Risk Management in Banking and Insurance · Introduction to Risk Management

Concept and Types of Risk in Banking Explained

Updated 10 October 2026 · Fact-checked

Risk in banking is the possibility that actual outcomes differ from expected ones and cause a loss to the bank. Risk can be measured with probabilities; uncertainty cannot. To solve questions, identify the source of loss in the case, then name the matching risk: credit, market, liquidity, operational or business.

Understand Concept and Types of Risk in Banking

A bank earns by taking risk. It lends money, holds securities, accepts deposits and runs payment systems. Each activity can go wrong. So you must first understand what risk means and then sort banking risks by where the loss comes from.

Risk is the chance that the actual result differs from the expected result, usually to the bank's disadvantage. The possible outcomes are known and a probability can be attached to them. Example: a bank knows from past data that about 2 in every 100 similar loans default.

Uncertainty is a situation where the possible outcomes, or their probabilities, are not known. You cannot compute a probability from past data. Example: the effect of an entirely new regulation or a new technology on a bank's business. In short, risk can be measured and managed with numbers; uncertainty needs judgement and scenario thinking.

Banking risks are classified by source:

Credit risk: a borrower or counterparty fails to pay interest or principal as agreed.
Market risk: losses from movements in market prices such as interest rates, exchange rates, equity prices and commodity prices.
Liquidity risk: the bank cannot meet its payment obligations when due without unacceptable cost, or cannot fund its assets.
Operational risk: loss from failed internal processes, people, systems or external events, including fraud and cyber attacks.
Business risk: loss of earnings from poor strategy, falling demand, competition or changes in the economic environment.

The classes overlap. One event can trigger several risks. A rumour about a bank may cause a deposit run (liquidity risk), forcing it to sell securities at a loss (market risk). The exam asks you to pick the primary risk from the facts given.

Key rules to remember

Risk vs uncertainty: Risk = outcomes known + probabilities measurable; Uncertainty = outcomes or probabilities not measurable; Use this one-line test whenever a question asks you to distinguish the two.
Credit risk: Credit risk = loss from borrower or counterparty default or downgrade; Trigger words: default, non-payment, NPA, rating downgrade, counterparty.
Market risk: Market risk = loss from changes in interest rates, exchange rates, equity and commodity prices; Trigger words: price fall, mark-to-market loss, rate rise, currency move.
Liquidity risk: Liquidity risk = inability to meet obligations as they fall due at reasonable cost; Two forms: funding liquidity and market liquidity.
Operational risk: Operational risk = loss from inadequate or failed processes, people, systems or external events; Trigger words: fraud, system failure, human error, cyber attack.
Business risk: Business risk = loss of earnings from strategy, competition, demand or environment; Trigger words: market share loss, falling margins, wrong strategy.

How to solve Concept and Types of Risk in Banking questions

Use this method for any question that asks you to define, distinguish or identify banking risks.

1Read the question and mark the key event: who lost money, and why.
2Ask whether the outcome could have been measured with probabilities. If yes, it is risk; if not, uncertainty.
3Find the source of loss: a party failing to pay, a price moving, cash running short, an internal failure, or falling demand.
4Match the source to the risk class using the trigger words.
5Define the risk in one line, then link it to the facts of the case.
6If more than one risk is present, name the primary one first and mention the secondary ones briefly.
7Close with the likely effect on the bank (loss, lower earnings, capital pressure) and one control measure.

Quickest way: Trigger-word matching

When to use it: Use in the 2-mark MCQs and in case scenario questions where time is short.

Underline the cause of loss in the question.
Default or non-payment: credit risk.
Price, rate or currency movement: market risk.
Cannot pay or fund on time: liquidity risk.
Fraud, error, system or people failure: operational risk.
Strategy, demand or competition: business risk.
If two fit, choose the one that started the chain of events.

Common mistakes in Concept and Types of Risk in Banking

Treating risk and uncertainty as the same thing.
In daily language both mean 'something may go wrong'.
Fix: State the test: risk has measurable probabilities, uncertainty does not. Add one example for each.
Calling a loss from a fall in bond prices credit risk.
Students link any loss on a loan or bond to default.
Fix: If the issuer still pays but the price falls because rates rose, it is market risk. Credit risk needs default or downgrade.
Confusing liquidity risk with insolvency.
Both involve a bank unable to pay.
Fix: Liquidity risk is a cash timing problem; the bank may still own more than it owes. Insolvency means liabilities exceed assets.
Putting fraud or system failure under credit risk.
Fraud often ends in an unpaid loan, so students focus on the unpaid amount.
Fix: Look at the cause. Internal fraud or process failure is operational risk, even if the result is a bad loan.
Ignoring business risk or mixing it with operational risk.
It is the least discussed class.
Fix: Business risk comes from strategy and the environment, such as losing customers to rivals. Operational risk comes from internal failure.
Giving only definitions with no example.
Students memorise text and skip application.
Fix: Add a one-line banking example in rupees for each risk you name.

Worked examples

Example 1

A bank holds government securities. After a rise in market interest rates, the market value of these securities falls by ₹4,00,000. The issuer continues to pay interest on time. Identify the risk and explain why it is not credit risk.

Show the solution

The loss is a fall in market value caused by a change in interest rates.
A price movement driven by a market variable is market risk (specifically interest rate risk).
The issuer is paying on time, so there is no default or downgrade.
Credit risk needs a counterparty failing to pay or a fall in its creditworthiness, which has not happened here.

Answer: The ₹4,00,000 loss is market risk (interest rate risk). It is not credit risk because the issuer has not defaulted.

Example 2

A bank's employee, using weak password controls, diverts ₹10,00,000 from customer accounts. Separately, a large borrower stops repaying a ₹50,00,000 loan. Classify both events and distinguish risk from uncertainty using the second event.

Show the solution

The diversion arises from a people failure and weak internal controls, so it is operational risk.
The borrower's non-payment is a counterparty failing to pay, so it is credit risk.
The bank can estimate the chance of default for such borrowers from past data and ratings, so the outcome is measurable. This is risk.
An unforeseen change in law that makes the whole loan segment unviable cannot be given a reliable probability. That would be uncertainty.

Answer: The ₹10,00,000 diversion is operational risk; the ₹50,00,000 default is credit risk. Default can be assigned a probability, so it is risk, whereas an unforeseeable regulatory shock is uncertainty.

Exam tips

In MCQs, find the cause of loss first and ignore the amount; the amount rarely decides the risk class.
In case scenarios, one event may fit several risks. Pick the one that started the chain.
When asked to distinguish risk and uncertainty, write at least three points: measurability, probability, and manageability, with an example.
For descriptive answers, give a definition, a banking example and a control measure for each risk.
Keep one-line definitions ready for all five risks; they score quickly.

Practice questions from Introduction to Risk Management

Concept and Types of Risk in Banking: frequently asked questions

What are the main types of risk in banking?

The main types are credit, market, liquidity, operational and business risk. Credit risk comes from default, market risk from price movements, liquidity risk from cash shortage, operational risk from internal failures and business risk from strategy and demand.

What is the difference between risk and uncertainty?

Risk has known outcomes with probabilities that can be measured, so it can be priced and managed. Uncertainty has outcomes or probabilities that cannot be measured, so you rely on judgement and scenarios.

Is fraud credit risk or operational risk?

Fraud is operational risk because it arises from people, process or system failure. If it leads to an unpaid loan, the cause is still operational, though credit losses may follow.

Can one event involve more than one risk?

Yes. A deposit run can cause liquidity risk, forced sales at a loss add market risk, and reputation damage affects business. In exams, name the primary risk and then mention the others briefly.