 |
| Deutsche Bank AG PenaltyOFSI has imposed a £165,000 monetary penalty on Deutsche Bank AG London Branch (DBLB) for breaches of the Russia financial sanctions regime. Between June and July 2022, DBLB processed two payments totalling £635,618.75 to an entity wholly owned by a designated person. This is the second OFSI monetary penalty case resolved through settlement, demonstrating how proportionate and effective enforcement outcomes can support the rapid communication of compliance lessons to industry. It also underlines the importance of firms maintaining effective sanctions controls, particularly where ownership and control structures determine whether restrictions apply. Key lessons for firms include the importance of: – maintaining suitably robust sanctions screening systems and processes, commensurate with their level of exposure to sanctions risk – having strong onboarding procedures and regular, risk‑based customer reviews especially in higher risk jurisdictions – complete, detailed, and prompt voluntary disclosure of potential breaches to OFSI A 45% discount was applied, reflecting voluntary disclosure and settlement. |
I had Claude summarize the Penalty Notice:
OFSI Penalty Notice: Deutsche Bank AG London Branch
Plain-Language Summary
SUMMARY
The UK’s Office of Financial Sanctions Implementation (OFSI) fined Deutsche Bank’s London branch (DBLB) £165,000 for violating UK Russia sanctions. The core violation: DBLB processed two payments in 2022 — totalling about £635,000 — to a company called Okko, which was owned by a sanctioned Russian entity. Because DBLB voluntarily reported the problem and later agreed to settle the case, its original penalty was reduced. The final £165,000 figure reflects both a voluntary disclosure discount and a settlement discount.
BACKGROUND
Okko is a Russian streaming service (think a Russian Netflix). Russia’s largest bank, Sberbank, owned Okko until May 2022, when it sold the company to another Russian firm, JSC New Opportunities. The timing matters: Sberbank had just been sanctioned by the UK in April 2022, and JSC New Opportunities was then sanctioned in late June 2022. The moment JSC New Opportunities was designated, Okko automatically became off-limits under UK sanctions — even though Okko itself was never directly listed — because it was wholly owned by a sanctioned party. DBLB’s customer (an Irish-incorporated subsidiary of a multinational firm) instructed DBLB to send the payments to Okko via the SWIFT network.
THE BREACHES
Two payments are at the heart of the case:
- Payment A (~£356,000): Processed on June 29, 2022 — the same day JSC New Opportunities was publicly designated as sanctioned. The funds actually left the account the following day.
- Payment B (~£279,000): Processed about a month later, on July 27, 2022.
DBLB did run sanctions screening on both payments, but its third-party screening vendor’s data didn’t include ownership information linking Okko to the newly sanctioned JSC New Opportunities. So no alert was triggered, and the payments went through.
A third payment (Payment C, ~£1.1 million) was made in April 2022 but was not treated as a breach, because it pre-dated the UK’s strict liability sanctions rules taking effect in June 2022.
CASE ASSESSMENT
OFSI weighed factors both for and against DBLB when deciding how serious the case was.
Factors that made things worse (aggravating):
- The combined payment value was significant — over £635,000.
- The money went directly to an entity owned by a sanctioned person, which effectively undermined the asset freeze the UK had put in place against Russia.
- Russia sanctions were a top UK foreign policy priority in 2022 and remain so.
- Although DBLB had conversations with its customer about Russia-related payment risks between March and May 2022, it never probed how the customer itself assessed sanctions ownership risks — specifically, that the customer relied on self-certification from its own customers rather than verifying ownership information independently. DBLB missed an opportunity to catch this gap.
- The earlier Payment C — though not itself penalized — showed DBLB had a pattern of processing payments to Okko and was relevant context.
Factors treated as neutral:
- DBLB’s use of a third-party screening vendor is understandable and common practice, but DBLB remained ultimately responsible for its own compliance. The vendor failed to capture publicly available information about Okko’s change of ownership, highlighting a known risk of relying on such providers — made worse by Russia withdrawing information from its public corporate registries in mid-2022.
- DBLB cooperated with OFSI’s investigation, but its responses were sometimes slow and thin on detail — below what OFSI expects from a large regulated institution.
Factors that helped DBLB (mitigating):
- There is no evidence DBLB knew, or had reason to suspect, that the payments were in breach of sanctions — no intent or prior knowledge.
- Payment A happened on the very day of the designation. The window for cancelling it was extremely narrow, and OFSI acknowledged this. It was only included in the penalty because Payment B followed a month later.
- DBLB voluntarily disclosed the breaches to OFSI in September 2022 — an important positive step.
- Since the breaches, DBLB has significantly overhauled its sanctions compliance program: better oversight of third-party vendors, broader Russia-related list coverage, stronger due diligence procedures, and a much more cautious approach to Russia-related payments overall.
Overall, OFSI rated the case as “serious” — but not the most serious category.
THE PENALTY CALCULATION
Step Amount Maximum statutory penalty £1,000,000 Baseline penalty set by OFSI £300,000 Discount applied (45% — for voluntary disclosure + settlement) –£135,000 Final penalty imposed £165,000 The 45% discount was slightly below the maximum 50% available, because while DBLB disclosed promptly, its initial disclosure lacked the detail OFSI expected from a firm of its size and sophistication.
COMPLIANCE LESSONS
OFSI used the notice to flag three takeaways for the broader financial industry:
- Don’t over-rely on third-party screening tools. They are valuable but have gaps — especially for ownership-and-control risks. Firms must understand those limitations and fill them with their own processes.
- Know your customer’s compliance practices. It’s not enough to screen transactions; firms should understand how their customers manage their own sanctions risks, especially where payments go to higher-risk jurisdictions like Russia.
- Voluntary disclosure pays — but only if it’s thorough. OFSI rewards early disclosure, but incomplete or vague reporting limits the discount available. Firms should take time to provide a full, detailed account when reporting suspected breaches.
NOTES ON SETTLEMENT
This was OFSI’s first (or among its first) cases resolved through its new formal settlement process, introduced in February 2026. Settlement allows both sides to reach a negotiated outcome more quickly than a full contested process. In exchange for a penalty discount and input into the published case summary, DBLB agreed to pay the penalty and waive its right to challenge OFSI’s decision. OFSI views early settlement as being in the public interest — it’s faster, cheaper, and gets compliance messages out sooner.
The full Penalty Notice:
I do wonder about the severity of the fine, and the relatively harsh assessment of these sanctions violations. Perhaps it’s because patterns of conduct are just smaller outside the US, so the penalties need to be harsher to get people’s attention.
I will admit, the penalty notice is much more detailed than it used to be. I will note that it took me a while to find that the 3rd party vendor did include ownership and control data, but was either slow or deficient in providing the needed info in this case.
I also wonder what would have happened had the 2nd payment been stopped. After all, the first payment was processed on the same day as the designation of the parent company (even if value date was the best day).
All in all, instructive – I will see if I need to tweak the fairly generic prompt for summarizing the penalty notice.
Leave a Reply