Banking Law And Criminal Enforcement Strategies Spain

Introduction

Criminal enforcement strategies in Spanish banking law refer to the legal, regulatory, investigative, and judicial mechanisms used to detect, investigate, prosecute, and punish criminal conduct involving banks, financial institutions, their directors, employees, customers, or other participants in the financial system.

Banks can be exposed to criminal activity through money laundering, fraud, corruption, misappropriation, falsification of financial information, market abuse, terrorist financing, tax-related offences, and other forms of economic crime. Consequently, Spanish banking regulation combines preventive supervision with criminal enforcement.

Spain’s framework includes the Spanish Criminal Code, Law 10/2010 on the Prevention of Money Laundering and Terrorist Financing, banking legislation, securities-market rules, and criminal procedural law. Law 10/2010 requires regulated entities to maintain due-diligence, information, and internal-control measures.

Criminal enforcement strategies seek to:

• Detect financial crime at an early stage.

• Protect customers, investors, and depositors.

• Preserve the integrity of financial markets.

• Hold individuals responsible for criminal conduct.

• Address corporate responsibility where legally applicable.

• Recover proceeds of financial crime.

• Strengthen cooperation between banks and public authorities.

• Encourage effective corporate compliance systems.

The Spanish model therefore combines prevention, financial intelligence, administrative supervision, criminal investigation, prosecution, judicial proceedings, and sanctions.

1. Legal And Regulatory Framework

Criminal enforcement affecting Spanish banking institutions operates through several legal sources:

• Spanish Criminal Code (Código Penal).

• Spanish Criminal Procedure Law.

• Law 10/2010 on Prevention of Money Laundering and Terrorist Financing.

• Royal Decree 304/2014 implementing Law 10/2010.

• Law 10/2014 on the regulation, supervision and solvency of credit institutions.

• Securities-market legislation.

• European Union financial-crime legislation.

• EU Market Abuse Regulation where applicable.

• Rules governing corporate criminal liability.

Spain has also adopted Organic Law 9/2022, facilitating the use of financial and other information for the prevention, detection, investigation, and prosecution of criminal offences.

Together, these rules create a framework in which banking misconduct may produce:

• Administrative liability.

• Civil liability.

• Criminal liability.

• Corporate liability.

• Individual director or employee liability.

These forms of responsibility must nevertheless be distinguished because the legal requirements and standards of proof are different.

2. Corporate Criminal Liability

An important feature of Spanish criminal law is the possibility of criminal responsibility of legal persons for specified offences under conditions established by the Criminal Code.

Article 31 bis of the Spanish Criminal Code provides the central framework for corporate criminal liability.

For banks, this makes corporate compliance particularly important.

Potential problems may arise where criminal conduct is associated with:

• Senior management.

• Directors.

• Employees.

• Agents.

• Deficient organisational controls.

However, corporate liability is not automatically established merely because an employee commits an offence.

The prosecution must establish the requirements imposed by criminal law.

Effective compliance and organisational controls can therefore become important when assessing corporate responsibility.

3. Money Laundering Enforcement

Money laundering is one of the most important areas of criminal enforcement affecting banks.

Financial institutions may be exploited to:

• Transfer criminal proceeds.

• Conceal ownership of assets.

• Move funds internationally.

• Integrate unlawful proceeds into legitimate economic activity.

Spanish banks are subject to preventive obligations under Law 10/2010.

These include:

• Customer due diligence.

• Beneficial-owner identification.

• Examination of unusual transactions.

• Suspicious transaction reporting.

• Record keeping.

• Internal-control measures.

• Employee training.

Failure of preventive controls may generate administrative consequences, while intentional participation in laundering may produce criminal consequences where the requirements of the Criminal Code are satisfied.

4. Role Of SEPBLAC

SEPBLAC plays a central role in Spain’s financial-crime enforcement system.

It operates both as Spain’s Financial Intelligence Unit and as an AML/CFT supervisory authority.

When suspicious transaction reports are received, SEPBLAC can analyse multiple information sources and produce financial-intelligence reports where indications of money laundering or terrorist financing are identified.

Its functions include:

• Receiving suspicious transaction reports.

• Analysing financial information.

• Identifying suspicious financial patterns.

• Conducting strategic analysis.

• Supporting competent investigative authorities.

• Supervising compliance by regulated entities.

SEPBLAC therefore creates an important connection between preventive banking supervision and subsequent criminal investigation.

5. Criminal Fraud Enforcement

Banking fraud can take many forms, including:

• False financial information.

• Misappropriation.

• Fraudulent credit applications.

• Payment fraud.

• Investment fraud.

• Manipulation of financial documentation.

• Misuse of customer accounts.

Spanish criminal enforcement may involve investigations by:

• Police authorities.

• Guardia Civil.

• Public prosecutors.

• Investigating courts.

• Audiencia Nacional in appropriate cases.

Banks themselves also play an important preventive role through internal controls and fraud-detection systems.

6. Market Abuse And Financial-Market Crime

Banks participating in securities markets may also face enforcement relating to market misconduct.

Potential offences or regulatory violations can involve:

• Insider dealing.

• Market manipulation.

• Improper disclosure.

• False financial information.

• Misleading market communications.

Market enforcement is particularly important because misconduct by major financial institutions can affect large numbers of investors.

The regulatory framework therefore combines:

• CNMV supervision.

• Administrative sanctions.

• Criminal enforcement in sufficiently serious cases.

7. Internal Investigations And Compliance Programs

Modern criminal enforcement places considerable importance on corporate compliance.

Banks should maintain systems capable of preventing and identifying misconduct.

These may include:

• Internal reporting mechanisms.

• Compliance departments.

• Internal investigations.

• Employee training.

• Risk assessments.

• Internal audits.

• Transaction monitoring.

• Management reporting.

A compliance program should operate effectively in practice rather than exist merely as formal documentation.

8. Board And Senior Management Responsibility

Criminal enforcement strategies also interact with corporate governance.

Boards and senior management should ensure that banks maintain:

• Effective compliance structures.

• Independent control functions.

• Adequate financial-crime prevention systems.

• Appropriate escalation procedures.

• Reliable internal reporting.

Governance failures may occur where:

• Management ignores compliance warnings.

• Internal investigations are suppressed.

• Financial information is deliberately manipulated.

• Employees are encouraged to violate regulatory requirements.

• Compliance departments lack sufficient independence.

Individual criminal responsibility nevertheless requires proof of the relevant person's conduct and the elements of the particular offence.

9. Financial Intelligence And Information Sharing

Modern financial crime frequently involves complex transactions across multiple accounts and jurisdictions.

Effective enforcement therefore depends on information sharing between:

• Banks.

• SEPBLAC.

• Police authorities.

• Prosecutors.

• Courts.

• Foreign financial intelligence units.

Organic Law 9/2022 strengthened the framework facilitating access to financial information for criminal investigations.

Information sharing must nevertheless comply with applicable legal safeguards and confidentiality requirements.

10. Risk-Based Criminal Enforcement

Spain’s financial-crime prevention system increasingly follows a risk-based approach.

SEPBLAC states that its supervisory activity applies risk-based criteria, with greater supervisory intensity directed toward sectors and regulated entities presenting higher money-laundering or terrorist-financing risk.

Banks should therefore identify areas of elevated risk involving:

• Customers.

• Products.

• Geographic regions.

• Delivery channels.

• Complex corporate structures.

• Politically exposed persons.

• Unusual transactions.

This allows compliance resources to be concentrated where financial-crime risks are greatest.

Case Laws

Case Law 1: Bankia IPO Criminal Proceedings

Facts

Criminal proceedings were brought in connection with Bankia’s 2011 stock-market flotation and the financial information associated with the offering.

Bankia, its parent structure, and former executives became involved in extensive judicial proceedings after serious financial difficulties emerged.

Legal Issue

The criminal proceedings examined whether conduct surrounding financial reporting and the IPO satisfied the legal requirements for criminal responsibility.

Principle

Serious banking or governance failures do not automatically establish a criminal offence.

Criminal liability requires proof of the statutory elements of the alleged offence and satisfaction of the criminal standard of proof.

Importance

The Bankia proceedings demonstrate the distinction between:

• Poor corporate governance.

• Regulatory failures.

• Civil investor claims.

• Criminal responsibility.

They also show the importance of reliable financial reporting and effective internal controls.

Case Law 2: Audiencia Nacional – Bankia Criminal Proceedings And €800 Million Bond

Facts

During the Bankia investigation, the Audiencia Nacional considered judicial measures connected with potential financial responsibility arising from the proceedings.

In 2015, Bankia and Banco Financiero y de Ahorros were among parties required at an investigative stage to provide security connected with potential liabilities arising from the criminal proceedings.

Legal Issue

The proceedings raised questions concerning:

• Corporate responsibility.

• Financial reporting.

• Investor losses.

• Procedural measures during criminal investigations.

Principle

Spanish criminal procedure can use precautionary financial measures to preserve the effectiveness of possible future legal responsibilities.

Importance

The proceedings illustrate how criminal enforcement can combine investigation of individual conduct with measures designed to protect potential financial claims.

Case Law 3: Banco Madrid Proceedings

Facts

Banco Madrid became subject to significant regulatory action in 2015 following serious concerns relating to money-laundering controls.

SEPBLAC prepared a report, sanctioning proceedings were initiated, and information was transmitted to the anti-corruption and organised-crime prosecution authorities because the reported facts could potentially constitute criminal offences. The Bank of Spain also intervened in Banco Madrid and replaced its board with provisional administrators.

Legal Issue

The matter involved the relationship between:

• AML supervision.

• Banking intervention.

• Administrative enforcement.

• Potential criminal investigation.

Principle

Serious compliance concerns within a bank may trigger multiple forms of enforcement simultaneously.

Importance

Banco Madrid demonstrates how Spanish banking enforcement can move from supervisory investigation to administrative measures and possible criminal referral.

Case Law 4: Banco Santander / Banco Popular AML Sanction – Constitutional Court Judgment 179/2023

Facts

Banco Popular had failed to communicate certain suspicious money-laundering transactions to SEPBLAC even though employees had identified them.

Following Banco Santander’s absorption of Banco Popular, the Council of Ministers imposed a sanction of €1.056 million on Santander as successor. The matter eventually reached the Spanish Constitutional Court.

Legal Issue

The case concerned whether sanctioning responsibility could pass to the successor institution consistently with principles of culpability and personal responsibility.

Principle

Corporate restructuring does not necessarily eliminate regulatory responsibility where substantial economic and business continuity exists.

Importance

The judgment demonstrates the interaction between:

• AML enforcement.

• Corporate succession.

• Banking mergers.

• Sanctioning law.

• Constitutional protections.

It also shows why banks must consider inherited compliance risks during acquisitions.

Case Law 5: Supreme Court Judgment 227/2015 – Bankia

Facts

A dispute reaching the Spanish Supreme Court included an attempt to establish subsidiary civil responsibility against Bankia in connection with criminal conduct involving unpaid promissory notes.

The Supreme Court rejected the requested liability because the necessary factual and legal basis for imposing responsibility on the bank had not been established.

Legal Issue

The issue concerned the circumstances in which a bank may become civilly responsible in connection with criminal conduct committed by another person.

Principle

The mere involvement of a bank in the factual background of criminal conduct does not automatically establish liability.

A legally sufficient connection between the institution’s conduct and the relevant responsibility must be demonstrated.

Importance

The judgment illustrates an essential principle of banking criminal enforcement: liability must be based on legally established responsibility rather than simply the presence of a financial institution in the transaction.

Case Law 6: Bankia Civil And Criminal Proceedings – Prejudiciality Principles

Facts

Following Bankia’s IPO, numerous investors pursued civil claims while criminal proceedings concerning aspects of the flotation were also underway.

Spanish courts considered whether civil cases should be suspended pending resolution of the criminal investigation.

Madrid Provincial Court jurisprudence recognised that civil and criminal proceedings could involve different legal questions and that criminal proceedings did not automatically require suspension of every investor claim.

Legal Issue

The issue concerned the relationship between:

• Criminal proceedings.

• Civil investor claims.

• Procedural coordination.

Principle

Parallel criminal and civil proceedings may continue where the criminal determination is not legally decisive for resolution of the civil dispute.

Importance

The Bankia litigation demonstrates that banking misconduct may produce several independent enforcement pathways:

• Criminal prosecution.

• Civil compensation.

• Administrative enforcement.

• Regulatory supervision.

11. Administrative Enforcement And Criminal Enforcement

An important feature of Spanish banking law is the distinction between administrative and criminal enforcement.

Administrative Enforcement

May involve:

• Regulatory fines.

• Compliance orders.

• Supervisory measures.

• Banking restrictions.

• Governance requirements.

Criminal Enforcement

May involve:

• Criminal investigation.

• Prosecution.

• Criminal penalties.

• Confiscation where legally authorised.

• Corporate criminal sanctions where applicable.

The same financial crisis or misconduct may generate different proceedings, but each form of responsibility must satisfy its own legal requirements.

12. Criminal Enforcement And AML Compliance

Law 10/2010 establishes preventive obligations for regulated entities, while criminal law addresses laundering conduct where criminal requirements are satisfied.

Regulated institutions are generally required to implement due diligence, information, and internal-control measures.

An effective banking enforcement strategy therefore operates at two levels:

Prevention

Banks detect and report suspicious conduct before financial crime develops further.

Prosecution

Competent authorities investigate and prosecute conduct where sufficient evidence of criminal activity exists.

This combination strengthens financial-system integrity.

13. Importance Of Criminal Enforcement Strategies In Spain

Effective criminal enforcement provides several benefits.

Protection Of Depositors

Financial crime can threaten customer assets and confidence in banks.

Investor Protection

Enforcement discourages fraudulent or misleading financial conduct.

Market Integrity

Criminal sanctions can deter manipulation and serious financial misconduct.

Financial Stability

Strong enforcement reduces systemic risks created by corruption, fraud, and money laundering.

Corporate Accountability

Banks are encouraged to maintain effective compliance systems.

Public Confidence

Transparent enforcement strengthens confidence in financial institutions and the rule of law.

Conclusion

Criminal enforcement strategies are an important component of banking law in Spain because modern financial institutions can be exposed to sophisticated forms of fraud, money laundering, market misconduct, corruption, and other economic crimes.

Spain combines the Criminal Code, criminal procedure, Law 10/2010, banking supervision, SEPBLAC financial intelligence, and European financial regulation to prevent and respond to financial crime. SEPBLAC performs the dual role of Spain’s Financial Intelligence Unit and an AML/CFT supervisory authority, making it particularly important in connecting preventive banking controls with financial-crime enforcement.

The Bankia proceedings, Banco Madrid intervention, Banco Santander/Banco Popular AML judgment, and related Supreme Court litigation demonstrate that misconduct involving financial institutions can generate criminal, administrative, constitutional, and civil consequences.

Effective criminal enforcement in Spanish banking therefore depends upon:

• Strong internal compliance programs.

• Effective financial intelligence.

• Independent investigation.

• Cooperation between banks and public authorities.

• Appropriate corporate accountability.

• Individual responsibility where legally established.

• Fair judicial procedures.

• Proportionate sanctions.

A strong criminal-enforcement framework protects depositors and investors while promoting the integrity, transparency, and stability of Spain’s banking and financial system.