Concentration Risk and Large Exposure Limits in Banking

Banks face regulatory concentration risk limits that cap how much they can lend to or invest with a single counterparty—typically 10–25% of Tier 1 capital—to prevent a single failure from consuming the bank’s cushion and triggering wider contagion.

Why concentration matters for financial stability

A bank that lends 30% of its capital to a single large borrower faces an unequal risk. If that borrower defaults, the bank loses a material slice of its capital buffer. A smaller bank’s loss might exceed its entire equity cushion, forcing liquidation or a rescue merger. Systemic risk emerges when this pattern spreads: if Bank A is deeply exposed to Company X and Company X fails, Bank A is weakened; if Bank B is also exposed to Bank A, Bank B is now at risk; if Bank C relies on Bank B, the failure cascade widens.

Concentration risk limits attack this chain by forcing diversification at the source. No single counterparty can represent a large enough share of a bank’s Tier 1 capital to threaten the institution on its own. This reduces the probability of an idiosyncratic shock (one borrower’s troubles) metastasizing into systemic contagion (systemic risk).

The Tier 1 capital denominator

Regulatory exposure limits are expressed as a percentage of Tier 1 capital, the bank’s highest-quality capital. Tier 1 consists of common equity, retained earnings, and other tangible loss-absorbing instruments. It is the numerator of the capital adequacy ratio and the buffer against unexpected losses.

Consider a bank with $1 billion in Tier 1 capital. Under a 10% large-exposure limit (typical for the Basel III framework in many countries), the bank cannot expose itself to more than $100 million to any single counterparty. If the bank has $50 billion in total assets, most of which are diversified loans and securities, a $100 million exposure to one borrower is small relative to assets but substantial relative to loss-absorbing capital. The limit is set against capital, not assets, because capital is what absorbs losses.

This denominator is crucial: a bank growing its capital base can increase absolute exposures to large borrowers without breaching the percentage limit. A bank that shrinks capital (through dividend payouts or losses) must shrink or reduce exposures. Regulators tighten capital adequacy when they want to slow lending; concentration limits achieve a similar effect by capping individual counterparty risk.

Exposure definitions: what counts

A bank’s exposure to a single counterparty includes far more than a simple loan balance. It encompasses:

• Loans and advances on the balance sheet
• Securities held (bonds, equity stakes, derivatives collateral)
• Derivative contracts at fair value, plus add-on for potential future exposure
• Contingent liabilities (guarantees, letters of credit, commitments to lend)
• Off-balance-sheet items (underwriting commitments, facility lines)

A bank extending a $50 million term loan to a corporation is also running a derivative swap with the same counterparty (for interest-rate hedging) and has promised a $30 million revolving credit facility it hasn’t drawn yet. All three sum into a single exposure figure for prudential purposes.

For financial institutions as counterparties—banks, insurers, hedge funds—regulators sometimes apply tighter limits or allow slightly higher limits if the counterparty is also heavily regulated. A bank’s exposure to a major clearing house or central bank may face different treatment than exposure to a private company.

Aggregating related entities into one exposure

A single counterparty may consist of multiple legal entities under common ownership or control. If Bank A lends to Holding Company, Holding Company’s subsidiary, and a third entity in the same group, the exposures may be aggregated into one limit.

The definition of “related entity” or “group” varies by jurisdiction and regulator. The Federal Reserve consolidates exposures to:

• Parent and subsidiaries
• Entities under common control
• Borrowers with interconnected cash flows or guarantees

This prevents a borrower from evading the limit by splitting its borrowing across multiple subsidiaries. A real-estate developer with 10 project companies cannot borrow 10% to each and exhaust the bank’s capital without aggregation rules catching it.

Regional and international variations

The United States applies a 10% large-exposure limit under Dodd-Frank to systemically important institutions. The exact threshold depends on whether the exposure is to a single borrower or a borrower group.

The Basel III international framework (adopted by most major economies) also targets 10% for regulatory purposes, though some jurisdictions impose tighter limits (e.g., 15% in some European nations for certain counterparties, or 5% for very large exposures to other significant institutions).

The European Union enforces a 10% limit on exposures to a single counterparty and a 10% limit on exposures to a group of connected counterparties, with tighter limits for exposures to other banks. Japan, Canada, Australia, and other developed financial centers have comparable frameworks.

These limits are relatively harmonized at 10%, but exceptions, add-ons, and measuring methodologies differ slightly across jurisdictions. A multinational bank must track multiple limits across its operations.

Breaches and regulatory response

If a bank breaches a large-exposure limit (exposure exceeds the cap), it must report the breach to its regulator and submit a reduction plan. The bank cannot immediately shed the exposure (fire sales are disruptive), so regulators typically allow a wind-down period—often 90 days to several years, depending on the size and nature of the exposure.

During the wind-down, the bank may be required to:

• Hold additional capital to cover the excess exposure
• Suspend new exposures to the offending counterparty
• Post collateral or purchase credit protection to reduce the exposure
• Seek regulatory approval if the exposure is to a systemic counterparty that cannot be rapidly unwound

Persistent or large breaches can trigger enforcement actions, capital surcharges, or (in extreme cases) restrictions on dividends and share buybacks.

Measuring exposure: stress and collateral

Some jurisdictions allow banks to adjust exposures downward if collateral or credit enhancement is in place. A mortgage loan may carry a lower prudential exposure if the property value covers the loan principal (low loan-to-value ratio). A derivative contract may be netted against collateral posted or margin held.

However, counterparty risk remains even with collateral. In a severe downturn, collateral values drop, and netted exposures can expand rapidly. Regulators discount collateral for these scenarios, sometimes excluding it entirely from exposure calculations if the collateral is correlated with the counterparty’s credit risk (e.g., a bank holding its own equity as collateral).

Why concentration limits matter for systemic oversight

Concentration risk limits are a core tool for Financial Stability Oversight Council regulators and central banks to reduce systemic vulnerability. By capping any single counterparty’s weight in a bank’s portfolio, regulators reduce the probability that a single default triggers a cascade of institutional failures.

The 2008 financial crisis revealed gaps in these limits: some banks had undisclosed or poorly-measured exposures to failed counterparties (e.g., Lehman Brothers), and limits did not prevent correlated exposures (many banks were concentrated in mortgage-backed securities). Post-crisis reforms tightened definitions, improved monitoring, and added stress-testing to catch concentration in correlated assets.

See also