Deutsche Bank’s internal investigation revealed that a breach of its four‑eye sign‑off rule allowed a former manager to misappropriate more than €600,000 from wealthy client accounts between 2023 and 2025.
Four‑eye rule not applied
Bank policy requires a mandatory four‑eye approval for any transfer exceeding €2,500. Handelsblatt reported that “Die Deutsche Bank eigentlich schon bei Transaktionen über 2500 Euro ein Vieraugenprinzip vor.” The internal investigations head testified that this requirement was not enforced in the case of former team‑lead Sven R.
According to the same source, “Wir haben festgestellt, dass die Vorgaben nicht eingehalten wurden.” The investigators said the bank’s compliance function failed to monitor the sign‑off process, allowing the transfers to be processed without the required secondary review.
Scope of the theft
Handelsblatt quoted the investigation’s findings: “Der ehemalige Teamleiter Sven R. hatte zwischen 2023 und 2025 insgesamt über 600.000 Euro von den Konten vermögender Kunden abgebucht und damit an der Börse spekuliert.” The amount misappropriated is therefore recorded as €600,000 for the 2023‑2025 period.
Bank staff also deviated from standard client‑contact procedures. The report notes, “Anders als vorgegeben riefen die Kollegen des Bankers die betroffenen Kunden jedoch nicht an, um sich rückzuversichern. Stattdessen gaben sie die Überweisungen einfach frei.” This omission meant the clients never received a verification call before the funds left their accounts.
Bank background and governance
Deutsche Bank AG, headquartered in Frankfurt, is listed on the NYSE under ticker DB. The bank employs roughly 97,535 people and was founded on 10 March 1870. Christian Sewing serves as chief executive, a fact confirmed in the bank’s latest SEC filing (CIK 1159508).
The institution’s fiscal year ends on 31 December. While the bank’s public filings disclose its size and governance, they do not contain details on the internal control breach disclosed in September 2026.
Timeline of events
- 2023 – Sven R. begins unauthorized withdrawals from affluent client accounts.
- 2025 – The series of withdrawals ends, with total losses exceeding €600,000.
- 10 Sept 2026 – The head of Deutsche Bank’s internal investigations testifies at the Landgericht Frankfurt, confirming the four‑eye rule breach and the amount stolen.
The testimony was given on the second day of the trial, which the article describes as “weitere brisante Details” (further explosive details) becoming public.
What remains unknown
Deutsche Bank has not disclosed how many individual clients were affected, nor the exact dates of each unauthorized transfer. The bank also has not announced any remedial actions or changes to its internal approval processes beyond the investigators’ findings.
Regulators have not yet commented on whether the breach will trigger supervisory action. The trial continues, and further details may emerge as the court examines the extent of the compliance failures.
For investors, the incident underscores a gap in operational risk controls at a major European bank. While the €600,000 loss is modest relative to Deutsche Bank’s balance sheet, the breach raises questions about the effectiveness of internal safeguards for client assets.