BaFin (Federal Financial Supervisory Authority — Germany)

The Federal Financial Supervisory Authority (Bundesanstalt für Finanzdienstleistungsaufsicht, BaFin) is Germany’s integrated financial regulator, overseeing banks, insurance companies, securities firms, and payment service providers under a unified supervisory structure. BaFin occupies a central position in European crypto asset regulation as both the implementing authority for Germany’s electronic securities law and Germany’s designated national competent authority under MiCA, giving it a dual role in the infrastructure for tokenized traditional assets and in the authorization of crypto-asset service providers.

Institutional Background and Wirecard Context

BaFin was established on May 1, 2002, by the Financial Services Supervisory Act (Finanzdienstleistungsaufsichtsgesetz), merging three predecessor agencies: the Federal Banking Supervisory Office, the Federal Insurance Supervisory Office, and the Federal Securities Supervisory Office. BaFin maintains offices in both Frankfurt, where capital markets supervision is centered, and Bonn, where the original banking and insurance supervisory functions had their historical home.

BaFin’s institutional credibility suffered a significant blow from the Wirecard scandal, in which the Munich-based payments company collapsed in June 2020 after admitting that approximately €1.9 billion in cash balances did not exist. BaFin’s supervisory failures — including its decision to pursue short-sellers reporting on Wirecard’s accounting irregularities rather than investigating the underlying concerns — led to a parliamentary inquiry and comprehensive reforms. The reforms included strengthened investigative powers, a restructured supervisory methodology emphasizing skeptical analysis of management representations, and enhanced whistleblower protections. This context is relevant to BaFin’s engagement with crypto regulation because the reforms coincided with the drafting of Germany’s electronic securities framework, and the reformed BaFin brought a more assertive supervisory posture to the new regime.

The eWpG: Electronic Securities Framework

The Act on the Introduction of Electronic Securities (Gesetz zur Einführung von elektronischen Wertpapieren, eWpG), which entered into force on June 10, 2021, created Germany’s legal framework for digitally issued securities. The eWpG fundamentally modified Germany’s securities law by eliminating the requirement that securities be embodied in a physical certificate, permitting instead registration in either a central securities depository (CSD) register or a crypto securities register (Kryptowertpapierregister) maintained on a distributed ledger.

The crypto securities register option is the more novel and significant innovation. A crypto security registered on a DLT system confers the same legal rights as a traditionally certificated security, with ownership determined by the register rather than by physical possession of a certificate. The register must be maintained by an entity supervised by BaFin under the eWpG, and detailed technical requirements govern the register’s integrity, accessibility, and backup arrangements.

BaFin has authorized crypto securities register operators and overseen several significant tokenized bond issuances under the eWpG framework. The European Investment Bank issued a €100 million digital bond on blockchain infrastructure in April 2021, one of the first eWpG-eligible issuances. Siemens AG issued a €60 million digital bond directly on a public blockchain in February 2023, dispensing with a central securities depository entirely — a first for a major German corporate. These issuances demonstrated the practical viability of the eWpG framework and contributed to Frankfurt’s positioning as a European center for tokenized capital markets.

MiCA: National Competent Authority Role

Under MiCA, each EU member state designates one or more national competent authorities to implement MiCA’s requirements domestically. Germany designated BaFin as its MiCA NCA, giving BaFin responsibility for receiving and processing CASP authorization applications from German-domiciled entities and for supervising authorized German CASPs’ compliance with MiCA requirements.

BaFin’s MiCA authorization process for CASPs follows the requirements established in MiCA and elaborated in ESMA’s technical standards. German-incorporated CASPs seeking to rely on the EU passport to offer services across the European single market must obtain BaFin authorization as their first step. BaFin coordinates with ESMA and other member state NCAs on applications with cross-border implications, and it contributes to ESMA’s supervisory convergence work through participation in ESMA’s Securities Markets Stakeholder Group and various expert committees.

Frankfurt as Tokenized Capital Markets Center

Germany’s combination of the eWpG civil law foundation, BaFin’s dual supervisory role under eWpG and MiCA, the presence of major financial institutions with active tokenization programs (Deutsche Bank, DZ Bank, DekaBank), and Frankfurt’s established position as a European financial center has contributed to Germany’s emergence as a significant locus for tokenized capital markets activity. The Frankfurt-based Deutsche Börse Group, through its Clearstream subsidiary and the D7 digital post-trade platform, has developed infrastructure that integrates traditional and tokenized securities settlement, reinforcing the city’s role in the evolving European tokenization ecosystem.