Swedbank Baltic Scandal
What went wrong at Swedbank, and how did the investigations end?
In February 2019 Swedish TV alleged that Swedbank's Baltic customers had made suspicious transfers. The Swedish regulator found serious weaknesses in how the bank managed money laundering risk in Estonia, Latvia and Lithuania and, in March 2020, fined it SEK 4 billion. An Estonian criminal case closed in 2024 without charges. US probes by the SEC, DOJ and New York's financial regulator ended between 2025 and 2026, the last with a US$50 million penalty for withholding information.
As of October 2026: As of October 2026 Swedbank says all investigations into its historical shortcomings have been concluded (announcement of 16 July 2026). The SEC and DOJ closures and the Supreme Court acquittal of the former CEO (April 2026) were confirmed through secondary reports of the bank's announcements and court rulings, and the date of the Supreme Court ruling differs between sources, so only the month is given. Civil claims by investors were not reviewed.
What happened?
Swedbank is a Swedish bank with large retail operations in Sweden, Estonia, Latvia and Lithuania. On 20 February 2019, Sweden’s public broadcaster SVT began a series of programs alleging that customers of its Baltic subsidiaries had made suspicious transactions that pointed to money laundering. The reports followed earlier media coverage in late 2018 of Baltic money laundering scandals, and Swedish and Estonian regulators opened investigations.
The bank commissioned the law firm Clifford Chance to look into the claims. Its report, dated 23 March 2020 and based on over 30 billion transactions, described a bank that from before 2007 until a 2016 decision to de-risk “actively pursued” high-risk non-resident customers in Estonia and Latvia as a business strategy. Days earlier, on 19 March 2020, Sweden’s regulator had announced a SEK 4 billion fine.
Which techniques did it use?
This is not a case where a scheme was proven in court. The record shows the conditions that let one operate: customers that were non-resident companies registered abroad, often through shell companies and foreign trusts, using accounts at a bank with weak checks on who really owned them.
Clifford Chance found that the committee approving these customers in Estonia approved them without complete documents on the ultimate beneficial owners, proof of where the money came from, or the business reason for the account. Some staff knew the named owners were not the real owners, and some ownership details were kept in hard copy in a safe rather than in the bank’s systems. Estonian prosecutors later said the evidence showed the bank deliberately concealed the true owners of 74 high-risk customers.
How was it found?
Journalists found it first. The SVT programs in February 2019 pushed regulators to act, but the regulators were already looking: FI had opened a review of the bank’s Swedish operations in November 2018 and its Baltic governance probe in April 2019, working with Estonian, Latvian and Lithuanian supervisors.
A second route was the leak of law firm records. New York’s regulator later said it reviewed banks connected to the Panama Papers leak of Mossack Fonseca records in 2016, and found Swedbank had not been open about its own connections to that firm when asked.
What was the outcome?
- Sweden, March 2020. FI issued a warning and a SEK 4 billion fine. It said the bank had been aware of suspected laundering, had not acted on warnings, and had withheld documents and information from the regulator. Its Swedish operations also fell short on customer risk classification and transaction monitoring.
- Estonia, March 2020. Finantsinspektsioon ordered the Estonian subsidiary to fix its AML systems, while a criminal case continued.
- Estonia, February 2024. The State Prosecutor’s Office closed its case without charges. It could not prove the underlying crime, including an alleged Russian fraud of about four billion rubles, and said evidence from Russia could not be verified because cooperation with Russia ended after 2022.
- United States, 2025 to 2026. The SEC closed its probe without action on 6 September 2025, and the DOJ followed on 14 January 2026. On 16 July 2026, the New York regulator announced a US$50 million penalty for withholding information on two occasions, saying the bank left its Baltic subsidiaries out of its answers. Swedbank said this ended all investigations.
- Former CEO. Birgitte Bonnesen was convicted in September 2024 over statements to the media and acquitted by the Supreme Court in April 2026.
What were the warning signs?
- A customer strategy built on high-risk business. The report found two units sought high-risk non-resident customers deliberately.
- Missing ownership paperwork. Customers were accepted without complete owner details or proof of the source of funds.
- Customers rejected elsewhere. The Estonian unit took on some customers that another Estonian bank had off-boarded in 2015 because of excessive laundering risk.
- Alert patterns. Across the three Baltic units, about €17.8 billion in incoming and €18.9 billion in outgoing payments from March 2014 to March 2019 triggered three or more of 21 detection scenarios. The report stressed that alerts do not prove crime, and that such tests usually produce many false positives. The value of such flows fell over time in Estonia and Latvia.
- Reports that said “under control”. Internal audit repeatedly flagged serious control gaps, but the message reaching the board was that problems were under control, and the bank had no group-level AML risk appetite statement until 2017.
- Thin answers to regulators. The report found the bank was not always open with supervisors and sometimes read requests narrowly.
What changed afterwards?
The bank de-risked its Baltic customer base, added resources and reviewed its governance. The 2020 report assessed the conduct of three former CEOs and the board. For supervisors, the case showed a group-wide failure: FI fined the parent bank for how it managed its subsidiaries, not only the local unit.
It also left a puzzle. Regulators proved weak controls, and the Estonian prosecutor said the evidence showed irregularities that suggested laundering, yet no court has found that criminal money passed through the accounts. That gap between failed controls and proven crime is also seen in the Danske Bank case. See the detection overview and know your customer for what banks are expected to check.
Frequently asked questions
Did Swedbank launder money?
No court has found that. The Clifford Chance report commissioned by the bank did not conclude it laundered money or processed proceeds of crime, and Estonia's prosecutors closed their case because they could not prove the underlying crime. What authorities did find was that controls were weak: FI fined the bank for failing to manage the risk and for withholding information from regulators.
How is this different from Danske Bank?
Both cases involved Baltic non-resident customers and both were driven by media reports. Danske's Estonian branch was found to have handled about €200 billion of flows and ended in a US guilty plea, while Swedbank's case ended with a Swedish regulatory fine, closed US probes and a New York penalty for non-disclosure. The Swedbank record does not show a US criminal resolution.
What happened to the former CEO?
Birgitte Bonnesen, CEO from 2016 to 2019, was prosecuted for gross swindling over statements made to the media in 2018. A district court acquitted her, the Svea Court of Appeal convicted her in September 2024 and imposed 15 months in prison, and in April 2026 the Supreme Court acquitted her, citing constitutional protection for interview answers. The case was about her public statements, not about her taking part in laundering.
What remains unresolved?
The key open question is how much of the money that moved through the Baltic accounts was in fact criminal. Prosecutors in Estonia could not establish that, partly because evidence from Russia could not be verified after 2022. The bank, regulators and prosecutors have all closed their files, so the answer may never be known.
Techniques used in this case
- Shell companies and nominees · Companies with no real operations hold accounts and assets while nominee directors and stacked ownership across jurisdictions hide the true beneficial owner.
- Correspondent banking and wire layering · Small or weakly supervised banks reach the dollar system through accounts at big correspondent banks, and rapid wires through many accounts and countries bury the origin of the money.
Related cases
- Danske Bank Estonia · About €200 billion flowed through the Estonian branch of Denmark's biggest bank between 2007 and 2015, much of it suspicious non-resident money hidden behind UK shell companies.
- Panama Papers · A 2016 leak of 11.5 million files from Mossack Fonseca exposed 214,488 offshore entities and showed how shell companies hide who owns what.
- HSBC and the Sinaloa cartel · Weak controls let Mexican and Colombian cartels move at least $881 million in drug money through HSBC, which paid a then-record $1.92 billion in 2012 to defer prosecution.
Glossary
Sources
- Swedbank receives a warning and an administrative fine of SEK 4 billion (Finansinspektionen (Sweden), March 19, 2020).
- Swedbank fined for serious deficiencies in its measures to combat money laundering (Finantsinspektsioon (Estonia), March 19, 2020).
- Report of Investigation on Swedbank AB (publ) (Clifford Chance US LLP for Swedbank (copy hosted by Ballard Spahr), March 23, 2020).
- State Prosecutor's Office closes Swedbank money laundering investigation (ERR News (Estonian public broadcaster), February 29, 2024).
- SEC closes investigation of Swedbank (Swedbank AB, September 6, 2025).
- Swedbank DOJ Probe Closed Without Enforcement; DFS Investigation Still Ongoing (RTTNews via Nasdaq, January 14, 2026).
- New York State Department of Financial Services Secures $50 Million Penalty from Swedbank for Withholding Information from Investigators (New York State Department of Financial Services, July 16, 2026).
- Settlement with DFS: all investigations of historical shortcomings concluded (Swedbank AB (regulatory announcement), July 16, 2026).
- Former Swedbank CEO convicted of gross swindling by the Svea Court of Appeal (DLA Piper Sweden, September 2024).