UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 10-K

(Mark One)

For the fiscal year ended December 31, 20172021

OR

Commission File Number 001-38139

Byline Bancorp, Inc.

(Exact name of Registrant as specified in its Charter)

Registrant’s telephone number, including area code: (773) (773) 244-7000

Securities registered pursuant to Section 12(b) of the Act: common stock, par value $0.01 per share; Common stock listed on the New York Stock Exchange

Securities registered pursuant to Section 12(g) of the Act: None

Indicate by check mark if the Registrant is a well-known seasoned issuer, as defined in Rule 405 of the Securities Act. YES Yes☐ NO No☒

Indicate by check mark if the Registrant is not required to file reports pursuant to Section 13 or 15(d) of the Act. YES Yes☐ NO No☒

Indicate by check mark whether the Registrant: (1) has filed all reports required to be filed by Section 13 or 15(d) of the Securities Exchange Act of 1934 during the preceding 12 months (or for such shorter period that the Registrant was required to file such reports), and (2) has been subject to such filing requirements for the past 90 days. YES Yes☒ NO No☐

Indicate by check mark whether the Registrant has submitted electronically and posted on its corporate Web site, if any, every Interactive Data File required to be submitted and posted pursuant to Rule 405 of Regulation S-T (§232.405 of this chapter) during the preceding 12 months (or for such shorter period that the Registrant was required to submit and post such files). YES Yes☒ NO No☐

Indicate by check mark if disclosure of delinquent filers pursuant to Item 405 of Regulation S-K (§229.405) is not contained herein, and will not be contained, to the best of Registrant’s knowledge, in definitive proxy or information statements incorporated by reference in Part III of this Form 10-K or any amendment to this Form 10-K. ☐

Indicate by check mark whether the registrant is a large accelerated filer, an accelerated filer, a non-accelerated filer, a smaller reporting company, or an emerging growth company. See the definitions of “large accelerated filer,” “accelerated filer,” “smaller reporting company,” and “emerging growth company” in Rule 12b-2 of the Exchange Act.

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Indicate by check mark whether the registrant has filed a report on and attestation to its management’s assessment of the effectiveness of its internal control over financial reporting under Section 404(b) of the Sarbanes-Oxley Act (15 U.S.C. 7262(b)) by the registered public accounting firm that prepared or issued its audit report ☐

Indicate by check mark whether the Registrant is a shell company (as defined in Rule 12b-2 of the Exchange Act). YES Yes☐ NO No☒

The aggregate market value of the voting and non-voting common equity held by non-affiliates of the Registrant, based on the closing price of the Registrant’s common stock on the New York Stock Exchange on June 30, 2017,2021, was approximately $332,611,295.$585,122,412.

The number of shares of Registrant’s common stock outstanding as of March 29, 20184, 2022 was 29,404,048.37,829,737.

Portions of the Registrant’s Definitive Proxy Statement relating to its 20182022 Annual Meeting of Stockholders, scheduled to be held on June 5, 2018,7, 2022, are incorporated by reference into Part III of this Report.

Table of Contents

i

Special Note Regarding Forward-Looking Statements

Statements contained in this Annual Report on Form 10-K and in other documents we file with or furnish to the Securities and Exchange Commission (“SEC”) that are not historical facts may constitute forward-looking statements“forward-looking statements” within the meaning of the federal securities laws. Forward-lookingU.S. Private Securities Litigation Reform Act of 1995. Any statements include, without limitation, statements concerningabout our expectations, beliefs, plans, estimates, calculations,strategies, predictions, forecasts, objectives or assumptions of future events or performance are not historical facts and projections with respect to the anticipated future performance of the Company and our business.may be forward-looking. These statements are often, but not always, made through the use of words or phrases such as ‘‘may’’, ‘‘might’’, ‘‘should’’, ‘‘could’’, ‘‘predict’’, ‘‘potential’’, ‘‘believe’’, ‘‘expect’’, ‘‘continue’’, ‘‘will’’, ‘‘anticipate’’, ‘‘seek’’, ‘‘estimate’’, ‘‘intend’’, ‘‘plan’’, ‘‘projection’’, ‘‘would’’, ‘‘annualized’’, “target”“anticipates,” “believes,” “expects,” “can,” “could,” “may,” “predicts,” “potential,” “opportunity,” “should,” “will,” “estimate,” “plans,” “projects,” “continuing,” “ongoing,” “expects,” “seeks,” “intends” and ‘‘outlook’’, or the negative version of thosesimilar words or phrases. Accordingly, these statements involve estimates, known and unknown risks, assumptions and uncertainties that could cause actual strategies, actions or results to differ materially from those expressed in such statements, and are not guarantees of future results or other comparable wordsevents or phrasesperformance. Because forward-looking statements are necessarily only estimates of a future strategies, actions or forward-looking nature. Forward-looking statements representresults, based on management’s current beliefsexpectations, assumptions and estimates on the date hereof, and there can be no assurance that actual strategies, actions or results will not differ materially from expectations, regarding future events,readers are cautioned not to place undue reliance on such as our anticipated future financial results, credit quality, liquidity, revenues, expenses, or other financial items, and the impact of business plans and strategies or legislative or regulatory actions.statements.

Our ability to predict results or the actual effects of future plans, strategies or events is inherently uncertain. Factors which could cause actual results or conditions to differ materially from those reflected in forward-looking statements include:

2

These risks and uncertainties should be considered in evaluating any forward-looking statements, and undue reliance should not be placed on such statements. Additional information concerning the Company, including additional factors and risks that could materially affect our business and financial results, are included herein. See Item 1A. “Risk Factors”. Forward-looking statements speak only as of the date they are made. We assume no obligation to update any of these statements in light of new information, future events or otherwise unless required under the federal securities laws.

23

PART I

Item 1. Business.

General

Byline Bancorp, Inc., headquartered in Chicago, Illinois, is a bank holding company and we conduct all our business activities through our subsidiary, Byline Bank, a full service commercial bank, and Byline Bank’s subsidiaries. The words “the Company,” “we,” “Byline,” “our” and “us” refer to Byline Bancorp, Inc. and its consolidated subsidiaries, unless we indicate otherwise.

Through Byline Bank, weWe offer a broad range of banking products and services to small and medium sized businesses, commercial real estate and financial sponsors and to consumers who generally live or work near our branches. During 2021, we began offering online account opening to consumer customers through our website. We also provide trust and wealth management services to our customers. In addition to our traditional commercial banking business, we provide small ticket equipment leasing solutions through Byline Financial Group, a wholly-owned subsidiary of Byline Bank, headquartered in Bannockburn, Illinois with sales offices in Texas, North Carolina and New York,Illinois, and sales representatives in Illinois, Florida, Michigan, New Jersey, Michigan and Arizona. Following our acquisition of Ridgestone Financial Services, Inc. (“Ridgestone”) in October 2016, we alsoNew York. We participate in U.S. government guaranteed lending programs and originate U.S. government guaranteed loans. Byline Bank was the fifth most active originator of SBA loans in the country and the most active SBA lender in Illinois, Wisconsin, and Wisconsin,South Dakota, as reported by the SBA for the quarterfiscal year ended December 31, 2017.September 30, 2021. As of December 31, 2017,2021, we had consolidated total assets of $3.4$6.7 billion, total gross loans and leases outstanding of $2.3$4.6 billion, total deposits of $2.4$5.2 billion, and total stockholders’ equity of $458.6$836.4 million.

RecapitalizationStrategic growth

In 2013,As part of our predecessor, Metropolitan Bank Group, Inc. (“Metropolitan”), experiencedstrategic growth plan, we explore potential opportunities for expansion in our primary and adjacent market areas through organic growth and the acquisition of financial institutions, branches, and non-banking organizations.

Organic Growth

We believe our local presence and our scale are essential to the continued growth of our deposit base. Small businesses are a significant creditsource of low-cost deposits and financial losses resulting primarily from the collapserepresent opportunities for future growth. We believe our small business customers value our ability to provide convenience and access to local, responsive decision makers. As of December 31, 2021, commercial deposits accounted for 48.9% of total deposits and were 76.0% of non-interest bearing deposits. Commercial accounts generally have higher deposit balances and transaction volumes than individual deposit accounts.

Our ability to originate loans and leases across a range of industries and product types helps us maintain a diversified loan and lease portfolio across various sectors, including commercial and industrial lending, leasing, U.S. government guaranteed loans and real estate prices duringloans, allowing us to efficiently manage our credit exposures and capitalize on more lending opportunities. We have also enhanced our product and lending capabilities with the severe economic recession occurring during 2007 through 2009 in addition to a number of regulatory and other operational challenges. Despite deterioration in asset quality and financial performance, Metropolitan maintained a high quality deposit base, an attractive branch network and strong customer loyalty, which made it an ideal candidate for a turnaround.experienced lending teams hired from larger banks.

An investment group raised $206.7 million in equity capital to recapitalize and gain control of Metropolitan through a series of transactions by which Metropolitan merged its multiple subsidiary banks into one, and an investor group acquired voting common stock and preferred stock of Metropolitan. The investors formed BXM Holdings, Inc. forfollowing charts outline the purpose of identifying an investment opportunity in a troubled U.S. banking institution. MBG Investors I, L.P. was the lead investor in the Recapitalization and Mr. del Valle Perochena, a membercomposition of our board of directors, is the general partner of MBG Investors I, L.P.loan and possesses the votinglease and investment power with respect to the securities beneficially owned by MBG Investors I, L.P. BXM Holdings, Inc. hired Roberto Herencia, the Chairman of our board of directors, and Alberto Paracchini, our President, Chief Executive Officer and Director, to identify an investment opportunity and later to effectuate the Recapitalization. Lindsay Corby, our Executive Vice President and Chief Financial Officer, served as a Principal of BXM Holdings, Inc. at the time of the Recapitalization. BXM Holdings, Inc. no longer conducts any operations. At the time of the Recapitalization, Metropolitan owned five banking subsidiaries that operated under 12 different brand names in the Chicago metropolitan area.

We accounted for the Recapitalization as a business combination in accordance with Accounting Standards Codification Topic 805, Business Combinations (“ASC 805”). Accordingly, the assets acquired and liabilities assumed were recorded at their fair value on the date of acquisition. Fair value amounts were determined in accordance with the guidance provided in ASC Topic 820, Fair Value Measurements (“ASC 820”). In many cases, the determination of the fair value required management to make estimates about discount rates, future expected cash flows, market conditions and other future events that are highly subjective in nature. The transaction qualified for federal income tax purposes as a recapitalization under Section 368(a)(1)(E) of the Code and resulted in carryover treatment of the existing tax bases and tax loss carryforwards, although the utilization of tax attributes (including net operating loss carryforwards and tax credits) became subject to limitations under Sections 382 and 383 of the Code.

Small ticket leasing acquisition

On October 10, 2014, Byline Bank acquired certain assets and liabilities related to the small ticket leasing operation of Baytree National Bank and Trust Company and Baytree Leasing Company LLC (collectively, “Baytree”). The purchase was accounted for under the acquisition method of accounting in accordance with ASC 805 and resulted in lease financing receivables of $42.0 million and goodwill of $4.5 million. There are no contingent assets or liabilities remaining from the acquisition.

In a separate but related transaction, on September 3, 2014, Byline Bank purchased approximately $55.7 million of direct finance leases that Baytree had sold to a third-party. We have grown the lease portfolio to $177.7 milliondeposit portfolios as of December 31, 2017.2021:

Ridgestone

4

Acquisitions

Our ability to engage in certain merger or acquisition

On October 14, 2016, we completed transactions depends on a number of factors, including opportunities in our market areas, access to capital, our bank regulators' views at the acquisitiontime as to the capital levels, quality of Ridgestone Financial Services, Inc., under the termsmanagement and our overall financial condition, in addition to their assessment of a definitive merger agreement (the “Ridgestone Agreement”). Asvariety of other factors, including our compliance with law and regulations. We have successfully completed a number of strategic acquisitions since our recapitalization in 2013, including the acquisition date, Ridgestone had $447.4 millionfollowing recent transactions:

Additional detail regarding certain recent acquisitions is contained in assets, including $347.3 millionNote 3 of “Notes to the Consolidated Financial Statements” in Item 8 of this Form 10-K.

Branch network and distribution channels

The primary market in which we operate is the Chicago metropolitan area, and our 43 branch network in this area is our core distribution channel. We take advantage of our focused footprint and deep-rooted relationships to target local customers with a diversified product offering.

Our expansive local branch network enables us to gather low cost deposits, promote the Byline brand and customer loyalty, originate loans, $14.7 million of loans held for sale, $27.2 million of securities, $21.5 million of servicing assetsleases and total deposits of $358.7 million. Ridgestone’s loan portfolio was primarily comprised of the retained unguaranteed portion of U.S. government guaranteed loans as a participantother products and maintain relationships with our customers through regular community involvement. We believe our branch network is fundamental to our ability to achieve successful customer outreach in the SBAline with our culture, which promotes high touch engagement with our customers and USDA lending programs.proactive solutions.

3

As a result of the acquisition, each share of Ridgestone common stock was converted into the right to receive, at the election of the stockholder and subject to proration under the terms of the Ridgestone Agreement, either cash or shares of the Company’s common stock, or a combination of both. Total consideration included aggregate cash consideration in the amount of $36.8 million and the issuance of 4,199,791 shares of the Company’s common stock valued at $16.25 per common share. There were no contingent assets or liabilities arising from the acquisition.

As a result of the Ridgestone acquisition, we:

be our primary delivery channel, we understand the evolving banking environment requires digital interaction to keep pace with our customers’ needs. We determined that the Ridgestone acquisition constituted a business combination as defined by ASC 805. Accordingly, the assets acquired and liabilities assumed were recorded at their fair value amount on the date of acquisition. Fair value was determined in accordance with the guidance provided in ASC 820. The fair values may be adjusted through the end of the measurement period, which closes at the earlier of the Company receiving all necessary information to complete the acquisition or one year from the date of acquisition. The fair value adjustments associated with this transaction were finalized during the fourth quarter of 2017 and required no measurement period adjustments during 2017. The transaction qualified for federal income tax purposes as a recapitalization under Section 368(a)(1)(E) of the Code and resulted in carryover treatment of the existing tax bases and tax loss carryforwards, although the utilization of tax attributes (including net operating loss carryforwards and tax credits) became subject to limitations under Sections 382 and 383 of the Code.

First Evanston acquisition

On November 27, 2017, the Company and First Evanston Bancorp, Inc. (“First Evanston”) entered into a definitive agreement and plan of merger pursuant to which the Company will acquire First Evanston through the merger of First Evanston with and into the Company, followed immediately by the merger of First Evanston’s wholly owned bank subsidiary, First Bank & Trust, with and into Byline Bank. First Bank & Trust is a commercial bank that operates 11 banking offices in the Chicago area. As of December 31, 2017, First Evanston had approximately $1.2 billion in total assets, $903.3 million in gross loans, and $1.0 billion in total deposits.  The consideration to be paid by the Company will consist of $27.0 million in cash with the remainder in Company stock (currently estimated at 6.7 million shares of common stock).  The transaction has been approved unanimously by each company’s board of directors and is expected to close during the first half of 2018. Closing of the transaction is subject to regulatory approvals, the approval of First Evanston’s shareholders and the Company’s stockholders, and the satisfaction of certain other closing conditions. The Company has received federal banking authority approval for the merger under the Bank Holding Company Act (“BHC Act’) and the Bank Merger Act, from the Board of Governors of the Federal Reserve System (acting through the appropriate Federal Reserve Bank), and the Federal Deposit Insurance Corporation (the “FDIC”).

Strategic branch consolidation

During 2015 and 2016, we performed acontinually perform strategic reviewreviews of our branch network and our existing core banking footprint. With technology improvements and changes to customers’ banking preferences, we examinedexamine branch growth and consolidation potential, customer usage, branch profitability, services provided, markets served and proximity to other locations with a goal of minimizing customer impact and deposit runoff.

Since the Recapitalization,our recapitalization in June 2013, our branch network has been reduced from 88 to 56. We will continue to strategically evaluate44, including 13 branches added through acquisition. During 2020 and 2021 we consolidated 17 branches within our locations basednetwork with minimal impact on our growthcustomer service levels, convenience, and profitability standards. Duringbusiness development capabilities. In December 2017,2021 we consolidated another branchannounced plans to consolidate six branches during the second quarter of 2022. We expect these consolidations to generate over $5.3 million in Chicago, resulting in 56 branch locations.annual cost savings and expect to reinvest approximately 70% of the anticipated annualized cost savings into talent and technology that will further enhance our digital banking capabilities.

We plan to continue to leverage our seasoned management team, the attractive market opportunity in the Chicago metropolitan area, our diversified lending approach and our track record of successfully integrating acquisitions to drive future growth. We believe that having a deep understanding of customers, longstanding ties to the communities in which we operate, a strong market position, and exceptional employees allowsallow us to provide the attention, responsiveness, and customized service our clientscustomers seek while offering a diverse range of products to serve a variety of needs.

Segments

We have one reportable segment. Our chief operating decision maker,makers evaluate our Chief Executive Officer, evaluates thebusiness and operations of the Company using consolidated information for purposes of allocating resources and assessing performance.

4

Our Products and Services

We are a full service, commercial bank offering a broad range of deposit products and lending services to small and medium sized businesses, commercial real estate and financial sponsors, and consumers around our 5543 branch locations in the Chicago metropolitan area and one branch in Brookfield, Wisconsin. The products and services we offer are described below.

Commercial banking

Commercial banking is a fundamental component of our business. We define commercial banking as lending to small and medium sized businesses, real estate and financial sponsors. We offer a comprehensive range of commercial loan, deposit and treasury management products. Our primary commercial lending groups are described below:

Commercial & Industrial. Our commercial and industrial (“C&I”) group focuses on small and lower middle market businesses with up to $100 million of annual revenue and seeks to establish long term relationships. We believe this customer segment is underserved by larger institutions that do not focus on this space, as well as by smaller institutions that lack product sophistication and capabilities. We offer a broad range of lending products including term loans, revolving lines of credit and treasury management products and services. As of December 31, 2021, the C&I group managed a portfolio of $1.7 billion in loans outstanding.

5

Commercial real estate. Our commercial real estate (“CRE”) business focuses on experienced real estate professionals with long track records of performance and access to ample equity capital sources. We believe our specialized expertise and efficient decision making process differentiate us from our competitors. We offer fixed and floating rate term loans, construction financing and revolving lines of credit with a wide range of term options. Our portfolio is broadly diversified by property type including loans secured by multifamily, industrial, retail, and office properties. As of December 31, 2021, the CRE group had $801.8 million in loans outstanding.

Sponsor finance. Our sponsor finance group provides senior secured financing solutions to private equity backed lower middle market companies throughout the U.S. with earnings before interest, tax, depreciation and amortization generally between $2.0 million and $10.0 million. We support the acquisition, recapitalization and growth investment efforts of private equity firms operating in the lower middle market, and we believe our expertise in this niche is unique for a bank our size. As of December 31, 2021, we had $440.5 million in sponsor finance loans outstanding.

Syndications. From time to time, our syndications group seeks to deploy excess liquidity by opportunistically participating in syndicated loans, acquiring whole loans, or purchasing participations from lead banks that have existing relationships with well capitalized and experienced sponsors. We employed this strategy extensively following our recapitalization by leveraging our relationships with local, regional and national lenders as we developed our own lending capabilities and had excess liquidity. Now, with developed lending capabilities, our participation in syndications has decreased and represents a smaller portion of our portfolio. The syndications group targets transactions in the home mortgage, CRE, and C&I categories that provide attractive risk/reward characteristics, and we continue to maintain the ability to sell loan positions to manage credit and specific customer and industry concentrations. As of December 31, 2021, the group had $231.7 million in loan syndications outstanding.

Commercial deposits and treasury management. We also support our business customers with a variety of deposit and treasury management products, along with business transaction accounts. Our comprehensive suite of products includes treasury services, information reporting, fraud management, cash collection, and interest rate derivative products. We believe these tailored products allow us to provide a robust service offering to our customers and to support their day to day funding and risk management needs. These services are provided through multiple points of contact including branch, online, and mobile interfaces.

Small Business Capital.Our U.S. government guaranteed lending business serves small businesses in need of, and qualifying for, SBA and USDA loans (referred to together as “U.S. government guaranteed loans”). We provide SBA lending services throughout the country, with a primary focus on the Midwest, Tennessee, Florida, Texas, Colorado, Utah, and California. We generally sell the government guaranteed portion of SBA and USDA loans into the secondary market while retaining the non-guaranteed portion of the loan and the servicing rights. This allows us to realize one time gain on sale income along with a recurring servicing and interest revenue stream. In addition to the business development officers who we rely on to generate new business, we also have a dedicated servicing, portfolio management and workout staff with specialized expertise in U.S. government guaranteed loans. As of December 31, 2021, total loans and leases included the guaranteed amount of U.S. government guaranteed loans of $231.2 million. The total unpaid principal balances of loans serviced for others was $1.7 billion at December 31, 2021.

Retail deposits

We offer customers traditional retail deposit products through our branch network, consumer online account opening through our website, and the abilitycustomer access to access their accounts through online and mobile banking platforms. The wide variety of deposit products we offer include non-interest bearingnon-interest-bearing accounts, money market demand accounts, savings accounts, interest bearinginterest-bearing checking accounts and time deposits with maturities ranging from seven days to five years. We consider our core deposits, defined as all deposits except for time deposits exceeding $100,000, to be our primary and most valuable funding source, and assource. As of December 31, 2017,2021, core deposits represented 86.1%91.9% of our total deposits. In addition to these products, we offer ATM and debit cards as well as online, mobile, and text banking. We strive to retain an attractive deposit mix from both large and small customers as well as a broad market reach, which has resulted in our top 50 customers accounting for only 8.6%11.6% of all deposits as of December 31, 2017.2021. Our bankers are incentivized to acquire and maintain quality core deposits as we depend on these deposits to fund the majority of our loans and leases. Our incentive compensation plans are designed so that those arrangements appropriately balance risk and financial rewards, are compatible with effective risk management practices and are supported by effective governance. We believe that our long standing and high quality relationships with our depositors who provide us with long term funding are due to the convenience and dedicated service we offer. We leverage our expansive branch locations and deep network of customer relationships in the Chicago metropolitan area to provide both low cost funding sources for our lending business and deposit related fee income. We had $2.4$5.2 billion of deposits at December 31, 2017,2021, and our average cost of deposits was 0.31%0.09% for the year ended December 31, 2017.2021.

Commercial banking

Commercial banking is a fundamental component of our business. We define commercial banking as lending to small and medium sized businesses, real estate and financial sponsors. As of December 31, 2017, loans originated or managed by commercial lending represented $1.7 billion, or 73.5%, of our total gross loans outstanding. The business is supported by a seasoned lending team of 23 commercial bankers with deep local experience averaging 19 years. We offer a comprehensive range of commercial loan, deposit and cash management products. Our primary commercial lending groups are described below:

Commercial real estate.  Our commercial real estate (“CRE”) business focuses on experienced real estate professionals with long track records of performance and access to ample equity capital sources. We believe our specialized expertise and efficient decision making process differentiate us from our competitors. We offer fixed and floating rate term loans, construction financing and revolving lines of credit with a wide range of term options. Our CRE portfolio is broadly diversified by property type including loans secured by multi family, retail, industrial and office properties. As of December 31, 2017, the CRE group had $495.1 million in loans outstanding.

Commercial & industrial.  Our commercial and industrial (“C&I”) group focuses on small and lower middle market businesses with up to $50 million of annual revenue and seek to establish long term relationships. We believe this customer segment is underserved by larger institutions that do not focus on this space, as well as by smaller institutions that lack product sophistication and capabilities. We offer a broad range of lending products including term loans, revolving lines of credit, and cash management products and services. As of December 31, 2017, the C&I group managed a portfolio of $259.8 million in loans outstanding.

Sponsor finance.  Our sponsor finance group provides senior secured financing solutions to private equity backed lower middle market companies throughout the U.S. with earnings before interest, tax, depreciation and amortization generally between $2.0 million and $10.0 million. We support the acquisition, recapitalization and growth investment efforts of private equity firms operating in the lower middle market, and believe our expertise in this niche is unique for a bank our size. As of December 31, 2017, we had $149.3 million in sponsor finance loans outstanding.

Syndications.  From time to time, our syndications group seeks to deploy excess liquidity by opportunistically participating in syndicated loans, acquiring whole loans, or purchasing participations from lead banks that have existing relationships with well capitalized and experienced sponsors. We employed this strategy extensively following the Recapitalization by leveraging our relationships with local, regional and national lenders as we developed our own lending capabilities and had excess liquidity. Now, with developed lending capabilities, our participation in syndications has decreased and represents a smaller piece of our portfolio. The syndications group targets transactions in the home mortgage, commercial real estate and C&I categories that provide attractive risk/reward characteristics, and we continue to maintain the ability to sell loan positions to manage credit and specific customer and industry concentrations. As of December 31, 2017, the group had $354.7 million in loan syndications outstanding.

Commercial deposits and cash management.  We also support our business clients with a variety of deposit and cash management products, along with business transaction accounts. Our comprehensive suite of products includes treasury services, information reporting, fraud management, cash collection and interest rate derivative products. We believe these tailored products allow us to provide a robust service offering to our clients and to support their day to day funding and risk management needs. These services are provided through multiple points of contact including branch, online and mobile interfaces.

5

Small Business Capital

We launched our SBA business with the acquisition of Ridgestone in October 2016. This business serves small businesses in need of, and qualifying for, U.S. government guaranteed loans. We also provide SBA lending services throughout the Midwest, Tennessee and California. We generally sell the government guaranteed portion of SBA and USDA loans into the secondary market while retaining the non-guaranteed portion of the loan and the servicing rights. This allows us to realize one time gain on sale income along with a recurring servicing and interest revenue stream. In addition to the business development officers that we rely on to generate new business, we also have a dedicated servicing, portfolio management and workout staff with specialized expertise in U.S. government guaranteed loans. As of December 31, 2017, total loans and leases included the guaranteed amount of U.S. Government guaranteed loans of $77.0 million. The total unpaid principal balances of loans serviced for others was $1.1 billion at December 31, 2017.

Small ticket equipment leasing

In 2014, we purchased small ticket leasing assets from Baytree National Bank & Trust Company and Wells Fargo Corporation, and today throughThrough our bankBank’s subsidiary, Byline Financial Group (“BFG”), we provide financing solutions for equipment vendors and their end users. The vertical markets served by our equipment vendors specialize primarily in healthcare, manufacturing, technology, materials handlings, small equipment construction, specialty vehicles and energy efficiency. The end users (i.e., our lessees and borrowers) are primarily physician group practices, other healthcare related entities, manufacturers, retailers, veterinarians, wholesalers and automotive related industries.wholesalers. The average lease size at origination for Byline Financial GroupBFG for the year ended December 31, 20172021 was approximately $48,000.$63,000. Our 17 person sales forceteam originates leases throughout the country, and we have lessees in nearly every state. As of December 31, 2017, Byline Financial Group2021, BFG had $177.7$357.8 million in leases outstanding with a weighted average life of approximately 2.44.5 years.

Distribution channelsTrust and wealth management

The primary market in which we operate is the Chicago metropolitan area,We provide investment, trust and our 55 branch network in this area is our core distribution channel. We operate the fourth largest branch network in the city of Chicago and we take advantage of our focused footprint and deep rooted relationshipswealth management services to target local customers with a diversified product offering.

Our expansive local branch network enables us to gather low cost deposits, promote the Byline brand and customer loyalty, originate loans, leases and other products and maintain relationships with our customers, such as foundations and endowments and high net worth individuals, which include fiduciary and executor services, financial planning solutions, investment advisory services, and

6

private banking services. These services are provided through regular community involvement. Our branch network is fundamentalcredentialed investment, legal, tax, and wealth management professionals who identify opportunities and provide services tailored to our ability to achieve successful customer outreach in line with our culture, which promotes high touch engagement with our customerscustomers’ goals and proactive solutions.

While our branch network will continue to be our primary delivery channel, we understand the evolving banking environment requires digital interaction to keep pace with our customers’ needs. We have rationalized our branch network to increase efficiency while at the same time invested in our product development, particularly our online and mobile banking platforms that allow customers to transact via the digital channel including bill payments, mobile deposits and peer to peer payment options. Asobjectives. Assets under management were $663.4 million as of December 31, 2017, approximately 85.6% of our checking account customers are enrolled in our online banking platform, and approximately 68.7% of our checking account customers are enrolled in mobile banking.2021.

When we deem it advisable, we launch marketing campaigns through our branches and online platform to advertise new products or promotional services. We view these two channels as key touchpoints with our customers and frequently strategize how we can best utilize these distribution networks.Competition

Competition

The financial services industry is highly competitive as we compete for loans, leases, deposits and customer relationships inwithin and outside of our market.markets. Competition involves efforts to retain current clients,customers, make new loans and leases, obtain new deposits, increase the scope and sophistication of services offered, the availability, ease of use, and range of banking services provided on the internet and through mobile devices, and offer competitive interest rates paid on deposits and charged on loans. Within our branch footprint, weloans and leases. We face competition primarilynot only from national, regionalother financial holding companies and commercial banks, but also from internet banks, savings and loan associations, FinTech companies, credit unions, trust and wealth management providers, and other local banksproviders of financial services and products. Competition is generally based on the variety, rates and terms of products and services offered to customers and the performance of funds under management.

Human Capital

At Byline, we believe in being the bank our customers deserve, which, as embodied in our name, means taking ownership, initiative, action, and responsibility for what we do. Our business is about people— our customers and our employees. We seek to help our customers build, make, and do— none of which would be possible without our employees. Our #1 core value, or “Things That Matter,” is our People. We believe one of the biggest differentiators of our performance is our team. The need to attract, retain, and develop the right talent to accomplish our long-term strategy is critical to our success.

Governance and Oversight

Our Board of Directors oversees our corporate strategy and sets the tone for our culture, values and high ethical standards, and through its Committees, holds management accountable for results. Beginning in 2020, the Board expanded the scope of our Compensation Committee beyond its traditional compensation focused role to include oversight of all human capital management efforts within Byline. The Compensation Committee reviews and monitors matters related to human capital management, including Company culture, talent development, diversity, equity and inclusion ("DEI") programs and initiatives, and other environmental, social, and governance ("ESG") matters.

Diversity, Equity and Inclusion

To facilitate talent attraction, development and retention across our franchise, we strive to make Byline a diverse, inclusive, safe, and healthy workplace, with opportunities for our employees to grow and develop in their careers, supported by strong compensation, benefits, health, and welfare programs.

Our key programs and initiatives that are focused to attract, develop, and retain our diverse workforce include:

7

We embrace diversity within our teams and define diversity by both gender and ethnicity/race. Our key human capital diversity metrics for 2021 are as follows:

Initiatives Supporting Physical, Emotional, Financial, and Social Wellbeing

We offer competitive salaries based on our compensation philosophy. This approach ensures that entry level employees received competitive wages within the industry. In addition, our compensation is performance-based and tied to business and individual results. We have established branch networks throughouttaken significant steps to continue to benchmark job roles and compensation against relevant market data and adjust our compensation to attract and retain talent.

We offer benefits that include comprehensive health, life, and disability coverage that are funded, in whole or in part, by us, including:

Development opportunities

We recognize the Chicago metropolitancritical importance of providing career development and advancement opportunities for all employees. Accordingly, we provide a variety of formal and informal development opportunities to help employees grow in their current roles and build new skills. During 2021, we continued our focus on having more frequent career development conversations with all employees, providing regular coaching and feedback, and highlighting opportunities across the Bank to move into new roles and take on new assignments. We increased our investment in both leader and manager development in 2021 with new programs and will continue to invest in these programs in 2022 and beyond.

We strive to optimally deploy existing talent across Byline by focusing on where our employees excel and helping them find the best roles for them. One of the hallmarks of our success in this area giving them visible retail presence to customers.

We believeis demonstrated by our ability to fill vacancies from within.

We encourage our team members to pursue educational opportunities that will help improve job performance and professional development. To further this goal, we launched tuition reimbursement benefits in 2021.We also support employees in obtaining certifications and taking approved educational courses to support their job role and expansion of skills.

We believe that talent development is a critical part of our succession planning of our executive management. Our Board of Directors oversees the succession planning for executive management on an annual basis, including a focus on outlining key development needs for employees on succession plans for these key roles.

Employee Recognition and Engagement

We conduct an annual employee engagement survey with over 90% participation and continued to see strong improvements in employee engagement year over year. In order to drive engagement, we focus on the following areas:

8

Community and Social Impact

We are committed to our customers allows us to stay competitive inhelping the financial services environment. Our local presence and hands on approach enable us to provide a high level of service that our customers value.

Intellectual Property

In the highly competitive banking industrycommunities in which we operate, intellectual propertylive and work to grow and thrive, today and into the future. One way we do this is importantby providing employees paid time off to participate in community-based volunteer programs. Throughout the successyear, employees make a positive impact in their local communities and have found a multitude of our business. We registeredspecial ways to continue volunteering during the “Byline Bank”pandemic. During 2021, Byline made and/or supported:

Human Capital Metrics

Employees

As of December 31, 2017,2021, we had 844970 employees (929 full time equivalent employees. None of ourand 41 part time) in locations primarily across the Chicagoland and greater Milwaukee, Wisconsin areas. Our employees are parties tonot represented by a collective bargaining agreement. We consider our relationship with our employees to be good. Our average tenure of employees is over seven years. In 2021, our voluntary attrition rate was 17%. Attrition rates during 2021 were higher year over year, coming off abnormally low attrition during the pandemic in 2019 and 2020. We hired 237 new employees into the Bank during 2021. We have a strong bench of talent and are attracting experienced bankers from larger regional banks as a result of market disruption

6Fair Employment Practices

Byline Bank is proud to be committed to maintaining a diverse workforce and an inclusive work environment. We are an Equal Opportunity/Affirmative Action employer. All qualified applicants receive consideration for employment without regard to their actual or perceived race, color, religion, national origin, ancestry, marital or civil union status, sex, gender, pregnancy, age, citizenship status, disability, military or veteran status, gender identity, expression or preference, sexual orientation, genetic information, order of protection status or any other characteristic protected by law. We are committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. At Byline, our hiring decisions are based on merit, qualifications, and business needs.

Discrimination & Sexual Harassment in the Workplace

Byline Bank prohibits any form of unlawful discrimination, sexual harassment or other forms of harassment in the workplace. We believe that our employees should be able to work in an atmosphere free from all forms of harassment. Our policies regarding equal employment opportunity, discrimination, sexual harassment, and harassment are included in our Employee Handbook. All employees are required to review and acknowledge these policies in our Handbook annually. In addition, all employees are required to complete training regarding workplace discrimination, sexual harassment, and other forms of harassment annually. In addition to these training programs, managers are required to complete training annually for unconscious bias and interviewing job candidates.

For additional information, please see our definitive proxy statement for our 2022 Annual Meeting of Stockholders, a copy of which will be filed with the SEC no later than 120 days after the end of our fiscal year.

Corporate Information

Our principal executive offices are located at 180 North LaSalle Street, Suite 300, Chicago, Illinois 60601, and our telephone number at that address is (773) 244-7000. Our website address is www.bylinebancorp.com. We make available at this address, under the “Investor Relations” tab, free of charge, our Annual Report on Form 10-K, Quarterly Reports on Form 10-Q, Current Reports on Form 8-K and amendments to those reports filed or furnished pursuant to Section 13(a) or 15(d) of the Securities Exchange Act of 1934, as amended (the “Exchange Act”) as soon as reasonably practicable after such material is electronically filed with, or furnished to, the SEC. These filings are also available on the SEC's website at www.sec.gov. The contents of our website are not incorporated by reference into this report.

Supervision and Regulation

We and our subsidiaries are subject to extensive regulation under federal and state banking laws that establish a comprehensive framework for our operations. This framework may materially affect our growth potential and financial performance and is intended

9

primarily for the protection of depositors, customers, federal deposit insurance funds and the banking system as a whole, not for the protection of our stockholders and creditors. Significant elements of the statutes, regulations and policies applicable to us and our subsidiaries are described below.

Regulatory Agencies

We are a bank holding company under the BHCBank Holding Company (“BHC”) Act. Consequently, we and our subsidiaries are subject to supervision, regulation and examination by the Board of Governors of the Federal Reserve.Reserve System (the "FRB"). The BHC Act provides generally for “umbrella” regulation of bank holding companies and functional regulation of holding company subsidiaries by applicable regulatory agencies. Byline Bank, our bank subsidiary, is an FDIC-insureda Federal Deposit Insurance Corporation (“FDIC”) insured commercial bank chartered under the laws of Illinois. Our bank is not a member of the Federal Reserve System.FRB. Consequently, the FDIC and the Illinois Department of Financial and Professional Regulation (“IDFPR”) are the primary regulators of our bank and also regulate our bank’s subsidiaries. As the owner of an Illinois-chartered bank, we are also subject to supervision and examination by the IDFPR. We are also subject to the disclosure and regulatory requirements of the Securities Act and the Exchange Act as administered by the SEC, and the rules adopted by the New York Stock Exchange (the “NYSE”) applicable to NYSE listed companies.

Permissible Activities for Bank Holding Companies

In general, the BHC Act limits the business of bank holding companies to banking, managing or controlling banks and other activities that the Federal ReserveFRB has determined to be so closely related to banking as to be a proper incident thereto, which include certain activities relating to extending credit or acting as an investment or financial advisor. We currently do not conduct any non-banking activities through its parent company or through any non-bank subsidiaries.

Bank holding companies that qualify and elect to be treated as “financial holding companies” may engage in a broader range of additional activities than bank holding companies that are not financial holding companies. In particular, financial holding companies may engage in activities that are (i) financial in nature or incidental to such financial activities or (ii) complementary to a financial activity and do not pose a substantial risk to the safety and soundness of depository institutions or the financial system generally. These activities include securities underwriting and dealing, insurance underwriting and making merchant banking investments. We have not elected to be treated as a financial holding company and currently have no plans to make a financial holding company election.

The Federal ReserveFRB has the power to order any bank holding company or any of its subsidiaries to terminate any activity or to terminate its ownership or control of any subsidiary when the Federal ReserveFRB has reasonable grounds to believe that continuing such activity, ownership or control constitutes a serious risk to the financial soundness, safety or stability of any bank subsidiary of the bank holding company.

Permissible Activities for Banks

As an Illinois-chartered commercial bank, our bank’s business is subject to extensive supervision and regulation by state and federal bank regulatory agencies. Our business is generally limited to activities permitted by Illinois law and any applicable federal laws. Under the Illinois Banking Act, our bank may generally engage in all usual banking activities, including, among other things, accepting deposits; lending money on personal and real estate security; issuing letters of credit; buying, discounting, and negotiating promissory notes and other forms of indebtedness; buying and selling foreign currency and, subject to certain limitations, certain investment securities; engaging in certain insurance activities and maintaining safe deposit boxes on premises.

Illinois law also imposes restrictions on Byline Bank’s activities intended to ensure the safety and soundness of our bank. For example, Byline Bank is restricted under the Illinois Banking Act from investing in certain types of investment securities and is generally limited in the amount of money it can lend to a single borrower or invest in securities issued by a single issuer.

Acquisitions by Bank Holding Companies

The BHC Act, Section 18(c) of the Federal Deposit Insurance Act, popularly known as the “Bank Merger Act”, the Illinois Banking Act, the Illinois Bank Holding Company Act and other federal and state statutes regulate acquisitions of commercial banks and other FDIC-insured depository institutions. We must obtain the prior approval of the Federal ReserveFRB under the BHC Act before (i) acquiring more than 5% of the voting stock of any FDIC-insured depository institution or other bank holding company (other than directly through our bank), (ii) acquiring all or substantially all of the assets of any bank or bank holding company or (iii) merging or consolidating with any other bank holding company. Under the Bank Merger Act, the prior approval of the FDIC is required for our bank to merge with another bank or purchase all or substantially all of the assets or assume any of the deposits of another FDIC- insured depository institution or to assume certain liabilities of non-banks. In reviewing applications seeking approval of merger and acquisition transactions, banking regulators consider, among other things, the competitive effect and public benefits of the transactions, the capital position and managerial resources of the combined organization, the risks to the stability of the U.S. banking or financial system, the applicant’s performance record under the Community Reinvestment Act of 1977 (“CRA”), the applicant’s compliance with fair housing and other consumer protection laws and the effectiveness of all organizations involved in combating money laundering activities. In addition, failure to implement or maintain adequate compliance programs could cause banking regulators not to approve an acquisition where regulatory approval is required or to prohibit an acquisition even if approval is not required.

710

Dividends; Stress Testing

We are a legal entity separate and distinct from Byline Bank and other subsidiaries. As a bank holding company, we are subject to certain restrictions on itsour ability to pay dividends under applicable banking laws and regulations.

Federal banking regulators are authorized to determine under certain circumstances relating to the financial condition of a bank holding company or a bank that the payment of dividends would be an unsafe or unsound practice and to prohibit payment thereof. In particular, federal banking regulators have stated that paying dividends that deplete a banking organization’s capital base to an inadequate level would be an unsafe and unsound banking practice and that banking organizations should generally pay dividends only out of current operating earnings. In addition, in the current financial and economic environment, the Federal ReserveFRB has indicated that bank holding companies should carefully review their dividend policy and has discouraged payment ratios that are at maximum allowable levels unless both asset quality and capital are very strong. Under the capital rules defined below,in the Regulatory Capital Requirements section, institutions that seek to pay dividends must maintain 2.5% in Common Equity Tier 1 capital attributable to the capital conservation buffer, which is to be phased in over a three year period that began on January 1, 2016.buffer. For more information on these financial measures at the Company and Byline Bank, see Note 21 of the notes to our audited consolidated financial statements contained in Item 8 of this report.

A significant portion of our income, on a stand-alone basis, comes from dividends from our bank, which is also the primary source of our liquidity. In addition to the restrictions discussed above,previously, our bank is subject to limitations under Illinois law regarding the level of dividends that it may pay to us. Under the Illinois Banking Act, Byline Bank generally may not pay dividends in excess of its net profits. Under these restrictions, Byline Bank could pay aggregate dividends of approximately $79.7$161.7 million to us without obtaining affirmative regulatory approvals as of December 31, 2017.2021.

In October 2012, as required by the Dodd-Frank Act, the Federal ReserveThe FRB and the FDIC published finalhave implemented rules regarding company-run stress testing. These rules require bank holding companies and banks with average total consolidated assets greater than $10 billion to conduct an annual company-run stress test of capital, consolidated earnings and losses under one base and at least two stress scenarios provided by the federal banking regulators. Neither we nor our bank is currently subject to the stress testing requirements, but we expect that if we become subject to those requirements, the Federal Reserve,FRB, the FDIC and the IDFPR will consider our results and those of our bank as an important factor in evaluating our and our bank’s capital adequacy, any proposed acquisitions by us or by our bank and whether any proposed dividends or stock repurchases by us or by our bank may be an unsafe or unsound practice.

Transactions with Affiliates and Insiders

Transactions between our bank and its subsidiaries, on the one hand, and us or any other subsidiary, on the other hand, are regulated under Sections 23A and 23B of the Federal Reserve Act. The Federal Reserve Act imposes quantitative and qualitative requirements and collateral requirements on covered transactions by Byline Bank with, or for the benefit of, its affiliates. Generally, Sections 23A and 23B of the Federal Reserve Act limitslimit the extent to which our bank or its subsidiaries may engage in “covered transactions” with any one affiliate to an amount equal to 10% of our bank’s capital stock and surplus, limits the aggregate amount of all such transactions with all affiliates to an amount equal to 20% of such capital stock and surplus, and requires those transactions to be on terms at least as favorable to our bank as if the transaction were conducted with an unaffiliated third-party. Covered transactions are defined by statute to include a loan or extension of credit, as well as a purchase of securities issued by an affiliate, a purchase of assets (unless otherwise exempted by the Federal Reserve)FRB) from the affiliate, certain derivative transactions with an affiliate, the acceptance of securities issued by the affiliate as collateral for a loan, and the issuance of a guarantee, acceptance or letter of credit on behalf of an affiliate. In addition, any credit transactions with any affiliate must be secured by designated amounts of specified collateral.

Federal law also limits our bank’s authority to extend credit to its insiders, which is defined under applicable law to include its directors, executive officers and 10% stockholders, as well as to entities controlled by such persons. Among other things, extensions of credit to insiders are required to be made on terms that are substantially the same as, and follow credit underwriting procedures that are not less stringent than, those prevailing for comparable transactions with unaffiliated persons. Also, the terms of such extensions of credit may not involve more than the normal risk of non-repayment or present other unfavorable features and may not exceed certain limitations on the amount of credit extended to such persons individually and in the aggregate. In addition, we have certain of our stockholders who are foreign nationals, and we and certain of these foreign national stockholders have entered into commitments with the Federal ReserveFRB that restrict our ability to engage in certain business transactions without the consent of the Federal Reserve. Certain of our stockholders have also entered into passivity commitments with the Federal Reserve that generally restrict these stockholders from entering into banking or nonbanking transactions with us. For further information, see “Certain Relationships and Related Transactions—Foreign National Commitments and Passivity Commitments”.FRB.

Source of Strength

Federal ReserveFRB policy and federal law require bank holding companies to act as a source of financial and managerial strength to their subsidiary banks. Under this requirement, we are expected to commit resources to support Byline Bank, including at times when we may not be in a financial position to provide such resources, and it may not be in our, or our stockholders’ or creditors’, best interests to do so. In addition, any capital loans we make to our bank are subordinate in right of payment to depositors and to certain other indebtedness of our bank. In the event of our bankruptcy, any commitment by us to a federal banking regulatory agency to maintain the capital of our bank will be assumed by the bankruptcy trustee and entitled to priority of payment.

8

Regulatory Capital Requirements

The Federal ReserveFRB monitors the capital adequacy of our holding company on a consolidated basis, and the FDIC and the IDFPR monitor the capital adequacy of our bank. The banking regulators use a combination of risk-based guidelines and a leverage ratio to evaluate capital adequacy. The risk-based capital guidelines applicable to us and our bank are based on the Basel Committee’s December 2010

11

final capital framework for strengthening international capital standards, known as Basel III, as implemented by the federal banking regulators.regulators, as well as various other rules implemented by the federal banking regulators as described below. The risk-based guidelines are intended to make regulatory capital requirements sensitive to differences in credit and market risk profiles among banks and bank holding companies, to account for off-balance sheet exposure and to minimize disincentives for holding liquid assets.

Basel III and theThe Capital Rules. In July 2013,Over the past several years, the federal banking regulators approvedhave adopted a number of final rules, orwhich we refer to as the Capital Rules, implementing the Basel Committee’s December 2010 final capital framework for strengthening international capital standards, known as Basel III, and various provisions of the Dodd-Frank Act. The Capital Rules substantially reviseAct, various provisions of the risk-basedEconomic Growth Regulatory Relief and Consumer Protection Act (the “Consumer Protection Act”) and certain other statutory and regulatory provisions relating to capital requirements applicable to bank holding companies and banks, including us and our bank, compared to the previous risk-based capital rules. The Capital Rules revise the components of capital and address other issues affecting the numerator in regulatory capital ratio calculations.. The Capital Rules, among other things, (i) include a new capital measure called “Common Equity Tier 1” (“CET1”), (ii) specify that Tier 1 capital consists of CET1 and “Additional Tier 1 capital” instruments meeting certain revised requirements, (iii) define CET1 narrowly by requiring that most deductions/adjustments to regulatory capital measures be made to CET1 and not to the other components of capital, and (iv) expand the scope of the deductions/adjustments to capital as compared to prior regulations. The Capital Rules also address risk based capital requirements and risk weights and other issues affecting the denominator in regulatory capital ratio calculations, including replacing the existing risk-weighting approach derived from Basel I with a more risk-sensitive approach based, in part, on the standardized approach adopted by the Basel Committee in its 2004 capital accords, known as Basel II. The Capital Rules also implement the requirements of Section 939A of the Dodd-Frank Act to remove references to credit ratings from the federal banking regulators’ rules. Subject to a phase-in period for various provisions, the Capital Rules became effective for us and for our bank beginning on January 1, 2015.calculations.

Under the Basel III Capital Rules, the minimum capital ratios are (i) 4.5% CET1 to risk-weighted assets, (ii) 6% Tier 1 capital (that is, CET1 plus Additional Tier 1 capital) to risk-weighted assets, (iii) 8% total capital (that is, Tier 1 capital plus Tier 2 capital) to risk-weighted assets and (iv) 4% Tier 1 capital to average consolidated assets as reported on consolidated financial statements (known as the “leverage ratio”).

The current Capital Rules also include a capital conservation buffer designed to absorb losses during periods of economic stress. The capital conservation buffer, which is composed entirely of CET1, on top ofis in addition to these minimum risk-weighted asset ratios. The implementation of the capital conservation buffer began on January 1, 2016 at the 0.625% level and will be phased in over a three-year period (increasing by 0.625% on each subsequent January 1) until it reachesis equal to 2.5% on January 1, 2019.of CET1. In addition, the Capital Rules provide for a countercyclical capital buffer applicable only to certain covered institutions. We do not expect the countercyclical capital buffer to be applicable to us or our bank. Banking institutions with a ratio of CET1 to risk-weighted assets above the minimum but below the capital conservation buffer (or below the combined capital conservation buffer and countercyclical capital buffer, when the latter is applied) will face constraints on dividends, equity repurchases, and compensation based on the amount of the shortfall.

WhenAs a result of the fully phased-in the Capital Rules will require us,capital conservation buffer rule, we and our bank are required to maintain an additional capital conservation buffer of 2.5% of CET1, effectively resulting in minimum ratios of (i) 7% CET1 to risk-weighted assets, (ii) 8.5% Tier 1 capital to risk-weighted assets, (iii) 10.5% total capital to risk-weighted assets and (iv) a minimum leverage ratio of 4%.

The Capital Rules provide for a number of deductions from and adjustments to CET1. These include, for example, the requirement that mortgage servicing rights, certain deferred tax assets and significant investments in non-consolidated financial entities be deducted from CET1 to the extent that any one such category exceeds 10% of CET1 or all such categories in the aggregate exceed 15% of CET1. Implementation of the deductions and other adjustments to CET1 began on January 1, 2015 and will behave been phased in over a four-year period (beginning at 40% on January 1, 2015 and an additional 20% per year thereafter). On November 22, 2017, the federal banking regulators finalized rules that otherwise maintain the Capital Rules’ 2017 adjustments for the year 2018. These changes to the Capital Rules became effective beginning on January 1, 2018. On September 27, 2017, the federal banking regulators proposed a rule to simplify the current regulatory capital treatment of mortgage servicing rights, certain deferred tax assets and significant investments in non-consolidated financial entities. If finalized, the rule would supersede the November 22, 2017 rule, and the proposal would eliminate (i) the Capital Rules’ 10% CET1 deduction threshold that applies individually to mortgage servicing rights, certain deferred tax assets and significant investments in non-consolidated financial entities, and (ii) the aggregate 15% CET1 deduction threshold that subsequently applies on a collective basis across such items.past several years. The Capital Rules also generally preclude certain hybrid securities, such as trust preferred securities, from being counted as Tier 1 capital for most bank holding companies. Bank holding companies such as us who had less than $15 billion in assets as of December 31, 2009 (and who continue to have less than $15 billion in assets) are permitted to include qualifying trust preferred securities issued prior to May 19, 2010 as Additional Tier 1 capital under the Capital Rules, however.

In addition, under the general risk-based Capital Rules, the effects of accumulated other comprehensive income items included in capital were excluded for the purposes of determining regulatory capital ratios. Under the Capital Rules, the effects of certain accumulated other comprehensive income items are not excluded; however, non-advanced approaches banking organizations, including us and Byline Bank, were able to make a one-time permanent election to continue to exclude these items. Both we and Byline Bank made this election.

9

The Capital Rules also prescribedinclude a new standardized approach for risk weightings of assets that expanded theinclude more risk-sensitive categories compared to previous capital rules. These risk-weighting categories from the current four Basel I derived categories (0%, 20%, 50% and 100%) to a much larger and more risk-sensitive number of categories, dependingdepend on the nature of the assets, generally ranging from 0%, for U.S. government and agency securities, to 600%, for certain equity exposures, and resulting in higher risk weights for a variety of asset categories.

With respect to our bank, the Capital Rules also revised the prompt corrective action regulations pursuant to Section 38 of the Federal Deposit Insurance Act (the “FDIA”). On September 17, 2019, pursuant to the Consumer Protection Act, the federal banking regulators issued a final rule meant to simplify the capital rules for community banks. Under the final rule, most depository institutions and depository institution holding companies that have less than $10 billion in total consolidated assets, that have limited amounts of off-balance sheet exposures and trading assets and liabilities, and that have a community bank leverage ratio of greater than 9% would be eligible to opt into a community bank leverage ratio framework beginning on January 1, 2020. Under the final rule, should a qualified community bank or its holding company elect to use the community bank leverage ratio and maintain a community bank leverage ratio of greater than 9% then it would not be subject to other risk-based and leverage capital requirements, including the risk-based capital rules relating to high volatility commercial real estate, mortgage servicing rights, certain deferred tax assets and significant investments in non-consolidated financial entities, and would be considered to have met the well capitalized ratio requirements for purposes of Section 38 of the Federal Deposit Insurance Act and the generally applicable capital requirements under the federal banking regulators’ capital rules. While the community bank leverage ratio framework is available to us and Byline Bank, neither we nor Byline Bank have elected to adopt the community bank leverage ratio framework at this time.

12

Liquidity Regulations

Historically, the regulation and monitoring of bank and bank holding company liquidity has been addressed as a supervisory matter, without required formulaic measures. The Basel III final framework requires banks and bank holding companies to measure their liquidity against specific liquidity tests that, although similar in some respects to liquidity measures historically applied by banks and regulators for management and supervisory purposes, going forward would be required by regulation. One test, referred to as the liquidity coverage ratio, or LCR, is designed to ensure that the banking entity maintains an adequate level of unencumbered high-quality liquid assets equal to the entity’s expected net cash outflow for a 30 day time horizon (or, if greater, 25% of its expected total cash outflow) under an acute liquidity stress scenario. The other test, referred to as the net stable funding ratio, or NSFR, is designed to promote more medium- and long-term funding of the assets and activities of banking entities over a one-year time horizon. These requirements will incentivize banking entities to increase their holdings of U.S. Treasury securities and other sovereign debt as a component of assets and increase the use of long-term debt as a funding source.

In September 2014, theThe federal banking regulators approved final rules implementing the LCR for advanced approaches banking organizations (i.e., banking organizations with $250 billion or more in total consolidated assets or $10 billion or more in total on-balance sheet foreign exposure) and a modified version of the LCR for bank holding companies with at least $50 billion in total consolidated assets that are not advanced approachapproaches banking organizations. Neither of these final versions of the LCR would apply to us or our bank. In the second quarter of 2016,On October 20, 2020, the federal banking regulators issuedalso approved a proposedfinal rule that would implementimplementing the NSFR for certain U.S. banking organizations. The proposed rule would requirethat requires certain U.S. banking organizations to ensure that they have access to stable funding over a one-yeardefined time horizon and has an effective date of January 1, 2018.period. The proposedfinal rule has yet to be finalized.largely, with minor revisions, adopted the rule as originally proposed. The proposedfinal rule would not apply to U.S. banking organizations with less than $50 billion in total consolidated assets such as us and Byline Bank.

Prompt Corrective Action Framework

The FDIA also requires the federal banking regulators to take prompt corrective action in respect of depository institutions that fail to meet specified capital requirements. The FDIA establishes five capital categories: “well-capitalized”, “adequately capitalized”, “undercapitalized”, “significantly undercapitalized”, and “critically undercapitalized”. The federal banking regulators are required to take certain mandatory supervisory actions, and are authorized to take other discretionary actions, with respect to institutions that are undercapitalized, significantly undercapitalized or critically undercapitalized. The severity of these mandatory and discretionary supervisory actions depends upon the capital category in which the institution is placed. The relevant capital measures, which reflect changes under the Capital Rules that became effective on January 1, 2015, are the total capital ratio, the CET1 capital ratio, the Tier 1 capital ratio and the leverage ratio.

A bank will be (i) “well capitalized” if the institution has a total risk-based capital ratio of 10% or greater, a CET1 capital ratio of 6.5% or greater, a Tier 1 risk-based capital ratio of 8% or greater and a leverage ratio of 5% or greater, and is not subject to any order or written directive by any such regulatory authority to meet and maintain a specific capital level for any capital measure; (ii) “adequately capitalized” if the institution has a total risk-based capital ratio of 8% or greater, a CET1 capital ratio of 4.5% or greater, a Tier 1 risk-based capital ratio of 6% or greater and a leverage ratio of 4% or greater and is not “well capitalized”; (iii) “undercapitalized” if the institution has a total risk-based capital ratio that is less than 8%, a CET1 capital ratio less than 4.5%, a Tier 1 risk-based capital ratio of less than 6% or a leverage ratio of less than 4%; (iv) “significantly undercapitalized” if the institution has a total risk-based capital ratio of less than 6%, a CET1 capital ratio less than 3%, a Tier 1 risk-based capital ratio of less than 4% or a leverage ratio of less than 3%; and (v) “critically undercapitalized” if the institution’s tangible equity is equal to or less than 2% of average quarterly tangible assets. A bank’s capital category is determined solely for the purpose of applying prompt corrective action regulations, and the capital category may not constitute an accurate representation of Byline Bank’s overall financial condition or prospects for other purposes.

The FDIA generally prohibits a depository institution from making any capital distributions (including payment of a dividend) or paying any management fee to its parent holding company if the depository institution would thereafter be “undercapitalized”. An institution that is categorized as undercapitalized, significantly undercapitalized or critically undercapitalized is required to submit an acceptable capital restoration plan to its appropriate federal banking regulator. Under the FDIA, in order for the capital restoration plan to be accepted by the appropriate federal banking agency, a bank holding company must guarantee that a subsidiary depository institution will comply with its capital restoration plan, subject to certain limitations. The bank holding company must also provide appropriate assurances of performance. The obligation of a controlling bank holding company under the FDIA to fund a capital restoration plan is limited to the lesser of 5% of an undercapitalized subsidiary’s assets or the amount required to meet regulatory capital requirements. An undercapitalized institution is also generally prohibited from increasing its average total assets, making acquisitions and capital distributions, establishing any branches or engaging in any new line of business, except in accordance with an

10

accepted capital restoration plan or with the approval of the FDIC. Institutions that are undercapitalized or significantly undercapitalized and either fail to submit an acceptable capital restoration plan or fail to implement an approved capital restoration plan may be subject to a number of requirements and restrictions, including orders to sell sufficient voting stock to become adequately capitalized, requirements to reduce total assets and cessation of receipt of deposits from correspondent banks.

Significantly undercapitalized depository institutions may be subject to a number of requirements and restrictions, including orders to sell sufficient voting stock to become adequately capitalized, requirements to reduce total assets, and cessation of receipt of deposits from correspondent banks. Critically undercapitalized depository institutions are subject to appointment of a receiver or conservator.

13

The appropriate federal banking agency may, under certain circumstances, reclassify a well-capitalized insured depository institution as adequately capitalized. The FDIA provides that an institution may be reclassified if the appropriate federal banking agency determines (after notice and opportunity for hearing) that the institution is in an unsafe or unsound condition or deems the institution to be engaging in an unsafe or unsound practice. The appropriate agency is also permitted to require an adequately capitalized or undercapitalized institution to comply with the supervisory provisions as if the institution were in the next lower category (but not treat a significantly undercapitalized institution as critically undercapitalized) based on supervisory information other than the capital levels of the institution. An institution may be downgraded to, or deemed to be in, a capital category that is lower than indicated by its capital ratios if it is determined to be in an unsafe or unsound condition or if it receives an unsatisfactory examination rating with respect to certain matters.

As of December 31, 2017, we and2021, our bank werewas considered “well capitalized” with a Tier 1 capital ratiosratio of 15.27% and 13.57%12.38%, respectively, total capital ratiosratio of 15.98% and 14.28%13.38%, respectively, Tier 1 leverage ratiosratio of 12.25% and 10.89%10.87%, respectively, and a CET1 capital ratio of 13.77% and 13.57%12.38%, respectively, as calculated under Basel III which went into effect on January 1, 2015.III. For more information on these financial measures at the Company and Byline Bank, see Note 21 of the notes to our audited consolidated financial statements contained in Item 8 of this report.

Safety and Soundness Standards

The FDIA requires the federal banking agencies to prescribe standards, by regulations or guidelines, relating to internal controls, information systems and internal audit systems, loan documentation, credit underwriting, interest rate risk exposure, asset growth, asset quality, earnings, stock valuation and compensation, fees and benefits, and such other operational and managerial standards as the agencies deem appropriate. The federal banking agencies have adopted the Interagency Guidelines for Establishing Standards for Safety and Soundness. The guidelines establish general standards relating to internal controls and information systems, internal audit systems, loan documentation, credit underwriting, interest rate exposure, asset growth, asset quality, earnings and compensation, fees and benefits. In general, these guidelines require, among other things, appropriate systems and practices to identify and manage the risk and exposures specified in the guidelines. These guidelines also prohibit excessive compensation as an unsafe and unsound practice and describe compensation as excessive when the amounts paid are unreasonable or disproportionate to the services performed by an executive officer, employee, director or principal stockholder. In addition, the agencies adopted regulations that authorize, but do not require, an agency to order an institution that has been given notice by an agency that it is not satisfying any of such safety and soundness standards to submit a compliance plan. If, after being so notified, an institution fails to submit an acceptable compliance plan or fails in any material respect to implement an acceptable compliance plan, the banking regulator must issue an order directing action to correct the deficiency and may issue an order directing other actions of the types to which an undercapitalized institution may be subject under the FDIA. See “—Item 1. “Business—Supervision and Regulation—Prompt Corrective Action Framework”. If an institution fails to comply with such an order, the banking regulator may seek to enforce such order in judicial proceedings and to impose civil money penalties.

Deposit Insurance

FDIC insurance assessments

As an FDIC-insured bank, our bank must pay deposit insurance assessments to the FDIC based on its average total assets minus its average tangible equity. Deposits are insured up to applicable limits by the FDIC and such insurance is backed by the full faith and credit of the United States Government.

As an institution with less than $10 billion in assets, our bank’s assessment rates are based on the level of risk it poses to the FDIC’s deposit insurance fund (“DIF”). Pursuant to changes adopted by the FDIC that were effective July 1, 2016, the initial base rate for deposit insurance is between three and 30 basis points. Total base assessment after possible adjustments now ranges between 1.5 and 40 basis points. For established smaller institutions, like Byline Bank, supervisory ratings are used along with (i) an initial base assessment rate, (ii) an unsecured debt adjustment (which can be positive or negative), and (iii) a brokered deposit adjustment, to calculate a total base assessment rate. We are generally unable to control the amount of deposit insurance assessments that we are required to pay the FDIC. At least semi-annually, the FDIC will update its loss and income projections for the DIF and, if needed, will increase or decrease assessment rates, following notice-and-comment rulemaking, if required.

Under the Dodd-Frank Act, theThe limit on FDIC deposit insurance was increased tois $250,000. The coverage limit is per depositor, per insured depository institution for each account ownership category. The Dodd-Frank Act also set a new minimum DIF reserve ratio atis 1.35% of estimated insured deposits. In October 2010, the FDIC adopted a new DIF restoration plan to ensure that the fund reserve ratio reaches 1.35% by September 30, 2020, as required by the Dodd-Frank Act. In August 2016, the FDIC announced that the DIF reserve ratio had surpassed 1.15% as of June 30, 2016.

11

Under the FDIA, the FDIC may terminate deposit insurance upon a finding that an institution has engaged in unsafe and unsound practices, is in an unsafe or unsound condition to continue operations or has violated any applicable law, regulation, rule, order or condition imposed by the FDIC.

Other assessments

In addition, the Deposit Insurance Funds Act of 1996 authorized the Financing Corporation (“FICO”) to impose assessments on certain deposits in order to service the interest on the FICO’s bond obligations from deposit insurance fund assessments. The amount assessed on individual institutions is in addition to the amount, if any, paid for deposit insurance according to the FDIC’s risk-related assessment rate schedules. Assessment rates may be adjusted quarterly to reflect changes in the assessment base.

All Illinois state-chartered banks are required to pay supervisory assessments to the IDFPR to fund the operations of that agency. The amount of the assessment is calculated on the basis of Byline Bank’s total assets.

The Volcker Rule

The Dodd-Frank Act, pursuant to a statutory provision commonly called the “Volcker Rule”, prohibits banks and their affiliates from engaging in proprietary trading and investing in and sponsoring hedge funds and private equity funds. The Volcker Rule which became effective in July 2015, does2015. On July 9, 2019, pursuant to the Consumer Protection Act, the federal banking regulators issued a final rule to

14

exempt community banks that have total assets of $10 billion or less and total consolidated trading assets and liabilities equal to or less than 5% of total consolidated assets from the Volcker Rule. Although we and Byline Bank qualify for exemption under the final rule, the Volcker Rule would not significantly affect the operations of us and our subsidiaries, as we do not have any significant engagement in the businesses prohibitedcovered by the Volcker Rule.

Depositor Preference

The FDIA provides that, in the event of the “liquidation or other resolution” of an insured depository institution, the claims of depositsdepositors of the institution, including the claims of the FDIC as subrogee of insured depositors, and certain claims for administrative expenses of the FDIC as a receiver, will have priority over other general unsecured claims against the institution. If an insured depository institution fails, insured and uninsured depositors, along with the FDIC, will have priority in payment ahead of unsecured, non-deposit creditors, including depositors whose deposits are payable only outside of the United States and the parent bank holding company, with respect to any extensions of credit they have made to such insured depository institution.

Interstate Branching

Illinois state-chartered banks, such as Byline Bank, have the authority under Illinois law to establish branches anywhere in the State of Illinois, subject to receipt of all required regulatory approvals.

Federal law permits state and national banks to merge with banks in other states subject to: (i) regulatory approval; (ii) federal and state deposit concentration limits; and (iii) any state law limitations requiring the merging bank to have been in existence for a minimum period of time (not to exceed five years) prior to the merger. The establishment of new interstate branches or the acquisition of individual branches of a bank in another state (rather than the acquisition of an out-of-state bank in its entirety) has historically been permitted only in those states the laws of which expressly authorize such expansion. However, the Dodd-Frank Act permits well-capitalized and well-managed banks to establish new branches across state lines without these impediments.

Consumer Financial Protection

We are subject to a number of federal and state consumer protection laws that extensively govern our relationship with our customers. These laws include the Equal Credit Opportunity Act (“ECOA”), the Fair Credit Reporting Act, the Truth in Lending Act (“TILA”), the Truth in Savings Act, the Electronic Fund Transfer Act, the Expedited Funds Availability Act, the Home Mortgage Disclosure Act, the Fair Housing Act, the Real Estate Settlement Procedures Act, the Fair Debt Collection Practices Act, the Fair Credit Reporting Act, the Service Members Civil Relief Act, the Right to Financial Privacy Act, the Telephone Consumer Protection Act, the CAN-SPAM Act, and these laws’ respective state-law counterparts, as well as state usury laws and laws regarding unfair and deceptive acts and practices. These and other federal laws, among other things, require disclosures of the cost of credit and terms of deposit accounts, provide substantive consumer rights, prohibit discrimination in credit transactions, regulate the use of credit report information, provide financial privacy protections, restrict our ability to raise interest rates on extensions of credit and subject us to substantial regulatory oversight. Violations of applicable consumer protection laws can result in significant potential liability from litigation brought by customers, including actual damages, restitution and attorneys’ fees. Federal banking regulators, state attorneys general and state and local consumer protection agencies may also seek to enforce consumer protection requirements and obtain these and other remedies, including regulatory sanctions, customer rescission rights, action by the state and local attorneys general in each jurisdiction in which we operate and civil money penalties. Failure to comply with consumer protection requirements may also result in our failure to obtain any required bank regulatory approval for merger or acquisition transactions we may wish to pursue or our prohibition from engaging in such transactions even if approval is not required.

The Dodd-Frank Act created a new, independent federal agency, the Consumer Financial Protection Bureau (“CFPB”), which was grantedhas broad rulemaking, supervisory and enforcement powers under various federal consumer financial protection laws with respect to certain consumer financial products and services, including the ability to require reimbursements and other payments to customers for alleged legal violations. The CFPB has the authority to impose significant penalties, as well as injunctive relief that prohibits lenders from engaging in allegedly unlawful practices. The CFPB is also authorized to engage in consumer financial education, track consumer complaints, request data and promote the availability of financial services to underserved consumers and

12

communities. Although all institutions are subject to rules adopted by the CFPB and examination by the CFPB in conjunction with examinations by the institution’s primary federal regulator, the CFPB has primary examination and enforcement authority over banks with assets of $10 billion or more. The FDIC has primary responsibility for examination of our bank and enforcement with respect to various federal consumer protection laws so long as our bank has total consolidated assets of less than $10 billion, and state authorities are responsible for monitoring our compliance with all state consumer laws. The CFPB also has the authority to require reports from institutions with less than $10 billion in assets, such as our bank, to support the CFPB in implementing federal consumer protection laws, supporting examination activities, and assessing and detecting risks to consumers and financial markets.

The consumer protection provisions of the Dodd-Frank Act and the examination, supervision and enforcement of those laws and implementing regulations by the CFPB have created a more intense and complex environment for consumer finance regulation. The CFPB has significant authority to implement and enforce federal consumer finance laws, including the TILA and the ECOA and new requirements for financial services products provided for in the Dodd-Frank Act.ECOA.

The CFPB has broad rulemaking authority for a wide range of consumer financial laws that apply to all banks including, among other things, the authority to prohibit “unfair, deceptive, or abusive” acts and practices. Abusive acts or practices are defined in the Dodd-Frank Act as those that (1) materially interfere with a consumer’s ability to understand a term or condition of a consumer financial product or service, or (2) take unreasonable advantage of a consumer’s (a) lack of financial savvy, (b) inability to protect herself or

15

himself in the selection or use of consumer financial products or services, or (c) reasonable reliance on a covered entity to act in the consumer’s interests. The review of products and practices to prevent such acts and practices is a continuing focus of the CFPB, and of banking regulators more broadly. The ultimate impact of this heightened scrutiny is uncertain but it could result in changes to pricing, practices, products and procedures. It could also result in increased costs related to regulatory oversight, supervision and examination, additional remediation efforts and possible penalties. The Dodd-Frank Act does not prevent states from adopting stricter consumer protection standards. State regulation of financial products and potential enforcement actions could also adversely affect our business, financial condition or results of operations.

Federal Home Loan Bank Membership

Byline Bank is a member of the Federal Home Loan Bank of Chicago (“FHLB”), which serves as a central credit facility for its members. The FHLB is funded primarily from proceeds from the sale of obligations of the FHLB system. It makes loans to member banks in the form of FHLB advances. All advances from the FHLB are required to be fully collateralized as determined by the FHLB.

Ability-To-Pay Rules and Qualified Mortgages

As required by the Dodd-Frank Act, the CFPB issued a series of final rules in January 2013 amending Regulation Z, implementing TILA, which requires mortgage lenders to make a reasonable and good faith determination, based on verified and documented information, that a consumer applying for a residential mortgage loan has a reasonable ability to repay the loan according to its terms. These final rules prohibit creditors, such as Byline Bank, from extending residential mortgage loans without regard for the consumer’s ability to repay and add restrictions and requirements to residential mortgage origination and servicing practices. In addition, these rules restrict the imposition of prepayment penalties and restrict compensation practices relating to residential mortgage loan origination. Mortgage lenders are required to determine consumers’ ability-to-repay in one of

On April 27, 2021, the CFPB issued two ways. The first alternative requires the mortgage lender to consider eight underwriting factors when making the credit decision. Alternatively, the mortgage lender can originate “qualified mortgages”, which are entitled to a presumptionnew rules that the creditor making the loan satisfied the ability to repay requirements. In general, awould modify qualified mortgage is a residentialloan requirements and provide flexibility to banks and other lenders in determining consumers’ ability-to-repay. Byline Bank complies with, and will continue with, all applicable qualified mortgage loan that does not have certain high risk features, such as negative amortization, interest-only payments, balloon payments, or a term exceeding 30 years. In addition, to be a qualified mortgage, the points and fees paid by a consumer cannot exceed 3% of the total loan amount and the borrower’s total debt-to-income ratio must be no higher than 43% (subject to certain limited exceptions for loans eligible for purchase, guarantee or insurance by a government sponsored enterprise or a federal agency).requirements.

Commercial Real Estate Guidance

In December 2015, the federal banking regulators released a statement entitled “Interagency Statement on Prudent Risk Management for Commercial Real Estate Lending” (the “CRE Guidance”). In the CRE Guidance, the federal banking regulators (i) expressed concerns with institutions that ease commercial real estate underwriting standards, (ii) directed financial institutions to maintain underwriting discipline and exercise risk management practices to identify, measure and monitor lending risks, and (iii) indicated that they will continue to pay special attention to commercial real estate lending activities and concentrations going forward. The federal banking regulators previously issued guidance in December 2006, entitled “Interagency Guidance on Concentrations in Commercial Real Estate Lending, Sound Risk Management Practices”, which stated that an institution is potentially exposed to significant commercial real estate concentration risk, and should employ enhanced risk management practices, where (1) total commercial real estate loans represent 300% or more of its total capital and (2) the outstanding balance of such institution’s commercial real estate loan portfolio has increased by 50% or more during the prior 36 months.

Leveraged Lending Guidance

In March 2013, theThe federal banking regulators have jointly issued guidance on leveraged lending that updates and replaces theprior guidance for leveraged finance activities issued by the federal banking regulators in April 2001.activities. The revised leveraged lending guidance describes regulatory expectations for the sound risk management of leveraged lending activities, including the importance

13

for institutions to maintain, among other things, (i) a credit limit and concentration framework consistent with the institution’s risk appetite, (ii) underwriting standards that define acceptable leverage levels, (iii) strong pipeline management policies and procedures and (iv) guidelines for conducting periodic portfolio and pipeline stress tests.

Community Reinvestment Act of 1977

Under the CRA, our bank has an obligation, consistent with safe and sound operations, to help meet the credit needs of the market areas where it operates, which includes providing credit to low- and moderate-income individuals and communities. In connection with its examination of our bank, the FDIC is required to assess our bank’s compliance with the CRA. Our bank’s failure to comply with the CRA could, among other things, result in the denial or delay inof certain corporate applications filed by us or our bank, including applications for branch openings or relocations and applications to acquire, merge or consolidate with another banking institution or holding company. Our bank received a rating of “Satisfactory” in its most recently completed CRA examination which is dated February 17, 2016.December 1, 2019.

On June 5, 2020, the Office of the Comptroller of the Currency ("OCC") published a final rule which would have comprehensively amended and modernized how banks received credit under the CRA in serving low- and moderate-income individuals and communities; however, the OCC rescinded this rule effective as of December 14, 2021. The OCC, FDIC and the FRB also issued a joint statement on July 20, 2021 committing to work together to strengthen and modernize the CRA rules. However, these agencies have not yet issued a new proposed rule. At this time, we are unable to determine what impact, if any, potential CRA reform may have on the operations of Byline Bank.

Financial Privacy

The federal banking regulators have adopted rules limiting the ability of banks and other financial institutions to disclose non-public information about consumers to unaffiliated third parties. These limitations require disclosure of privacy policies to consumers

16

and, in some circumstances, allow consumers to prevent disclosure of certain personal information to an unaffiliated third party. These regulations affect how consumer information is transmitted through diversified financial companies and conveyed to outside vendors.

Anti-Money Laundering and the USA PATRIOT Act

A major focus of governmental policy on financial institutions in recent years has been combating money laundering and terrorist financing. The Uniting and Strengthening America by Providing Appropriate Tools Required to Intercept and Obstruct Terrorism Act of 2001, or the USA PATRIOT Act, substantially broadened the scope of United States anti money laundering laws and regulations by imposing significant new compliance and due diligence obligations, creating new crimes and penalties and expanding the extra-territorial jurisdiction of the United States in these areas: customer identification programs, money laundering, terrorist financing, identifying and reporting suspicious activities and currency transactions, currency crimes, and cooperation between financial institutions and law enforcement authorities. The U.S. Treasury Department’s Financial Crimes Enforcement Network ("FinCEN"), among other federal agencies, also promulgates rules and regulations regarding the USA PATRIOT Act with which financial institutions are required to comply. Financial institutions are prohibited from entering into specified financial transactions and account relationships and must use enhanced due diligence procedures in their dealings with certain types of high-risk customers and implement a written customer identification program. Financial institutions must take certain steps to assist government agencies in detecting and preventing money laundering and report certain types of suspicious transactions. Regulatory authorities routinely examine financial institutions for compliance with these obligations, and failure of a financial institution to maintain and implement adequate programs to combat money laundering and terrorist financing, or to comply with all of the relevant laws or regulations, could have serious legal and reputational consequences for the institution, including causing applicable bank regulatory authorities not to approve merger or acquisition transactions when regulatory approval is required or to prohibit such transactions even if approval is not required. Regulatory authorities have imposed cease and desist orders and significant civil money penalties against institutions found to be violating these obligations and have in some cases brought criminal actions against some institutions for these types of violations.

Recently, on January 1, 2021, Congress passed the Corporate Transparency Act as part of the National Defense Authorization Act, which enacted the most significant overhaul of the anti-money laundering laws since the USA Patriot Act. Notable amendments include (i) significant changes to the collection of beneficial ownership information and the establishment of a beneficial ownership registry, which requires corporate entities (generally, any corporation, limited liability company, or other similar entity with 20 or fewer employees and annual gross income of $5 million or less) to report beneficial ownership information to FinCEN (which will be maintained by FinCEN and made available upon request to financial institutions); (ii) enhanced whistleblower provisions, which provide that one or more whistleblowers who voluntarily provide original information leading to the successful prosecution of violations of the anti-money laundering laws in any judicial or administrative action brought by the Secretary of the Treasury or the U.S. Attorney General resulting in monetary sanctions exceeding $1 million (including disgorgement and interest but excluding forfeiture, restitution, or compensation to victims) will receive not more than 30 percent of the monetary sanctions collected and will receive increased protections; (iii) increased penalties for violations of anti-money laundering laws and regulations; (iv) improvements to existing information sharing provisions that permit financial institutions to share information relating to suspicious activity reports with foreign branches, subsidiaries, and affiliates (except those located in China, Russia, or certain other jurisdictions) for the purpose of combating illicit finance risks; and (v) expanded duties and enforcement powers for FinCEN. Many of the amendments, including those with respect to beneficial ownership, require FinCEN to promulgate rules. On December 7, 2021 FinCEN issued the first of three proposed rules to implement changes to the beneficial ownership requirements and related amendments set forth in the Corporate Transparency Act. At this time, due to the fact that the other two rules have not yet been issued, we are unable to determine what impact, if any, the finalized rules may have on the operations of Byline Bank.

Office of Foreign Assets Control Regulation

The U.S. Treasury Department’s Office of Foreign Assets Control, or OFAC, under authority of various laws, administers and enforces economic and trade sanctions against targeted foreign countries and regimes, under authority of various laws, including designated foreign countries, nationals and others. OFAC publishes lists of specially designated targets and countries. We and our bank are responsible for, among other things, blocking accounts of, and transactions with, such targets and countries, prohibiting unlicensed trade and financial transactions with them and reporting blocked transactions after their occurrence. Failure to comply with these sanctions could have serious legal and reputational consequences and could result in civil money penalties imposed on the institution by OFAC. Failure to comply with these sanctions could also cause applicable bank regulatory authorities not to approve merger or acquisition transactions when regulatory approval is required or to prohibit such transactions even if approval is not required.

Incentive Compensation

The Federal Reserve will review, as part of the regular, risk-focused examination process, the incentive compensation arrangements of banking organizations, such as us, that are not “large, complex banking organizations.” These reviews will be tailored to each organization based on the scope and complexity of the organization’s activities and the prevalence of incentive compensation arrangements. The findings of the supervisory initiatives will be included in reports of examination. Deficiencies will be incorporated into the organization’s supervisory ratings, which can affect the organization’s ability to make acquisitions and take other actions. Enforcement actions may be taken against a banking organization if its incentive compensation arrangements, or related risk management control or governance processes, pose a risk to the organization’s safety and soundness and the organization is not taking prompt and effective measures to correct the deficiencies.

1417

In June 2010, the federal banking regulators issued comprehensive final guidance on incentive compensation policies intended to ensure that the incentive compensation policies of banking organizations do not undermine the safety and soundness of such organizations by encouraging excessive risk-taking. The guidance, which covers all employees that have the ability to materially affect the risk profile of an organization, either individually or as part of a group, is based upon the key principles that a banking organization’s incentive compensation arrangements should (1) provide incentives that appropriately balance risk and financial results in a manner that does not encourage employees to expose their organizations to imprudent risk, (2) be compatible with effective internal controls and risk management and (3) be supported by strong corporate governance, including active and effective oversight by the organization’s board of directors.

During the second quarter of 2016, certain U.S. regulators, including the Federal Reserve, the FDIC and the SEC, proposed revised rules on incentive-based payment arrangements at specified regulated entities having at least $1 billion in total assets (including us and Byline Bank). The proposed revised rules would establish general qualitative requirements applicable to all covered entities, which would include: (i) prohibiting incentive arrangements that encourage inappropriate risks by providing excessive compensation; (ii) prohibiting incentive arrangements that encourage inappropriate risks that could lead to a material financial loss; (iii) establishing requirements for performance measures to appropriately balance risk and reward; (iv) requiring board of director oversight of incentive arrangements; and (v) mandating appropriate record-keeping.Cybersecurity

Pursuant to rules adopted by the stock exchanges and approved by the SEC in January 2013 under the Dodd-Frank Act, public company compensation committee members must meet heightened independence requirements and consider the independence of compensation consultants, legal counsel and other advisors to the compensation committee. A compensation committee must have the authority to hire advisors and to have the public company fund reasonable compensation of such advisors.

Public companies will be required, once stock exchanges impose additional listing requirements under the Dodd-Frank Act, to implement “clawback” procedures for incentive compensation payments and to disclose the details of the procedures which allow recovery of incentive compensation that was paid on the basis of erroneous financial information necessitating a restatement due to material noncompliance with financial reporting requirements. This clawback policy is intended to apply to compensation paid within a three-year look-back window of the restatement and would cover all executives who received incentive awards.

Cybersecurity

In March 2015, federal regulators issued two related statements regarding cybersecurity. One statement indicates that financial institutions should design multiple layers of security controls to establish lines of defense and to ensure that their risk management processes also address the risk posed by compromised customer credentials, including security measures to reliably authenticate customers accessing internet-based services of the financial institution. The other statement indicates that a financial institution’s management is expected to maintain sufficient business continuity planning processes to ensure the rapid recovery, resumption and maintenance of the institution’s operations after a cyber-attack involving destructive malware. A financial institution is also expected to develop appropriate processes to enable recovery of data and business operations and address rebuilding network capabilities and restoring data if the institution or its critical service providers fall victim to this type of cyber-attack. If we fail to observe the regulatory guidance, we could be subject to various regulatory sanctions, including financial penalties.

In November 2021, the federal regulators finalized a rule concerning notification requirements for banks related to significant computer security incidents. Under the final rule, a bank or its bank holding company is required to notify its applicable federal banking regulators within 36 hours of incidents that have materially disrupted or degraded, or are reasonably likely to materially disrupt or degrade, the banking organization’s ability to deliver services to a material portion of its customer base, jeopardize the viability of key operations of the organization, or impact the stability of the financial sector. The rule is effective April 1, 2022, with compliance required by May 1, 2022.

In the ordinary course of business, we rely on electronic communications and information systems to conduct our operations and to store sensitive data. We employ an in-depth, layered, defensive approach that leverages people, processes and technology to manage and maintain cybersecurity controls. We employ a variety of preventative and detective tools to monitor, block, and provide alerts regarding suspicious activity, as well as to report on any suspected advanced persistent threats. Notwithstanding the strength of our defensive measures, the threat from cyberattacks is severe, attacks are sophisticated and increasing in volume, and attackers respond rapidly to changes in defensive measures. While to date,to-date we have not experienced a significant compromise, significant data loss or any material financial losses related to cybersecurity attacks, our systems and those of our customers and third party service providers are under constant threat and it is possible that we could experience a significant event in the future. Risks and exposures related to cybersecurity attacks are expected to remain high for the foreseeable future due to the rapidly evolving nature and sophistication of these threats, as well as due to the expanding use of internet banking, mobile banking and other technology-based products and services by us and our customers.

Legislative and Regulatory Responses to the COVID-19 Pandemic

The COVID-19 pandemic has created extensive disruptions to the global economy. There have been a number of regulatory actions undertaken by the bank regulatory agencies intended to help mitigate the adverse economic impact of the COVID-19 pandemic on borrowers, including several rules from the bank regulatory agencies requiring financial institutions to work constructively with borrowers affected by the COVID-19 pandemic. Most of these regulatory actions, along with other government programs that were designed to assist impacted individuals and companies, are no longer applicable; however, we will continue to monitor for any additional regulatory actions that may be taken by the bank regulatory agencies in the future in response to the pandemic and ensure that we address any such applicable regulatory actions.

Future Legislation and Regulation

Congress may enact legislation from time to time that affects the regulation of the financial services industry, and state legislatures may enact legislation from time to time affecting the regulation of financial institutions chartered by or operating in those states. Federal and state regulatory agencies also periodically propose and adopt changes to their regulations or change the manner in which existing regulations are applied. The substance or impact of pending or future legislation or regulation, or the application thereof, cannot be predicted, although enactment of the proposed legislation could affect the regulatory structure under which we operate and may significantly increase our costs, impede the efficiency of our internal business processes, require us to increase our regulatory capital or modify our business strategy, or limit our ability to pursue business opportunities in an efficient manner. Our business, financial condition, results of operations or prospects may be adversely affected, perhaps materially, as a result.

15Information About Our Executive Officers

The following list sets forth the name, current age, principal position and recent business experience of each of our executive officers:

Thomas Abraham, 56, became President of Byline Bank’s Small Business Capital (“SBC”) line of business in May 2019. Mr. Abraham previously served as Senior Vice President, SBA Sales Manager of SBC since October 2016.

John M. Barkidjija, 58, became Executive Vice President and Head of Commercial Real Estate and Specialty Finance of Byline Bank in January 2019. Mr. Barkidjija previously served as Senior Vice President, Group Head, Commercial Real Estate of Byline Bank since January 2014.

Thomas J. Bell III, 55, is Senior Vice President and Corporate Treasurer of Byline Bank since August 2013.

Megan Biggam, 43, became Executive Vice President of Retail Banking of Byline Bank in February 2020. Ms. Biggam previously served as Senior Vice President of Retail Banking of Byline Bank since June 2013.

18

Ana Casanueva, 38, became Senior Vice President and Director of Legal of Byline and Byline Bank in June 2021. Ms. Casanueva previously served as Associate General Counsel of Byline Bank since 2019, and as Corporate Development Officer from 2013 to 2019.

Lindsay Corby, 43, is Executive Vice President and Chief Financial Officer of Byline and Byline Bank since July 2015.

Mark Fucinato, 65, became Executive Vice President and Chief Credit Officer for Byline and Byline Bank in August 2020. He previously served as Senior Vice President and Senior Credit Officer of Byline Bank since August 2019. Prior to that, Mr. Fucinato served as Senior Credit Officer at MB Financial Bank from 2016 to 2019.

Angela Hart, 47, became Executive Vice President and Head of Wealth Management and Trust in August 2021. Prior to that, Ms. Hart served as Senior Vice President and Wealth Strategist at Northern Trust.

Roberto R. Herencia, 62, became Chairman of Byline Bancorp, Inc. and Byline Bank in June 2013, and Executive Chairman and Chief Executive Officer in February, 2021. He serves as a member of the Board of Director’s risk, executive credit, trust, and Asset-Liability Committee (‘‘ALCO’’) committees of Byline Bank.

Michelle Johnson, 40, became Senior Vice President and Chief Risk Officer of Byline Bank in October 2019. Prior to that, Ms. Johnson served as Deputy Chief Risk Officer since 2018. Ms. Johnson joined Byline Bank in 2015 as Director of IT Risk Management.

Nicolas Mando, 50, became Senior Vice President and Chief Technology and Operations Officer of Byline Bank in November 2021. He served as Director of Special Projects of Byline Bank since 2019. Prior to that, Mr. Mando served as Chief Operating Officer at Bridgeview Bank since 2009.

Alberto J. Paracchini, 51, is President and a Director of Byline Bancorp, Inc. and Chief Executive, President and a Director of Byline Bank. He joined Byline in June 2013.

Brogan Ptacin, 61, became Executive Vice President and Head of Commercial Banking for Byline Bank in January 2019. Prior to that, Mr. Ptacin served as a Managing Director of First Bank & Trust since 2009 until First Bank & Trust was acquired by Byline in 2018.

Dana Traci, 52, became Executive Vice President and Chief Human Resources Officer of Byline Bank in November 2019. Prior to that, Ms. Traci served as Interim Chief Human Resources Officer for Discover Financial Services and held various other roles at Discover since 1994.

Item 1A. Risk Factors.

The material risks and uncertainties that management believes affect us are described below. You should carefully consider these risks, together with all of the information included herein. Any of the following risks, as well as risks that we do not know or currently deem immaterial, could have a material adverse effect on our business, financial condition, or results of operations.

Risks Related to Our Business

Credit and Interest Rate Risks

Our business depends on our ability to successfully manage credit risk.

The operation of our business requires us to manage credit risk. As a lender, we are exposed to the risk that our borrowers will be unable to repay their loans and leases according to their terms, and that the collateral securing repayment of their loans or leases, if any, may not be sufficient to ensure repayment. In addition, there are risks inherent in making any loan or lease, including risks with respect to the period of time over which the loan or lease may be repaid, risks relating to proper loan or lease underwriting, risks resulting from changes in economic and industry conditions and risks inherent in dealing with individual borrowers, including the risk that a borrower may not provide information to us about its business in a timely manner, and/or may present inaccurate or incomplete information to us, and risks relating to the value of collateral. In order to manage credit risk successfully, we must, among other things, maintain disciplined and prudent underwriting standards and ensure that our bankers follow those standards. The weakening of these standards for any reason, such as an attempt to attract higher yielding loans or leases, a lack of discipline or diligence by our employees in underwriting and monitoring loans and leases, the inability of our employees to adequately adapt policies and procedures to changes in economic or any other conditions affecting borrowers and the quality of our loan and lease portfolio, may result in loan or lease defaults, foreclosures and additional charge-offs and may necessitate that we significantly increase our allowance for loan and lease losses, each of which could adversely affect our net income. As a result, our inability to successfully manage credit risk could have a material adverse effect on our business, financial condition, or results of operations.

We may underestimate the credit losses inherent in our loan and lease portfolio and have credit losses in excess of the amount we provide for loan and lease losses.

The credit quality of our loan and lease portfolio can have a significant impact on our earnings. We maintain an allowance for loan and lease losses, which is a reserve established through a provision for loan and lease losses charged to expense representing management’s best estimate of probable losses that may be incurred within our existing portfolio of loans and leases. The allowance, in the judgment of management, is necessary to reserve for probablyprobable incurred loan and lease losses and risks inherent in our loan and lease portfolio. The level of the allowance reflects

19

management’s continuing evaluation of specific credit risks; the quality of the loan and lease portfolio; the value of the underlying collateral; the level of non-accruing loans and leases; incurred losses inherent in the current loan and lease portfolio; and economic, political, and regulatory conditions. Given our limited history in making loans sinceOur allowance methodology includes the Recapitalization, we do not have adequateuse of both actual historical loss data on loans made by Byline Bank to calculate loan allowances solely based on the Banks’s historical loan experience and, as a result, we calculate loan allowances and reserves, in part, based onwell as industry and peer data, which could increase the subjectivity of the calculation. This process, which is critical to our financial results and condition, requires difficult, subjective and complex judgments. In accordance with accounting principles generally accepted in the United States of America (“GAAP”) for business combination accounting, the loans acquired through the Recapitalizationour recapitalization and our acquisition of Ridgestonesubsequent bank acquisitions were recorded at their estimated fair value. Therefore, there was no allowance for loan losses associated with those loans at acquisition. Management continues to evaluate the allowance needed on the acquired loans, which includes considering the remaining net remaining acquisition accounting adjustment ($31.74.8 million at December 31, 2017)2021).

For our loans and leases, we perform loan reviews and grade loans on an ongoing basis, and we estimate and establish reserves for credit risks and credit losses inherent in our credit exposure (including unfunded lending commitments). The objective of our loan review and grading procedures is to identify existing or emerging credit quality problems so that appropriate steps can be initiated to avoid or minimize future losses. This process, which is critical to our financial results and condition, requires difficult, subjective and complex judgments of loan collectability. As is the case with any such assessments, there is always the chance that we will fail to identify the proper factors or that we will fail to estimate accurately the impact of factors that we do identify.

Although we believe our allowance for loan and lease losses is adequate to absorb probable and reasonably estimable losses in our loan and lease portfolio, this allowanceit may not be sufficient. We could sustain credit losses that are significantly higher than the amount of our allowance for loan and lease losses. Higher credit losses could arise foras a result of a variety of reasons, such as changes in economic conditions affecting borrowers, new information regarding our loans and leases and other factors within and outside our control. If real estate values were to decline or if economic conditions in our markets were to deteriorate unexpectedly, additional loan and lease losses not incorporated in the existing allowance for loan and lease losses might occur. Losses in excess of the existing allowance for loan and lease losses will reduce our net income and could have a material adverse effect on our business, financial condition, or results of operations. A severe downturn in the economy generally, in our markets specifically, or affecting the business and assets of individual customers, would generate increased charge-offs and a need for higher reserves.

As of December 31, 2017, our allowanceprovision for loan and lease losses as a percentage of total loans and leases was 0.73% and as a percentage of total nonperforming loans and leases was 99.30%. Additional credit losses will likely occur in the future andlosses.

We may occur at a rate greater than we have previously experienced. We mayalso be required to take additional provisions for loan and lease losses in the

16

future to further to supplement the allowance for credit losses, either due to management’s assessment that the allowance is inadequate or requirements by our banking regulators. In addition, bankBank regulatory agencies will periodically review our allowance, for loan and lease losses, the policies and procedures we use to determine the level of the allowance and the value attributed to nonperformingnon-performing loans or to real estate acquired through foreclosure. Such regulatory agencies may require us to make further provisions or recognize future charge-offs. Further, if charge-offs in future periods that exceed the allowance for loan and lease losses, we may need additional adjustmentswould require an to increase the allowance for loan and lease losses.allowance.

Any increases in our provision for loan and lease losses will result in a decrease in net income and may reduce retained earnings and capital and, therefore, have a material adverse effect on our business, financial condition and results of operations.

The FASB has recently issued an accounting standard update that will result in a significant change in how we recognize credit losses and may have a material impact on our financial condition or results of operations.

In addition, in June 2016, the Financial Accounting Standards Board (the “FASB”) issued a newan accounting standard update, “Financial Instruments-Credit Losses (Topic 326), Measurement of Credit Losses on Financial Instruments” that will replace the current approach under GAAP for establishing allowances for loan and lease losses, which generally considers only past events and current conditions, with a forward-looking methodology that reflectsreferred to as the expected credit losses over the lives of financial assets, starting when such assets are first originated or acquired. Under the revised methodology, credit losses will be measured based on past events, current conditions and reasonable and supportable forecasts of future conditions that affect the collectability of financial assets. The new standard is generally expected to result in increases to allowance levels and will require the application of the revised methodology to existing financial assets through a one-time adjustment to retained earnings upon initial effectiveness. The standard will be effective for us in 2020 or, if we remain an emerging growth company and continue to elect not to opt out of the extended transition period for new accounting standards, 2021.Current Expected Credit Loss (“CECL”). See Note 2 of the notes to our audited consolidated financial statements contained in Item 8 of this report for additional information about the standard.

Greater seasoningWe also expect to incur transition and ongoing costs in developing and implementing the CECL methodology. We cannot yet determine the magnitude of our loan portfolio could increase riskany such one-time cumulative adjustment or of credit defaults in the future.

A significant portionoverall impact of our loan portfolio is of relatively recent origin. Normally, loans do not begin to show signs of credit deterioration or default until they have been outstanding for some period of time (which varies by loan duration and loan type), a process referred to as “seasoning”. As a result, a portfolio of more seasoned loans may more predictably follow a bank’s historical default or credit deterioration patterns than a newer portfolio. Because 69.1% of our portfolio has been originated since the Recapitalization, the current level of delinquencies and defaults may not represent the level that may prevail as the portfolio becomes more seasoned. If delinquencies and defaults increase, we may be required to increase our provision for loan and lease losses, which could have a material adverse effectnew standard on our business, financial condition andor results of operations.

Our business, profitability and liquidity may be adversely affected by deterioration in the credit quality of, or defaults by, third parties who owe us money, securities or other assets or whose securities or obligations we hold.

In addition to relying on borrowers to repay their loans and leases, we are exposed to the risk that third parties that owe us money, securities or other assets will not perform their obligations. These parties may default on their obligations to us due to bankruptcy, lack of liquidity, operational failure or other reasons. A default by a significant market participant, or concerns that such a party may default, could lead to significant liquidity problems, losses or defaults by other parties, which in turn could adversely affect us.

We are also subject to the risk that our rights against third parties may not be enforceable in all circumstances. Deterioration in the credit quality of third parties whose securities or obligations we hold, including the Federal Home Loan Mortgage Corporation, Government National Mortgage Corporation and municipalities, could result in significant losses.

Our business is subject to interest rate risk and fluctuations in interest rates may adversely affect our earnings.

Fluctuations in interest rates may negatively affect our banking business and may weaken demand for some of our products. Our earnings and cash flows are largely dependent on net interest income, which is the difference between the interest income that we earn on interest-earning assets, such as investment securities, and loans, and leases, the interest expense that we pay on interest-bearing liabilities, such as deposits and borrowings. Additionally, changes in interest rates also affect the premiums we may receive in connection with the sale of SBA and USDA (together, “U.S.U.S. government guaranteed”)guaranteed loans in the secondary market, pre-payment speeds of loans for which we own servicing rights, our ability to fund our operations with customer deposits, and the fair value of securities in our investment portfolio. Therefore, any change in general market interest rates including changes in federal fiscal and monetary policies can have a significant effect on our net interest income and results of operations.

We seek to mitigate our interest rate risk by entering into interest rate swaps and other interest rate derivative contracts from time to time with counterparties. Our hedging strategies rely on assumptions and projections regarding interest rates, asset levels, and general market factors and subject us to counterparty risk. There is no assurance that our interest rate mitigation strategies will be successful, and if our assumptions and projections prove to be incorrect or our hedging strategies do not adequately mitigate the impact of changes in interest rates, we may incur losses that could adversely affect our earnings.

Our interest-earning assets and interest-bearing liabilities may react in different degrees to changes in market interest rates. Interest rates on some types of assets and liabilities may fluctuate prior to changes in broader market interest rates, while rates on other types of assets and liabilities may lag behind.lag. The result of these changes to rates may cause differing spreads on interest-earning assets and interest-bearing liabilities. Although we take measures intended to manage the risks from changes in market interest rates, we cannot control or accurately predict changes in market rates of interest or be sure our protective measures are adequate.

17

Interest rates are volatileAs of December 31, 2021, we had $2.2 billion of non-interest-bearing demand deposits and highly sensitive to many factors that are beyond our control, such as economic conditions and policies$572.4 million of various governmental and regulatory agencies, and, in particular U.S. monetary policy. For example, we face uncertainty regarding the interest rate risk, and resulting effect on our portfolio, that could result if the Board of Governors of the Federal Reserve System (the “Federal Reserve”) reduces the amount of securities it holds on its balance sheet. In recent years, it has been the policy of the Federal Reserve to maintaininterest-bearing checking accounts. Current interest rates at historicallyfor interest-bearing accounts are low levels through a targeted federal funds rate and the purchase of U.S. Treasury and mortgage-backed securities. As a result, yields on securities we have purchased, anddue to current market rates on the loans we have originated, have been at levels lower than were available prior to the severe economic recession occurring during 2007 through 2009. Consequently, the average yield on banks’ interest-earning assets has generally decreased during the current low interest rate environment.conditions. If a low interest rate environment persists, we may be unable to increase our net interest income.

As of December 31, 2017, we had $760.9 million of non-interest bearing transaction accounts and $186.6 million of interest-bearing transaction accounts. Current interest rates for interest-bearing accounts are very low due to current market conditions. However, we do not know what market rates will eventually

20

be, especially if the Federal ReserveFRB increases interest rates. Ifrates as is currently anticipated. To the extent we need to offer higher interest rates on checking accounts to maintain current clientscustomers or attract new clients,customers, our interest expense will increase, perhaps materially. Furthermore, if we fail to offer interest in a sufficient amount to keep these demand deposits, our core deposits may be reduced, which would require us to obtain funding in other ways or risk slowing our future asset growth.

We may be adversely impacted by the transition from the London Interbank Offered Rate (“LIBOR”) as a reference rate.

On March 5, 2021, the United Kingdom’s Financial Conduct Authority and the Intercontinental Exchange Benchmark Administration announced that the one-week and two-month U.S. dollar LIBOR (“USD LIBOR”) settings would cease to be published immediately after December 31, 2021. The appraisalspublication of overnight and other valuation techniquesone-, three-, six‑, and 12-month USD LIBOR settings would be extended through June 30, 2023 to provide additional time for market participants to wind down or modify existing contracts that reference these LIBOR tenors.

In response, the FDIC, the Board of Governors of the Federal Reserve System, and the OCC issued joint guidance directing banks and market participants to cease entering new LIBOR contracts after December 31, 2021,which we usehave done. Although most LIBOR tenors will continue to be published through June 30, 2023 to aid in evaluatingthe transition of legacy LIBOR contracts (e.g. maturity), as of January 1, 2021, we no longer originate loans indexed to LIBOR nor enter into modifications which create new LIBOR exposure.

During 2021, we began a transition to using a forward-looking term rate based upon the Secured the Overnight Financing Rate ("SOFR"), CME Term SOFR (“Term SOFR”) as the replacement benchmark index in lieu of LIBOR. SOFR is the Alternative Reference Rates Committee’s recommended alternative to USD LIBOR. Because the Term SOFR market continues to develop and monitoring loansdeepen, changes in SOFR or Term SOFR or changes in market perceptions of the acceptability of Term SOFR as a benchmark could result in changes to our risk exposures (for example, because SOFR is a broad measurement of the cost borrowing cash secured by real property,U.S. Treasury securities, changes or disruptions in the repo market may adversely affect the availability or cost of floating-rate funding and, therefore, our exposure to fluctuations in interest rates) or otherwise result in losses on a product or having to pay more or receive less on financial instruments that we own or have issued.

Uncertainty as to the nature of other real estate owned (“OREO”)alternative reference rates (i.e. the Bloomberg Short-Term Bank Yield Index, Ameribor) and other repossessed assetstheir broader acceptance by the market may not accurately describe the fair value of the asset.

In considering whether to make a loan secured by real property, we generally require an appraisal of the property. However, an appraisal is only an estimate ofalso adversely affect SOFR rates and the value of SOFR-based loans, and to a lesser extent securities in our portfolio, and may impact the property atavailability and cost of hedging instruments and borrowings, including the timerates we pay on our subordinated debentures and trust preferred securities.

Such uncertainty may result in pricing volatility and increased capital requirements, accounting impacts, compliance, basis risk, legal and operational costs and risks associated with customer disclosures, discretionary actions taken or negotiation of loan modifications to move from LIBOR to Term SOFR prior to the appraisal is made,June 30, 2023 cessation, reduced loan balances if borrowers do not accept the substitute indices we are able provide, systems disruption, business continuity, or model disruption. Finally, if we or other market participants fail to properly plan to implement alternative rates other than LIBOR, it could have an adverse effect on us and the financial system as real estate valuesa whole.

Our business, profitability, and liquidity may change significantlybe adversely affected by deterioration in relatively short periodsthe credit quality of, time (especiallyor defaults by, third parties who owe us money, securities or other assets or whose securities, or obligations we hold.

In addition to relying on borrowers to repay their loans and leases, we are exposed to the risk that third parties that owe us money, securities, or other assets will not perform their obligations. These parties may default on their obligations to us due to bankruptcy, lack of liquidity, operational failure, or other reasons. A default by a significant market participant, or concerns that such a party may default, could lead to significant liquidity problems, losses, or defaults by other parties, which in periods of heightened economic uncertainty), this estimate may not accurately describeturn could adversely affect us.

We are also subject to the fair value of the real property collateral after the loan is made. As a result, werisk that our rights against third parties may not be able to realizeenforceable in all circumstances. Deterioration in the full amountcredit quality of any remaining indebtedness ifthird parties whose securities or obligations we foreclose onhold, including the Federal Home Loan Mortgage Corporation, Government National Mortgage Association and sell the relevant property. In addition, we rely on appraisals and other valuation techniques to establish the value of our OREO and personal property that we acquire through foreclosure proceedings and to determine certain loan impairments. If any of these valuations are inaccurate, our consolidated financial statements may not reflect the correct value of our OREO, and our allowance for loan and lease losses may not reflect accurate loan impairments. Thismunicipalities, could have a material adverse effect on our business, financial condition or results of operations.result in significant losses.

We depend on the accuracy and completeness of information about customers and counterparties.

In deciding whether to extend credit or enter into other transactions, and in evaluating and monitoring our loan and lease portfolio on an ongoing basis, we may rely on information furnished by or on behalf of customers and counterparties, including financial statements, credit reports, and other financial information. We may also rely on representations of those customers or counterparties or of other third parties, such as independent auditors, as to the accuracy and completeness of that information. Reliance on inaccurate, incomplete, fraudulent, or misleading financial statements, credit reports or other financial or business information, or the failure to receive such information on a timely basis, could result in loan or lease losses, reputational damage or other effects that could have a material adverse effect on our business, financial condition, or results of operations.

The value of the financial instruments we own may decline in the future.

As of December 31, 2017,2021, we owned $700.4 million$1.5 billion of investment securities, which consisted primarily of our positions in U.S. government and government-sponsored enterprises and federal agency obligations, mortgage and asset-backed securities and municipal

21

securities. We evaluate our investment securities on at least a quarterly basis, and more frequently when economic and market conditions warrant such an evaluation, to determine whether any decline in fair value below amortized cost is the result of an other-than-temporary impairment. The process for determining whether impairment is other-than-temporary usually requires complex, subjective judgments about the future financial performance of the issuer in order to assess the probability of receiving all contractual principal and interest payments on the security. Because of changing economic and market conditions affecting issuers, weWe may be required to recognize other-than-temporary impairment in future periods, which could adversely affect our business, results of operations or financial condition.

In addition, an increase in market interest rates may affect the market value of our securities portfolio, potentially reducing accumulated other comprehensive income and/or earnings.

Concentrated exposures to individual obligors may unfavorably impact our operations.

We have cultivated relationships with certain individuals, businesses and institutions that could result in relatively large exposures to select single obligors. The failure to properly anticipate and address risks associated with any concentrated exposures could have a material adverse effect on our business, financial condition or results of operations.

Funding Risks

Liquidity risksA lack of liquidity could affect operations and jeopardize our business, financial condition, and results of operations.

Liquidity risk is the risk that we will not be able to meet our obligations, including financial commitments, as they come due and is inherent in our operations. An inability to raise funds through deposits, borrowings, the sale of loans and/or investment securities, and from other sources could have a substantialmaterial negative effect on our liquidity. Our most important source of funds consists of our

18

customer deposits. Deposit balances can decrease for a variety of reasons, including when customers perceive alternative investments, such as the stock market, as providing a better risk/return tradeoff. If customers move money out of bank deposits and into other investments, we could lose a relatively low cost source of funds. This loss would require us to seek other funding alternatives including wholesale funding, in order to continue to grow, thereby increasing our funding costs and reducing our net interest income and net income.

Other primary sources of funds consist of cash from operations and investment maturities, redemptions, and sales. To a lesser extent, proceeds from the issuance and sale of securities to investors, has become a source of funds and we may issue additional equity or debt securities following our initial public offering. Additional liquidity may be provided by brokered time deposits and repurchase agreements and we have the ability to borrowsales, as well as borrowings from the Federal Reserve Bank of Chicago, the FHLB and the FHLB. We also may borrow fromother third-party lenders from time to time. Our access to funding sources in amounts adequate to finance or capitalize our activities or on terms that are acceptable to us could be impaired by factors that affect us directly or the financial services industry or economy in general, such as disruptions in the financial markets or negative views and expectations about the prospects for the financial services industry. Economic conditions and a loss of confidence in financial institutions may increase our cost of funding and limit access to certain customary sources of capital, including inter-bank borrowings, repurchase agreements and borrowings from the discount window of the Federal Reserve System. There is also the potential risk that collateral calls with respect to our repurchase agreements could reduce our available liquidity.

Any decline in available funding could adversely impact our ability to continue to implement our business plan, including originating loans, investing in securities, meeting our expenses or fulfilling obligations such as repaying our borrowings and meeting deposit withdrawal demands, any of which could have a material adverse impact on our liquidity, business, financial condition, and results of operations.

Our liquidity is dependent on dividends from Byline Bank.

We are a legal entity separate and distinct from Byline Bank, our wholly-owned banking subsidiary. A substantial portion of our cash flow from operating activities, including cash flow to paycomes primarily from dividends on our preferred stock, dividends on our junior subordinated debentures, and principal and interest on any debt we may incur, including trust preferred securities, comes from dividendsreceive from Byline Bank. Various federal and state laws and regulations limit the amount of dividends that ourthe bank may pay to us. For example, Illinois law only permits Byline Bank to pay dividends out of its net profits then on hand, after first deducting the bank’s losses and any debts owed to Byline Bank on which interest is past due and unpaid for a period of six months or more, unless the same are well secured and in the process of collection. As of December 31, 2017,2021, Byline Bank had the capacity to pay us a dividendByline Bancorp dividends of up to $79.7$161.7 million without the need to obtain prior regulatory approval. Also, our right to participate in a distribution of assets upon a subsidiary’s liquidation or reorganization is subject to the prior claims of the subsidiary’s creditors. In the event Byline Bank is unable to pay dividends to us, we may not be able to service our existing debt or any debt we may incur, pay obligations or pay dividends on our common and preferred stock, which could have a material adverse effect on our business, financial condition or results of operations.

Loss of deposits could increase our funding costs.

As do many banking companies, we rely on customer deposits to meet a considerable portion of our funding needs, and we continue to seek customer deposits to maintain this funding base. We accept deposits directly from consumer and commercial customers and, as of December 31, 2017, we had $2.4 billion in deposits. These deposits are subject to potentially dramatic fluctuations in availability or the price we must pay (in the form of interest) to obtain them due to certain factors outside our control, such as a loss of confidence by customers in us or the banking sector generally; customer perceptions of our financial health and general reputation; increasing competitive pressures from other financial services firms for consumer or corporate customer deposits; and changes in interest rates and returns on other investment classes, which could result in significant outflows of deposits within short periods of time or significant changes in pricing necessary to maintain current customer deposits or attract additional deposits. The loss of customer deposits for any reason could increase our funding costs.

We may be adversely affected by changes in the actual or perceived soundness or condition of other financial institutions.

Financial services institutions that deal with each other are interconnected as a result of trading, investment, liquidity management, clearing, counterparty and other relationships. Concerns about, or a default by, one institution could lead to significant liquidity problems and losses or defaults by other institutions, as the commercial and financial soundness of many financial institutions is closely related as a result of these credit, trading, clearing and other relationships. Even the perceived lack of creditworthiness of, or questions about, a counterparty may lead to market-wide liquidity problems and losses or defaults by various institutions. This systemic risk may adversely affect financial intermediaries with which we interact on a daily basis or key funding providers such as the FHLB, any of which could have a material adverse effect on our access to liquidity or otherwise have a material adverse effect on our business, financial condition or results of operations.

We may need to raise additional capital in the future, and such capital may not be available when needed or at all.

We may need to raise additional capital, in the form of debt or equity securities, in the future to have sufficient capital resources to meet our commitments and fund our business needs and future growth, particularly if the quality of our assets or earnings were to deteriorate significantly. Our ability to raise additional capital, if needed, will depend on, among other things, conditions in the capital markets at that time, which are outside of our control, and our financial condition. We may not be able to obtain capital on acceptable

19

terms or at all. Any occurrence that may limit our access to capital, such as a decline in the confidence of debt purchasers, depositors of our bank or counterparties participating in the capital markets or other disruption in capital markets, may adversely affect our capital costs and our ability to raise capital and, in turn, our liquidity. Further, if we need to raise capital in the future, we may have to do so when many other financial institutions are also seeking to raise capital and would then have to compete with those institutions for investors. An inability to raise additional capital on acceptable terms when needed, or at all, could have a material adverse effect on our business, financial condition or results of operations.

Operational Risks

We may not be able to implement our growth strategy or manage costs effectively, resulting in lower earnings or profitability.

There can be no assurance that we will be able to continue to grow and to be profitable in future periods, or, if profitable, that our overall earnings will remain consistent or increase in the future. Our strategy focuses on organic growth, supplemented by opportunistic acquisitions.

Our growth requires that we increase our loan and deposit growth while managing risks by following prudent loan underwriting standards without increasing interest rate risk or compressing our net interest margin, maintaining more than adequate capital at all times, hiring and retaining qualified employees, and successfully implementing strategic projects and initiatives. Even if we are able to increase our interest income, our earnings may nonetheless be reduced by increased expenses, such as additional employee compensation or other general and administrative expenses and increased interest expense on any liabilities incurred or deposits solicited to fund

22

increases in assets. Additionally, if our competitors extend credit on terms we find to pose excessive risks, or at interest rates which we believe do not warrant the credit exposure, we may not be able to maintain our lending volume and could experience deteriorating financial performance.

Our inability to manage our growth successfully or to continue to expand into new markets could have a material adverse effect on our business, financial condition, or results of operations.

The occurrence of fraudulent activity, breaches or failures of our information security controls or cybersecurity-related incidents could have a material adverse effect on our business, financial condition or results of operations.

As a financial institution, we are susceptible to fraudulent activity, information security breaches and cybersecurity-related incidents that may be committed against us or our clients, which may result in financial losses or increased costs to us or our clients, disclosure or misuse of our information or our client information, misappropriation of assets, privacy breaches against our clients, litigation or damage to our reputation. Such fraudulent activity may take many forms, including check fraud, electronic fraud, wire fraud, phishing, social engineering and other dishonest acts. Information security breaches and cybersecurity-related incidents may include fraudulent or unauthorized access to systems used by us or our clients, denial or degradation of service attacks, and malware or other cyber-attacks. In recent periods, there continues to be a rise in electronic fraudulent activity, security breaches and cyber-attacks within the financial services industry, especially in the commercial banking sector due to cyber criminals targeting commercial bank accounts. Consistent with industry trends, we have also experienced an increase in attempted electronic fraudulent activity, security breaches and cybersecurity-related incidents in recent periods. Moreover, in recent periods, several large corporations, including financial institutions and retail companies, have suffered major data breaches, in some cases exposing not only confidential and proprietary corporate information, but also sensitive financial and other personal information of their customers and employees and subjecting them to potential fraudulent activity. Some of our clients may have been affected by these breaches, which could increase their risks of identity theft and other fraudulent activity that could involve their accounts with us.

We also face risks related to cyber-attacks and other security breaches in connection with debit card transactions that typically involve the transmission of sensitive information regarding our customers through various third parties, including retailers and payment processors. Some of these parties have in the past been the target of security breaches and cyber-attacks, and because the transactions involve third parties and environments such as the point of sale that we do not control or secure, future security breaches or cyber-attacks affecting any of these third parties could affect us through no fault of our own, and in some cases we may have exposure and suffer losses for breaches or attacks relating to them, including costs to replace compromised debit cards and address fraudulent transactions.

Information pertaining to us and our customers is maintained, and transactions are executed, on networks and systems maintained by us and certain third-party partners, such as our online banking or reporting systems. The secure maintenance and transmission of confidential information, as well as execution of transactions over these systems, are essential to protect us and our customers against fraud and security breaches and to maintain our customers’ confidence. Breaches of information security also may occur, through intentional or unintentional acts by those having access to our systems or our customers’ or counterparties’ confidential information, including employees. In addition, increases in criminal activity levels and sophistication, advances in computer capabilities, new discoveries, vulnerabilities in third-party technologies (including browsers and operating systems) or other developments could result in a compromise or breach of the technology, processes and controls that we use to prevent fraudulent transactions and to protect data about us, our customers and underlying transactions, as well as the technology used by our customers to access our systems. Although we have developed, and continue to invest in, systems and processes that are designed to detect and prevent security breaches and cyber-attacks and periodically test our security, our or our third-party partners’ inability to anticipate, or failure to adequately mitigate, breaches of security could result in: losses to us or our customers; our loss of business and/or

20

customers; damage to our reputation; the incurrence of additional expenses; disruption to our business; our inability to grow our online services or other businesses; additional regulatory scrutiny or penalties; or our exposure to civil litigation and possible financial liability—any of which could have a material adverse effect on our business, financial condition or results of operations.

More generally, publicized information concerning security and cyber-related problems could inhibit the use or growth of electronic or web-based applications or solutions as a means of conducting commercial transactions. Such publicity may also cause damage to our reputation as a financial institution. As a result, our business, financial condition or results of operations could be adversely affected.

We depend on information technology and telecommunications systems of third parties, and any systems failures, interruptions or data breaches involving these systems could adversely affect our operations and financial condition.

Our business is highly dependent on the successful and uninterrupted functioning of our information technology and telecommunications systems, third-party servicers, accounting systems, mobile and online banking platforms and financial intermediaries. We outsource to third parties many of our major systems, such as data processing, loan servicing, deposit processing and internal audit systems. The failure of these systems, or the termination of a third-party software license or service agreement on which any of these systems is based, could interrupt our operations. Because our information technology and telecommunications systems interface with and depend on third-party systems, we could experience service denials if demand for such services exceeds capacity or such third-party systems fail or experience interruptions. If sustained or repeated, a system failure or service denial could result in a deterioration of our ability to process loans or gather deposits and provide customer service, compromise our ability to operate effectively, result in potential noncompliance with applicable laws or regulations, damage our reputation, result in a loss of customer business and/or subject us to additional regulatory scrutiny and possible financial liability, any of which could have a material adverse effect on our financial condition and results of operations. In addition, failure of third parties to comply with applicable laws and regulations, or fraud or misconduct on the part of employees of any of these third parties, could disrupt our operations or adversely affect our reputation.

It may be difficult for us to replace some of our third-party vendors, particularly vendors providing our core banking, debit card services and information services, in a timely manner if they are unwilling or unable to provide us with these services in the future for any reason and even if we are able to replace them, it may be at higher cost or result in the loss of customers. Any such events could have a material adverse effect on our business, financial condition or results of operations.

Our operations rely heavily on the secure processing, storage and transmission of information and the monitoring of a large number of transactions on a minute-by-minute basis, and even a short interruption in service could have significant consequences. We also interact with and rely on retailers, for whom we process transactions, as well as financial counterparties and regulators. Each of these third parties may be targets of the same types of fraudulent activity, computer break-ins and other cybersecurity breaches described above or herein, and the cybersecurity measures that they maintain to mitigate the risk of such activity may be different than our own and may be inadequate.

As a result of financial entities and technology systems becoming more interdependent and complex, a cyber incident, information breach or loss, or technology failure that compromises the systems or data of one or more financial entities could have a material impact on counterparties or other market participants, including ourselves. Although we review business continuity and backup plans for our vendors and take other safeguards to support our operations, such plans or safeguards may be inadequate. As a result of the foregoing, our ability to conduct business may be adversely affected by any significant disruptions to us or to third parties with whom we interact.

Our use of third-party vendors and our other ongoing third-party business relationships is subject to increasing regulatory requirements and attention.

Our use of third-party vendors for certain information systems is subject to increasingly demanding regulatory requirements and attention by our federal bank regulators. Recent regulation requires us to enhance our due diligence, ongoing monitoring and control over our third-party vendors and other ongoing third-party business relationships. In certain cases we may be required to renegotiate our agreements with these vendors to meet these enhanced requirements, which could increase our costs. We expect that our regulators will hold us responsible for deficiencies in our oversight and control of our third-party relationships and in the performance of the parties with which we have these relationships. As a result, if our regulators conclude that we have not exercised adequate oversight and control over our third-party vendors or other ongoing third-party business relationships or that such third parties have not performed appropriately, we could be subject to enforcement actions, including civil money penalties or other administrative or judicial penalties or fines as well as requirements for customer remediation, any of which could have a material adverse effect our business, financial condition or results of operations.

We continually encounter technological change.

The financial services industry is continually undergoing rapid technological change with frequent introductions of new, technology-driven products and services. The effective use of technology increases efficiency and enables financial institutions to serve customers better and to reduce costs. Our future success depends, in part, upon our ability to address the needs of our customers by using technology to provide products and services that will satisfy customer demands, as well as to create additional efficiencies in our operations. Many of our competitors have substantially greater resources to invest in technological improvements than we do. We

21

may not be able to effectively implement new, technology-driven products and services or be successful in marketing these products and services to our customers. In addition, the implementation of technological changes and upgrades to maintain current systems and integrate new ones may also cause service interruptions, transaction processing errors and system conversion delays and may cause us to fail to comply with applicable laws. Failure to successfully keep pace with technological change affecting the financial services industry and failure to avoid interruptions, errors and delays could have a material adverse effect on our business, financial condition or results of operations.  

We expect that new technologies and business processes applicable to the banking industry will continue to emerge, and these new technologies and business processes may be better than those we currently use. Because the pace of technological change is high and our industry is intensely competitive, we may not be able to sustain our investment in new technology as critical systems and applications become obsolete or as better ones become available. A failure to maintain current technology and business processes could cause disruptions in our operations or cause our products and services to be less competitive, all of which could have a material adverse effect on our business, financial condition or results of operations.

Our limited operating history following the Recapitalization may make it difficult for investors to evaluate our financial trends, and also may impair our ability to accurately forecast our future performance.

We have a limited operating history following the Recapitalization transaction in 2013. In connection with the Recapitalization, we replaced all senior management of our predecessor and a significant majority of its lending staff. As a result, our limited operating history may not provide an adequate basis for investors to evaluate our business, financial condition and results of operations, and makes accurate financial forecasting more difficult for us. It may also be more difficult for us to evaluate trends that may affect our business. In addition, due to the application of the acquisition method of accounting to record, at fair value, all of the assets acquired and liabilities assumed at the time of the Recapitalization, financial information prior to the Recapitalization is not comparable to such information post-Recapitalization. Thus, any predictions about our future revenue and expenses may not be as accurate as they would be if we had a longer operating history or operated in a more predictable business environment.

Current or former employee or predecessor misconduct could expose us to significant legal liability and reputational harm.

We are vulnerable to reputational harm because we operate in an industry in which integrity and the confidence of our customers are of critical importance. Our employees could engage, or our former directors, employees, or controlling stockholders could have engaged, in misconduct that adversely affects our business. For example, if such a person were to engage, or previously engaged, in fraudulent, illegal or suspicious activities, we could be subject to regulatory sanctions and suffer serious harm to our reputation (as a consequence of the negative perception resulting from such activities), financial position, customer relationships and ability to attract new customers. Our business often requires that we deal with confidential information. If our employees were to improperly use or disclose this information, or if former directors, employees, or controlling stockholders previously improperly used or disclosed this information, even if inadvertently, we could suffer serious harm to our reputation, financial position and current and future business relationships. It is not always possible to deter employee misconduct, and the precautions we take to detect and prevent this activity may not always be effective. Misconduct by our employees or former directors, employees, or controlling stockholders, or even unsubstantiated allegations of misconduct, could result in a material adverse effect on our business, financial condition or results of operations.

We may not be able to attract and retain key personnel and other skilled employees.

Our success depends, in large part, on the skills of our management team and our ability to retain, recruit and motivate key officers and employees. There are a limited number of qualified persons with requisite knowledge of, and experience in, certain of our specialized business lines, including our equipment leasing and U.S. government guaranteed lending businesses. A number of our employees have considerable tenure with Byline Bank and some will be nearing retirement in the next few years, which makes succession planning important to the continued operation of our business. We need to continue to attract and retain key personnel and to recruit qualified individuals who fit our culture to succeed existing key personnel to ensure the continued growth and successful operation of our business. Leadership changes may occur from time to time, and we cannot predict whether significant retirements or resignations will occur or whether we will be able to recruit additional qualified personnel. Competition for senior executives and skilled personnel in the financial services and banking industry is intense, which means the cost of hiring, incentivizing and retaining skilled personnel may continue to increase. This could have a material adverse effect on our business, financial condition or results of operations. In addition, our ability to effectively compete for senior executives and other qualified personnel by offering competitive compensation and benefit arrangements may be restricted by applicable banking laws and regulations, including restrictions recently proposed for adoption by U.S. regulatory agencies, including the Federal Reserve and the FDIC. The loss of the services of any senior executive or other key personnel, the inability to recruit and retain qualified personnel in the future or the failure to develop and implement a viable succession plan, could have a material adverse effect on our business, financial condition or results of operations.

New lines of business, products, product enhancements or services may subject us to additional risks.

From time to time, we may implement new lines of business or offer new products and product enhancements as well as new services within our existing lines of business. There are substantial risks and uncertainties associated with these efforts, particularly in instances in which the markets are not fully developed. In implementing, developing, or marketing new lines of business, products, product enhancements or services, we may invest significant time and resources although we mayand not assign the appropriate level of

22

resources or expertise necessary to make these new lines of business, products, product enhancements or services successful or to realize their expected benefits.results or returns. Further, initial timetables for the introduction and development of new lines of business, products, product enhancements or services may not be achieved, and price and profitability targets may not prove feasible. External factors, such as compliance with regulations, competitive alternatives and shifting market preferences, may also affect the ultimate implementation of a new line of business or offerings of new products, product enhancements or services. Furthermore, any new line of business, product, product enhancement or service or system conversion could have a significant impact on the effectiveness of our system of internal controls. Failure to successfully manage these risks in the development and implementation of new lines of business or offerings of new products, product enhancements or services could have a material adverse effect on our business, financial condition, or results of operations.

External Risks

Our business may be adversely affected by conditions in the financial markets and economic conditions generally.

Our financial performance generally, and in particular the ability of our borrowers to pay interest on and repay principal of outstanding loans and leases and the value of collateral securing those loans and leases, as well as demand for loans and leases and other products and services we offer, is highly dependent upon the business environment in the markets in which we operate and in the United States as a whole. Unlike larger banks that are more geographically diversified, we provide banking and financial services to customers primarily in the Chicago metropolitan area. The economic conditions in this local market may be different from, or worse than, the economic conditions in the United States as a whole. Some elements of the business environment that affect our financial performance include short-term and long-term interest rates, the prevailing yield curve, inflation and price levels, tax policy, monetary policy, unemployment, and the strength of the domestic economy and the local economy in the markets in which we operate. Also, the occurrence of other external events, such as geopolitical events and widespread public health emergencies or pandemics may negatively affect the business environment in our markets. Unfavorable market conditions can result in a deterioration in the credit quality of our borrowers and the demand for our products and services, an increase in the number of loan and lease delinquencies, defaults and charge-offs, additional provisions for loan and lease losses adverse asset values and an overall material adverse effect on the quality of our loan and lease portfolio. Unfavorable or uncertain economic and market conditions can be caused by, among other factors, declines in economic growth, business activity or investor or business confidence; limitations on the availability or increases in the cost of credit and capital; changes in inflation or interest rates; increases in real estate and other state and local taxes; high unemployment; natural disasters; geopolitical issues and uncertainty; public health concerns; and other external factors or a combination of these or other factors.

The City of Chicago and State of Illinois currently face significant financial difficulties, which could adversely affect our business.

We have significant loan exposure in the Chicago metropolitan area, and both the City of Chicago and the State of Illinois currently face significant fiscal challenges, including large budget deficits, substantial unfunded pension obligations and low credit ratings compared to other local entities, which could negatively impact us to the extent this leads to declines in business activity and overall economic conditions in Illinois and the Chicago metropolitan area. These fiscal challenges may also lead to significant increases in real estate taxes on properties in the Chicago metropolitan area, which could negatively affect certain of our borrowers’ ability to make payments on our loans.

Some of our commercial loan borrowers are not-for-profit entities that may be dependent on the receipt of contractual payments and reimbursements from the State of Illinois for services rendered. To the extent the City of Chicago or State of Illinois, as applicable, delays or suspends these payments and reimbursements, this could adversely affect the ability of borrowers to meet their loan repayment obligations to us. Any resulting delinquencies and defaults on these loans would in turn adversely affect our financial condition and results of operations.

Our business is significantly dependent on the real estate markets in which we operate, as a significant percentage of our loan portfolio is secured by real estate.

Many of the loans in our portfolio are secured by real estate. As of December 31, 2017,2021, our real estate loans held for investment include $105.4$324.2 million of construction and development loans, $248.7$252.9 million of multifamily loans, $438.8$637.1 million of non-owner occupied commercial real estate (“CRE”)CRE loans and $328.5$227.6 million of residential mortgage loans, with the majority of these real estate loans concentrated in the City of Chicago

23

and the State of Illinois. Real property values in our market may be differentdiffer from and in some instances worse than, real property values in other markets or in the United States as a whole, and may be affected by a variety of factors outside of our control and the control of our borrowers, including national and local economic conditions, generally. The Chicago metropolitan area has experienced volatility in real estate values over the past decade. Declines in real estate values, including prices for homes and commercial properties in the Chicago metropolitan area, could result in a deterioration of the credit quality of our borrowers, an increase in the number of loan delinquencies, defaults and charge-offs, and reduced demand for our products and services, generally. In addition, our appraisal of the property may change significantly in relatively short periods of time and may not accurately describe the fair value of the real property collateral after the loan is made, resulting in loss if we foreclose on the property prior to realizing the full amount of any remaining indebtedness. Our CRE loans may have a greater risk of loss than residential mortgage loans, in part because these loans are generally larger or more complex to underwrite. In particular, real estate construction and acquisition and development loans have certain risks not present in other types of loans, including risks associated with construction cost overruns, project completion risk, general contractor credit risk and risks associated with the ultimate sale or use of the completed construction. In addition, declines in real property values in the states in which we operate could reduce the value of any collateral we realize following a default on these loans and could adversely affect our ability to continue to grow our loan and lease portfolio consistent with our underwriting standards. We may have to foreclose on real estate assets if borrowers default on their loans, in which case we are

23

required to record the related asset to the then fair market value of the collateral, which may ultimately result in a loss.loans. An increase in the level of nonperformingnon-performing assets increases our risk profile and may affect the capital levels regulators believe are appropriate in light of the ensuing risk profile. In addition, we rely on appraisals and other valuation techniques to establish the value of our other real estate owned (“OREO”) and personal property that we acquire through foreclosure proceedings and to determine certain loan impairments. If any of these valuations are inaccurate, our consolidated financial statements may not reflect the correct value of our OREO, and our allowance for loan and lease losses may not reflect accurate loan impairments. This could have a material adverse effect on our business, financial condition or results of operations. Our failure to effectively mitigate these risks could have a material adverse effect on our business, financial condition, or results of operations.

Technology Risks

We depend on information technology and telecommunications systems of third parties, and any systems failures, interruptions, or data breaches involving these systems could adversely affect our operations and financial condition.

Our small business customers may lackis highly dependent on the resources to weather a downturn in the economy.

Onesuccessful and uninterrupted functioning of our primary strategies is serving theinformation technology and telecommunications systems, third-party servicers, accounting systems, mobile and online banking platforms and financial intermediaries. We outsource to third parties many of our major systems, such as data processing, loan servicing, deposit processing, and internal audit systems. The failure of these systems, or the termination of a third-party software license or service agreement on which any of these systems is based, could interrupt our operations. Because our information technology and telecommunications systems interface with and depend on third-party systems, we could experience service denials if demand for such services needsexceeds capacity or such third-party systems fail or experience interruptions. If sustained or repeated, a system failure or service denial could result in a deterioration of small and medium sized businesses. These businesses generally have fewer financial resources than larger entities and less access to capital sources and loan facilities. If economic conditions are generally unfavorable in our market areas, our small business borrowers may be disproportionately affected and their ability to repay outstanding loans may be negatively affected,operate effectively or service our customers, resulting in anpotential noncompliance with applicable laws or regulations, loss of customer business, and/or subject us to additional regulatory scrutiny and possible financial liability, any of which could have a material adverse effect on our resultsfinancial condition. In addition, failure of third parties to comply with applicable laws and regulations, or fraud or misconduct on the part of employees of any of these third parties, could disrupt our operations and financial condition.or adversely affect our reputation.

We operate in a highly competitive and changing industry and market area and compete with both banks and non-banks.

We operate in the highly competitive financial services industry and face significant competitionIt may be difficult for customers from financial institutions located both within and beyond our principal markets. We compete with national commercial banks, regional banks, private banks, savings banks, credit unions, non-bank financial services companies and other financial institutions operating within or near the areas we serve, many of whom target the same customers we do in the Chicago metropolitan area. As customer preferences and expectations continueus to evolve, technology has lowered barriers to entry and made it possible for banks to expand their geographic reach by providing services over the internet and for non-banks to offer products and services traditionally provided by banks, such as automatic transfer and automatic payment systems. The banking industry is experiencing rapid changes in technology, and, as a result, our future success will depend in part on our ability to address our customers’ needs by using technology. Customer loyalty can be influenced by a competitor’s new products, especially offerings that could provide cost savings or a higher return to the customer. Increased lending activity of competing banks following the severe economic recession occurring during 2007 through 2009 has also led to increased competitive pressures on loan rates and terms for high-quality credits. We may not be able to compete successfully with other financial institutions in our markets, particularly with larger financial institutions operating in our markets that have significantly greater resources than us, and we may have to pay higher interest rates to attract deposits, accept lower yields to attract loans and pay higher wages for new employees, resulting in lower net interest margins and reduced profitability. Many of our non-bank competitors are not subject to the same extensive regulations that govern our activities and may have greater flexibility in competing for business. The financial services industry could become even more competitive as a result of legislative, regulatory and technological changes and continued consolidation. In addition,replace some of our current commercialthird-party vendors, particularly vendors providing our core banking, customers may seek alternative banking sources asdebit card services, and information services, in a timely manner if they develop needsare unwilling or unable to provide us with these services in the future for credit facilities larger thanany reason, and even if we are able to replace them, it may be able to accommodateat higher cost or more expansive product mixes offered by larger institutions. We also face increased competition in our U.S. government guaranteed lending business which can adversely affect our volume and the premium, if any, recognized on sales of the guaranteed portions of such U.S. government guaranteed loans. Our inability to compete successfullyresult in the markets in which we operateloss of customers. Any such events could have a material adverse effect on our business, financial condition, or results of operations.

Our ability to maintain, attract and retain customer relationships is highly dependent on our reputation.

We rely, in part, on the reputationThe occurrence of fraudulent activity, breaches or failures of our bank to attract customers and retain our customer relationships. Damage to our reputation could undermine the confidence of our current and potential customers in our ability to provide high-quality financial services. Such damage could also impair the confidence of our counterparties and vendors and ultimately affect our ability to effect transactions. Maintenance of our reputation depends not only on our success in maintaining our service-focused culture and controlling and mitigating the various risks described in this prospectus, but also on our success in identifying and appropriately addressing issues that may arise in areas such as potential conflicts of interest, anti-money laundering, customer personal information and privacy issues, customer and other third-party fraud, record-keeping, regulatory investigations and any litigation that may arise from the failuresecurity controls or perceived failure of us to comply with legal and regulatory requirements. Maintaining our reputation also depends on our ability to successfully prevent third parties from infringing on the “Byline Bank” brand and associated trademarks and our other intellectual property. Defense of our reputation, trademarks and other intellectual property, including through litigation, could result in costs thatcybersecurity-related incidents could have a material adverse effect on our business, financial condition, or results of operations.

DowngradesAs a financial institution, we are susceptible to fraudulent activity, information security breaches, and cybersecurity-related incidents that may be committed against us, our customer, or third-party service providers that we utilize, which may result in financial losses or increased costs to us or our customers, disclosure or misuse of our information or our customer information, misappropriation of assets, privacy breaches against our customers, litigation, or damage to our reputation. Information security breaches and cybersecurity-related incidents may include fraudulent or unauthorized access to systems used by us or our customers, denial or degradation of service attacks, and malware or other cyber-attacks. There continues to be a rise in electronic fraudulent activity, security breaches, and cyber-attacks directed at the credit ratingfinancial services industry. Consistent with industry trends, we have also experienced an increase in attempted electronic fraudulent activity, security breaches, and cybersecurity-related incidents. Information pertaining to us and our customers is maintained, and transactions are executed, on networks and systems maintained by us and certain third-party partners, such as our online banking or reporting systems. The secure maintenance and transmission of the U.S. government or of its securities or any of its agencies by one or more of the credit ratings agencies could have a material adverse effect on general economic conditions,confidential information, as well as our business.

On August 5, 2011, Standard & Poor’s cut the credit ratingexecution of the U.S. federal government’s long-term sovereign debt from AAAtransactions over these systems, are essential to AA+, while also keeping its outlook negative. Moody’s had lowered its own outlook for the same debt to “Negative” on August 2, 2011, and Fitch also lowered its outlook for the same debt to “Negative”, on November 28, 2011. In 2013, both Moody’s and Standard & Poor’s revised their outlooks from “Negative” to “Stable”, and on March 21, 2014, Fitch revised its outlook from “Negative” to “Stable”. Further downgrades of the U.S. federal government’s sovereign credit rating, and the perceived creditworthiness of U.S. government-backed obligations, could affect our ability to obtain funding that is collateralized by affected instrumentsprotect us and our abilitycustomers against fraud and security breaches and to access capital markets on favorable terms. Such downgradesmaintain our customers’ confidence and privacy. Although we have developed, and continue to invest in, systems and processes that are designed to detect and prevent security breaches and cyber-attacks and periodically test our security, our or our third-party partners’ inability to anticipate, or failure to adequately mitigate, breaches of security could also affectresult in: losses to us or our customers; our loss of business and/or customers; damage to our reputation; the pricingincurrence of funding, when funding is available. A downgrade of the credit rating of the U.S. government, or of its agencies, government-sponsored enterprises or related institutions or instrumentalities, may also adversely affect the market value of such instruments and, further, exacerbate the other risksadditional expenses; disruption to which we are subject and any related adverse effects on our business, financial condition or results of operations.business; our inability to

24

Severe weather, natural disasters, pandemics, acts of war or terrorism

grow our online services or other external events could significantly impactbusinesses; additional regulatory scrutiny or penalties; or our business.

Severe weather, natural disasters, widespread disease or pandemics, actsexposure to civil litigation and possible financial liability-any of war or terrorism or other adverse external events could have a significant impact on our ability to conduct business. In addition, such events could affect the stability of our deposit base, impair the ability of borrowers to repay outstanding loans and leases, impair the value of collateral securing loans, cause significant property damage, result in loss of revenue or cause us to incur additional expenses. The occurrence of any of these events in the futurewhich could have a material adverse effect on our business, financial condition, or results of operations.

We continually encounter technological change.

The financial services industry is continually undergoing rapid technological change with frequent introductions of new, technology-driven products and services. Our future success depends, in part, upon our ability to address the needs of our customers by using technology to provide products and services that will satisfy customer demands, as well as to create additional efficiencies in our operations. Many of our competitors have substantially greater resources to invest in technological improvements than we do. We may not be able to effectively implement new, technology-driven products and services, or be successful in marketing these products and services to our customers. In addition, the implementation of technological changes and upgrades to maintain current systems and integrate new ones may also cause service interruptions, transaction processing errors, and system conversion delays, and may cause us to fail to comply with applicable laws. Failure to successfully keep pace with technological change affecting the financial services industry and failure to avoid interruptions, errors, and delays could have a material adverse effect on our business, financial condition, or results of operations.

Guaranteed Loans Risks

Small Business Administration lending and other government guaranteed lending is an important part of our business. Our SBAgovernment guaranteed lending program isprograms are dependent upon the U.S. federal government, and we face specific risks associated with originating SBA and other government guaranteed loans.

Our SBA lending program is dependent upon the U.S. federal government. As an approved participant in the SBA Preferred Lender’s Program (an “SBA Preferred Lender”), we enable our clientscustomers to obtain SBA loans without being subject to the potentially lengthy SBA approval process necessary for lenders that are not SBA Preferred Lenders. The SBA periodically reviews the lending operations of participating lenders to assess, among other things, whether the lender exhibits prudent risk management. When weaknesses are identified, the SBA may request corrective actions or impose enforcement actions, including revocation of the lender’s SBA Preferred Lender status. If we lose our status as an SBA Preferred Lender, we may lose some or all of our customers to lenders who are SBA Preferred Lenders, and as a result we could experience a material adverse effect to our financial results. Any changes to the SBA program, including but not limited to changes to the level of guarantee provided by the federal government on SBA loans, changes to program-specific rules impacting volume eligibility under the guaranty program, as well as changes to the program amounts authorized by Congress, may also have a material adverse effect on our business. In addition, any default by the U.S. government on its obligations or any prolonged government shutdown could among other things, impede our ability to originate SBA loans or other government guaranteed loans or sell such loans in the secondary market, which could materially adversely affect our business, results of operations, and financial condition.

The SBA’s 7(a) Loan Program is the SBA’s primary program for helping start-up and existing small businesses, with financing guaranteed for a variety of general business purposes. Generally, we sell the guaranteed portion of our SBA 7(a) loans in the secondary market. These sales result in premium income for us at the time of sale and create a stream of future servicing income, as we retain the servicing rights to these loans. For the reasons described above, we may not be able to continue originating these loans or sell them in the secondary market. Furthermore, even if we are able to continue to originate and sell SBA 7(a) loans in the secondary market, we might not continue to realize premiums upon the sale of the guaranteed portion of these loans, or the premiums may decline due to economic and competitive factors. When we originate SBA loans, we incur credit risk on the non-guaranteed portion of the loans, and if a customer defaults on a loan, we share any loss and recovery related to the loan pro-rata with the SBA. If the SBA establishes that a loss on an SBA guaranteed loan is attributable to significant technical deficiencies in the manner in which the loan was originated, funded, or serviced by us, the SBA may seek recovery of the principal loss related to the deficiency from us. Generally, we do not maintain reserves or loss allowances for such potential claims and any such claims could materially adversely affect our business, financial condition, or results of operations.

The laws, regulations and standard operating procedures that are applicable to SBAgovernment guaranteed loan products may change in the future. We cannot predict the effects of these changes on our business and profitability. Because government regulation greatly affects the business and financial results of all commercial banks and bank holding companies and especially our organization, changes in the laws, regulations and procedures applicable to SBAgovernment guaranteed loans could adversely affect our ability to operate profitably.

The recognition of gains on the sale of loans and servicing asset valuations reflect certain assumptions.

We continue to expect that gains on the sale of U.S. government guaranteed loans will continue to comprise a significant component of our revenue. The gainsgain on such sales recognized for the twelve monthsyear ended December 31, 20172021 was $32.9$46.3 million. The determination of these gains is based on assumptions regarding the value of unguaranteed loans retained, servicing rights retained and deferred fees and costs, and net premiums paid by purchasers of the guaranteed portions of U.S. government guaranteed loans. The value of retained unguaranteed loans and servicing rights are determined based on market-derived factors such as prepayment rates, current market conditions and recent loan sales. Deferred fees and costs are determined using internal analysis of the cost to originate loans. Significant errors in assumptions used to compute gains on sale of loans or servicing asset valuations could result in material revenue misstatements, which may have a material adverse effect on our business, results of operations and profitability. In addition, while we believe these

25

valuations reflect fair value and such valuations are subject to validation by an independent third-party, if such valuations are not reflective of fair market value then our business, results of operations and financial condition may be materially and adversely affected.

25

Legal, Accounting, and Compliance Risks

Our accounting estimates and risk management processes and controls rely on analytical and forecasting techniques and models and assumptions, which may not accurately predict future events.

Our accounting policies and methods are fundamental to the manner in which we record and report our financial condition and results of operations. Our management must exercise judgment in selecting and applying many of these accounting policies and methods so they comply with GAAP and reflect management’s judgment of the most appropriate manner to report our financial condition and results of operations. In some cases, management must select the accounting policy or method to apply from two or more alternatives, any of which may be reasonable under the circumstances, yet which may result in our reporting materially different results than would have been reported under a different alternative.

Certain accounting policies and estimates are critical to presenting our financial condition and results of operations. They require management to make difficult, subjective or complex judgments about matters that are uncertain. Materially different amounts could be reported under different conditions or using different assumptions or estimates. These critical accounting policies and estimates include (i) acquisition-related fair value computations, (ii) the carrying value of loans and leases, (iii) determining the provision and allowance for loan and lease losses, (iv) the valuation of intangible assets such as goodwill, servicing assets, and core deposit intangibles, and customer relationship intangible (v) the determination of fair value for financial instruments, including other-than-temporary impairment losses, (vi) the valuation of real estate held for sale, and (vii) the valuation of or recognition of deferred tax assets and liabilities. See Note 1 of the notes to our audited consolidated financial statements contained in Item 8 of this report for further information. Because of the uncertainty of estimates involved in these matters, we may be required to do one or more of the following: significantly increase the allowance for loan and lease losses or sustain loan and lease losses that are significantly higher than the reserve provided; reduce the carrying value of an asset measured at fair value; or significantly increase our accrued tax liability. Any of these could have a material adverse effect on our business, financial condition or results of operations. See Item 7. “Management’s Discussion and Analysis of Financial Condition and Results of Operations”.

Our internal controls, disclosure controls, processes and procedures, and corporate governance policies and procedures are based in part on certain assumptions and can provide only reasonable (not absolute) assurances that the objectives of the system are met. Furthermore, we currently outsource our internal audit function. Any failure or circumvention of our controls, processes and procedures or failure to comply with regulations related to controls, processes and procedures could necessitate changes in those controls, processes and procedures, which may increase our compliance costs, divert management attention from our business or subject us to regulatory actions and increased regulatory scrutiny. Any of these could have a material adverse effect on our business, financial condition, or results of operations.

Our goodwill may become impaired, which may adversely impact our results of operations and financial condition and may limit Byline Bank’s ability to pay dividends to us, thereby causing liquidity issues.

As of December 31, 2017,2021, we had goodwill of $52.0$148.4 million, or 11.3%17.7% of our total stockholders’ equity. The excess purchase consideration over the fair value of net assets from acquisitions, or goodwill, is evaluated for impairment at least annually and on an interim basis if an event or circumstance indicates that it is more likely than not that an impairment has occurred. In testing for impairment, we conduct a qualitative assessment and we also estimate the fair value of net assets based on analyses of our market value, discounted cash flows and peer values. Consequently, the determination of the fair value of goodwill is sensitive to market-based economics and other key assumptions. Variability in market conditions or in key assumptions could result in impairment of goodwill, which is recorded as a non-cash adjustment to income. An impairment of goodwill could have a material adverse effect on our business, financial condition and results of operations.

The accounting for loans acquired in connection with our Recapitalizationrecapitalization and acquisitions is based on numerous subjective determinations that may prove to be inaccurate and have a negative impact on our results of operations.

All loans acquired as part of the Recapitalizationour recapitalization in 2013 as well as loans acquired in connection with our subsequent acquisitions including the Ridgestone acquisition in October 2016, have been recorded at their estimated fair value on their acquisition date without a carryover of the related allowance for loan losses. The determination of estimated fair value of acquired loans requires management to make subjective determinations regarding discount rate, estimates of losses on defaults, market conditions and other factors that are highly subjective in nature. A risk exists that our estimate of the fair value of acquired loans will prove to be inaccurate and that we ultimately will not recover the amount at which we recorded such loans on our balance sheet, which would require us to recognize losses.

Loans acquired that have evidence of credit deterioration since origination and for which it is probable at the date of acquisition that we will not collect all contractually required principal and interest payments are accounted for under ASCAccounting Standards Codification (“ASC”) Topic 310-30, Accounting for Purchased Loans with Deteriorated Credit Quality. These credit-impaired loans,

26

like non-credit-impaired loans acquired, have been recorded at estimated fair value on their acquisition date, based on subjective determinations regarding risk ratings, expected future cash flows and fair value of the underlying collateral, without a carryover of the related allowance for loan and lease losses. We evaluate these loans quarterly to assess expected cash flows. Subsequent decreases to the expected cash flows will generally result in a provision for loan losses. Subsequent increases in cash flows result in a reversal of the provision for loan losses to the extent of prior charges or a reclassification of the difference from non-accretable to accretable yield with a positive

26

impact on interest income prospectively. Because the accounting for these loans is based on subjective measures that can change frequently, we may experience fluctuations in our net interest income and provisions for loan losses attributable to these loans. These fluctuations could negatively affect our results of operations.

Our ability to recognize the benefits of deferred tax assets is dependent on future cash flows and taxable income.

We recognize the expected future tax benefit from deferred tax assets when it is more likely than not that the tax benefit will be realized. Otherwise, a valuation allowance is applied against deferred tax assets, reducing the value of such assets. Assessing the recoverability of deferred tax assets requires management to make significant estimates related to expectations of future taxable income from all sources, including reversal of taxable temporary differences, forecasted operating earnings and available tax planning strategies. Estimates of future taxable income are based on forecasted income from operations and the application of existing tax laws in each jurisdiction. The acquisition of Ridgestone in 2016Our acquisitions and the improved risk profile of the Company are key components used in the determination of our ability to realize the expected future benefit of our deferred tax assets. To the extent that future taxable income differs significantly from estimates as a result of the interest rate environment and loan and lease growth capabilities or other factors, our ability to realize the net deferred tax assets could be affected.

Additionally, significant future issuances of common stock or common stock equivalents, or changes in the direct or indirect ownership of our common stock or common stock equivalents, could cause an ownership change and could limit our ability to utilize our net operating loss carryforwards and other tax attributes pursuant to Section 382 and Section 383 of the Internal Revenue Code of 1986, as amended (the “Code”). Future changes in tax law or changes in ownership structure could limit our ability to utilize our recorded net deferred tax assets. As of December 31, 2017 we did not have a valuation allowance against our net deferred tax assets for certain amounts related to U.S. net operating loss carryforwards, and our net deferred tax assets as of December 31, 2017 were $50.0 million. See Note 11 of the notes to our audited consolidated financial statements contained in Item 8 of this report for further discussion of our deferred tax assets.

Recently, the U.S. Congress passed legislation that decreased the U.S. federal corporate tax rate from 35% to 21% effective January 1, 2018. As a result of the rate change, our net deferred tax assets were required to be revalued during the period in which the new legislation was enacted, and, as a result, we recorded income tax expense of $7.2 million, or $0.24 per diluted share, during the fourth quarter of 2017 as a result of this change. As a result of the new 21% corporate federal tax rate, we expect our effective tax rate for 2018 to be approximately 27% to 29%.

Changes in our accounting policies or in accounting standards could materially affect how we report our financial results and condition.

From time to time, the FASB and the SEC change the financial accounting and reporting standards that govern the preparation of our financial statements. As a result of changes to financial accounting or reporting standards, whether promulgated or required by the FASB or other regulators, we could be required to change certain of the assumptions or estimates we have previously used in preparing our financial statements, which could negatively affect how we record and report our results of operations and financial condition generally. For example, in 2016, the FASB approved a new accounting standard that would require companies to include lease obligations on their balance sheets, which will be effective in 2019, or if we remain an emerging growth company and continue to elect not to opt out of the extended transition period for new accounting standards, in 2020. This new standard will result in changes to our accounting presentation and could adversely affect our balance sheet.  

We are an emerging growth company within the meaning of the Securities Act of 1933 (the “Securities Act”), and have decided to take advantage of certain exemptions from various reporting and other requirements applicable to emerging growth companies.

For as long as we remain an “emerging growth company”, as defined in the Jumpstart Our Business Startups (“JOBS”) Act, we will have the option to take advantage of certain exemptions from various reporting and other requirements that are applicable to other public companies that are not emerging growth companies, including not being required to comply with the auditor attestation requirements of Section 404(b) of the Sarbanes-Oxley Act of 2002 (“Sarbanes-Oxley”), being permitted to have an extended transition period for adopting any new or revised accounting standards that may be issued by the FASB or the SEC, reduced disclosure obligations regarding executive compensation in our registration statements, periodic reports and proxy statements and exemptions from the requirements of holding a nonbinding advisory vote on executive compensation and stockholder approval of any golden parachute payments not previously approved. We have elected to, and expect to continue to, take advantage of certain of these and other exemptions until we are no longer an emerging growth company.

We will remain an emerging growth company until the earliest of (i) the end of the fiscal year during which we have total annual gross revenues of $1,070,000,000 or more, (ii) the end of the fiscal year following the fifth anniversary of the completion of our initial public offering, (iii) the date on which we have, during the previous three year period, issued more than $1.0 billion in non-convertible debt, and (iv) the end of the first fiscal year in which (A) the market value of our equity securities that are held by non-affiliates exceeds $700 million as of June 30 of that year, (B) we have been a public reporting company under the Securities Exchange Act of 1934 (the “Exchange Act”) for at least twelve calendar months and (C) we have filed at least one annual report on Form 10-K.is December 31, 2022.

27

Because we have elected to use the extended transition period for complying with new or revised accounting standards for an “emerging growth company”, our financial statements may not be comparable to companies that comply with these accounting standards as of the public company effective dates.

We have elected to use the extended transition period for complying with new or revised accounting standards under Section 7(a)(2)(B) of the Securities Act.Act of 1933 (the “Securities Act”). This election allows us to delay the adoption of new or revised accounting standards that have different effective dates for public and private companies until those standards apply to private companies. As a result of this election, our financial statements may not be comparable to companies that comply with these accounting standards as of the public company effective dates. Because our financial statements may not be comparable to those of companies that comply with public company effective dates, investors may have difficulty evaluating or comparing our business, performance or prospects in comparison to other public companies, which may have a negative impact on the value and liquidity of our common stock.

We recently completed our initial public offerings. Fulfilling our public company financial reporting and other regulatory obligations and our ongoing transition to a standalone public company will be expensive and time consuming and may strain our resources.

As a public company, we are subject to the reporting requirements of the Exchange Act and are required to implement specific corporate governance practices and adhere to a variety of reporting requirements under Sarbanes-Oxley and the related rules and regulations of the SEC, as well as the rules of the NYSE. The Exchange Act requires us to file annual, quarterly and current reports with respect to our business and financial condition. Sarbanes-Oxley requires, among other things, that we maintain effective disclosure controls and procedures and internal control over financial reporting. Compliance with these requirements places additional demands on our legal, accounting, finance and investor relations staff and on our accounting, financial and information systems and increases our legal and accounting compliance costs as well as our compensation expense as we may be required to hire additional legal, accounting, tax, finance and investor relations staff. As a public company we may also need to enhance our investor relations and corporate communications functions and attract additional qualified board members. These additional efforts may strain our resources and divert management’s attention from other business concerns, which could have a material adverse effect on our business, financial condition or results of operations. See “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Non-interest Expense”. The actual amount of the incremental expenses we will incur may be higher, perhaps significantly, than our current estimates.

In accordance with Section 404 of Sarbanes-Oxley, our management is required to conduct an annual assessment of the effectiveness of our internal control over financial reporting and include a report on these internal controls in the annual reports we file with the SEC on Form 10-K. Our independent registered public accounting firm is not required to attest formally to the effectiveness of our internal controls until the later of the year following the first annual report required to be filed with the SEC and the date on which we are no longer an “emerging growth company”. When required, this process will require additional documentation of policies, procedures and systems, further review of that documentation by our third-party internal auditing staff and internal accounting staff and our outside independent registered public accounting firm, and additional testing of our internal control over financial reporting by our third-party internal auditing staff and internal accounting staff and our outside independent registered public accounting firm. This process will involve considerable time and attention, may strain our internal resources, and will increase our operating costs. We may experience higher than anticipated operating expenses and outside auditor fees during the implementation of these changes and thereafter. If our independent registered public accounting firm is unable to express an opinion as to the effectiveness of our internal control over financial reporting, investors may lose confidence in the accuracy and completeness of our financial reports and the market price of our common stock could be negatively affected, and we could become subject to investigations by the NYSE, the SEC or other regulatory authorities, which could require additional financial and management resources.

If we are not able to implement the requirements of Section 404 of Sarbanes-Oxley in a timely and capable manner, we may be subject to adverse regulatory consequences and there could be a negative reaction in the financial markets due to a loss of investor confidence in us and the reliability of our financial statements. This could have a material adverse effect on our business, financial condition or results of operations.

The financial reporting resources we have put in place may not be sufficient to ensure the accuracy of the additional information we are required to disclose as a publicly listed company.

As a result of being a publicly listed company, we are subject to the heightened financial reporting standards under GAAP and SEC rules, including more extensive levels of disclosure. Complying with these standards required enhancements to the design and operation of our internal control over financial reporting as well as additional financial reporting and accounting staff with appropriate training and experience in GAAP and SEC rules and regulations.

If we are unable to meet the demands that are placed upon us as a public company, including the requirements of Sarbanes-Oxley, we may be unable to report our financial results accurately, or report them within the timeframes required by law or stock exchange regulations. Failure to comply with Sarbanes-Oxley, when and as applicable, could also potentially subject us to sanctions or investigations by the SEC or other regulatory authorities. If material weaknesses or other deficiencies occur, our ability to report our financial results accurately and timely could be impaired, which could result in late filings of our annual and quarterly reports under the Exchange Act, restatements of our consolidated financial statements, a decline in our stock price, suspension or delisting of our

28

common stock from the NYSE, and could have a material adverse effect on our business, results of operations or financial condition. Even if we are able to report our financial statements accurately and in a timely manner, any failure in our efforts to implement the improvements or disclosure of material weaknesses in our future filings with the SEC could cause our reputation to be harmed and our stock price to decline significantly.

We did not perform an evaluation of our internal control over financial reporting, as contemplated by Section 404 of Sarbanes-Oxley, nor did we engage our independent registered public accounting firm to perform an audit of our internal control over financial reporting as of any balance sheet date reported in our financial statements as of December 31, 2017. Had we performed such an evaluation or had our independent registered public accounting firm performed an audit of our internal control over financial reporting, material weaknesses may have been identified. In addition, the JOBS Act provides that, so long as we qualify as an “emerging growth company”, we will be exempt from the provisions of Section 404(b) of Sarbanes-Oxley, which would require that our independent registered public accounting firm provide an attestation report on the effectiveness of our internal control over financial reporting. We may take advantage of this exemption so long as we qualify as an “emerging growth company”.

Certain banking laws and certain provisions of our certificate of incorporation may have an anti-takeover effect.

Provisions of federal banking laws, including regulatory approval requirements, could make it difficult for a third-party to acquire us, even if doing so would be perceived to be beneficial to our stockholders. Acquisition of 10% or more of any class of voting stock of a bank holding company or depository institution, including shares of our common stock following completion of this offering, generally creates a rebuttable presumption that the acquirer “controls” the bank holding company or depository institution. Also, a bank holding company must obtain the prior approval of the Federal Reserve before, among other things, acquiring direct or indirect ownership or control of more than 5% of the voting shares of any bank, including our bank.

There also are provisions in our amended and restated certificate of incorporation, which we refer to as our certificate of incorporation, and amended and restated bylaws, which we refer to as our bylaws, such as limitations on the ability to call a special meeting of our stockholders, that may be used to delay or block a takeover attempt. In addition, our board of directors is authorized under our certificate of incorporation to issue shares of our preferred stock, and determine the rights, terms, conditions and privileges of such preferred stock, without stockholder approval. These provisions may effectively inhibit a non-negotiated merger or other business combination, which, in turn, could have a material adverse effect on the market price of our common stock.

The banking industry is highly regulated, and the regulatory framework, together with any future legislative or regulatory changes, may have a significant adverse effect on our operations.

The banking industry is extensively regulated and supervised under both federal and state laws and regulations that are intended primarily for the protection of depositors, customers, federal deposit insurance funds and the banking system as a whole, not for the protection of our stockholders and creditors. We are subject to regulation and supervision by the Federal Reserve, and our bank is subject to regulation and supervision by the FDIC and the IDFPR. The laws and regulations applicable to us govern a variety of matters, including permissible types, amounts and terms of loans and investments we may make, the maximum interest rate that may be charged, the amount of reserves we must hold against deposits we take, the types of deposits we may accept, maintenance of adequate capital and liquidity, changes in the control of us and our bank, restrictions on dividends and establishment of new offices. We must obtain approval from our regulators before engaging in certain activities, and there is the risk that such approvals may not be obtained, either in a timely manner or at all. Our regulators also have the ability to compel us to take certain actions, or restrict us from taking certain actions entirely, such as actions that our regulators deem to constitute an unsafe or unsound banking practice. Our failure to comply with any applicable laws or regulations, or regulatory policies and interpretations of such laws and regulations, could result in sanctions by regulatory agencies, civil money penalties or damage to our reputation, all of which could have a material adverse effect on our business, financial condition or results of operations.

Since the severe economic recession occurring during 2007 through 2009, federal and state banking laws and regulations, as well as interpretations and implementations of these laws and regulations, have undergone substantial review and change. In particular, the Dodd-Frank Act drastically revised the laws and regulations under which we operate. As an institution with less than $10 billion in assets, certain elements of the Dodd-Frank Act have not been applied to us. While we endeavor to maintain safe banking practices and controls beyond the regulatory requirements applicable to us, our internal controls may not match those of larger banking institutions that are subject to increased regulatory oversight.

Financial institutions generally have also been subjected to increased scrutiny from regulatory authorities. These changes and increased scrutiny have resulted and may continue to result in increased costs of doing business and may in the future result in decreased revenues and net income, reduce our ability to compete effectively to attract and retain customers, or make it less attractive for us to continue providing certain products and services. Any future changes in federal and state laws and regulations, as well as the interpretation and implementation of such laws and regulations, could affect us in substantial and unpredictable ways, including those listed above or other ways that could have a material adverse effect on our business, financial condition or results of operations. Recent political developments, including the change in administration in the United States, have led to additional uncertainty as to the implementation, scope and timing of regulatory reforms.

29

There is uncertainty surrounding the potential legal, regulatory and policy changes by the presidential administration in the United States that may directly affect financial institutions and the global economy.

The presidential administration has indicated that it would like to see changes made to certain financial reform regulations, including the Dodd-Frank Act, which has resulted in increased regulatory uncertainty, and we are assessing the potential impact on financial and economic markets and on our business. Changes in federal policy and at regulatory agencies are expected to occur over time through policy and personnel changes, which could lead to changes involving the level of oversight and focus on the financial services industry. The nature, timing and economic and political effects of potential changes to the current legal and regulatory framework affecting financial institutions remain highly uncertain. At this time, it is unclear what additional laws, regulations and policies may change and whether future changes or uncertainty surrounding future changes will adversely affect our operating environment and therefore our business, financial condition and results of operations.

Certain of our activities are restricted due to commitments entered into with the Federal ReserveFRB by us and certain of our foreign national stockholders.

Certain of ourWe have certain stockholders who invested in our Recapitalizationrecapitalization who are foreign nationals, and we and certain of these foreign national stockholders have entered into commitments with the Federal ReserveFRB that restrict some of our activities. In particular, without approval of the Federal Reserve,FRB, we are restricted from engaging in certain transactions with these foreign national stockholders, their immediate families, and any company controlled by such foreign national stockholders or by their immediate families. Such transactions include (i) extensions of credit described in the Federal Reserve’s Regulation O, (ii) covered transactions described in sections 23A and 23B of the Federal Reserve Act and the Federal Reserve’s Regulation W, and (iii) subject to certain limited exceptions, business transactions or relationships with companies controlled by such foreign national stockholders or by their immediate families. For additional information about the commitments entered into with the Federal Reserve, see “Certain Relationships and Related Transactions—Foreign National Commitments and Passivity Commitments”. These restrictions could prevent us from pursuing activities that would otherwise be in our and our other stockholders’ best interests. Moreover, ifIf we were to fail to comply with any of these restrictions, we could be subject to enforcement and other legal actions by the Federal Reserve,FRB, including civil and criminal penalties, which could have a material adverse effect on our business, financial condition and results of operations.

We are required to act as a source of financial and managerial strength for our bank in times of stress.

As a bank holding company, we are required under federal law to act as a source of financial and managerial strength to our bank, and to commit resources to support our bank if necessary. We may be required to commit additional resources to our bank at times when we may not be in a financial position to provide such resources or when it may not be in our, or our stockholders’ or our creditors’ best interests to do so. Providing such support is more likely to be necessary during times of financial stress for us and our bank, which may make any capital we are required to raise to provide such support more expensive than it might otherwise be. In addition, any capital loans we make to our bank are subordinate in right of payment to depositors and to certain other indebtedness of our bank. In the event of our bankruptcy, any commitment by us to a federal banking regulator to maintain the capital of our bank will be assumed by the bankruptcy trustee and entitled to priority of payment.

We are subject to capital adequacy requirements and may be subject to more stringent capital requirements.

We are subject to capital adequacy guidelines and other regulatory requirements specifying minimum amounts and types of capital that we must maintain. From time to time, the regulators change these regulatory capital adequacy and liquidity guidelines. If we fail to meet these minimum capital adequacy and liquidity guidelines and other regulatory requirements, we or our subsidiaries may be restricted in the types of activities we may conduct and we may be prohibited from taking certain capital actions, such as paying dividends and repurchasing or redeeming capital securities. See “Supervision and Regulation—Regulatory Capital Requirements” for more information on the capital adequacy standards that we must meet and maintain.

In particular, the capital adequacy and liquidity requirements applicable to Byline Bancorp, Inc. and Byline Bank under the recently adopted capital rules implementing the Basel III capital framework in the United States (the “Capital Rules”) began to be phased-in starting in 2015. Basel III not only increases most of the required minimum regulatory capital ratios, it introduces a new Common Equity Tier 1 capital ratio and the concept of a capital conservation buffer. Basel III also expands the current definition of capital by establishing additional criteria that capital instruments must meet to be considered Additional Tier 1 and Tier 2 capital. In order to be a “well-capitalized” depository institution under the new regime, an institution must maintain a Common Equity Tier 1 capital ratio of 6.5% or more; a Tier 1 capital ratio of 8% or more; a total capital ratio of 10% or more; and a leverage ratio of 5% or more. Institutions must also maintain a capital conservation buffer consisting of common equity Tier 1 capital. The Basel III rules also generally preclude certain hybrid securities, such as trust preferred securities, from being counted as Tier 1 capital. However, we are permitted to include qualifying trust preferred securities issued prior to May 19, 2010 as Additional Tier 1 capital. The Basel III Capital Rules became effective as applied to us and Byline Bank on January 1, 2015 with a phase-in period that generally extends through January 1, 2019 for many of the changes.

While we currently meet the requirements of the Basel III-based Capital Rules, we may fail to do so in the future. The failure to meet applicable regulatory capital requirements could result in one or more of our regulators placing limitations or conditions on our activities, including our growth initiatives, or restricting the commencement of new activities, and could affect customer and investor confidence, our costs of funds and level of required deposit insurance assessments to the FDIC, our ability to pay dividends on our capital stock, our ability to make acquisitions, and our business, results of operations and financial conditions, generally.

30

Monetary policies and regulations of the Federal ReserveFRB could adversely affect our business, financial condition, and results of operations.

In addition to being affected by general economic conditions, our earnings and growth are affected by the policies of the Federal Reserve.FRB. An important function of the Federal ReserveFRB is to regulate the money supply and credit conditions. Among the instruments used by the Federal ReserveFRB to implement these objectives are open market purchases and sales of U.S. government securities, adjustments of the discount rate, and

27

changes in banks’ reserve requirements against bank deposits. These instruments are used in varying combinations to influence overall economic growth and the distribution of credit, bank loans, investments, and deposits. Their use also affects interest rates charged on loans or paid on deposits.

The monetary policies and regulations of the Federal ReserveFRB have had a significant effect on the operating results of commercial banks in the past and are expected to continue to do so in the future. The effects of such policies upon our business, financial condition, and results of operations cannot be predicted.

Federal and state regulators periodically examine our business, and we may be required to remediate adverse examination findings.

The Federal Reserve, the FDIC, and the IDFPR periodically examine our business, including our compliance with laws and regulations. If, as a result of an examination, a banking agency were to determine that our financial condition, capital resources, asset quality, earnings prospects, management, liquidity or other aspects of any of our operations had become unsatisfactory, or that we or our predecessor were in violation of any law or regulation, they may take a number of different remedial actions as they deem appropriate. These actions include the power to enjoin “unsafe or unsound” practices, to require affirmative action to correct any conditions resulting from any violation or practice, to issue an administrative order that can be judicially enforced, to direct an increase in our capital, to restrict our growth, to assess civil money penalties, to fine or remove officers and directors and, if it is concluded that such conditions cannot be corrected or there is an imminent risk of loss to depositors, to terminate our deposit insurance and place our bank into receivership or conservatorship. Any regulatory action against us could have an adverse effect on our business, financial condition and results of operations.

Our ability to pay dividends may be limited and we do not intend to pay cash dividends on our common stock in the foreseeable future; consequently, your ability to achieve a return on your investment will depend on appreciation in the price of our common stock.

Holders of our common stock are entitled to receive only such dividends as our board of directors may declare out of funds legally available for such payments. We expect that we will retain all earnings, if any, for operating capital, and we do not expect our board of directors to declare any dividends on our common stock in the foreseeable future. Even if we have earnings in an amount sufficient to pay cash dividends, our board of directors may decide to retain earnings for the purpose of financing growth. We cannot assure you that cash dividends on our common stock will ever be paid.

In addition, we are a bank holding company, and our ability to declare and pay dividends is dependent on certain federal regulatory considerations, including the guidelines of the Federal Reserve regarding capital adequacy and dividends. It is the policy of the Federal Reserve that bank holding companies should generally pay dividends on capital stock only out of earnings, and only if prospective earnings retention is consistent with the organization’s expected future needs, asset quality and financial condition.

Further, if we are unable to satisfy the capital requirements applicable to us for any reason, we may not be able to make, or may have to reduce or eliminate, the payment of dividends on our common stock in the event we decide to declare dividends. Any change in the level of our dividends or the suspension of the payment thereof could have a material adverse effect on the market price of our common stock.

We are subject to numerous laws designed to protect consumers, including the Community Reinvestment Act and fair lending laws, and failure to comply with these laws could lead to a wide variety of sanctions.

The CRA requires our bank, consistent with safe and sound operations, to ascertain and meet the credit needs of its entire community, including low and moderate income areas. Our bank’s failure to comply with the CRA could, among other things, result in the denial or delay of certain corporate applications filed by us or our bank, including applications for branch openings or relocations and applications to acquire, merge or consolidate with another banking institution or holding company. In addition, the Equal Credit Opportunity Act,ECOA, the Fair Housing Act, and other fair lending laws and regulations prohibit discriminatory lending practices by financial institutions. The U.S. Department of Justice, federal banking agencies, and other federal agencies are responsible for enforcing these laws and regulations. A challenge to an institution’s compliance with fair lending laws and regulations could result in a wide variety of sanctions, including damages and civil money penalties, injunctive relief, restrictions on mergers and acquisitions activity, restrictions on expansion, and restrictions on entering new business lines. Private parties may also challenge an institution’s performance under fair lending laws in private class action litigation. Such actions could have a material adverse effect on our business, financial condition, results of operations, and growth prospects.

31

Rulemaking changes implemented by the Consumer Financial Protection Bureau (“CFPB”) may result in higher regulatory and compliance costs that could adversely affect our results of operations.

The Dodd-Frank Act created a new, independent federal agency, the CFPB, which was granted broad rulemaking, supervisory and enforcement powers under various federal consumer financial protection laws. The consumer protection provisions of the Dodd-Frank Act and the examination, supervision and enforcement of those laws and implementing regulations by the CFPB have created a more intense and complex environment for consumer finance regulation. See “Supervision and Regulation—Consumer Financial Protection”. Notwithstanding that insured depository institutions with assets of $10 billion or less (such as Byline Bank) will continue to be supervised and examined by their primary federal regulators, the ultimate impact of this heightened scrutiny is uncertain and could result in changes to pricing, practices, products and procedures. It could also result in increased costs related to regulatory oversight, supervision and examination, remediation efforts and possible penalties.  

Litigation and regulatory actions, including possible enforcement actions, could subject us to significant fines, penalties, judgments, or other requirements resulting in increased expenses or restrictions on our business activities.

Our business is subject to increased litigation and regulatory risks as a result of a number of factors, including the highly regulated nature of the financial services industry and the focus of state and federal prosecutors on banks and the financial services industry generally. This focus has only intensified since the severe economic recession occurring during 2007 through 2009, with regulators and prosecutors focusing on a variety of financial institution practices and requirements, including foreclosure practices, compliance with applicable consumer protection laws, classification of “held for sale” assets and compliance with anti-money laundering statutes, the Bank Secrecy Act and sanctions administered by the Office of Foreign Assets Control of the U.S. Department of the Treasury (“OFAC”).

In the normal course of business, from time to time, we have in the past and may in the future be named as a defendant in various legal actions, including arbitrations, class actions, and other litigation, arising in connection with our current and/or prior business activities. Legal actions could include claims for substantial compensatory or punitive damages or claims for indeterminate amounts of damages.damages, resulting in increased expenses, diminished income, damage to our reputation, and divert management attention from the operation of our business. In addition, while the arbitration provisions in certain of our customer agreements historically have limited our exposure to consumer class action litigation, there can be no assurance that we will be successful in enforcing our arbitration clause in the future. Further, we have in the past and may in the future be subject to consent orders with our regulators.

We may also, from time to time, be the subject of subpoenas, requests for information, reviews, investigations and proceedings (both formal and informal) by governmental agencies regarding our current and/or prior business activities. Any such legal or regulatory actions may subject us to substantial compensatory or punitive damages, significant fines, penalties, obligations to change our business practices or other requirements resulting in increased expenses, diminished income and damage to our reputation. Our involvement in any such matters, whether tangential or otherwise and even if the matters are ultimately determined in our favor, could also cause significant harm to our reputation and divert management attention from the operation of our business. Further, any settlement, consent order or adverse judgment in connection with any formal or informal proceeding or investigation by government agencies may result in litigation, investigations or proceedings as other litigants and government agencies begin independent reviews of the same activities. As a result, the outcome of legal and regulatory actions could be material to our business, results of operations, financial condition and cash flows depending on, among other factors, the level of our earnings for that period, and could have a material adverse effect on our business, financial condition or results of operations.flows.

Non-compliance with the USA PATRIOT Act, the Bank Secrecy Act or other laws and regulations could result in fines or sanctions against us.

The USA PATRIOT Act of 2001 and the Bank Secrecy Act require financial institutions to design and implement programs to prevent financial institutions from being used for money laundering and terrorist activities. If such activities are detected, financial institutions are obligated to file suspicious activity reports with the Financial Crimes Enforcement Network of the U.S. Department of the Treasury. These rules require financial institutions to establish procedures for identifying and verifying the identity of customers seeking to open new financial accounts. Federal and state bank regulators also have focused on compliance with Bank Secrecy Act and anti-money laundering regulations. Failure to comply with these regulations could result in fines or sanctions, including restrictions on conducting acquisitions or establishing new branches. In recent years, several banking institutions have received large fines for non-compliance with these laws and regulations. While we have developed policies and procedures designed to assist in compliance with these laws and regulations, these policies and procedures may not be effective in preventing violations of these laws and regulations. Failure to maintain and implement adequate programs to combat money laundering and terrorist financing could also have serious reputational consequences for us, which could have a material adverse effect on our business, financial condition or results of operations.

Regulations relating to privacy, information security, and data protection could increase our costs, affect or limit how we collect and use personal information, and adversely affect our business opportunities.

We are subject to various privacy, information security, and data protection laws, including requirements concerning security breach notification, and we could be negatively affected by these laws. For example, our business is subject to the Gramm-Leach-Bliley

28

Act which, among other things: (i) imposes certain limitations on our ability to share nonpublic personal information about our customers with nonaffiliated third parties; (ii) requires that we provide certain disclosures to customers about our information collection, sharing and security practices, and afford customers the right to “opt out” of any information sharing by us with

32

nonaffiliated third parties (with certain exceptions), and (iii) requires that we develop, implement and maintain a written comprehensive information security program containing appropriate safeguards based on our size and complexity, the nature and scope of our activities, and the sensitivity of customer information we process, as well as plans for responding to data security breaches.program. Various state and federal banking regulators and states have also enacted data security breach notification requirements with varying levels of individual, consumer, regulatory or law enforcement notification in certain circumstances in the event of a security breach. Moreover, legislators and regulators in the United States are increasingly adopting or revising privacy, information security and data protection laws that potentially could have a significant impact on our current and planned privacy, data protection and information security-related practices, our collection, use, sharing, retention and safeguarding of consumer or employee information, and some of our current or planned business activities. This could also increase our costs of compliance and business operations and could reduce income from certain business initiatives. This includes increased privacy-related enforcement activity at the federal level, by the Federal Trade Commission and CFPB, as well as at the state level, such as with regard to mobile applications.

Compliance with current or future privacy, data protection, and information security laws (including those regarding security breach notification) affecting customer or employee data to which we are subject could result in higher compliance and technology costs and could restrict our ability to provide certain products and services, which could have a material adverse effect on our business, financial condition or results of operations. Our failure to comply with privacy, data protection and information security laws could result in potentially significant regulatory or governmental investigations or actions, litigation, fines, sanctions and damage to our reputation, which could have a material adverse effect on our business, financial condition, or results of operations.

Potential limitations on incentive compensation contained in proposed federal agency rulemaking may adversely affect our ability to attract and retain our highest performing employees.

During the second quarter of 2016, the Federal Reserve and the FDIC, along with other U.S. regulatory agencies, jointly published proposed rules designed to implement provisions of the Dodd-Frank Act prohibiting incentive compensation arrangements that would encourage inappropriate risk taking at covered financial institutions, which includes a bank or bank holding company with $1 billion or more in assets, such as Byline Bank. It cannot be determined at this time whether or when a final rule will be adopted and whether compliance with such a final rule will substantially affect the manner in which we structure compensation for our executives and other employees. Depending on the nature and application of the final rules, we may not be able to compete successfully with certain financial institutions and other companies that are not subject to some or all of the rules to retain and attract executives and other high performing employees. If this were to occur, relationships that we have established with our clients may be impaired and our business, financial condition and results of operations could be adversely affected, perhaps materially.

We are subject to environmental liability risk associated with our lending activities and with the properties we own.

A significant portion of our loan portfolio is secured by real property. During the ordinary course of business, we may foreclose on and take title to properties securing certain loans and there is a risk that hazardous or toxic substances could be found on these properties, notwithstanding our prior due diligence. We also own many of our branches and it is possible that hazardous or toxic substances could be found on these properties. If hazardous or toxic substances are found, we may be liable for remediation costs, as well as for personal injury and property damage. Environmental laws may require us to incur substantial expenses and may materially reduce the affected property’s value or limit our ability to use or sell the affected property. In addition, future laws or more stringent interpretations or enforcement policies with respect to existing laws may increase our exposure to environmental liability. The remediation costs and any other financial liabilities associated with an environmental hazard could have a material adverse effect on our business, results of operations and financial condition.

Risks Related to Acquisition Activity

We may be adversely affected by risks associated with completed and potential acquisitions, including execution risks, failure to realize anticipated transaction benefits, and failure to overcome integration risks, which could adversely affect our growth and profitability.

We plan to continuehave continued to grow our businessesbusiness both organically but remain open to considering potentialand through the acquisition of smaller bank or other acquisition opportunitiesbanks that management believes strategically fit within the deposit strength and commercial orientation of our franchise and that we believe support our businesses and make financial and strategic sense, such as our recently announced anticipated acquisition of First Evanston Bancorp, Inc.sense. In the event that we docontinue to pursue further acquisitions, we may have difficulty executing on acquisitions and may not realize the anticipated benefits of any transaction we complete. Any of the foregoing matters could materially and adversely affect us.

Generally, any acquisition of target financial institutions, branches, or other banking assets by us will require approval by, and cooperation from, a number of governmental regulatory agencies, possibly including the Federal ReserveFRB and the FDIC as well as the IDFPR. In evaluating applications seeking approval of acquisitions, such regulators consider factors such as, among other things, the competitive effect and public benefits of the transaction, the capital position and managerial resources of the combined organization, the risks to the stability of the U.S. banking or financial system, the applicant’s performance record under the CRA, the applicant’s compliance with fair housing and other consumer protection laws and the effectiveness of all organizations involved in combating money laundering activities. Such regulators could deny our application, which would restrict our growth, or the regulatory approvals may not be granted on terms that are acceptable to us. For example, we could be required to sell branches as a condition to receiving regulatory approvals, and such a condition may not be acceptable to us or may reduce the benefit of an acquisition.

33

As to any acquisition that we complete, including the Ridgestone acquisition, which took place in October 2016, as well as the First Evanston merger, we may fail to realize some or all of the anticipated transaction benefits if the integration process takes longer or is more costly than expected or otherwise fails to meet our expectations.

In addition, acquisition activities could be material to our business and involve a number of risks, including the following:

Depending on the condition of any institution or assets or liabilities that we may acquire, that acquisition may, at least in the near term, adversely affect our capital and earnings and, if not successfully integrated with our organization, may continue to have such effects over a longer period. We may not be successful in overcoming these risks or any other problems encountered in connection with potential acquisitions, and any acquisition we may consider will be subject to prior regulatory approval.

Also, acquisitions may involve the payment of a premium over book and market values and, therefore, some dilution of our tangible book value and net income per common share may occur in connection with any future transaction. Our inability to overcome these risks could have a material adverse effect on our profitability, return on equity, return on assets, and our ability to implement our business strategy and enhance stockholder value, which, in turn, could have a material adverse effect on our business, financial condition, and results of operations.

Other Risks Related to the Ongoing COVID-19 Pandemic

The COVID-19 pandemic has affected and continues to affect us, our business, employees, customers, counterparties and third-party service providers, and the ultimate extent of the impacts on our business, financial position, results of operations, liquidity and prospects is uncertain.

The COVID-19 pandemic has created significant economic and financial disruption in the United States and globally. While the scope, duration and full effects of the pandemic are still not fully known, the pandemic and its associated impacts have had, are currently having and may for some time continue to have a destabilizing and negative effect on the U.S. and global economies, as well as financial and capital markets. The pandemic has impacted interest rates, increased economic and market uncertainty, disrupted trade and supply chains, increased unemployment levels, decreased consumer confidence generally and has generally caused significant disruption in global, national and local economic and business activity.

The ultimate extent of the impact of the pandemic on our business, cash flows, financial condition, liquidity, results of operations, customer confidence, profitability and growth prospects will depend on continuing and future developments related to the virus, which are highly uncertain, cannot be predicted and are outside of our control. These future developments may include the scope and duration of the COVID-19 pandemic, the emergence of new variants of COVID-19, the possibility of future resurgences of the COVID-19 pandemic, the continued effectiveness of our business continuity plan, including work-from-home arrangements, and

29

staffing at branches and certain other facilities, the direct and indirect impact of the COVID-19 pandemic on our employees, customers, counterparties and third-party service providers, as well as on other market participants, actions taken, or that may yet be taken, by governmental authorities and other third parties in response to the COVID-19 pandemic. Future developments, including increased unemployment rates, or turbulence in U.S. or global financial markets could adversely affect our revenues and the values of our assets and liabilities, reduce the availability of funding, lead to a tightening of credit, and further increase stock price volatility. These and other potential impacts of epidemics, pandemics or other outbreaks of an illness, disease or virus could therefore materially and adversely affect our business, revenue, operations, financial condition, liquidity, results of operations and prospects.

Although financial markets have largely rebounded from the significant declines that occurred earlier in the COVID-19 pandemic and global economic conditions showed signs of improvement during the second half of 2020 and throughout 2021, many of the circumstances that arose or became more pronounced after the onset of the COVID-19 pandemic persist, including:

As a result, our credit, operational, and certain other risks are generally expected to remain elevated until the COVID-19 pandemic subsides. Depending on the duration and severity of the COVID-19 pandemic going forward, the conditions noted above could continue for an extended period and these or other adverse developments may occur or reoccur.

The length of the COVID-19 pandemic and the efficacy of the extraordinary measures being put in place to address it are unknown. There are no comparable recent events that provide guidance as to the economic recovery from the effects of the COVID-19 pandemic or the effect the spread of COVID-19 as a global pandemic may have. Even after the COVID-19 pandemic subsides, the U.S. economy may experience a recession, and we anticipate that our businesses could be materially and adversely affected by a recession. To the extent the pandemic adversely affects our business, financial condition, liquidity, capital, loans, asset quality, or results of operations, it may also have the effect of heightening many of the other risks described in this “Risk Factors” section of the Form 10-K.

General Risk Factors

Loss of deposits could increase our funding costs.

We rely on customer deposits to meet a considerable portion of our funding needs, and we continue to seek customer deposits to maintain this funding base. We accept deposits directly from consumer and commercial customers and, as of December 31, 2021, we had $5.2 billion in deposits. These deposits are subject to potential fluctuations in availability or the price we must pay (in the form of interest) to obtain them due to certain factors outside our control, such as increasing competitive pressures from other financial services firms for deposits and changes in interest rates and returns on other investment classes, which could result in significant outflows of deposits within short periods of time or significant changes in pricing necessary to maintain current deposits or attract additional deposits. The loss of customer deposits for any reason could increase our funding costs.

We operate in a highly competitive and changing industry and market area and compete with both banks and non-banks.

We operate in the highly competitive financial services industry and face significant competition for customers from financial institutions located both within and beyond our principal markets. We compete with national commercial banks, regional banks, private banks, savings banks, credit unions, non-bank financial services companies, FinTech companies and other financial institutions operating within or near the areas we serve, many of whom are much larger and have significantly greater resources than us and that target the same customers we do in the Chicago metropolitan area. In order to compete, we may have to pay higher interest rates to

30

attract deposits, accept lower yields to attract loans and pay higher wages for new employees, resulting in lower net interest margins and reduced profitability. As customer preferences and expectations continue to evolve, technology has lowered barriers to entry and made it possible for banks to expand their geographic reach by providing digital banking services and for non-banks to offer products and services traditionally provided by banks. The banking industry is experiencing rapid changes in technology, and, as a result, our future success will depend in part on our ability to address our customers’ needs by using technology. Many of our non-bank competitors are not subject to the same extensive regulations that govern our activities and, as a result, may have greater flexibility in competing for business. We also face increased competition in our U.S. government guaranteed lending business, which can adversely affect our volume and the premium, if any, recognized on sales of the guaranteed portions of such U.S. government guaranteed loans. Our inability to compete successfully in the markets in which we operate could have a material adverse effect on our business, financial condition, or results of operations.

Our principal stockholder, MBG Investors I, L.P. will continue to havehas significant influence over us, and its interests could conflict with those of our other stockholders.

Currently, our principal stockholder, MBG Investors I, L.P., owns approximately 39.1%30.4% of the outstanding shares of our common stock.stock and its general partner is one of our directors. As a result, MBG Investors I, L.P. is able to influence matters requiring approval by our stockholders, including the election of directors and the approval of mergers or other extraordinary transactions. MBG Investors I, L.P. may also have interests that differ from yours and may vote in a way with which you disagree and which may be adverse to your interests. The concentration of ownership may also have the effect of delaying, preventing, or deterring a change of control of the Company, could deprive our stockholders of an opportunity to receive a premium for their common stock as part of a private sale of our companytheir shares of the Company, subject us to the influence of a presently unknown third-party and might ultimately affect the market price of our common stock.

MBG Investors I, L.P.Future sales of our common stock in the public market, including by our pre-IPO stockholders, could sell its interest in us tolower our stock price.

The market price of our common stock could decline as a third-party inresult of sales of a private transaction, which may not lead to your realizationlarge number of any change of control premium on shares of our common stock and would subjector from the perception that such sales could occur. These sales, or the possibility that these sales may occur, also may make it more difficult for us to raise additional capital by selling equity securities in the influencefuture, at a time and price that we deem appropriate.

Certain of a presently unknown third-party.

our pre-IPO stockholders, including affiliates such as MBG Investors, I, L.P. continues to beneficially own a large equity interest, hold restricted shares that could be sold in accordance with the volume, manner of sale, and other limitations under Rule 144 or through registration under the Securities Act. We cannot predict the size of future issuances or sales of our company. MBG Investors I, L.P. will havecommon stock by our pre-IPO stockholders or the ability, should it choose to do so, to sell someeffect, if any, that future issuances or allsales of its shares of our common stock in a privately negotiated transaction, which, if sufficient in size, could result in another party gaining significant influence overmay have on the market price of our company.

34

The abilitycommon stock. Sales or distributions of MBG Investors I, L.P. to sell its sharessubstantial amounts of our common stock privately,(including shares issued in connection with no requirement for a concurrent offer to be made to acquire all ofan acquisition), or the shares of our outstanding common stock,perception that such sales could prevent you from realizing any change of control premium on your sharesoccur, may cause the market price of our common stock that may accrue to MBG Investors I, L.P. on its private sale of our common stock.decline.

Item 1B. Unresolved Staff Comments.

None

Item 2. Properties.Properties.

Our corporate headquarters is located at 180 North LaSalle Street, Suite 300, Chicago, IL 60601. In addition to our corporate headquarters, we operate 5543 branch offices located in the Chicago metropolitan area and one branch office in Brookfield, Wisconsin. We lease 1714 of our retail branch offices and our headquarters and own the remainder of our retail branch offices. We are continually evaluating opportunities to improve our existing branches and branch network, and we have in the recent past closed and may in the future choose to close branches in certain circumstances in order to improve our efficiency.efficiency or for other business reasons.

Item 3. Legal Proceedings.

We operate in a highly regulated environment. From time to time we are a party to various litigation matters incidental to the conduct of our business. We are not presently party to any legal proceedings the resolution of which we believe would have a material adverse effect on our business, prospects, financial condition, liquidity, results of operation, cash flows or capital levels.

Item 4. Mine Safety Disclosures.

Not applicable.

3531

PART II

Item 5. Market for Registrant’s Common Equity, Related Stockholder Matters and Issuer Purchases of Equity Securities.

Our common stock tradesis listed on the New York Stock Exchange (the “NYSE”) under the symbol “BY.”“BY”. There were approximately 1,2881,170 holders of record of our common stock as of March 29, 2018.  The following table sets forth the high and low reported trading prices per share of our common stock for the periods indicated, as reported by the NYSE.  The reported high and low sales prices of our common stock begins on June 30, 2017, the first date of trading on the NYSE in connection with our initial public offering.  Prior to that, there was no public market for our common stock. We have not declared any dividends on our common stock in the last three years.  4, 2022.

The timing and amount of cash dividends paid on our common stock depends on our earnings, financial condition, capital requirements and other relevant factors. The primary sources for payment of dividends to our stockholders are dividends paid to usthe Company by Byline Bank and cash on hand. The Company isWe are subject to state law limitations on the payment of dividends. Delaware law generally limits dividends if: (a) the corporation does not have a surplus; or (b) the corporation does not have net profits for the fiscal year in which the dividend is declared and/or the preceding fiscal year. We have an internal policy that prohibits the Board of Byline Bank from declaring and Byline Bank from paying dividends that would cause the minimum capital amounts required for Byline Bank to be considered less than “well capitalized” for regulatory purposes. See “ItemItem 1. Business“Business – Supervision and Regulations – Dividends; Stress Testing” above and Note 21of21 of notes to consolidated financial statements contained in Item 8 of this report.

We paid a cash dividend of $0.06 per share for the first and second quarters of 2021 and a $0.09 per share cash dividend for the third and fourth quarter of 2021. We paid a cash dividend of $0.03 per share for each quarter of 2020 and did not pay any dividends on its common stock during 2019.

Issuer Purchases of Equity Securities.

On November 1, 2019, we announced that our Board of Directors approved a stock repurchase program authorizing the purchase of up to an aggregate of 1,250,000 shares of our outstanding common stock at the discretion of management, from time to time in open market purchases as market conditions warrant or in privately negotiated transactions including pursuant to a Rule 10b5-1 plan as well as the safe harbor provided by Rule 10b-18 under the Exchange Act. The Company didprogram terminated on December 31, 2020, and an aggregate of 118,486 shares were purchased under the program as of that date.

On December 10, 2020, we announced that our Board of Directors approved a new stock repurchase program authorizing the purchase of up to an aggregate of 1,250,000 shares of our outstanding common stock, and on July 27, 2021, our Board of Directors authorized an expansion of our current stock repurchase program. Under the extended program, we are authorized to repurchase an additional 1,250,000 shares of our outstanding common stock.. The shares may, at the discretion of management, be repurchased from time to time in open market purchases as market conditions warrant or in privately negotiated transactions. We are not obligated to purchase any shares under the program, and the program may be discontinued at any time. The actual timing, number and share price of shares purchased under the repurchase anyprogram will be determined by us at our discretion and will depend on a number of factors, including the market price of our stock, general market and economic conditions and applicable legal requirements.

We purchased a total of 1,331,708 shares of its common stock during 2021. We did not purchase any shares during the fourth quarter of 2021 under our stock repurchase program. The shares authorized to be repurchased represent approximately 3.1% of our outstanding common stock as of December 31, 2021. The program expires on December 31, 2022, unless earlier terminated. The table below includes information regarding purchases of our common stock pursuant to the repurchase program during the quarter ended December 31, 2017.2021.

Equity(1)These shares were acquired pursuant to our 2017 Omnibus Incentive Compensation Plan Information.

The equityPlan. Under the terms of compensation plan, information is presented under Part III, Item 12we can accept previously owned shares of common stock to be surrendered to satisfy the reportexercise price of stock options, the settlements of restricted stock awards and is incorporated herein by reference.tax withholding obligations upon vesting and/or exercise..

UnregisteredRecent Sales of Equity Securities andUnregistered Securities; Use of Proceeds.Proceeds From Registered Securities.

None.

3632

Stock Performance Graph.

The following graph compares the cumulative total stockholder return on Byline Bancorp, Inc.’sour common stock from June 30, 2017 (the date of our initial public offering and listing on the NYSE) through December 31, 2017,2021, with the cumulative total return of: (1) the Russell 2000 (U.S. Stock) Index, (2) a peer group of the SNL $1 Billion to $5 Billion Asset BankS&P U.S. SmallCap Banks Index and, (3) a peer group of the SNL $5 Billion to $10 Billion AssetKBW NASDAQ Regional Bank Index.Index (“KRX”). Total return assumes the reinvestment of all dividends. We believe the KRX index provides a meaningful comparison to our cumulative total return. Included in the KRX index are U.S. regional banks similar to us.

*The information assumes that $100 was invested at the closing price on June 30, 2017 in the Company’sour stock and each index, and that all dividends are reinvested.

37

Item 6. Selected Financial Data.[Reserved]

The following table summarizes certain selected historical consolidated financial data of Byline as of and for the fiscal years ended December 31, 2017, 2016, 2015, and 2014, and is derived from our audited financial statements. You should read this information in conjunction with “Management’s Discussion and Analysis of Financial Condition and Results of Operations” included in Item 7 of this report and our consolidated financial statements and related notes included in Item 8 of this report. Management uses the non-GAAP financial measures set forth herein in its analysis of our performance, and believes that these non-GAAP financial measures provide useful information to management and investors; however, you should not view these disclosures as a substitute for results determined in accordance with GAAP financial measures. See “GAAP Reconciliation and Management Explanation of Non-GAAP Financial Measures” included in item 6 of this report, for more information.

3833

GAAP Reconciliation and Management Explanation of Non-GAAP Financial Measures

Some of the financial measures included in our “Selected Financial Data” are not measures of financial performance in accordance with GAAP. Our management uses the non‑GAAP financial measures set forth below in its analysis of our performance.

We believe that these non‑GAAP financial measures provide useful information to its management and investors that is supplementary to our financial condition, results of operations and cash flows computed in accordance with GAAP; however, we acknowledge that our non‑GAAP financial measures have a number of limitations. As such, you should not view these disclosures as a substitute for results determined in accordance with GAAP financial measures that we and other companies use. Management also uses these measures for peer comparison.

39

The following reconciliation table provides a more detailed analysis of the non‑GAAP financial measures discussed herein: