Commerzbank Sued Over Alleged Links to Iran-Related Terrorist Financing

More than 200 American victims and relatives of people killed or injured in terrorist attacks in Iraq and Israel have filed a lawsuit against Commerzbank AG in the U.S. District Court for the District of Columbia, alleging that the German bank provided financial services that helped Iran and organisations linked to it support terrorist activity.

The civil complaint concerns attacks that took place between 2007 and 2011. The plaintiffs are seeking compensatory and punitive damages and are pursuing claims under the Justice Against Sponsors of Terrorism Act (JASTA).

The allegations centre on Commerzbank's historical dealings with Iranian entities, particularly the Islamic Republic of Iran Shipping Lines (IRISL). The plaintiffs allege that the bank helped Iranian customers maintain access to the U.S. financial system by using payment structures and corporate entities that obscured the involvement of sanctioned counterparties.

The allegations in the new lawsuit remain claims made by the plaintiffs and have not been established by a court. In particular, the lawsuit seeks to establish a connection between previously documented sanctions-related payment activity and the specific terrorist attacks suffered by the plaintiffs.

The case follows a substantial U.S. enforcement action against Commerzbank in 2015. At that time, the bank admitted violations of U.S. sanctions and Bank Secrecy Act requirements and agreed to a resolution involving approximately $1.45 billion in penalties and other payments across several U.S. authorities.

Under the 2015 Justice Department resolution, Commerzbank admitted that between 2002 and 2008 it knowingly and willfully moved approximately $263 million through the U.S. financial system on behalf of Iranian and Sudanese entities subject to U.S. sanctions. The bank also admitted using various mechanisms to conceal the identity of sanctioned parties from U.S. financial institutions and sanctions-screening systems.

One of the practices described by U.S. authorities involved the use of so-called cover payments and the removal or alteration of information identifying Iranian entities in payment messages. The bank also used special-purpose entities associated with an Iranian shipping company to route payments through the U.S. financial system.

The Justice Department stated that Commerzbank created a payment arrangement in 2005 for an Iranian shipping company that involved special-purpose entities incorporated outside Iran and not obviously connected to the Iranian customer. The bank and its customer changed the entities used when U.S. sanctions filters began detecting particular companies.

The historical enforcement record also shows that Commerzbank continued processing transactions for the Iranian shipping company after it had been designated by the U.S. Treasury Department in connection with weapons-of-mass-destruction proliferation.

Separately, the Office of Foreign Assets Control reached a $258.66 million settlement with Commerzbank in 2015. OFAC said its investigation concerned 1,596 transactions routed to or through U.S. financial institutions between 2005 and 2010. The transactions involved practices including deleting or omitting references to Iranian financial institutions and replacing originating-bank information with Commerzbank's name.

The bank's earlier conduct is central to the new lawsuit because the plaintiffs argue that the documented payment practices provide evidence concerning the bank's knowledge of Iranian financial activity and its methods for processing transactions involving Iranian counterparties.

The plaintiffs also allege that Commerzbank maintained a fundraising account in Germany that was used to support payments to families of members of Hezbollah and Hamas until its closure in 2014. The purpose of the account and its alleged connection to particular terrorist attacks are matters that would need to be established through evidence in the civil proceedings.

The lawsuit therefore raises a different legal question from the 2015 sanctions proceedings. The earlier enforcement actions established violations involving the processing of sanctioned transactions and deficiencies in financial controls. The new plaintiffs must establish the elements of their civil claims, including the legally relevant connection between the alleged banking services and the injuries for which they are seeking damages.

The distinction is particularly important because the attacks identified in the lawsuit occurred over a number of years, while the historical enforcement actions covered specific periods and transactions. Evidence concerning a bank's sanctions-control failures does not automatically establish that a particular transaction financed a particular attack.

The plaintiffs may seek to use records relating to customer accounts, payment instructions, corporate structures, correspondent banking relationships and internal communications to establish the alleged links. Such evidence could potentially be relevant to questions concerning what Commerzbank knew about its customers, how transactions were structured and whether the bank understood the relationship between apparently separate entities.

The earlier Justice Department proceedings provide documented evidence that Commerzbank's internal processes allowed Iranian transactions to be structured in ways designed to avoid detection by U.S. sanctions filters. U.S. authorities stated that the bank's practices included removing information identifying sanctioned entities and using alternative payment structures when particular entities were detected.

The 2015 resolution also involved deficiencies under the Bank Secrecy Act. Commerzbank's U.S. branch admitted failures involving its anti-money-laundering programme, correspondent-account due diligence and suspicious-activity reporting. The Federal Reserve and New York State Department of Financial Services also imposed separate regulatory measures as part of the broader resolution.

OFAC's settlement specifically concerned apparent violations of multiple U.S. sanctions programmes, including restrictions relating to Iran, Sudan, weapons-of-mass-destruction proliferation, Burma and Cuba.

The historical record therefore establishes that Commerzbank previously faced significant U.S. enforcement action over its handling of sanctions-sensitive transactions. It does not, however, constitute a judicial determination that the bank financed the attacks identified in the new complaint.

The lawsuit also raises issues concerning the identification of beneficial ownership and the use of intermediary companies in international payments. The historical Commerzbank case involved transactions routed through entities that did not clearly disclose their connection to the Iranian customer. Such structures can create difficulties for sanctions screening when financial institutions rely heavily on information contained directly in payment messages.

From a financial-crime control perspective, the case illustrates the importance of examining the underlying parties to a transaction rather than relying solely on the name appearing in a payment instruction. Ownership information, corporate relationships, transaction history, counterparties and the economic purpose of a payment can all be relevant to determining whether an apparently ordinary transaction presents sanctions or money-laundering concerns.

The use of alternative companies after sanctions-screening systems identify a particular counterparty can also create additional compliance risks. Where a transaction is rejected or delayed because of sanctions concerns and a customer subsequently proposes a different entity or payment route, the change itself may require additional investigation.

The 2015 Justice Department resolution stated that Commerzbank had continued certain practices despite internal concerns about the treatment of Iranian payment information. U.S. authorities also described failures in the bank's systems for detecting and reporting suspicious activity.

The current litigation will require the plaintiffs to establish how those historical practices relate to the specific attacks and injuries described in the complaint. The existence of previous sanctions violations does not by itself determine whether Commerzbank is legally liable under JASTA.

The case was identified as *Everhart et al. v. Commerzbank AG*, filed in the U.S. District Court for the District of Columbia. The reported complaint was filed in September 2026.

The public information currently available does not establish a judicial finding against Commerzbank in relation to the attacks. The allegations will be tested through the litigation process, including any response from the bank, motions concerning the legal claims and jurisdiction, discovery and any subsequent judicial decisions.

The case nevertheless brings renewed attention to the relationship between sanctions compliance, anti-money-laundering controls and terrorist-financing risk. The historical Commerzbank enforcement action provides a documented example of how deficiencies in transaction screening and customer due diligence can allow sanctioned entities to access international financial channels.

Whether those historical practices can establish liability for the particular terrorist attacks alleged by the plaintiffs will depend on the evidence and the legal findings made during the proceedings.

By fLEXI tEAM