Treasury risk management protects cash by identifying exposures that could deplete it or make funds unavailable. It measures each exposure and sets limits and controls before problems arise. Exposures range from a bank failure to a fraudulent email that redirects a vendor payment. Attempted or actual payment fraud is a common exposure, affecting 76% of organisations in 2025.

Below, we'll discuss how risk management works with treasury and broader financial operations, treasury risk categories and how to evaluate each, and a checklist you can run each quarter.

Key takeaways

• Treasury risk management is the process of identifying, assessing, and reducing potential risks, or exposures, to a business's cash through controls such as bank concentration caps and payment approval thresholds.

• Treasury risk falls into five categories, including liquidity, counterparty, interest rate, foreign exchange, and operations risk. Each requires its own controls, although a single event can trigger several types of risk simultaneously.

• A quarterly treasury risk assessment checklist tied to a business's cash forecast can catch gaps in hedging, bank exposure, and payment approvals before they turn into losses.

What role does treasury risk management play in financial operations?

Treasury risk management identifies, assesses, and decreases financial risks that could reduce a business's cash or block access to it. Threats can be external, such as a bank failure or rate spike, or internal, such as an electronic transfer sent to a fraudulent vendor account.

Treasury risk management works alongside cash management, which decides where cash is held, what payments are due, and where surplus funds are deployed. Risk management identifies what could go wrong with each of those decisions and what it would cost. Many teams assess and manage these cash risks in a repeating cycle.

Here's what's involved:

• Identification: The team lists every exposure, including bank balances by institution, floating-rate debt, foreign currency revenue and costs, and everyone with authority to move money. Exposures that don't make the list won't be managed.

• Assessment: Each exposure, such as cash held at a single bank, added interest expense if rates rise 100 basis points, or the dollar impact of a 10% drop in the euro, is assigned a number. The treasury policy then sets a limit for each exposure, such as a cap on deposits at any one bank or a minimum cash buffer.

• Mitigation: When an exposure crosses its set limit, the team acts. For example, it moves cash to a second bank, buys an interest rate cap, enters a forward contract, or tightens a payment control.

• Monitoring: Treasury checks exposures against limits on a fixed schedule, often daily for cash balances and monthly for market risk. Breaches are routed to the chief financial officer (CFO) or a treasury committee.

Liquidity planning relies on the standard 13-week cash forecast. Risk management stress-tests it with adverse scenarios, such as a business's largest customer paying 45 days late or funds in a bank account becoming inaccessible for a week. The liquidity buffer is sized to cover the gap between the baseline and stressed cash scenarios.

What are the main categories of treasury risk?

Treasury risk falls into five categories that often overlap.

Here's how each one shows up:

• Liquidity risk: If you can't access cash when bills are due. For example, a profitable company misses payroll because much of its cash sits in a 90-day certificate of deposit that can only be broken at a penalty.

• Counterparty risk: If a bank, customer, or hedge partner fails to pay, such as a distributor that owes you 60 days of sales and files for bankruptcy.

• Interest-rate risk: The potential that rate moves raise borrowing costs or cut yields, such as a floating-rate loan that gets pricier as its benchmark climbs.

• Foreign-exchange risk: If currency moves shrink revenue or raise costs, such as a US company that bills in euros and collects fewer dollars when the euro weakens.

• Operations risk: Potential losses from failed processes, systems, or people, such as a clerk who sends a vendor payment to a fraudulent actor after a spoofed email.

How do liquidity and counterparty risk show up in practice?

Liquidity and counterparty risks can prevent a business from paying people. These risks often arise when cash is tied up in investments, customers pay late, or funds are concentrated in a single bank.

Treasury teams evaluate both liquidity and counterparty risk with the following measures:

• Cash runway: Teams count how many weeks of outflows accessible cash covers, then stress-test it against a revenue drop or a late-paying top customer.

• Bank concentration: Treasury caps the share of cash at each institution so one bank's problem doesn't become the business's.

• Counterparty health: Teams watch credit ratings, credit default swap spreads, and regulatory capital ratios for banks, and credit limits, receivables ageing, and working capital ratios for customers.

How do market, foreign exchange, and operations risk show up in practice?

Market risk arises when a company has rate-sensitive investments or debt with a floating rate, which means the interest rate changes periodically. Foreign exchange risk shows up with revenue and costs in more than one currency. Operations risk exists whenever you move money.

Here's how each appears in practice:

• Interest rate exposure: The US Federal Reserve raised interest rates from 0%–0.25% in early 2022 to 5.25%–5.50% by July 2023. This increased borrowing costs for loans linked to the Secured Overnight Financing Rate (SOFR) that weren't hedged against interest rate changes.

• Foreign exchange exposure: When the euro fell below parity with the dollar in 2022 for the first time in about 20 years, euro-denominated contracts lost dollar value with no change in the underlying business.

• Process failures and fraud: In 2025, 58% of organisations reported cheque fraud, and business email compromise (BEC) remained one of the most common forms of payments fraud.

Which controls and monitoring strategies reduce treasury risk?

Controls work best when they're tied to a specific exposure and enforced by systems rather than memory.

The most successful controls in treasury fall into six groups:

• Approval workflows: Payments above a set threshold need two sign-offs, and whoever creates a payment can't also approve it. Any change to vendor bank details prompts a callback to a number already on file, never the one in the request.

• Exposure limits: The policy caps how much cash any one bank can hold, usually as a percentage of total cash, and sets a minimum liquidity buffer. Limits only work if someone checks balances against them on a fixed schedule.

• Hedging: Forward contracts lock in an exchange rate for a future date, while interest rate swaps or caps convert or limit floating-rate exposure. Many companies hedge only part of their forecast exposure rather than all of it, which leaves room if the forecast is wrong.

• Banking diversification: Operating accounts spread across at least two banks can keep a single failure or outage from freezing payroll. Some companies fund a backup payroll account at a second institution with one full pay cycle.

• Monitoring and alerts: Automated rules flag payments to new beneficiaries, bank transfers outside business hours, and balances that drop below a floor. Positive pay services from banks compare presented cheques against the company's issued-cheque file and flag mismatches for the company to pay or return.

• Governance: A treasury committee, often including the CFO, controller, and treasurer, reviews limit breaches and approves hedging decisions. It also reviews the treasury policy at least once a year.

What should a treasury risk assessment checklist include?

Use this checklist to establish a regular treasury risk assessment policy.

Cover these six areas each time you complete an assessment:

• Counterparty credit: Review current credit ratings and recent news for every bank and hedge counterparty. Confirm that each institution's balance sits within policy limits.

• Liquidity buffers: Stress test available cash against at least two adverse scenarios, such as a 20% revenue decline and a 60-day delay from your largest customer. The buffer should cover payroll and debt service in both scenarios.

• Hedge coverage: Compare hedged amounts against the current forecast, not the one used when the hedges were placed. Over-hedging creates new exposure if the underlying revenue never arrives.

• Interest rate exposure: Recalculate interest expense on floating-rate debt under 100- and 200-basis-point increases. Confirm that any caps or swaps still match the remaining principal.

• Approval workflows: Create a list of everyone with payment initiation or approval rights and remove anyone who's changed jobs or left. Test to make sure dual approval and callback verification are enforced.

• Fraud controls: Review attempted and actual fraud incidents since the last check. Update alert rules to catch any new patterns.

How Stripe Treasury can help

Stripe Treasury brings payments and finances together on Stripe, so businesses can receive, store, send, and spend funds in one place. It's built for startups and growing businesses that want to move money faster and spend less time managing financial operations. Platforms, marketplaces, and fintechs can also offer financial services to their users with Treasury for platforms.

Treasury can help you:

• Simplify your financial operations: Manage money, payments, card spend, payouts, and more from the Stripe Dashboard.

• Move money faster: Access settled Stripe earnings right away and send instant transfers to other businesses on Stripe without cost.

• Get more from your money: Earn cashback on card spend and Stripe fee credits on qualifying balances.

• Operate globally with ease: Hold balances in multiple currencies, convert only when needed, and send payouts to recipients in 160+ countries.

• Automate financial operations: Use agents to analyse cash flow and automate tasks such as paying invoices, moving money, and converting currencies within limits you set.

Learn more about how Stripe Treasury can help you manage your finances and payments in one place, or get started today.

FAQs about treasury risk management