Germany: fintech & payments regulation

Regulated

BaFin licenses payments & e-money under ZAG; Bundesbank oversees reporting

Also involved
Deutsche Bundesbank (reporting & supervision) · BaFin (crypto & securities interface)
Core law
Payment Services Supervision Act (ZAG), 2009 (as amended)
Entry capital
Approval timeline
3–6 months to full authorisation
Customer assets
Strict segregation required; funds held in dedicated accounts
Data protection
GDPR & BDSG · State data protection authorities
Sandbox
Yes - BaFin Regulatory Sandbox (Testregime)

Germany regulates fintech and payments primarily under the Payment Services Supervision Act (ZAG), supervised by BaFin with operational reporting to the Deutsche Bundesbank. The framework distinguishes between payment institutions and e-money institutions, both requiring formal authorisation. Recent regulatory focus has shifted toward standardized monthly reporting, agent network notifications, and alignment with broader financial services classification under KWG and WpIG. The regime remains stable but increasingly data-driven, with BaFin maintaining a structured approval pathway for market entrants.

Which licence do you need?

Your activityRequirementCapitalTimelineAuthority
Payment processing / gatewayLicencePayment Institution (ZAG)[1][2]

Covers payment execution & gateway services under ZAG

BaFin
E-money & wallet issuanceLicenceE-money Institution (ZAG)[1][2]

Issuance & redemption of electronic money regulated separately

BaFin
Domestic money transferLicencePayment Institution (ZAG)[1]

Domestic transfers fall under standard payment institution scope

BaFin
Cross-border remittanceLicencePayment Institution (ZAG)[1]

Cross-border transfers require same ZAG authorisation

BaFin
Agent networkRegistrationAgent Notification (ZAG §25)[3]

Formal notification required before appointing payment agents

BaFin / Bundesbank
Open banking / account informationLicencePayment Institution (AIS)[1]

Account information services licensed under ZAG payment regime

BaFin
Foreign-exchange servicesLicencePayment Institution (ZAG)[1]

Currency exchange for payment purposes covered by ZAG

BaFin

New — what changed recently

  • 2026-01ZAG Monthly Reporting GuidelineStandardises financial statement & data submission requirements for payment and e-money institutions.[2]
  • 2025-01WpIG Securities Services Authorisation GuidelineClarifies licensing scope, ancillary services, and authorisation criteria for securities firms.[4]
  • 2023-05KWG Multilateral Trading Facility DefinitionCodifies statutory authorisation requirements and operational scope for MTF operators.[5]
  • 2022-02ZAG Notification & Reporting OverviewMaps mandatory reporting obligations across five institutional groups under the payment regime.[1]

Market-entry checklist

  1. 1Incorporate German entity & draft business planEstablish a German legal entity with a viable business plan meeting BaFin organisational standards.
  2. 2Submit ZAG authorisation application to BaFinFile complete application with organisational rules, AML policies, and fit-and-proper management details.
  3. 3Appoint compliant management & directorsEnsure all managing directors pass BaFin fit-and-proper assessments and reside in Germany.
  4. 4Notify Bundesbank of agent network intentUse the prescribed data collection form to notify agent appointments before commencing operations.
  5. 5Implement monthly reporting systems per ZAGConfigure internal systems to generate and submit monthly financial statements under ZAG §29(1).
This guide is compiled automatically from 5 primary-source documents published by Germany's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.