Strict segregation required; funds held in dedicated accounts
Data protection
GDPR & BDSG · State data protection authorities
Sandbox
Yes - BaFin Regulatory Sandbox (Testregime)
Germany regulates fintech and payments primarily under the Payment Services Supervision Act (ZAG), supervised by BaFin with operational reporting to the Deutsche Bundesbank. The framework distinguishes between payment institutions and e-money institutions, both requiring formal authorisation. Recent regulatory focus has shifted toward standardized monthly reporting, agent network notifications, and alignment with broader financial services classification under KWG and WpIG. The regime remains stable but increasingly data-driven, with BaFin maintaining a structured approval pathway for market entrants.
2026-01ZAG Monthly Reporting Guideline — Standardises financial statement & data submission requirements for payment and e-money institutions.[2]
2025-01WpIG Securities Services Authorisation Guideline — Clarifies licensing scope, ancillary services, and authorisation criteria for securities firms.[4]
2023-05KWG Multilateral Trading Facility Definition — Codifies statutory authorisation requirements and operational scope for MTF operators.[5]
2022-02ZAG Notification & Reporting Overview — Maps mandatory reporting obligations across five institutional groups under the payment regime.[1]
Market-entry checklist
1Incorporate German entity & draft business planEstablish a German legal entity with a viable business plan meeting BaFin organisational standards.
2Submit ZAG authorisation application to BaFinFile complete application with organisational rules, AML policies, and fit-and-proper management details.
3Appoint compliant management & directorsEnsure all managing directors pass BaFin fit-and-proper assessments and reside in Germany.
4Notify Bundesbank of agent network intentUse the prescribed data collection form to notify agent appointments before commencing operations.
5Implement monthly reporting systems per ZAGConfigure internal systems to generate and submit monthly financial statements under ZAG §29(1).
This guide is compiled automatically from 5 primary-source documents published by Germany's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.