What it means
Credit risk exists wherever value is handed over before payment arrives. A bank granting a five-year loan and a manufacturer shipping goods on 60-day terms are both extending credit, even though only one of them thinks of itself as a lender.
Professionals break the risk into three parts. Probability of default is how likely the borrower is to fail, loss given default is the share of the exposure that would not be recovered, and exposure at default is how much is owed when it happens.
Multiplying those three gives expected loss, which is treated as a cost of doing business rather than a surprise. It is priced into the interest rate or the margin, so a portfolio of loans is expected to produce some defaults and still make money overall.
Unexpected loss is the more dangerous part. It is the possibility that defaults cluster far above the average, usually because borrowers share an exposure to the same recession or the same industry shock, and it is what capital buffers exist to absorb.
Assessment blends numbers and judgement. Financial statements, payment history, credit scores and market signals all feed in, alongside less quantifiable factors such as management quality, customer concentration and the durability of the borrower's market position.
Mitigation follows a familiar toolkit. Security over assets, personal guarantees, covenants, credit insurance, shorter payment terms and simple exposure limits all reduce either the likelihood of loss or its size, and most credit policies use several at once.
In practice
Real-world examples.
Example
A building materials supplier extends $180,000 of credit to a single contractor. When the contractor's payment run slips from 45 to 75 days, the credit controller reduces the limit and requires a deposit on further orders rather than waiting for a formal default.
Example
A corporate bond investor compares two issuers offering similar yields. One is rated several notches lower, so she concludes she is not being paid enough for the extra default risk and buys the higher-rated issue instead.
Example
A software company signs a large enterprise deal with 12-month upfront billing. Finance treats the arrangement as a credit decision rather than a sales win, checking the customer's accounts before agreeing to invoice ahead of delivery.
Think of it
“Credit risk is the danger that borrowers won't pay you back-the risk of default.
Formula
Calculation
Expected loss = probability of default x loss given default x exposure at default
A bank assesses a $2,000,000 five-year loan to a regional printing business. Its scoring model puts the annual probability of default at 3%. The loan is secured on machinery and property, and the recovery team estimates it would recover 55% of the balance in a default, so loss given default is 45%.
Expected loss = 0.03 x 0.45 x $2,000,000 = $27,000 a year
To cover that alone, the bank needs 27,000 / 2,000,000 = 1.35 percentage points of margin over its funding cost, before any allowance for operating costs, capital or profit.
Across a portfolio of 200 similar loans, expected losses total $27,000 x 200 = $5,400,000 a year. If a downturn pushed the default rate from 3% to 8%, expected losses would rise to 0.08 x 0.45 x $2,000,000 x 200 = $14,400,000, which is the kind of scenario capital buffers are sized against.Case study
Seen in the real world.
Brackenfield Components is a fictional parts distributor used purely as an illustrative example. It grew revenue 30% in two years by offering 90-day terms while competitors offered 30, and management treated the generous terms as a sales strategy rather than a lending decision.
The weakness surfaced when its three largest customers, all serving the same construction sector, hit trouble in the same quarter. Brackenfield was owed $2,400,000 by those three alone, roughly 40% of its receivables, and it eventually recovered less than half.
The rebuild was unglamorous but effective. Brackenfield introduced a limit per customer capped at 10% of total receivables, took credit insurance on its largest accounts, and gave the credit controller authority to hold shipments without needing sales approval. In this illustrative story revenue growth slowed to 12%, while cash collection improved enough to fund the next warehouse without borrowing.
Watch out
Common mistakes.
- Treating credit risk as a banking issue only. Any business that invoices customers after delivering is lending, and unpaid invoices sink more small companies than bad investments do.
- Judging risk by size or reputation. Large, well-known customers fail too, and a big name concentrated in one struggling sector can be the most dangerous exposure on the ledger.
- Focusing only on expected loss. Averages are fine until defaults cluster, and it is correlated failure within one industry or region that causes real damage.
Questions
People also ask.
What is the difference between credit risk and default risk?
Default risk is the narrow chance of non-payment, while credit risk also covers downgrades, late payment and deteriorating quality that reduces the value of the exposure.
How can a small business measure it without a rating model?
Track payment history, ageing of receivables, concentration by customer, and simple warning signs such as disputed invoices or slowing payment runs.
Does credit insurance remove the risk?
It transfers much of it for a premium, subject to policy limits and exclusions, so exposure above the covered amount still needs managing.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%