I don't care how many times the legacy finance crowd tells crypto to grow up and embrace personal accountability. The most instructive accountability story of the past decade isn't on-chain. It's Deutsche Bank's London courtroom campaign against four former employees over the Banca Monte dei Paschi di Siena disaster. Italian courts already made the bank pay for a complex derivatives structure tied to trades code-named 'Alexandria' and 'Santorini.' Now Deutsche Bank wants its own people to foot a €444 million portion of that bill. And it's using an obscure English legal test called Ivey to do it.
The 2017 break didn't teach me this. 2018 did, when the case landed in the High Court's Commercial Court and I sat down to map the connection between regulatory mood and civil litigation strategy. I was still wired from spending 48 hours tracing Parity wallet hashes during the 2017 multisig mess, and I saw something familiar: when a system fails, everyone fights over who signs the post-mortem. Deutsche Bank just moved that fight from the trading floor to the witness box.
Let's set the board. Italian prosecutors built a case around the world's oldest bank - BMPS - and the derivatives that allegedly helped it hide losses. Milan courts eventually ordered Deutsche Bank to pay about €444 million in connection with the affair. In 2021, Deutsche Bank paid roughly €70 million to Italian authorities to settle criminal exposure. Then it turned around in London and sued Michele Faissola, the former global head of rates; Ivor Dunbar, a former structured credit boss; Michele Foresti, a former head of structured rates; and a fourth ex-employee. The legal labels include fraudulent misrepresentation, conspiracy to injure, breach of the duty of fidelity, and unjust enrichment. Dense jargon. The business logic is simpler: the Milan judgment created a loss; someone has to carry it; Deutsche Bank does not want its balance sheet to be the only victim.
London is an odd place to litigate Italian derivatives. But for a global bank, it's the ideal workshop. English disclosure rules force parties to hand over internal documents that might never surface in Milan. Rome I and Rome II govern cross-border contract and tort claims, and the opening skirmishes will be about which law applies to which piece of the story. The deeper reason for the forum choice is simpler: Deutsche Bank wants a courtroom where its own institutional role receives less scrutiny than it would in Italy. In Milan, the bank was a defendant. In London, it gets to play the plaintiff.
The hinge of the case is Ivey v Genting Casinos (2017) UKSC 67. The underlying story was about a gambler who used edge-sorting to win at baccarat. The Supreme Court used it to rewrite the English law of dishonesty. Before Ivey, civil fraud claims required a two-part test: Was the conduct dishonest by ordinary standards, and did the defendant appreciate that it was dishonest? After Ivey, the subjective half collapsed. The fact-finder decides what the defendant actually knew and believed, then compares that with the standards of ordinary decent people. If the former bankers knew the trades carried hidden fair-value risks, and ordinary honest people would call that dishonest, the bank doesn't need to prove guilt or remorse. It only needs to prove awareness. That is why Deutsche Bank is in London. It is not trying to prove malice. It is trying to prove knowledge.
Timing matters too. The UK's Senior Managers and Certification Regime arrived in 2016, replacing the Approved Persons Regime. It wasn't a name change. The old system covered a narrow band of FCA-approved executives. The new one pushes accountability down to anyone whose role has material impact. The FCA has said repeatedly, including in its 2022-2027 strategy, that individual responsibility is an enforcement priority. Deutsche Bank's civil suit did not happen in a legal vacuum. It is the private-law echo of a public regulatory shift. Once regulators start hunting individuals, institutions learn to sue them too.
Now for the part I keep coming back to. In 2021 Deutsche Bank paid about €70 million to Italian authorities to settle criminal exposure connected to BMPS. That payment is a loaded weapon. Defense lawyers will frame it as an institutional admission: the bank recognized that its own managers, systems, or sign-offs produced the trades. Deutsche Bank will answer that settlement is not an admission. But in court, the payment creates a visual problem: the bank is both the victim demanding damages and the sinner seeking absolution. English equity has a phrase for this tension: clean hands. A plaintiff that has already paid to walk away from its own investigation cannot simply hand the invoice to its staff. The entire case has to survive that backdrop.
The other underappreciated battlefield is document disclosure. English commercial courts demand wide, searchable, and often painful discovery. Deutsche Bank will have to open its internal audit reports, board meeting minutes, compliance assessments, and trade-surveillance logs from the BMPS period. Defense counsel will look for one thing: evidence that senior managers or control functions knew about the trade structure before the losses crystallized. If the bank's monitoring systems were recording those derivatives in real time, where was the automatic alert? If an alert fired and nobody escalated it, that's operational failure. If no alert fired, that's a systems failure. Either way, the bank is litigating against its own architecture. This is where the case becomes a RegTech study. Crypto exchanges love to sell surveillance as a checkbox. This case shows what happens when surveillance output becomes courtroom evidence. A monitoring tool that does not trigger a documented, timelocked, and auditable response is not compliance. It is a liability.
The legal labels matter more than a casual reader thinks. In English employment law, a director owes a duty of fidelity, but a banker who made a bad call is not automatically a fraudster. Deutsche Bank needs to show that the four men did more than miscalculate; they allegedly structured trades to hide risk and then watched the consequences land on the bank's balance sheet. That's why the claim is conspiracy to injure, not negligence. Conspiracy carries a higher bar, but it also opens the door to judicial findings of dishonesty. Dishonesty is the trigger for insurance exclusions, bonus clawbacks, and reputational exile. The choice of legal theory is a choice of consequence.
The Italian judgment also won't simply travel across the Channel. English courts don't automatically enforce the compensation sections of foreign criminal rulings. The bank will plead the Milan outcome as evidence of loss, then let the London court decide whether that loss was legally caused by the former employees. The defense will respond that the Italian award included the bank's own contribution, plus Nomura's role, plus a decade of regulatory failure. That means the quantum phase of the case will be as contested as liability. The headline number is not a receipt; it's a starting point for allocation.
On the defense side, the quiet leverage is insurance. Standard directors-and-officers policies often exclude fraud and deliberate wrongdoing. If the court finds dishonesty, the former employees could lose coverage and have to fund a high-stakes London defense personally. That financial fear is structural, not incidental. Deutsche Bank knows it. Framing the claim as fraud rather than negligence is also a choice to weaponize the policy exclusion. The employees may be forced into settlement simply because their insurance stopped paying.
Here's the angle no press release will mention. I don't buy the 'good bank cleaning house' narrative. This lawsuit is a signaling strategy for regulators. Deutsche Bank enters the room with baggage: LIBOR, sanctions violations, 1MDB-related failures, Postbank, and a long list of expensive settlements. The FCA has made clear it wants to hold individuals accountable. By suing its own former employees, the bank gets to say: 'We are doing your job for you.' In enforcement terms, that is a mitigating factor. In narrative terms, it lets the bank call itself the victim of a few bad apples. This is accountability theatre with a balance-sheet purpose.
The settlements that followed make that reading even harder to avoid. According to public reporting, at least some of the former employees later reached settlement, reportedly covering their own legal costs. I don't think this case is about the €444 million. It's about precedent. If Deutsche Bank had an ironclad fraud case, it would have pushed for a public judgment and used the ruling as a deterrent. A settlement gives it a scalp without letting the court test its weak spots, including the bank's own knowledge.
For crypto, the lesson is not to laugh. DeFi pretends to be jurisdictionless, but the law is already learning to map code to humans. The same Ivey framework, or something like it, can be applied to a pseudonymous protocol contributor if the connective tissue exists: a company entity, an employment relationship, or a wallet that can be tied to a real person. The speed with which TradFi converts institutional losses into personal liability is a preview. The 2017 break didn't settle that question. Deutsche Bank is drafting the first version of the answer.
So what do you watch next? Three rooms matter. The disclosure hearing, because it decides how much of Deutsche Bank's internal governance becomes public. The insurance arbitration, because it decides whether the former employees can afford to fight. And the FCA's enforcement docket, because the regulator may read this litigation as an invitation to open a parallel file. The question isn't whether the code is law. It's which court gets to decide who wrote the losing trade. While markets chop sideways, the legal infrastructure is consolidating. Position accordingly.