BaFin Fines Deutsche Bank €8 Million Over Postbank IT Migration Failures

Germany’s Federal Financial Supervisory Authority (BaFin) has fined Deutsche Bank €8 million for organisational and operational shortcomings during the migration of Postbank customers to a shared IT platform. The penalty relates to failures in handling the significant increase in customer complaints and delays in processing securities account transfer orders following the 2023 migration.

The problems emerged during the integration of Postbank’s customer data into Deutsche Bank’s systems. The migration caused widespread disruption to customer services, with some Postbank customers reportedly unable to access their funds for weeks. Other customers experienced rejected direct debits, creating the risk of missed payments and potential damage to their credit records.

BaFin stated that Deutsche Bank had failed to establish appropriate organisational arrangements to deal promptly with the increased volume of complaints arising from the migration of customer data. The regulator also identified failures to execute orders for the transfer of securities accounts without delay.

The €8 million fine reflects shortcomings in the bank’s ability to maintain adequate customer service and process customer instructions during a major technological and operational transition. The case highlights the regulatory importance of ensuring that institutions have sufficient organisational capacity and effective contingency arrangements when implementing large-scale IT integrations.

BaFin had previously taken supervisory action in response to the disruption, describing the situation as unacceptable and appointing a special supervisor to oversee Deutsche Bank’s handling of the problems. The intervention followed mounting customer complaints concerning access to accounts, delayed services and difficulties contacting the bank.

The appointed supervisor monitored the bank’s efforts to address the operational failures and improve its customer service arrangements. The supervisory mandate ended in October 2025, after the outstanding issues had largely been resolved.

The Postbank migration difficulties also attracted wider attention because of the scale of the integration. Deutsche Bank had been working for years to consolidate Postbank’s operations and customer infrastructure into its own systems. The process involved a substantial customer base and required the transfer of account information and related banking services to a shared technological platform.

Deutsche Bank acknowledged that mistakes had been made during the integration. Chief Executive Christian Sewing previously accepted responsibility for the shortcomings and stated that the bank had assigned hundreds of additional employees to address the resulting customer service problems.

In response to the latest penalty, Deutsche Bank said that the issues had been resolved and that it had continuously improved its processes since the migration. The bank also confirmed that it accepted BaFin’s decision.

The case comes against the background of Deutsche Bank’s broader efforts to restore confidence following a series of regulatory and legal challenges, including previous penalties relating to deficiencies in anti-money laundering controls. Although the latest fine concerns operational and customer-service failures rather than a specific money laundering violation, it reinforces the importance of effective internal organisation and control frameworks across all areas of banking activity.

For financial institutions, the case demonstrates that large-scale technology projects can create regulatory exposure when operational capacity, customer communication and the timely execution of instructions are not adequately managed. IT migrations involving customer accounts require appropriate planning, testing, monitoring and escalation procedures, together with sufficient staffing to manage unexpected increases in service demand.

The regulatory consequences may extend beyond the direct financial cost of a penalty. Prolonged disruption can affect customer confidence, create additional complaints and expose institutions to supervisory intervention. Banks undertaking major integrations must therefore ensure that operational resilience and customer protection remain central considerations throughout the implementation process.

BaFin’s action serves as a reminder that responsibility for customer services and the proper execution of banking instructions remains with the institution, even where disruptions arise from complex technological projects or the integration of previously separate businesses.

By fLEXI tEAM