Deutsche Bank is suing four of its own former employees in London's Commercial Court. The claims: fraudulent conspiracy, dishonest assistance, and breach of the duty of fidelity. The defendants: Michele Faissola, once the bank's global head of rates trading. Ivor Dunbar, former head of the OMB desk. Michele Foresti, former head of structured rates trading. A fourth individual, named in filings that have been grinding through the UK court system for years.
Read that first sentence twice. A global systemically important bank is in court arguing that its senior traders defrauded it. Not the client. Not the counterparty. The bank itself.
Here is what should chill every crypto professional reading this: the entire case is powered by a UK Supreme Court ruling from 2017 that redefined dishonesty in a way that makes individual accountability dramatically easier to prove. That ruling, Ivey v Genting Casinos, is about to migrate into crypto through the same channels that brought us MiCA, SM&CR, and every other regulatory standard this industry keeps pretending does not apply to it.
My prediction is simple. Within 24 months, a major crypto institution will sue its own former employee for market manipulation using the same legal architecture Deutsche Bank is deploying in London. The smart people in this industry are not asking whether it will happen. They are asking whether they will be the plaintiff or the defendant.
Let me give you the context nobody in crypto media has connected yet.
Monte dei Paschi di Siena is Italy's oldest bank, founded in 1472. It also became Italy's most dangerous financial liability. By the mid-2010s, BMPS was drowning in hidden losses, and the mechanisms used to defer those losses were structured derivatives trades with Deutsche Bank codenamed Alexandria and Santorini. These transactions allegedly allowed BMPS to defer recognizing losses and misstate its balance sheet. When the smoke cleared, Milan's criminal court ordered Deutsche Bank and Nomura to pay roughly €444 million in compensation.
Deutsche Bank's own criminal exposure in Italy was settled in 2021 for approximately €70 million. A settlement is not an acquittal; it is a priced acknowledgment. The bank paid for its institutional role. Then it did something strategic. It sued the individuals.
The London litigation layers English law over Italian facts. Under English employment law, senior employees owe a duty of fidelity to their employer. Under English tort law, fraudulent misrepresentation and conspiracy to injure are actionable. Deutsche Bank's theory: the four men designed and executed derivative transactions that concealed risks not just from BMPS, but from Deutsche Bank's own risk management. Their alleged dishonesty caused the losses the bank later had to absorb. The bank is the victim. The individuals are the villains. That framing is the entire case.
But the framing has cracks, and the cracks are educational. The bank's history of settlements, from LIBOR manipulation to sanctions violations to the 1MDB scandal, creates a mountain of institutional context the four defendants will use to argue that they were acting within a culture, not against one. The bank's own internal audit reports, board minutes, and compliance reviews will be pulled into the disclosure process. Every document that reads “we knew there was a problem here” undermines the rogue-trader narrative.
This is the structure of every future crypto accountability battle. The only difference is that crypto's evidence is permanent, public, and timestamped. The blockchain is a forensic gift to whichever side can afford the better lawyers.
Now let me get technical, because the technical details are the story.
The Ivey Disassembly
Before 2017, English law applied a two-stage test for dishonesty, derived from the case R v Ghosh. Stage one: was the defendant's conduct dishonest by the ordinary standards of reasonable and honest people? Stage two: did the defendant themselves realize their conduct was dishonest? That second, subjective limb was the defense lawyer's best friend. It created a loophole through which sophisticated traders could claim they genuinely believed their conduct was an acceptable market practice.
Ivey v Genting Casinos demolished stage two.
The UK Supreme Court held that the test is entirely objective: find the defendant's actual state of knowledge and belief, then compare their conduct against the standards of ordinary decent people. If the defendant knew the facts, and any decent person would have recognized the conduct as dishonest, the dishonesty is proven. The defendant's subjective moral compass is no longer a defense.
The migration of this standard into crypto is a generationally significant legal event. Wash trading. Ramp-and-dump orchestration. Governance vote buying. Artificial volume generated by market-making bots. Under the old subjective test, a trader could claim they believed their activity was standard liquidity provision. Under Ivey, the fact-finder asks a cleaner question: would any decent market participant, knowing what you knew about those order flows, have done what you did?
I have audited enough on-chain order flow to know how radioactive these cases become under an objective standard. In my years tracking exchange wallets and correlated bot behavior, one pattern keeps repeating: the data is permanently recorded. Wallet clusters, exchange cold wallets, correlated timing patterns, liquidity spiral signatures. The factual foundation for manipulation cases in crypto is stronger than anything available in the BMPS litigation, where much of the evidence was buried in illiquid derivatives documentation. Crypto's evidence problem is not missing data. It is too much data, and an industry that has not yet understood the legal weaponization of that data.
In 2021, when I tracked Bored Ape Yacht Club floor prices against Ethereum gas fees, I noticed a 12% divergence between social sentiment spikes and actual wallet activity. That divergence was wash trading. I published the breakdown in four hours. The defense from the sponsors was predictable: “we were optimizing organic engagement.” Under the Ivey standard, that defense collapses. The question shifts from "what did you intend" to "what would a decent person have known given the same data." Those are different inquiries, and the inquiry no longer runs through the defendant's private mental state.
This is the first structural shift crypto professionals have not priced into their employment risk.
The SM&CR Export Pipeline
Ivey provides the legal weapon. The UK's Senior Managers and Certification Regime provides the trigger.
SM&CR replaced the Approved Persons Regime in 2016 with a governing philosophy: for every regulated activity, identify a named individual who is responsible. The FCA has since made clear that pursuing individual accountability is a strategic enforcement priority. The number of enforcement actions against individuals has increased nearly every year since the regime took effect. The message is structural: institutions pay fines; people pay for conduct.
The UK's crypto asset regime is being constructed inside this philosophy. When the FCA builds conduct rules for crypto firms, it will extend the certification framework to individuals holding material responsibilities at exchanges, custodians, and market-making desks. The first FCA enforcement action against an individual crypto executive will be the signal that the system is live. And once the regulator takes its first scalp, the private lawsuits begin.
The Deutsche Bank lawsuit is the private-law companion to this public enforcement strategy. The bank did not need to sue its former employees to recover €444 million; its balance sheet has absorbed far larger losses without drama. The lawsuit is a governance signal dressed in a damages claim. It tells the FCA, the DOJ, and the market: we are the accountable institution, and these individuals are the accountable people. It is regulatory currency, spent to purchase enforcement goodwill.
Crypto institutions will learn this move quickly. The next time an exchange settles with the DOJ or the CFTC, and every major exchange will eventually settle something, the settlement document becomes the foundation for a follow-on lawsuit against the employees the exchange chooses to blame. The settlement quantifies the loss. The lawsuit is the collection mechanism. This is the passing-on architecture: liability is priced at the institutional level, then transferred to individuals through civil litigation. Volatility is the tax you pay for access. But the tax is not paid equally. It is paid by whoever lacks the resources to pass it on.
The Passing-On Architecture
Let me trace the financial mechanics precisely, because this is where the financial engineering background matters.
Step one: the Italian criminal court orders Deutsche Bank to pay €444 million in compensation to BMPS. Step two: Deutsche Bank negotiates its criminal exposure down to roughly €70 million through a settlement. Step three: Deutsche Bank files a civil claim in London against its former employees, arguing that their misconduct caused the losses reflected in that settlement. The settlement number becomes the anchor for damages in the civil claim.
This is a textbook passing-on structure. The institutional settlement is not the end of the story; it is the beginning of the recovery story. It transfers the risk of the initial misconduct from the institution's shareholders to individual employees' personal assets.
Crypto's version will look like this: the CFTC fines an exchange for wash trading. The exchange pays the fine. The exchange then sues the head of market making, arguing that the manipulation was personal misconduct, an unauthorized escalation of trading activity the compliance team never approved. The exchange presents the fine as evidence of the damage. The former employee presents the exchange's own surveillance logs as evidence that the activity was visible, systemic, and ignored.
The disclosure phase is where these lawsuits get violent. Under English procedure, Deutsche Bank is required to hand over documents relevant to the dispute, including internal BMPS-related audits, board materials, and risk committee minutes. In crypto, this discovery universe is vastly larger: exchange databases, chat logs, GitHub commits, Telegram archives, governance forum posts, and the full on-chain record. Litigation against crypto employees will expose internal operations more thoroughly than any regulatory investigation has ever done.
When I published my breakdown of the FTX collapse in 2022, three days before the dam broke, I did it using public filings and on-chain transfers. No insider sources. No leaked databases. The data trail was sufficient. The Deutsche Bank case has a far messier, less public data trail. Crypto's equivalent will be the opposite: the evidence is pristine, permanent, and publicly indexed. That makes plaintiffs' jobs easier and defendants' positions existential.
The Unclean Hands Paradox
Now the part the bank's PR team does not want you to remember.
Deutsche Bank settled its Italian criminal exposure. That settlement is a documented acknowledgment that the bank itself played an institutional role in the BMPS trades. In the London litigation, the four defendants will argue unclean hands: you already admitted, by paying, that your systems, your compliance function, and your executive oversight allowed these trades to exist. Now you want the court to believe the trouble was purely personal?
This is the strategic weakness in every passing-on architecture. The institution that settles cannot simultaneously claim to be a pure victim. It can only claim to be a less guilty party than the individuals it is suing. That is a much more complicated narrative to sell to a court.
Crypto's version is sharper. Exchanges have built their brands on claims of industry-leading compliance and advanced surveillance. When the exchange sues its own former employee, the defense will enter the exchange's own marketing materials as evidence. If the compliance system was so advanced, why did it not detect the manipulation? If the surveillance was so comprehensive, why is the institution only acting now, after the regulator forced the issue?
The whistleblower dimension adds another layer. UK law, the Public Interest Disclosure Act 1998 and the Employment Rights Act 2015, protects employees who blow the whistle from retaliation, including litigation designed to intimidate. If a former employee can show the bank's lawsuit is retaliation for their role in surfacing concerns about the BMPS trades, the lawsuit itself becomes the basis for a counterclaim. That risk pushes institutions toward clean, well-pleaded damages claims. The legal architecture maintains a thin veneer of legitimacy, even when the underlying motive is narrative control.
During my 2020 DeFi composability hackathon days, I watched a governance dispute nearly produce a litigation threat over a failed hedging strategy. The post-mortem was brutal: no one could agree where individual responsibility ended and protocol-level responsibility began. The same ambiguity sits at the core of the Deutsche Bank case. It is the central unanswered question in the crypto accountability era.
The Insurance Cliff
And here is the financial detail that tells you who is really in control.
Directors and Officers insurance policies uniformly exclude intentional fraud and dishonesty. If you are sued for fraud, your employer's D&O policy will not pay for your defense. In the Deutsche Bank case, the four defendants cannot access D&O coverage if the claims allege intentional dishonesty. Their legal defense is a personal financial burden.
The leverage this creates is structural. An individual facing a fraud claim has three options: fund a defense through years of litigation, settle to avoid the fraud finding, or seek indemnification from a former employer that will resist. Most individuals settle. The institution knows this. The insurance cliff is why the passing-on architecture works so efficiently.
Crypto professionals are overwhelmingly unprepared for this. Most crypto employment contracts were not drafted by City of London law firms. Many have no indemnification clause, no defined legal protection, no arbitration framework for post-employment conduct claims. The industry has operated on a culture of trust, flexibility, and move-fast informality. That culture is about to meet the accountability era's enforcement machinery. Speed is the only currency that doesn't depreciate, but speed without a protection structure is just a faster way to become a defendant.
Jurisdiction Arbitrage
Finally, the jurisdiction question nobody in crypto is asking: why London, and what does the venue choice tell us about where crypto's own accountability battles will be fought?
Deutsche Bank could have sued in Germany, its home jurisdiction. It could have joined the Italian proceedings. It chose London. The reasons are visible in the legal architecture: English disclosure rules are plaintiff-friendly, the Ivey standard lowers the dishonesty threshold, and the Commercial Court has deep experience with complex financial disputes. But there is a third reason, more strategic than procedural: London is the venue most insulated from the Italian courts' view of Deutsche Bank as a co-conspirator rather than a victim. In Milan, the bank's narrative would collide with its own criminal history. In London, that history is background noise.
Crypto institutions will make the same calculation. When an exchange decides to sue its former employee, it will choose the jurisdiction where its own institutional history is least relevant and its procedural advantages are greatest. For US-based exchanges facing the SEC or CFTC, the Southern District of New York will be a popular forum. For international operations, London and Singapore offer the cleanest procedural machinery. The venue decision is part of the playbook. The forum is the battlefield.
What this means for the industry is uncomfortable. Most crypto participants signed contracts specifying jurisdiction. Many of those jurisdictions are not where they think they are. The next 24 months will include a wave of contract renegotiations, not because compensation changed, but because forum selection clauses suddenly matter in a way they never did before.
Stop calling this accountability. It's narrative architecture.
Everyone wants to frame the Deutsche Bank lawsuit as a sign of institutional accountability. Individual accountability is healthy, the argument goes. It deters misconduct. It makes markets safer. That is the surface story.
The underlying mechanism is less flattering. This lawsuit is a narrative purchase. Deutsche Bank is not primarily seeking money; it is seeking legal confirmation that its institutional systems were not the problem. The claim "our traders defrauded us" becomes a tested, certified historical fact. That fact retroactively explains every regulatory fine, every settlement, every damaging headline the bank has absorbed over the past decade. The lawsuit is a time machine that rewrites institutional failure as individual betrayal.
This is where the crypto industry needs to be honest with itself. The next exchange to sue its own employee will not do it primarily for justice. It will do it to construct the record. The token holders will never see the internal audit where the market manipulation was discussed at an executive committee level. The public will only see the successful lawsuit against the rogue trader. The blockchain preserves the underlying evidence, but blockchains do not control narratives. Lawyers do.
Arbitrage isn't just a trading strategy; it is a legal strategy too. The industry's most sophisticated participants will recognize the Deutsche Bank move for what it is: the institutionalization of blame. The smartest players are not waiting for the judiciary to define accountability. They are building compliance teams, rewriting employment contracts, and, most importantly, deciding which former colleagues to designate as the fall guys before the regulators make that decision for them.
What to Watch
Over the next 18 months, watch for three signals.
First, the FCA's crypto regime. When the UK's full crypto conduct rules land, certification for individuals will follow. Individual accountability will become a quotable, citable legal obligation, not a cultural aspiration.
Second, the first settlement between a crypto exchange and a major regulator in Europe or the US. That settlement is the seed of the first crypto employee civil suit. The passing-on architecture is already loaded and waiting.
Third, the D&O insurance market. When crypto firms start buying policies that explicitly enumerate fraud exclusions for crypto-native activities, the premium pricing will tell you who is preparing to litigate.
We don't forecast legal bloodbaths; we track the build-up that precedes them. The setup is complete. The regulatory trigger is in motion. If you work in this industry, the question is not whether your exchange will ever sue you. The question is whether you have read the contract that says it can. The Deutsche Bank playbook is public now. The next time you see a major crypto firm announce a settlement, start asking which former employees are about to be served.