#
Germany implements MiCA via FinmadiG and KMAG, bridging prior national VASP licensing to the MiCA CASP regime under BaFin; the standard 18-month CASP transition window was compressed to a hard 12-month/31 December 2025 deadline, stricter than most EU peers.
The most significant licensing-perimeter development this cycle concerns the interaction between Germany's own national transitional arrangements and the EU-wide MiCA transitional backstop. Under the Kryptomarkteaufsichtsgesetz (KMAG) section 50(2) No. 3, Germany shortened its own national MiCA/KWG grandfathering window to twelve months, closing national transitional authorisations on 31 December 2025. This is a full six months earlier than the EU-wide Article 143(3) backstop of 1 July 2026, under which member states could permit existing licensed or registered providers to continue operating under national law at the latest until that later date. The distinction matters because it was the EU-wide 1 July 2026 backstop -- not Germany's own earlier national closure -- that forced firms relying on transitional windows in other member states to wind down EU-facing activity absent MiCA authorisation. Binance is the clearest illustration: having withdrawn its Greek MiCA license application, Binance entered 1 July 2026 without MiCA authorisation and told customers in several EU countries it would suspend some services. Germany's own transitional population had already been resolved six months earlier under the national KMAG deadline, meaning the domestic German market was not directly exposed to the same July 2026 cliff-edge that affected Binance's EU-wide footprint.
BaFin's licensing reach now extends across a widening range of institutional entrants. Boerse Stuttgart Digital secured an early MiCA CASP authorisation in January 2025, permitting EU-wide passported crypto-asset services. BitGo Europe, DZ Bank and other domestic and international firms have followed with their own authorisations, several bundling custody, staking, and trading activity under a single license rather than segregating these into separate permissions. Enforcement activity under the licensing perimeter has also continued: BaFin's characterisation of euro-crypto exchange as banking activity requiring a license underpinned its seizure of 13 unlicensed crypto ATMs across 35 locations, on the basis that the operators lacked the required permission.
Outlook
The licensing narrative for Germany going into the next cycle turns less on domestic developments -- the German national transitional window is now closed and the MiCA authorisation base is mature and comparatively large -- and more on how the EU-wide Article 143(3) backstop reshapes the competitive landscape among CASPs operating cross-border into Germany via passporting. Whether Binance or other unauthorised global exchanges secure MiCA authorisation elsewhere in the EU and re-enter the German market via passporting, and whether BaFin's authorisation pace continues to outstrip peer regulators, are the two developments most likely to move this module's traffic-light assessment in either direction.
Crypto Licensing
BaFin's refusal of futurum bank AG's MiCAR crypto-asset service provider (CASP) authorisation application is the material licensing event of this cycle for Germany. The application, filed 27 June 2025, was refused in a decision disclosed on 6 October 2026, more than fifteen months after filing. Notably, the public record for this refusal currently rests entirely on Bitcoin Group SE's own mandatory ad-hoc disclosure as futurum bank's parent; no BaFin-published primary enforcement or decision notice has been independently located for this specific refusal as of this cycle. This is an evidentiary gap worth flagging explicitly: the fact of the refusal is well-attested through a regulated issuer's own disclosure obligations, but the detailed grounds for refusal are not yet independently confirmed from the regulator's own published record.
The refusal ends the toleration (Duldung) arrangement under which futurum bank had continued to provide crypto-asset services, chiefly via the Bitcoin.de platform, while its authorisation application remained pending. This toleration mechanism itself reflects a specific feature of Germany's implementation of the MiCA transition: Germany shortened its own national grandfathering period under MiCA Article 143(3) to end on 31 December 2025, six months ahead of the EU's outer limit of 1 July 2026, after which unauthorised provision of CASP services becomes unlawful in Germany. Exact citation to the specific national legislative provision fixing this earlier date (within the KMAG/FinmadiG package) has not been independently verified against the statutory text this cycle, and this remains sourced to a secondary legal-commentary source rather than the primary instrument itself.
The underlying licensing framework itself remains unchanged and well-settled: crypto-asset services in Germany require either BaFin authorisation under MiCAR Article 59 or a valid notification under Article 60 for entities already authorised in an equivalent regulated capacity elsewhere. This is a standing EU-wide standard applied consistently through BaFin's own published guidance, and nothing in this cycle's events alters that baseline. What has changed is the demonstrated consequence of that framework reaching the end of a national transition period: a platform carrying more than 1.1 million registered users has now had its toleration arrangement withdrawn following an unsuccessful authorisation application, converting what had been a theoretical end-of-transition risk into an observed regulatory outcome.
Outlook
Two specific procedural developments would materially change how this refusal should be read going forward. First, whether futurum bank has lodged, or lodges, a formal appeal (Widerspruch) against the refusal within the one-month window typically available under German administrative procedure; this was not established as of this cycle. Second, whether BaFin publishes its own primary notice regarding the refusal and its grounds, which would substantially strengthen an evidentiary record that currently depends on a single corporate disclosure. Absent either development, the refusal's precise legal and factual basis remains less transparent than its commercial consequences would suggest is warranted.
3 earlier distinct update(s)
Crypto Licensing
Germany's national transitional arrangement for crypto-asset service providers has closed. Under KMAG Section 50, the national grandfathering protection ('Bestandsschutz') available to pre-MiCA crypto-asset service providers expired at the latest on 31 December 2025, a date set deliberately ahead of the EU-wide outer limit of 1 July 2026 permitted under MiCA Art 143(3). This means that, as of this cycle, any crypto-asset service provider continuing to operate in Germany must hold either a full MiCA CASP authorisation issued by BaFin or a valid passport obtained from another EU or EEA member state; there is no longer a national fallback legal basis available to firms that have not completed one of those two routes.
The authorisation regime itself carries a tiered capital structure under MiCA Art 59, as implemented by BaFin. Class 1 authorisation, covering the most basic crypto-asset services, requires minimum own-funds capital of EUR 50,000. Class 2 authorisation, which extends to custody and administration of crypto-assets on behalf of clients and to exchange services, requires EUR 125,000. Class 3 authorisation, which extends further to the operation of a trading platform for crypto-assets, requires EUR 150,000. This graduated structure ties the capital requirement directly to the risk and complexity of the licensed activity, with custody and trading-platform operation treated as materially higher-risk than basic Class 1 services.
Secondary reporting associates Germany's earlier-than-EU-mandated transitional cutoff with a resulting concentration of CASP authorisations: Germany is reported to hold the largest population of MiCA CASP authorisations in the EEA as of September 2026. The precise figure is not settled; cited counts range from approximately 53 to approximately 91 depending on the source and date consulted, and neither figure has been checked against the European Securities and Markets Authority's own CASP register this cycle. This divergence should be read as a research-completeness gap rather than as evidence of instability in the underlying licensing framework itself, which appears to be functioning as a mature, in-force regime rather than one still working through transitional ambiguity.
On enforcement, BaFin holds broad powers under KMAG, including the ability to prohibit unauthorised business activity, to order searches of business premises, to order the wind-down of non-compliant operations, and to impose administrative fines. These powers position BaFin as a supervisor with meaningful operational reach over the authorised population, consistent with a mature licensing regime rather than one still reliant primarily on registration and light-touch oversight. However, the exact maximum fine amounts available under the consolidated KMAG statute text were not confirmed against primary legislative sources this cycle; this is an open verification item rather than a finding that penalty ceilings are absent or unclear in the statute itself.
Taken as a whole, Germany's crypto-licensing architecture presents as functioning and in force, with an active and apparently disproportionately large authorisation pipeline relative to its EEA peers, following a deliberately compressed national transitional timeline. The principal residual uncertainty is empirical rather than legal: how many authorisations have actually been granted, and whether BaFin's enforcement powers, while clearly defined in scope, have been exercised against the newly authorised population in a way that would establish a visible supervisory track record.
Outlook
The clearest near-term resolution path is a direct cross-check of Germany's CASP authorisation count against the European Securities and Markets Authority's own register, which would settle the approximately 53 versus approximately 91 divergence without requiring any change to the underlying legal analysis. On enforcement, the absence of confirmed penalty-ceiling figures from primary KMAG text is a gap worth closing in a future cycle, particularly given BaFin's otherwise broad confirmed enforcement toolkit. No legislative change to the licensing framework itself is indicated by the available material this cycle; Germany's transitional period has closed, and the regime should now be assessed as an established, in-force authorisation and supervision framework rather than one still in flux.
Crypto Licensing
Providing custody and administration of crypto-assets for clients on a commercial basis in Germany requires CASP authorisation under Article 59 of the Markets in Crypto-Assets Regulation (MiCAR), or a transitional permission under Section 32 of the Kreditwesengesetz (KWG), per BaFin's guidance notice on crypto-asset services under MiCAR, a confirmed-confidence finding drawn directly from BaFin's own published guidance. The pre-MiCA German crypto-custody licence under KWG Section 1(1a) (Kryptoverwahrgeschäft) is transitional under MiCA's grandfathering framework; Germany appears to have shortened its national grandfathering window relative to the EU-wide default, although secondary sources diverge on the precise cut-off date and this has not been resolved against a primary BaFin or KMAG transitional-provision citation this cycle, a genuine and flagged evidentiary gap rather than a resolved fact.
Germany's MiCA CASP authorisation count reached 79 as of an ESMA-register update reported 24 August 2026, the highest of any EU or EEA member state, up from 53 as of May 2026, a probable-confidence finding sourced to secondary trade-press reporting. This leading position reflects the conversion of Germany's large pre-existing national crypto-custody licence base into the harmonised MiCA regime, rather than an unusually permissive new-entrant pathway; the underlying authorisation process remains operationally demanding, involving substantial documentation and extended processing timeframes for applicants. The dual-track structure, MiCA/KMAG CASP authorisation layered on top of the transitional KWG Section 1(1a) custody licence, is the operative regime of record for Germany this cycle, settled in primary law but administratively demanding in practice.
Outlook
The unresolved cut-off date for KWG Section 1(1a) grandfathering is the key near-term item: it determines the compliance timeline facing Germany's remaining pre-MiCA custody licensees. Watch for a primary BaFin or KMAG citation that pins down this date definitively, and for whether Germany's CASP count continues its growth trajectory toward the next reporting update.
Crypto Licensing
Germany's MiCA implementation bridges prior national VASP licensing into the MiCA CASP regime under BaFin via FinmadiG and KMAG. The defining development this cycle is the compression of the CASP transition window: rather than the eighteen-month grandfathering period available in much of the EU, Germany has set a hard 31 December 2025 deadline for pre-MiCA BaFin licensees to complete their transition, and new market entrants must meet MiCAR requirements from day one with no grandfathering available to them at all. This is a materiality-5, binding, in-force instrument change in this cycle's evidence set, though it currently rests entirely on T3 secondary trade-press reporting (Yellow.com) rather than a located BaFin primary statement -- the absent_field_provenance register explicitly notes the lack of T1 confirmation, and that gap is treated here as a live sourcing hold rather than a settled fact.
A secondary, lower-materiality observation concerns MiCA Article 143(6), which permits simplified authorisation pathways for entities already licensed under prior national law. German firms and BaFin appear to use this pathway less aggressively than counterparts in France, a comparative posture rather than a substantive divergence in the underlying legal mechanism, and one carried at low confidence given its T4 sourcing.
The practical effect of the compressed timeline is already visible in market behaviour: at least one stablecoin issuer discontinued German operations rather than pursue MiCA authorisation domestically, a development discussed further in this cycle's stablecoin sub-brief. Read together, licensing policy and market response indicate BaFin is applying MiCA's transitional flexibility conservatively relative to peer jurisdictions, favouring a faster convergence on the harmonised EU standard over an extended national accommodation period.
Outlook
The near-term question for this module is evidentiary: whether BaFin publishes primary-source confirmation of the 12-month/31 December 2025 deadline in terms consistent with current secondary reporting. A second-order question is whether other EU member states follow Germany's compressed-timeline approach or whether Germany proves an outlier at the strict end of the transitional spectrum, a dynamic with direct bearing on where CASP licensing activity concentrates across the bloc.
Sources and findings (7)
- T4 · CoinDeskBoerse Stuttgart Digital — Awarded a MiCA CASP authorisation by BaFin, permitting EU-wide crypto asset services under passporting.retrieved M5bindingin forcenew
- T4 · The BlockGermany (BaFin) — Germany led all EU member states with 57 CASP authorisations as of mid-2026 per compilations of ESMA's interim MiCA register, ahead of France and the Netherlands (26 each).retrieved M4bindingin forcenew
- T1 · U.S. SEC EDGARMiCA transitional regime (EU-wide) — MiCA transition period length varies by member state, running at the latest until July 2026 (Art. 143(3) backstop), during which existing licensed/registered providers may continue operating under national law.retrieved M4bindingin forcenew
- T4 · CoinDeskBaFin — Exchanging euros for crypto constitutes banking activity requiring a BaFin license; BaFin seized 13 unlicensed crypto ATMs across 35 locations for operating without required permission.retrieved M3bindingin forcenew
- T4 · CoinDeskBinance — Binance entered 1 July 2026 without MiCA authorisation after withdrawing its Greek license application, telling customers in several EU countries it would suspend some services absent a MiCA license by the deadline.retrieved M5bindingin forcenew
- T4 · CoinDeskBaFin (KWG regime) — Germany's KWG licensing rollout required crypto custodians to obtain BaFin approval; BaFin received 25 custodian applications and approved only four early on, illustrating a historically stringent national process predating and sitting alongside MiCA.retrieved M3bindingin forcenew
- T3 · Freshfields Technology QuotientGermany (KMAG / BaFin) — Germany shortened its national MiCA/KWG grandfathering window to 12 months under the Kryptomarkteaufsichtsgesetz (KMAG) section 50(2) No. 3, closing national transitional authorisations on 31 December 2025 -- six months earlier than the EU-wide Article 143(3) backstop of 1 July 2026 that affected firms such as Binance operating via other member states' transitional windows.retrieved M4bindingin forcenew