Conduct risk is the possibility that a financial firm's behavior causes poor customer outcomes, weakens market integrity, or harms the firm.
Conduct risk is the possibility that a financial firm’s behavior, products, incentives, or controls cause poor outcomes for customers, weaken market integrity, or harm the firm. It can arise even when no employee intends to cause harm, because product design, sales targets, disclosures, pricing, complaints handling, or governance can create predictable adverse outcomes.
Conduct risk is jurisdiction-specific. Legal duties and regulatory terminology differ, but the analytical question is consistent: how can the firm’s decisions and behavior affect customers, counterparties, markets, and trust?
| Channel | Example question |
|---|---|
| Product design | Does the product have features or fees that create foreseeable customer harm? |
| Target market | Is the product offered to customers for whom it was designed? |
| Sales and advice | Do incentives or scripts distort recommendations or disclosures? |
| Pricing and value | Are charges, benefits, and limitations presented clearly and applied consistently? |
| Market conduct | Could trading, communications, or information handling impair market integrity? |
| Servicing | Are payments, claims, errors, hardship, and complaints handled fairly and promptly? |
| Governance | Can senior management identify, challenge, and remediate harmful outcomes? |
| Risk | Main focus | Relationship to conduct risk |
|---|---|---|
| Compliance risk | Failure to meet laws, rules, or policies | A rule breach can create conduct harm, but poor outcomes may occur without a proven breach |
| Operational risk | Failed processes, people, systems, or external events | Processing errors can create customer harm |
| Legal risk | Contracts, litigation, and enforceability | Conduct failures can create claims, remediation, or penalties |
| Reputation risk | Loss of stakeholder confidence | Reputation damage may follow conduct failures |
| Business risk | Weak operating performance or strategy | A sales model can be profitable while creating unacceptable conduct risk |
The classification matters less than complete ownership. An incident should not fall between teams because each assigns it to another risk category.
Identify the target customer, intended benefit, fees, exclusions, complexity, and conditions under which the product may produce poor outcomes.
Review governance, conflicts, sales incentives, training, channel controls, and the evidence used to approve the product or service.
Test whether communications are understandable, balanced, timely, and consistent across advertising, disclosure, and sales conversations.
Monitor errors, delays, complaints, cancellations, claims, collections, hardship requests, and customer-support outcomes.
Define when sales pause, customers receive remediation, terms change, or a product is withdrawn.
Assume a firm pays a much larger bonus for selling Product A than Product B, even though both may serve similar customer needs. Product A also has higher fees and more restrictive exit terms.
A narrow compliance review might confirm that required disclosures were delivered. A conduct-risk review asks additional questions:
The example shows why disclosure alone does not prove a good outcome.
Useful indicators can include:
Metrics need context. A low complaint count can reflect barriers to complaining, and a rising count can reflect better reporting rather than worse conduct. Combine quantitative signals with case review.
Control design should match the firm, product, customer, and jurisdiction. A checklist cannot replace outcome testing.
These sources illustrate UK and bank-supervision frameworks. Applicable duties differ across countries, products, and regulated entities.
No. It can affect retail and wholesale customers, counterparties, investors, and market integrity. The applicable rules and expected outcomes differ by activity.
No. Complaints are signals that require classification and investigation. Trends, severity, root cause, and customer impact matter.
Yes. Revenue does not prove that incentives, pricing, distribution, disclosures, or customer outcomes are acceptable.
This article is for financial education only. It is not a legal conclusion, compliance assessment, regulatory interpretation, or evaluation of a particular firm, product, employee, or customer outcome.