The Smallest Branch of a Danish Bank Moved €230 Billion

In 2013, a British banker in Tallinn opened a file on one of his branch's clients.

The company was called Lantana Trade LLP. It was registered in the United Kingdom. According to UK Companies House, the official government register, Lantana was dormant. A dormant company is one that does no business, has no transactions, and files accounts confirming it did nothing at all that year.

This dormant company was moving 20 million rubles per day through his branch.

The branch had set Lantana a transfer limit. The limit was 90 million euros per week. For a company with no history, no employees, and no discernible business activity, filing paperwork in London swearing it was doing nothing.

The banker's name was Howard Wilkinson. He was head of markets for the Baltics at Danske Bank, the largest and most respectable financial institution in Denmark. He wrote to the executive board in Copenhagen. He wrote four times.

He told them the branch appeared to be laundering money. He told them the clients had ties to the family of Vladimir Putin and to the Russian security service, the FSB.

Copenhagen did not respond for five years.

By then, roughly 230 billion dollars of suspicious money had passed through a single office in a country of 1.3 million people.

Here is the full file.

Danske Bank acquired its Estonian branch almost by accident. In 2007, it bought Finland's Sampo Bank, and the Estonian operation came with the package, the way a garage comes with a house.

It was one branch. One office in Tallinn. Danske Bank had thousands of employees across Northern Europe, a gleaming headquarters in central Copenhagen, and a reputation built over more than a century. The Estonian branch was a rounding error on the org chart.

It also came with something else. A division serving more than 3,000 foreign clients, primarily Russian. This was called the non-resident portfolio, and it was, from the first day, the single most profitable thing in the building.

Here is the detail that explains everything that followed. After the acquisition, the Estonian branch kept its own IT system. Its documents were written in Estonian and Russian. Danske Bank never integrated it. Copenhagen ran its anti-money laundering systems on its own platform, in Danish and English, and the Estonian branch ran on a separate system in languages the compliance department could not read.

For eight years, the branch was, technologically and linguistically, invisible to its own head office. Not hidden. Invisible. Nobody had to conceal anything, because nobody upstairs could see the screen.

And what the branch did, all day, every day, was convert Russian rubles into American dollars.

Wilkinson described the business plainly. Customers would call every morning wanting to sell 20 million rubles and buy dollars. The branch quoted a price. They got the dollars. That was, in his words, the large part of what the branch did.

Nothing about that transaction is illegal. Banks convert currency. The obligation, the only obligation that matters, is that the bank checks where the money came from and where it is going.

That is the part that was not happening.

This is not a story about a scheme nobody noticed. It is a story about a scheme almost everybody noticed.

2007. The Russian Central Bank warns the Danish Financial Supervisory Authority that foreign customers at the Estonian branch are making suspicious transfers totaling billions of rubles every month, and that this could involve tax evasion or money laundering. The warning comes from Moscow. About money leaving Russia. To a Danish regulator.

2009. Sergei Magnitsky, the Russian lawyer investigating a massive tax fraud, identifies Danske Bank's Estonian branch as a central hub for laundering. He dies in a Russian prison that November, one week before authorities were required to release him.

2012. The Estonian Financial Supervisory Authority publishes a critical report on the branch's activities.

2013 and 2014. Wilkinson writes his four reports to Copenhagen. The bank forms a task force. The task force does not decide to close the accounts.

2015. Deutsche Bank terminates its correspondent relationship with the Estonian branch over money laundering suspicions. The Estonian regulator returns, notes that nothing has been done, and demands immediate action.

Eight years of warnings. From the Russian central bank. From a murdered lawyer. From two national regulators. From an employee who put it in writing four times.

The business continued.

When Wilkinson raised his concerns, a senior executive told him something that deserves to be carved into the wall of every banking school on earth. He was told that the bank is not the police, and that the bank has no obligation to report false client accounts to the authorities.

Wilkinson later described what happened after he filed his reports. People stopped calling round to say hello. He resigned and took his family back to Britain.

The number reported for the whole scheme is 230 billion dollars of suspicious money, over roughly eight years, through one branch.

Sit with the geometry. Estonia has a population of 1.3 million people. Its entire annual economic output is roughly 40 billion dollars. A single bank branch in Tallinn processed nearly six times the country's yearly GDP in suspicious transactions.

The money came from Estonia, Russia, Latvia, Cyprus, the UK, and more than 150 other countries. It went to Estonia, Latvia, China, Switzerland, Turkey, and everywhere else.

But rubles are not useful. The entire point of the operation was to turn them into dollars, and dollars only exist, in any meaningful sense, inside the American banking system. Which means the money had to go to New York.

It did. The scheme moved rubles out of Russia, converted them to dollars at the Estonian branch, and then moved the dollars to New York with the assistance of three correspondent banks: Bank of America, JPMorgan, and Deutsche Bank.

Danske Bank later pleaded guilty to lying to those American banks about its Estonian customers and its controls, in order to keep the dollar accounts open. It processed 160 billion dollars for its non-resident customers through them.

The three largest names in correspondent banking were the pipe. Danske lied about what was flowing through it. And the money arrived, clean, in America.

Then there is the client list. One company with an account at the branch chartered a plane. The plane was used in a failed attempt to smuggle 35 metric tonnes of weapons from North Korea to Iran. The company was controlled by a Ukrainian arms smuggler.

That is what was in the pipe alongside the rubles.

In September 2018, Danske Bank held a press conference and acknowledged that its tiny Estonian branch had been the gateway for what may be the largest money laundering case in history. The share price halved that year. The branch was closed and Estonia expelled the bank.

In December 2022, Danske Bank pleaded guilty in the United States to one count of conspiracy to commit bank fraud, and agreed to forfeit 2.059 billion dollars. The SEC settled separately for 413 million. A Danish court imposed roughly 500 million more.

Roughly 2 billion dollars in total, against 230 billion in suspicious flows. Under one percent.

Now the individuals.

The CEO, Thomas Borgen, resigned in 2018 and was charged in 2019 with neglecting his responsibilities. The former finance director was charged alongside him. In April 2021, all charges against Borgen, the finance director, and the executive responsible for international operations were dropped. In November 2022, Borgen was cleared in a civil suit as well. A Danish court ruled he had been unaware of the money laundering.

The chief executive of the bank at the center of possibly the largest money laundering scandal in history was found to have not known about it, and that finding ended his legal exposure.

Some people did go to prison. In February 2024, a Danish court sentenced a Danish-Russian woman to nine years for laundering roughly 26 billion kroner, and a Lithuanian man to seven years for complicity in laundering 29 billion.

Facilitators. Intermediaries. The people who moved the money through the pipe, not the people who owned the pipe. Ten former employees of the Tallinn branch were arrested in 2018. None of them were in Copenhagen.

And then there is Aivar Rehe. He ran the Estonian branch from 2007 to 2015, the entire period. He was a key witness in the criminal investigation. On the 25th of September 2019, after being missing for two days, Estonian police found his body during a search operation. His death was reported as suicide.

The man who ran the branch for the entire eight years never testified.

Danske is not an outlier. It is an unusually well-documented example of how the system actually functions, and it teaches three things.

Compliance failure is a profit center until the day it is a fine. The Estonian branch was the most profitable unit in the bank precisely because it did not ask questions. The absence of controls was not a bug that reduced revenue. It was the product that generated it. Every year Copenhagen chose not to integrate the systems, the branch made more money. The economics of not looking were positive for eight consecutive years, and the bill, when it finally arrived, came to less than one percent of what had flowed through.

The whistleblower is the only functioning safety mechanism, and the system is built to grind him down. Every automated control, every regulator, every audit, every correspondent bank's due diligence, all of it failed for eight years. What eventually stopped the scheme was one mid-level employee who noticed a dormant company moving 20 million rubles a day and refused to let it go. He was ignored, isolated, and pushed out, and his identity was later leaked without his consent, in a case involving Russian money and the FSB. Ask why it is always the whistleblower. Then notice what the system does to him afterward.

Liability evaporates upward. The people who went to prison moved the money. The people who ran the institution that moved the money were charged and then cleared, because the court accepted that they did not know. Not knowing is not a failure in this system. It is a defense. And the architecture that made it possible to not know, the un-integrated IT system, the untranslated documents, the branch nobody looked at, was itself the shield. Build a structure where the top cannot see the bottom, and the top cannot be held responsible for the bottom. That is not an accident of corporate design. It is the function of it.

$230,000,000,000. The suspicious money that flowed through one branch in a country of 1.3 million people.

$2,000,000,000. The total penalties paid.

The fine represents less than one percent of what moved.

Nine years in prison for the woman who helped move the money. Charges dropped for the men who ran the bank that moved it. And the man who ran the branch for all eight years was found dead in a search operation, three weeks before he was due to be a witness.

That is not a conspiracy theory. That is the guilty plea.

The Dark Money Letter is published every Wednesday. → thedarkmoneyletter.com

Sources