C & F FINANCIAL CORP

The Corporation’s management, including the Corporation’s Chief Executive Officer and the Chief Financial Officer, has evaluated the effectiveness of the Corporation’s disclosure controls and procedures (as defined in Rule 13a-15(e) under the Exchange Act as of the end of the period covered by this report. Based on that evaluation, the Chief Executive Officer and the Chief Financial Officer have concluded that the Corporation’s disclosure controls and procedures were effective as of September 30, 2024 to ensure that information required to be disclosed by the Corporation in reports that it files or submits under the Exchange Act is recorded, processed, summarized and reported within the time periods specified in SEC rules and forms and that such information is accumulated and communicated to the Corporation’s management, including the Corporation’s Chief Executive Officer and Chief Financial Officer, as appropriate to allow timely decisions regarding required disclosure. Because of the inherent limitations in all control systems, no evaluation of controls can provide absolute assurance that the Corporation’s disclosure controls and procedures will detect or uncover every situation involving the failure of persons within the Corporation or its subsidiary to disclose material information required to be set forth in the Corporation’s periodic reports.

There were no changes in the Corporation’s internal control over financial reporting during the three months ended September 30, 2024 that have materially affected, or are reasonably likely to materially affect, the Corporation’s internal control over financial reporting.