When the Regulator Hunted the Reporters: How Germany Defended the Fraud It Was Built to Stop

On 18 February 2019, the German financial regulator did something it had never done before. It banned investors from betting that a single company's share price would fall.¹ The company was Wirecard, the high-flying payments group that had just become the first of its kind to join Germany's blue-chip DAX index, displacing Commerzbank.⁸ The regulator's name was BaFin, and its job was to protect the market from fraud. On that morning it used its powers to protect the fraud from the market.

The story everyone tells about Wirecard is a thriller: a dogged Financial Times reporter chases a crooked company for years and finally brings it down. That happened. But it is the consoling version. The harder truth is that the most powerful institution in the room spent that entire period pointed at the reporters, not the company — and the German state ended up as a material enabler of the largest fraud in its corporate history.

The six-year chase that started with a phone call from Australia

It began quietly. In summer 2014, an Australian hedge fund manager named John Hempton called Dan McCrum at the FT and told him to take a look at Wirecard.⁴ Hempton had been suspicious since 2012, when a Wirecard acquisition in Indonesia made no sense to him.⁶ McCrum's first published article, 'The House of Wirecard,' ran on FT Alphaville in April 2015.⁴ What followed was not a scoop but a siege: six years of reporting, from 2014 to 2020, against a company that fought back with lawyers, surveillance, and a stock that kept going up regardless.⁴

And the stock did keep going up. By 2018 Wirecard's shares valued it at roughly €24 billion, and sell-side analysts stayed almost universally positive on it until as late as February 2020.⁸ This is the detail that should unsettle anyone who believes markets price in the truth. The truth had been printed in a respected newspaper for years. The market read it, shrugged, and kept buying.

The regulator that aimed at the wrong target

Here is where the comfortable narrative breaks. A normal regulator, faced with credible allegations of accounting fraud at a company it supervised, investigates the company. BaFin did something close to the opposite. In February 2019 it issued a General Administrative Act banning new net short positions in Wirecard for two months — the first single-company short ban in its history.¹ The European market authority, ESMA, blessed it with a positive opinion under EU rules.² A short seller is, structurally, someone with a financial incentive to expose overvalued or fraudulent companies. BaFin's move took that pressure off — for a fraud.

Then it went further. Also in April 2019, BaFin filed a criminal complaint against McCrum and his colleague Stefania Palma, alleging market manipulation. The Munich prosecutor's office opened a formal investigation.⁵ Read that sequence again. The state's financial watchdog used its credibility to trigger a criminal probe of the journalists who were right, on behalf of the company that was lying. The mechanism here is not incompetence; it is misdirection. A regulator that treats the messenger as the threat converts its own authority into a shield for the accused.

What actually pulled the trigger

If you want to know why Wirecard finally died, it was not a headline. It was an audit. In mid-2020, EY — Wirecard's long-time auditor — refused to sign off on the 2019 annual accounts because it could not confirm €1.9 billion in cash reported as held in escrow accounts at two Philippine banks, BDO Unibank and Bank of the Philippine Islands.¹⁰ On 25 June 2020 Wirecard filed for insolvency, the first sitting DAX member ever to seek court protection from creditors, and admitted the money 'probably didn't exist.'³ The European Parliament's later inquiry noted that EY had, for years, failed to request suitable evidence on the funds it was certifying.⁷

This matters for the thesis. The FT created years of pressure and helped force a special audit. But the system designed to catch this — the auditor signing the accounts, the regulator overseeing the market — only stopped the fraud at the very last moment, and only because an auditor finally asked for the bank confirmation it should have demanded all along. Strip out EY's belated refusal and the fraud plausibly continues. The reporting was necessary. It was nowhere near sufficient. The gatekeepers had to do their jobs, and for years they did the opposite.

Wasn't this just a regulator doing its job badly?

The fair objection is that BaFin was not corrupt, only fooled — that it genuinely believed the short sellers were running a coordinated raid on a German national champion, and that the ban was a defensible, if wrong, attempt to keep order in a market under attack. There is something to this. Wirecard's price volatility was real, foreign hedge funds were positioned against it, and a regulator's instinct to protect orderly markets is not sinister on its face. ESMA's sign-off shows the logic was not BaFin's alone.²

But the steelman collapses on one fact. The short sellers were not the ones who got rich off Wirecard's lies. John Hempton, the man who started the whole chain with a phone call, has said his fund actually lost money on its short, because many of its positions expired before the 2020 collapse.⁶ The 'speculators raiding an honest company' story requires villains who profited from a takedown. The original tipster never collected. What BaFin treated as a market attack was, in plain fact, the market trying to tell the truth — and being silenced by the body whose entire purpose was to want that truth told.

The popular telling of Wirecard ends with the reporter as hero, and he was one. But the heroism is the wrong lesson to walk away with, because journalism is not a control you can install in a financial system. Auditors and regulators are. The frightening part of this story is not that a company lied; companies lie. It is that for six years the institutions built to catch the lie either looked away or actively defended it — and the one body with statutory power to stop it used that power to ban the truth and prosecute the people telling it. A fraud needs accomplices to last that long. Germany's came with badges.