Regions Financial Corporation: 10-K Risk Factor Changes

In the course of our business, we may foreclose on and take title to real estate. As a result, we could be subject to environmental liabilities with respect to these properties. We may be held liable to a governmental entity or to third parties for property damage, personal injury, investigation and clean-up costs incurred by these parties in connection with environmental contamination or may be required to investigate or clean up hazardous or toxic substances or chemical releases at a property. The costs associated with investigation or remediation activities could be substantial. In addition, if we are the owner or former owner of a contaminated site, we may be subject to common law claims by third parties based on damages and costs resulting from environmental contamination emanating from the property. If we become subject to significant environmental liabilities, our business, financial condition or results of operations could be adversely affected.

In the course of our business, we may foreclose on and take title to real estate. As a result, we could be subject to environmental liabilities with respect to these properties. We may be held liable to a governmental entity or to third parties for property damage, personal injury, investigation and clean-up costs incurred by these parties in connection with environmental contamination or may be required to investigate or clean up hazardous or toxic substances or chemical releases at a property. The costs associated with investigation or remediation activities could be substantial. In addition, if we are the owner or former owner of a contaminated site, we may be subject to common law claims by third parties based on damages and costs resulting from environmental contamination emanating from the property. If we become subject to significant environmental liabilities, our business, financial condition or results of operations could be adversely affected. 32 32 32 32 32 32 Table of Contents Table of Contents Table of Contents

Our ability to attract and retain customers and highly-skilled management and employees is impacted by our reputation. A negative public opinion of us and our business can result from any number of activities, including our lending practices, corporate governance and regulatory compliance, acquisitions and actions taken by community organizations in response to these activities. Furthermore, negative publicity regarding us as an employer could have an adverse impact on our reputation, especially with respect to matters of diversity, pay equity and workplace harassment. Significant harm to our reputation, or the reputation of any company, could also arise as a result of regulatory or governmental actions, litigation and the activities of our customers, other participants in the financial services industry or our contractual counterparties, such as our service providers and vendors. In addition, a cybersecurity event affecting us or our customers’ data could have a negative impact on our reputation and customer confidence in us and our cybersecurity practices. Damage to our reputation could also adversely affect our credit ratings and access to the capital markets. Additionally, the widespread use of social media platforms by virtually every segment of society facilitates the rapid dissemination of information or misinformation, which magnifies the potential harm to our reputation.

Our ability to attract and retain customers and highly-skilled management and employees is impacted by our reputation. A negative public opinion of us and our business can result from any number of activities, including our lending practices, corporate governance and regulatory compliance, acquisitions and actions taken by community organizations in response to these activities. Furthermore, negative publicity regarding us as an employer could have an adverse impact on our reputation, especially with respect to matters of diversity, pay equity and workplace harassment. 33 33 33 33 33 33 Table of Contents Table of Contents Table of Contents Significant harm to our reputation, or the reputation of any company, could also arise as a result of regulatory or governmental actions, litigation and the activities of our customers, other participants in the financial services industry or our contractual counterparties, such as our service providers and vendors. In addition, a cybersecurity event affecting us or our customers’ data could have a negative impact on our reputation and customer confidence in us and our cybersecurity practices. Damage to our reputation could also adversely affect our credit ratings and access to the capital markets. Additionally, the widespread use of social media platforms by virtually every segment of society facilitates the rapid dissemination of information or misinformation, which magnifies the potential harm to our reputation.

During periods of market stress or illiquidity, our credit risk may be further increased when we fail to realize the fair value of the collateral we hold; collateral is liquidated at prices that are not sufficient to recover the full amount owed to us; or counterparties are unable to post collateral, whether for operational or other reasons. Furthermore, disputes with counterparties concerning the valuation of collateral may increase in times of significant market stress, volatility or illiquidity, and we could suffer losses during these periods if we are unable to realize the fair value of collateral or to manage declines in the value of collateral.

During periods of market stress or illiquidity, our credit risk may be further increased when we fail to realize the fair value of the collateral we hold; collateral is liquidated at prices that are not sufficient to recover the full amount owed to us; or counterparties are unable to post collateral, whether for operational or other reasons. Furthermore, disputes with counterparties concerning the valuation of collateral may increase in times of significant market stress, volatility or illiquidity, and we could suffer losses during these periods if we are unable to realize the fair value of collateral or to manage declines in the value of collateral. 26 26 26 26 26 26 Table of Contents Table of Contents Table of Contents

Our accounting policies and assumptions are fundamental to our reported financial condition and results of operations. Our management must exercise judgment in selecting and applying many of these accounting policies and methods so they comply with GAAP and reflect management’s judgment of the most appropriate manner to report our financial condition and results. In some cases, management must select the accounting policy or method to apply from two or more alternatives, any of which may be reasonable under the circumstances, yet may result in us reporting materially different results than would have been reported under a different alternative. Certain accounting policies are critical to presenting our reported financial condition and results of operations. They require management to make difficult, subjective or complex judgments about matters that are uncertain. Materially different amounts could be reported under different conditions or using different assumptions or estimates. The Company’s critical accounting estimates include: the allowance for credit losses; fair value measurements; intangible assets; mortgage servicing rights; and income taxes. Because of the uncertainty of estimates involved in these matters, we may be required to do one or more of the following: significantly increase the allowance for credit losses and/or sustain credit losses that are significantly higher than the allowance provided; recognize significant losses on assets carried at fair value; recognize significant impairment on our goodwill, other intangible assets or deferred tax asset balances; significantly increase our accrued income taxes; or 40 40 40 40 40 40 Table of Contents Table of Contents Table of Contents significantly decrease the value of our MSRs. Any of these actions could adversely affect our reported financial condition and results of operations.

Our accounting policies and assumptions are fundamental to our reported financial condition and results of operations. Our management must exercise judgment in selecting and applying many of these accounting policies and methods so they comply with GAAP and reflect management’s judgment of the most appropriate manner to report our financial condition and results. In some cases, management must select the accounting policy or method to apply from two or more alternatives, any of which may be reasonable under the circumstances, yet may result in us reporting materially different results than would have been reported under a different alternative. Certain accounting policies are critical to presenting our reported financial condition and results of operations. They require management to make difficult, subjective or complex judgments about matters that are uncertain. Materially different amounts could be reported under different conditions or using different assumptions or estimates. The Company’s critical accounting estimates include: the allowance for credit losses; fair value measurements; intangible assets; residential MSRs; and income taxes. Because of the uncertainty of estimates involved in these matters, we may be required to do one or more of the following: significantly increase the allowance for credit losses and/or sustain credit losses that are significantly higher than the allowance provided; recognize significant losses on assets carried at fair value; recognize significant impairment on our goodwill, other intangible assets or deferred tax asset balances; significantly increase our accrued income taxes; or significantly decrease the value of our residential MSRs. Any of these actions could adversely affect our reported financial condition and results of operations. 39 39 39 39 39 39 Table of Contents Table of Contents Table of Contents

•We are, and may in the future be, subject to litigation, investigations and governmental proceedings that may result in liabilities adversely affecting our financial condition, business or results of operations or in reputational harm. •We are subject to extensive governmental regulation, which could have an adverse impact on our operations and our business model. 22 22 22 22 22 22 Table of Contents Table of Contents Table of Contents •We are subject to a variety of risks in connection with any sale of loans we may conduct. •We may be subject to more stringent capital and liquidity requirements. •Rulemaking changes and regulatory initiatives implemented by the CFPB may result in higher regulatory and compliance costs that may adversely affect our results of operations. •We are subject to numerous laws designed to protect consumers, including the CRA and fair lending laws, and a failure to comply with these laws could lead to a wide variety of penalties and other sanctions. •We may not be able to complete future acquisitions, may not be successful in realizing the benefits of any future acquisitions that are completed or may choose not to pursue acquisition opportunities we might find beneficial. •Increases in FDIC insurance assessments may adversely affect our earnings. •Unfavorable results from ongoing stress analyses may adversely affect our ability to retain customers or compete for new business opportunities. •We are a holding company and depend on our subsidiaries for dividends, distributions and other payments. •We may not pay dividends on shares of our capital stock. •Anti-takeover and banking laws and certain agreements and charter provisions may adversely affect share value. •Our amended and restated bylaws designate (i) the Court of Chancery of the State of Delaware as the sole and exclusive forum for certain types of actions and proceedings that may be initiated by our shareholders and (ii) the federal district courts of the United States as the sole and exclusive forum for any action asserting a cause of action arising under the Securities Act, which could limit our shareholders’ ability to obtain a favorable judicial forum for disputes with our company or our company’s directors, officers or other employees. •We face substantial legal and operational risks in our safeguarding and other processing of personal information. •Differences in regulation can affect our ability to compete effectively.

•We are, and may in the future be, subject to litigation, investigations and governmental proceedings that may result in liabilities adversely affecting our financial condition, business or results of operations or in reputational harm. •We are subject to extensive governmental regulation, which could have an adverse impact on our operations. •We are subject to a variety of risks in connection with any sale of loans we may conduct. •We may be subject to more stringent capital and liquidity requirements. •Rulemaking changes and regulatory initiatives implemented by the CFPB may result in higher regulatory and compliance costs that may adversely affect our results of operations. •We may not be able to complete future acquisitions, may not be successful in realizing the benefits of any future acquisitions that are completed or may choose not to pursue acquisition opportunities we might find beneficial. •Increases in FDIC insurance assessments may adversely affect our earnings. •Unfavorable results from ongoing stress analyses may adversely affect our ability to retain customers or compete for new business opportunities. •We are a holding company and depend on our subsidiaries for dividends, distributions and other payments. •We may not pay dividends on shares of our capital stock. •Anti-takeover and banking laws and certain agreements and charter provisions may adversely affect share value. •Our amended and restated bylaws designate (i) the Court of Chancery of the State of Delaware as the sole and exclusive forum for certain types of actions and proceedings that may be initiated by our shareholders and (ii) the federal district courts of the United States as the sole and exclusive forum for any action asserting a cause of action arising under the Securities Act, which could limit our shareholders’ ability to obtain a favorable judicial forum for disputes with our company or our company’s directors, officers or other employees. •We face substantial legal and operational risks in safeguarding personal information. •Differences in regulation can affect our ability to compete effectively.

In deciding whether to extend credit or enter into other transactions with clients and counterparties, we may rely on information furnished by or on behalf of clients and counterparties, including financial statements and other financial information. We also may rely on representations of clients and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors if made available. If this information is 32 32 32 32 32 32 Table of Contents Table of Contents Table of Contents inaccurate, we may be subject to regulatory action, reputational harm or other adverse effects with respect to the operation of our business, our financial condition and our results of operations.

In deciding whether to extend credit or enter into other transactions with clients and counterparties, we may rely on information furnished by or on behalf of clients and counterparties, including financial statements and other financial information. We also may rely on representations of clients and counterparties as to the accuracy and completeness of that information and, with respect to financial statements, on reports of independent auditors if made available. If this information is inaccurate, we may be subject to regulatory action, reputational harm or other adverse effects with respect to the operation of our business, our financial condition and our results of operations.

On January 21, 2025, the U.S. Treasury began taking extraordinary measures to prevent a default on U.S. government debt, which measures are expected to continue until such time as the U.S. Congress increases the debt ceiling. However, it is unclear how long such extraordinary measures will forestall a default in the event of extended Congressional negotiations or inaction. A U.S. government debt default would have material adverse impact on our business and financial performance, including a decrease in the value of Treasury bonds and other government securities held by us, which could negatively impact our capital position and our ability to meet regulatory requirements. Other negative impacts could be volatile capital markets, an adverse impact on the U.S. economy and the U.S. dollar, as well as increased default rates among borrowers in light of increased economic uncertainty. Some of these impacts might occur even in the absence of an actual default but as a consequence of extended political negotiations around the threat of such a default and a government shutdown.

A U.S. government debt default would have material adverse impact on our business and financial performance, including a decrease in the value of Treasury bonds and other government securities held by us, which could negatively impact our capital position and our ability to meet regulatory requirements. Other negative impacts could be volatile capital markets, an adverse impact on the U.S. economy and the U.S. dollar, as well as increased default rates among borrowers in light of increased economic uncertainty. Some of these impacts might occur even in the absence of an actual default but as a consequence of extended political negotiations around the threat of such a default and a government shutdown.

The CFPB has finalized a number of significant rules and introduced new regulatory initiatives, including, without limitation, by way of its enforcement authority and through public statements, that could have a significant impact on our business and the financial services industry more generally. We may also be required to add additional compliance personnel or incur other significant compliance-related expenses. Our business, results of operations or competitive position may be adversely affected as a result. The former U.S. presidential administration called on all regulatory agencies to reduce or eliminate certain fees relating to a number of services, including banking services and during this same time, the CFPB launched an initiative to reduce the amounts and types of fees financial institutions may charge, including the issuance of final rules that would significantly reduce the permissible amount of credit card late fees and that would impose certain requirements on overdraft fees unless the IDI limits the overdraft fee. While the new administration may impact the government's position on fees, the changes proposed by the former administration could affect the Company’s ability or willingness to provide certain products or services, necessitate changes to the Company’s business practices or have an adverse effect on our results of operations.

Since its formation, the CFPB has finalized a number of significant rules and introduced new regulatory initiatives, including, without limitation, by way of its enforcement authority and through public statements, that could have a significant impact on our business and the financial services industry more generally. We may also be required to add additional compliance personnel or incur other significant compliance-related expenses. Our business, results of operations or competitive position may be adversely affected as a result. In addition, the current U.S. presidential administration has called on all regulatory agencies to reduce or eliminate certain fees relating to a number of services, including banking services. At the same time, the CFPB launched an initiative to reduce the amounts and types of fees financial institutions may charge, including the issuance of a proposed rule that would significantly reduce the permissible amount of credit card late fees. Such changes could affect the Company’s ability or willingness to provide certain products or services, necessitate changes to the Company’s business practices or have an adverse effect on our results of operations.

•We are subject to environmental, social and governance risks that could adversely affect our business, reputation and the trading price of our common stock. •Damage to our reputation could significantly harm our businesses.

We are a legal entity separate and distinct from our banking and other subsidiaries. Our principal source of cash flow, including cash flow to pay dividends to our shareholders and principal and interest on our outstanding debt, is dividends from Regions Bank. There are statutory and regulatory limitations on the payment of dividends by Regions Bank to us, as well as by us to our shareholders. Regulations of both the Federal Reserve and the State of Alabama affect the ability of Regions Bank to pay dividends and other distributions to us and to make loans to the holding company. If Regions Bank is unable to make dividend payments to us and sufficient cash or liquidity is not otherwise available, we may not be able to make dividend payments to our common and preferred shareholders or principal and interest payments on our outstanding debt. See the “Shareholders’ Equity” section of Item 7. “Management’s Discussion and Analysis of Financial Condition and Results of Operations” of this Annual Report on Form 10-K. In addition, our right to participate in a distribution of assets upon a subsidiary’s liquidation or reorganization is subject to the prior claims of creditors of that subsidiary, except to the extent that any of our claims as a creditor of such subsidiary may be recognized. As a result, shares of our capital stock are effectively subordinated to all existing and future liabilities and obligations of our subsidiaries. At December 31, 2024, our subsidiaries’ total deposits and borrowings were approximately $130.6 billion. 37 37 37 37 37 37 Table of Contents Table of Contents Table of Contents

We are a legal entity separate and distinct from our banking and other subsidiaries. Our principal source of cash flow, including cash flow to pay dividends to our shareholders and principal and interest on our outstanding debt, is dividends from Regions Bank. There are statutory and regulatory limitations on the payment of dividends by Regions Bank to us, as well as by us to our shareholders. Regulations of both the Federal Reserve and the State of Alabama affect the ability of Regions Bank to pay dividends and other distributions to us and to make loans to the holding company. If Regions Bank is unable to make 36 36 36 36 36 36 Table of Contents Table of Contents Table of Contents dividend payments to us and sufficient cash or liquidity is not otherwise available, we may not be able to make dividend payments to our common and preferred shareholders or principal and interest payments on our outstanding debt. See the “Shareholders’ Equity” section of Item 7. “Management’s Discussion and Analysis of Financial Condition and Results of Operations” of this Annual Report on Form 10-K. In addition, our right to participate in a distribution of assets upon a subsidiary’s liquidation or reorganization is subject to the prior claims of creditors of that subsidiary, except to the extent that any of our claims as a creditor of such subsidiary may be recognized. As a result, shares of our capital stock are effectively subordinated to all existing and future liabilities and obligations of our subsidiaries. At December 31, 2023, our subsidiaries’ total deposits and borrowings were approximately $128.3 billion.

Our businesses are subject to complex and evolving laws and regulations governing the privacy and protection of personal information of individuals. Individuals whose personal information may be protected by law can include our customers (and in some cases our customers’ customers), prospective customers, job applicants, employees, and the employees of our vendors, service providers and other third parties. Complying with the laws, rules and regulations applicable to our disclosure, collection, use, sharing and storage of personal information can increase operating costs, impact the development of new products or services, and reduce operational efficiency. Any mishandling or misuse of personal information by us or a third party affiliated with us could expose us to litigation or regulatory fines, penalties or other sanctions. Additional risks could arise from our or third parties’ failure to provide adequate disclosure or transparency to our customers about the personal information collected from them and the use of such information; to receive, document and honor the privacy preferences expressed by our customers; to protect personal information from unauthorized disclosure; or to maintain proper training on privacy practices for all employees or third parties who have access to personal information. Concerns regarding the effectiveness of our measures to safeguard personal information, or even the perception that those measures are inadequate, could cause us to lose existing or potential clients and customers, and thereby reduce our revenues. Furthermore, any failure or perceived failure by us to comply with applicable privacy or data protection laws, rules and regulations may subject us to inquiries, examinations and investigations that could result in requirements to modify or cease certain operations or practices, significant liabilities or regulatory fines, penalties or other sanctions. Any of these could damage our reputation and otherwise adversely affect our businesses. In recent years, well-publicized incidents involving the inappropriate collection, use, sharing, storage or other processing of personal information have led to expanded governmental scrutiny of practices relating to the safeguarding and other processing of personal information by companies. That scrutiny has in some cases resulted in, and could in the future lead to, the adoption of stricter laws, rules and regulations relating to the collection, use, sharing, storage and other processing of personal information. We will likely be subject to new and evolving data privacy laws in the U.S. and abroad, which could result in additional costs of compliance, litigation, regulatory fines and enforcement actions. These types of laws, rules and regulations could prohibit or significantly restrict financial services firms such as us from sharing information among affiliates or with third parties such as vendors or service providers, and thereby increase compliance costs, or could restrict our use of personal information when developing or offering products or services to customers. These restrictions could also inhibit our 39 39 39 39 39 39 Table of Contents Table of Contents Table of Contents development or marketing of certain products or services, or increase the costs of offering them to customers. For more information concerning our legal and regulatory obligations with respect to privacy and cybersecurity, please see the “Privacy and Cybersecurity” discussion within Item 1. “Business” and the “Technology Risks” discussion within in Item 1. “Risk Factors.”

Our businesses are subject to complex and evolving laws and regulations governing the privacy and protection of personal information of individuals. Individuals whose personal information may be protected by law can include our customers (and in some cases our customers’ customers), prospective customers, job applicants, employees, and the employees of our vendors and third parties. Complying with the laws, rules and regulations applicable to our disclosure, collection, use, sharing and storage of personal information can increase operating costs, impact the development of new products or services, and reduce operational efficiency. Any mishandling or misuse or personal information by us or third party affiliated with us could expose us to litigation or regulatory fines, penalties or other sanctions. Additional risks could arise from our or third parties’ failure to provide adequate disclosure or transparency to our customers about the personal information collected from them and the use of such information; to receive, document and honor the privacy preferences expressed by our customers; to protect personal information from unauthorized disclosure; or to maintain proper training on privacy practices for all employees or third parties who have access to personal information. Concerns regarding the effectiveness of our measures to safeguard personal information, or even the perception that those measures are inadequate, could cause us to lose existing or potential clients and customers, and thereby reduce our revenues. Furthermore, any failure or perceived failure by us to comply with applicable privacy or data protection laws, rules and regulations may subject it to inquiries, examinations and investigations that could result in requirements to modify or cease certain operations or practices, significant liabilities or regulatory fines, penalties or other sanctions. Any of these could damage our reputation and otherwise adversely affect our businesses. In recent years, well-publicized incidents involving the inappropriate collection, use, sharing or storage of personal information have led to expanded governmental scrutiny of practices relating to the safeguarding of personal information by companies. That scrutiny has in some cases resulted in, and could in the future lead to, the adoption of stricter laws, rules and regulations relating to the collection, use, sharing and storage of personal information. We will likely be subject to new and evolving data privacy laws in the U.S. and abroad, which could result in additional costs of compliance, litigation, regulatory fines and enforcement actions. These types of laws, rules and regulations could prohibit or significantly restrict financial services firms such as us from sharing information among affiliates or with third parties such as vendors, and thereby increase compliance costs, or could restrict our use of personal data when developing or offering products or services to customers. 38 38 38 38 38 38 Table of Contents Table of Contents Table of Contents These restrictions could also inhibit our development or marketing of certain products or services, or increase the costs of offering them to customers.

•Our businesses have been, and may continue to be, adversely affected by conditions in the financial markets and economic conditions generally. •Fluctuations in market interest rates, including the level and shape of the yield curve, may adversely affect our performance. •Transitions away from and the replacement of benchmark rates could adversely impact our business, financial condition and results of operations.

Aggressive actions by hostile governments or groups, including armed conflict or intensified cyber-attacks, could expand in unpredictable ways by drawing in other countries or escalating into full-scale war with potentially catastrophic consequences, particularly if one or more of the combatants possess nuclear weapons. Depending on the scope of the conflict, the hostilities could result in worldwide economic disruption, heightened volatility in financial markets, severe declines in asset values, disruption of global trade and supply chains and diminished consumer, business and investor confidence. Instability in geopolitical matters could have a material adverse effect on our results of operations and financial condition. The macroeconomic environment in the United States is susceptible to global events and volatility in financial markets. For example, trade negotiations between the United States and other nations remain uncertain and could adversely impact economic and market conditions for our and our clients and counterparties. Global political and military conflicts, including the ongoing conflicts in the Ukraine and the Middle East, present destabilizing forces, including higher and more volatile commodity and food prices, which may cause international and domestic economic deterioration. Financial markets may be adversely affected by the current or anticipated impact of military conflicts, including the conflicts in the Ukraine and the Middle East, terrorism or other geopolitical events (including China-Taiwan and U.S.-China relations), which could cause higher inflation. Any of the above consequences could have significant negative effects on the U.S. economy, and, as a result, our operations and earnings. We could also experience more numerous and aggressive cyber-attacks launched by or under the sponsorship of one or more of the adversaries in such a conflict.

Aggressive actions by hostile governments or groups, including armed conflict or intensified cyber-attacks, could expand in unpredictable ways by drawing in other countries or escalating into full-scale war with potentially catastrophic consequences, particularly if one or more of the combatants possess nuclear weapons. Depending on the scope of the conflict, the hostilities could result in worldwide economic disruption, heightened volatility in financial markets, severe declines in asset values, disruption of global trade and supply chains and diminished consumer, business and investor confidence. Instability in geopolitical matters could have a material adverse effect on our results of operations and financial condition. The macroeconomic environment in the United States is susceptible to global events and volatility in financial markets. For example, trade negotiations between the United States and other nations remain uncertain and could adversely impact economic and market conditions for our and our clients and counterparties. The wars in the Ukraine, Israel and the Gaza Strip presents destabilizing forces, including higher and more volatile commodity and food prices, which may cause international and domestic economic deterioration. Financial markets may be adversely affected by the current or anticipated impact of military conflict, including the wars in the Ukraine, Israel and the Gaza Strip, terrorism or other geopolitical events. This could magnify 31 31 31 31 31 31 Table of Contents Table of Contents Table of Contents inflationary pressure resulting from the pandemic and other sources and extend any prolonged period of higher inflation. Any of the above consequences could have significant negative effects on the U.S. economy, and, as a result, our operations and earnings. We could also experience more numerous and aggressive cyber-attacks launched by or under the sponsorship of one or more of the adversaries in such a conflict.

We are subject to extensive state and federal regulation, supervision and examination governing almost all aspects of our operations, which limits the businesses in which we may permissibly engage. The laws and regulations governing our business are intended primarily for the protection of our depositors, our customers, the FDIC's DIF and the banking financial system, not our shareholders or other creditors. These laws and regulations govern a variety of matters, including certain debt obligations, changes in control, maintenance of adequate capital, consumer protection and general business operations and financial condition (including permissible types, amounts and terms of loans and investments, the amount of reserves against deposits, restrictions on dividends and repurchases of our capital securities, establishment of branch offices and the maximum interest rate that may be charged by law). Further, we must obtain approval from our regulators before engaging in many activities, and our regulators have the ability to compel us to, or restrict us from, taking certain actions entirely. There can be no assurance that any regulatory approvals we may require or otherwise seek will be obtained in a timely manner or at all. Regulations affecting banks and other financial institutions face continuous review, frequently change, and the ultimate effect of such changes cannot be predicted. Regulations, laws and guidance may be modified or repealed at any time, and new legislation may be enacted that will affect us, including those resulting from any changes to control of branches of the U.S government, as well as changes in leadership of most federal administrative agencies. We expect the new administration will seek to implement a regulatory reform agenda that is different than that of the preceding administration, impacting the rulemaking, supervision, examination and enforcement priorities of the federal banking agencies. Any changes in any federal and state law, as well as regulations and governmental policies, income tax laws and accounting principles, could affect us in substantial and unpredictable ways, including ways that may adversely affect our business, financial condition or results of operations. Failure to appropriately comply with any such laws, regulations or principles could result in sanctions by regulatory agencies, civil money penalties or damage to our reputation, all of which could adversely affect our business, financial condition or results of operations. Our regulatory capital position is discussed in greater detail in Note 12 "Regulatory Capital Requirements and Restrictions" to the consolidated financial statements of this Annual Report on Form 10-K.

We are subject to extensive state and federal regulation, supervision and examination governing almost all aspects of our operations, which limits the businesses in which we may permissibly engage. The laws and regulations governing our business are intended primarily for the protection of our depositors, our customers, the financial system and the FDIC insurance fund, not our shareholders or other creditors. These laws and regulations govern a variety of matters, including certain debt obligations, changes in control, maintenance of adequate capital, consumer protection and general business operations and financial condition (including permissible types, amounts and terms of loans and investments, the amount of reserves against deposits, restrictions on dividends and repurchases of our capital securities, establishment of branch offices and the maximum interest rate that may be charged by law). Further, we must obtain approval from our regulators before engaging in many activities, and our regulators have the ability to compel us to, or restrict us from, taking certain actions entirely. There can be no assurance that any regulatory approvals we may require or otherwise seek will be obtained in a timely manner or at all. Regulations affecting banks and other financial institutions are undergoing continuous review and frequently change, and the ultimate effect of such changes cannot be predicted. Regulations and laws may be modified or repealed at any time, and new legislation may be enacted that will affect us, including those resulting from any changes to control of branches of the U.S government or leadership of administrative agencies resulting from upcoming elections. Any changes in any federal and state law, as well as regulations and governmental policies, income tax laws and accounting principles, could affect us in substantial and unpredictable ways, including ways that may adversely affect our business, financial condition or results of operations. Failure to appropriately comply with any such laws, regulations or principles could result in sanctions by regulatory agencies, civil money penalties or damage to our reputation, all of which could adversely affect our business, financial condition or results of operations. Our regulatory capital position is discussed in greater detail in Note 12 "Regulatory Capital Requirements and Restrictions" to the consolidated financial statements of this Annual Report on Form 10-K. 34 34 34 34 34 34 Table of Contents Table of Contents Table of Contents

Effective liquidity management is essential for the operation of our business. We require sufficient liquidity to meet customer loan requests, customer deposit maturities/withdrawals, payments on our debt obligations as they come due and other cash commitments under both normal operating conditions and unpredictable circumstances causing industry or general financial market stress. A substantial majority of our assets are loans, which cannot necessarily be called or sold on timeframes short enough to meet these liquidity requirements. In addition, our access to funding sources in amounts adequate to finance our activities on terms that are acceptable to us could be impaired by factors that affect us specifically or the financial services industry or economy generally. Factors that could detrimentally impact our access to liquidity sources include increases in funding costs, a downturn or disruption in financial markets, or unforeseen outflows of cash or collateral (due, for example, to deposit outflows or draws upon loan commitments). Although we have historically been able to meet the liquidity needs of customers as necessary, the ability to do so is not assured, especially if there are large simultaneous withdrawals from deposits or draws upon loan commitments. A failure to maintain adequate liquidity could materially and adversely affect our business, results of operations and financial condition. 26 26 26 26 26 26 Table of Contents Table of Contents Table of Contents

Effective liquidity management is essential for the operation of our business. We require sufficient liquidity to meet customer loan requests, customer deposit maturities/withdrawals, payments on our debt obligations as they come due and other cash commitments under both normal operating conditions and unpredictable circumstances causing industry or general financial market stress. A substantial majority of our assets are loans, which cannot necessarily be called or sold on timeframes short enough to meet these liquidity requirements. In addition, our access to funding sources in amounts adequate to finance our activities on terms that are acceptable to us could be impaired by factors that affect us specifically or the financial services industry or economy generally. Factors that could detrimentally impact our access to liquidity sources include increases in funding costs, a downturn in the geographic markets in which our loans and operations are concentrated, difficult credit markets or unforeseen outflows of cash or collateral, including as a result of unusual effects in the market. Although we have historically been able to meet the liquidity needs of customers as necessary, the ability to do so is not assured, especially if a large number of our depositors seek to withdraw their accounts, regardless of the reason. A failure to maintain adequate liquidity could materially and adversely affect our business, results of operations and financial condition.

Our deposits are insured by the FDIC up to legal limits and, accordingly, we are subject to FDIC deposit insurance assessments. We generally cannot control the amount of assessments we will be required to pay for FDIC insurance. In 2022, 36 36 36 36 36 36 Table of Contents Table of Contents Table of Contents the FDIC adopted a final rule to increase initial base deposit insurance assessment rate schedules by 2 basis points, which began with the first quarterly assessment period of 2023. The final rule requires the revised rates to remain in effect until the DIF reserve ratio meets or exceeds 1.35 percent. In November 2023, the FDIC issued a final rule to implement a special assessment to recoup losses to the DIF associated with bank failures in the first half of 2023. Under the rule, the assessment base for the special assessment is based on an IDI’s estimated uninsured deposits reported as of December 31, 2022, adjusted to exclude the first $5 billion of uninsured deposits. The total amount of the special assessment is to be paid over an initial eight-quarter collection period that began with the invoice for the first quarter of 2024 (received in June 2024) and includes an additional two quarters beyond the initial eight-quarter collection period, at a lower rate. The assessment is subject to change depending on any adjustments to the loss estimate, mergers or failures, or amendments to reported estimated of uninsured deposits. The FDIC may require us to pay higher FDIC assessments than we currently do or may charge additional special assessments or future prepayments if, for example, there are financial institution failures in the future. Any increase in deposit assessments or special assessments may adversely affect our business, financial condition or results of operations. See the “Supervision and Regulation-Deposit Insurance” discussion within Item 1. “Business” and the “Non-Interest Expense” discussion within Item 7. “Management’s Discussion and Analysis of Financial Condition and Results of Operations” of this Annual Report on Form 10-K for additional information related to the FDIC’s deposit insurance assessments applicable to Regions Bank.

Our deposits are insured by the FDIC up to legal limits and, accordingly, we are subject to FDIC deposit insurance assessments. We generally cannot control the amount of assessments we will be required to pay for FDIC insurance. In 2022, the FDIC adopted a final rule to increase initial base deposit insurance assessment rate schedules by 2 basis points, which began with the first quarterly assessment period of 2023. The final rule requires the revised rates to remain in effect until the DIF reserve ratio meets or exceeds 1.35 percent. To recoup losses to the DIF resulting from the bank failures of 2023, the FDIC also adopted a special assessment that will become effective in 2024 and will be collected over eight quarterly assessment periods. The FDIC may require us to pay higher FDIC assessments than we currently do or may charge additional special assessments or future prepayments if, for example, there are financial institution failures in the future. Any increase in deposit assessments or special assessments may adversely affect our business, financial condition or results of operations. See the “Supervision and Regulation-Deposit Insurance” discussion within Item 1. “Business” and the “Non-Interest Expense” discussion within Item 7. “Management’s Discussion and Analysis of Financial Condition and Results of Operations” of this Annual Report on Form 10-K for additional information related to the FDIC’s deposit insurance assessments applicable to Regions Bank.

As of December 31, 2024, consumer residential real estate loans represented approximately 26.5 percent of our total loan portfolio. A general decline in home values would adversely affect the value of collateral securing the residential real estate that we hold, as well as the volume of loan originations and the amount we realize on the sale of real estate loans. Additionally, if insurance obtained by our borrowers is insufficient to cover any losses sustained to the collateral, the decreases in the value of collateral securing our loans as a result of natural disasters or other related events could adversely impact our financial condition and results of operations. If insurance coverage is unavailable to our borrowers due to the reluctance of insurance companies to renew policies covering the collateral or due to other factors, the resulting increase in cost of home ownership 30 30 30 30 30 30 Table of Contents Table of Contents Table of Contents could affect the ability of borrowers to repay loans. These factors could result in higher delinquencies and greater charge-offs in future periods, which could materially adversely affect our business, financial condition or results of operations.

As of December 31, 2023, consumer residential real estate loans represented approximately 26.3% of our total loan portfolio. A general decline in home values would adversely affect the value of collateral securing the residential real estate that we hold, as well as the volume of loan originations and the amount we realize on the sale of real estate loans. These factors could result in higher delinquencies and greater charge-offs in future periods, which could materially adversely affect our business, financial condition or results of operations.

•We are subject to a variety of operational risks, including the risk of fraud or theft by internal or external parties, which may adversely affect our business and results of operations. •We rely on other companies to provide key components of our business infrastructure. •We depend on the accuracy and completeness of information about clients and counterparties. •We are exposed to risk of environmental liability when we take title to property. •We can be negatively affected if we fail to identify and address operational risks associated with the introduction of or changes to products, services and delivery platforms. •Enhanced regulatory and other standards for the oversight of vendors and other service providers can result in higher costs and other potential exposures. •We are, and may in the future be, subject to claims and litigation calling into question our right to use the intellectual property underlying certain technology in our business.

•We are subject to a variety of operational risks, including the risk of fraud or theft by internal or external parties, which may adversely affect our business and results of operations. •We rely on other companies to provide key components of our business infrastructure. •We depend on the accuracy and completeness of information about clients and counterparties. 22 22 22 22 22 22 Table of Contents Table of Contents Table of Contents •We are exposed to risk of environmental liability when we take title to property. •We can be negatively affected if we fail to identify and address operational risks associated with the introduction of or changes to products, services and delivery platforms. •Enhanced regulatory and other standards for the oversight of vendors and other service providers can result in higher costs and other potential exposures.

We are subject to a variety of risks, including reputational risk, associated with environmental, social and governance, or ESG, issues - including differing perspectives on the meaning of the term “ESG.” Regions’ approach to such issues is about operating responsibly and creating shared value to benefit our customers, shareholders, communities, and workforce. These and 33 33 33 33 33 33 Table of Contents Table of Contents Table of Contents our other stakeholders, including federal and state regulators, policy makers, and agencies, often have differing, and sometimes conflicting, priorities and expectations regarding ESG issues that nevertheless must be considered simultaneously. For example, certain federal and state laws, regulations, and directives related to these issues may include provisions that are in conflict, real or perceived, with laws, regulations, and directives in other jurisdictions, which may result in compliance challenges and uncertainty and increased costs to our business. These conflicting views also increase the risk that any action or lack thereof by us on such matters will be perceived negatively by some stakeholders. Failing to comply with expectations and standards, or taking action in conflict with one or multiple of those stakeholders’ expectations, could also lead to loss of business, impacts on our talent management strategy, adverse publicity, an adverse impact on our reputation, customer complaints or public protests. Negative publicity may be driven by adverse news coverage in traditional media and may also be spread more broadly through the use of social media platforms. If our relationships with our customers, vendors and suppliers were to become the subject of such negative publicity, our ability to attract and retain customers and employees, compete effectively and grow our business may be negatively impacted. Additionally, a number of investors (in particular institutional investors who hold and manage substantial equity positions, in some cases in nearly all major U.S. listed companies) consider ESG-related factors in their analysis of the expected risk and return of potential investments. The specific factors considered, as well as the approach to incorporating the factors into a broader investment process, vary by investor and can shift over time. Our failure to align with, or remain aligned with, these priorities may negatively impact the trading price of our common stock.

We are subject to a variety of risks, including reputational risk, associated with environmental, social and governance, or ESG, issues. As a large financial institution with a diverse base of customers, vendors and suppliers, we may face negative publicity based on the identity, practices and perceptions of certain entities with whom we choose to do business. The public holds diverse and potentially conflicting views of those entities, and their activities, including the perceived environmental, social or economic impacts of those entities or of financial institutions’ relationships with those entities. Because we have multiple stakeholders, among them shareholders, customers, employees, federal and state regulatory authorities and political entities, often those stakeholders have differing, and sometimes conflicting, priorities and expectations regarding ESG issues. For example, certain federal and state laws and regulations related to ESG issues may include provisions that conflict with other laws and regulations, which may increase our costs or limit our ability to conduct business in certain jurisdictions. Simultaneous, disparate and divergent sentiments on ESG-related matters from multiple stakeholder groups must be considered. For example, there is an increasing number of state-level anti-ESG initiatives in the U.S. that may conflict with other regulatory requirements or our various stakeholders' expectations. Such divergent, sometimes conflicting views on ESG-related matters increase the risk that any action or lack thereof by us on such matters will be perceived negatively by some stakeholders. Failing to comply with expectations and standards from investors, customers, regulators, policymakers and other stakeholders regarding ESG-related issues, or taking action in conflict with one or another of those stakeholders’ expectations, could also lead to loss of business, adverse publicity, an adverse impact on our reputation, customer complaints or public protests. Negative publicity may be driven by adverse news coverage in traditional media and may also be spread more broadly through the use of social media platforms. If our relationships with our customers, vendors and suppliers were to become the subject of such negative publicity, our ability to attract and retain customers and employees, compete effectively and grow our business may be negatively impacted. Additionally, a growing number of investors (in particular institutional investors who hold and manage substantial equity positions, in some cases in nearly all major U.S. listed companies) are integrating ESG factors into their analysis of the expected risk and return of potential investments. The specific ESG factors considered, as well as the approach to incorporating the factors into a broader investment process, vary by investor and can shift over time. Our failure to align with, or remain aligned with, investors’ ESG-related priorities may negatively impact the trading price of our common stock.

As of December 31, 2024, approximately 9.0 percent of our loan portfolio consisted of investor real estate loans. Commercial real estate loans generally carry large balances and may involve a greater degree of financial and credit risk than other loans. The increased financial and credit risk associated with these types of loans are a result of several factors, including the concentration of principal in a limited number of loans and borrowers, the types of business and collateral, the size of loan balances, the effects of nationwide and regional economic conditions on income-producing properties and businesses and the increased difficulty of evaluating and monitoring these types of loans. Declines in real estate markets or sustained economic downturns increase the risk of credit losses or charge-offs related to our loans or foreclosures on certain real estate properties. The investor real estate loans we make are secured by income-producing properties such as office buildings, retail centers, mixed-use buildings and multi-tenanted light industrial properties. At December 31, 2024, office properties constituted 1.6 percent of our total loan portfolio. The office property segment is undergoing a structural shift given the rise of a remote work environment resulting in heightened vacancies and potentially reduced leasing needs. It is anticipated that this heightened risk environment for the office segment may take several years to resolve. A reduction in the need for office space could result in a reduction in demand for these categories of commercial office and/or in our customers’ ability to repay their loans, which, in turn, may have an adverse effect on our business and results of operation. Furthermore, additional softening in the real estate market in our primary market areas (in particular the South, Midwest, and Texas) could result in an increase in the number of borrowers who default on their loans and a reduction in the value of the collateral securing their loans, which in turn could have an adverse effect on our profitability and asset quality. If we are required to liquidate the collateral securing a loan to satisfy the debt during a period of reduced real estate values, our earnings and shareholders’ equity could be adversely affected. Unexpected decreases in investor real estate prices coupled with slow economic growth and elevated levels of unemployment could drive losses beyond those which are provided for in our allowance for loan losses. We also may incur losses on investor real estate loans due to declines in occupancy rates and rental rates, which may decrease property values and may decrease the likelihood that a borrower may find permanent financing alternatives. Any of these events could increase our costs, require management's time and attention, and have an adverse effect on our business and results of operations. Additionally, if insurance obtained by our borrowers is insufficient to cover any losses sustained to the collateral, the decreases in the value of collateral securing our loans as a result of natural disasters or other related events could adversely impact our financial condition and results of operations. If insurance coverage is unavailable to our borrowers due to the reluctance of insurance companies to renew policies covering the collateral or due to other factors, the resulting increase in cost of investor real estate ownership could affect the ability of borrowers to repay loans. The combination of these factors could result in deterioration in the fundamentals underlying the commercial real estate market and the deterioration in value of some of our loans, as well as the ability of our borrowers to repay the amounts due under their loans.

As of December 31, 2023, approximately 9.0% of our loan portfolio consisted of investor real estate loans. The properties securing income-producing investor real estate loans are typically not fully leased at the origination of the loan. The borrower’s ability to repay the loan is instead dependent upon additional leasing through the life of the loan or the borrower’s successful operation of a business. Continued uncertainty in economic conditions may impair a borrower's business operations and slow the execution of new leases. Such economic conditions may also lead to existing lease turnover. As a result of these factors, vacancy rates for retail, office and industrial space may increase, and hotel occupancy rates may decline. High vacancy and lower occupancy rates could also result in rents falling. The combination of these factors could result in deterioration in the fundamentals underlying the commercial real estate market and the deterioration in value of some of our loans. Any such deterioration could adversely affect the ability of our borrowers to repay the amounts due under their loans. As a result, our business, results of operations or financial condition may also be adversely affected. Specifically, the office property segment, which represents 1.5 percent of our total loan portfolio, is undergoing a structural shift given the rise of a remote work environment resulting in heightened vacancies and potentially reduced leasing needs. It is anticipated that this heightened risk environment for the office segment may take several years to resolve.