Regulation, Governance and Ethical Conduct

Introduction and context

Foreign-exchange management is not merely a technical exercise in converting currencies or hedging exposures. It operates within a legal, institutional and ethical environment designed to protect monetary stability, financial-system integrity, market fairness and national security. A multinational enterprise may be commercially entitled to purchase foreign currency, borrow offshore or enter a derivative contract, yet still be restricted by exchange controls, reporting rules, sanctions, tax law, anti-money-laundering requirements or prudential limits.

The central challenge is therefore dual: the firm must achieve legitimate commercial objectives while demonstrating that its transactions are authorized, transparent, economically justified and properly recorded. Weak governance can produce losses through unauthorized speculation, but it can also expose the organization and its officers to regulatory penalties, reputational damage, criminal liability and exclusion from banking relationships.

This chapter examines the principal regulatory and governance mechanisms affecting foreign-exchange activity and develops a practical control framework for international businesses.

Learning objectives

By the end of this chapter, students should be able to:

1. Explain the roles of central banks, financial regulators and foreign-exchange controls.
2. Distinguish the regulatory treatment of spot transactions, forwards, swaps, options and other derivatives.
3. Identify reporting, tax, sanctions, anti-money-laundering and know-your-customer obligations.
4. Design segregation of duties, authorization limits, escalation procedures and audit trails.
5. Evaluate speculation, manipulation, conflicts of interest and other ethical risks.
6. Apply a governance framework to a realistic multinational foreign-exchange case.

1. The institutional architecture of foreign-exchange regulation

Central banks and monetary authorities

A central bank normally has responsibility for monetary policy, currency issuance, official reserves and, in many jurisdictions, banking supervision or financial stability. Its foreign-exchange activities may include:

• managing official foreign-currency reserves;
• intervening in the foreign-exchange market;
• setting or administering exchange-rate arrangements;
• regulating reserve requirements or open foreign-currency positions of banks;
• acting as lender of last resort; and
• collecting balance-of-payments and cross-border transaction data.

Central-bank intervention does not eliminate market risk. It may influence liquidity, interest-rate expectations and exchange-rate volatility, but intervention can be costly and may be temporary. A company must not assume that a central bank will defend a particular rate indefinitely.

Financial regulators and market infrastructures

Securities, banking, insurance and commodities regulators supervise different parts of the market. Their rules may cover dealer conduct, derivatives clearing, capital adequacy, market abuse, client protection, disclosure and record retention. Exchanges, central counterparties, payment systems and trade repositories provide infrastructure through which transactions are confirmed, margined, settled and reported.

The relevant regulator depends on the legal identity of the parties, the location of the transaction, the currency, the trading venue and the product. A transaction booked in one country may be negotiated in another and settled through a third. This creates overlapping obligations and makes legal review essential.

Foreign-exchange controls

Foreign-exchange controls are governmental restrictions on access to, use of or transfer of foreign currency. They can include:

• licensing requirements for banks or dealers;
• limits on the amount of currency that residents may purchase;
• approval requirements for imports, dividends, royalties or external loans;
• restrictions on capital-account transfers;
• surrender requirements under which exporters must sell foreign currency to authorized institutions;
• multiple exchange rates; and
• documentation requirements for cross-border payments.

Controls may be introduced to protect reserves, prevent capital flight, manage balance-of-payments pressures or support macroeconomic policy. They can also create operational risks: delayed payments, parallel markets, non-convertibility, mismatches between accounting and settlement rates, and contractual disputes.

A prudent treasury function maintains a jurisdictional matrix identifying permitted currencies, authorized counterparties, required documents, approval thresholds, reporting deadlines and prohibited transactions. It should never treat a control as a purely administrative inconvenience; deliberately disguising the purpose or value of a payment may constitute evasion, fraud or money laundering.

2. Regulation of foreign-exchange instruments

Spot, forward and swap transactions

A spot transaction exchanges currencies for near-immediate settlement according to market convention. A forward fixes an exchange rate today for settlement on a future date. A foreign-exchange swap combines a purchase and a sale of currencies on different dates. These instruments are commonly used to manage identifiable commercial exposures.

A hedge is generally defensible when its purpose, notional amount, maturity and currency are connected to an underlying exposure. Documentation should identify the exposure, hedge objective, responsible approver and treatment of changes, cancellations and forecast revisions.

Options and structured products

An option gives the buyer a right, but not an obligation, to buy or sell currency at an agreed rate. The buyer pays a premium. Options can protect against adverse movements while retaining some benefit from favorable movements, but their valuation, liquidity and accounting treatment are more complex.

Structured products may combine options, forwards, leverage, barriers or conditional obligations. Their apparent low cost can conceal substantial contingent exposure. Non-specialist managers should not approve a product merely because it is labeled a hedge. They must understand the maximum loss, collateral requirements, termination value, scenarios and legal documentation.

Derivatives regulation

Regulatory regimes commonly address four risks:

1. Counterparty risk: the possibility that the other party will fail to perform.
2. Market risk: adverse movements in rates, volatility or interest rates.
3. Liquidity risk: inability to close or collateralize a position at a reasonable cost.
4. Legal and operational risk: uncertainty over enforceability, documentation, data or settlement.

Depending on the jurisdiction and transaction, rules may require standardized derivatives to be centrally cleared, reported to a trade repository, executed through an approved venue or supported by margin. Even where a corporate end user receives an exemption from some requirements, it may still need a legal entity identifier, documentation, confirmations, collateral controls and records.

Netting agreements can reduce settlement and counterparty exposure, but their effectiveness depends on enforceability in each relevant jurisdiction. Treasury should obtain legal opinions where material and should not assume that accounting netting is equivalent to legal close-out netting.

3. Reporting, taxation and financial records

Regulatory reporting

Reports may concern cross-border payments, external borrowing, foreign assets, derivatives, suspicious transactions, large cash movements and balance-of-payments statistics. The reporting entity may be a bank, corporate customer, broker or legal entity, and responsibility can differ by country.

A sound reporting process establishes a data owner, regulatory inventory, submission calendar, review evidence and correction procedure. Source data should reconcile to the general ledger, bank statements, confirmations and treasury-management systems. Late, incomplete or inconsistent reporting is often a control failure even when the underlying transaction was lawful.

Taxation

Foreign-exchange consequences may arise from:

• realized and unrealized currency gains or losses;
• withholding tax on interest, dividends, royalties or service payments;
• transfer pricing for intercompany financing and treasury services;
• thin-capitalization or interest-limitation rules;
• value-added or similar indirect taxes;
• permanent-establishment issues; and
• anti-avoidance rules affecting artificial arrangements.

Tax treatment varies by jurisdiction and by whether a transaction is capital, revenue, hedging or speculative in character. Treasury, tax and accounting functions should agree on the exposure classification before execution. A difference between accounting treatment and taxable treatment must be documented, not concealed through informal journal entries.

Record retention and audit trails

An audit trail should allow an independent reviewer to reconstruct who requested, approved, executed, confirmed, settled, recorded and reviewed a transaction. It should preserve the business purpose, quotation evidence, counterparty, rate, notional amount, maturity, authorization, confirmations, amendments, collateral, accounting entries and exception approvals.

Electronic records need access controls, time stamps, version history and reliable retention. Chat messages and personal devices should not become ungoverned trading channels. Where electronic communication is permitted, it must be captured and supervised consistently with law and organizational policy.

4. Sanctions, AML and KYC obligations

Sanctions compliance

Sanctions may target countries, governments, companies, vessels, banks, individuals, sectors or particular types of transactions. They can prohibit dealing, asset transfers, provision of financial services or facilitation by third parties. A payment may be prohibited even when the customer and invoice appear legitimate, because an intermediary bank, beneficial owner, vessel or end-use is sanctioned.

Screening should occur at onboarding, before payment, when counterparties change and when sanctions lists are updated. Potential matches require investigation and documented disposition. A false positive should not be dismissed casually; a true match should not be resolved by changing spelling, routing or payment description.

Anti-money laundering and counter-terrorist financing

Money laundering generally involves disguising the origin, ownership or movement of criminal proceeds. Foreign-exchange activity can be exploited through rapid currency conversions, trade misinvoicing, shell companies, unusual third-party payments, circular transfers and transactions inconsistent with a customer’s business.

An effective AML framework uses a risk-based approach:

• identify and verify customers and beneficial owners;
• understand the purpose and expected activity of the relationship;
• classify risk using geography, customer, product and transaction factors;
• monitor transactions for unusual patterns;
• investigate alerts independently and document conclusions;
• report suspicious activity where required; and
• retain records and protect whistleblowers and investigators.

Know-your-customer and beneficial ownership

KYC is not limited to collecting a passport or incorporation certificate. The institution should understand who ultimately owns or controls the entity, who has authority to instruct payments, the source of funds, the expected business model and the economic purpose of the transaction. Enhanced due diligence may be required for politically exposed persons, high-risk jurisdictions, complex ownership chains, cash-intensive businesses or unusual structures.

The principle of confidentiality does not permit staff to warn a customer that a suspicious-activity report has been filed where such disclosure is prohibited. Compliance investigations should be conducted on a need-to-know basis.

5. Governance design for corporate treasury

The three-lines model

A practical governance structure separates:

• First line: treasury and business units own risks and operate controls.
• Second line: risk, compliance and legal functions set policies, challenge decisions and monitor adherence.
• Third line: internal audit independently evaluates design and effectiveness.

The board or a delegated risk committee approves risk appetite, material policies and significant exceptions. Senior management translates these into limits, procedures, systems and accountability.

Segregation of duties

No single person should control the full transaction life cycle. At minimum, initiation, approval, execution, confirmation, settlement, accounting and reconciliation should be separated according to organizational scale and risk. In a small company, compensating controls may include dual approval, independent bank statements, restricted system access and frequent external review.

A typical control map is shown below:

Figure: Separation of duties across the foreign-exchange transaction life cycle.

Authorization limits and escalation

Limits should be expressed by currency, product, tenor, counterparty, aggregate exposure and purpose. For example, a dealer may execute a documented hedge within a delegated amount, while a new currency, structured option, unhedged position or limit breach requires treasury-committee approval.

Limits must be measurable and monitored independently. A limit that cannot be calculated from available data is not an effective limit. Breaches should trigger immediate notification, temporary restriction where appropriate, root-cause analysis and documented remediation. Backdating approvals or splitting a transaction to evade a threshold are serious governance violations.

Risk measurement

A firm may monitor net open positions, stress losses, value at risk, liquidity needs and counterparty exposure. Value at risk is an estimate of a loss threshold over a specified horizon and confidence level; it does not predict the maximum possible loss. Stress testing is therefore essential, especially for devaluations, market closure, widening spreads, collateral calls and inability to repatriate funds.

For a simple foreign-currency payable, the domestic-currency value can be represented as:

where V_D is the domestic-currency value, Q_F is the foreign-currency amount, and S_D/F is domestic currency per unit of foreign currency. This relationship assumes a single quoted rate and excludes fees, spreads, taxes and settlement adjustments. If the foreign currency appreciates, S_D/F rises and the domestic value of the payable increases.

6. Ethical conduct and market integrity

Hedging versus speculation

Hedging reduces an identifiable exposure; speculation intentionally takes a position to profit from an anticipated market movement. Speculation is not automatically unlawful, but it may be outside a corporate mandate, inconsistent with risk appetite or misleading when described as hedging. The distinction depends on purpose, documentation, exposure linkage and the resulting risk profile.

A treasury employee who conceals a directional position, delays recognition of losses or rolls a derivative without reassessing the exposure violates professional duties. Performance incentives should not reward gains while ignoring tail losses, liquidity costs or control quality.

Manipulation and insider information

Market manipulation can include creating false or misleading impressions of supply or demand, executing transactions to move benchmark rates, colluding with counterparties, spoofing orders or misusing confidential customer information. Foreign-exchange benchmarks are especially sensitive because many contracts and valuations depend on them.

Employees must not trade on material non-public information, misuse customer order information or coordinate activity intended to distort a reference rate. Suspicious conduct should be escalated through protected reporting channels.

Conflicts of interest

Conflicts can arise when a dealer receives compensation linked to volume, a bank both advises and trades with a client, an employee trades personally in related currencies, or a treasury manager selects a favored counterparty. Controls include conflict declarations, personal-account dealing rules, gifts and entertainment limits, competitive quotations, rotation of responsibilities and independent review.

A conflict does not always make a transaction impermissible, but it must be disclosed, assessed and managed. Commercial urgency is not a substitute for impartiality.

7. Illustrative case: Meridian Foods’ restricted-currency exposure

Background

Meridian Foods, a fictional multinational, imports raw materials into Country A and sells finished products in Country B. Country A introduces controls requiring import documentation and central-bank reporting before foreign currency can be purchased. Meridian’s local finance director asks the group treasury desk to route payments through an affiliated company in a neighboring country to avoid delays.

Problem

The proposed arrangement may conceal the true payer and purpose, breach exchange controls, create sanctions and AML concerns, and produce inaccurate tax and accounting records. At the same time, failure to pay suppliers could interrupt production.

Analysis

Group treasury identifies four risk categories: legal permissibility, payment continuity, financial exposure and personal accountability. It confirms that the transaction is not a routine intercompany settlement and that the affiliate has no genuine commercial role. Compliance also identifies a risk that the structure could be interpreted as evasion or facilitation of illicit transfer.

Approach and solution

The group rejects the disguised routing proposal. It obtains local legal advice, verifies supplier and beneficial-owner information, prepares complete import documentation and seeks the required approval through an authorized bank. Treasury negotiates a permitted payment schedule, evaluates a lawful forward or option only after confirming convertibility, and records the exposure and approvals. The board risk committee receives an exception report because the issue affects production and liquidity.

The company also improves its control framework: country-specific payment checklists, mandatory compliance sign-off for restricted currencies, automated screening, dual approval for third-party payments and quarterly testing of intercompany flows.

Outcome

Payment is delayed but completed through a lawful channel. Meridian avoids a potentially severe enforcement action and gains a clearer view of its liquidity risk. The case demonstrates that operational convenience cannot justify disguising transaction purpose.

Learning points

1. Exchange controls must be assessed before a commercial commitment is made.
2. KYC and sanctions screening apply to affiliates and intermediaries, not only direct suppliers.
3. A hedge is useful only if the underlying currency can legally be acquired and transferred.
4. Escalation and transparent delay are preferable to concealment.

8. Technology, data and contemporary developments

Treasury-management systems can automate confirmations, limit monitoring, sanctions screening, settlement instructions and reconciliations. Automation reduces routine error but does not transfer accountability to software. Poor reference data, incomplete beneficial-owner records or an incorrectly configured rule can produce systematic failures.

Artificial-intelligence tools may help identify unusual payment patterns or prioritize alerts. Their use requires explainability, validation, access control, data protection and human review. A model should not automatically reject a customer or suppress an alert without governance over false positives, false negatives, training data and changes in risk patterns.

Contemporary regulation increasingly emphasizes operational resilience, third-party technology risk, cyber security, data localization and real-time reporting. Firms should maintain tested recovery arrangements for market closures, cyber incidents, payment-system outages and loss of access to a critical bank or platform.

9. Implementation framework and limitations

An effective foreign-exchange compliance program should proceed through the following cycle:

1. Map jurisdictions, products, currencies, counterparties and legal obligations.
2. Define risk appetite and prohibited activities.
3. Assign accountable owners and segregate incompatible duties.
4. Configure limits, screening rules, approvals and system access.
5. Train employees using realistic scenarios.
6. Monitor transactions, exceptions, alerts and control performance.
7. Test controls independently and remediate root causes.
8. Report material issues to senior management and the board.

No framework eliminates risk. Regulations may conflict across jurisdictions, official guidance may change, and legal conclusions may depend on facts such as beneficial ownership, booking location and transaction purpose. Overly rigid controls can also obstruct legitimate trade, while overly permissive controls create abuse opportunities. Proportionality, documentation and continuous review are therefore essential.

Chapter Summary

Foreign-exchange management is embedded in a system of central-bank policy, exchange controls, financial regulation, tax law, sanctions and financial-crime prevention. Spot, forward, swap and option transactions should be assessed according to their purpose, exposure, legal documentation, counterparty and risk characteristics. Regulatory reporting must be accurate, timely and reconciled to reliable records.

KYC and AML programs require understanding the customer, beneficial owner, source of funds and expected activity. Sanctions screening must cover relevant parties and payment chains. Governance depends on segregation of duties, authorization limits, independent monitoring, audit trails and escalation. Ethical conduct requires a clear distinction between legitimate hedging and unauthorized speculation, as well as controls against manipulation, insider dealing and conflicts of interest. Technology can strengthen controls but requires human accountability, validation and resilience.

Key Terms

Central bank: Institution responsible for monetary policy, currency issuance and often official reserves.

Foreign-exchange control: Government restriction on access to or transfer of foreign currency.

Spot transaction: Currency exchange settled according to near-term market convention.

Forward contract: Agreement to exchange currencies at a specified future date and rate.

Foreign-exchange swap: Combined currency purchase and sale occurring on different dates.

Option: Contract giving a right, but not an obligation, to buy or sell currency.

Counterparty risk: Risk that the other party will fail to perform.

Market abuse: Manipulation, insider dealing or other conduct that undermines market integrity.

Regulatory reporting: Submission of required transaction, exposure or financial information to authorities.

Audit trail: Evidence that permits reconstruction and review of a transaction’s life cycle.

Sanctions: Legal restrictions directed at specified persons, countries, sectors or activities.

Money laundering: Concealment or transformation of proceeds of crime.

KYC: Processes used to identify and understand customers and their activities.

Beneficial owner: Natural person who ultimately owns or controls an entity.

Enhanced due diligence: Additional investigation applied to higher-risk relationships or transactions.

Segregation of duties: Separation of incompatible responsibilities among different people or functions.

Authorization limit: Maximum delegated amount, product, exposure or tenor a person may approve.

Conflict of interest: Situation in which personal or competing interests may impair impartial judgment.

Stress testing: Analysis of performance under severe but plausible conditions.

Operational resilience: Ability to continue or recover critical operations during disruption.

Review Questions

Short Answer Questions

1. What are two purposes of foreign-exchange controls?
2. Why is a forward contract not automatically a hedge?
3. What information does beneficial-owner identification seek to establish?
4. Why should transaction initiation and settlement be separated?
5. State one limitation of value-at-risk analysis.

Long Answer Questions

1. Explain the respective roles of central banks, financial regulators and market infrastructures in foreign-exchange markets.
2. Discuss how sanctions, AML and KYC requirements affect a cross-border currency payment.
3. Design a governance framework for a multinational corporation’s treasury function.
4. Compare the regulatory and risk characteristics of forwards, swaps and options.
5. Explain why audit trails and reconciliations are essential to foreign-exchange governance.

Analytical / Application Questions

1. A subsidiary proposes routing a restricted-currency payment through an unrelated affiliate to avoid approval requirements. Analyze the legal, ethical and control issues and recommend a response.
2. A dealer reports profits from currency positions described as hedges, but several positions exceed the company’s underlying exposures. Identify the warning signs and design an investigation.
3. A firm’s sanctions-screening system generates many alerts, causing staff to override them rapidly. Evaluate the risks and propose improvements to technology, staffing, escalation and monitoring.

Multiple Choice Questions with Answers

Question 1

Which activity most directly represents a central-bank responsibility?

A. Issuing employee travel policies

B. Managing official foreign-currency reserves

C. Approving every corporate invoice

D. Setting a supplier’s commercial price

Correct Answer: B. Managing official foreign-currency reserves

Question 2

What is the defining feature of a foreign-exchange option for its buyer?

A. An obligation to exchange currency at maturity

B. A right but not an obligation to exchange currency

C. A requirement to settle through a central bank

D. A guarantee that the currency will appreciate

Correct Answer: B. A right but not an obligation to exchange currency

Question 3

Which control best demonstrates segregation of duties?

A. One dealer requests, executes and settles a transaction

B. The chief executive personally enters all trades

C. Different employees approve, execute and reconcile a transaction

D. A supplier confirms its own payment details

Correct Answer: C. Different employees approve, execute and reconcile a transaction

Question 4

In the relationship V_D = Q_F × S_D/F, what does S_D/F represent?

A. Foreign currency per unit of domestic currency

B. Domestic currency per unit of foreign currency

C. The number of trading days

D. The derivative premium

Correct Answer: B. Domestic currency per unit of foreign currency

Question 5

Which is a beneficial-owner requirement?

A. Identifying only the company’s trade name

B. Determining the natural person who ultimately owns or controls the entity

C. Accepting payment instructions without verification

D. Ignoring ownership when the invoice is small

Correct Answer: B. Determining the natural person who ultimately owns or controls the entity

Question 6

Why is stress testing needed in addition to value at risk?

A. Value at risk always measures the maximum possible loss

B. Stress testing examines severe scenarios that routine statistical measures may not capture

C. Stress testing removes all counterparty risk

D. Value at risk applies only to accounting entries

Correct Answer: B. Stress testing examines severe scenarios that routine statistical measures may not capture

Question 7

Which conduct is most clearly inconsistent with market integrity?

A. Documenting a commercial hedge

B. Obtaining competitive quotations

C. Trading to create a false impression of supply or demand

D. Reconciling confirmations to bank statements

Correct Answer: C. Trading to create a false impression of supply or demand

Question 8

What should a firm do when a potential sanctions match is identified?

A. Change the spelling of the counterparty name

B. Process the payment immediately if it is commercially urgent

C. Investigate and document the disposition before proceeding

D. Delete the screening record

Correct Answer: C. Investigate and document the disposition before proceeding

Question 9

Which statement best distinguishes hedging from speculation?

A. Hedging is linked to an identifiable exposure, while speculation intentionally takes directional risk

B. Hedging never produces losses

C. Speculation is always illegal

D. Hedging requires no documentation

Correct Answer: A. Hedging is linked to an identifiable exposure, while speculation intentionally takes directional risk

Question 10

Which is an appropriate audit-trail element?

A. An undocumented verbal instruction

B. The transaction’s purpose, approver, rate, amount and confirmation

C. A deleted system record

D. A personal estimate with no source

Correct Answer: B. The transaction’s purpose, approver, rate, amount and confirmation