Counterparty risk is the exposure you take on from the people and organizations you transact with. It rarely announces itself, and most organizations price it at zero until the day they learn otherwise. This guide explains the term, then sets out a method for verifying a counterparty before and after signature.
What is counterparty risk?
Counterparty risk is the risk that the other party to an agreement fails to do what it agreed to do. In banking and trading the term is narrower, covering credit risk on derivatives, where the amount owed moves with the market, and settlement risk, where one side delivers and the other does not. Banks manage that exposure with collateral, netting agreements and limits.
Outside a trading desk, counterparty risk is the risk that the party you contract with is not who or what it appears to be, or cannot or will not perform. A supplier can deliver on time and still be owned by someone you may not deal with. An agent can be exactly who the introduction said, while the company on its invoice is a different entity with a similar name.
The same applies to online trading platforms, where the platform or the broker behind it is your counterparty. Check which legal entity holds the account and whether it holds the license it claims, using the regulator's own register, since regulators regularly warn about clone firms that copy an authorized firm's details.
Counterparty risk is not managed by a single decision at onboarding. It changes as the counterparty changes, which means the only useful version of this work is the one that runs on a schedule.
Counterparty risk versus credit risk
Credit risk is the risk that a borrower or customer does not pay what it owes, and it is assessed with credit reports, ratings and accounts. Counterparty risk includes credit risk and goes further. It asks whether the counterparty exists in the form presented, who owns and controls it, how its principals have behaved elsewhere, and what association with it says about you.
A credit check shows whether a company can pay but is silent on whether a sanctioned person stands behind it. Who you do business with is also read as a statement about your judgment, and that association tends to outlast the relationship that created it.
How to verify a counterparty
Counterparty due diligence, sometimes called a counterparty risk assessment, establishes on evidence that a counterparty is what it says it is and can do what it has promised. The checks below run from those every relationship needs to those only a larger contract can justify.
Identity and beneficial ownership
Counterparty verification starts with the exact legal entity, meaning its registered name, number, jurisdiction and directors, taken from the official register rather than from the counterparty's own papers. Then establish who owns and controls it. A register such as the UK's register of people with significant control shows what the company and its controllers have declared. Companies House has required identity verification for new directors and people with significant control since 18 November 2025, but that confirms who the person is, not that the declaration of control is complete. Where ownership runs through several jurisdictions, trace each layer to the next.
The principals' records
The people who will run the relationship matter as much as the entity. The usual finding is overstatement rather than fabrication, such as a role or stake that was smaller than the biography suggests. Insolvencies, disqualifications and regulatory action abroad are the findings most often missed, because each jurisdiction keeps its own records.
Sanctions and politically exposed persons
Screen the entity, its owners and its principals, since an entity can be restricted without appearing on any list. Under the 50 percent rule of the US Treasury's Office of Foreign Assets Control, an entity owned 50 percent or more in aggregate by blocked persons is itself blocked. The Financial Action Task Force cautions that commercial screening databases are not necessarily comprehensive or reliable, so coverage of regional figures, family members and business proxies should not be assumed. Where the relationship matters commercially, establish politically exposed person status by hand.
Litigation
Court records show how a counterparty behaves when a relationship goes wrong, which is the situation a contract exists to govern. Search every jurisdiction where it operates, and include civil and regulatory matters, since conduct usually surfaces there first.
Financial standing
Accounts and credit reports answer the credit question, although a private company's filed accounts may be thin or late. A customer that consistently pays late, or a supplier that keeps missing delivery dates, is usually signaling difficulty before any filing does.
Reputation
References chosen by the counterparty are a starting point, and better accounts come from customers, suppliers and former employees it did not choose. A gap between what insiders and outsiders say is often the most informative finding in the file.
How the introduction was made
Record who introduced the counterparty and what that person stands to gain. A credible introducer says something about the introducer and nothing in itself about the counterparty, so run the verification independently. An unexplained premium on fees, or a request to pay a party other than the one in the contract, is a reason to look harder.
Scaling the checks to the contract
Not every contract needs every check, and a sensible standard is to cover whatever could change the decision and stop there, since beyond that point diligence becomes expensive reassurance. The work tends to fall into tiers:
- Routine and replaceable relationships. Confirm identity from the official register, screen the entity and its directors for sanctions, and check that the bank account is in the entity's own name.
- Material or long-term contracts. Add beneficial ownership, the principals' records, litigation, financial standing and independent references.
- High-value or unusually introduced counterparties. Add inquiry in each jurisdiction in the ownership chain, politically exposed person status established by hand, and interviews with people who have dealt with the counterparty.
Move a counterparty up a tier when the contract is large relative to your business, when its record sits mainly abroad, or when you are paying in advance.
A short checklist for the file:
- The contracting entity matches the registry record by name, number and jurisdiction.
- Beneficial owners are named individuals, and the declaration has been tested.
- Entity, owners and principals have been screened for sanctions and politically exposed person status.
- At least one reference comes from a party the counterparty did not nominate.
- The route of the introduction, and any fee attached to it, is on record.
- The payment account is in the counterparty's own name and jurisdiction.
Verification is repeated at renewal and whenever ownership, management or the counterparty’s own key relationships change.
How to manage counterparty risk in contract management
Most of what can be done about counterparty risk has to be done before signature, while findings can still change the price, the structure or the decision. Payment deadlines, remedies for default and a dispute mechanism are best agreed at that stage, while both sides are still cooperative.
What to verify before signing
Confirm that the entity named in the contract is the one that was diligenced, since a contract with a similarly named vehicle is one of the simplest ways to bypass the earlier work. Confirm too that the signatory can bind that entity, and that the payment account belongs to it.
Warranties and audit rights
Warranties turn a counterparty's statements into obligations. Useful ones cover ownership, sanctions status, anti-bribery compliance and pending litigation, with a duty to notify you of any change. Audit rights give access to the records behind invoices, and a termination right for breach gives those clauses force. Our pre-investment due-diligence guide explains how to scope the investigative work that informs the investment decision.
Renewal triggers
A contract should name the events that reopen the review, so that renewal is not the only occasion for one. Typical triggers include a change of control or beneficial owner, a sanctions designation, new litigation, and a request to change bank details or pay a third party.
Monitoring
Counterparty risk changes as the counterparty changes, so a decision at onboarding never settles it. Monitoring works best on a fixed schedule rather than in response to a prompt, because a schedule catches the deterioration nobody flagged. For most relationships that means periodic sanctions and adverse media screening, with a fuller review at renewal.
Lessons from cases Falcone has reviewed
Two cases reviewed in Falcone's Book of the Month series bear directly on the method above, and the Panama Papers add a third point about ownership.
1MDB and the lookalike name
Between 2012 and 2013, the Malaysian state fund 1Malaysia Development Berhad raised roughly US$6.5 billion through three bond offerings, and US prosecutors later alleged that more than US$4.5 billion was misappropriated. Falcone's review of Billion Dollar Whale by Tom Wright and Bradley Hope traces funds through British Virgin Islands entities named to resemble genuine Abu Dhabi sovereign subsidiaries. A payee name that matched expectations at a glance was repeatedly accepted as enough.
The files were complete, and nobody checked independently that the named entity was the one everyone assumed, because each gatekeeper took comfort from another's approval. Goldman Sachs, which arranged the bonds, admitted in the statement of facts accompanying its October 2020 deferred prosecution agreement with the US Department of Justice that red flags raised during due diligence were ignored or only nominally addressed.
Completeness and accuracy are different tests, and most onboarding processes run only the first.
Abraaj and the borrowed credential
Abraaj's investors included sovereign wealth funds, pension plans and development finance institutions such as the International Finance Corporation. Falcone's review of The Key Man by Simon Clark and Will Louch shows how money from public-mandate institutions with their own diligence teams read to later investors as verification already performed.
Abraaj collapsed in 2018, and in July 2019 the Dubai Financial Services Authority fined two of its entities a combined US$315 million on findings that the fund manager had misled investors. The criminal charges brought against the founder in the United States are allegations, which he denies, and in March 2023 the High Court refused him permission to challenge his extradition to face them. The problem was surfaced by investors who asked what had become of capital drawn down but not deployed as described, and who paid for forensic accountants rather than accept an explanation.
A sophisticated co-investor, lender or customer tells you about its own appetite and nothing about its findings, so ask what each of them verified for itself.
The Panama Papers and the declared owner
The Panama Papers, 11.5 million records leaked from the Panama law firm Mossack Fonseca and published in April 2016, are the subject of Jake Bernstein's The Laundromat. The firm formed companies in large numbers through banks, law firms and other intermediaries rather than directly for their eventual owners. As with the ownership check above, a registered owner is only what someone chose to declare.
When to bring in an outside investigator
Most counterparty checks can be run in-house, and for routine relationships they should be. Outside help earns its cost when the answer depends on records or people that a database does not reach, typically because the counterparty's record sits mainly abroad or the introduction came through a route nobody has examined.
Our due diligence and deal intelligence work sits alongside an existing process rather than duplicating it, using business records, legal filings and in-person interviews. Before capital is committed, pre-investment due diligence examines a target and its principals, including obligations that never reached the accounts.
A political risk assessment establishes whether a local partner is a politically exposed person where screening databases cannot be relied on. Once money has moved, financial investigations determine what each transaction was for and who authorized it.
The objective is modest and worth stating plainly: to move counterparty risk from something you discover to something you track. Knowing which counterparties you can rely on also shows where you can extend terms or concentrate volume.
Frequently asked questions
What is counterparty risk?
Counterparty risk is the risk that the other party to an agreement fails to do what it agreed to do. In banking and trading it refers to credit and settlement risk on derivatives and similar contracts. In wider commercial use it also covers the risk that the party you contract with is not who or what it appears to be, or cannot or will not perform.
What is the difference between counterparty risk and credit risk?
Credit risk is the risk that a borrower or customer does not pay what it owes, and it is assessed with credit reports, ratings and accounts. Counterparty risk includes credit risk and goes further, asking whether the counterparty exists in the form presented, who owns and controls it, how its principals have behaved elsewhere, and what association with it says about you.
How do you verify a counterparty?
Confirm the exact legal entity from the official register, then identify its beneficial owners and test the declaration. Screen the entity, its owners and its principals for sanctions and politically exposed person status, search litigation wherever it operates, and check financial standing and independent references. Record how the introduction was made, and scale the depth of each check to the size of the contract.
Falcone International
Bring us a question like this one
We handle corporate investigations, due diligence, financial investigations and duty of care — usually for people who need something established quietly, and established properly, before it turns into a problem.