BaFin resets Deutsche Bank’s transaction-monitoring deadlines as remediation continues

BaFin has reset deadlines for Deutsche Bank to remedy shortcomings in systems used for anti-money-laundering and counter-terrorist-financing monitoring. The development keeps a significant technology-remediation programme under regulatory supervision, without providing a public basis to measure how much additional time individual workstreams have received.[1][2]

The dates describe three separate stages: the order was made on 15 September 2026, became final on 6 October and was announced on 9 October. It revises timetables connected with earlier requirements from April 2021 and November 2023.[1][2][3]

According to FX News Group’s report of the notice, reorganising the transaction-monitoring system changed technical requirements, making new deadlines necessary in some cases. The published reporting does not identify the replacement milestones. LeapRate’s account identifies no new financial penalty.[2][3]

A revised project timetable leaves the operational duty intact

Section 25h of Germany’s Banking Act requires credit institutions to operate and update systems capable of identifying unusual relationships and transactions, including unusually complex or large activity without an obvious lawful or economic purpose. Relevant matters must be investigated appropriately and the investigations and results documented. The law also permits outsourcing subject to notification, while allowing BaFin to intervene where outsourced arrangements undermine effective controls or supervision.[5]

That statutory framework explains the significance of a technology-related reset. Installing a replacement platform and proving that it can detect the activity it is supposed to examine are different stages of remediation. A revised implementation timetable does not itself demonstrate that monitoring is adequate; the continuing requirement concerns what the system does while the remediation proceeds.[5]

Deutsche Bank told Reuters that it was committed to complying with the order and had made significant progress on a substantial portion of the agreed measures. That is the bank’s assessment of progress, rather than a regulator’s confirmation that the programme has been completed.[4]

What the public record allows readers to assess

The next meaningful evidence would be confirmation that specific requirements have been satisfied, or disclosure of measurable remaining milestones. The absence of those dates limits comparisons between the new timetable and the previous one. It also prevents the deadline change alone from establishing either the scale of the outstanding work or the effectiveness of the controls already operating.

For transaction-monitoring providers, the episode illustrates the accountability that remains with a regulated bank when technology changes. A project may have a revised delivery plan while the institution still has to explain how transactions are being examined, how exceptions are investigated and how that work is documented.[5]

Report an error or submit an update