Age 50,
Executive Vice President and Chief Financial Officer

Executive Vice President and Chief Financial Officer, TrustCo and Trustco Bank from 2018 to present. Senior Vice President and Chief Financial Officer of TrustCo and Trustco Bank from 2014 to 2018. Executive Officer of TrustCo and Trustco Bank from 2014 to present. Joined TrustCo and Trustco Bank in 2002.

2014





Michael Hall
Age 60,
General Counsel and Corporate Secretary

General Counsel and Corporate Secretary of TrustCo and Trustco Bank from 2018 to present. Vice President and Counsel of TrustCo and Trustco Bank from 2015 to 2018. Assistant Secretary of TrustCo and Trustco Bank for 2016. Executive Officer and Secretary of TrustCo and Trustco Bank from 2017 to present. Attorney with McNamee, Lochner, Titus & William, P.C. from 1992 to 2015. Joined TrustCo and Trustco Bank in 2015.

2017





Kevin M. Curley
Age 57,
Executive Vice President and Chief
Banking Officer

Executive Vice President Retail Banking of TrustCo and Trustco Bank from December 2018 to present. Joined Trustco Bank in 1990.
2018

40
Index
PART II

Item 5.
Market for the Registrant's Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities

TrustCo's common stock is traded on The Nasdaq Stock Market, LLC under the symbol "TRST." TrustCo had approximately 6,866 shareholders of record as of March 7, 2025.

The Company's ability to pay dividends depends on the receipt of dividends from the Bank, which is subject to a variety of limitations under federal banking regulations regarding the payment of dividends. The Board presently intends to continue the policy of paying quarterly cash dividends. The amount of any future dividends will depend on economic and market conditions, our financial condition and operating results, and other factors, including contractual restrictions and applicable government regulations and policies (such as those relating to the ability of bank and non-bank subsidiaries to pay dividends to the parent company and regulatory capital limitations). For discussion of corporate and regulatory limitations applicable to the payment of dividends, see "Item 1. Business-Supervision and Regulation-Dividends."

Recent Sales of Unregistered Securities.

None.

Issuer Purchases of Equity Securities

The following table provides information about the Company's purchases of shares of common stock during the three months ended December 31, 2024.

Period

(a)
Total
Number
of Shares
Purchased


(b)
Average
Price
Paid Per
Share
(c)
Total
Number of
Shares
Purchased
as Part of
Publicly
Announced
Plans or
Programs
(d)
Maximum
Number
of Shares
that May
Yet
Be
Purchased
Under
the Plans
or
Programs
(1)

October 1 to October 31, 2024
-
$
-
-
186,000
November 1 to November 30, 2024
-
$
-
-
186,000
December 1 to December 31, 2024
-
$
-
-
186,000
Total
-
$
-
-
186,000

(1)
On March 29, 2024 the Company's Board authorized, and the Company announced, another share repurchase program of up to 200,000 shares, or approximately 1% of its currently outstanding common stock. The program expires on March 29, 2025. There were no repurchases during the three months ended December 31, 2024.
Stock Performance Graph
The TrustCo Annual Report to Shareholders for the year ended December 31, 2024, which is filed as Exhibit 13 hereto, contains a stock performance graph comparing the yearly percentage change in the Company's cumulative total shareholder return on its common stock with the cumulative return of the Russell 2000 and S&P U.S. BMI Banks Index. Such graph is incorporated herein by reference.

Item 6.
[Removed and reserved]

Item 7.
Management's Discussion and Analysis of Financial Condition and Results of Operations
The information required by this this Item 7 is contained in TrustCo's Annual Report to Shareholders for the year ended December 31, 2024, which is filed as Exhibit 13 hereto and incorporated herein by reference.

41
Index
Item 7A.
Quantitative and Qualitative Disclosures about Market Risk

The information required by this Item 7A is contained in TrustCo's Annual Report to Shareholders for the year ended December 31, 2024, which is filed as Exhibit 13 hereto and incorporated herein by reference.

Item 8.
Financial Statements and Supplementary Data

The consolidated financial statements, together with the report thereon of Crowe LLP, and the required supplementary financial data are included in TrustCo's Annual Report to Shareholders for the year ended December 31, 2024, which is filed as Exhibit 13 hereto and incorporated herein by reference.

Item 9.
Changes in and Disagreements with Accountants on Accounting and Financial Disclosure

None.

Item 9A.
Controls and Procedures

Evaluation of Disclosure Controls and Procedures

An evaluation was carried out under the supervision and with the participation of the Company's management, including the Chief Executive Officer and Chief Financial Officer, of the effectiveness of the Company's disclosure controls and procedures as of the end of the period covered by this report. Disclosure controls and procedures, as defined in Rule 13a-15(e) and 15d-15(e) under the Exchange Act,are procedures that are designed with the objective of ensuring that information required to be disclosed in the Company's reports filed under the Exchange Act, such as this 2024 Form 10-K, is recorded, processed, summarized and reported within the time periods specified in the SEC's rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed by the Company in the reports that the Company files or submits under the Exchange Act is accumulated and communicated to the Company's management, including our principal executive and principal financial officer, to allow timely decisions regarding required disclosure. Management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving their objectives, and management necessarily applies its judgment in evaluating the cost-benefit relationship of possible controls and procedures.

Our management, with the participation of the Chief Executive Officer and Chief Financial Officer, has evaluated the effectiveness of the Company's disclosure controls and procedures as of the end of the period covered by this 2024 Form 10-K. Based on such evaluation, our Chief Executive Officer and Chief Financial Officer have concluded that, as of December 31, 2024, the Company's disclosure controls and procedures were effective to satisfy the objectives for which they are designed.

Management's Report on Internal Control Over Financial Reporting and Auditor Attestation Report on Internal Control over Financial Reporting

Management's Report on Internal Control over Financial Reporting, together with the report thereon of Crowe LLP is included in TrustCo's Annual Report to Shareholders for the year ended December 31, 2024, which is filed as Exhibit 13 hereto, are incorporated herein by reference.

Changes in Internal Control over Financial Reporting

There have been no changes in the Company's internal control over financial reporting (as defined in Rule 13a-15(f) and 15d-15(f) under the Exchange Act) that occurred during the Company's quarter ended December 31, 2024 that have materially affected, or are reasonably likely to materially affect, the Company's internal control over financial reporting.

42
Index
Item 9B.
Other Information

(a) None.

(b) During the fiscal quarter ended December 31, 2024, none of the Company's directors or executive officers adopted or terminated a Rule 10b5-1 trading arrangement or a non-Rule 10b5-1 trading arrangement (each as defined in Item 408 of Regulation S-K under the Securities Exchange Act of 1934, as amended).

Item 9C.
Disclosure Regarding Foreign Jurisdictions that Prevent Inspections

Not applicable.
PART III

Item 10.
Directors, Executive Officers and Corporate Governance

The information required by this Item 10 is incorporated herein by reference to the disclosure under the headings "Information on TrustCo Directors and Nominees," "Information on TrustCo Executive Officers," "Director Candidates Nominated by Shareholders," "Audit Committee," and "Section 16(a) Beneficial Ownership Reporting Compliance"in the Company's Proxy Statement (Schedule 14A) for its 2025 Annual Meeting of Shareholders to be filed with the SEC within 120 days of the Company's fiscal year-end. TrustCo has adopted a code of conduct that applies to all employees, including its principal executive, financial and accounting officers. A copy of this code of conduct will be provided without charge upon written request. Requests and inquiries should be directed to: Michael Hall, General Counsel and Corporate Secretary, TrustCo Bank Corp NY, P.O. Box 1082, Schenectady, New York 12301-1082. The Code of Conduct also is available on the Company's website at www.trustcobank.com under the "Investor Relations" link. The required information regarding TrustCo's executive officers is contained in PART I in the item captioned "Information about our Executive Officers."

Insider Trading Policy

The Company has adopted the TrustCo Bank Corp NYInsider Trading Policy (the "Insider Trading Policy") that applies to all directors, officers, employees and certain other persons. The Insider Trading Policy is designed to promote compliance with insider trading laws, rules and regulations with respect to the purchase, sale and/or other dispositions of the Company's securities, as well as the applicable rules and regulations of The Nasdaq Stock Market, LLC. The Insider Trading Policy addresses the implementation of certain trading blackout periods in the Company's securities (including common stock, restricted stock, restricted stock units, options, warrants and any other securities that the Company may issue) for covered persons. A copy of the Insider Trading Policy is filed as Exhibit 19 to this 2024 Form 10-K.

Item 11.
Executive Compensation

The information required by this Item 11 is incorporated herein by reference to the Company's Proxy Statement (Schedule 14A) for its 2025 Annual Meeting of Shareholders to be filed with the SEC within 120 days of the Company's fiscal year-end.

43
Index
Item 12.
Security Ownership of Certain Beneficial Owners and Management and Related Stockholder Matters

The following table provides information, as of December 31, 2024, regarding securities authorized for issuance under TrustCo's equity compensation plans.

Plan category

Number of
securities to
be
issued upon
exercise of
outstanding
options, warrants
and rights
(a)


Weighted-average
exercise price of
outstanding
options, warrants
and rights
(b)


Number of
securities
remaining
available for
future
issuance under
equity
compensation
plans
(excluding
securities
reflected
in column (a))
(c)
Equity compensation plans approved by security holders


8,036
(1)
$
32.15



166,075
(2)
Equity compensation plan not approved by security holders


N/A
N/A



N/A
Total


8,036
(1)
$
32.15



166,075
(2)

(1)
Represents stock option awards outstanding and exercisable as of December 31, 2024.
(2)
Represents shares of common stock issuable pursuant to the TrustCo Bank Corp NY Amended and Restated 2019 Equity Incentive Plan.

The additional information required by this Item 12 is incorporated herein by reference to the Company's Proxy Statement (Schedule 14A) for its 2025 Annual Meeting of Shareholders to be filed with the SEC within 120 days of the Company's fiscal year-end. Additional information concerning the Company's equity compensation plans is set forth in Part II, Item 5 hereof.

Item 13.
Certain Relationships, and Related Transactions, and Director Independence

The information required by this Item 13 is incorporated herein by reference to the Company's Proxy Statement (Schedule 14A) for its 2025 Annual Meeting of Shareholders to be filed with the SEC within 120 days of the Company's fiscal year-end.

Item 14.
Principal Accountant Fees and Services

The information required by this Item 14 is incorporated herein by reference to the Company's Proxy Statement (Schedule 14A) for its 2025 Annual Meeting of Shareholders to be filed with the SEC within 120 days of the Company's fiscal year-end.

Our independent registered public accounting firm is Crowe LLP, Boston, Massachusetts, PCAOB Firm ID: 173

PART IV

Item 15.
Exhibits, and Financial Statement Schedules

The following financial statements of TrustCo and its consolidated subsidiaries, and the accountants'report thereon are filed as a part of this report.

Consolidated Statements of Condition -- December 31, 2024 and 2023.

Consolidated Statements of Income -- Years Ended December 31, 2024, 2023 and 2022.

44
Index
Consolidated Statements of Comprehensive Income -- Years Ended December 31, 2024, 2023 and 2022.

Consolidated Statements of Changes in Shareholders' Equity -- Years Ended December 31, 2024, 2023 and 2022.

Consolidated Statements of Cash Flows -- Years Ended December 31, 2024, 2023 and 2022.

Notes to Consolidated Financial Statements.

Financial Statement Schedules

Not Applicable. All required schedules for TrustCo and its subsidiaries have been included in the consolidated financial statements or related notes thereto.

Supplementary Financial Information

Summary of Unaudited Quarterly Financial Information for the years ended December 31, 2024 and 2023.

Exhibits
Exhibit
No.
Description


Amended and Restated Certificate of Incorporation of TrustCo Bank Corp NY, as amended, incorporated by reference to Exhibit 3.1 to TrustCo Bank Corp NY's Quarterly Report on Form 10-Q, filed August 5, 2021.


Amended and Restated Bylaws of TrustCo Bank Corp NY, dated October 17, 2023, incorporated by reference to Exhibit 3.1 to TrustCo Bank Corp NY's Current Report on Form 8-K, filed October 17, 2023.


Description of Capital Stock, incorporated by reference to Exhibit 4(a) to TrustCo Bank Corp NY's Annual Report on Form 10-K, filed March 11, 2024.


Amended and Restated Trust For Deferred Benefits Provided under Employment Agreements of Trustco Bank, National Association and TrustCo Bank Corp NY, dated September 18, 2001 incorporated by reference to Exhibit 10(b) to TrustCo Bank Corp NY's Annual Report on Form 10-K for the year ended December 31, 2001, filed March 25, 2002.

45
Index
Amended and Restated Trust Under Non-Qualified Deferred Compensation Plans of Trustco Bank, National Association and TrustCo Bank Corp NY, dated September 18, 2001, incorporated by reference to Exhibit 10(c) to TrustCo Bank Corp NY's Annual Report on Form 10-K, for the year ended December 31, 2001 filed March 25, 2002.


Amended and Restated Trustco Bank and TrustCo Bank Corp NY Supplemental Retirement Plan, effective as of January 1, 2008, incorporated by reference to Exhibit 99.6 to TrustCo Bank Corp NY's Current Report on Form 8-K filed December 22, 2008.


Second Amended and Restated TrustCo Bank Corp NY Performance Bonus Plan, effective as of January 1, 2008, incorporated by reference to Exhibit 99.5 to TrustCo Bank Corp NY's Current Report on Form 8-K filed December 22, 2008.


Amendment No. 1 to Second Amended and Restated TrustCo Bank Corp NY Performance Bonus Plan, effective January 1, 2010, incorporated by reference to Exhibit 99(e) to TrustCo Bank Corp NY's Current Report on Form 8-K filed January 19, 2010.


Form of 2008 Amended and Restated Employment Agreement between Trustco Bank, TrustCo Bank Corp NY and Robert J. McCormick, Robert T. Cushing, and Scot R. Salvador, effective as of January 1, 2008, incorporated by reference to Exhibit 99.8 to TrustCo Bank Corp NY's Current Report on Form 8-K filed December 22, 2008.


Second Amended and Restated TrustCo Bank Corp NY Directors Performance Bonus Plan, effective as of January 1, 2008, incorporated by reference to Exhibit 99.4 to TrustCo Bank Corp NY's Current Report on Form 8-K filed December 22, 2008.


Amendment No. 1, Second Amended and Restated TrustCo Bank Corp NY Directors Performance Bonus Plan, effective January 1, 2010, incorporated by reference to Exhibit 99(f) to TrustCo Bank Corp NY's Current Report on Form 8-K filed January 19, 2010.


Service Bureau Processing Agreement by and between Fidelity Information Services, Inc. and TrustCo Bank Corp NY dated March 3, 2004 incorporated by reference to Exhibit 10(b) to TrustCo Bank Corp NY's Quarterly Report on Form 10-Q, for the quarter ended March 31, 2004.


Agreement between Fiserv Solutions, Inc. and Trustco Bank, National Association, dated November 14, 2001 incorporated by reference to Exhibit 10(o) to TrustCo Bank Corp NY's Annual Report on Form 10-K, for the year ended December 31, 2001.


Restatement of Trustco Bank Senior Incentive Plan, effective as of January 1, 2008, incorporated by reference to Exhibit 99.9 to TrustCo Bank Corp NY's Current Report on Form 8-K filed December 22, 2008.


Form of Amendments to 2008 Amended and Restated Employment Agreement between Trustco Bank, TrustCo Bank Corp NY and each of Robert J. McCormick, Robert T. Cushing, and Scot R. Salvador, incorporated by reference to Exhibit 99.1 to TrustCo Bank Corp NY's Current Report on Form 8-K filed March 17, 2009.


First Amendment to Restatement of Trustco Bank Senior Incentive Plan, incorporated by reference to Exhibit 99.2 to TrustCo Bank Corp NY's Current Report on Form 8-K filed November 18, 2009.


Amended and Restated TrustCo Bank Corp NY 2010 Equity Incentive Plan, dated as of March 21, 2017, incorporated by reference to Exhibit 10(a) to TrustCo Bank Corp NY's Current Report on Form 8-K filed March 24, 2017.

Amended and Restated 2010 Directors Equity Incentive Plan dated March 17, 2015, incorporated by reference to Exhibit 10(b) to TrustCo Bank Corp NY's Current Report on Form 8-K filed March 23, 2015.

46
Index
Form of Incentive Stock Option Award Agreement under the TrustCo Bank Corp NY Amended and Restated 2010 Equity Incentive Plan, incorporated by reference to Exhibit 10(a) to TrustCo Bank Corp NY's Current Report on Form 8-K filed November 20, 2015.


Employment Agreement among Trustco Bank, TrustCo Bank Corp NY And Robert M. Leonard, effective November 19, 2013, incorporated by reference to Exhibit 10(a) to TrustCo Bank Corp NY's Current Report on Form 8-K filed November 25, 2013.


Performance-Based Stock Appreciation Unit Agreement dated as of January 21, 2014, incorporated by reference to Exhibit 10(a) to TrustCo Bank Corp NY's Current Report on Form 8-K filed January 24, 2014.


Trustco Bank Executive Officer Incentive Plan (Amended and Restated as of February 16, 2016), incorporated by reference to Exhibit 10(a) to TrustCo Bank Corp NY's Form 8-K filed February 17, 2016.


Amended and Restated TrustCo Bank Corp NY Executive Medical Reimbursement Plan, incorporated by reference to Exhibit 10.1 to TrustCo Bank Corp NY's Current Report on Form 10-Q, filed August 8, 2022.


Consulting Agreement between TrustCo Bank Corp NY and Robert T. Cushing effective December 22, 2017, incorporated by reference to Exhibit 10.1 to TrustCo Bank Corp NY's Current Report on Form 8-K filed November 22, 2017.


Form of Employment Agreement between TrustCo Bank Corp NY and each of Kevin M. Curley and Michael M. Ozimek, effective December 18, 2018, incorporated by reference to Exhibit 10(a) to TrustCo Bank Corp NY's Current Report on Form 8-K filed December 18, 2018.


TrustCo Bank Corp NY Amended and Restated 2019 Equity Incentive Plan, incorporated by reference to the Appendix to the additional definitive proxy soliciting material on Schedule 14A filed on April 26, 2023.

47
Index
Form of 2020 Performance Share Award Agreement under the TrustCo Bank Corp NY 2019 Equity Incentive Plan, incorporated by reference to Exhibit 10(a) to TrustCo Bank Corp NY's Current Report on Form 8-K, filed November 18, 2020.


Form of 2020 Restricted Stock Unit Agreement under the TrustCo Bank Corp NY 2019 Equity Incentive Plan, incorporated by reference to Exhibit 10(b) to TrustCo Bank Corp NY's Current Report on Form 8-K, filed November 18, 2020.


Form of 2020 Directors Restricted Stock Unit Agreement under the TrustCo Bank Corp NY 2019 Equity Incentive Plan, incorporated by reference to Exhibit 10(c) to TrustCo Bank Corp NY's Current Report on Form 8-K, filed November 18, 2020.


Form of 2022 Performance Share Award Agreement under the TrustCo Bank Corp NY 2019 Equity Incentive Plan, incorporated by reference to Exhibit 10(a) to TrustCo Bank Corp NY's Current Report on Form 8-K, filed November 16, 2022.


Form of 2022 Restricted Stock Unit Agreement under the TrustCo Bank Corp NY 2019 Equity Incentive Plan, incorporated by reference to Exhibit 10(b) to TrustCo Bank Corp NY's Current Report on Form 8-K, filed November 16, 2022.


Form of 2023 Performance Share Award Agreement under the Amended and Restated TrustCo Bank Corp NY 2019 Equity Incentive Plan, incorporated by reference to Exhibit 10(a) to TrustCo Bank Corp NY's Current Report on Form 8-K, filed November 24, 2023.


Form of 2023 Restricted Stock Unit Agreement under the Amended and Restated TrustCo Bank Corp NY 2019 Equity Incentive Plan, incorporated by reference to Exhibit 10(b) to TrustCo Bank Corp NY's Current Report on Form 8-K, filed November 24, 2023.


10(ee)*†
Form of 2024 Performance Share Award Agreement under the Amended and Restated TrustCo Bank Corp NY 2019 Equity Incentive Plan.


10(ff)*†
Form of 2024 Restricted Stock Unit Agreement under the Amended and Restated TrustCo Bank Corp NY 2019 Equity Incentive Plan.


10(gg)*†
Form of 2024 Director Restricted Stock Unit Agreement under the Amended and Restated TrustCo Bank Corp NY 2019 Equity Incentive Plan.


13†
Portions of Annual Report to Security Holders of TrustCo for the year ended December 31, 2024.


19†
TrustCo Bank Corp NY Insider Trading Policy

48
Index
21
List of Subsidiaries of TrustCo.


23
Consent of Independent Registered Public Accounting Firm.


24
Power of Attorney.


31(i)(a)
Rule 13a-14(a)/15d-14(a) Certification of Robert J. McCormick, principal executive officer.


31(i)(b)
Rule 13a-14(a)/15d-14(a) Certification of Michael M. Ozimek, principal financial officer.


32
Section 1350 Certifications of Robert J. McCormick, principal executive officer and Michael M. Ozimek, principal financial officer.


97
Executive Compensation Clawback Policy, incorporated by reference to Exhibit 97 to TrustCo Bank Corp NY's Annual Report on Form 10-K, for the year ended December 31, 2023 filed March 11, 2024.


101
Sections of the Annual Report on Form 10-K for the year ended December 31, 2024, formatted in XBRL (eXtensible Business Reporting Language), submitted in the following files


101.INS
XBRL Instance Document.


101.SCH
Inline XBRL Taxonomy Extension Schema Document.


101.CAL
Inline XBRL Taxonomy Extension Calculation Linkbase Document.


101.DEF
Inline XBRL Taxonomy Extension Definition Linkbase Document.


101.LAB
Inline XBRL Taxonomy Extension Label Linkbase Document.


101.PRE
Inline XBRL Taxonomy Extension Presentation Linkbase Document.


104
Cover Page Interactive Data File (formatted as Inline XBRL and Contained in Exhibit 101)

*
Management contract or compensatory plan or arrangement.

Filed herewith.

Item 16.
Form 10-K Summary

Not applicable.

49
Index
SIGNATURES

Pursuant to the requirements of Section 13 or 15(d) of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned, thereunto duly authorized.

TrustCo Bank Corp NY
Date: March 14, 2025
By:
/s/ Michael M. Ozimek
Michael M. Ozimek
Executive Vice President and Chief Financial Officer

Signatures

Pursuant to the requirements of the Securities Exchange Act of 1934, this report has been signed below by the following persons on behalf of the registrant and in the capacities and on the dates indicated.

Name and Signature

Title

Date


/s/ Robert J. McCormick


Robert J. McCormick

Chairman, President and Chief Executive Officer
(principal executive officer)

March 14, 2025


/s/ Michael M. Ozimek


Michael M. Ozimek

Executive Vice President and Chief Financial Officer
(principal financial and accounting officer)

March 14, 2025


*


Steffani Cotugno

Director

March 14, 2025


*


Brian C. Flynn

Director

March 14, 2025


*


Lisa M. Lucarelli

Director

March 14, 2025


*


Thomas O. Maggs

Director

March 14, 2025


*


Anthony J. Marinello

Director

March 14, 2025


*


Curtis N. Powell

Director

March 14, 2025


*


Kimberly A. Russell

Director

March 14, 2025


*


Frank B. Silverman

Director

March 14, 2025

50
Index
* By:
/s/ Robert M. Leonard
Robert M. Leonard, as Agent
Pursuant to Power of Attorney



51