Why Real-Time Risk Monitoring Matters More Than End-of-Day Reporting for CFD Brokers

Real-time risk monitoring in CFD dealing rooms refers to the continuous revaluation of positions, exposure, and PnL as market prices change throughout the trading session. End-of-day reporting, by contrast, captures a snapshot of the book at session close and delivers it after the fact. For brokers managing a live B-book or hybrid model, the difference between these two approaches is not simply a matter of timing. It is the difference between managing risk and reviewing it.

The global FX market processed $9.6 trillion in daily turnover in April 2025 according to the BIS Triennial Central Bank Survey, a 28% increase from 2022. In an environment of this scale and speed, exposure that was within acceptable parameters at the start of a session can move well outside risk limits within minutes during high-volatility events. A dealing desk that only sees its risk position once the market has closed is not managing risk at all. It is accounting for it.

The Structural Problem with End-of-Day Reporting 

End-of-day reports serve an important function. They provide a consolidated, auditable record of the day's trading activity, book performance, and PnL attribution. They are essential for accounting, compliance reporting, and senior management review. But they are not risk management tools. They are historical documents.

The structural problem is straightforward: risk events happen intraday. A correlated client positioning event, a large deposit followed by aggressive trading, a sharp move in a major currency pair, or a sudden spike in a commodity that a significant portion of the book is exposed to, none of these wait until market close to materialise. By the time a risk officer reads an end-of-day report flagging an unusual exposure concentration, that exposure has already resolved itself, either by unwinding naturally or by producing a loss.

For brokers relying on batch reporting infrastructure, this creates three specific operational risks:

• Delayed response: the dealing desk cannot act on information it does not have until session end

• Missed intervention windows: the optimal moment to hedge, book-switch, or restrict a trader has already passed

• Compounding exposure: positions that breach risk limits mid-session continue accumulating without triggering any action

How Real-Time Risk Monitoring Works 

Real-time risk monitoring requires a fundamentally different data architecture from batch reporting. Batch systems aggregate trade data at intervals and produce reports on a schedule. Real-time systems must ingest, process, and display position data continuously, revaluing each open position as new market prices arrive.

Tapaas is built on a time series database (TSDB), a system designed specifically to store and retrieve timestamped data points as a continuous series rather than as periodic snapshots. This architecture means that every position change, every new trade, and every price tick is captured with precision and immediately reflected in the risk figures displayed on the dealing desk dashboard. There is no lag between what is happening in the book and what the risk officer can see.

The core risk metrics that Tapaas revalues in real time are:

• Day PnL: Realised PnL plus Unrealised PnL minus Previous Unrealised PnL, updated continuously as prices move

• Equity (GLV): Cash balance plus Unrealised PnL, reflecting the current mark-to-market value of the book at any given moment

• Exposure (Market Value): The total value of all open positions across all symbols, books, and client groups

• Net Open Position (NOP): The broker's net directional exposure after netting long and short positions within each book

What End-of-Day vs Real-Time Monitoring Looks Like in Practice 

Scenario	End-of-Day Reporting	Real-Time Monitoring (Tapaas)
Major FX pair moves 150 pips intraday	Visible in next morning's report	Immediate PnL and exposure revaluation, alert fires if threshold breached
100 accounts open same position simultaneously	Appears in aggregate EOD report	Syndicate detection flag raised in real time, NOP update immediate
B-book NOP exceeds risk limit	Identified next day	Alert triggered at moment of breach, dealing desk can hedge or switch books
Toxic trader exploits price feed lag	Loss attributed in EOD trade report	Trade-level profiling flags pattern during session, exposure reviewed
Large deposit followed by aggressive trading	Visible in next day's client report	Large deposit alert fires, client flagged for intraday review
Correlated client loss event (news release)	Summary in morning report	Real-time book revaluation shows aggregate impact as it unfolds

The Role of Configurable Alerts in Real-Time Risk 

Real-time data visibility is necessary but not sufficient. A dealing desk cannot watch a live dashboard continuously throughout every trading session. What converts real-time data into real-time action is a configurable alert system that monitors risk conditions autonomously and notifies the right people when thresholds are breached.

Tapaas provides a comprehensive alert framework that covers five distinct categories of risk event: special trader behaviours, symbol-level anomalies, book monitoring and management, other trading behaviours, and trade monitoring. Each alert category can be configured with custom thresholds, enabling the dealing desk to define exactly what constitutes a reportable event for their specific book structure and risk appetite.

Examples of alerts that directly address intraday risk gaps include:

• Imbalanced A-book: fires when A-book hedging creates a net position rather than a flat hedge, signalling LP-side exposure

• Excessive warehouse risk: identifies when B-book exposure in a specific symbol or direction exceeds defined limits

• B-book summary: provides a periodic summary of B-book composition to ensure dealing desk awareness throughout the session

• Nearing stop-out: flags clients approaching margin call before the automated process triggers, allowing the desk to manage client communication

• Inappropriate exposure: identifies clients holding positions disproportionate to their account equity, a common precursor to stop-out events

Regulatory Expectations Around Intraday Risk Visibility 

ESMA's CFD intervention measures established mandatory margin close-out rules requiring brokers to close out client positions when account equity falls to 50% of minimum required margin. This regulatory requirement is inherently a real-time obligation. A broker cannot comply with a margin close-out rule if it only reviews client margin levels at end of day.

More broadly, both ESMA and the FCA expect regulated CFD brokers to demonstrate that their risk management processes are proportionate to the risks they carry. For B-book and hybrid model brokers managing internalised positions, proportionate risk management means continuous monitoring, documented threshold frameworks, and the ability to respond to risk events as they occur. End-of-day reporting does not meet this standard when the broker is carrying live intraday exposure.

The Tapaas alert system generates a timestamped record of every threshold breach and automated action, providing the audit trail that regulators expect to see when examining a broker's risk management controls.

Scheduled Reports: The Right Place for End-of-Day Data 

None of this means that end-of-day reporting has no value. Tapaas includes a Report Scheduler that allows dealing desks to configure regular CSV reports covering trade activity, position summaries, PnL attribution, and client-level data. These scheduled reports serve a distinct and important purpose: they provide the consolidated, structured records that compliance teams, senior management, and regulators require.

The correct architecture is one where scheduled reports handle historical accountability and regulatory documentation, while real-time dashboards and alerts handle intraday decision-making. These are complementary functions, not alternatives. A broker that uses only end-of-day reports has accountability without control. A broker that uses only real-time dashboards without structured reporting has control without documentation. Both are necessary, but they serve entirely different purposes.

If your dealing desk is still relying on end-of-day reports to manage intraday risk, it is time to see what real-time monitoring looks like in practice. Contact us to arrange a demonstration of the Tapaas Live Risk Cube and real-time alert system.

Frequently Asked Questions 

Why is end-of-day reporting not enough for CFD broker risk management?

End-of-day reports capture a historical snapshot of the book at session close. Risk events, including exposure breaches, correlated client positioning, and aggressive intraday trading by toxic traders, occur during the session. By the time an end-of-day report is reviewed, the dealing desk has no opportunity to intervene.

What does real-time risk monitoring show that EOD reports do not?

Real-time monitoring shows the current state of the book at any moment during the trading session: live PnL revaluation, current NOP by symbol and book, margin levels, and intraday trader behaviour. EOD reports show what happened; real-time monitoring shows what is happening.

How does Tapaas revalue positions in real time?

Tapaas uses a time series database (TSDB) architecture that stores timestamped data points as a continuous series. As new market prices arrive, all open positions are revalued immediately. Key metrics including Day PnL, Equity (GLV), Exposure, and NOP reflect current market conditions at all times during the session.

What is the Tapaas alert system and how does it support real-time risk?

The Tapaas alert system monitors configurable risk thresholds across trader behaviour, symbol exposure, book composition, and trade quality. When a threshold is breached, an alert is sent to the dealing desk immediately. Alerts include special trader behaviours (scalpers, toxic clients), book alerts (imbalanced A-book, excessive warehouse risk), and trade monitoring (negative spread, excessive spread).

Can Tapaas produce scheduled reports as well as real-time dashboards?

Yes. Tapaas includes a Report Scheduler that delivers configured CSV reports on a regular basis. Scheduled reports are used for compliance documentation, historical analysis, and management review. They complement the real-time dashboard rather than replacing it.