🇩🇪 Germany · BaFin · KWG & MiCA CASP

Germany Crypto Licence: BaFin Authorisation 2026

Germany is Europe's largest economy and one of the world's most significant crypto markets. BaFin (the Federal Financial Supervisory Authority) has regulated crypto custody since 2020 under the Banking Act (KWG), and now issues MiCA-compliant CASP authorisations. A German crypto licence signals the highest level of regulatory credibility in the EU.

12–18 mo
Timeline
~30%
Corp tax
EU
Passport
BaFin
Regulator
At a Glance
Regulator BaFin
Framework KWG § 32 + MiCA
Licence types Custody, exchange, broker
Min. capital €125k–€730k
EU passporting Yes
Corp tax ~30% combined
Difficulty Very High

Why BaFin Authorisation Is Europe's Most Prestigious Crypto Licence

Germany has regulated crypto since 2020 when BaFin classified crypto assets as financial instruments under the Banking Act (KWG), requiring all crypto custodians and exchanges to obtain a licence under § 32 KWG. Germany was also one of the first EU states to transpose the 5th AML Directive for crypto. Under MiCA, BaFin is now the competent authority for CASP authorisations in Germany.

A BaFin-authorized crypto licence is one of the most prestigious in the world — comparable to FCA (UK) or MAS (Singapore). The depth of BaFin's due diligence, the ongoing supervisory requirements, and the difficulty of obtaining authorisation means that BaFin-licensed entities command exceptional trust from institutional clients, banking partners, and regulators globally.

However, the process is long (12–18 months), expensive, and demanding. BaFin expects genuine German substance — not just a registered office, but functioning management, local compliance personnel, and real operational presence. Incomplete applications are rejected outright, not returned for revision.

Preparation is critical: BaFin does not iterate on incomplete applications. A rejected BaFin application resets the entire clock and timeline. Investing in thorough preparation — typically 6–8 months of pre-filing work with experienced BaFin counsel — is essential. Do not rush to file; file once, file correctly.

BaFin Crypto — Licence Types

Germany offers multiple licence types for crypto businesses under KWG and MiCA. The applicable route depends on the business model and the assets handled.

Licence Type Legal Basis Min. Capital
Crypto Custody Business (Kryptoverwahrgeschäft) § 1 Abs. 1a Nr. 6 KWG €125,000
Crypto Asset Exchange (MiCA CASP) EU MiCA Art. 59 €150,000–€730,000
Crypto Asset Broker (MiCA CASP) EU MiCA Art. 59 €50,000–€125,000
Investment Brokerage (crypto financial instruments) MiFID II + KWG €125,000

BaFin Crypto Licence — Key Requirements

Entity
German GmbH or AG required
GmbH recommended for most; AG required for some activities
Directors
Min. 2 directors; both with relevant expertise
BaFin fit & proper — extensive background review; must demonstrate crypto expertise
Shareholders
BaFin fit & proper for 10%+ holders
All qualifying shareholders subject to BaFin background check
Compliance Function
CCO, MLRO, and Risk Officer required
All three functions required; staffed by qualified individuals
AML/KYC
GwG (German Money Laundering Act) compliant
German-specific AML rules; Travel Rule compliance required
IT Security
BSI standards compliance
Federal Office for Information Security (BSI) guidelines apply
Capital Adequacy
Ongoing monitoring required
Regular capital adequacy reports to BaFin; liquidity monitoring
Recovery Plan
For larger operators
Recovery and resolution planning for systemically relevant entities

How to Get a BaFin Crypto Licence — Step by Step

1
Incorporate German Entity and Inject Capital

Incorporate a German GmbH (recommended for most applicants) or AG at the Commercial Register (Handelsregister). Inject the minimum capital requirement for the intended licence type. Establish a genuine physical office in Germany with functional management. German substance is a core BaFin expectation — not a formality.

4–6 weeks
2
Engage Compliance and Legal Counsel — Build Application

Engage BaFin-experienced legal and compliance counsel immediately. The application package is extremely detailed: complete business plan, 5-year financial projections, organizational structure with CVs and fit & proper declarations for all directors and qualifying shareholders, AML/CFT policies per GwG, IT security framework per BSI, capital adequacy methodology, and operational risk framework.

8–12 weeks
3
File BaFin Application (§ 32 KWG or MiCA Form)

Submit the complete application to BaFin via the official electronic portal. BaFin will perform a completeness check — any gaps result in rejection, not a request to supplement. Ensure every section is addressed completely. BaFin application forms are detailed and German language documentation is often required alongside English materials.

Filing week
4
BaFin Review — Extensive Questioning and Possible On-Site

BaFin conducts the most thorough review of any EU crypto regulator. Expect multiple rounds of written clarification requests, interviews with directors, and potentially an on-site inspection of the German office and IT systems. All responses must be in German (or officially translated). Responses are typically required within 4–6 weeks of each BaFin request.

6–12 months
5
Authorisation Issued — Ongoing BaFin Reporting

BaFin issues the authorisation. Ongoing obligations are demanding: quarterly supervisory reports to BaFin, annual audited financial statements by a BaFin-approved auditor, annual AML/CFT review, capital adequacy monitoring, IT security reviews, and regular supervisory meetings with BaFin examiners. BaFin may conduct unannounced inspections.

Authorisation and ongoing

BaFin Crypto Licence — Full Cost Breakdown

Item Details Approx. Cost
BaFin application fee By licence type (non-refundable) €1,500–€25,000
Annual BaFin supervisory levy Ongoing annual regulatory levy €5,000–€50,000/yr
Company formation (GmbH) Notary, Handelsregister, constitutional docs €3,000–€8,000
German office and management Office lease + German-resident management €30,000–€80,000/yr
Legal & compliance preparation Application package, BaFin counsel, policies €30,000–€80,000
Min. capital Paid-up capital (by licence type) €125,000–€730,000
Estimated Year 1 Total (excl. capital) Setup, regulatory fees, office, management, professional fees €100,000–€250,000+

BaFin Crypto Licence — Common Questions

Yes. Operating a crypto exchange or custody service targeting German clients requires BaFin authorisation under § 32 KWG and/or the EU MiCA CASP regime. Unlicensed operations are a criminal offence under German law. BaFin actively monitors the market and pursues unauthorized operators. Note: EU firms with MiCA passports from other EU states can passport into Germany without a separate BaFin authorisation.
Minimum capital depends on the licence type: Crypto Custody Business (KWG): €125,000; Crypto Exchange (MiCA Class 3): €150,000; Full-service exchange with dealing on own account (MiCA Class 3+): up to €730,000. Working capital requirements are additional — BaFin will assess whether the capitalisation is adequate for the projected business scale.
12–18 months for a complete application. BaFin is one of the most thorough financial regulators in the world. Incomplete applications are rejected outright, and re-filing resets the clock entirely. Proper preparation by experienced BaFin counsel — typically 6–8 months of pre-filing preparation — is essential. Well-prepared applications with full documentation can be authorized in 12 months; complex cases take longer.
No. BaFin only licences German-incorporated entities (GmbH or AG). Foreign companies must establish a German subsidiary with genuine local management and substance. Branch authorisations for non-EEA firms are possible in limited cases under § 53 KWG, but this route has significant restrictions. EEA firms with MiCA licences from other EU states can passport into Germany without a German subsidiary.
Combined approximately 30%: 15% corporate income tax (Körperschaftsteuer) + approximately 15% trade tax (Gewerbesteuer, varies by municipality, typically 14–17%) + 5.5% solidarity surcharge on the KSt. Germany has no special tax regime for crypto companies, unlike Malta (5% effective), Cyprus (12.5%), or Georgia (0% Virtual Zone). The high tax rate is offset by Germany's market size and regulatory prestige.

Related European Crypto Jurisdictions