Bail-In Protection in 2026: How to Structure Your Deposits Before the Next Crisis

Bail-in protection is not about finding a safer bank — it is about making sure the bulk of your wealth is legally unreachable by resolution authorities before a crisis happens. That distinction matters more than most private clients realize, and most private bankers will not explain it until after the fact.

Since 2015, the EU’s Bank Recovery and Resolution Directive, Switzerland’s TBTF amendments, Singapore’s updated MAS Act, and the US Dodd-Frank Orderly Liquidation Authority have all given regulators the explicit power to write down uninsured deposits in a failing bank. The bail-out era ended in 2008. What replaced it is a strict creditor hierarchy that forces losses onto shareholders, bondholders, and — when the losses are deep enough — depositors who hold more than the insurance limit.

The difficult part is that “uninsured” simply means above the coverage threshold. In the EU, that is €100,000 per depositor per bank. In Switzerland, CHF 100,000. These limits were designed for retail savers. Consequently, if you hold €500,000 or €5 million in a single institution, the rules were not written with you in mind. You are effectively an unsecured creditor.

This article explains exactly how the resolution hierarchy works, where deposits sit within it, and how to build a bail-in protection structure that keeps your core wealth outside the system entirely — structured around three layers that resolution authorities cannot legally reach.

The Resolution Waterfall: Who Gets Hit First and Where Your Money Actually Sits

Every major banking jurisdiction now follows the same essential playbook when a bank fails. The order of losses is determined in law — not improvised in the moment — and has been since the G20 agreed on the Key Attributes of Effective Resolution Regimes in 2011. Understanding that order is the foundation of any serious bail-in protection plan, because you cannot structure around a mechanism you have not mapped.

In the EU, the BRRD and the Single Resolution Mechanism give the Single Resolution Board authority to write down liabilities in a failing institution. Switzerland’s FINMA holds equivalent powers for systemically important banks under the TBTF framework. Singapore updated its MAS Act in 2016 to include explicit bail-in authority for locally incorporated banks. The US Dodd-Frank Act created the Orderly Liquidation Authority specifically to prevent taxpayer rescues — shifting losses to creditors instead. These are not obscure provisions. They are active, tested frameworks, and regulators run simulation exercises against them annually.

The technical phrase that most private bankers skip is that uninsured deposits in EU and Swiss resolution frameworks rank pari passu with senior unsecured debt. In plain terms: they absorb losses only after shareholders, AT1 holders, Tier 2 bondholders, and senior unsecured creditors have been fully exhausted — but if the hole in the balance sheet is deep enough, uninsured deposits will be hit. The pari passu clause is not a protection. It is a queue position.

The Credit Suisse resolution in March 2023 illustrated step ② with unusual clarity. AT1 bondholders — instruments explicitly designed to absorb losses — saw $17 billion written to zero overnight. The AT1 litigation that followed is still working through the courts. That case was a Tier 1 event. But the legal machinery that handled AT1s is the same machinery that, in a deeper crisis, reaches into step ⑤.

Bail-in protection, therefore, means structuring your deposits and assets so you are not sitting in the grey zone at step ⑤ when a resolution is announced. That is the only definition that actually matters.

Why Deposit Insurance Leaves Most Wealth Holders Exposed

Deposit insurance is one of the most misunderstood financial products in existence. Most clients assume it works like property insurance — you pay in, something goes wrong, the government covers the loss. The reality is more complicated, and the gap between assumption and fact is exactly where bail-in risk lives.

Country specific limts explained

The US limit is the most generous of the major jurisdictions, at $250,000 per depositor per bank per ownership category. That last qualifier matters. A revocable trust with named beneficiaries multiplies coverage — $250,000 per beneficiary — which is how sophisticated US clients legally hold more in FDIC protection. For everyone else, the limits are blunt instruments. Anyone with €300,000 in operating capital at a single EU bank has €200,000 sitting unprotected.

Switzerland deserves a specific note. esisuisse is funded by member banks through annual contributions, not by the Swiss Confederation directly. In a scenario where multiple Swiss institutions face simultaneous stress — something that looked less theoretical after the Credit Suisse collapse — the fund would come under significant pressure. What a broader Swiss banking stress scenario would look like is worth thinking through before it becomes relevant.

There is also a fintech gap that rarely appears in bail-in protection discussions. Revolut, Wise, N26, and similar platforms typically hold client funds in pooled accounts at licensed partner banks. The deposit insurance applies — but at the level of the underlying bank, not per fintech client. If 10,000 Revolut clients collectively hold €80 million at a single partner bank, and that bank fails, the €100,000-per-depositor protection must be applied across all of them simultaneously, based on the partner bank’s records. Digital nomad banking risks around this structure are more significant than most users appreciate.

The bottom line is uncomfortable but clear: deposit insurance is a retail product. It was designed for people holding one savings account. A serious bail-in protection structure must acknowledge this honestly, then build around the limitation. And for clients with significant assets spread across multiple fintechs, building that bail-in protection layer becomes even more urgent than most advisors discuss.

Four Scenarios: Same Rules, Very Different Outcomes

Abstract risk becomes real in scenarios. The following four examples are drawn from client advisory situations and documented resolution events. Names and some identifying details have been changed, but the financial structures and outcomes are based on real cases.

Scenario 1: The European Entrepreneur — What Goes Wrong

Pierre runs a SaaS company from Lisbon. He keeps €1.8 million at a major EU bank — operating float, tax reserves, and personal savings combined in a single account, because it is convenient and the institution is “systemic.” When a commercial real estate collapse triggers resolution proceedings, the SRB declares the bank failing or likely to fail. AT1s, Tier 2 bonds, and senior unsecured debt absorb what they can. The residual hole is €500 million.

Uninsured deposits take a 30% haircut. Pierre loses €504,000. He receives equity in a bridge bank that will wind down over the next 18 months — effectively worthless. His business misses payroll two months later.

What bail-in protection would have looked like for Pierre: operational deposits under €100,000 across three different EU banks, tax reserves held in short-term German Bundesanleihen, personal savings in a Swiss private bank relationship with sovereign bond custody. None of that is complicated. However, all of it requires setup before the crisis, not during.

Scenario 2: The Swiss Resident — Spared by Discretion, Not by Design

Anna holds CHF 2.5 million at UBS. Her reasoning: Switzerland does not let its largest bank fail. After the forced Credit Suisse merger, UBS’s balance sheet represents approximately 500% of Swiss GDP. When FINMA activates a Single Point of Entry resolution at the holding company level, AT1s and senior debt at the holding company are written down. Deposits at the operating bank transfer to a bridge entity. Anna’s uninsured deposits survive — this time — because the SPE structure happened to ring-fence operating bank deposits in practice.

The problem is “this time.” No statutory provision guaranteed that outcome. FINMA exercised discretion in how it applied the SPE model. Bail-in protection planning built on regulatory goodwill is not a plan — it is a hope. The next resolution may not run the same way.

Scenario 3: The US Digital Nomad — The Right Outcome for the Wrong Reason

Sarah holds $800,000 at a small US community bank that fails in 2024. The FDIC uses Purchase and Assumption — a larger acquiring bank takes all deposits intact and she loses nothing. She concludes that her banking setup is fine.

That conclusion deserves scrutiny. P&A worked because the failure was contained and the acquiring bank found the transaction commercially attractive. In a systemic stress event involving multiple large institutions, the FDIC falls back on its formal bail-in powers under the Orderly Liquidation Authority. Uninsured deposits would carry genuine risk. Sarah got the right result, but for structural reasons that do not generalize — and her bail-in protection setup remained entirely dependent on FDIC discretion.

Scenario 4: The Smart Structurer — What the Model Looks Like

David holds €3 million total. He keeps €100,000 each at two EU banks in different countries, CHF 100,000 each at two Swiss private banks, and $250,000 at a US bank. The remaining €1.2 million is in a portfolio of short-term German Bunds and World Bank bonds held in direct custody — not as deposits. A crisis hits one of his EU banks.

He loses nothing. The €100,000 insured amount is paid within three weeks. His bond portfolio appreciates as rates fall during the flight to safety. His other banking relationships are untouched. He continues operating normally throughout.

That is what real bail-in protection architecture looks like in practice. It is not exotic. But it requires the setup to happen before the scenario, not after the announcement.

The Three-Layer Bail-In Protection Structure

Most standard advice on deposit safety assumes you can open a cantonal bank account in Switzerland or a Sparkasse account in Germany. For non-residents and internationally mobile clients, those paths are largely closed. The three-layer bail-in protection structure below is designed specifically for people who cannot rely on traditional domestic banking relationships.

Layer 1: Operational Deposits — Insured, Distributed, and Kept Minimal

The first layer handles genuine daily operations: payroll, transactions, tax payments, and short-term cash needs. The principle is straightforward — keep deposits below the insurance limit at every institution, across 2-3 banks in different jurisdictions. Never exceed €100,000 (EU), CHF 100,000 (CH), $250,000 (US), or SGD 75,000 (SG) per bank per legal entity.

This layer is the floor of a bail-in protection plan, not the ceiling. That is the most common structural mistake: treating Layer 1 as the entire strategy. Moreover, Swiss private banking relationships that offer non-resident services can provide Layer 1 coverage for CHF balances, typically with minimum relationship sizes between CHF 250,000 and CHF 1,000,000 depending on the institution.

Layer 2: Core Wealth in Sovereign and Supranational Bonds

The key legal distinction here: bonds held in a custody account at a bank are your assets, not the bank’s liabilities. If the bank fails, your bonds are segregated from the bankruptcy estate. They are returned to you. They are not deposits; therefore, they cannot be bailed in. This is the structural difference that matters.

For EUR exposure, short-term German Bundesanleihen — Schatz, Bobl, Bund — are the benchmark. For USD, US Treasury bills through a private banking custody account or directly via TreasuryDirect if you hold a US tax identification number. For CHF, Swiss Confederation bonds offer comparable protection denominated in the Swiss franc. Supranational issuers — the World Bank, the European Bank for Reconstruction and Development, the European Investment Bank — offer AAA-rated instruments in multiple currencies, backed by member states rather than a single government. They add geographic diversification to the bond layer without adding credit risk.

A reasonable allocation for clients holding €1M or more in liquid assets: 50-70% of core wealth in Layer 2. It earns more than deposits at current yield levels, carries zero bail-in risk, and can be liquidated during normal market hours. Layer 2 is also the part of the bail-in protection structure that generates yield — unlike a vault, it is not pure insurance cost. The top Swiss private banks by assets under management all offer non-resident custody accounts for sovereign bond holdings — the relationship minimums vary, but most are accessible at €500,000-€1,000,000.

Layer 3: Allocated Physical Gold as Systemic Insurance

Physical gold — specifically, allocated gold held under your name in a Swiss vault, not pooled — is the only major liquid asset that sits completely outside the financial system. It is not a bank deposit, not a security, and not a liability of any institution. Allocated gold does not enter a bank’s bankruptcy estate under Swiss or EU insolvency law. It cannot be bailed in because it is not part of the balance sheet in any legal sense.

Quick caveat: this is not an argument for gold as a speculative investment. The allocation in a bail-in protection context — typically 5-10% of liquid assets for clients above €2 million — is systemic insurance. It is the one asset class that continues to function when the financial system itself is under stress. Swiss VAT-exempt vault storage through a private bank or dedicated custodian typically costs 0.3-0.5% annually. Against the cost of a 30% haircut on uninsured deposits, the cost of bail-in protection via gold looks very different.

Each entity also gets its own insurance coverage if structured with genuine economic substance. A personal account, an operating company, and a holding company can each hold up to the insurance limit per bank, provided each entity has real governance, separate tax filings, and actual business purpose. Using multiple entities to extend bail-in protection through insurance multiplication is a legitimate strategy — but resolution authorities can and do collapse structures that lack real substance.

Six Steps to Build Your Bail-In Protection Before the Next Crisis

The scenarios in the previous section share one characteristic: the clients who came through intact had made their decisions months or years before the event. The ones who lost money had been meaning to make changes. Here is the pre-resolution checklist we use in bail-in protection engagements — structured to complete within 30 days.

Step 1: Audit Every Account — Including Your Fintechs

Create a spreadsheet: institution, jurisdiction, balance, insurance limit, and the amount above that limit highlighted in red. That red figure is your uninsured, bail-in-able exposure today. Include every fintech account and any cash sweep accounts your brokerage uses. Most clients who do this for the first time are surprised by the total.

Step 2: Open a Sovereign Bond Custody Account

Any Swiss, Singapore, or Liechtenstein private bank that accepts non-resident clients can facilitate this. Buy your first German Bund or US Treasury bill this month — not as a large commitment, but to establish the relationship, understand the mechanics, and become comfortable with the settlement process before you need to act under pressure.

Step 3: Arrange Allocated Gold Storage

Arranging allocated gold storage as part of your bail-in protection plan is simpler than most people expect. Contact a Swiss private bank or a dedicated vault operator such as Loomis or Via Mat International for quotes on allocated storage in Switzerland. Even starting with a modest allocation establishes the legal structure and custody arrangement you can scale when needed.

Step 4: Pre-Open a Banking Relationship in a Second Jurisdiction

Account opening for non-residents can take 4-8 weeks under current AML onboarding requirements. Do this now, while you don’t need the account urgently. If you are EU-based, a Swiss private banking relationship adds jurisdiction diversification. If you are outside the EU, a German or Dutch bank gives stable EUR coverage as a complement.

Step 5: Document Your Source of Funds Now

Post-resolution, accounts are routinely frozen pending AML review as part of the transfer process. Clean documentation — tax returns, sale agreements, inheritance records, investment statements — accelerates release significantly. Preparing a source-of-funds file in advance costs a few hours. Doing it under pressure during a resolution takes weeks, during which your funds are inaccessible.

Step 6: Stress-Test Your Liquidity for 90 Days

Ask one question: if all uninsured deposits were frozen for three months, could you continue operating? If the answer is no, restructure until it is yes. Specifically, keep 6-12 months of operational expenses in insured deposits or short-duration sovereign bonds that can be liquidated quickly. That liquidity buffer is the practical foundation of any working bail-in protection plan — and it is the piece that most people discover they are missing when they do the audit in Step 1.

Bail-In Protection: Frequently Asked Questions

The old rule was “pick a safe bank and trust it.” That rule is structurally broken. Bail-in regimes in every major jurisdiction have replaced it with a creditor hierarchy, and the hierarchy has been tested. Bail-in protection today means treating your liquid wealth as a portfolio problem, not a banking problem. Layer 1 covers operations. Layer 2 holds your real wealth in instruments that resolution authorities cannot touch. Layer 3 provides systemic insurance for scenarios where Layer 2 itself faces stress. If you would like help structuring a banking setup across Switzerland, Singapore, or both jurisdictions, contact our team to begin the process.