German White Collar Crime Defense: A Guide for US Executives (EN)
Executive summary
If your company or you personally are targeted by a criminal investigation in Germany, three things are different from what US executives typically expect. First, German prosecutors are legally obligated to investigate any credible suspicion – there is no prosecutorial discretion to simply decline. Second, most white collar investigations start silently: no target letter, no negotiation window, but a coordinated dawn raid on offices and homes. Third, the German trial is directed by the presiding judge, not the parties. There is no jury, no adversarial cross-examination in the US sense, and no plea bargaining in the American form – but there is a distinct German mechanism called Verständigung (§ 257c StPO), which is functionally close but procedurally different. This guide covers what US executives need to understand to make sound decisions in the first 48 hours of a German white collar matter – and how German criminal procedure differs from what your US counsel is used to.
Table of contents
1. Why Germany is different from US practice
2. Who prosecutes what in Germany
3. The typical trajectory of a German white collar case
4. The dawn raid: what to expect and how to respond
5. Voluntary interviews and how to handle them
6. Individual vs. corporate liability under German law
7. Verständigung: the German version of plea coordination
8. Cross-border coordination with the US
9. Practical playbook for the first 48 hours
10. Frequently asked questions
1. Why Germany is different from US practice
US white collar defense is built around several structural assumptions that do not hold in Germany:
No prosecutorial discretion in principle. Under the legality principle (Legalitätsprinzip, § 152 Abs. 2 StPO), German prosecutors must investigate every credible suspicion. There is no equivalent of the DOJ's charging discretion. This means: once the case is opened, it typically runs its course. The strategic goal for defense is rarely "convince them not to charge" – it is "shape what they investigate and how they charge."
No target letters. In the US, executives often receive a target letter or subject notification months before charges. In Germany, most white collar matters become visible when the dawn raid happens. There is no pre-charge negotiation window, no equivalent of Wells notice, and no formal "invitation to respond."
Judge-led trials. German trials have no jury. The presiding judge organizes evidence, questions witnesses, and directs proceedings. Prosecutor and defense counsel ask questions after the judge. The adversarial "opening-witness-cross-closing" structure US lawyers know does not apply.
Very different sentencing scales. German sentences for white collar offenses are typically shorter than in the US. A five-year sentence for major fraud in Germany is at the higher end; suspended sentences for first-time offenders are common up to two years. The Federal Sentencing Guidelines mindset does not translate.
Corporate liability works differently. Germany does not have a true corporate criminal liability regime yet. Instead, companies are sanctioned under the Administrative Offenses Act (Ordnungswidrigkeitengesetz, OWiG). Fines can be substantial (§ 30 OWiG plus § 130 OWiG), and asset forfeiture is aggressive – but the framework is not equivalent to US corporate criminal enforcement.
Attorney-client privilege is narrower. German law recognizes protection for communications with defense counsel (Strafverteidiger), but the boundaries are different. Communications with in-house counsel are generally not privileged. Communications with external counsel are protected in limited circumstances – broader in criminal defense contexts, narrower in general advisory work.
2. Who prosecutes what in Germany
Understanding the German prosecutorial landscape is critical:
Staatsanwaltschaft (public prosecutor's office). Every criminal investigation is led by a prosecutor at the level of the regional court (Landgericht). In economic crime matters, larger prosecutor's offices maintain specialized economic crime units (Wirtschaftsstrafabteilungen). The prosecutor directs the police – not the other way around.
Police (Kriminalpolizei). Investigates on the instructions of the prosecutor, but often initiates first contact. Never confuse a police interview with an informal conversation – every police interview is a formal investigative measure.
BKA (Bundeskriminalamt). Federal police, active in cross-border matters, cybercrime, and organized crime cases with national dimensions. Cooperates directly with the FBI, Europol, and other international counterparts.
Financial Intelligence Unit (FIU). Located at the customs administration, receives suspicious activity reports for anti-money laundering purposes.
BaFin. Federal financial supervisor. Not a criminal enforcement agency itself, but its findings routinely trigger criminal referrals.
Bundeszentralamt für Steuern and local tax offices. Tax crime investigations are handled by the tax authorities themselves; criminal proceedings are conducted by specialized tax prosecutors.
For US in-house counsel this means: multiple German agencies may be simultaneously active. Coordination between them is not always seamless. A defense strategy must account for the entire landscape from day one.
3. The typical trajectory of a German white collar case
A German white collar investigation typically follows this pattern:
Phase 1: Preliminary investigation (Vorermittlungen). The prosecutor evaluates initial indications – often from a tip, a whistleblower report, a BaFin referral, or a tax audit. This phase is entirely internal to the authorities; the target has no awareness. Duration: weeks to months.
Phase 2: Formal investigation (Ermittlungsverfahren). The prosecutor opens a case (Ermittlungsverfahren) and directs investigative measures. This is often the first moment the target learns of the case – typically through a dawn raid or a summons.
Phase 3: Investigation measures. Dawn raids, seizures, witness interviews, financial account tracing, coordination with foreign authorities. Duration: six months to three years, sometimes longer for complex matters.
Phase 4: Prosecutorial decision. After investigation, the prosecutor either files an indictment (Anklage), issues a penal order (Strafbefehl), seeks a diversion (§§ 153, 153a StPO), or drops the case.
Phase 5: Trial (Hauptverhandlung). If indicted, the case goes to trial before a panel of professional and lay judges. Trials in complex economic cases often last dozens or hundreds of days spread across many months. There is no formal discovery – but defense counsel has full access to the investigative file (Akteneinsicht, § 147 StPO).
Phase 6: Appeals. Multiple layers of appeal are available. The Federal Court of Justice (Bundesgerichtshof) handles final appeals on legal grounds.
Timeline reality check. Complex white collar cases can easily run three to seven years from opening to final judgment. US executives should not expect the compressed timelines they know from US enforcement.
4. The dawn raid: what to expect and how to respond
The German dawn raid (Durchsuchung) is the moment when the case becomes real. Some practical points:
Legal basis: § 102 StPO (target) or § 103 StPO (third party). Requires a judicial warrant except in exigent circumstances.
What is seized: Anything relevant to the investigation. Servers, laptops, phones, paper files, backup media. German prosecutors interpret cloud access very broadly – § 110 Abs. 3 StPO allows access to remotely stored data via the seized device.
Employees present: Executives, staff, IT personnel. All can be questioned informally by investigators during the raid. Everything said is potentially usable evidence.
Executive response – the essential rules:
Do not obstruct. Cooperation with the physical process is legally required.
Do not answer substantive questions. Every executive and every employee has the right to remain silent about the matter.
Do not voluntarily hand over anything. Force the investigators to seize what they need – this preserves later evidentiary challenges.
Request that seizures be recorded item by item, with objection formally noted.
Call defense counsel immediately. Request that the raid pause until counsel arrives. This is often granted informally.
Protect privileged materials by asserting protection under § 97 StPO and requesting sealing under § 110 StPO.
For US-headquartered companies: The raid may target both German subsidiaries and, via mutual legal assistance treaties (MLATs), parent-level data. Coordination between German defense counsel and US in-house counsel must begin within hours – not days.
5. Voluntary interviews and how to handle them
German prosecutors often summon executives to formal interviews. Two categories:
Beschuldigtenvernehmung (interview as suspect). The individual is a formal suspect. Rights include the right to silence (§ 136 StPO), the right to counsel before and during the interview, and the right to have the accusation stated clearly. There is no obligation to cooperate.
Zeugenvernehmung (interview as witness). The individual is a witness, not a suspect. Witnesses generally have an obligation to appear and to testify – but with exceptions. Right to refuse self-incriminating testimony (§ 55 StPO). Right to refuse testimony against close relatives (§ 52 StPO). Certain professional confidentiality rights (§§ 53, 53a StPO).
Central practical rule for US executives: Do not attend either type of interview without German defense counsel. Do not answer questions "just to clarify." Do not accept summonses to "informal meetings" without confirming the legal basis. The German procedural rules governing what you say – and how it can be used – are not intuitive to a US-trained mindset.
Especially dangerous: the "voluntary conversation" between a police officer and an executive on the premises during a raid. Anything said is documented. Emotional reactions, exculpatory explanations, or partial admissions are routinely used against defendants later.
6. Individual vs. corporate liability under German law
Under German law, individuals and companies are addressed by different legal frameworks:
Individual liability: Standard criminal law (StGB). Executives can be personally prosecuted for offenses committed in the course of their duties – fraud (§ 263 StGB), embezzlement (§ 266 StGB), tax evasion (§ 370 AO), corruption (§§ 299, 331 ff. StGB), insolvency delay (§ 15a InsO), and – increasingly – cybersecurity supervision failures under the NIS-2 implementation.
Corporate liability: No true corporate criminal offense yet exists in Germany. Companies are sanctioned via:
§ 30 OWiG: Administrative fine against the entity when a leadership person committed the underlying offense.
§ 130 OWiG: Administrative fine for supervisory duty failures.
§ 73 ff. StGB: Asset forfeiture. Very aggressive in Germany. Can reach amounts that dwarf the criminal fine itself.
A separate corporate criminal code has been discussed for years. A comprehensive Corporate Sanctions Act (Verbandssanktionengesetz) was drafted in the previous legislative period but did not pass. Debate continues; new legislative proposals emerge periodically. For US executives, the takeaway: current German corporate liability is closer to civil-administrative enforcement in operational feel, but forfeiture can be devastating.
Simultaneous procedures: In practice, criminal proceedings against individuals and administrative proceedings against the company often run in parallel. Statements made in one can affect the other. Coordinated defense strategy across both tracks is essential.
7. Verständigung: the German version of plea coordination
Germany has no formal plea bargaining in the US sense. But § 257c StPO allows a Verständigung (understanding) between court, prosecution, and defense. Key differences from a US plea:
The court – not the prosecutor – is the counterparty. Prosecutors are participants, but the judge makes the final call.
No formal guilty plea. The defendant makes a Geständnis (confession) whose scope and detail are negotiated.
The sentence range – not a specific sentence – is committed to.
The agreement must be disclosed on the record. There are no side deals.
If the court later finds circumstances materially different from what the Verständigung assumed, the defendant may withdraw the confession.
For US executives this means: outcomes similar to a US plea are achievable, but the mechanism is procedurally distinct and the strategic considerations differ. Early positioning matters more, because the Verständigung is typically explored well into the trial phase – not before charging.
Alternative pre-charge resolutions:
§ 153 StPO: Dismissal without conditions for cases of minor guilt.
§ 153a StPO: Dismissal with conditions – often monetary payments to charity, fine-equivalent contributions, or community service. Widely used for first-time offenders in economic cases. Formally not a conviction – no criminal record.
Strafbefehl (§ 407 ff. StPO): Written penal order issued by the court on the prosecutor's application. Typically for less serious cases. Accepted or contested. If accepted, becomes final; if contested, ordinary trial follows.
These early exits are often the most valuable strategic targets for a defense in economic matters – if the defense can position the case correctly during the investigation phase.
8. Cross-border coordination with the US
For US-headquartered companies or US executives, cross-border coordination is where matters often go wrong:
Information flow between DOJ and German authorities. The US and Germany cooperate closely on financial crime, cybercrime, and sanctions. MLATs, direct agency-to-agency contacts, and shared intelligence channels are routine. Assume that any US enforcement activity is potentially known in Germany – and vice versa.
Statements to one authority may reach the other. A cooperation proffer to the DOJ can find its way into a German case file. A German employee's Beschuldigtenvernehmung transcript can end up with US regulators. Any communication in a cross-border matter must be strategically coordinated.
FCPA and § 299 StGB / § 331 ff. StGB overlap. Corruption cases are the archetypal cross-border matter. US and German authorities may have parallel jurisdiction over the same conduct. Resolution strategy must address both jurisdictions – often with different counsel in each, but under a unified strategic direction.
GDPR complications. Producing documents from a German subsidiary to US authorities may require GDPR-compliant transfer mechanisms. This is a substantive obstacle to US-style responsive document production. German counsel with GDPR experience is essential.
Different standards for internal investigations. US internal investigations under FCPA or similar rules typically involve broad employee interviews with Upjohn warnings and formal cooperation frameworks. In Germany, employee interviews raise distinct questions of self-incrimination, works council consultation (§ 87 BetrVG), and privilege. Simply transplanting US internal investigation practice into Germany creates significant risk.
9. Practical playbook for the first 48 hours
Hour 0–2:
Retain German defense counsel with cross-border experience.
Preserve all documents and communications. No spoliation, no matter how routine or seemingly harmless.
If a raid is underway, follow the raid protocol (no obstruction, no substantive statements, request pause for counsel).
Hour 2–8:
Establish coordination between US and German counsel. Designate a single point of contact on the client side.
Assess GDPR implications of any document production to US authorities.
Identify all employees who may be witnesses or targets. Restrict internal discussion of the matter to the smallest necessary circle.
Hour 8–24:
File notice of representation with the German prosecutor. Request file access under § 147 StPO.
Assess whether public disclosure obligations are triggered (ad hoc obligations for listed companies, investor notifications for VC-backed companies).
Assess D&O insurance coverage and notify insurer within policy timelines.
Determine whether the matter has parallel FCPA, sanctions, or antitrust dimensions.
Hour 24–48:
Develop preliminary defense strategy: individual-focused, corporate-focused, or coordinated. Which employees may become cooperating witnesses – and what does that mean for parallel US matters?
Establish document management protocol – separate custody for privileged and responsive materials.
Plan the initial employee communication: what employees may say if approached, what the escalation path is.
10. Frequently asked questions
Does my US attorney-client privilege apply in a German investigation?
Not automatically. German law recognizes protection for communications with your German Strafverteidiger. Communications with US counsel may or may not be protected in Germany, depending on the context. Cross-border privilege planning must be done proactively, not retroactively.
Can I be extradited from the US to Germany for a white collar case?
Yes, under the US-Germany extradition treaty, extradition is possible for most economic offenses that carry more than one year of potential imprisonment. Extradition is rare in practice for white collar cases where the defendant remains in the US, but it is a real possibility.
If I am a US citizen working in Germany, does US law protect me?
You are subject to German criminal jurisdiction for conduct in Germany. US citizenship provides consular protection but not immunity. Your rights under German procedure are the same as those of a German citizen – as is your exposure.
Can I settle a German investigation the way I would settle a DOJ inquiry?
The mechanisms are different. There is no US-style deferred prosecution agreement in Germany. The closest analogues are § 153a StPO dismissals with conditions (common for individuals) and administrative fines against the company. Strategy must be built around these mechanisms – not on transposed US concepts.
How do I coordinate a German investigation with a parallel DOJ matter?
Through unified strategic direction. Typically: German defense counsel and US counsel work under a joint retainer or coordinated retainer agreements. Communications between counsel are structured to preserve privilege in both jurisdictions. Client-side coordination is centralized to avoid inconsistent messaging.
Will my case become public?
German criminal proceedings are, in principle, not confidential – but they are not systematically publicized either. Media exposure varies. Large corporate cases often attract press attention; individual white collar matters less so. Public trial hearings can be attended by press. Sensitive strategic decisions about media response should be made early.
What is the sentence exposure for typical white collar offenses?
Fraud (§ 263 StGB): up to five years, up to ten years in aggravated cases. Embezzlement (§ 266 StGB): up to five years, up to ten years in aggravated cases. Tax evasion (§ 370 AO): up to five years, up to ten years for major amounts. In practice, first-time defendants often receive suspended sentences up to two years or fines rather than immediate imprisonment – but this varies significantly by court and jurisdiction.
How long will this take?
Complex white collar cases typically take three to seven years from opening to final resolution. Faster resolutions are possible through § 153a StPO dismissals or Strafbefehl orders, especially when defense positions the case strategically during the investigation phase.
About the author
Niklas Hanitsch is a German criminal defense attorney focused on economic crime, IT and cyber criminal law, compliance, and data protection criminal law. Since late 2016, he has represented executives, board members, founders, and companies in criminal investigations at the intersection of law, technology, and business. He is the founder and CEO of SECJUR, a venture-backed compliance and cybersecurity automation company selected for the Google for Startups Cybersecurity Accelerator. Member of the Federal Commission on Cybersecurity of the German Economic Council (CDU). Named Capital 40 Under 40 (2023) and winner of the German Startup Cup for Cybersecurity (GFFT, 2022). Previous positions: Legal at Amazon, Taylor Wessing Silicon Valley (advising US companies on European data protection law), Taylor Wessing Germany, Bird & Bird.
Schedule a confidential consultation →
Related articles
GDPR Criminal Liability in Germany: What US Companies Must Know
NIS-2 Compliance: Criminal Exposure for European CTOs and CISOs
Legal disclaimer
This article is for informational purposes only and does not constitute legal advice. Every case is different. For advice on a specific matter, please schedule a confidential consultation.