Deutsche Bank AG: Bafin ordnet neue Fristen zur Mängelbeseitigung an

The order, final since 6 October 2026, relies on GwG §51(2) and KWG §25h(5). It underscores that banks must maintain reliable data processing systems to detect suspicious payment transactions and report to the FIU. For compliance teams, this is a reminder that transaction monitoring is not a one-off IT project but a supervisory priority.

Deficiencies in data quality, alert logic, coverage, or remediation timeliness can trigger formal deadlines and enforcement. Firms should review their transaction monitoring frameworks against BaFin's expectations, ensure adequate resources for remediation, document remediation progress, and escalate issues to boards. The order is specific to Deutsche Bank, but its signal is sector-wide: BaFin will use formal measures when remediation stalls.

Banks should test detection scenarios, tune thresholds, validate data lineage, and ensure suspicious activity reporting is timely and complete. RegTech providers may see demand for monitoring, tuning, and governance tools. Overall impact is significant for large banks with complex payment flows and high AML risk.

Urgency is high for DB and high/medium for peers. Actions: gap assessment, remediation roadmap with deadlines, board reporting, independent validation, and regulator engagement.