Germany -- Licensing Requirements Regulatory Overview
Methodology
AI-generated synthesis from web search results.
Limitations
- AI-generated content -- not reviewed by human expert
- Source URLs not independently verified
Cryptocurrency Licensing Requirements in Germany
Germany requires mandatory licensing from BaFin (Federal Financial Supervisory Authority) for all entities providing crypto-asset services, including exchanges, custody providers, and payment processors.[1][4][5]
Licensing Framework
The regulatory regime operates under two primary legal structures:
- German Banking Act (KWG): Since January 2020, crypto custody has been regulated as a financial service requiring a BaFin license.[1][2]
- Markets in Crypto-Assets Regulation (MiCAR): Applies EU-wide as of the end of 2024, establishing harmonized licensing requirements for crypto-asset service providers throughout the EU.[1]
Licensed Activities
Entities requiring BaFin authorization must obtain licenses for specific activities:[2][5][6]
- Safekeeping, administration, and safeguarding of crypto assets or private keys
- Operation of trading platforms (cryptocurrency exchanges)
- Exchange services (conversion between fiat and crypto, or between different crypto assets)
- Custody and wallet management services
Individual use of cryptocurrency for personal investment does not require licensing.[4]
Capital Requirements
Minimum capital of €125,000 is required for custody licenses.[2][3][6] Other crypto-asset activities, such as working with crypto securities, require higher thresholds starting at €150,000.[6]
Capital adequacy must be documented through bank accounts and audited financial statements, with quarterly reporting requirements.[3]
Key Operational Requirements
All licensed providers must comply with:
- Fit-and-proper requirements: At least one managing director must be reliable, sufficiently qualified, and experienced in crypto custody business.[2][3]
- Professional liability insurance: Minimum €1,000,000 covering custody service operation risks.[3]
- IT security procedures: Per BAIT (BaFin Guidance on IT Requirements), including encryption, access controls, and incident response.[3]
- Customer asset segregation: Complete separation of client and proprietary crypto assets required.[3]
- AML/CFT compliance: Full adherence to the German Money Laundering Act (GwG) with customer identification and transaction monitoring.[3][4]
- Know Your Customer (KYC): Verification of all transaction parties' identities.[4]
Local Presence Requirement
German domicile is mandatory. Only entities established in Germany can obtain a license under the German Banking Act.[2] While crypto custody business may be relevant for service providers domiciled outside Germany, generally only German-domiciled entities can obtain licenses.[2] Service providers from other EU/EEA member states cannot currently rely on passports to provide crypto custody services in Germany, as the regulation is based on autonomous German legislation rather than harmonized European law.[2]
Grandfathering Provision
Service providers already engaging in crypto custody activities in Germany as of January 1, 2020 may qualify for grandfathering exemptions, but those commencing such activities after this date do not benefit from this provision.[2]
Application Process
The licensing application involves:[3]
- Establishing a German legal entity (GmbH, AG, or bank) with proper corporate governance
- Preparing a comprehensive business plan describing crypto custody offerings, technology platform, and security procedures
- Documenting capital adequacy with €125,000 minimum through bank accounts and audited financial statements
- Submitting formal application to BaFin
Timeline: 6-12 months[3]
Fees: €10,000-50,000 for application plus €5,000-30,000 for annual BaFin supervision[3]
Regulatory References
- German Banking Act (KWG): § 1(1a) Sentence 2 No. 6[3]
- Markets in Crypto-Assets Regulation: EU 2023/1114[3]
- German Securities Trading Act (WpHG)[3]
- German Money Laundering Act (GwG)[3]
- BAIT (BaFin Guidance on IT Requirements)[3]
Source Data
BaFin — authorises crypto-asset service providers under MiCA (KMAG § 3(1)) and licenses qualified crypto custody under KWG § 32; the ESMA interim MiCA register lists 103 entries with home state Germany as of 14 October 2026, covering both authorisations and Article 60 notifications.
Kreditwesengesetz (KWG) § 32 with § 1(1a) sentence 2 Nr. 6 — licence for "qualified crypto custody" (custody of crypto instruments and of keys for crypto securities, crypto fund units and DLT securities); the licence carries no EU passport, which is available only to MiCA-authorised crypto-asset service providers.
2020Crypto-asset service providers in Germany need a MiCA authorisation from BaFin (KMAG § 3(1)) or, for credit institutions and other listed financial firms, a MiCA Art 60 notification; the German transitional regime for pre-MiCA licensees ended at the latest on 31 December 2025 (KMAG § 50(2) Nr. 3). BaFin checks applications for completeness, sets a four-week deadline for missing documents and rejects applications still incomplete after it.
Custody and administration of MiCA crypto-assets for clients (Kryptoverwahrung, KMAG § 2(11)) is a MiCA crypto-asset service that needs BaFin authorisation and at least €125,000 minimum capital (MiCA Annex IV, Class 2); the KWG licence for crypto custody now covers only "qualified crypto custody" of crypto instruments, crypto securities, crypto fund units and DLT securities (KWG § 1(1a) sentence 2 Nr. 6).
Operating a crypto-asset trading platform in Germany requires MiCA authorisation from BaFin (KMAG § 3(1)) and at least €150,000 minimum capital (MiCA Annex IV, Class 3); exchanging crypto-assets for funds or other crypto-assets is a Class 2 service with a €125,000 minimum.
BaFin is Germany's competent authority under MiCA Art 93(1) (KMAG § 3(1)), authorising and supervising crypto-asset service providers and token issuers established in Germany, and it is the AML supervisor for crypto-asset service providers under GwG § 50 Nr. 1 b; ongoing monitoring is shared with the Deutsche Bundesbank (KMAG § 6).
Applications for MiCA authorisation in Germany are filed with BaFin (Referat ZK 4) with an electronic copy to the Deutsche Bundesbank's Kompetenzzentrum ZAG- und Kryptoaufsicht (Hauptverwaltung Berlin and Brandenburg); both MiCA authorisations and Art 60 notifications are subject to fees.
For KWG-only qualified crypto custodians BaFin applies BAIT until 31 December 2026 and DORA (Regulation (EU) 2022/2554) from 1 January 2027; firms that also hold a MiCA authorisation as crypto-asset service provider are subject to MiCA and DORA.
Under KMAG § 6 the Deutsche Bundesbank cooperates with BaFin in applying MiCA and DORA and carries out the ongoing monitoring of crypto institutions — evaluating their filings, audit reports and accounts and conducting prudential examinations — normally through its regional offices (Hauptverwaltungen).
Since FinmadiG, the German Banking Act defines crypto-assets (Kryptowerte) by reference to MiCA: KWG § 1(11) states that crypto-assets are those within Article 3(1)(5) of Regulation (EU) 2023/1114, replacing the earlier national crypto-asset definition.
Crypto-asset exchanges and custodians in Germany are now licensed through MiCA authorisation by BaFin (KMAG § 3(1)); electronic securities were introduced by a separate statute, the eWpG of 3 June 2021 (BGBl. I S. 1423), under which a crypto security is an electronic security entered in a crypto securities register (eWpG § 4(3)).
Germany's MiCA transition for previously licensed firms ended at the latest at the end of 31 December 2025 (KMAG § 50(2) Nr. 3); KWG-licensed firms could use a simplified authorisation procedure (§ 50(3)), and firms whose crypto activity had been licence-free had to notify BaFin by 1 August 2024 (§ 50(4)).
Obliged entities in Germany, including crypto-asset service providers, must report facts indicating money laundering or terrorist financing to the Financial Intelligence Unit (Zentralstelle für Finanztransaktionsuntersuchungen) without delay and regardless of the amount involved (GwG § 43(1)).
31 fact(s) collected but awaiting source verification. View in explorer →
References
This article was generated by Perplexity Sonar .
Primary Sources
BaFin. (n.d.). BaFin. Retrieved April 9, 2026, from https://bafin.de de
eur-lex.europa.eu. (n.d.). eur-lex.europa.eu. Retrieved April 22, 2026, from https://eur-lex.europa.eu/eli/reg/2023/1114/oj
Secondary Sources
www.bafin.de. (n.d.). www.bafin.de. Retrieved April 22, 2026, from https://www.bafin.de de
www.gesetze-im-internet.de. (n.d.). www.gesetze-im-internet.de. Retrieved April 22, 2026, from https://www.gesetze-im-internet.de/ de
Edit History
Related Content
This article is maintained by AI research workers and reviewed by human editors. Learn about our methodology →