The bank said that when it first rolled out the IDMs in 2012, they were providing the correct Transaction Threshold Reports (TTRs) for cash deposits of $10,000 or more. It said the issue began after an "unrelated software update" to the machines in late 2012.
"Following the software update, a coding error occurred which meant the IDMs did not create the TTRs needed," the statement said.
"This error became apparent in 2015 and within a month of discovering it, we notified AUSTRAC, delivered the missing TTRs and fixed the coding issue. The vast majority of the reporting failures alleged in the statement of claim (approximately 53,000) relate specifically to this coding error. We recognise that there are other serious allegations in the claim unrelated to the TTRs."
CBA releases its full year results on Wednesday. On Friday its shares closed down 3.9 per cent, wiping about A$5.5 billion ($5.b) off its market value.
CBA could face a maximum penalty of A$18 million for each of the 53,700 contraventions, if found guilty - a total of around A$960b.
The bank has countered that any potential penalty could be as low as A$18m, arguing that each of the contraventions "could be considered to arise from a single course of conduct to the extent that they emanated from the same systems error".
"Ultimately, a Court will seek to ensure that, overall, any civil penalties are just and appropriate and do not exceed what is proper having regard to the totality of established contraventions," it said.
The case is already making waves in Federal Parliament.
South Australian Senator Nick Xenophon on Sunday floated introducing legislation to apply criminal sanctions, including jail terms, to the executives of banks "who systemically fail to abide by the rules" on money laundering and terror financing.