Germany

The most significant licensing-perimeter development this cycle concerns the interaction between Germany's own national transitional arrangements and the EU-wide MiCA transitional backstop. Under the Kryptomarkteaufsichtsgesetz (KMAG) section 50(2) No. 3, Germany shortened its own national MiCA/KWG grandfathering window to twelve months, closing national transitional authorisations on 31 December 2025. This is a full six months earlier than the EU-wide Article 143(3) backstop of 1 July 2026, under which member states could permit existing licensed or registered providers to continue operating under national law at the latest until that later date. The distinction matters because it was the EU-wide 1 July 2026 backstop -- not Germany's own earlier national closure -- that forced firms relying on transitional windows in other member states to wind down EU-facing activity absent MiCA authorisation. Binance is the clearest illustration: having withdrawn its Greek MiCA license application, Binance entered 1 July 2026 without MiCA authorisation and told customers in several EU countries it would suspend some services. Germany's own transitional population had already been resolved six months earlier under the national KMAG deadline, meaning the domestic German market was not directly exposed to the same July 2026 cliff-edge that affected Binance's EU-wide footprint.

BaFin's licensing reach now extends across a widening range of institutional entrants. Boerse Stuttgart Digital secured an early MiCA CASP authorisation in January 2025, permitting EU-wide passported crypto-asset services. BitGo Europe, DZ Bank and other domestic and international firms have followed with their own authorisations, several bundling custody, staking, and trading activity under a single license rather than segregating these into separate permissions. Enforcement activity under the licensing perimeter has also continued: BaFin's characterisation of euro-crypto exchange as banking activity requiring a license underpinned its seizure of 13 unlicensed crypto ATMs across 35 locations, on the basis that the operators lacked the required permission.

Outlook

The licensing narrative for Germany going into the next cycle turns less on domestic developments -- the German national transitional window is now closed and the MiCA authorisation base is mature and comparatively large -- and more on how the EU-wide Article 143(3) backstop reshapes the competitive landscape among CASPs operating cross-border into Germany via passporting. Whether Binance or other unauthorised global exchanges secure MiCA authorisation elsewhere in the EU and re-enter the German market via passporting, and whether BaFin's authorisation pace continues to outstrip peer regulators, are the two developments most likely to move this module's traffic-light assessment in either direction.

Germany has a live domestic example of EMT classification in practice: AllUnity's EURAU, issued in mid-2025, is described by its issuer as the first euro-backed stablecoin issued under MiCAR and licensed as electronic money by BaFin. That specific 'first-of-kind' framing, however, rests on a single T4 news source relaying the issuer's own hedged characterisation rather than independent confirmation from BaFin's or ESMA's registers, and the confidence on this claim has accordingly been revised down to Probable pending primary-source verification. The underlying fact that BaFin has authorised at least one EMT issuer in Germany is not itself in doubt; it is the superlative 'first' framing specifically that awaits corroboration.

On scope exclusions, ESMA consultation-stage guidance -- applicable to national competent authorities including BaFin -- indicates that crypto-assets that are non-transferable and accepted only by the issuer or offeror, together with unique non-fungible crypto-assets, generally fall outside MiCA's scope. This exclusion is treated as guidance-stage rather than fully settled binding doctrine, and its practical application to German NFT platforms has not been independently tested through enforcement or supervisory action in the sources reviewed this cycle.

Outlook

Token classification in Germany is structurally settled at the framework level -- the ART/EMT/other-crypto-asset taxonomy is fully transposed and BaFin is an active, ESMA-aligned classifier. The open item for the next cycle is narrower and evidentiary: whether BaFin's or the EBA's own registers can independently corroborate AllUnity EURAU's 'first MiCA-compliant euro stablecoin' claim, and whether ESMA's NFT scope-exclusion guidance is formalised beyond consultation stage in a way that gives German NFT platforms firmer classification certainty.

Beyond staking and custody, however, this module's evidence base is thin. No German-specific statute or BaFin guidance addressing DeFi lending or protocol-level licensing was independently confirmed this cycle, and the same is true of node operation or validator licensing outside an intermediary CASP structure. These are treated as open research gaps rather than as findings of an unregulated space -- the absence of confirmed sourcing means the question of how BaFin would treat a purely non-custodial DeFi protocol or standalone validator operation remains genuinely unresolved rather than answered in either direction.

Outlook

The near-term trajectory for this module depends on whether BaFin or the German legislature issues any DeFi- or node-operation-specific guidance that would move activity currently sitting in the general licensing perimeter into a more clearly defined regulatory lane. Until that happens, on-chain activity regulation in Germany should be read as regulated-by-extension for custodial staking and unresolved for genuinely decentralised or non-custodial activity, a distinction worth tracking closely as DeFi volumes potentially grow within Germany's institutional crypto sector.

What has been specifically revised this cycle is confidence in EURAU's marketed positioning as the 'first' MiCA-compliant euro stablecoin. That characterisation rests on a single T4 news source relaying the issuer's own hedged claim, without independent confirmation from BaFin's or EBA's own registers or supervisory statements. Given the materiality of a 'first-of-kind' claim to market positioning and potential competitive or reputational significance, this claim has been downgraded from Confirmed to Probable confidence, consistent with the higher sourcing bar this module applies to superlative issuance claims generally. Readers should treat the 'first' framing specifically -- not EURAU's underlying BaFin e-money authorisation, which is separately evidenced -- as provisional pending primary-source corroboration.

Separately, EBA supervisory work continues to address the interplay between PSD2 and MiCA for CASPs handling e-money tokens; a related EBA No-Action Letter transition period addressing authorisation-process coordination closed on 2 March 2026, a date that has now passed and is treated as being in force for German EMT-handling CASPs going forward.

Outlook

The stablecoin module's central open item for the next cycle is evidentiary rather than regulatory: independent confirmation, from BaFin or EBA sources rather than issuer or news reporting, of EURAU's superlative 'first' claim. Substantively, the framework itself -- MiCA's ART/EMT authorisation and significant-designation regime -- is settled and fully in force; the residual uncertainty sits specifically at the level of marketing characterisation of individual issuances rather than at the level of the regulatory architecture.

Enforcement activity this cycle illustrates the perimeter in practice: BaFin publicly warned that the exchange Rtcoin was not authorised to operate in Germany, citing reasonable grounds to suspect unlicensed banking business or financial services -- a direct consumer-facing warning against an unauthorised platform, distinct from BaFin's licensing enforcement against unlicensed ATM operators discussed under the licensing and AML modules. On the mainstream-institutional side, DZ Bank's meinKrypto retail crypto trading platform has been explicitly scoped as aimed at self-directed investors and is not part of DZ Bank's advisory services to retail customers -- a deliberate delineation between execution-only retail crypto trading and advised investment, which matters for suitability and appropriateness obligations since advisory-grade protections do not automatically extend to execution-only platforms.

Outlook

Consumer protection in Germany benefits from MiCA's direct applicability and BaFin's demonstrated willingness to issue public warnings against unauthorised platforms. The development worth tracking into the next cycle is how mainstream banks' execution-only retail crypto offerings -- following the DZ Bank model -- are treated under suitability and appropriateness rules as retail adoption grows, particularly whether the non-advisory framing effectively shields such platforms from advisory-grade consumer protection obligations or whether BaFin signals a different expectation as volumes increase.

Separately, the BMF has previously suggested, in response to a parliamentary question, that commercial (business) sales of bitcoin should be taxed as a 'miscellaneous service' under German law, distinct from the private-sale treatment that applies to individual disposals. This position dates to an earlier era of guidance and has not been reconciled in the sources reviewed this cycle against the EU's Hedqvist precedent, which generally exempts currency-like crypto exchange from VAT; the VAT treatment of commercial crypto sales in Germany should accordingly be read as an open, unresolved question rather than a settled position.

A further open item concerns currency: no post-2022 BMF circular update has been independently confirmed, meaning it is not yet verified whether the one-year private-sale holding-period exemption and the associated 2022 guidance remain unchanged for the 2026 tax year, or whether more recent administrative guidance has superseded it.

Outlook

Germany's core individual capital-gains tax treatment -- private-sale status with a one-year exemption -- is long-standing and well-evidenced, giving this module a stable foundation. The two open items most likely to affect this assessment going forward are whether the BMF has issued or will issue an updated nationwide circular confirming continuity of the 2022 guidance for 2026, and whether VAT treatment of commercial crypto sales is clarified in line with the Hedqvist precedent rather than left resting on the older 2014-era 'miscellaneous service' position.

AllUnity's EURAU illustrates a practical cross-border use case building on this framework: issued in Germany and licensed by BaFin, EURAU is explicitly positioned to serve financial institutions, fintechs, and corporate clients that need regulated instant cross-border euro payments, rather than being marketed primarily as a retail trading instrument. This is a distinct claim from EURAU's contested 'first MiCA-compliant euro stablecoin' framing discussed under the stablecoin and token classification modules, and it has not itself been challenged on confidence grounds.

On restrictions rather than facilitation, Germany's AWG (Aussenwirtschaftsgesetz) sanctions framework prohibits making funds or economic resources available to designated persons or entities as soon as an EU sanctions designation is published, applying to cross-border crypto transfers in the same way as to other funds transfers. No distinct German-specific outbound capital-control restriction on crypto transfers, beyond this sanctions-nexus mechanism and the EU Travel Rule, was identified this cycle -- though this absence of a finding reflects incomplete research coverage rather than a confirmed absence of any such restriction, since the question was not exhaustively probed.

Outlook

Germany's cross-border framework for crypto is currently a straightforward extension of harmonised EU mechanisms -- passporting and the Travel Rule -- rather than a source of German-specific friction. The item most worth confirming in the next cycle is whether any German-specific outbound restriction exists beyond the sanctions-nexus and Travel Rule mechanisms already confirmed, closing the coverage gap noted in this cycle's research rather than leaving it as an open absence-of-evidence finding.

FATF's 2022 Mutual Evaluation Report of Germany found that larger financial institutions and VASPs generally have a good understanding of money-laundering and terrorist-financing risks and their associated obligations -- a positive baseline finding for institutional compliance capacity. The same evaluation, however, identified a supervisory gap: BaFin could take a more proactive approach to identifying unlicensed money/value transfer service providers, particularly hawala-type operators, suggesting that informal or unlicensed value-transfer channels may sit outside BaFin's most effective supervisory reach even as licensed CASPs and banks are well-covered.

Sanctions enforcement operates through a parallel but connected track: BaFin has authority to grant access to funds frozen under the KWG, and AWG (Aussenwirtschaftsgesetz) orders prohibit making funds or economic resources available to designated persons or entities as soon as an EU sanctions designation is published. This sanctions-freezing mechanism was corroborated by FATF's follow-up report on Germany. On the enforcement side, BaFin's seizure of 13 unlicensed crypto ATMs across 35 locations -- justified in AML terms by the money-laundering risk posed by unlicensed cash-to-crypto conversion points, and resulting in the confiscation of close to EUR 250,000 in cash -- demonstrates active supervisory follow-through against unlicensed operators specifically, even as the broader hawala-style gap identified by FATF remains open.

Outlook

Germany's AML/CFT framework for licensed CASPs is mature and closely aligned with EU-wide standards, with an active enforcement track record against unlicensed operators. The open question flagged by FATF -- BaFin's posture toward unlicensed money/value transfer providers and hawala-type channels -- is the most likely source of any near-term supervisory tightening, and is also the clearest connective thread into financial-integrity monitoring of informal value-transfer risk in the German market.