Imagine that one company insures 20,000 homes along the same coastline. Most years, the premiums arrive, a manageable number of kitchens catch fire, pipes burst and roofs leak, and the pool works exactly as intended. Then a hurricane crosses the coast in a single night. Thousands of claims arrive together.

The problem is not that the insurer misunderstood insurance. It is that insurance works most smoothly when losses are numerous, limited and not perfectly connected. A catastrophe breaks that comfortable pattern. One physical event can damage many policies at once, creating a bill large enough to overwhelm a company that looked secure the day before.

The insurer therefore becomes a buyer as well as a seller. It accepts risks from households and businesses, combines them into a portfolio, keeps a deliberate portion and pays another company to absorb some of the rest. That second contract is reinsurance. If the reinsurer transfers part of its own accumulation, the next contract is called retrocession. Some risk can travel farther still, into securities funded by investors.

The result is not a magic disappearance of danger. It is an architecture for deciding which balance sheet takes which slice of the loss.

Interactive · Figure 1

Follow the risk, not the paperwork

Select each participant to see what it receives, what it promises and whom it actually owes.

The policyholder pays a premium for a defined promise. The policy—not the reinsurance programme—determines whether the claim is covered.

The visible promise does not move

A homeowner whose insurer has bought reinsurance does not normally acquire a claim against the reinsurer. The homeowner’s contract remains with the original insurer. The reinsurer’s contract is with that insurer.

This distinction matters when the machinery is under pressure. If a reinsurer disputes a recovery, pays slowly or fails, the primary insurer does not ordinarily get to redirect the customer. It must still honour covered claims and then pursue whatever recovery its own contract permits. The International Association of Insurance Supervisors describes reinsurance as an indemnity between professional counterparties: it transfers risk economically, but it does not novate the underlying policy.

That preserves accountability. It also reveals the trade. Reinsurance reduces underwriting risk but introduces counterparty, operational, timing and sometimes basis risk—the possibility that the contractual trigger and the actual loss do not align perfectly.

The legal structure · Figure 2

Two contracts, not one long chain

Risk may travel outward, while the original promise remains where it began.

Contract A · RetailPolicyholder ↔ Insurer

The insurer owes a covered claim under the policy. Claims handling, exclusions, deductibles and limits are governed here.

Contract B · WholesaleInsurer ↔ Reinsurer

The reinsurer reimburses the insurer according to a separate agreement. The policyholder is usually not a party to it.

The precise legal position depends on the contract and jurisdiction, but the direct insurer generally remains responsible to its policyholder.

Four ways to describe a reinsurance deal

Reinsurance language seems complicated because several classifications can describe the same arrangement at once. The first question is which business is included? A facultative placement covers an individually negotiated risk—perhaps a refinery, satellite or unusually large building. A treaty automatically covers a defined portfolio, such as a class of household policies written during the year.

The second question is how are premiums and losses divided? Under proportional reinsurance, the insurer and reinsurer share an agreed percentage. In a quota-share treaty, 40% ceded can mean 40% of the relevant premium and 40% of covered losses. Under non-proportional cover, the reinsurer pays only after losses pass an attachment point, and only up to a limit. Catastrophe excess-of-loss protection is built this way.

Interactive · Figure 3

Build the contract in two decisions

Choose the scope and the method. The combination describes a different job.

1 · What business?
2 · How shared?
Portfolio catastrophe protection

Treaty + excess of loss

A defined book is covered automatically. The insurer absorbs losses up to its retention; the reinsurer pays the covered layer above it.

Typical use: protecting a property portfolio from a severe hurricane, earthquake or cluster of storms.
Interactive · Figure 4

Change the quota share

Assume a portfolio produces $100 million of premium and $70 million of covered losses.

40%
Premium kept by insurer$60m
Loss kept by insurer$42m
Loss reimbursed by reinsurer$28m
Real quota-share accounting can include ceding commissions, expenses, limits and exclusions. The simplified model isolates the proportional split.

Retention is the price of control

An insurer does not usually try to cede everything. Keeping risk aligns incentives, preserves premium and makes the programme economically tolerable. The amount it keeps is its retention. Above that point, protection may be stacked into layers: one reinsurer takes the first layer, a panel shares the next, and a catastrophe bond supplies a higher, remote layer.

Layering allows different pools of capital to price different probabilities. Frequent losses close to the ground are relatively predictable but expensive to transfer. Remote losses are less likely but can be enormous. The insurer chooses an attachment point by weighing its capital, risk appetite, regulatory requirements, modelled losses and the price of reinsurance.

Interactive · Figure 5

Send one catastrophe through the tower

Move the event loss. Each layer fills only after the layer below it is exhausted.

$650m
Insurer
Treaty
Retro
Cat bond
Above tower
Insurer retains$100m
Reinsurance layer$300m
Second layer$250m
Cat bond layer$0m
Above all limits$0m
The insurer pays covered policy claims, then seeks recoveries from the layers that have attached.
Illustrative tower: insurer $0–100m; treaty $100–400m; second layer $400–800m; catastrophe bond $800m–$1bn. Amounts above $1bn remain outside this tower.

Why catastrophes are different

Ordinary pooling relies on diversification. Ten thousand unrelated homes do not usually burn on the same day. Their individual fire risks can be estimated and combined. But the homes can share a location, power grid, floodplain, building standard or weather system. Those common conditions create correlation.

A hurricane does not draw claims independently from a jar. It sweeps across many policies at once. An earthquake can damage homes, offices, factories, ports and roads in the same region. A cyber event can reach customers across borders through shared software. The portfolio may contain thousands of contracts but still behave like one concentrated exposure.

Reinsurers counter concentration by combining risks from many insurers and geographies. A Japanese earthquake, European windstorm and American hurricane are not perfectly independent, but their peaks are less likely to occur together than losses within a single coastal book. Retrocession and capital-market risk transfer extend that diversification—while also creating connections that supervisors must watch.

Interactive · Figure 6

Same portfolio, different dependence

Each dot represents part of a 10,000-policy book. Compare scattered losses with one correlated event.

Scattered, diversifiable losses
8 of 100 cellsLosses are dispersed. The law of large numbers is useful because one claim says little about the next.
The cells are conceptual, not a probability forecast. Correlation—not only the number of policies—determines how dangerous an accumulation can become.

The model is a map of possible futures

Rare catastrophes cannot be priced from recent claims alone. A city may have only a few decades of reliable property data and no modern example of the worst plausible earthquake. Yet the insurer must decide today how much it could lose tomorrow.

Catastrophe models assemble a synthetic view. A hazard module generates many possible storms, floods or earthquakes. An exposure database locates insured buildings and their values. Vulnerability functions estimate how structures respond. Financial terms translate physical damage into deductibles, limits and insured losses. Thousands of simulated years create a distribution rather than a single prediction.

The output can estimate an annual expected loss or a remote percentile, but precision is not certainty. Unknown construction quality, changing climate, inflation, migration and model assumptions can all move the result. Two sophisticated models can disagree. The number becomes useful when treated as a decision tool—not a prophecy.

Catastrophe modelling · Figure 7

Turn a hazard into a financial distribution

Four linked models convert a possible event into a range of portfolio outcomes.

01HazardWhere could the event occur, how intense could it be and how often?
02ExposureWhich insured people, buildings and assets are in the event footprint?
03VulnerabilityHow does each asset respond to wind, water, shaking, fire or outage?
04Financial termsHow do deductibles, limits, conditions and reinsurance convert damage into claims?
A model does not remove uncertainty. It makes assumptions explicit enough to price, compare and manage. Model error remains one of the risks retained by every participant.

When insurance risk becomes an investment

Traditional reinsurance relies on a reinsurer’s balance sheet. Insurance-linked securities add another route. A special-purpose vehicle can issue a catastrophe bond to investors and place the proceeds in collateral. The sponsoring insurer or reinsurer pays for protection. Investors earn interest while their principal remains exposed to a defined event.

If no trigger occurs before maturity, investors receive their principal back. If the contract triggers, some or all collateral is released to meet the reinsurance obligation. The investment can appeal because hurricane or earthquake risk is not driven by the same mechanism as ordinary corporate defaults or interest-rate changes. But diversification is not safety: investors can lose principal quickly.

Triggers make the trade possible—and imperfect. An indemnity trigger follows the sponsor’s actual covered losses but can take time to calculate. An industry-loss trigger uses the sector’s loss. A parametric trigger uses a physical measurement such as wind speed or earthquake intensity. Faster, more objective triggers can create more basis risk.

Interactive · Figure 8

Choose the catastrophe-bond trigger

Then move the event severity to see when collateral leaves the investor vault.

Indemnity trigger

Closest to the sponsor’s own covered loss, but claims development and verification can be slow.

65%
Below the 70% trigger. Investor principal remains in the collateral account.
The threshold and payout formula are illustrative. Real securities define events, regions, periods, data sources, attachment, exhaustion and dispute procedures in detail.

The losses insurance does—and does not—absorb

According to Swiss Re Institute’s March 2026 estimate, natural catastrophes caused about $220 billion of global economic loss in 2025. About $107 billion was insured. That means insurance funded roughly 49% of the natural-catastrophe loss and left a gap of about $113 billion with households, businesses, governments and wider society.

The gap is not automatically a market failure. Some assets are deliberately self-insured; some losses fall below deductibles or outside policy terms. But persistent gaps can reveal unaffordable prices, unavailable capacity, low take-up, weak risk information or hazards that are difficult to diversify. In 2025, smaller and medium-scale perils—wildfire, severe convective storm and flood among them—accounted for a record 92% of insured natural-catastrophe losses.

Reinsurance expands capacity, but it cannot make an unpriced or unknowable exposure disappear. The OECD notes that globally correlated risks, including some pandemic and cyber scenarios, can be especially difficult because the same event may strike many regions while also weakening financial markets. Capital becomes cautious precisely when it is needed most.

Current scale · Figure 9

The 2025 natural-catastrophe ledger

Latest full-year figures available when this article was prepared.

$220bnglobal economic losses from natural catastrophes
$107bninsured natural-catastrophe losses
92%of insured losses came from secondary perils
49% insured51% gap
Source: Swiss Re Institute, sigma 1/2026. Figures are estimates in 2025 prices; totals may be revised as claims develop.

A market that remembers disasters

Reinsurance is renewed and repriced. After severe losses, capital impairment or a reassessment of risk, capacity can contract. Prices rise, exclusions tighten and attachment points move upward. Primary insurers then keep more loss or pass higher costs and narrower coverage toward customers. This is a hard market.

Attractive returns can draw retained earnings and new capital back into the sector. Competition grows, terms broaden and prices soften. The cycle is not mechanical: interest rates, inflation, litigation, regulation, model changes and investor appetite all matter. But the essential feedback is clear. A disaster is not only a payout event; it is new information about the price and availability of future protection.

Interactive · Figure 10

Move through the reinsurance cycle

Select a stage to see how a wholesale repricing can reach an ordinary policyholder.

Claims consume part of the market’s loss budget and reveal whether models, exposures and contract wording behaved as expected.

The state is sometimes the outermost layer

Some accumulations are so large, politically essential or difficult to model that private capital alone may not provide broad, affordable coverage. Governments then intervene in different ways: by writing insurance directly, sharing extreme layers, guaranteeing liquidity, requiring participation, subsidising premiums or funding recovery after the event.

The United States’ National Flood Insurance Program itself buys traditional reinsurance and catastrophe-bond protection. FEMA explains that the programme transfers part of its flood exposure to private reinsurers and capital-market investors while continuing to pay policyholders under its own contracts. Terrorism programmes, earthquake authorities and national flood pools use other public-private designs.

A government backstop is not free risk transfer. It moves part of the tail to taxpayers, public borrowing or compulsory levies. That may be a deliberate social choice when the alternative is widespread uninsured loss. It also raises hard questions: which risks deserve collective support, what price should signal danger, and how much prevention should be required before society accepts the remainder?

The outer layers · Figure 11

Where a catastrophic loss can finally land

The farther outward the risk travels, the more institutions and public choices enter the structure.

Layer 1Household or business

Deductibles, exclusions, uninsured assets and disruption remain with the affected party.

Layer 2Insurance market

Primary insurers, reinsurers, retrocessionaires and investors fund contracted layers.

Layer 3Public programme

A pool, guarantee or statutory scheme may cover a defined extreme risk.

Layer 4Society

Taxpayers, public borrowing, charities and communities absorb what the formal structure leaves behind.

What reinsurance cannot solve

Reinsurance can stabilise results, release capital and spread catastrophes. It can also fail to match the need. Contract wording may exclude the event. A layer may attach above the actual loss. A parametric bond may not trigger even when the sponsor suffers. A reinsurer can become a credit exposure. Several companies may unknowingly depend on the same retrocession or model.

And every layer has a price. Buying more protection can make an insurer safer but reduce the premium it retains. Buying less can improve ordinary-year profit while increasing tail exposure. The programme is therefore not a binary choice between insured and uninsured. It is a capital allocation decision under uncertainty.

Interactive · Figure 12

Where can the protection fail to match?

Select a mismatch. Risk transfer changes the risk; it rarely removes every form of it.

CONTRACT RISK

The event is outside the agreement

A claim can be covered by the retail policy yet fall outside the reinsurance definition, period, territory, exclusions or reporting conditions.

Result: the primary insurer still owes the policyholder but may receive less reinsurance recovery than expected.

The final answer

Insurance companies buy insurance for the same fundamental reason their customers do: a possible loss is too large or volatile to carry comfortably alone. But reinsurance operates at a different scale. It takes thousands or millions of retail promises, measures their shared exposures and redistributes carefully defined slices across professional balance sheets.

The structure makes modern insurance larger and more resilient. It allows a regional insurer to cover more homes than its own capital could safely support. It lets global capital absorb part of a local catastrophe. It gives supervisors another tool for judging whether a company can survive the events it sells protection against.

Yet the structure has a boundary. Reinsurance does not erase loss, guarantee perfect matching or relieve the direct insurer of its promise. It decides who funds each layer—and exposes the moment when the last private layer ends.

The risk never disappears. The system changes whose balance sheet is waiting for it.
Check your model · Figure 13

Can you follow the risk?

Five quick questions about the structure behind the policy.

Choose an answer.

Sources and further reading

This explainer uses current supervisory, government and market research. Statistics and institutional material were checked on 3 August 2026.

Reading list · Figure 14

Follow the risk to its source

Definitions, supervision, market structure, catastrophe losses, capital-market transfer and public backstops.

Insurance Core Principle 13: Reinsurance and Other Forms of Risk TransferThe supervisory definition, economic transfer, continuing policyholder obligation and risks created by reinsurance.IAIS ↗ Reinsurance overviewCurrent explanation of cedents, retrocession and the reasons insurers purchase reinsurance.NAIC ↗ Global Insurance Market Report 2025 and 2026 mid-year updateGlobal supervisory monitoring of insurer and reinsurer solvency, profitability, liquidity and systemic risk.IAIS ↗ Global Insurance Market Trends 2025Retention, underwriting performance and risks across insurance markets.OECD ↗ Financial Protection Against Catastrophic Risks2026 analysis of private capacity, correlated catastrophe risk, protection gaps and government-supported solutions.OECD ↗ sigma 1/2026: Natural catastrophes in 2025Full-year economic and insured loss estimates, secondary-peril share and the continuing loss trend.Swiss Re Institute ↗ Alternative Life CapitalA regulator’s description of insurance special-purpose vehicles, collateral and catastrophe-bond mechanics.Bank of England ↗ National Flood Insurance Program’s Reinsurance ProgramA live example of a public insurer using traditional reinsurance and multi-year catastrophe bonds.FEMA ↗ Terrorism Risk Insurance ProgramThe United States’ federal framework for sharing certain certified terrorism losses with the insurance market.U.S. Treasury ↗ Natural catastrophes and global reinsuranceHow catastrophe losses move through insurers, retrocession and securitisation into the wider financial system.BIS ↗
Explainer 012 · Money & Institutions← All explainers