Germany — License Map

June 4, 2026

21 min read

Germany classifies cryptocurrencies as intangible economic goods (andere Wirtschaftsgüter) and regulates crypto service providers through BaFin under a crypto custody licensing regime established within the Banking Act (KWG). Since 2020, BaFin has granted over 20 crypto custody licenses, making Germany one of the first EU jurisdictions to require dedicated licensing for crypto custodians. With MiCA taking effect on 30 December 2024, Germany transitioned to the harmonized EU CASP framework through the Crypto Markets Supervision Act (Kryptomärkteaufsichtsgesetz, KMAG), shortening the EU's standard 18-month grandfathering period to 12 months -- existing license holders had until 31 December 2025 to complete the transition.

On taxation, Germany offers one of the most favorable regimes for long-term individual crypto holders in Europe: gains from private disposal transactions held for more than 12 months are entirely tax-free under Section 23(1) No. 2 EStG. Short-term gains are taxed at the individual's marginal income tax rate (14%-45% plus solidarity surcharge). The Federal Ministry of Finance (BMF) has issued comprehensive administrative guidance, most recently the March 2025 circular that replaced the May 2022 letter, providing detailed treatment of mining, staking, DeFi, airdrops, and documentation requirements.

From 1 January 2026, CASPs operating in Germany are subject to the Kryptowerte-Steuertransparenzgesetz (KryptoStTranspG/KStTG), Germany's implementation of DAC8 and the OECD CARF. Calendar year 2026 is the first collection period; reporting CASPs must submit data to the Federal Central Tax Office (BZSt) by 31 July 2027, with the first automatic international exchange across EU member states by 30 September 2027 (2026 is the first collection year, not the first exchange year).

1. Regulatory Architecture

Germany's crypto regulatory framework spans financial supervision, tax administration, and EU-level integration:

AuthorityFull NameRole
BaFinBundesanstalt für FinanzdienstleistungsaufsichtSupervises CASPs under MiCA/KMAG; grants crypto custody licenses; enforces AML/KYC; issues public warnings
BMFBundesministerium der Finanzen (Federal Ministry of Finance)Issues binding administrative guidance on crypto taxation (2022 and 2025 circulars)
BZStBundeszentralamt für Steuern (Federal Central Tax Office)Processes cross-border tax information exchange; receives DAC8 CASP reports
FinanzamtLocal tax officesProcess individual tax returns; can request bank statements and exchange data to verify crypto reporting

Primary legislation and guidance:

Statute / InstrumentFunction
Section 23 EStGGoverns private disposal transactions, including the 1-year holding period exemption
Section 22 Nr. 3 EStGCovers miscellaneous income (mining, staking, airdrops) with EUR 256 exemption
Section 15 EStGBusiness income from commercial crypto activities
KStGCorporate income tax for companies holding crypto
GwG (Money Laundering Act)Designates crypto service providers as obliged entities for AML/KYC
KMAG (Crypto Markets Supervision Act)Implements MiCA in Germany; expands BaFin supervisory powers
BMF Circular, 6 March 2025Current governing guidance -- replaces 2022 letter; covers DeFi, active/passive staking, documentation
BMF Letter, 27 February 2018VAT treatment of cryptocurrencies

BaFin licensing timeline:

DateDevelopment
2020BaFin begins granting crypto custody licenses under KWG
By end 2024Over 20 crypto custody licenses granted
30 December 2024MiCA Regulation takes effect across the EU
31 December 2025Germany's shortened transition deadline for existing license holders
12 April 2026Germany leads the EU with ~53 authorised CASPs (MiCA SCAN / ESMA-register snapshot)
17 April 2026ESMA statement on the end of MiCA transitional periods (wind-down / client-migration duties; EU-wide deadline 1 July 2026)
26 May 2026KMAnzV (Ordinance on Notifications and Submission of Documents under the KMAG) published in the Federal Gazette

2. Tax Reporting Obligations

Tax Return Filing

  • Crypto income is reported on Anlage SO (Sonstige Einkünfte -- other income) of the annual income tax return
  • From tax year 2025, a dedicated "Kryptowerte" section was introduced on the Anlage SO form
  • Filing deadline: 31 July of the following year for self-filers; extended to 28 February of the second following year when using a tax advisor (Steuerberater)

Tax Rate Summary

ScenarioRateHolding PeriodNotes
Private gains, held < 1 year14%-45% + solidarity surcharge< 12 monthsMarginal income tax rate
Private gains, held > 1 year0% (tax-free)> 12 monthsComplete exemption; no reporting obligation for the gain
Private gains < EUR 1,000/year0% (tax-free)< 12 monthsFreigrenze from 2024 (all-or-nothing; exceeding by EUR 1 makes entire amount taxable)
Mining/staking (private)14%-45%N/AEUR 256 exemption threshold
Business/corporate gains~30% effectiveAny periodKSt 15% + solidarity surcharge + Gewerbesteuer (~14%)
Crypto-to-crypto swapsTaxableResets holding periodUnlike France and Portugal

Cost Basis Method

The BMF prescribes FIFO (First In, First Out) applied on a wallet-by-wallet basis -- each wallet is assessed separately. The 2025 BMF letter allows the use of average market prices from trading platforms for acquisition and disposal values in certain cases.

Documentation Requirements (March 2025 BMF)

The 2025 BMF letter significantly tightened evidence and documentation standards:

  • Transaction overviews and tax reports must be maintained for all platforms and wallets
  • Both structured formats (CSV, XML) and unstructured formats (PDF) are acceptable
  • DeFi activities must be comprehensively documented, including smart contract interactions
  • Regular backups are essential due to platform data availability limitations
  • Recognized portfolio tracking tools include CoinTracking, Accointing/Blockpit, and similar platforms

DAC8 / CARF Automatic Reporting (Kryptowerte-Steuertransparenzgesetz, in force 1 January 2026)

Germany transposed EU Directive 2023/2226 (DAC8) and the OECD Crypto-Asset Reporting Framework (CARF) via the Kryptowerte-Steuertransparenzgesetz (KryptoStTranspG/KStTG) — passed by the Bundestag 6 November 2025, approved by the Bundesrat 19 December 2025, in force from 1 January 2026:

  • Calendar year 2026 is the first collection/reporting period — reporting CASPs collect and verify user/transaction data throughout 2026
  • First data submission to the BZSt is due by 31 July 2027 (for the 2026 period)
  • First automatic international exchange with other EU member states (and CARF MCAA signatory jurisdictions) occurs by 30 September 2027
  • Data includes user identification, aggregate transaction values by asset, and transfer details. Germany signed the OECD CARF MCAA on 26 November 2024

Enforcement Penalties

ViolationPenalty
Tax evasion (Steuerhinterziehung) under Section 370 AOFines and imprisonment up to 10 years for serious cases
Failure to meet documentation requirementsBurden of proof shifts to taxpayer; potential estimated assessments

3. Regulatory Direction

Germany is on a maturation trajectory -- its early national crypto custody licensing regime has been absorbed into the EU-wide MiCA framework, while its administrative tax guidance continues to deepen through iterative BMF circulars.

Near-term developments:

  • MiCA/KMAG integration complete: Germany's shortened 12-month grandfathering period (vs. the EU standard of 18 months) means existing license holders have already transitioned to MiCA CASP status as of 31 December 2025
  • DAC8 / CARF data flow: Under the Kryptowerte-Steuertransparenzgesetz (in force 1 January 2026), 2026 is the first collection year; first CASP submission to the BZSt is due 31 July 2027, and the first automatic cross-border exchange occurs by 30 September 2027
  • Kryptowerte section on Anlage SO: The dedicated crypto reporting section on tax returns (from 2025) simplifies filing but also signals increased scrutiny
  • KMAnzV operationalises CASP notification duties (26 May 2026): BaFin's Ordinance on Notifications and Submission of Documents under the KMAG (issued 20 May 2026, published in the Federal Gazette 26 May 2026) specifies standardised notification/document-submission forms (modelled on the banking/payment regimes), extensive outsourcing-notification duties, with submissions permitted in English (German version legally authoritative)
  • Germany the largest MiCA CASP market: A 12 April 2026 MiCA SCAN / ESMA-register snapshot recorded Germany leading the EU with ~53 authorised CASPs (~26% of the ~199 EU total), largely conversions of pre-existing licensed firms rather than new entrants
  • ESMA end-of-transition statement (17 April 2026): ESMA reiterated wind-down/client-migration expectations ahead of the EU-wide 1 July 2026 transitional cutoff; Germany's national transition already closed 31 December 2025
  • Pending guidance gaps: NFTs and liquidity mining lack specific treatment in the 2025 BMF letter, though the BMF has indicated continuous updates

Distinctive features:

  • The 1-year holding period exemption for private investors is one of the most favorable crypto tax provisions in the EU -- gains on assets held longer than 12 months are entirely tax-free
  • Crypto-to-crypto swaps are taxable events in Germany, unlike in France and Portugal, and each swap resets the holding period
  • The EUR 1,000 exemption threshold is a Freigrenze (exemption limit), not a Freibetrag (allowance) -- a cliff effect where exceeding the threshold by even EUR 1 makes the entire amount taxable
  • The March 2025 BMF letter was the first German administrative guidance to address DeFi activities, including smart contracts, DEX trading, and liquidity provision
  • Staking does not extend the 1-year holding period (a prior concern resolved by the 2022 BMF letter and confirmed in 2025)

Iterative guidance model:

DateBMF InstrumentSignificance
February 2018BMF Letter on VATConfirmed VAT exemption for crypto exchanges
May 2022Comprehensive BMF CircularFirst detailed guidance on income tax treatment
March 2025Updated BMF CircularReplaced 2022 letter; added DeFi, staking differentiation, documentation tightening

4. RWA / Security Token Platform Licensing

Germany has been a leading jurisdiction for tokenized real-world assets in the EU, driven by the Electronic Securities Act (eWpG), which entered into force in June 2021 and created a legal framework for electronic (including crypto) securities without requiring physical certificates. Germany's existing financial regulatory infrastructure under KWG (Banking Act) and BaFin supervision provides a mature environment for RWA tokenization.

4.1 License Details

AttributeDetail
License name(s)Crypto securities registrar licence (eWpG, KWG); crypto custody licence (KWG Section 1(1a)); MiCA CASP authorization; DLT Pilot Regime authorization (DLT MTF/TSS)
Regulatory authorityBaFin (+ ESMA for DLT Pilot)
Legal basisElectronic Securities Act (eWpG); Banking Act (KWG); MiCA Regulation; EU DLT Pilot Regime (Regulation EU 2022/858); KMAG (Crypto Markets Supervision Act)

4.2 Requirements

License TypeAuthorityCapitalTimeline
Crypto securities registrarBaFinEUR 150,0006--9 months
Crypto custodyBaFinEUR 150,0006--9 months
MiCA CASPBaFinVaries by service class (EUR 50,000--150,000)~3 months (simplified for pre-regulated firms)
DLT Pilot Regime (MTF/TSS)BaFin/ESMAPer MiFID II requirementsCase-by-case

4.3 Key Holders

FirmLicense TypeActivity
Cashlink Technologies GmbHCrypto securities registrar + crypto custodyFirst BaFin-licensed crypto securities registrar; served KfW, Metzler, Helaba WIBank, NRW.BANK
DekaBankBanking licence (crypto securities)Issued Germany's first crypto security (December 2021)
21X AGDLT TSS (DLT Pilot Regime)First fully regulated blockchain trading and settlement venue (December 2024)
360X AGDLT MTF (DLT Pilot Regime)Tokenized bonds, equities, funds, private market assets (April 2025)
Finoa GmbHCrypto custody (BaFin)Institutional-grade digital asset custody

4.4 Market Activity

The volume of issued tokenized securities in Germany grew from EUR 31 million to approximately EUR 183 million by end of 2023, then surged to EUR 615 million in H2 2024. Notable issuances include Siemens (EUR 60M and EUR 300M digital bonds), KfW (EUR 100M blockchain bond), and NRW.BANK (EUR 100M blockchain bond).

4.5 Transition

Germany's 12-month MiCA grandfathering period expired on 31 December 2025, meaning all existing licence holders have already transitioned to MiCA CASP status. The DLT Pilot Regime is being made permanent at the EU level. Germany hosts the strongest cluster of DLT Pilot authorizations in the EU (21X AG and 360X AG).

See

Germany RWA Regulation for full details on eWpG electronic securities, BaFin licensing, Siemens and KfW digital bonds, and DLT Pilot authorizations.

5. DeFi Protocol Licensing

Germany regulates DeFi at the intermediary level -- any centralized entity interacting with DeFi (front-ends, custodians, exchanges offering yield services) must hold a BaFin licence, while DeFi protocols themselves are not directly regulated. The March 2025 BMF letter was the first German administrative guidance to formally address DeFi taxation.

5.1 Available License Types for DeFi Operations

LicenseAuthorityCapital RequirementDeFi Relevance
Crypto custody licence (KWG)BaFinEUR 150,000 minimumRequired for entities custodying DeFi-related assets
MiCA CASP — Class 1 (advice, order reception)BaFinEUR 50,000DeFi advisory, order routing
MiCA CASP — Class 2 (exchange, execution, custody)BaFinEUR 125,000DeFi front-ends providing exchange or custody
MiCA CASP — Class 3 (trading platform)BaFinEUR 150,000DEX front-end operators with identifiable entities
Crypto securities register operator (eWpG)BaFinMust be licensed financial institutionTokenized securities on DeFi-compatible blockchains

Additional capital: at least 25% of prior year's fixed overheads (whichever is higher).

5.2 Application Timeline

  • Statutory: BaFin has 6 months for KWG applications; 25 business days completeness check + 40 business days decision for CASP
  • Actual: 12--18 months reported in practice for KWG crypto custody; BaFin's "compliance-first architecture" approach prioritizes governance maturity

5.3 DeFi-Specific Requirements

  • GwG Section 15a (unhosted wallet rules): CASPs must conduct enhanced due diligence on transfers to/from self-hosted addresses; stricter than EU minimum under MiCA; implementation deadline extended to July 2027 (BaFin AML guidance)
  • BMF 2025 DeFi classification: Liquidity pool fees taxable as other income (EStG Section 22 No. 3); LP tokens subject to 1-year holding period exemption; passive staking taxable at time of claiming (Acconsis analysis)
  • DORA compliance: All crypto service providers must comply with Digital Operational Resilience Act, including threat-led penetration testing every 3 years
  • No formal DeFi protocol classification: BaFin has not issued guidance classifying DeFi protocols; protocols without an identifiable German entity remain outside the regulatory perimeter

5.4 Key Enforcement

  • Ethena GmbH (March--April 2025): BaFin prohibited USDe token sales, imposed EUR 600,000 coercive fine, ordered wind-up of all business, froze reserve assets, and appointed special representative. Demonstrates willingness to pursue DeFi-adjacent entities (BaFin notice)

5.5 Key Licensed Operators

FirmLicenceDeFi Relevance
Crypto Finance (Deutschland) GmbHFour BaFin licences including custodyDeutsche Borse Group subsidiary; institutional DeFi access
Coinbase GermanyBaFin crypto custodyExchange with DeFi staking/yield integration
Finoa GmbHBaFin crypto custodyInstitutional custody with DeFi protocol access

For comprehensive DeFi regulation analysis, see

Germany DeFi Regulation.

Insurance / Risk Transfer Licensing

Overview

Germany regulates digital asset insurance through the EU-wide MiCA framework, transposed domestically via the KMAG. MiCA Article 67 permits CASPs to use professional indemnity insurance (PII) as a partial alternative to own funds requirements (EUR 50,000-150,000 depending on CASP class). There is no mandatory insurance requirement for German crypto custodians or CASPs beyond the Article 67 option. The German deposit guarantee scheme (Entschadigungseinrichtung deutscher Banken, EdB) covers bank deposits up to EUR 100,000 per depositor but explicitly excludes crypto-asset holdings.

Regulatory Authority

BodyRole
BaFinSupervises both insurers (VAG) and CASPs (MiCA/KMAG); integrated financial supervisor
EdBDeposit guarantee scheme; excludes crypto assets

Insurance Requirements for Crypto Businesses

DimensionDetail
MiCA Article 67 (PII option)German CASPs may use qualifying PII to satisfy EUR 50,000-150,000 own funds requirements; implemented via KMAG
Mandatory insuranceNo -- beyond the Article 67 option, no specific insurance mandate exists for BaFin-licensed CASPs
Deposit guaranteeEdB covers bank deposits up to EUR 100,000; excludes crypto-asset custody
Voluntary insuranceMunich Re, a global leader in (re)insurance, offers digital asset custody and crime coverage products; German institutional custodians (Finoa, Crypto Finance) typically maintain commercial coverage

Named Insurance Providers

ProviderTypeActivity
Munich ReBaFin-licensed reinsurerGlobal leader in digital asset reinsurance capacity; custody and crime coverage
AllianzBaFin-licensed insurerCommercial insurance including cyber and PI for crypto firms
HDI GlobalBaFin-licensed insurerTechnology and fintech commercial insurance
Lloyd's Brussels (EU vehicle)EIOPA-passportedSpecialty digital asset policies accessible in Germany via Freedom of Services

Regulatory Direction

  • Munich Re's growing digital asset product suite positions Germany as a key source of European crypto insurance capacity
  • The KMAG implementation of MiCA Article 67 provides a clear regulatory pathway for PII as capital alternative
  • No expansion of EdB deposit guarantee to cover crypto assets is under consideration

Cross-Reference

See

Germany Digital Asset Insurance for full details on MiCA Article 67 via KMAG, Munich Re digital asset products, BaFin integrated supervision, and deposit guarantee exclusions.


NFT & Digital Collectibles

DimensionDetail
Applicable licence(s)CASP Authorization under MiCA (via KMAG); Crypto Custody License (KWG Section 1(1a)(2)(6))
Regulatory authorityBaFin (Bundesanstalt fur Finanzdienstleistungsaufsicht)
Capital requirementsEUR 50,000-150,000 depending on service type (MiCA Art. 67)
Timeline (actual)Several months (BaFin guidance); pre-application consultations recommended
Key requirementsBusiness plan, governance structure, compliance and IT security documentation; fit-and-proper test; BAIT IT security standards; full GwG AML compliance
NFT-specific notesFungible collections and exchange services trigger MiCA CASP requirement; custody of NFTs qualifying as Kryptowerte requires separate KWG crypto custody licence; EU/EEA passporting once authorized; penalties up to 5 years imprisonment (KWG Section 54)
Cross-reference
Full NFT regulation details

Payment / Transfer Service Licensing

Overview

Germany regulates crypto payment services through BaFin under two parallel frameworks: the national ZAG (Payment Services Supervision Act) for payment institutions and e-money institutions, and the EU-wide MiCA/KMAG CASP authorization regime effective since 30 December 2024.

DimensionDetail
Licence nameZAG Payment Institution; ZAG E-Money Institution; MiCA CASP authorization (via KMAG)
Enabling statuteZAG (Payment Services Supervision Act); KMAG (Cryptomarkets Supervision Act); MiCAR (EU 2023/1114); KWG (Banking Act)
Regulatory authorityBaFin
Capital requirementEUR 125,000 (ZAG Payment Institution); EUR 350,000 (ZAG E-Money Institution); EUR 50,000--150,000 (MiCA CASP depending on service class); EUR 150,000 (KWG crypto custody)
Application/authorisation feeEUR 10,750 (BaFin authorisation fee for crypto custody business / CASP)
Timeline (actual)6 months statutory (KWG); 25 business days completeness + 40 business days decision (CASP); 12--18 months reported in practice for KWG crypto custody
Setup cost (excl. capital)EUR 100,000 -- EUR 300,000 (legal, compliance, AML infrastructure)
Annual ongoing costEUR 150,000 -- EUR 400,000 (compliance, audit, reporting)
PassportingYes -- MiCA CASP authorization enables EU-wide passporting across all 27 member states + EEA
Banking accessAvailable -- Deutsche Bank, Commerzbank selectively engaged; Crypto Finance (Deutsche Borse subsidiary) provides institutional access
Key holders20+ KWG crypto custody licensees (transitioned to MiCA CASP by 31 December 2025); Coinbase Germany, Finoa, Crypto Finance Deutschland
StatusGermany's shortened 12-month MiCA grandfathering expired 31 December 2025; all existing providers have transitioned to MiCA CASP status. By a 12 April 2026 MiCA SCAN / ESMA-register snapshot, Germany led the EU with ~53 authorised CASPs

Stablecoin issuance falls under MiCA's EMT (e-money token) rules, requiring a licensed credit institution or e-money institution. ARTs (asset-referenced tokens) require separate BaFin authorization.

See

Germany Crypto Payment Regulation for full details on ZAG licensing, MiCA/KMAG implementation, EMT/ART stablecoin framework, and BaFin enforcement.

6. For Full Details


<!-- related-coverage:BEGIN — auto-generated by related_coverage.py; edit via --apply re-run, not by hand -->

Verification Notes

This license-map aggregator was reconciled against the 2026-06-04 refreshed source-domain files (crypto-custody, crypto-payment-regulation, digital-asset-taxation, rwa-regulation, digital-asset-insurance, nft-digital-collectibles) and verified against primary regulator sources.

Corrections made during the 2026-06-04 refresh (Correction Protocol):

  • KWG crypto custody minimum capital (Section 5.1): The DeFi license table stated the crypto custody licence (KWG) minimum capital as EUR 125,000. This is wrong — BaFin's application guidelines and the crypto-custody / RWA source-domain files all state EUR 150,000. Corrected to EUR 150,000. (Note: EUR 125,000 is the MiCA Annex IV Class 2 CASP tier covering custody/exchange/order-execution, which is distinct from the national KWG crypto custody minimum.) Verified via BaFin application guidelines.
  • DAC8 timeline (intro, Section 2.5, Section 3): The file previously implied "automatic information exchange across all EU member states" from 1 January 2026. This was imprecise. Germany transposed DAC8 (Council Directive (EU) 2023/2226) and the OECD CARF via the Kryptowerte-Steuertransparenzgesetz (KryptoStTranspG/KStTG) — Bundestag 6 November 2025, Bundesrat 19 December 2025, in force 1 January 2026. 2026 is the first collection period; first BZSt submission is due 31 July 2027 and the first automatic international exchange occurs by 30 September 2027. Reconciled with the digital-asset-taxation source-domain refresh and verified via the Deutscher Bundestag textarchiv (6 Nov 2025), Deloitte Tax News (Bundesrat approval), and the BZSt CARF/DAC8 page.

Licensing developments added (2026-03-20 → 2026-06-04):

  • 26 May 2026 — KMAnzV published. The Ordinance on Notifications and the Submission of Documents under the KMAG (Kryptomarkt-Anzeigenverordnung), issued by BaFin 20 May 2026, was published in the Federal Gazette; it specifies standardised CASP notification/document-submission forms and outsourcing-notification duties (English submissions permitted; German authoritative). Norton Rose Fulbright / Regulation Tomorrow.
  • 17 April 2026 — ESMA end-of-transition statement. ESMA (ESMA75-113276571-1679) reiterated wind-down and client-migration expectations ahead of the EU-wide 1 July 2026 transitional cutoff; Germany's national transition already closed 31 December 2025. ESMA statement (PDF).
  • 12 April 2026 — Germany leads EU CASP authorisations. A MiCA SCAN / ESMA-register snapshot recorded Germany with ~53 authorised CASPs (~26% of the ~199 EU total across 23 countries), the largest MiCA-licensed market. Reconciled with the crypto-custody, crypto-payment, and digital-asset-insurance source-domain refreshes; flagged as a market-tracker estimate (BaFin does not publish a single consolidated headline CASP count).

Enrichment added:

Items confirmed accurate against source domains (no change): the 31 December 2025 shortened MiCA grandfathering deadline; MiCA CASP Annex IV capital tiers (EUR 50,000 / 125,000 / 150,000); ZAG payment institution (EUR 125,000) and e-money institution (EUR 350,000) capital; crypto securities registrar capital (EUR 150,000); MiCA Article 67 PII-as-own-funds alternative; eWpG electronic securities framework and DLT Pilot authorisations (21X AG, 360X AG); the 1-year holding-period exemption and EUR 1,000 Freigrenze; GwG Section 15a self-hosted-wallet EDD with the implementation deadline extended to July 2027; and the Ethena GmbH enforcement timeline (21 Mar / 4 Apr / 14 Apr 2025).

Self-reported / estimated figures (flagged): setup-cost (EUR 100,000–300,000) and annual-ongoing-cost (EUR 150,000–400,000) figures in the Payment section are self-reported/estimated practitioner ranges, not regulator-published; the ~53 CASP count is a market-tracker estimate. Processing-timeline ranges ("12–18 months reported in practice") are practitioner-reported, not statutory.