How to Get a Crypto License in Germany Step by Step

Germany is one of the most respected jurisdictions in Europe for crypto licensing. Under the fully enforced MiCA framework in 2026, the German Federal Financial Supervisory Authority (BaFin) requires a CASP license for most crypto activities. This step-by-step guide explains exactly how to get a crypto license in Germany, covering costs, timelines, capital requirements, and ongoing compliance. Whether you are a startup or an established exchange, this page gives you the accurate, current process.

Germany offers a clear regulatory path, but the application is rigorous. Our firm, Consulting24, has obtained 500+ crypto licenses across Europe. We deliver directly in Estonia, Lithuania, and Panama, and for Germany we advise and coordinate with local partners. If you need a faster or simpler route, consider our Panama company setup at a flat EUR 6,000. For a full comparison of jurisdictions, see our jurisdictions page.

What Is a German Crypto License?

The German crypto license, officially a BaFin CASP (Crypto Asset Service Provider) license, is required under the Markets in Crypto-Assets Regulation (MiCA), which is fully in force in 2026. It replaces the old BaFin permission under the German Banking Act (KWG) and the German Anti-Money Laundering Act (GwG). The license covers custodial wallet services, exchange of crypto for fiat or other crypto, operation of trading platforms, and transfer of crypto assets.

Germany is known for its strict but clear regulatory environment. The application process involves a detailed business plan, AML/KYC policies, IT security audits, and proof of capital. Once licensed, the firm is supervised by BaFin and must comply with ongoing reporting and audit requirements. The license is valid across the EU under MiCA passporting, meaning you can serve clients in any EU member state without additional local licenses.

For example, a German-licensed exchange can onboard French or Spanish clients directly, subject to notification requirements. However, the application process is one of the most demanding in Europe, requiring significant preparation and local presence. Consulting24 advises and coordinates with German legal and compliance experts to help you through every stage.

Who Needs a German Crypto License?

Any company offering crypto services to German residents or operating from Germany needs a BaFin CASP license. This includes:

• Crypto exchanges (centralized and decentralized if they have a central operator)
• Custodial wallet providers
• Brokers and OTC desks
• Crypto payment processors
• ATMs and kiosks
• Token issuers (if the token is not a security and not an e-money token)

If you are a non-EU firm targeting German clients, you must either establish a German subsidiary or use a reverse solicitation exemption (which is very limited under MiCA). For example, a US-based exchange cannot simply accept German users without a license; they must set up a German GmbH and apply. Consulting24 can help you assess your business model and choose the right jurisdiction. For a simpler alternative, consider our Panama license at a flat fee of EUR 6,000.

Even if you only offer peer-to-peer services or non-custodial wallets, you may fall under the license requirement if you provide any of the listed services. The definition of crypto asset service is broad under MiCA, so a careful legal analysis is essential.

License Type and Regulator

The regulator is the Federal Financial Supervisory Authority (BaFin), based in Bonn and Frankfurt. The license type is a CASP license under MiCA. There are three capital tiers depending on the services provided:

• EUR 50,000 for basic services (e.g., exchange only without custody)
• EUR 125,000 for custodial wallet services
• EUR 150,000 for trading platforms and complex services

BaFin is known for its thorough review process. The application must be submitted in German or English, but German is strongly preferred. The regulator expects a high level of detail in the business plan, including risk management, IT security, and AML procedures. BaFin also requires that key personnel, such as the AML officer and at least one managing director, be based in Germany and have a good repute. The regulator may conduct interviews with the management team during the application process.

Compared to other EU regulators, BaFin is more hands-on and may request multiple rounds of clarifications. It is not uncommon for the application to take 9-12 months, especially if the documentation is not complete from the start. Consulting24 coordinates with local partners who have experience with BaFin's expectations.

Cost and Timeline

The timeline from preparation to license issuance typically takes 6 to 12 months. BaFin has no statutory deadline, and incomplete applications cause delays. The IT security audit alone can take 2-3 months, and drafting the business plan and policies may take 1-2 months. After submission, BaFin usually acknowledges receipt within a few weeks, then begins its substantive review. You may receive requests for additional information, which can extend the timeline. Consulting24 advises and coordinates the process with local partners to ensure a smooth application.

For comparison, a Lithuania crypto license typically costs 15,000-30,000 EUR and takes 3-6 months, while our Panama flat fee of EUR 6,000 can be completed in 2-4 weeks.

Capital Requirement

As of 2026, the minimum initial capital for a German CASP license is EUR 50,000, 125,000, or 150,000 depending on the service class. This capital must be fully paid up and held in a bank account in Germany or another EU member state. The capital is intended to ensure operational stability and cover potential liabilities. BaFin may require additional capital based on the risk profile of the business.

In addition to the capital, the company must maintain a positive net asset position at all times. This means the capital cannot be used for operational expenses; it must remain as a reserve. For example, if you apply for a license with EUR 125,000 capital, you need additional funds for salaries, rent, and other costs during the application period, which can last 6-12 months. A realistic budget would include at least EUR 200,000 total to cover capital and operational runway.

Consulting24 can help you structure your capital allocation to meet BaFin's requirements. We also advise on the best way to hold the capital, such as in a blocked account or a dedicated reserve account.

Tax Treatment

Germany has a favorable tax treatment for crypto assets. Private individuals holding crypto for more than one year are exempt from capital gains tax. For businesses, corporate income tax (15.825% including solidarity surcharge) and trade tax (14-17% depending on municipality) apply. VAT is not charged on crypto transactions that qualify as financial services.

However, crypto mining, staking, and lending may be subject to VAT in some cases. The tax treatment of DeFi activities is still evolving. For example, if your company earns fees from staking, those may be considered taxable income at the corporate level. It is essential to work with a German tax advisor who specializes in crypto. Consulting24 can recommend qualified partners.

Additionally, Germany has no withholding tax on dividends paid to EU residents, but non-EU shareholders may face a 25% withholding tax unless a tax treaty applies. Proper tax structuring is critical, especially if you plan to repatriate profits.

Allowed Activities Under the License

The German CASP license permits the following activities under MiCA:

• Exchange of crypto assets for fiat currency
• Exchange of crypto assets for other crypto assets
• Operation of a trading platform for crypto assets
• Custodial wallet services
• Transfer of crypto assets on behalf of clients
• Reception and transmission of orders for crypto assets
• Placing of crypto assets
• Advice on crypto assets

Activities not covered include issuing security tokens (which require a MiFID license) and e-money tokens (which require an e-money license). The license does not automatically allow cross-border services outside the EU; separate notifications are needed. For example, if you want to serve UK clients, you would need a separate UK registration under the FCA.

If your business model includes multiple service classes, you must apply for the highest capital tier that covers all activities. For instance, if you offer both custodial wallets and a trading platform, you need EUR 150,000 capital.

Step-by-Step Application Process

1. Pre-assessment: Evaluate your business model against BaFin requirements. Consulting24 offers a pre-assessment service to identify gaps.
2. Company incorporation: Register a German GmbH (minimum share capital EUR 25,000) or a branch of an existing EU company. This typically takes 1-2 weeks.
3. Draft documentation: Prepare a detailed business plan, AML/KYC policies, risk management framework, IT security concept, and organizational chart. This is the most time-consuming step, often 4-8 weeks.
4. Appoint key personnel: Hire a qualified AML officer (must be based in Germany), a compliance officer, and at least two managing directors with good repute. BaFin will vet these individuals.
5. IT security audit: Engage a BaFin-recognized auditor to review your IT systems and data protection measures. The audit takes 2-3 months.
6. Submit application: File the application with BaFin, including all supporting documents and the application fee (EUR 5,000-15,000).
7. BaFin review: BaFin may request additional information or clarifications. This phase can take 6-9 months. Be prepared for multiple rounds of questions.
8. License issuance: Once approved, you receive the CASP license and are added to BaFin's public register. You can then begin operations.
9. Ongoing compliance: Submit quarterly reports, annual audited financial statements, and AML reports. BaFin may conduct on-site inspections.

Consulting24 coordinates the entire process with local legal and compliance experts. For a faster alternative, consider our Panama license at a flat fee of EUR 6,000, which can be completed in 2-4 weeks.

Banking and Payment Processing

Opening a bank account for a crypto company in Germany is challenging. Most traditional banks are reluctant to serve crypto businesses due to compliance risks. Specialized crypto-friendly banks in Germany include Fidor Bank, Solarisbank, and N26 (for basic accounts). Some international banks like ClearBank and BCB Group also offer services.

BaFin requires that client funds be held in segregated accounts. For payment processing, you may need to partner with a payment institution that supports crypto. For example, you might use a service like Satispay or a licensed payment processor that integrates with crypto exchanges. The account opening process itself can take 4-8 weeks due to enhanced due diligence.

Consulting24 can help you identify suitable banking partners based on your business model. We also advise on how to structure your accounts to meet BaFin's segregation requirements. For a simpler banking setup, some firms choose to incorporate in Estonia or Panama, where banking is often more accessible.

Benefits of a German Crypto License

• EU passport: Once licensed, you can provide services across the EU under MiCA passporting, reaching 450 million potential clients.
• High credibility: BaFin is one of the most respected regulators globally, enhancing trust with clients and partners.
• Clear legal framework: MiCA provides a comprehensive set of rules, reducing legal uncertainty.
• Access to German market: Germany is the largest economy in the EU with a high adoption of crypto. Many institutional investors prefer regulated partners.
• Tax advantages: Long-term private holdings are tax-free, and corporate tax rates are moderate compared to other EU countries.
• Stable political environment: Germany offers a predictable regulatory and economic environment, which is attractive for long-term business planning.

However, these benefits come with high costs and a long timeline. For startups or smaller firms, a faster and cheaper jurisdiction like Lithuania or Panama may be more suitable.

Compliance and Trust

Ongoing compliance is rigorous. You must appoint a local AML officer, conduct regular AML training, perform customer due diligence, and report suspicious transactions to the Financial Intelligence Unit (FIU). BaFin conducts periodic on-site inspections and audits. Non-compliance can result in fines, revocation of the license, or criminal liability.

For example, if you fail to report a suspicious transaction within the required timeframe, BaFin may impose a fine of up to EUR 5 million or 10% of annual turnover. You must also maintain records of all transactions for at least five years. The compliance burden is significant, so many firms outsource AML officer duties to specialized service providers.

Consulting24 advises on compliance frameworks and can connect you with local compliance officers. This is general guidance, not legal advice. Always consult a qualified German lawyer for your specific situation.

Common Mistakes to Avoid

• Incomplete documentation: BaFin rejects applications with missing or vague information. Ensure your business plan is detailed and realistic, including financial projections for three years.
• Underestimating capital: The minimum capital is just the start; you need additional funds for operational costs during the application period. Many applicants run out of money before the license is issued.
• Ignoring IT security: BaFin requires a certified IT security audit. Do not skip this step or use an unrecognized auditor.
• Choosing the wrong legal form: A GmbH is standard, but a branch may be simpler for EU firms. However, a branch may not be accepted for all services.
• Not hiring local staff: BaFin expects key personnel to be based in Germany. Remote AML officers are not accepted.
• Overlooking ongoing costs: Budget for annual compliance, audit, and AML officer salaries, which can easily exceed EUR 100,000 per year.
• Assuming passporting is automatic: You must notify BaFin before serving clients in other EU countries, and some countries may impose additional requirements.

Avoiding these mistakes can save you months of delays and thousands of euros. Consulting24's pre-assessment service can identify potential issues early.

Alternatives and Comparisons

Germany is not the only option. Here is how it compares to other jurisdictions:

For a non-EU option with low cost and fast setup, Panama is attractive. For EU passporting, Lithuania offers a faster and cheaper alternative to Germany. Consulting24 delivers directly in Lithuania and Panama, and for Germany we advise and coordinate. We also have experience with Czech Republic and Poland licenses, which may be suitable for some business models.

If you need a license that covers the entire EU, Germany or Lithuania are your best bets. But if your target market is outside the EU, Panama's tax-neutral regime and low cost may be more advantageous. Contact us to discuss your specific needs.

Official sources

• BaFin - Federal Financial Supervisory Authority

Related jurisdictions

Mardo Soo · CEO, Consulting24Personally advises on jurisdiction selection. 500+ crypto licenses across Estonia, Lithuania & Panama. LinkedIn →

General guidance, not legal advice. Rules and fees evolve — we confirm current requirements for your case.