Regulation, Governance and Professional Ethics

Introduction and Context

Foreign exchange and money markets are essential financial infrastructures. They transmit monetary policy, support international trade and investment, provide liquidity, and enable institutions to manage interest-rate, currency and funding risk. Their efficiency, however, depends on confidence. A bank that misrepresents a price, a dealer that manipulates a benchmark, or a treasury that breaches sanctions controls can cause losses extending far beyond the immediate transaction.

Regulation therefore has two complementary purposes. First, prudential regulation protects the solvency, liquidity and resilience of financial institutions. Second, conduct regulation protects market integrity, clients and the public interest. Governance and professional ethics connect these purposes to daily decisions by boards, senior managers, traders, treasury officers, compliance personnel, auditors and risk committees.

This chapter examines the regulatory architecture relevant to foreign exchange (FX) and money markets, including prudential rules, market-conduct codes, benchmark governance, AML/KYC, sanctions, reporting, hedge accounting and ethical decision-making. Rules differ across jurisdictions; consequently, this chapter presents internationally used principles and frameworks rather than legal advice for a particular country. Institutions must always consult applicable local legislation, supervisory guidance, market codes and contractual obligations.

Learning Objectives

By the end of this chapter, the reader should be able to:

1. Distinguish prudential regulation from conduct regulation and explain their interaction.
2. Assess governance structures for FX and money-market treasury activities.
3. Apply principles of market conduct, benchmark integrity and conflict management.
4. Explain the purposes of AML/KYC, sanctions screening and regulatory reporting.
5. Describe the control logic of hedge accounting and identify common documentation failures.
6. Resolve ethical conflicts using a structured professional framework.
7. Recommend improvements to treasury oversight, controls, data quality and accountability.

1. The Regulatory Architecture of Financial Markets

1.1 Prudential regulation

Prudential regulation addresses the safety and soundness of financial institutions and the stability of the financial system. Core areas include:

• capital adequacy and risk-weighted assets;
• leverage limits;
• liquidity and stable-funding requirements;
• large-exposure and concentration limits;
• stress testing and recovery planning;
• governance, risk management and internal controls;
• resolution and depositor or client protection arrangements.

International standards developed through bodies such as the Basel Committee influence national banking rules. They do not automatically constitute domestic law; implementation is performed by national authorities.

A simplified capital ratio is:

Eligible regulatory capital is capital recognized under the applicable prudential framework, while risk-weighted assets reflect the credit, market and operational risks assigned to exposures. The ratio is meaningful only when both numerator and denominator follow the same regulatory definitions. A high ratio does not eliminate liquidity risk, conduct risk or model risk.

Liquidity regulation is particularly relevant to money markets. A bank may be solvent on a balance-sheet basis but unable to meet obligations when they fall due. Common regulatory concepts include the liquidity coverage ratio, which compares high-quality liquid assets with stressed net cash outflows over a specified horizon, and the net stable funding ratio, which compares available stable funding with required stable funding. Precise definitions, factors and minimum thresholds depend on jurisdiction and institution type.

1.2 Market-conduct regulation

Conduct regulation seeks fair, orderly and transparent markets. It addresses such behaviour as:

• manipulation or attempted manipulation;
• misleading statements and deceptive practices;
• misuse of confidential information;
• collusion and improper information sharing;
• unfair treatment of clients;
• inappropriate mark-ups or undisclosed fees;
• false or misleading transaction reporting.

The FX Global Code, published by the Global Foreign Exchange Committee and national regional committees, is a widely used set of global principles. It is generally a voluntary code rather than a statute, but many institutions publicly commit to it and use it as a benchmark for policies, controls and client expectations. It emphasizes ethics, governance, execution, information sharing, risk management and confirmation and settlement processes.

A code does not replace law. Where a statute, regulation, court order or supervisory requirement is stricter than a voluntary code, the binding requirement prevails.

1.3 Systemic and infrastructure regulation

FX and money-market transactions depend on payment systems, central counterparties, trade repositories, custodians, messaging networks and settlement banks. Regulation may therefore extend to:

• central clearing and margin requirements for eligible derivatives;
• settlement discipline;
• collateral management;
• payment-system oversight;
• operational resilience and cyber controls;
• recovery and resolution of critical financial market infrastructures.

Treasury governance must consider not only the risk of a counterparty default but also the risk that a payment, confirmation, collateral call or settlement instruction fails operationally.

2. Governance of Treasury and Markets Activities

Governance is the allocation of authority, accountability and challenge. It is not simply the existence of policies. An effective governance system connects strategic objectives with limits, independent oversight, reliable information and consequences for breaches.

2.1 The three-lines model

A practical model separates responsibilities as follows:

The model does not mean that only compliance owns conduct risk. Traders, treasury managers and executives remain responsible for their decisions. Nor does internal audit replace management controls.

2.2 Board and senior-management responsibilities

The board should approve risk appetite, oversee material conduct risks and ensure that incentives do not encourage misconduct. Senior management should translate risk appetite into delegated authorities, trading limits, counterparty limits, approved products, escalation procedures and staffing requirements.

A treasury committee commonly reviews:

• liquidity forecasts and funding concentrations;
• currency and interest-rate exposures;
• limit utilization and breaches;
• collateral and margin requirements;
• counterparty credit quality;
• stress-test results;
• valuation uncertainty and model risk;
• regulatory developments;
• conduct incidents and remediation.

Committees are effective only when papers are timely, data are reliable, dissent is recorded and decisions have named owners and deadlines.

2.3 Limit frameworks

Limits should be designed at several levels, including notional exposure, sensitivity, value-at-risk where appropriate, stress loss, tenor, counterparty, settlement and liquidity. A limit is not a target. A trader who routinely operates close to a limit may create fragility even without a formal breach.

Limit design should address:

1. Authority: who may approve, amend or override the limit?
2. Measurement: how is exposure calculated, and how often?
3. Aggregation: are legal entities, products and currencies consolidated appropriately?
4. Escalation: what happens after a warning, breach or data failure?
5. Independence: who verifies the calculation?
6. Remediation: how are repeated breaches investigated?

3. Market Conduct and Professional Ethics

3.1 Conduct principles in FX and money markets

Professional conduct requires market participants to act honestly, fairly and competently. Important principles include:

• communicate accurately and avoid creating a false impression;
• use client information only for legitimate purposes;
• distinguish principal trading from agency execution;
• disclose material conflicts and relevant costs;
• execute according to the agreed mandate and service model;
• maintain accurate records;
• avoid collusion, spoofing, front-running and benchmark manipulation;
• escalate suspicious or ambiguous behaviour.

In wholesale markets, the boundary between legitimate information sharing and improper coordination can be difficult. Dealers may discuss market conditions, but they must not coordinate prices, trading strategies or client orders in a way that distorts competition or harms clients.

3.2 Conflicts of interest

Conflicts may arise when an institution:

• trades as principal against a client;
• has access to confidential order information;
• allocates scarce liquidity among clients;
• determines a valuation or mark used in compensation;
• selects a benchmark or fixing time;
• manages an affiliate while owing duties to another client.

A sound conflict framework identifies, assesses, mitigates, discloses and monitors conflicts. Mitigation may include information barriers, segregation of duties, restricted lists, independent pricing, rotation of responsibilities and post-trade review. Disclosure alone is insufficient where the conflict makes fair treatment impossible.

3.3 Ethical decision-making framework

When a difficult situation arises, a professional can use the following sequence:

1. Clarify the facts: What happened, who is affected and what remains uncertain?
2. Identify obligations: Which laws, codes, contracts, policies and fiduciary duties apply?
3. Identify stakeholders: Consider clients, counterparties, shareholders, employees, regulators and the wider market.
4. Test alternatives: Which action is lawful, fair, transparent and proportionate?
5. Escalate: Consult compliance, legal, risk or senior management when necessary.
6. Document: Record the reasoning, evidence, approvals and follow-up.
7. Review outcomes: Check whether harm occurred and whether controls require improvement.

This approach prevents the common error of treating “profitable” as equivalent to “acceptable.”

4. Benchmark Governance

Benchmarks and reference rates influence the valuation, settlement, accounting and performance measurement of financial contracts. Examples include interbank reference rates, risk-free rates, FX fixings and money-market reference rates. Because even a small movement can affect large positions, benchmarks are vulnerable to conflicts and manipulation.

4.1 Benchmark lifecycle

Benchmark governance should cover:

1. Design: Define the economic concept the benchmark is intended to represent.
2. Input data: Establish eligibility, hierarchy, validation and fallback procedures.
3. Administration: Assign responsibility to an administrator with adequate resources.
4. Calculation: Control methodology, timestamps, rounding and access rights.
5. Publication: Manage corrections, delays, outages and public communications.
6. Use: Maintain an inventory of contracts, systems and reports relying on the benchmark.
7. Review: Test representativeness, conflicts, resilience and methodology.

The International Organization of Securities Commissions’ principles for financial benchmarks emphasize governance, quality of the benchmark, quality of methodology and accountability.

4.2 Controls around FX fixings

A bank executing orders around a benchmark fixing should define the client mandate clearly. Controls may include time-stamped order records, segregation of customer orders from proprietary activity, surveillance for unusual trading patterns, independent review of execution quality and restrictions on communicating sensitive order information.

A benchmark user should maintain a fallback plan. If a benchmark is discontinued or materially changed, legal, treasury, valuation, accounting and client-service teams must assess the consequences. Contractual fallback language should be precise enough to determine an alternative rate and adjustment methodology.

5. AML, KYC and Sanctions Compliance

5.1 AML and KYC purposes

Anti-money-laundering (AML) controls seek to prevent the financial system from being used to conceal criminal proceeds or finance unlawful activity. Know-your-customer (KYC) processes establish who the customer is, who controls it, why it uses the institution and whether its activity is consistent with its profile.

Core elements include:

• customer identification and verification;
• beneficial-ownership identification;
• understanding purpose and expected activity;
• risk classification;
• enhanced due diligence for higher-risk customers;
• transaction monitoring;
• suspicious-activity escalation and reporting;
• record retention and staff training.

Customer risk is dynamic. A low-risk customer at onboarding may become higher risk because of ownership changes, new jurisdictions, unusual transaction patterns or adverse media.

5.2 Risk-based approach

A risk-based approach does not mean abandoning controls for low-risk clients. It means applying controls proportionate to assessed risk. Relevant factors include customer type, product, geography, delivery channel, transaction size, complexity and transparency of ownership.

Transaction monitoring should be calibrated rather than merely voluminous. Excessive false alerts can overwhelm investigators, while poorly designed thresholds can miss suspicious behaviour. Effective systems combine rules, scenario analysis, customer context and trained human review.

5.3 Sanctions compliance

Sanctions may restrict dealings with countries, entities, individuals, vessels, sectors, goods or services. Applicable regimes can be complex where an institution operates across multiple jurisdictions. Controls should address onboarding, payments, trade-related information, securities and derivatives, ownership and control, and post-transaction screening where required.

A screening alert is not automatically proof of a sanctions violation. It must be investigated using reliable identifiers and documented reasoning. Conversely, a false-positive rate must not be used as an excuse to suppress legitimate alerts. Payment release should be subject to clearly defined authority and escalation rules.

6. Regulatory Reporting, Records and Data Governance

Regulatory reporting supports supervisory monitoring, market transparency and systemic-risk analysis. Common reports may concern positions, derivatives, liquidity, capital, large exposures, transactions, suspicious activity, sanctions events and operational incidents.

The central principle is that reported data must be accurate, complete, timely, consistent and traceable to source records. A report can be technically submitted on time and still be defective if definitions are misunderstood or data are duplicated.

A robust reporting-control framework includes:

• a regulatory inventory and ownership map;
• documented data definitions and lineage;
• reconciliations between front-office, risk, finance and regulatory systems;
• controls over manual adjustments;
• approval and sign-off procedures;
• exception logs and correction protocols;
• retention of source evidence;
• independent testing.

Data lineage answers the question: “From which transaction, field and transformation did this reported number originate?” This is increasingly important as institutions use cloud systems, vendor data, automated workflows and artificial intelligence.

7. Hedge Accounting and Control Implications

Hedge accounting aligns the timing of gains and losses on a hedging instrument with the exposure being hedged. Without qualifying hedge accounting, economically related positions can produce significant accounting volatility because derivative fair-value changes may be recognized differently from changes in the hedged item.

Under applicable accounting standards, such as IFRS 9 or relevant US GAAP requirements, an entity generally needs:

• an eligible hedging instrument;
• an eligible hedged item;
• formal designation and documentation at inception;
• an identified risk being hedged;
• an economic relationship between hedge and exposure;
• an assessment of credit risk and hedge effectiveness;
• appropriate treatment of ineffectiveness.

The accounting treatment depends on the type of hedge. In broad terms, a fair-value hedge addresses changes in the fair value of an item or risk; a cash-flow hedge addresses variability in future cash flows; and a hedge of a net investment addresses foreign-currency exposure in a foreign operation. Exact requirements, presentation and effectiveness methods depend on the applicable standard.

7.1 Hedge ratio and effectiveness

A hedge ratio describes the relationship between the quantity of the hedged item and the hedging instrument. It should reflect the actual risk-management relationship rather than be selected merely to obtain a preferred accounting result.

A simplified economic hedge-effectiveness measure can be expressed as:

The numerator and denominator must refer to comparable periods, risk components and measurement bases. This ratio is not a universal accounting test and should not be applied without considering the relevant accounting standard. Market movements, basis risk, timing differences, credit risk and notional mismatches can create ineffectiveness.

7.2 Common failures

Frequent control failures include late designation, vague documentation, incorrect forecast-transaction assessment, use of a hedge instrument inconsistent with the stated risk, failure to update discontinued forecasts and inadequate separation between treasury and financial reporting responsibilities.

Treasury, accounting, risk and internal audit should share a controlled hedge register containing the instrument, exposure, risk component, hedge ratio, designation date, valuation source, effectiveness method, maturity and termination conditions.

8. A Structured Treasury Oversight Framework

An integrated framework can be organized around six questions:

Useful indicators include limit breaches, aged exceptions, manual journal entries, unmatched confirmations, settlement failures, suspicious-activity alerts, sanctions false negatives, benchmark-related incidents, valuation adjustments and overdue audit actions. Metrics should be interpreted in context. A falling number of alerts may indicate better behaviour—or a failing detection system.

Technology can improve surveillance and reconciliation, but automation creates model, data, explainability and accountability risks. AI-generated recommendations should not be treated as decisions without human review, documented model governance, access controls, testing for bias and procedures for unusual cases. The institution remains accountable for outsourced or automated activity.

9. Illustrative Case: The Unusual Fixing Order

Background

A dealer at Meridian Bank receives a large client order to purchase a currency at a specified benchmark fixing. The order is legitimate and recorded. Shortly before the fixing, the dealer notices that the bank’s proprietary desk holds a position that would benefit if the benchmark moved upward.

Problem

The dealer could execute only the client order, could trade for the proprietary position, or could share information with another dealer to influence market conditions. The last option would create a serious conduct and potentially legal violation. Trading the proprietary position before executing the client order may also create a conflict and raise front-running concerns.

Analysis

The dealer should identify the capacity in which each order is handled, the client mandate, applicable benchmark procedures, information barriers, personal dealing restrictions and the bank’s principal-trading policy. The client’s confidential order information cannot be used to benefit the bank or another client unless permitted by law, contract and policy. The fact that the proprietary position is economically exposed does not justify preferential treatment.

Approach and solution

The dealer should:

1. preserve the time-stamped client instruction;
2. notify the supervisor or compliance function of the conflict;
3. follow the bank’s approved fixing-execution methodology;
4. prevent unauthorized sharing of order information;
5. obtain independent review if required;
6. record execution details, market conditions and any residual position;
7. report any suspected manipulation or policy breach through the designated channel.

If the mandate is ambiguous, the dealer should seek clarification rather than infer permission. If the conflict cannot be controlled, the order should be transferred to an appropriately segregated execution team.

Outcome

The client order is executed under the documented methodology. The proprietary position is handled separately, with restrictions applied to prevent misuse of confidential information. Compliance reviews the event and determines whether the fixing process, training or conflict controls require improvement.

Learning points

The case demonstrates that legality, profitability and ethical acceptability are distinct tests. It also illustrates why governance must operate before, during and after a transaction. A policy without surveillance, escalation and records would not provide effective protection.

10. Challenges and Limitations

Regulation cannot eliminate all risk. Important limitations include:

• rules may differ across jurisdictions and create overlapping obligations;
• voluntary codes may be applied inconsistently;
• complex products can exceed staff understanding;
• data fragmentation can weaken reporting and surveillance;
• excessive controls can delay legitimate business and create alert fatigue;
• outsourced technology can obscure responsibility;
• quantitative limits may not capture novel or concentrated risks;
• incentives can undermine formal policies;
• cross-border sanctions and privacy requirements may conflict.

A mature institution therefore combines rules with judgment, challenge and a culture in which employees can raise concerns without retaliation. Whistleblowing channels, protected escalation and credible disciplinary consequences are governance mechanisms, not merely human-resources practices.

11. Best-Practice Agenda for Investment-Banking Treasuries

A practical improvement programme should include:

1. Maintain a current regulatory and code-of-conduct inventory.
2. Map every material FX and money-market process from trade capture to settlement and reporting.
3. Assign clear ownership for risks, data fields, controls and regulatory submissions.
4. Reconcile front-office, risk, finance and settlement records regularly.
5. Test sanctions, AML and benchmark controls using realistic scenarios.
6. Review incentive structures for excessive risk-taking or conduct pressure.
7. Use independent pricing and valuation controls for illiquid or complex instruments.
8. Maintain documented hedge designations and a controlled hedge register.
9. Conduct stress tests involving liquidity shocks, currency gaps, collateral calls and operational outages.
10. Treat incidents as sources of organizational learning through root-cause analysis.
11. Govern AI and automated surveillance with validation, explainability and human accountability.
12. Report material issues candidly to senior management, the board and regulators where required.

Chapter Summary

Regulation in FX and money markets combines prudential safeguards, market-conduct rules, infrastructure oversight and reporting obligations. Prudential regulation protects capital, liquidity and institutional resilience, while conduct regulation protects clients and market integrity. Governance converts these requirements into authority structures, limits, independent challenge, surveillance and remediation.

Benchmark governance is necessary because reference rates affect contracts, valuations and performance. AML/KYC and sanctions controls protect the financial system from illicit use, but must be risk-based, dynamic and supported by reliable investigation. Regulatory reporting depends on data lineage, reconciliation and accountability. Hedge accounting requires timely designation, a genuine risk-management relationship and documentation consistent with the applicable accounting standard.

Professional ethics is tested most clearly when commercial incentives conflict with client interests, confidentiality or market integrity. A structured process—clarify facts, identify obligations, consider stakeholders, test alternatives, escalate, document and review—helps professionals make defensible decisions. Strong treasury oversight ultimately depends on culture as much as on technology and formal rules.

Key Terms

Prudential regulation: Rules designed to protect the safety, soundness and resilience of financial institutions.

Market conduct: Standards governing fair, honest and orderly behaviour in financial markets.

FX Global Code: International principles for good practice in the wholesale foreign-exchange market.

Risk appetite: The level and types of risk an institution is willing to accept in pursuit of its objectives.

Three-lines model: Allocation of risk ownership, oversight and independent assurance among business, control functions and internal audit.

Benchmark: A reference value used to price, value, settle or assess performance of financial instruments.

Benchmark administrator: Entity responsible for administering and publishing a benchmark.

Conflict of interest: A situation in which competing interests may impair impartial performance of a duty.

AML: Anti-money-laundering measures intended to prevent use of the financial system for criminal proceeds.

KYC: Processes for identifying customers, beneficial owners, purpose and expected activity.

Beneficial owner: The natural person who ultimately owns or controls a customer or entity.

Enhanced due diligence: Additional investigation and controls applied to higher-risk relationships.

Sanctions screening: Checking customers, transactions and relevant parties against applicable sanctions restrictions.

Regulatory reporting: Submission of required information to supervisory or public authorities.

Data lineage: The traceable path from an original data source through transformations to a reported output.

Hedge accounting: Accounting treatment that aligns recognition of hedging results with the exposure being hedged.

Hedge ineffectiveness: The portion of a hedge relationship that does not offset the hedged exposure.

Operational resilience: The ability to continue or recover critical services during disruption.

Whistleblowing: Reporting suspected wrongdoing through protected internal or external channels.

Review Questions

Short Answer Questions

1. What is the principal difference between prudential regulation and market-conduct regulation?
2. Why is benchmark governance important in FX and money markets?
3. Identify four core elements of a KYC programme.
4. What is data lineage, and why does it matter in regulatory reporting?
5. Why must hedge relationships be documented at inception?

Long Answer Questions

1. Explain how the three-lines model can be applied to an investment-banking treasury function.
2. Discuss the governance requirements for a benchmark used in FX fixing or money-market contracts.
3. Evaluate the strengths and limitations of a risk-based AML/KYC framework.
4. Explain how board oversight, limits, incentives and surveillance interact to manage conduct risk.
5. Compare the practical control requirements of treasury risk management and hedge accounting.

Analytical / Application Questions

1. A dealer receives a client fixing order while holding a proprietary position that benefits from a market move in the same direction. Apply the ethical decision-making framework and specify the controls that should be used.
2. A bank’s regulatory liquidity report is submitted on time, but reconciliation reveals duplicated trades and manually overridden fields. Analyse the governance failures and propose a remediation plan.
3. A multinational bank faces a sanctions alert involving a customer with a similar name to a listed entity. Design an investigation and escalation process that manages both false-positive and false-negative risks.

Multiple Choice Questions with Answers

Question 1

Which statement best distinguishes prudential regulation from conduct regulation?

A. Prudential regulation addresses institutional safety and resilience, while conduct regulation addresses fair and orderly market behaviour.

B. Prudential regulation applies only to customers, while conduct regulation applies only to regulators.

C. Prudential regulation concerns tax reporting, while conduct regulation concerns accounting entries.

D. Prudential regulation is voluntary, while conduct regulation never has legal force.

Correct Answer: A. Prudential regulation addresses institutional safety and resilience, while conduct regulation addresses fair and orderly market behaviour.

Question 2

Which function is primarily responsible for independent assurance under the three-lines model?

A. The trading desk

B. The treasury committee

C. Internal audit

D. The client-service team

Correct Answer: C. Internal audit

Question 3

What is the principal purpose of beneficial-owner identification?

A. To determine the customer’s preferred currency

B. To identify the natural person who ultimately owns or controls the customer

C. To calculate the institution’s capital ratio

D. To set the benchmark fixing time

Correct Answer: B. To identify the natural person who ultimately owns or controls the customer

Question 4

Which practice most directly supports benchmark integrity?

A. Allowing dealers to share confidential client orders freely

B. Removing time stamps from fixing instructions

C. Separating client-order information from unauthorized proprietary activity

D. Permitting undocumented manual changes to published rates

Correct Answer: C. Separating client-order information from unauthorized proprietary activity

Question 5

A capital ratio is calculated as eligible regulatory capital divided by what quantity?

A. Gross revenue

B. Risk-weighted assets

C. Net interest income

D. High-quality liquid assets

Correct Answer: B. Risk-weighted assets

Question 6

Which item is normally required for hedge accounting?

A. Formal designation and documentation at inception

B. A guarantee that the hedge produces a profit

C. A prohibition on measuring the hedged item

D. Elimination of all market risk

Correct Answer: A. Formal designation and documentation at inception

Question 7

What is the most appropriate response to an ambiguous client mandate involving a potential conflict?

A. Assume the broadest permission and proceed immediately

B. Ignore the conflict if the transaction is profitable

C. Seek clarification and escalate under the applicable control framework

D. Share the client’s order with another dealer

Correct Answer: C. Seek clarification and escalate under the applicable control framework

Question 8

Why is data lineage important in regulatory reporting?

A. It allows a reported number to be traced back to source data and transformations

B. It guarantees that every customer is low risk

C. It replaces the need for reconciliations

D. It prevents all market losses

Correct Answer: A. It allows a reported number to be traced back to source data and transformations

Question 9

Which statement about sanctions alerts is correct?

A. Every alert is conclusive proof of a violation

B. Alerts should be investigated using reliable identifiers and documented reasoning

C. Alerts may always be ignored when false positives are common

D. Only the front office may resolve alerts

Correct Answer: B. Alerts should be investigated using reliable identifiers and documented reasoning

Question 10

Which ethical test is most appropriate when commercial profit conflicts with client confidentiality?

A. Profitability alone determines the correct action

B. The action should be assessed against law, obligations, fairness, stakeholders and escalation requirements

C. The most senior trader’s preference determines the outcome

D. The transaction should proceed if it is operationally easy

Correct Answer: B. The action should be assessed against law, obligations, fairness, stakeholders and escalation requirements