Germany's financial regulator, BaFin, has fined Deutsche Bank 8 million euros (about $8.9 million) over failures linked to the 2023 migration of Postbank customers onto the lender's shared IT platform, a project that left many clients locked out of their accounts for weeks, according to Reuters.

The sum is small for a bank of Deutsche Bank's size. The case still matters to investors and bank executives in Asia, where lenders are merging platforms, moving customers onto new core banking systems and absorbing acquired franchises. BaFin's decision shows a supervisor attaching a cash penalty not to the outage itself but to how the bank dealt with the customers it affected: the complaints it could not answer and the orders it did not carry out on time.

What BaFin found at Deutsche Bank

BaFin announced the fine on Thursday, Nov. 12, and it falls into two parts, according to the Berliner Zeitung, which drew on the German news agency dpa. The larger, 5.5 million euros, relates to slow handling of customer complaints. The remaining 2.5 million euros covers transfers of securities accounts that were not executed without delay.

BaFin said Deutsche Bank had failed to set up adequate organizational arrangements to deal promptly with the rise in complaints that followed the migration, Reuters reported. On the securities side, the regulator said the bank had "failed to execute orders for the transfer of securities accounts without delay."

Deutsche Bank said it had thoroughly reviewed and resolved the problems from the Postbank migration and has continuously improved its processes since then. It said it accepts BaFin's decision, the Berliner Zeitung reported. The migration ran in four waves starting at Easter 2022 and covered about 12 million Postbank customers and 7 million Deutsche Bank customers in Germany; the wave around the 2022/2023 New Year produced the most complaints, including problems with securities accounts.

The Postbank migration and its fallout

Deutsche Bank began acquiring Postbank in 2008 and spent years trying to complete the integration, Reuters noted. The final step, moving Postbank's customer data onto Deutsche Bank's IT systems in 2023, went badly. Customers were shut out of their accounts and could not reach call centers, setting off a wave of complaints.

BaFin's president at the time called the problems "unacceptable." It appointed a special monitor at the bank and published figures showing the jump in complaints, according to Reuters. Chief Executive Christian Sewing publicly admitted mistakes and assigned hundreds of extra staff to clear the backlog. Several management board members, Sewing among them, accepted small cuts to their bonuses.

Consumer advocates said the fine does little for those who were affected. Sascha Straub, a consumer protection official in Bavaria, told Reuters that a fine does not help customers whose accounts were blocked for weeks. A Bavarian consumer group has called for a scheme, modeled on airline passenger compensation rules, under which banks would compensate customers for service disruptions.

Why supervisors are watching IT projects

For bank investors, the Deutsche Bank case is a reminder that the cost of a failed technology migration rarely ends with the repair bill. Extra staff, supervisory monitors, management pay cuts and, eventually, fines all followed the 2023 problems. The reputational damage to a retail brand with millions of customers is harder to measure.

The same issue is live for lenders across Asia. Banks in the region are investing in new core systems and digital channels and integrating acquired businesses, and each migration carries the same risk of locked accounts and overflowing call centers. Asian enforcement has run on other tracks lately: South Korea's competition authority fined primary dealers over bond bid-rigging, and Japan's Financial Services Agency inspected Sony Financial and Prudential's Japan unit.

The BaFin decision also shows where a supervisor can draw a hard line. Complaint handling and the timely execution of customer orders are areas with clear rules and measurable deadlines. Those are easier to enforce than broad judgments about whether an IT project was well managed, and they give regulators a basis for penalties even when the underlying failure has been fixed.

The next test for the lender's retail operations will come with its fourth-quarter results, when investors will look for any further costs linked to Postbank and for evidence that complaint volumes have stayed down.