What is settlement risk? Herstatt risk, PvP and how modern rails remove it

Settlement risk is the risk that one party to a transaction pays out its side of a deal and the counterparty fails to deliver in return — because of insolvency, operational failure or time-zone gaps between the two legs. It is often called Herstatt risk, after the German bank whose 1974 collapse mid-settlement made the danger famous. Modern mitigations work by removing the gap between the two legs: payment-versus-payment (PvP) mechanisms settle both sides simultaneously, and real-time settlement rails shrink the exposure window from days to minutes.

The Herstatt collapse: why settlement risk has a bank’s name

On 26 June 1974, German regulators withdrew the banking licence of Bankhaus Herstatt, a mid-sized Cologne bank with a large foreign-exchange business, and closed it at the end of the German banking day. The timing was the problem. Herstatt’s FX counterparties had already irrevocably paid Deutsche Marks to the bank in Frankfurt that day, expecting to receive US dollars in New York in return. When the bank was closed, New York’s banking day was still in progress — and the dollar payments were never made. Counterparties that had paid in full were left as unsecured creditors of a failed bank.

The episode was small in absolute terms but seismic in its lessons. It showed that even a brief, structural gap between the two legs of a settlement — here, the time-zone gap between European and US banking hours — converts a payment obligation into full principal exposure. The failure disrupted interbank payments more broadly and became the founding case study for international work on payment-system risk, including the creation of the Basel Committee on Banking Supervision. Fifty years later, “Herstatt risk” remains the standard name for FX settlement risk.

What forms does settlement risk take?

Settlement risk is best understood as a family of exposures that share one root: a gap — in time, in sequence, or in legal certainty — between what you deliver and what you receive.

• Principal risk: the classic Herstatt exposure — you pay the full amount and receive nothing, losing principal rather than just the cost of replacing the trade.
• Replacement-cost risk: the counterparty fails before settlement, and you must replace the transaction at current market prices, bearing any adverse movement.
• Liquidity risk: the payment you were due arrives late rather than never, but you must fund your own obligations in the meantime.
• Operational and legal risk: a payment fails or is delayed because of system outages, messaging errors, or uncertainty about when settlement is legally final in a given jurisdiction.

In cross-border payments over correspondent banking, these exposures stack. A payment that takes two or three days to travel through intermediary banks is, for that entire period, an exposure to each institution in the chain — and to the possibility that any of them fails, freezes the payment for review, or sits closed for a local holiday while your obligation elsewhere falls due.

How PvP and CLS took principal risk out of FX settlement

The structural answer to Herstatt risk is payment-versus-payment: link the two legs so that each payment becomes final if and only if the other does. Neither party can end up having paid without being paid. CLS Bank, launched in 2002 by major banks with central-bank cooperation, applies this model to foreign-exchange settlement: it settles both legs of an FX trade simultaneously across accounts it holds, and today settles trillions of US dollars in gross value daily across the major currencies it supports.

PvP works — but its coverage has limits. CLS supports a defined set of currencies, and a meaningful share of global FX, particularly in emerging-market currencies that dominate remittance corridors, still settles outside PvP protection. International bodies including the BIS have repeatedly flagged the persistence of FX settlement risk in these gaps. For banks and MSBs operating in exactly those corridors, the classic mitigation is often unavailable precisely where it is most needed.

Every mitigation of settlement risk is ultimately an attack on the same variable: the time and uncertainty between paying and being paid. PvP eliminates the sequence gap; real-time settlement with finality eliminates the time gap.

How do modern rails — including stablecoin settlement — remove the exposure?

If settlement risk is a function of the exposure window, then the most direct mitigation is to make the window shorter and the outcome more certain. That is what real-time settlement systems do domestically, and what regulated stablecoin settlement extends across borders. A stablecoin transfer settles on its network in minutes with defined finality, at any hour, without a chain of intermediaries each adding credit exposure and delay. Atomic settlement techniques on shared ledgers can go further, making the two legs of an exchange succeed or fail together — PvP logic implemented in the rail itself rather than through a dedicated institution.

• Shorter exposure window: minutes of in-flight time instead of days across correspondent chains, and no weekends or time-zone gaps during which a counterparty can fail mid-settlement.
• Fewer intermediaries: settlement runs origin to destination without a sequence of correspondent banks, each of which is a credit and operational exposure.
• Defined finality: a documented point at which the transfer is irrevocable, supporting the legal certainty that risk and compliance teams require.
• Continuous visibility: both parties can observe settlement in real time, replacing the opacity of a payment somewhere in a correspondent chain.

None of this abolishes risk categorically — issuer soundness, network operations and off-ramp partners all still require diligence, and AML compliance obligations apply to fast payments exactly as to slow ones. But the specific exposure that has defined settlement risk since 1974 — paying and then waiting, exposed, to be paid — is engineered down to minutes.

It is worth noting that faster settlement changes risk management as well as reducing risk. When exposure windows were measured in days, institutions had time to detect a counterparty in distress and halt outgoing legs; when settlement completes in minutes, controls must move to the front of the process — counterparty limits, pre-settlement screening and automated holds — because there is no in-flight period in which to intervene. That is a shift in operating model, and it is one reason settlement platforms that embed compliance checks before release, rather than reviews after it, fit the real-time environment better than retrofitted batch processes.

Settlement risk and the case for regulated stablecoin rails

For compliance and risk officers, this is the frame in which stablecoin settlement deserves evaluation: not as a novel asset class, but as a settlement-risk mitigation with a fifty-year pedigree of demand behind it. StableNet applies that logic in production — real-time, final settlement across cross-border corridors, with KYC, KYB, KYT, sanctions screening and Travel Rule data carried alongside each payment, and SWIFT MT/MX (ISO 20022) connectivity so the risk improvement arrives without an operational rebuild. Herstatt risk was born in the gap between two banking days; rails that never close are a fitting way to retire it.