The Financial Conduct Authority (FCA) has today fined Commerzbank AG (London Branch) £37,805,400 for failing to put adequate anti-money laundering (AML) systems and controls in place between October 2012 and September 2017. Commerzbank London was aware of these weaknesses and failed to take reasonable and effective steps to fix them despite the FCA raising specific concerns about them in 2012, 2015 and 2017. These weaknesses also persisted during a period when the FCA was publishing guidance on steps firms could take to reduce financial crime risk as well as taking enforcement action against a number of firms in relation to AML controls. Despite these clear warnings, the failures continued.
Firms operating in the UK, including branches of overseas firms, must take reasonable care to organise and control their affairs responsibly and effectively, and to establish and maintain an effective risk-based AML control framework. FCA Executive Director of Enforcement and Market Oversight, Mark Steward, said: “Commerzbank London’s failings over several years created a significant risk that financial and other crime might be undetected. Firms should recognise that AML controls are vitally important to the integrity of the UK financial system.”
The FCA’s investigation identified failings in a number of areas, including Commerzbank London’s failure to:
- Conduct timely periodic due diligence on its clients, which resulted in a significant number of existing clients not being subject to timely know-your-client checks. By 1 March 2017, 1,772 clients were overdue updated due diligence checks. A material number of these clients were able to continue to transact with the bank’s London branch due to the implementation of an exceptions process, which was not adequately controlled or overseen and which became ‘out of control’ by the end of 2016;
- Address long-standing weaknesses in its automated tool for monitoring money laundering risk on transactions for clients. For example, in 2015 Commerzbank London identified that 40 high-risk countries were missing, and 1,110 high-risk clients had not been added, to the transaction monitoring tool; and
- Have adequate policies and procedures in place when undertaking customer due diligence on clients.
Commerzbank therefore breached Principle 3 of the FCA’s Principles for Businesses, which requires firms to have adequate risk management systems in place. Commerzbank London has undertaken a significant remediation exercise to bring its AML controls into compliance. A Skilled Person has been testing the effectiveness of these enhancements, and their work is now complete.
It has also conducted an extensive look-back exercise to identify suspicious transactions during the period in question. Commerzbank London also voluntarily implemented a wide-ranging business restriction, which included temporarily stopping taking on new high-risk customers and suspending all new trade finance business activities. Commerzbank London agreed to resolve the matter at an early stage of the investigation and therefore qualified for a 30% discount. Without the discount, the financial penalty would have been £54,007,800.
Source: the Financial Conduct Authority
