FX settlement risk: the problem CLS solved, and the flows it did not

FX settlement risk is the risk of paying away the currency you sold and never receiving the currency you bought. Every foreign exchange trade has two legs, one in each currency, and unless something binds them together, each leg settles on its own rail, in its own country, on its own clock. In the gap between them, one party is exposed for the full principal of the trade. Markets have a name for that gap: Herstatt risk, after Bankhaus Herstatt, the German bank closed by regulators on 26 June 1974 after counterparties had already paid it around $200 million in Deutsche Marks and were still waiting for the dollar side when the doors shut.

That episode is why FX settlement risk occupies a special place in the worry list of central banks. It is a credit exposure to the full face value of the trade, it materializes suddenly, and it travels: the banks left unpaid by one failure become weaker counterparties in the next settlement cycle.

The fix: payment versus payment

The structural answer is payment versus payment: link the two legs so that one currency transfers only if the other does. No timing gap, no principal exposure. The institution built for this is CLS, a specialist settlement system owned by the industry, which settles both legs of member trades simultaneously across accounts it holds at the relevant central banks. In the first half of 2025, CLS settled an average daily value of $7.9 trillion in payment instructions across 18 currencies, for more than 70 settlement members and tens of thousands of indirect participants.

Within its perimeter, CLS works. The two legs of a covered trade succeed or fail together, which is the same property that atomic settlement generalizes: an all-or-nothing exchange enforced by the settlement system itself rather than by trust between counterparties.

The flows it did not solve

The perimeter is the problem. CLS covers 18 currencies, all from advanced or large emerging economies. Trades involving most emerging-market currencies cannot settle there at all, and even trades in eligible pairs settle outside when a counterparty is not a member, finds membership uneconomic, or needs same-day settlement that the CLS cycle does not accommodate.

The BIS has been measuring the leftover risk for years, and the numbers are not small. Its December 2022 analysis estimated that $2.2 trillion of daily deliverable FX turnover was subject to settlement risk in April 2022, up from $1.9 trillion three years earlier, with roughly a third of deliverable turnover settling without PvP protection. Its follow-up analysis of the 2025 Triennial Survey, published in June 2026 with improved measures, found that of more than $14 trillion in gross FX obligations settled daily in April 2025, just over one third settled through PvP systems. More than $1.4 trillion settled on a gross bilateral basis with no mitigation at all, and the share of PvP settlement even among CLS-eligible currency pairs was only about 40%.

Two facts stand out from that work. First, the exposed amount grows with the market: the share of unprotected turnover has stayed roughly stable for a decade while FX volumes climbed, so the dollar exposure keeps setting records. Second, the exposure concentrates exactly where the correspondent system is weakest, in emerging-market currencies whose trades settle over chains of nostro accounts with time-zone gaps measured in hours or days.

What programmable settlement changes

The BIS CPMI’s own work on increasing PvP adoption reaches a plain conclusion: the barrier is infrastructure. Existing PvP arrangements are unavailable for many currencies and unsuitable or expensive for many trade types, so a large tail of the market settles the old way.

Programmable settlement attacks that barrier from a different angle. On a shared ledger, the all-or-nothing property does not require a specialist intermediary built currency by currency; it is a native capability of the settlement layer, available to any pair of assets the platform can hold, including tokenized deposits and regulated stablecoins alongside fiat balances. Atomicity becomes a property you configure per transaction, with settlement finality at the same instant for both legs.

Where Frame fits

Frame is the settlement layer for global finance: one integration to orchestrate payments at scale across fiat rails, stablecoins, and tokenized deposits, with compliance enforced on every transaction and settlement in seconds instead of days.

Settlement risk is a routing problem before it is anything else: which rail, which counterparty, which protections apply to this transaction. Frame is rail-neutral, so a payment enters through one integration and settles over whichever rail fits the corridor and the policy that governs it, including rails where both legs settle as one atomic event. Frame’s Rules Engine evaluates every transaction against its governing policies before it settles, and every settled transaction produces verifiable evidence that its conditions were met. For the flows that today sit in the unprotected tail of the FX market, that turns settlement protection from a membership question into a policy question.

See how a rail-neutral settlement layer works: the Frame Blueprint.