• BaFin has issued a binding AML enforcement order requiring NordLB to remediate significant compliance failures
• Supervisors identified backlogs in customer data updates and deficiencies in customer due diligence processes
• NordLB said remediation is under way and that significant progress has already been made
• The action follows a similar AML enforcement order issued against Helaba
• BaFin recently established a dedicated Anti-Financial-Crime division with additional supervisory resources
• The regulator's tougher stance comes ahead of new EU anti-money laundering rules taking effect in 2027 and AMLA supervision beginning in 2028
• Recent enforcement actions suggest BaFin is applying increasingly robust scrutiny across Germany's banking sector



Germany's Federal Financial Supervisory Authority has intensified its crackdown on anti-money laundering shortcomings by issuing a binding enforcement order against Norddeutsche Landesbank (NordLB), marking another high-profile intervention as the regulator strengthens oversight of the country's banking sector.

The order requires the Hanover-based state-owned lender to address significant weaknesses in its anti-money laundering framework after supervisors identified a substantial backlog in updating customer records and broader deficiencies in customer due diligence procedures.

BaFin said the failures undermine the bank's ability to effectively monitor customer relationships and detect suspicious financial activity, both of which are fundamental obligations under Germany's Money Laundering Act.

Under the enforcement action, which became legally binding on June 14 and was publicly disclosed this week, NordLB must submit and implement a formal remediation plan to bring customer records into compliance and provide regular progress reports to BaFin.

The regulator has not disclosed a timetable for completion or outlined what additional supervisory measures could follow should remediation targets not be met.

NordLB acknowledged the order, saying it has maintained "close, constructive and solution-oriented communication" with BaFin throughout the supervisory process.

The bank added that a remediation programme is already under way and that significant progress has been made in strengthening its compliance framework.

The timing is notable. NordLB recently completed a lengthy restructuring following its state-backed rescue in 2019 and reported earnings before tax of €356 million for 2024, a 30% increase on the previous year.

As one of Germany's largest Landesbanks and the central clearing institution for Sparkassen savings banks across several federal states, its compliance standards carry importance well beyond its own balance sheet.

The action also forms part of what appears to be a broader change in BaFin's supervisory approach.

Only weeks earlier, the regulator issued a separate binding order against Landesbank Hessen-Thüringen (Helaba), requiring improvements to transaction monitoring systems after identifying weaknesses in automated surveillance and suspicious activity detection.

The near-simultaneous interventions against two major state-owned banks suggest BaFin is applying a more assertive enforcement strategy across Germany's publicly owned banking sector.

That shift has been reinforced through organisational reform. On July 1, BaFin launched a dedicated Anti-Financial-Crime division, consolidating responsibility for anti-money laundering, counter-terrorist financing and unauthorised financial business under a single specialist supervisory unit.

Around 30 additional positions have been added to support the enhanced supervisory programme. BaFin President Mark Branson said the reorganisation reflects a decision to shift resources "to areas where risks are increasing."

Legal experts believe the structural changes are already influencing supervisory outcomes.

According to analysis referenced in the source material, the new organisation mirrors the European Central Bank's specialist supervisory model, allowing BaFin to develop greater technical expertise and pursue more consistent enforcement across institutions.

The regulator has also demonstrated its willingness to impose increasingly severe sanctions.

Last year, BaFin issued a record €45 million anti-money laundering fine against J.P. Morgan SE over delayed suspicious transaction reporting, while separate enforcement action has also been taken against Cronbank AG.

Together with the NordLB and Helaba cases, the actions underline a supervisory environment in which procedural weaknesses are increasingly treated as significant regulatory failures rather than routine compliance deficiencies.

The tougher approach comes as European anti-money laundering rules continue to evolve.

The EU's Anti-Money Laundering Regulation will apply directly across member states from July 2027, while the new Anti-Money Laundering Authority will begin directly supervising selected high-risk financial institutions from 2028. Against that backdrop,

BaFin's recent enforcement activity signals that German supervisors expect institutions to demonstrate robust customer due diligence, accurate customer data and effective financial crime controls well before the new European framework takes full effect.