Bitcoin & Cryptocurrency Regulation in Germany

Yes. Owning, buying, selling, and using Bitcoin and other crypto-assets is legal in Germany. Crypto is not legal tender (only the euro is), but it is recognised as a private asset that can be held and traded, and individuals may use it freely. Merchants can accept it voluntarily.

What is regulated is the infrastructure around crypto rather than personal ownership. Exchanges, brokers, custodians, and similar providers must be authorised and must follow anti-money-laundering rules. Germany was an early mover in this area, having introduced a dedicated crypto-custody permission before the EU-wide framework arrived. For ordinary users, buying through an authorised platform is both legal and the safest route.

The lead national regulator is BaFin, the Federal Financial Supervisory Authority (Bundesanstalt fuer Finanzdienstleistungsaufsicht). BaFin authorises and supervises crypto-asset service providers, checks their capital, governance, and consumer-protection standards, and enforces compliance. It is the designated competent authority in Germany under the EU's MiCAR.

BaFin works with the Deutsche Bundesbank (the German central bank) on financial-stability questions. Tax treatment is set separately by the Bundesministerium der Finanzen (Federal Ministry of Finance, BMF) and administered by the regional tax offices (Finanzamt). On anti-money-laundering, BaFin coordinates with the Financial Intelligence Unit, and from 2025 onward the EU's new Anti-Money Laundering Authority (AMLA), which is headquartered in Frankfurt, is being built up to add a central supervisory layer.

You can confirm whether a provider is authorised, and read official guidance, directly on the BaFin MiCAR pages (see also the BaFin English-language site).

Germany's crypto rules combine EU regulation with national implementing law.

MiCAR: the EU rulebook

The Markets in Crypto-Assets Regulation, Regulation (EU) 2023/1114 (MiCAR), is the EU's harmonised regime for crypto-asset markets. Its rules for stablecoins (asset-referenced tokens and e-money tokens) began applying on 30 June 2024, and the rules for crypto-asset service providers (CASPs) and issuers became applicable across the EU on 30 December 2024. A key benefit is passporting: a CASP authorised in one member state can serve customers across the whole bloc.

National implementation: the KMAG

Germany implemented MiCAR domestically through the Kryptomaerkteaufsichtsgesetz (Crypto Markets Supervision Act, KMAG), published in the Federal Law Gazette on 27 December 2024. The KMAG gives BaFin the powers it needs to apply MiCAR, including the ability to issue public warnings. Notably, Germany used a shortened grandfathering window: firms that held older national permissions had a transition period that ran until 31 December 2025 to obtain full MiCAR (CASP) authorisation.

AML and transfer rules

Anti-money-laundering duties stem from the German Money Laundering Act (Geldwaeschegesetz, GwG) and, at EU level, the Transfer of Funds Regulation, which extends the travel rule (sharing of sender and recipient data) to crypto transfers between regulated providers. This is general information, not legal advice; verify current requirements with BaFin.

Under MiCAR, any business operating in Germany as a crypto-asset service provider must apply to BaFin for authorisation. CASPs include crypto custodians, operators of trading platforms, brokers and dealers, firms that transfer or exchange crypto-assets, and those that advise on or manage crypto portfolios. Once authorised, a provider can offer services throughout the EU using passporting rights.

To be authorised, firms must meet requirements on minimum capital, fit-and-proper management, governance, safeguarding of client assets, conflict-of-interest controls, disclosure, and operational resilience. They must also comply with AML obligations. BaFin has published interpretation and application guidance and held workshops to help firms apply the new rules, and Germany has been among the most active EU states in granting MiCAR authorisations during 2025.

For users, the practical takeaway is to favour a provider authorised to serve EU customers under MiCAR, because that authorisation carries consumer-protection, custody, and disclosure standards. You can check status via BaFin. This is general information, not legal advice.

Germany's tax treatment of crypto for private investors is unusually favourable. Crypto held privately is generally treated as a private sale asset under section 23 of the Income Tax Act (Einkommensteuergesetz, EStG). The Federal Ministry of Finance set out its current position in a detailed letter dated 6 March 2025.

The one-year holding rule

Gains on crypto held for more than one year are generally tax-free when sold. Dispose of it within one year and the gain is taxed at your personal income-tax rate. Short-term private-sale gains are tax-free up to an annual exemption limit (a Freigrenze, reported at 1,000 euros per year for recent years, raised from a lower figure previously). Because a Freigrenze works as a threshold rather than an allowance (exceeding it can make the whole amount taxable), confirm the current figure and how it applies with a Steuerberater rather than relying on a number you read online.

Mining, staking, and other crypto income

Income that is not a simple private sale is treated differently. Mining and staking rewards are generally taxable as income at their euro value when received; related costs may be deductible where the activity is commercial. The March 2025 BMF letter also addressed airdrops, hard forks, lending, and DeFi for the first time, and set out record-keeping and reporting expectations. Keep detailed records (dates, amounts, euro values, fees, and platform) to prove holding periods and calculate gains.

This is general information, not tax advice. The official source is the BMF crypto-tax letter: BMF letter of 6 March 2025 (English). For a broader overview, see our guide to crypto taxes.

Anti-money-laundering (AML) and know-your-customer (KYC) requirements are central to how crypto is regulated in Germany. Authorised providers are obliged entities under the German Money Laundering Act (Geldwaeschegesetz, GwG) and must verify customer identity, monitor transactions, and report suspicious activity.

• Identity verification (KYC): regulated platforms must verify who you are before you can trade or withdraw, typically requiring a government ID and proof of address. This is a legal requirement, not an optional step.
• The travel rule: under the EU Transfer of Funds Regulation, providers must collect and share originator and beneficiary information on crypto transfers between regulated firms. In the EU this applies to crypto transfers regardless of amount, which is stricter than the threshold-based rule for traditional wire transfers.
• Coming changes: a new EU AML package introduces a single AML Regulation (AMLR) that applies directly from 10 July 2027, expands obligations for crypto providers, and brings an EU-wide cash-payment limit. The new EU Anti-Money Laundering Authority (AMLA), based in Frankfurt, became operational in 2025 and will add central supervision over time.

This is general information; for current AML duties consult BaFin and the relevant EU authorities.

Germans can buy crypto through exchanges, brokers, and regulated banks and fintech apps. The rule of thumb is to use a provider authorised to serve EU customers under MiCAR. A typical path looks like this:

• Choose an authorised provider: an exchange, broker, or app authorised under MiCAR. Compare fees, supported assets, and how it custodies funds.
• Complete KYC: verify your identity with a government ID and usually proof of address, as required by AML law.
• Fund your account: deposit euros, most cheaply by SEPA transfer; cards are often supported but cost more.
• Buy and decide on custody: place an order, then either leave assets on the platform for convenience or withdraw to a personal wallet (a hardware wallet for larger amounts). Self-custody is legal and cuts counterparty risk, but security then rests entirely with you, so back up your recovery phrase and never share it.
• Keep records: note purchase dates, amounts, and euro values for tax and holding-period tracking.

Bitcoin ATMs exist in Germany but are tightly regulated: operating one is a financial service, so operators must be authorised and meet AML obligations. BaFin has acted against unlicensed machines, the network is small, fees are high, and identity checks usually apply. For most people a regulated online exchange is cheaper and more reliable.

Mining cryptocurrency is legal in Germany, but it is rarely competitive at scale because of high electricity costs. Proof-of-work mining is energy-intensive, so margins are thin against regions with cheaper power, and the energy footprint attracts scrutiny given Germany's strong climate and renewables agenda. There is no outright ban, but large operations face the same grid, permitting, and sustainability considerations as any energy-intensive business.

For tax, mining rewards are generally treated as income at their euro value when received, in line with the BMF's guidance, and commercial miners may deduct legitimate costs such as electricity and hardware. Anyone mining beyond a hobby scale should get tax advice, since the activity can be classified as commercial (gewerblich) with additional obligations.

The direction of travel is toward clearer, harmonised rules. The most significant recent changes include:

• MiCAR fully applicable: the CASP and issuer rules took effect across the EU on 30 December 2024, and Germany implemented them through the KMAG (in force from 27 December 2024).
• German transition closed: Germany used a shortened grandfathering period that ended on 31 December 2025, after which firms needed full MiCAR authorisation to keep serving German customers. BaFin has been among the most active EU regulators in granting these authorisations.
• Updated crypto-tax guidance: the BMF's letter of 6 March 2025 refreshed the income-tax treatment of crypto, adding detail on staking, lending, DeFi, airdrops, hard forks, and record-keeping.
• AML overhaul ahead: the EU AMLA opened in Frankfurt in 2025, and the new EU AML Regulation applies directly from 10 July 2027, expanding obligations for crypto providers.

One open question for investors is whether the long-standing one-year tax exemption survives future political debate. As of 2026 it remains in force, but it is the rule most worth monitoring with the official sources below.

Crypto in Germany is well-regulated, but not risk-free. The two biggest user risks are market volatility and fraud.

Market risk

Crypto prices are highly volatile and can fall substantially. The market is still maturing and individual projects can fail. A common conservative principle is to commit only money you can afford to lose, diversify, and ignore anything promising guaranteed profits.

Scams to watch for

Common schemes include fake or cloned platforms that mimic real exchanges; investment scams promising guaranteed or unusually high returns, including Ponzi structures and fraudulent token offerings; phishing messages and sites that capture your login or recovery phrase; and romance or pig-butchering scams that build trust before pushing a fake investment.

Protect yourself: use only authorised providers, verify URLs, enable two-factor authentication, never share your seed phrase, and treat any unsolicited opportunity with suspicion. BaFin publishes warnings about unauthorised firms, and suspected fraud can be reported to the police. MiCAR adds consumer-protection, disclosure, and custody safeguards when you use an authorised provider, which is the strongest reason to stick to one.

Because crypto rules are evolving, always confirm specifics with the primary official sources rather than third-party summaries. The most relevant are:

• BaFin for regulation, CASP authorisation status, and warnings: BaFin MiCAR pages and the BaFin English-language site.
• Bundesministerium der Finanzen (BMF) for crypto taxation: BMF crypto income-tax letter, 6 March 2025 (English PDF).
• EU Anti-Money Laundering Authority (AMLA) for the incoming AML regime: amla.europa.eu.

This page is general information as of 2026 and is NOT legal, tax, or financial advice. Laws and thresholds change; verify your situation with BaFin, the Bundesministerium der Finanzen, or a qualified Steuerberater before acting. For related reading, see our regulation hub and our guide to crypto regulation.

Is Bitcoin legal in Germany?

Which regulator oversees crypto in Germany?

Do I pay tax on Bitcoin profits in Germany?

Do German crypto exchanges need a licence?

What KYC and AML rules apply when buying crypto in Germany?

Is crypto mining allowed in Germany?