BaFin sets new deadlines for Deutsche Bank to fix AML transaction monitoring shortcomings

Why it matters to AML professionals

Supervisors can keep a bank under formal remediation orders for years when monitoring systems do not meet requirements. For AML professionals, a system migration or rebuild does not pause the obligation to detect suspicious activity, so interim controls and clear tracking of remediation milestones matter. Teams working on monitoring changes should expect regulators to check delivery against agreed dates.

Red flags in this case

• Alert volumes drop sharply after a monitoring system change, with no matching change in customer activity
• Payment types or channels that are not fed into the monitoring system, or are fed in with missing fields
• Remediation deadlines that are repeatedly extended without interim controls in place
• Rules and scenarios that have not been tuned or tested since the last major system change

If this landed in your queue

1. Check that the transaction or payment type in the alert is actually covered by a monitoring scenario, and escalate any coverage gap you notice
2. Review the customer's activity over a longer look-back period if the alert came from a newly migrated or changed system
3. Record data quality problems in the alert, such as missing counterparty details, so they reach the remediation team
4. Follow the documented interim procedure for any area your team has been told is under remediation

What control failed

Transaction monitoring. BaFin's order concerns shortcomings in the data processing systems Deutsche Bank AG uses to monitor transactions to prevent money laundering and terrorist financing.

Key terms

BaFin

Germany's Federal Financial Supervisory Authority, which supervises banks and other financial firms, including their AML controls.

Transaction monitoring

The process, usually automated, of reviewing customer transactions to detect activity that may be linked to money laundering or terrorist financing.

Final and binding

The decision can no longer be challenged through ordinary legal remedies and must be complied with.

Interview angle

Your bank is replacing its transaction monitoring system. What would you do to make sure suspicious activity is not missed during the change?

Talk about parallel running and comparing alert outputs, checking that all products and payment types feed into the new system, data quality checks, interim manual controls, and documented sign-off with clear deadlines that management tracks.