DEUTSCHE BANK AG — NYDFS CONSENT ORDER New York Department of Financial Services Order Issued July 7, 2020
On July 7, 2020, the New York Department of Financial Services (NYDFS) issued a consent order imposing a $150 million penalty on Deutsche Bank AG for significant compliance failures across multiple client relationships. Of that total, $75 million was specifically attributed to the bank's relationship with Jeffrey Epstein, which NYDFS Superintendent Linda Lacewell described as a case that "never should have been approved."
BACKGROUND OF THE BANKING RELATIONSHIP:
Deutsche Bank onboarded Jeffrey Epstein as a client in 2013, after JPMorgan Chase had terminated its banking relationship with him in the wake of his 2008 conviction for soliciting a minor for prostitution in Florida. By 2013, Epstein's criminal history was publicly known and well-documented. Despite this, Deutsche Bank's private banking division in the Americas approved the Epstein relationship.
The consent order found that Deutsche Bank processed hundreds of transactions totaling millions of dollars through Epstein's accounts between 2013 and 2018. The bank maintained the relationship for approximately five years, during which time compliance red flags were raised internally but not adequately acted upon.
KEY FINDINGS OF THE CONSENT ORDER:
The NYDFS investigation revealed multiple failures in Deutsche Bank's anti-money-laundering (AML) and know-your-customer (KYC) compliance frameworks:
Onboarding failures: The bank failed to conduct adequate due diligence when onboarding Epstein. Although a reputational risk review was conducted, the review did not adequately weigh Epstein's 2008 criminal conviction and sex offender registration status. Senior personnel in the private banking division approved the relationship despite the known risks.
Transaction monitoring failures: Epstein's accounts generated numerous suspicious transactions that should have triggered enhanced scrutiny. These included regular payments to individuals who were publicly identified as Epstein's alleged co-conspirators, cash withdrawals in patterns consistent with structuring, and payments to Russian models and Eastern European women. Between 2013 and 2018, Epstein's accounts processed approximately $7 million in payments to law firms, $2.65 million in court-ordered settlements, over $800,000 in payments to individuals publicly alleged to have been Epstein's co-conspirators, and regular payments to young women with no apparent business purpose.
Escalation failures: When compliance officers flagged suspicious activity in Epstein's accounts, the bank failed to adequately escalate those concerns or to take timely action to exit the relationship. The consent order noted that the bank's compliance function was "siloed" and that information about Epstein's activities was not effectively shared across divisions.
Delayed exit: Deutsche Bank did not terminate its relationship with Epstein until November 2018, approximately one month after the Miami Herald published its "Perversion of Justice" investigation. The timing suggested that the bank was motivated by reputational risk from media exposure rather than by its own compliance processes.
REMEDIAL MEASURES:
In addition to the $75 million penalty, the consent order required Deutsche Bank to engage an independent compliance monitor and to implement a series of reforms to its AML and KYC programs. The bank was required to enhance its procedures for identifying and escalating suspicious activity, improve its client onboarding and due diligence processes, and strengthen its overall compliance governance structure.
REGULATORY SIGNIFICANCE:
The Deutsche Bank consent order, together with the JPMorgan settlement, established a clear precedent that financial institutions face substantial regulatory and legal consequences for maintaining banking relationships with individuals whose criminal histories and suspicious financial activity warranted enhanced scrutiny or relationship termination. The order was one of the largest NYDFS enforcement actions at the time and signaled that regulators would hold banks accountable not only for active facilitation of criminal conduct but also for passive failures to enforce their own compliance standards.