BaFin Sets New Deadlines for Deutsche Bank to Address AML Monitoring Deficiencies

Germany’s financial regulator, the Federal Financial Supervisory Authority (BaFin), has set revised deadlines for Deutsche Bank AG to address deficiencies in the data-processing systems used to monitor transactions and business relationships for potential money laundering and terrorist financing.

The measure was issued on September 15, 2026, became final on October 6 and was publicly announced on October 9. It updates earlier supervisory orders issued in April 2021 and November 2023, following changes to the bank’s technical requirements and the realignment of its transaction-monitoring systems.

BaFin said the revised timetable was necessary because changes in technical requirements had affected the implementation of corrective measures. The regulator did not disclose the new deadlines or provide a detailed breakdown of the outstanding deficiencies in its public announcement.

The latest order does not announce a new financial penalty or identify specific suspicious transactions. Instead, it concerns the continued remediation of previously identified weaknesses in systems used to detect potentially suspicious financial activity.

Under German law, banks must maintain effective systems for monitoring transactions and business relationships, identifying unusual activity and reporting suspicions to the relevant authorities. These systems must also be updated as necessary to remain effective and comply with legal and supervisory requirements.

BaFin’s action is based on provisions of Germany’s Money Laundering Act and Banking Act that empower the regulator to require financial institutions to implement appropriate safeguards and correct deficiencies in their compliance arrangements.

The effectiveness of transaction monitoring depends on the ability of a bank’s systems to process relevant data, identify unusual patterns and support further investigation. Where monitoring systems are inadequate, potentially suspicious activity may not be identified or escalated appropriately.

The regulatory order does not establish that all earlier corrective measures failed or that Deutsche Bank missed every previous implementation milestone. It confirms that the regulator has revised some remediation deadlines following changes to the technical requirements for the bank’s monitoring arrangements.

Deutsche Bank said it remained committed to complying with the order and that significant progress had already been made, with a substantial portion of the agreed measures implemented. The bank also indicated that the latest order did not introduce new findings or additional requirements.

The latest intervention follows several years of regulatory scrutiny of Deutsche Bank’s anti-money laundering controls. In previous proceedings, BaFin identified weaknesses in transaction monitoring and required the bank to improve its systems. The bank has since undertaken extensive work to strengthen its financial crime controls and address regulatory concerns.

The revised deadlines mean that the relevant remediation work remains subject to supervisory oversight. However, BaFin’s public notice does not specify the remaining tasks, the additional time granted or the date by which the bank must complete each measure.

The order is an administrative supervisory measure rather than a criminal finding. It does not accuse Deutsche Bank or any particular customer of a new money laundering offence, nor does it establish that specific criminal proceeds passed through the bank as a result of the identified deficiencies.

The continued monitoring of the remediation process reflects the importance of maintaining effective systems for detecting suspicious transactions and business relationships. Banks are required not only to introduce appropriate controls but also to ensure that those controls remain operational as their businesses, technology and regulatory requirements evolve.

By fLEXI tEAM