Home›Guides›Crypto License in Germany — BaFin Regulation and Licensing Guide
Crypto License in Germany — BaFin Regulation and Licensing Guide
Germany was among the first countries to regulate crypto custody and crypto securities under BaFin. A BaFin licence is required for crypto custody (Kryptoverwahrgeschäft), exchange operations, and issuing crypto securities (Kryptowertpapiere).
BaFin's Role in German Crypto Regulation
The Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin) is Germany's integrated financial regulator, responsible for banks, insurers, and investment firms under KWG, WpIG, and KAGB. Germany classified cryptoassets as financial instruments under §1(11) KWG in January 2020, making BaFin the primary crypto regulator. Since 2020, any company providing custody services for cryptoassets for third parties must hold a BaFin licence for Kryptoverwahrgeschäft. The EU MiCA regulation (effective December 2024) adds an EU-wide layer on top of national BaFin requirements.
- BaFin regulates crypto under KWG, WpIG, and since Dec 2024 — EU MiCA
- Kryptoverwahrgeschäft (crypto custody) requires BaFin licence under §32 KWG
- Crypto exchange and brokerage services regulated under §2(2) WpIG if instruments qualify
- Electronic securities (eWpG) and crypto securities (Kryptowertpapiere) registered with BaFin
- Germany has the largest number of MiCA-licensed crypto entities in the EU as of 2025
Regulated Crypto Activities Under German Law
BaFin distinguishes between activities requiring a full licence, activities requiring notification only, and unregulated activities. The classification depends on whether the crypto asset qualifies as a financial instrument under KWG §1(11) or a MiCA-regulated asset class.
| Activity | Legal Basis | Licence Type Required |
|---|---|---|
| Crypto custody (Kryptoverwahrgeschäft) | KWG §1(1a)(6) | Full BaFin licence §32 KWG |
| Crypto exchange / trading platform | WpIG §2(2), KWG | BaFin licence or MiCA CASP authorisation |
| Crypto broker / OTC desk | WpIG if security tokens | WpIG authorisation |
| ICO / token issuance (security token) | WpHG, ProspektVO | BaFin approval of prospectus |
| Issuing e-money tokens (stablecoin) | ZAG §1 / MiCA Title III | BaFin ZAG licence + MiCA registration |
| Mining / node operation | Unregulated | None required |
| DeFi protocol (non-custodial) | Unregulated if no custody | Case-by-case BaFin assessment |
Kryptoverwahrgeschäft Licence — Requirements
The crypto custody licence under §32 KWG is BaFin's most sought-after crypto authorisation. Applicants must be a German legal entity (typically a GmbH or AG), with minimum initial capital of €125,000 (own funds), at least two qualified managing directors with relevant professional experience, and a detailed business plan, IT security concept, and AML/KYC compliance manual.
- Legal entity: German GmbH or AG required (foreign entities not accepted)
- Minimum own funds: €125,000 under CRR/KWG
- Two qualified Geschäftsführer with BaFin-approved fitness and propriety (Zuverlässigkeit und fachliche Eignung)
- Business plan covering all planned crypto custody activities
- IT security concept per BaFin's BAIT (Bankaufsichtliche Anforderungen an die IT)
- AML/KYC compliance manual meeting GwG §4 obligations
- Separation of client assets from own assets (Segregation)
BaFin Licence Application Process
A BaFin §32 KWG application for crypto custody involves a pre-application meeting (Voranfrage) with BaFin, followed by a formal application submission via BaFin's MFI-Portal. BaFin targets a 6-month statutory review period but complex applications take 9–18 months. BaFin may request additional information (Nachforderungen) multiple times.
BaFin rejected over 60% of §32 KWG crypto custody applications between 2020 and 2023 due to inadequate IT security concepts, insufficient director qualifications, or incomplete AML documentation. Engaging a BaFin-experienced legal adviser before the Voranfrage significantly improves approval rates.
EU MiCA Regulation — Impact on German Crypto Firms
The EU Markets in Crypto-Assets Regulation (MiCA — Regulation 2023/1114) became fully applicable in December 2024 for Crypto Asset Service Providers (CASPs) and earlier for stablecoin issuers. German crypto firms with existing BaFin licences under KWG benefit from a transitional period (grandfathering) until July 2026 under MiCA Article 143. After this period, all CASPs must hold a MiCA CASP authorisation, which is passportable across all 27 EU member states — a significant advantage over the prior national-only licence.
| MiCA Category | Covers | BaFin Role Under MiCA |
|---|---|---|
| Asset-Referenced Token (ART) | Stablecoins referencing multiple assets | BaFin issues ART authorisation |
| E-Money Token (EMT) | Stablecoins referencing fiat currency | BaFin issues EMT authorisation under ZAG + MiCA |
| Crypto Asset Service Provider (CASP) | Exchanges, custody, advice | BaFin issues CASP authorisation, passportable EU-wide |
Electronic Securities and Kryptowertpapiere
Germany's eWpG (Gesetz über elektronische Wertpapiere), effective June 2021, allows bearer bonds to be issued as crypto securities (Kryptowertpapiere) on a blockchain and registered in BaFin's crypto securities register. This is separate from the crypto custody licence and applies specifically to debt securities. Equity crypto securities are not yet covered under eWpG. BaFin maintains the Kryptowertpapierregister and charges a registration fee per issuance.
- eWpG effective 10 June 2021 — GmbHG §795 equivalent for blockchain securities
- Kryptowertpapier (crypto security) registered in BaFin's Kryptowertpapierregister
- Only bearer bonds (Inhaberschuldverschreibungen) currently eligible under eWpG
- Issuer must hold a BaFin prospectus approval or use an exemption under ProspektVO
- Annual registration fees apply to Kryptowertpapier entries
AML and KYC Requirements for Crypto Firms
German crypto businesses are obligated parties under the Geldwäschegesetz (GwG), Germany's AML law. They must conduct customer due diligence (Sorgfaltspflichten), file suspicious transaction reports (SARs) with the FIU (Financial Intelligence Unit), and implement an internal AML programme. The Financial Action Task Force (FATF) Travel Rule applies to crypto transfers — from June 2023, CASPs must transmit originator and beneficiary information for all transfers above €1,000.
- GwG §2(1)(4) classifies crypto service providers as obligated AML entities
- KYC required for all customer relationships — GwG §10
- Travel Rule: transfer data for transactions ≥€1,000 under GwG §25b
- SAR (Suspicious Activity Report) filing with FIU at zoll.de
- AML Officer (Geldwäschebeauftragter) appointment mandatory for licensed firms — GwG §7
Tax Treatment of Crypto in Germany
The German Federal Finance Ministry (BMF) issued comprehensive crypto tax guidance in May 2022 (BMF-Schreiben vom 10. Mai 2022). Key points: individual crypto gains are taxed as private speculative transactions (EStG §23) if held under 1 year, exempt after 1 year. Mining income is taxed as trade income (EStG §15) or other income. Corporate crypto holdings are taxed at standard rates. VAT does not apply to crypto exchange transactions following CJEU Hedqvist (2015). Staking rewards are taxable as other income under EStG §22.
The 1-year holding period exemption (EStG §23(1)(2)) for private individuals is one of Germany's most crypto-friendly provisions globally. Crypto sold after 12 months of holding is completely tax-free regardless of profit size — but the exemption applies only to individuals, not companies.
Frequently Asked Questions
What BaFin licence is required to offer crypto custody in Germany?
A Kryptoverwahrgeschäft licence under §32 KWG is required to provide crypto custody services for third parties in Germany. This applies to any entity holding private keys for clients' cryptoassets. The application requires a German legal entity, minimum €125,000 own funds, two qualified managing directors, and detailed IT security and AML compliance documentation.
How long does a BaFin crypto licence application take?
BaFin targets a 6-month review period under §32(1) KWG, but complex crypto custody applications often take 9–18 months due to multiple rounds of additional information requests (Nachforderungen). A pre-application meeting (Voranfrage) with BaFin before submission can identify gaps and reduce processing time. Ensure all documentation is complete before formal submission.
Does EU MiCA replace the BaFin crypto licence?
Partially. MiCA (EU Regulation 2023/1114) became fully applicable in December 2024 and introduces EU-wide CASP authorisation passportable across all 27 member states. German firms with existing BaFin KWG licences benefit from a grandfathering transitional period until July 2026. After that, a MiCA CASP authorisation replaces the national BaFin licence for most activities. BaFin remains the national competent authority for MiCA in Germany.
Is crypto mining regulated by BaFin in Germany?
No. Crypto mining and node operation are not regulated financial services under KWG or WpIG. Miners do not require a BaFin licence. Mining income is taxed as trade income (Gewerbebetrieb — EStG §15) if conducted commercially, or as other income (EStG §22) if done by individuals on a smaller scale. Mining businesses must register under the GwO (Gewerbeordnung) and pay Gewerbesteuer.
Are crypto-to-crypto exchanges taxable in Germany?
Yes for individuals: under EStG §23, every crypto disposal — including crypto-to-crypto swaps — is a taxable event if the asset was held less than 1 year. The taxable gain is the EUR value of the received crypto minus the EUR value of the spent crypto at the time of the swap. After a 1-year holding period, the gain is completely tax-free for individuals. For GmbHs and AGs, all crypto disposals are fully taxable at corporate rates regardless of holding period.
What is the FATF Travel Rule and does it apply to German crypto firms?
The FATF Travel Rule requires CASPs to transmit originator and beneficiary information alongside crypto transfers. In Germany, it is implemented via GwG §25b from 1 June 2023. For transfers above €1,000, the sending CASP must transmit name, address, and wallet address of the originator to the receiving CASP. For transfers under €1,000, minimum data applies. Non-compliance risks GwG fines.
Can a foreign company obtain a German BaFin crypto licence?
No. BaFin requires applicants under §32 KWG to be German legal entities (GmbH or AG with German registered office). A foreign company wishing to provide crypto custody services in Germany must either establish a German subsidiary or obtain a passportable MiCA CASP authorisation from another EU member state and passport it into Germany under MiCA Article 60 notification procedures.
Is crypto-to-fiat exchange regulated in Germany?
Yes. Operating a crypto-to-fiat exchange platform is regulated in Germany under KWG and/or WpIG if the crypto assets qualify as financial instruments or if the activity constitutes proprietary trading, brokerage, or multilateral trading. Many crypto exchanges hold both KWG and ZAG (e-money) licences. Under MiCA, exchange services are regulated under CASP authorisation category (Article 60 services).
Does a German crypto firm need an AML officer?
Yes. Under GwG §7, all obligated entities — including licensed crypto service providers — must appoint a dedicated Geldwäschebeauftragter (AML compliance officer) and a deputy. The AML officer must have adequate expertise and report directly to senior management. BaFin assesses the AML officer's qualifications as part of the licence application review.
What are the own funds requirements for a German crypto licence?
Under CRR and KWG, the minimum initial capital (Anfangskapital) for a Kryptoverwahrgeschäft licence is €125,000 in own funds. This must consist of paid-in share capital, share premium, and retained earnings — not subordinated loans. Ongoing own funds requirements may be higher depending on business volume and risk profile. BaFin can set individual own funds surcharges (SREP add-ons) above the minimum.
Work with the firm that knows Germany.
Licensed lawyers and accountants in Düsseldorf. Free 30-minute consultation, no commitment.
Book Free Consultation