Germany's Federal Financial Supervisory Authority, BaFin, has imposed a combined fine of €23.05 million on Deutsche Bank AG in respect of three separate regulatory failures identified across different areas of the bank's business. The enforcement action, one of the more substantial conduct-related penalties levied against a major German lender in recent years, encompasses misconduct related to currency derivatives sales in Spain, the recording of telephone-based investment advice, and compliance with account-switching obligations under German retail banking law.
The breadth of the action is notable. Rather than targeting a single business line or product area, BaFin's decision spans Deutsche Bank's corporate banking operations in a foreign market, the retail investment advisory function of its Postbank subsidiary, and Postbank's obligations towards customers seeking to switch their bank accounts. The simultaneous citation of three distinct offences illustrates the regulator's increasing willingness to pursue comprehensive enforcement when it identifies concurrent failures rather than addressing individual issues in isolation.
DERIVATIVES SALE IN SPAIN DRAWS LARGEST PENALTY
The single largest component of the fine, amounting to €14.8 million, relates to the sale of currency derivatives to customers in Spain. BaFin concluded that Deutsche Bank's conduct in connection with these products fell short of the applicable regulatory standards governing the sale of complex financial instruments to clients, though the regulator characterised the matter as a regulatory offence attracting a proportionate financial penalty without publishing a granular account of the specific advisory or sales process failings identified during its investigation.
The remaining two elements of the enforcement action were directed at Deutsche Bank's Postbank division, the bank's retail banking arm serving millions of customers across Germany. A fine of €4.6 million was imposed for Postbank's failure to make and retain adequate records of investment advice provided to clients over the telephone. The regulatory obligation to document telephone-based investment guidance exists to protect consumers by ensuring that they can access a record of the advice they received and to allow supervisors to audit sales processes and verify that recommendations were appropriate and properly evidenced. The third and final component of the penalty, at €3.65 million, relates to Postbank's repeated non-compliance with the German Payment Accounts Act in respect of account-switching procedures — rules introduced to reduce the friction customers face when transferring their accounts between financial institutions.
ENFORCEMENT CONTEXT AND BANK RESPONSE
The aggregate fine of €23.05 million, while material from a conduct-risk management and reputational standpoint, sits within the range of penalties that European supervisors have levied on large banking groups for procedural and conduct-of-business shortcomings. What distinguishes the action is the simultaneous citation of three separate failings spanning multiple business lines and geographies, a construction that reflects BaFin's current enforcement posture of addressing outstanding compliance gaps comprehensively when they are identified.
Deutsche Bank has been engaged in a sustained multi-year effort to upgrade its internal controls environment and compliance infrastructure following a prolonged series of regulatory and legal challenges in prior years. The three offences cited in the February 2025 action span the group's investment banking activities, its retail advisory operations, and its consumer banking procedures, illustrating that the conduct-risk management agenda retains both breadth and urgency across the institution. BaFin confirmed that the fines were imposed in accordance with its standard enforcement procedures and stated that both elements of the decision relating to Postbank are final. Deutsche Bank had not issued a public response contesting the findings as of the date of the announcement.