Since 2010, the Global Law Experts annual awards have been celebrating excellence, innovation and performance across the legal communities from around the world.
posted 2 hours ago
Since the Markets in Crypto-Assets Regulation (MiCA) became fully applicable on 30 December 2024, every crypto-asset service provider (CASP) operating in Germany must hold or be in the process of obtaining authorisation from the Federal Financial Supervisory Authority (BaFin). The MiCA NCA application Germany route is now the single gateway for exchanges, custodial wallet providers, portfolio managers, brokers and transfer-service operators that wish to serve clients from or within the German market.
With ESMA warning that most transitional windows close on 1 July 2026, the urgency for firms that have not yet filed or that hold legacy Kreditwesengesetz (KWG) authorisations and need to convert is acute. Late filers risk being unable to provide services lawfully in Germany and across the EU single market.
This guide is for founders, compliance officers and in-house counsel who need an actionable, BaFin-specific filing roadmap: step-by-step procedures, document checklists, realistic timelines, fee estimates and fast-track rules for already-supervised entities. For broader context on CASP licensing across the EU, see our full CASP licensing guide.
Regulation (EU) 2023/1114 commonly known as MiCA establishes a harmonised EU-wide framework for the issuance and offering of crypto-assets and for the provision of crypto-asset services. It covers asset-referenced tokens (ARTs), e-money tokens (EMTs) and other crypto-assets, and creates a uniform authorisation and conduct regime for CASPs. Title V of MiCA requires every CASP to be authorised by the National Competent Authority (NCA) of its home Member State before providing services anywhere in the EU.
In Germany, BaFin is designated as the NCA for MiCA purposes. BaFin receives and assesses CASP authorisation applications, grants or refuses authorisations, supervises ongoing compliance, and cooperates with ESMA and the EBA on cross-border matters. Authorised CASPs are entered into ESMA’s Interim MiCA Register, enabling them to passport services across the EU.
MiCA’s stablecoin provisions (Titles III and IV) applied from 30 June 2024; the full regulation including CASP authorisation requirements applied from 30 December 2024. Most Member-State transitional measures allowing existing providers to continue operating without MiCA authorisation expire on 1 July 2026. After that date, any CASP without a valid MiCA authorisation (or a pending application filed before the deadline, where the NCA permits continued operation) must cease services in Germany.
MiCA defines ten categories of crypto-asset services requiring authorisation. The most common activities relevant to a MiCA NCA application Germany filing include:
Germany was among the first EU Member States to regulate crypto custody. Since 2020, § 1 (1a) sentence 2 no. 6 of the Kreditwesengesetz (KWG) classified crypto custody (Kryptoverwahrgeschäft) as a financial service requiring BaFin authorisation. Firms already holding a KWG crypto-custody licence interact with MiCA’s regime through Article 143 transitional measures: they may continue operating under their existing licence until the transitional deadline, provided they file for full MiCA authorisation before that date. BaFin offers a simplified conversion pathway for these entities (see the fast-track section below).
Pure non-custodial software wallet providers where the user alone controls private keys and the provider has no access to funds generally fall outside MiCA’s authorisation scope. However, BaFin applies a substance-over-form analysis: if a provider’s architecture gives it the technical ability to execute or block transactions, BaFin may classify the activity as custodial. Entities uncertain about their classification should seek a pre-application discussion with BaFin before concluding they are out of scope.
Below is the end-to-end application route, from initial engagement to authorisation decision. Each step includes practical timeline ranges based on industry experience with BaFin reviews to date.
☐ Request a pre-application meeting with BaFin’s relevant department (Wertpapieraufsicht / Financial Services Supervision). Present your business model, proposed CASP activities, corporate structure and any existing KWG authorisation.
☐ Prepare a preliminary information package covering: a concise business plan, draft organisational chart, summary of IT architecture and custody model, AML risk assessment synopsis and capital position overview.
☐ Clarify the regulatory perimeter confirm which MiCA service categories apply and whether any activities also trigger obligations under the German Geldwäschegesetz (GwG), the Securities Trading Act (WpHG) or DORA.
Industry observers note that firms engaging BaFin early before filing typically experience significantly shorter completeness-check phases and fewer deficiency queries.
☐ Submit the formal application via BaFin’s designated portal, using the prescribed forms. BaFin has published MiCA-specific form templates (including the MiCA-STOR form) and expects filings to follow the ESMA/EBA Implementing Technical Standards (ITS) format where applicable.
☐ Attach all required supporting documents see the detailed document checklist section below. Ensure each document is current, signed where required, and cross-referenced to the relevant MiCA article.
☐ Pay the application fee BaFin charges an upfront fee upon filing (see fees section).
☐ BaFin issues a completeness statement confirming that the application dossier is formally complete, or a deficiency notice listing missing or insufficient documents.
☐ Common grounds for deficiency include: unsigned fit-and-proper declarations, incomplete group ownership charts, missing independent audit opinions on capital, and insufficient detail in AML/KYC programme documentation.
☐ Cure period: BaFin typically allows a reasonable cure window (often four to six weeks) to remedy deficiencies before deeming the application incomplete.
☐ BaFin conducts an in-depth assessment covering: governance and fitness-and-propriety of management; prudential soundness (capital adequacy, solvency forecasts); IT and operational security (DORA alignment, penetration-test results); AML/CFT controls (GwG compliance, transaction-monitoring capability); custody arrangements (private-key controls, segregation, proof-of-keys); and conduct-of-business rules (conflicts of interest, complaints handling, client disclosures).
☐ Expect multiple rounds of supplementary questions. BaFin may request on-site inspections, third-party audit reports or additional capital stress-test scenarios.
☐ Complex applications such as those involving asset-referenced tokens, multi-jurisdictional custody chains or novel DeFi-interfacing models tend toward the longer end of the timeline range.
☐ BaFin issues a formal authorisation decision which may be unconditional, subject to conditions (e.g., phased service rollout), or a refusal with reasons.
☐ Upon authorisation, BaFin notifies ESMA, which updates the Interim MiCA Register. The CASP may then passport its services across the EU via the notification procedure.
BaFin reviews tend to take longer where: external audits are pending; the applicant relies on third-party custody sub-custodians; the business model involves complex ART/EMT prudential requirements; or governance structures span multiple jurisdictions. The EBA’s published regulatory technical standards provide detailed templates that, if used correctly, can accelerate the review process.
BaFin’s fee model comprises an upfront application (authorisation) fee and ongoing annual supervision levies. Application fees for CASP authorisations have historically ranged from approximately €10,000 to €30,000+, depending on the complexity and number of services sought. Ongoing supervision fees are calculated annually based on the firm’s revenue and BaFin’s cost-allocation methodology. Applicants should verify the current BaFin fee schedule at the time of filing, as fees are adjusted periodically.
MiCA prescribes minimum own-funds requirements that vary by service type. The following table summarises conservative estimate ranges; exact thresholds are defined in the EBA’s regulatory technical standards and MiCA Article 67:
| CASP Activity | Minimum Own Funds (Indicative) | Notes |
|---|---|---|
| Custody and administration | €125,000 | Higher where combined with other services |
| Operation of a trading platform | €150,000 | Scaled by volume; EBA RTS may impose add-ons |
| Exchange / execution of orders | €150,000 | May be higher for principal-dealing models |
| Portfolio management / advice | €125,000 | Lower base but conduct-risk capital buffers apply |
| Transfer services only | €125,000 | Simplest capital profile |
Note: These figures reflect MiCA statutory minima. BaFin may require higher own funds based on the applicant’s risk profile, projected volumes and stress-test outcomes. Applicants should consult the latest EBA prudential RTS and BaFin guidance at the time of filing.
During substantive review, BaFin typically raises supplementary questions. The following are the most frequently encountered topics, with model response approaches:
A best-practice approach is to pre-populate an evidence matrix cross-referencing each expected BaFin query to a specific document, page number and responsible officer and submit it alongside the application dossier.
Article 143 of MiCA provides transitional measures for entities already authorised under national law before 30 December 2024. In Germany, this primarily applies to firms holding a KWG Kryptoverwahrgeschäft licence under § 1 (1a) KWG.
These entities may continue operating under their existing BaFin authorisation until the end of the applicable transitional period in most cases, 1 July 2026 provided they file a MiCA authorisation application before that date. ESMA has emphasised that last-minute applications risk not being processed before the transitional window closes, leaving the firm in regulatory limbo.
BaFin applies a simplified assessment for already-supervised entities: where documentation such as AML programmes, governance structures and capital proofs is already on file from the KWG authorisation, BaFin accepts cross-references rather than requiring full re-submission. The result is a materially shorter completeness-check phase and a streamlined substantive review, typically two to four months faster than a de novo application.
Profile: Germany-registered GmbH, single custody product, five employees, no KWG legacy licence.
Preparation: 8–12 weeks (governance documentation, AML programme build, IT security audit).
Substantive review: 3–6 months.
Estimated advisory and filing costs: €40,000–€100,000 (legal, audit and consultancy fees combined).
Key risk factor: Pen-test remediation and independent custody-model audit can add four to eight weeks.
Profile: Multi-jurisdiction group relocating its EU hub to Germany, offering exchange, execution and custody complex custody chain involving third-party sub-custodians.
Preparation: 3–6 months (corporate restructuring, group ownership due diligence, multi-jurisdiction AML harmonisation).
Substantive review: 6–12+ months.
Estimated advisory and filing costs: €150,000–€400,000.
Key risk factor: Sub-custodian contract negotiations and cross-border data-protection assessments frequently extend timelines.
Profile: Firm holding a KWG Kryptoverwahrgeschäft licence since 2021, established BaFin supervisory relationship, existing AML and governance frameworks.
Preparation: 4–8 weeks (gap analysis against MiCA, supplementary document preparation).
Substantive review: 2–4 months.
Estimated conversion costs: €25,000–€80,000.
Key risk factor: Firms that delay beyond early 2026 risk bottleneck effects as BaFin processes a surge of conversion applications approaching the 1 July 2026 deadline.
Note: All cost estimates are indicative and depend on audit scope, third-party opinion requirements, capital proof complexity and bespoke IT remediation needs. Conservative budgeting is advisable.
To support your MiCA NCA application Germany filing, the following resources are available for download:
| Provider Type | Typical Service Cost Range | Typical Time to Authorisation | Typical Scope |
|---|---|---|---|
| Large international law firm | €100,000–€500,000+ | 6–18 months | Full filing, regulatory liaison, post-authorisation support |
| Boutique regulatory law firm | €50,000–€200,000 | 4–12 months | Full filing and advisory; may lack cross-border network |
| Compliance consultancy | €30,000–€150,000 | Advisory only (no filing) | Document preparation, gap analysis, remediation |
| Global Law Experts network | Competitive tailored to scope | 3–12 months (full support) | End-to-end: jurisdictional coverage, regulatory templates, post-authorisation compliance |
The principal differentiator for applicants choosing specialist support is access to BaFin-specific regulatory templates, realistic timeline management and integrated post-authorisation compliance monitoring areas where a multi-jurisdictional network offers significant practical advantages.
| Requirement | Custody / Administration | Exchange / Execution | Portfolio Management |
|---|---|---|---|
| Minimum own funds | €125,000 | €150,000 | €125,000 |
| Custody / private-key controls | Full (core activity) | If holding client assets | If holding client assets |
| AML/KYC programme (GwG) | Full | Full | Full |
| Segregation of client assets | Mandatory | Mandatory if custodial | Mandatory if custodial |
| Fit-and-proper (management) | Required | Required | Required |
| IT / DORA alignment | Required | Required | Required |
| Conflicts of interest policy | Required | Required | Enhanced (suitability obligations) |
| White-paper obligations | If issuing/offering tokens | If listing new tokens | Generally not applicable |
| Ongoing reporting to BaFin | Quarterly + ad hoc | Quarterly + ad hoc | Quarterly + ad hoc |
Find the right Legal Expert for your business
Sign up for the latest advisor briefings and news within Global Advisory Experts’ community, as well as a whole host of features, editorial and conference updates direct to your email inbox.
Naturally you can unsubscribe at any time.
Global Advisory Experts is dedicated to providing exceptional advisory services to clients around the world. With a vast network of highly skilled and experienced advisors, we are committed to delivering innovative and tailored solutions to meet the diverse needs of our clients in various jurisdictions.
