Danske Bank Estonia

As of August 2026: Danske Bank's US guilty plea was entered in December 2022, with court sentencing formalizing the plea in early January 2023. The September 2024 French settlement was described by the bank as the final investigation by any authority into the Estonian non-resident portfolio; no new enforcement has been reported since.

Also known as: Danske Bank scandal · Danske Estonia.

What happened?

Between 2007 and 2015, the Estonian branch of Danske Bank, Denmark’s largest bank, ran what it called a non-resident portfolio: accounts for customers who did not live in Estonia and did no real business there. Many were in Russia and other former Soviet states. Through those accounts flowed approximately €200 billion, a figure established by the bank’s own internal investigation, published in September 2018. A large share of the payments was deemed suspicious.

The scale is the story. Estonia is a small country, and this was one branch of a foreign bank. Yet for eight years it processed cross-border payments on a scale that would be notable for a major international bank: money arriving from the east, resting briefly in accounts held by opaque foreign entities, and leaving again in dollars and euros for banks around the world. Because so much of the traffic was in US dollars, the payments cleared through correspondent banks in the United States, the detail that would eventually give American prosecutors jurisdiction over the whole affair.

Which techniques did it use?

The non-resident portfolio ran on shell companies. Reporting based on the leaked bank records (including the ICIJ’s FinCEN Files investigation) showed that many of the accounts were held not by people but by UK-registered limited liability partnerships (LLPs) and limited partnerships (LPs), corporate wrappers with no staff, no premises, and no purpose other than to conceal who really owned the money. Formation agents sold these vehicles in bulk; the ICIJ described the “factories” that churned them out. A UK registration gave each entity a respectable address in a reputable jurisdiction, while the true beneficial owners, the people whose money it actually was, stayed invisible to the bank’s know-your-customer checks, such as they were.

The second ingredient was access to the world’s payment system. The Estonian branch held correspondent banking relationships that let its customers send dollars anywhere. In effect, thousands of anonymous shell customers were riding one small branch’s connection to the global banking network, a structure that concentrates enormous risk in a single node, similar to the problem regulators call nesting. Once a payment left Tallinn dressed in the name of a UK partnership, the receiving bank saw a European bank sending money for a UK-registered customer. Every hop in the layering chain looked ordinary; only the aggregate picture was alarming.

How was it found?

From the inside, first. Howard Wilkinson, the British head of Danske’s Baltic markets and trading unit from 2007 to 2014, made the first of four internal complaints in January 2014 after finding that customers’ filings did not match reality. The bank shut down the non-resident portfolio in 2015, but the affair stayed largely internal until press reporting and mounting regulatory pressure forced it into the open. In September 2018, Danske published the investigation it had commissioned, putting the €200 billion figure on the record, and the scandal broke worldwide. That November, Wilkinson testified before the Danish Parliament and the European Parliament’s TAX3 committee; in 2020 he was a co-winner of the Allard Prize for his disclosures.

The case shows both the power and the limits of internal warning systems. The alarm was raised early, by a senior insider, through proper channels, and the flows continued for another year and a half. What ended them was the combination of whistleblowing, journalism, and regulators comparing what the bank said with what its own records showed.

What was the outcome?

On December 13, 2022, Danske Bank A/S pleaded guilty in the United States to one count of conspiracy to commit bank fraud. The charge was precise: Danske had defrauded its US correspondent banks by misleading them about the state of anti-money-laundering controls at the Estonian branch, thereby keeping its access to dollar clearing. The bank agreed to criminal forfeiture of $2.059 billion. In a coordinated resolution, the SEC settled fraud charges for $413 million over misleading investors about the Estonian AML program, and Danish authorities resolved their case in parallel, with the SEC and Danish amounts credited within an aggregate of roughly US$2.06 billion payable to US and Danish authorities. A US court formalized the plea at sentencing in early January 2023.

The long tail ended in September 2024, when Danske paid €6.33 million to settle the investigation opened by France’s National Financial Prosecutor in 2019, described by the bank as the final investigation by any authority related to the Estonian non-resident portfolio.

What changed afterwards?

Estonia acted first. In February 2019 the Estonian financial regulator, Finantsinspektsioon, issued a precept requiring Danske to cease operating in the country, and the bank exited Estonia on October 1, 2019, a rare case of a supervisor expelling a bank outright.

For the wider system, Danske Estonia became the reference case for two failure modes. First, that anti-money-laundering controls are only as strong as the weakest branch with access to the group’s correspondent accounts: a small Baltic outpost exposed the entire bank to a multi-billion-dollar US criminal resolution. Second, that anonymous corporate vehicles are the load-bearing wall of large-scale laundering: the scheme needed nothing more exotic than cheap UK partnerships with hidden owners. The episode sharpened scrutiny of non-resident banking across the Baltics and fed the broader push, visible in the detection world since, to identify beneficial owners before an account ever opens rather than reconstructing them after €200 billion has passed through.

▶ Play video

First published August 28, 2026 · Last updated August 28, 2026 · Legal statuses current as of August 2026