Commerzbank

Commerzbank, one of Germany's largest commercial banks, operated rules-based transaction monitoring systems that flagged high volumes of alerts requiring manual review by compliance teams. These static rule engines apply fixed thresholds to transaction data, making them effective at catching known patterns but structurally blind to emerging money laundering typologies that fall outside predefined parameters. As financial crime methods evolve, the gap between what rules can detect and what actually occurs in practice widens — generating both alert fatigue among investigators and genuine coverage gaps. For a bank with Commerzbank's footprint in corporate and institutional banking, the operational cost of low-quality alerts and missed novel cases represents a material compliance risk.

Commerzbank partnered with Hawk, an anti-fraud and AML technology firm, to deploy Hawk's AML AI Extended Risk Model alongside its existing rules-based monitoring infrastructure. Rather than replacing legacy systems, Hawk's integration layer connects to Commerzbank's existing tooling, allowing the AI model to supplement established controls without requiring repeated changes to underlying rule sets. The AI applies anomaly detection and pattern recognition to identify suspicious activity that deviates from normal behavior in ways that static thresholds cannot anticipate. Critically, the deployment prioritized explainability — compliance teams can audit and justify model decisions, a non-negotiable requirement for regulatory approval. AI model governance was formally incorporated into Commerzbank's broader software validation processes as part of the rollout.

Following deployment, Commerzbank reported measurable improvements across both efficiency and coverage:

• Reduced false positives: Alert targeting accuracy improved, cutting the volume of routine low-risk alerts that previously consumed investigator time.
• Novel case detection: The bank identified more previously unrecognized money laundering and fraud typologies — cases that rules-based systems would not have flagged.
• Governance expansion: Software validation processes were extended to formally include AI model governance, strengthening the bank's compliance architecture.

While specific percentage figures were not disclosed, the combination of fewer low-quality alerts and more actionable novel cases represents a meaningful shift in how compliance resources are allocated across the organization.

• Layer AI over legacy systems rather than replacing them — Hawk's integration layer approach lets large banks adopt ML without overhauling established rule infrastructure, reducing implementation risk and regulatory disruption.
• Explainability is a regulatory prerequisite — for AML applications, compliance teams must be able to audit and justify model decisions; black-box models will not pass supervisory scrutiny.
• Reducing false positives is a strategic goal, not just an efficiency metric — alert fatigue degrades investigator judgment over time and undermines the effectiveness of the entire monitoring program.
• AI model governance must be embedded into validation processes from the outset, not retrofitted after deployment.