Of all the great corporate frauds, Wirecard may be the strangest, because it is really two stories wearing one suit. The first is a conventional, if enormous, accounting fraud: a feted German payments company, the pride of the nation’s technology sector, that turned out to have invented roughly half its business and nearly two billion euros of cash that simply did not exist. The second story is a spy thriller, because the company’s chief operating officer — the charming fixer who ran the parts of the business nobody else understood — fled the day the fraud broke, vanished into Russia, and turned out, according to court documents and intelligence services across Europe, to have been a Russian agent the entire time. He remains, to this day, one of the most wanted fugitives in the world.
A national champion built on porn and gambling
Wirecard was founded near Munich in 1999, and its origins were about as far from “national champion” as it is possible to get. In its early years its clientele consisted mainly of pornography and gambling websites — it processed the card payments that more respectable banks wouldn’t touch. The disreputable beginning never entirely washed off, but it was something everyone learned to ignore as the company reinvented itself.
The man who did the reinventing was Markus Braun, an Austrian technocrat with a doctorate and a fondness for Steve-Jobs-style black turtlenecks, who took over as chief executive in 2002 when the company was near collapse and spent the next eighteen years recasting it as the gleaming future of European finance. Braun spoke the language of digital payments and the cashless society, and the German establishment fell in love. The ascent was real, at least on the stock market: in September 2018, in a moment of genuine national pride, Wirecard was admitted to the DAX — Germany’s blue-chip stock index — displacing the venerable, 148-year-old Commerzbank. A former porn-payments processor from a Munich suburb had knocked a pillar of German banking out of the country’s premier index. At its peak the company was worth more than twenty-four billion euros, more than Deutsche Bank.
This pride is the essential fact, because it explains everything that came later. Germany wanted Wirecard to be real. In a country that had produced world-beating carmakers but no globe-conquering tech giant, Wirecard was the proof that Germany could win the digital future. The country had invested its ego in the company’s success — which is precisely why, when a British newspaper started asking hard questions, the German reflex was to defend the champion and attack the messengers.
The second key figure was Jan Marsalek, who became chief operating officer in 2010 and ran the company’s business in Asia — the region where the phantom billions supposedly sat. Marsalek was Braun’s opposite: where Braun was the cerebral visionary, Marsalek was the charming, jet-setting operator, the dealmaker who handled the parts of the business no one else looked at too closely. He cultivated an air of mystery and exotic connections, dropping hints about intelligence contacts and shadowy ventures. At the time, colleagues took it for bluster. In hindsight, it may have been the most honest thing about him.
The business that wasn’t there
The fraud, at its core, is simple to state: roughly half the company didn’t exist. The fictional half ran through what is called “third-party acquiring” — an arrangement in which partner companies in distant jurisdictions supposedly processed card payments on Wirecard’s behalf and remitted the profits. By 2018, this third-party business accounted for half of Wirecard’s reported transaction volume and almost all of its profit, and it ran through just three opaque, lightly-audited partners in Dubai, Singapore, and the Philippines.
The specific trick lay in how Wirecard counted cash. The money supposedly earned by these partners was held, the company said, in escrow and trustee accounts on its behalf — and Wirecard booked that cash onto its own balance sheet, inflating it with money that sat, allegedly, in someone else’s account, far away, behind a wall of trustees. The phantom eventually crystallized into a single number: about one point nine billion euros in cash, said to be sitting in two banks in the Philippines, that turned out not to exist at all. The cash was the keystone of the whole structure: as long as auditors believed nearly two billion euros of real money was sitting safely in Asian accounts, the fictional revenues that supposedly generated it could stand. Remove the keystone, and the arch fell.
The reporter, and the regulator that attacked him
The thread that unspooled the entire twenty-four-billion-euro edifice was pulled by one journalist: Dan McCrum of the Financial Times, who began publishing skeptical pieces about Wirecard’s accounting in 2015, under the wry running title “House of Wirecard,” and kept at it for five years. He was powered by an inside source — Pav Gill, Wirecard’s senior legal counsel in Singapore, who had seen what was happening in the Asian operations and supplied the material that exposed it.
And here is the most damning, most distinctly German element of the whole affair. When confronted with detailed, public allegations of massive fraud at its national champion, the German financial regulator, BaFin, did not investigate Wirecard. It investigated the journalists and the short-sellers. Munich prosecutors opened a criminal investigation into Dan McCrum himself for suspected market manipulation. BaFin took the extraordinary step of banning the short-selling of Wirecard shares — the first time it had ever done such a thing for a single company — effectively protecting the stock from the very people who had correctly spotted that it was a fraud. The watchdog had been pointed at the wrong target, partly out of national pride and partly because of a jurisdictional gap: BaFin had authority only over Wirecard’s small banking subsidiary, not its core business, so no one regulator actually owned the company’s accounts.
The auditors failed too. Wirecard’s longtime auditor, EY, had for years signed off on the existence of the cash reserves, relying on what turned out to be forged bank documents — never performing the most elementary check of independently confirming that nearly two billion euros actually existed. When a special audit by a different firm, KPMG, was finally commissioned in 2019, it reported in April 2020 that it simply could not verify the company’s profits — that, for the crucial third-party business, it could make no statement at all about whether the revenues were real.
The end came in a rush in June 2020. EY refused to certify the accounts. Wirecard announced that the one point nine billion euros was missing; the share price crashed by more than seventy percent. Days later the company admitted the money “probably did not exist,” and the two Philippine banks that supposedly held it said they never had it and that the confirmation documents were forged. Braun resigned. And on the 25th of June, 2020, Wirecard filed for insolvency — the first member of Germany’s blue-chip index ever to do so. A twenty-four-billion-euro national champion had been revealed, in a single week, to be roughly half air.
The arrest, and the vanishing
The two leading men went in opposite directions.
Markus Braun stayed and faced German justice. He turned himself in, was arrested, and was eventually charged with fraud, breach of trust, and accounting manipulation; his criminal trial opened in Munich in December 2022. His defense is the unresolved question at the heart of the case. Braun insists he is innocent — that he, too, was a victim of the fraud, deceived by his own subordinates, and he casts Marsalek as the mastermind. Against him stands the prosecution, resting heavily on a cooperating former executive who has admitted the fraud, and the insolvency administrator who picked through the wreckage and concluded that the missing billions never existed and that, in his words, ninety-eight percent of the business was never real. Did Braun knowingly direct the fraud, or was he a credulous, grossly negligent visionary genuinely fooled by his own COO? Neither answer flatters him — either he is a fraud feigning victimhood, or he is a chief executive who built a twenty-four-billion-euro company without noticing half of it was fiction.
Jan Marsalek, meanwhile, vanished into one of the great real-life disappearing acts of the century. He was dismissed on the 18th of June, 2020, told colleagues he was flying to the Philippines to prove his innocence, and disappeared within hours. False tracks were laid toward Asia — Philippine immigration officials were even bribed to fake an entry stamp suggesting he’d arrived in Manila. In reality he boarded a private jet to Minsk, in Belarus, and then continued by car toward Moscow. He has not been seen in public since.
What investigators and journalists pieced together afterward turned the financial scandal into something far stranger. According to court documents and Western intelligence services, Marsalek had been a Russian agent for years — recruited around 2014, working first for military intelligence and later for the FSB, traveling to Russia dozens of times on a clutch of Austrian passports. He is reported to be living near Moscow under the protection of the Russian services, having assumed the stolen identity of a Russian Orthodox priest. British prosecutors at the Old Bailey alleged that, from his Russian refuge, Marsalek directed a Bulgarian spy ring operating in Britain that surveilled Kremlin critics and journalists across Europe — and the members of that ring were convicted in London in 2025. Austrian prosecutors have alleged he was behind a damaging penetration of that country’s own intelligence service.
It is important to be precise about all this, because Marsalek himself has never stood trial. The espionage is established through the conviction of others and asserted in court documents and intelligence reporting; as it pertains to the fugitive himself, it remains an allegation, because there is no way to test it against a man who cannot be found. Which is exactly what makes Wirecard unique among the great frauds. In every other case, the principal eventually sat in a courtroom and faced a verdict. Wirecard’s most dangerous figure simply walked out, protected by a hostile state, and its deepest questions — how much Braun really knew, whether the fraud and the espionage were ever the same operation, where Marsalek is tonight — remain, by design and by reality, unanswered. The scandal forced Germany to overhaul its financial regulator and left a permanent stain on the auditing profession. But the man who could explain it best is somewhere outside Moscow, and he is not coming back.