✓ MiCA Regulation (EU) 2023/1114 — In force since December 2024
✓ VASP→CASP Transition Deadline: 1 July 2026
✓ Offices in Düsseldorf · Vilnius · Tallinn
✓ Free Initial Consultation

BaFin Crypto License Guide — Authorization in Germany Under MiCA (2026)

Frankfurt skyline — BaFin crypto license and CASP authorization in Germany

Germany was an early mover in crypto regulation, and BaFin — the Federal Financial Supervisory Authority — is one of Europe's most respected regulators. Under MiCA, German crypto businesses now seek CASP authorization from BaFin, replacing the former KWG crypto-custody license. This guide explains how BaFin licensing works in 2026: the requirements, the timeline, the costs, and why a German authorization carries particular weight when you passport across the EU.

Why License With BaFin

BaFin has supervised crypto activity longer than most EU regulators, and its approval signals credibility to banks, counterparties, and institutional clients. For firms that want to be taken seriously across Europe — and especially those targeting the DACH market and institutional money — a German CASP authorization is a strong base from which to passport EU-wide.

The trade-off is rigour: BaFin sets a high bar on governance, capital, and documentation, and the process is demanding. That same rigour is what makes the license valuable.

From the KWG Crypto-Custody License to MiCA

Before MiCA, Germany regulated crypto custody under the Banking Act (KWG), with a dedicated crypto-custody license introduced in 2020. MiCA replaced this national regime with the harmonised CASP authorization. Firms that held the KWG crypto-custody license transitioned into the MiCA framework during the grandfathering period, which has now closed.

The practical effect in 2026: new and existing German crypto businesses operate under MiCA, supervised by BaFin, with the benefit of EU passporting that the old national license never offered.

BaFin CASP Requirements

A BaFin CASP authorization requires the standard MiCA package, applied with German thoroughness:

  • A German legal entity — typically a GmbH or AG;
  • Minimum capital by service class — €50k / €125k / €150k (see capital guide);
  • Fit-and-proper management with relevant experience, often expected to be locally credible;
  • A complete application file — programme of operations, governance, AML, ICT;
  • A strong AML/CFT programme and DORA resilience framework.

Process & Timeline

The procedure follows MiCA's clock — a 25-working-day completeness check and a 40-working-day assessment — but in practice BaFin engagements run to roughly 4–6 months end to end, depending on the quality of the file and the complexity of the business. BaFin tends to ask detailed follow-up questions, so a complete, well-evidenced first submission materially shortens the timeline.

Costs

Indicative costs for a BaFin CASP authorization:

  • Government/supervisory fees: roughly €10,000–€25,000;
  • Minimum capital: €50,000–€150,000 depending on class;
  • Professional fees: typically €15,000–€45,000 for advisory, drafting, and submission.

Germany is not the cheapest EU route — if cost is the priority, see our cheapest crypto license guide — but it offers credibility that lower-cost jurisdictions cannot match.

Is a BaFin License Right for You?

Choose Germany if you value regulatory prestige, are targeting the DACH or institutional market, or need the strongest possible standing with banking partners. Choose a lighter-cost jurisdiction if speed and budget dominate and your model does not depend on a marquee regulator. Either way the license passports across the EU, so the decision is about credibility and cost, not market access. We help firms make this call and execute it via our Germany CASP service.

Frequently Asked Questions

What license do crypto companies need in Germany?
Under MiCA, crypto businesses in Germany need a CASP authorization from BaFin, the Federal Financial Supervisory Authority. This replaced the former KWG crypto-custody license. The CASP authorization passports across all 27 EU member states.
How long does BaFin take to grant a crypto license?
BaFin follows MiCA's procedural clock — 25 working days to check completeness and 40 working days to assess — but real engagements typically run around 4–6 months end to end, depending on the quality of the application and how many follow-up questions BaFin raises.
How much does a BaFin crypto license cost?
Indicative costs are government and supervisory fees of roughly €10,000–€25,000, minimum capital of €50,000–€150,000 depending on the service class, and professional fees typically in the €15,000–€45,000 range. Germany is not the cheapest EU jurisdiction but offers strong regulatory credibility.
What happened to the German KWG crypto-custody license?
MiCA replaced Germany's national KWG crypto-custody regime with the harmonised CASP authorization. Firms holding the old license transitioned into MiCA during the grandfathering period, which has now closed. In 2026 German crypto businesses operate under MiCA, supervised by BaFin, with EU passporting.
Is a BaFin license better than other EU crypto licenses?
All MiCA CASP authorizations grant the same EU passport, so market access is identical. A BaFin license stands out for credibility — valuable for institutional clients and banking relationships — but it is more demanding and costly than lighter jurisdictions. The right choice depends on your market, budget, and priorities.
Thomas Mueller — German CASP Licensing Specialist
German CASP Licensing Specialist
Thomas Mueller
Senior CASP Licensing Advisor · Düsseldorf & Vilnius

Thomas Mueller leads German crypto licensing engagements, guiding firms through BaFin's CASP authorization process and the transition from the former KWG crypto-custody regime to MiCA. Speak with our team →

License With BaFin — With the File Done Right

We manage German CASP authorizations end to end — entity, capital, governance, AML, and DORA — and handle BaFin's detailed review. Free 30-minute consultation.

Get BaFin Licensing Support