title: Germany Payments Regulation Monitor | World Payments Monitor canonical: https://payments.gi/jurisdictions/germany/ date_modified: 2026-10-21 publisher: Asymmetric Intelligence # Germany DE schema world-payments-v1 trajectory: not yet assessed Last updated 2026-10-21 · 14 modules · 65 sourced findings · 128 sources in the cumulative register 14 Modules baseline.modules[] 65 Findings modules[].findings[] 24 Tier-1 sources run_metadata.t1_source_count Confidence mix (sums to 14 rendered modules; click to filter) No modules moved this cycle. ** Law made at European Economic Area level** that applies in Germany is covered once, on the [European Economic Area](https://payments.gi/jurisdictions/european-economic-area/) page. This page covers Germany’s own layer: implementation, national authorities, national options and local enforcement. ## Jurisdiction brief ###### Latest update · 18 October 2026 #### Lead Signal BaFin has refused futurum bank AG's application for MiCAR crypto-asset service provider (CASP) authorisation, filed 27 June 2025 and refused in a decision disclosed on 6 October 2026 through Bitcoin Group SE's mandatory ad-hoc notice. The refusal ends the toleration under which futurum bank, operator of the Bitcoin.de retail platform, had continued offering crypto-asset services during the application's pendency. Germany had already shortened its own national grandfathering window for pre-existing crypto-asset service providers to 31 December 2025, six months ahead of the EU-wide outer limit set at 1 July 2026 under Article 143(3) MiCA, and this refusal is the first concrete instance of that accelerated cut-off producing a market-access consequence for an established, large retail platform rather than functioning as a theoretical deadline. futurum bank is now pursuing a partner-based model, engaging a separately-licensed trading counterparty and a separately-licensed custodian, to resume Bitcoin.de trading for its reported 1.1 million-plus registered users; no financial terms for that arrangement have been disclosed. For firms and platforms operating in or through Germany on the strength of a national toleration arrangement rather than a completed MiCAR authorisation, this is a direct signal that German supervisory practice treats its accelerated transition timeline as enforceable, including against large incumbents, and that application pendency alone does not guarantee continued market access once a national cut-off has passed. #### Other Developments **Germany's stablecoin landscape remains anchored by EURAU, unaffected by this cycle's enforcement action.** AllUnity GmbH continues to operate as the issuer of EURAU, described as Germany's first fully-reserved, MiCAR-aligned euro stablecoin, under its existing e-money institution licence; this standing fact sits apart from the futurum bank refusal and no change to EURAU's status occurred this cycle. **PSD3/PSR remains in a holding pattern at provisional political agreement.** Reached 27 November 2025, PSD3/PSR is expected to apply from mid-to-late 2027 through amendments to the ZAG for directive elements and directly for regulation elements (PSR). BaFin has signalled that new ZAG authorisation applications should already anticipate the direction of travel, including IBAN name-check requirements and stricter safeguarding standards, though no new legislative movement occurred this cycle. #### Cross-Monitor Connections The futurum bank refusal is a shared fact across the payments and financial-integrity lenses for Germany: the same BaFin decision that signals a market-access and platform-continuity event for payments-sector readers also signals an AML/CTF-adjacent licensing-enforcement data point for financial-integrity readers tracking how national MiCA transition deadlines are actually enforced against incumbents. The underlying decision and its date are identical; the distinction is in which downstream consequence, continuity of a retail payments-adjacent service versus the credibility of transition-period AML controls, matters to each readership. #### Outlook The principal item to track is whether futurum bank's prospective trading-counterparty and custodian agreements are finalised and disclosed with terms, which would confirm that Bitcoin.de's retail user base retains continuity of service despite the licence refusal. A failure to finalise those arrangements within a reasonable window would instead point to a more disruptive outcome for a platform of this scale. More broadly, this is a marker worth watching across other EU jurisdictions that have similarly accelerated their own national grandfathering cut-offs ahead of the 1 July 2026 EU-wide limit: a cluster of comparable refusals elsewhere would indicate this is a structural feature of the MiCA transition period rather than an isolated German outcome. _8 earlier updates not shown here._ ###### Standing brief · as of 27 June 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Lead Signal Germany's payments regulatory posture has shifted decisively toward enforcement across 2025-26, and this baseline cycle captures that turn across the full module spine. The single most consequential read of the operating environment is that BaFin has moved from rule-setting to active enforcement on multiple fronts simultaneously. DORA (Reg (EU) 2022/2554) has been directly applicable since 17 Jan 2025, supplemented domestically by the Finanzmarktdigitalisierungsgesetz (FinmadiG) amending KWG/KAGB/WpHG/ZAG; BaFin is Germany's national ICT incident reporting hub with a four-hour initial notification deadline via the BaFin-MVP portal, and over 600 serious ICT incidents have been registered since Jan 2025 (63% third-party-linked). The pivotal datapoint is that BaFin issued its first DORA enforcement notice in Q3 2025 — a EUR 450,000 fine for inadequate ICT third-party risk documentation. That first fine, taken together with the closed MiCAR grandfathering window and BaFin's record EUR 45m AML fine, signals a post-Wirecard tightening that raises compliance cost across both bank and non-bank PSPs. The enforcement turn is reinforced on the AML axis. Germany now hosts the EU Anti-Money-Laundering Authority (AMLA) in Frankfurt, operational from 1 July 2025, which directly oversees high-risk institutions and coordinates national supervisors — a development carried here as a Sentinel.gi-fed position rather than original WPM illicit-finance analysis. The convergence of AMLA's Frankfurt go-live, the first DORA fine, and the MiCAR grandfathering close concentrates regulatory intensity into the 2025-26 window, with the jurisdiction risk direction assessed as tightening. #### Other Developments On stablecoins, the standing position is that euro stablecoins are regulated as e-money tokens under MiCAR, with Germany having enacted the Kryptomaerkteaufsichtsgesetz (KMAG) to implement MiCAR domestically and arm BaFin with name-and-warn powers and authority to suspend or prohibit non-compliant offerings. Germany used a 12-month MiCAR grandfathering window that closed end-2025, against full 18-month windows in France, Malta and Luxembourg to July 2026; Ethena Labs ceased its German subsidiary and declined German MiCA authorisation after BaFin scrutiny. On 1 July 2025 BaFin granted AllUnity an EMI licence to issue EURAU, positioned as the first euro stablecoin in Germany fully MiCA-authorised. This W2 position is deliberately held at Assessed: an ownership-structure discrepancy was flagged in challenge and there is no Tier-1 BaFin register or press citation in the findings, so the joint-venture parties are not asserted here pending verification against the BaFin ZAG register. On instant payments, the EU Instant Payments Regulation (adopted 13 March 2024) requires euro PSPs to receive instant credit transfers from 9 Jan 2025 and to send from 9 Oct 2025; SCT Inst settles up to EUR 100,000 in around ten seconds. The outgoing send mandate makes instant euro transfers universal across euro PSPs and reshapes retail rail economics. High-value and wholesale settlement runs through the Eurosystem TARGET family operated by the Bundesbank, with the unified ECMS added in June 2025, and Germany running a structurally large positive TARGET balance of around EUR 1.06 trillion as of 31 Aug 2025. On consumer protection, German rules rest on PSD2 (via ZAG and BGB §§675c ff.): unauthorised payments are refundable within one bank working day and payer card liability is capped at EUR 50. Critically, APP/authorised-push-payment fraud has no general mandatory reimbursement regime; the PSR/PSD3 deal concluded 27 November 2025 introduces only a narrow reimbursement duty limited to PSP-impersonation (spoofing) fraud, leaving most investment and pig-butchering scams outside mandatory reimbursement. This leaves German PSPs with materially lighter APP-fraud liability than UK peers. Commercially, the W13 ledger shows acquiring consolidation and A2A repositioning. On 12 March 2026 Unzer Group acquired AllCash's point-of-sale operations in Plauen, adding 500+ terminals and around 2.5m annual transactions to expand in eastern Germany, with the deal value undisclosed. Mollie agreed to acquire London-based A2A specialist GoCardless for EUR 1.1bn in stock, valuing the combined group at EUR 4.1bn. Berlin BaaS provider Solaris raised a Series G of EUR 140m in February 2025. The Mollie-GoCardless and several other commercial signals rest substantially on Tier-4 sourcing and require primary-source verification. #### Cross-Monitor Connections Two surfaces route to the Financial Intelligence Monitor. The W11 AML/CFT surface — AMLA's Frankfurt go-live, persistent cash-economy and real-estate laundering exposure, and the payment-gateway choke point post-Wirecard — is Sentinel-fed; any original illicit-finance or sanctions-evasion assessment beyond the carried Sentinel position belongs to FIM. Separately, the EURAU euro stablecoin and the explored TIPS interlinking with India's UPI carry potential illicit-finance and sanctions-evasion significance that should be assessed by FIM rather than treated as a WPM conclusion. #### Outlook The near-term trajectory is one of accreting supervisory intensity. The ECB Governing Council moved the digital euro to its next phase on 29 October 2025, targeting a potential first issuance during 2029 (assuming Regulation adoption in 2026), with pilots potentially from mid-2027; in parallel, the bank-led Wero wallet expanded to online-shop payments from November 2025, and EPI's leadership has publicly framed the digital euro as risking crowding-out of private solutions like Wero. This parallel CBDC and bank-led wallet pair creates strategic uncertainty that German operators must navigate in A2A and wallet roadmaps. National BAIT/VAIT/KAIT/ZAIT circulars are expected to transition into DORA unified standards, some to 1 Jan 2027, and the PSR/PSD3 package is expected to enter force in 2026-H2. The standing read is a tightening jurisdiction in which the bank-PSP versus non-bank PI/EMI access split remains the analytical spine across licensing, safeguarding, settlement access and correspondent banking. trust tier: ai_unverified ###### Latest update · 18 October 2026 #### Regulatory Status Germany's payments-regulatory posture this cycle is defined by BaFin's refusal of futurum bank AG's MiCAR CASP authorisation, disclosed 6 October 2026, which ended the firm's prior toleration to operate the Bitcoin.de crypto-asset trading platform. This followed Germany's decision to end its own national MiCA grandfathering period on 31 December 2025, six months ahead of the EU-wide outer limit of 1 July 2026, and is the first concrete instance of that accelerated national cut-off producing a market-access consequence for a large incumbent retail platform. futurum bank is now pursuing continuity through a partner model involving a separately-licensed trading counterparty and a separately-licensed custodian, with no financial terms yet disclosed. Outside this episode, Germany's digital-money landscape remains anchored by EURAU, AllUnity GmbH's fully-reserved, MiCAR-aligned euro stablecoin, operating under an existing e-money institution licence and unaffected by this cycle's enforcement action. On the broader payments-licensing horizon, PSD3/PSR remains at the provisional-political-agreement stage reached 27 November 2025, expected to apply from mid-to-late 2027, with BaFin already signalling that new ZAG authorisation applicants should anticipate the incoming direction, including IBAN name-check and stricter safeguarding requirements. #### Outlook Watch for finalisation and disclosure of terms for futurum bank's trading-counterparty and custodian arrangements, which will determine whether Bitcoin.de's large registered user base retains service continuity. Watch also for whether BaFin publishes its own primary notice on the MiCAR refusal, which would strengthen the currently single-source evidentiary record for this decision. _3 earlier updates not shown here._ ###### Standing brief · as of 27 June 2026 _Written before the update above. Where they differ, the update is the more recent position._ #### Regulatory Status Germany's payments regulatory status across the 14-module spine is assessed as elevated and tightening. BaFin is the single authorising authority under the Zahlungsdiensteaufsichtsgesetz (ZAG), authorising PIs (§10) and EMIs (§11) and registering AISPs (§34), cooperating with the Bundesbank, with the bank-PSP versus non-bank PI/EMI split as the core market-access distinction (W1a). Conduct and safeguarding obligations under ZAG §§17-18 attach to non-bank institutions, with the EUR 50 card-liability cap and one-working-day refund duty live (W1b). On stablecoins, MiCAR applies via the KMAG; EURAU is the first MiCA-authorised German euro EMT (1 July 2025), and the 12-month grandfathering window closed end-2025 — a position held at Assessed pending Tier-1 BaFin register confirmation (W2). Operational resilience has turned to active enforcement: DORA applies since 17 Jan 2025 with a four-hour reporting deadline, over 600 incidents registered, and the first BaFin fine of EUR 450,000 landed in Q3 2025 (W3). girocard is overseen by the Bundesbank via the DK MoU under TA 7.2 / DC POS 3.0 with PCI DSS 4.0.1 mandatory (W4). The Instant Payments Regulation made instant euro transfers universal from October 2025 (W5), against a fragmented, cash-heavy market structure (W6). The Wirecard complex continues to drive litigation and a FISG-empowered BaFin, including a record EUR 45m AML fine at end-2025 (W7), while SME tap-pack acquiring consolidates (W8). The digital euro moved to its next phase on 29 October 2025 alongside the Wero wallet's online-shop rollout (W9). APP-fraud reimbursement remains narrow — the PSR/PSD3 deal of 27 November 2025 covers spoofing only (W10). AMLA is operational in Frankfurt from 1 July 2025, carried as a Sentinel-fed position (W11). Settlement runs through the Bundesbank-operated TARGET family with ECMS added June 2025 and an around EUR 1.06 trillion TARGET balance (W12), and discrete commercial events (Unzer-AllCash, Mollie-GoCardless, Solaris Series G) populate the commercial-intelligence ledger (W13). #### Outlook The regulatory direction is tightening. AMLA's Frankfurt go-live, the first DORA fine, and the closed MiCAR grandfathering window concentrate regulatory intensity into 2025-26, with primary intensity in W1a, W2, W3 and W11. Near-term horizon items include the digital euro's potential 2029 first issuance with pilots from mid-2027, the PSR/PSD3 entry into force expected in 2026-H2, and the transition of national BAIT/VAIT/KAIT/ZAIT circulars into DORA unified standards by 1 Jan 2027. The bank versus non-bank access asymmetry remains the analytical spine across licensing, safeguarding, settlement and correspondent banking. This status is carried at ai_unverified trust tier pending lawyer-diff. trust tier: ai_unverified _Standing brief, as of 8 July 2026._ #### Regulatory Status Germany's payments regulatory environment is in a period of structured tightening across multiple modules, driven primarily by the advancing PSD3 and Payment Services Regulation package at the EU supranational level and by the expiry of Germany's last domestic PFOF exemption at the national level. **W1a — Licensing, Authorisation & Market Access** The Council 'I' Item Note of 17 April 2026 circulated final compromise PSD3/PSR texts to COREPER for approval, following provisional political agreement in November 2025. PSD3 requires EMIs to seek reauthorisation as PIs, eliminating the separate EMD2 regime. The Zahlungsdiensteaufsichtsgesetz currently governs BaFin authorisation of both PIs and EMIs; BaFin has flagged that PSD3 expectations will be reflected in new authorisation files from 2026 onward. The EMI reauthorisation requirement is the most operationally significant licensing change for German non-bank payment institutions. **W1b — Conduct, Safeguarding & Financial Promotions** Germany was the only EU member state still exercising the PFOF grandfathering exemption under Article 39a(2) of MiFIR. That exemption expired on 30 June 2026; Germany is now subject to the EU-wide PFOF ban. The PSR introduces payee-name verification for all credit transfers and expanded APP-fraud reimbursement obligations for PSPs. BaFin issued a consumer warning on 7 April 2026 against the fraudulent 'FPM MIN' identity-fraud application circulating via WhatsApp. **W9 — Product Innovation & Market Development** April 2026 marked the transition of the EU Instant Payments Regulation from implementation tracking to compliance assessment for PSPs. The PSR extends Verification of Payee to all credit transfers, building on the euro instant-credit-transfer VoP regime under the Amended SEPA Regulation. **W12 — Correspondent Banking, Settlement & Access** PSD3 introduces an optional mechanism for payment institutions to safeguard client funds in a central-bank account, addressing the documented difficulty non-bank PIs face in maintaining accounts with credit institutions. ECB Decision ECB/2025/2 (27 January 2025) expressed institutional scepticism about whether central-bank safeguarding accounts could impact overall systemic safety. The tension between PSD3's access-improvement intent and the ECB's systemic-safety concern is unresolved. Central banks are not required to offer such accounts under PSD3. The bank versus non-bank access asymmetry in the German correspondent-banking context therefore remains structurally unresolved pending clarification of the Bundesbank's operational posture. **W13 — Commercial Intelligence** SBI Holdings acquired a majority stake exceeding 70 percent in Solaris via a EUR 140 million round, ending Solaris's independent-unicorn status. Trade Republic closed 2025 with a EUR 1.2 billion secondary transaction valuing the firm at EUR 12.5 billion. N26 appointed Mike Dargan as incoming CEO effective April 2026, with both co-founders stepping back; a public listing is assessed as likely years away. German fintech and insurtech investment reached approximately EUR 14.2 billion in 2026 despite approximately 24,000 broader-economy insolvencies. **Coverage Gaps** W8 (Merchant Acquiring, Onboarding and Chargebacks) was not resolved this cycle. W11 (AML/CFT, Sentinel feed) returned no DE-specific material this cycle. #### Outlook Germany's regulatory direction across the primary active modules is assessed as tightening. The PFOF deadline has passed; the immediate compliance question for affected firms is post-deadline posture. The PSD3/PSR transposition process will be the dominant regulatory-development vector for Germany across W1a, W1b, W9, and W12 over the coming cycles. The ECB-PSD3 safeguarding tension is the single most structurally uncertain element: until the Bundesbank clarifies its operational posture on central-bank safeguarding accounts, German non-bank PIs and EMIs face planning uncertainty on a core operating-model question. The commercial-intelligence picture suggests continued consolidation through strategic-investor buyouts rather than IPOs in the near term. 14 of 14 modules Signal Density Selections OR within a group, AND across groups. Press / to search. ### W1a Licensing, Authorisation & Market Access Confirmed confirmed 2026-06-23 Germany's payment-institution regime sits under ZAG with BaFin as supervisor; PSD3/PSR final texts (agreed 23 Apr 2026) and CRD VI's third-country-branch regime will reshape German market access once transposed/applicable; Consumer Credit Directive (EU) 2023/2225 must be transposed by 20 Nov 2025, applying from 20 Nov 2026. Horizon · 2026 (±year) BaFin begins applying PSD3 expectations to new PI/EMI authorisation files_in_force_pending · T4_ Standing sub-brief · as of 27 June 2026 185 words · last cycle 2026-10-12 #### Licensing, Authorisation & Market Access Germany authorises payment institutions (PIs) under ZAG §10 and e-money institutions (EMIs) under ZAG §11 within the Zahlungsdiensteaufsichtsgesetz, which transposes PSD2/EMD2; account information service providers (AISPs) register only under §34. BaFin is the single authorising authority, cooperating with the Bundesbank. The core market-access split runs between the bank-PSP (a KWG credit institution) and the non-bank PI/EMI — this distinction drives whether safeguarding or deposit-protection obligations attach, and is the analytical spine of the module. Capital tiers run EUR 20k-125k by service type, and EWR passporting is available to authorised institutions seeking German and wider EEA access. This standing position defines the market-entry routes and capital floors for any payments operator, and the bank versus non-bank split flows directly into the safeguarding obligations addressed in W1b. #### Outlook The licensing architecture is established and stable as standing knowledge. The live pressure on the regime comes less from authorisation mechanics than from the tightening supervisory posture downstream — enforcement intensity in resilience, AML and stablecoin oversight is reshaping the effective cost of holding a German licence rather than the route to obtaining one. Periodic update · new data 2026-10-12 #### Licensing, Authorisation & Market Access The PSD3/PSR transition remains in a holding pattern for German ZAG-licensed payment and e-money institutions. The Council of the EU published final PSD3/PSR compromise texts, ST-8221-2026-INIT and ST-8222-2026-INIT, on 23-24 April 2026, but as at this cycle those texts had not yet been published in the Official Journal of the EU, and consequently the Payment Services Regulation's 21-month applicability clock had not yet started. Because PSD3 is a directive requiring national transposition while the PSR is a regulation taking direct effect once its clock runs, German payment institutions and e-money institutions licensed under the Zahlungsdiensteaufsichtsgesetz currently continue to operate under the existing PSD2/EMD2-derived framework. Once Official Journal publication occurs and the PSR applicability clock begins, ZAG-licensed institutions in Germany will face a re-confirmation obligation under the merged PSD3/PSR regime, which consolidates payment-services conduct requirements into a directly applicable regulation alongside a revised licensing directive. No German-specific licensing action, such as an authorisation grant, variation, or withdrawal, was evidenced this cycle; the development is entirely at the level of the supranational instrument's own legislative timetable. #### Outlook The key date to watch is Official Journal publication of the PSD3/PSR compromise texts, which will start the 21-month applicability clock and set a concrete countdown to the point at which German ZAG-licensed institutions must re-confirm their authorisation under the new regime. Until that publication occurs, no transition timetable for individual German institutions can be fixed. **5 earlier distinct update(s)** Periodic update · new data 2026-09-28 #### Licensing, Authorisation & Market Access EU Parliament and Council negotiators reached political agreement on the PSD3/PSR package on 27 November 2025, with formal legislative texts expected in the third quarter of 2026. The two instruments follow different applicability tracks in Germany: the Payment Services Regulation (PSR) is directly applicable EU-wide and will take effect without German transposition once the formal text is published, while the Payment Services Directive (PSD3), which carries the authorisation and governance layer, requires national transposition estimated to take a further 18 to 24 months in Germany following formal adoption. This bifurcation matters for the bank-PSP versus non-bank payment-institution/e-money-institution distinction that structures Germany's licensing landscape: the PSR's directly-applicable rules on matters such as fraud prevention, open banking and API standardisation will land on a near-EU-wide timetable, while the licensing conditions, governance requirements and authorisation categories under PSD3 that determine how bank-affiliated versus non-bank payment institutions are treated will not bind in Germany until the national transposition process concludes. A distinct development within the PSD3 package is a new optional safeguarding mechanism permitting payment and e-money institutions to hold client funds in an account directly with a central bank, as an addition to existing safeguarding methods such as segregated accounts with commercial banks or insurance-backed guarantees. For non-bank payment institutions and e-money institutions in Germany, a central-bank safeguarding option — once its operative conditions are settled through transposition — could offer a fund-protection standard closer to what bank-affiliated PSPs already benefit from via direct central-bank access, narrowing one dimension of the structural distinction between the two categories of licensed entity. The practical availability and conditions of this option in Germany, however, remain dependent on the pending transposition process and cannot yet be assessed in operative detail. #### Outlook The formal publication of the PSD3/PSR texts, expected in Q3 2026, is the key trigger to watch: it will start the clock on Germany's 18-to-24-month transposition estimate and will fix the precise scope of the new central-bank safeguarding mechanism as it applies to German-authorised payment and e-money institutions. Market participants assessing licensing strategy in Germany should treat the current period as a pre-transposition planning window rather than one in which PSD3's authorisation architecture is yet operative. Periodic update · new data 2026-09-13 #### Licensing, Authorisation & Market Access Two distinct market-access threads define this module for Germany this cycle. First, CRD VI is characterised by market counsel as introducing a new third-country-branch authorisation requirement: third-country institutions providing core banking services in Germany will be required to establish an authorised branch or subsidiary, curtailing existing KWG cross-border exemptions that have previously allowed certain activity without local authorisation. This is assessed at elevated impact and applies at the supranational regulatory layer, oriented toward bank-PSP entities rather than nonbank payment or e-money institutions, and it represents a genuine new barrier rather than a restatement of existing practice. The distinction between bank-PSP and nonbank-PI/EMI treatment matters here: the CRD VI change targets institutions providing core banking services, and its market-access consequences fall most directly on banks and bank-like third-country entities rather than on payment institutions or e-money institutions operating under the ZAG framework. Second, and running in the opposite direction on compliance burden if not on formal market access, market commentary on the incoming PSD3/PSR package notes that Section 17 of the German ZAG already permits safeguarding of customer funds via an account with the Deutsche Bundesbank or another EU central bank. This means the central-bank-safeguarding-account mechanism that PSD3/PSR introduces as a new option across the EU is not a novel concept for German nonbank payment institutions and e-money institutions, which have had access to an equivalent mechanism under existing national law. The practical implication is that Germanys nonbank-PI/EMI safeguarding compliance lift from PSD3/PSR implementation is likely to be more limited than in member states lacking an equivalent existing provision, even as the wider EU payments rulebook consolidates around the same central-bank-account concept. #### Outlook Watch for the formal transposition timeline and effective date of the CRD VI third-country-branch requirement, expected around 2026-Q4, and for whether affected third-country institutions begin establishing authorised branches or subsidiaries ahead of that deadline rather than waiting for enforcement pressure. On the PSD3/PSR side, the practical question is whether German authorities issue any implementing guidance that formally aligns the existing ZAG Section 17 mechanism with the new EU-wide safeguarding framework, which would further reduce the compliance-lift gap for nonbank payment institutions. Periodic update · new data 2026-09-08 #### Licensing, Authorisation & Market Access Germany's payment and e-money institution licensing regime, administered by BaFin under the ZAG, is entering its most significant reform window in years. The European Union agreed final texts of the Third Payment Services Directive (PSD3) and the Payment Services Regulation (PSR) on 23 April 2026, replacing the existing PSD2/EMD2 framework, and these instruments will apply to German payment and e-money institutions operating under the ZAG once transposed. The reform separates directive-level conduct and authorisation provisions (PSD3) from directly applicable regulation (PSR), a structural change from the PSD2-only architecture. Distinct from the payment-institution track, Germany's third-country institutions offering core banking services face a CRD VI requirement to establish an authorised branch or subsidiary absent an exemption, with BaFin and the Bundesbank preparing guidance aligned with forthcoming EBA technical standards; this is a bank-side market-access control that sits alongside, rather than replaces, the non-bank payment-institution licensing track. A third instrument reshapes the adjacent consumer-credit perimeter: Germany must transpose the EU Consumer Credit Directive (EU) 2023/2225 by 20 November 2025, with application from 20 November 2026, extending consumer-credit scope to buy-now-pay-later and short-term digital lending products that have historically operated outside traditional credit licensing. For non-bank payment and e-money institutions, this widens the range of product lines that may trigger consumer-credit obligations alongside existing ZAG payment-licensing duties. All three developments rest on Tier-2 legal-commentary sourcing rather than a directly retrieved Tier-1 primary text this cycle. #### Outlook The near-term calendar is dominated by transposition mechanics rather than new instrument announcements. Watch for BaFin's domestic implementing measures for PSD3/PSR, for EBA technical standards operationalising the CRD VI third-country-branch regime, and for the Consumer Credit Directive's application date of 20 November 2026, which will bring BNPL and short-term digital lending under consumer-credit obligations. Firms should expect the bank-side (CRD VI) and non-bank (ZAG/PSD3) tracks to continue developing in parallel rather than converging into a single licensing gateway. Periodic update · new data 2026-08-11 #### Licensing, Authorisation & Market Access German bank payment-service providers became subject this cycle to two binding provisions of the Instant Payments Regulation, Regulation (EU) 2024/886: a cost-parity mandate requiring that instant transfers cost no more than a standard SEPA credit transfer, and the abolition of the prior EUR100,000 per-transaction cap on SEPA Instant Credit Transfers, effective from 9 October 2025. The cost-parity mandate directly removes a monetisation line German bank PSPs had used: surcharges of EUR0.50 to EUR1.50 per instant transfer, layered on top of standard transfer pricing, are no longer permitted. The cap abolition removes a size-based friction that had constrained SCT Inst's use for larger corporate and treasury payments, subject now only to each individual bank's own anti-fraud limits rather than a regulatory ceiling. Running in parallel, Verification of Payee became a mandatory anti-fraud control under the same Instant Payments Regulation framework and the 2025 SEPA Rulebook, adding payee-name matching to the instant-transfer flow at the same time that size and cost friction were removed. The sequencing is notable: the regulation removes friction on the payment side while simultaneously adding a new, mandatory verification control, a pairing that reflects the regulation's dual objective of adoption and fraud mitigation operating together rather than in tension. The market-access picture bifurcates by entity type. Bank PSPs faced the 9 October 2025 deadline for both the receive-mandate, which had applied from 9 January 2025, and the send-mandate obligations, and are now operating under the full binding regime described above. Electronic money institutions and payment institutions, by contrast, have a materially later compliance deadline of 9 April 2027 for their own send and receive instant-transfer obligations under the same regulation. This eighteen-month-plus gap between the bank-PSP and non-bank-PI/EMI compliance timelines is a structural feature of the Instant Payments Regulation's German rollout, not an incidental delay, and it means that for roughly the next two years, bank PSPs and non-bank PIs/EMIs in Germany operate under materially different instant-payments obligations even though both categories are licensed payment-services providers under the same broader framework. Confidence in the core cost-parity and cap-abolition findings is High, reflecting consistent reporting on provisions that are themselves unambiguous statutory text under Regulation (EU) 2024/886; the impact rating attached to these findings is HIGH, reflecting the direct compression of bank-PSP fee revenue and the removal of a longstanding transactional ceiling. The Verification of Payee finding carries an ELEVATED impact rating and Tier 2 sourcing, reflecting its status as a newly mandatory control rather than a discretionary fraud-prevention measure banks had previously been free to calibrate themselves. For a payment institution or e-money institution considering market entry into Germany, the immediate licensing and market-access picture is more favourable than it will be from April 2027: an entrant licensed as a non-bank PI or EMI today has a compliance runway of close to two years before its own send/receive instant-transfer obligations bind, even as it can already observe how bank PSPs are adapting to the fully binding regime. Sourcing for this cycle's findings rests on Tier 2 and Tier 3 secondary reporting, KPMG Germany, SMBC Group, adesso, and Bankdaten.de, rather than a located Tier 1 primary anchor from the European Central Bank, Bundesbank, or BaFin; the underlying legal provisions of Regulation (EU) 2024/886 are not themselves in dispute, but this monitor flags the absence of a Tier 1 anchor as a sourcing gap for this cycle rather than treating the finding as any less binding. #### Outlook The EMI/PI compliance deadline of 9 April 2027 is the next hard date in this module, and it will close the current bank-versus-non-bank timing asymmetry in instant-payments obligations. Whether German bank PSPs seek to recover the lost surcharge revenue through other fee structures, and whether non-bank PIs and EMIs begin early voluntary compliance ahead of the 2027 deadline to compete on instant-transfer availability, are the two clearest market-access signals to watch over the coming cycles. Periodic update · new data 2026-07-08 #### Licensing, Authorisation & Market Access The German licensing and market-access environment is in a period of structured transition driven by the advancing PSD3 and Payment Services Regulation legislative package at the EU level and the continuing operation of the Zahlungsdiensteaufsichtsgesetz at the national level. **PSD3/PSR Legislative Progression** On 17 April 2026, the Council of the EU issued a formal 'I' Item Note circulating the final compromise texts of PSD3 and the PSR to COREPER for approval. This followed provisional political agreement between the Council and the European Parliament reached in November 2025. The issuance of the 'I' Item Note is a procedural signal of imminent formal adoption: 'I' Items are placed on the Council agenda for approval without debate, indicating that the text is considered settled at the political level. Formal adoption by both institutions is the next step before the package enters the Official Journal and the transposition clock begins for member states. For Germany, the significance of this progression is immediate and operational. BaFin has flagged that PSD3 expectations will be reflected in new authorisation files from 2026 onward, meaning that firms currently in the authorisation pipeline — or planning to enter it — are already being assessed against a forward-looking standard that anticipates the PSD3 framework, even before formal transposition. **EMI Reauthorisation: The End of the EMD2 Regime** The most structurally significant licensing change embedded in PSD3 for the German non-bank payment sector is the elimination of the separate Electronic Money Directive 2 regime. Under PSD3, EMIs are reclassified as a sub-category of payment institutions, and existing EMIs are required to seek reauthorisation as PIs. This is not a grandfathering arrangement: it is a mandatory reauthorisation process that will require affected firms to demonstrate compliance with the PI authorisation standard, which carries different — and in several respects more demanding — requirements than the EMD2 track. For Germany, where EMIs are currently authorised under the ZAG's EMI provisions, this creates a defined transition task. The ZAG transposes both PSD2 and EMD2 and governs BaFin's authorisation of both PIs and EMIs. The reauthorisation requirement means that the ZAG's EMI track will effectively be wound down as a standalone licensing category once PSD3 is transposed into German law. Firms that have built their operating models around the EMI licence — including those using the EMI framework for e-money issuance in conjunction with payment account services — will need to assess whether their current authorisation scope maps cleanly onto the PI sub-category structure or whether material changes to their regulatory perimeter are required. The bank versus non-bank distinction is directly relevant here. Credit institutions authorised under the KWG are not affected by the EMI reauthorisation requirement; the structural change falls entirely on non-bank PIs and EMIs. This asymmetry reinforces the existing market-access differential between bank and non-bank payment service providers in Germany, at least during the transition period. **BaFin Authorisation Practice** BaFin's forward-signalling on PSD3 expectations in new authorisation files is assessed as a practical anticipatory measure rather than a formal regulatory instrument. The ZAG remains the operative licensing statute until PSD3 is transposed. However, the signal that BaFin is already calibrating its authorisation assessments to PSD3 expectations means that firms seeking new PI or EMI authorisations in Germany in 2026 are effectively operating in a dual-standard environment: formally assessed under ZAG, but with BaFin applying forward-looking PSD3 criteria in its substantive review. This creates planning complexity for applicants, particularly on substance requirements, governance standards, and the safeguarding architecture that PSD3 will mandate. #### Outlook The near-term outlook for W1a in Germany is one of accelerating transition. Formal PSD3/PSR adoption is expected to follow the COREPER approval process, after which the transposition period will begin. BaFin's anticipatory posture on authorisation files means the practical impact of PSD3 on German licensing is already being felt. The EMI reauthorisation requirement is the single most operationally significant change for the non-bank sector and will require affected firms to initiate transition planning well in advance of the transposition deadline. The coverage gap on DE-specific insolvency-law primary sources for PSD3 safeguarding ring-fencing provisions is noted; that gap is carried forward to the next cycle. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (5)** 1. T1 [https://www.bafin.de/EN/Aufsicht/ZahlungsdienstePSD2/ZahlungsdienstePSD2_node_en.html](https://www.bafin.de/EN/Aufsicht/ZahlungsdienstePSD2/ZahlungsdienstePSD2_node_en.html) retrieved 2026-06-23 2. T1 [https://www.bundesbank.de/en/tasks/banking-supervision/individual-aspects/payment-institutions-and-e-money-institutions-622962](https://www.bundesbank.de/en/tasks/banking-supervision/individual-aspects/payment-institutions-and-e-money-institutions-622962) retrieved 2026-06-23 3. T3 [https://crassula.io/guides/licenses/germany-bafin-zag/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]](https://crassula.io/guides/licenses/germany-bafin-zag/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]) 4. T1 [https://www.bafin.de/EN/PublikationenDaten/Datenbanken/ZahlungsinstituteRegister/register_zahlungsinstitute_node_en.html](https://www.bafin.de/EN/PublikationenDaten/Datenbanken/ZahlungsinstituteRegister/register_zahlungsinstitute_node_en.html) retrieved 2026-06-23 5. T3 [https://www.globallegalinsights.com/practice-areas/fintech-laws-and-regulations/germany/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]](https://www.globallegalinsights.com/practice-areas/fintech-laws-and-regulations/germany/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]) ### W1b Conduct, Safeguarding & Promotions Confirmed confirmed 2026-06-23 Safeguarding of customer/e-money funds is mandated by §§17–18 ZAG: funds must either be segregated in an insolvency-proof trust account or in liquid low-risk assets, or covered by insurance/guarantee from an insurer or credit institution. Conduct rules flow from PSD2 (transposed via ZAG and the German Civil Code, BGB §§675c ff.), including strong customer authentication for online payments, the surcharge ban, and lowered consumer liability (EUR 50) for lost/stolen cards. MaRisk for PSPs has been introduced via BaFin consultation. Supervising authority is BaFin jointly with the Bundesbank. Standing sub-brief · as of 27 June 2026 171 words · last cycle 2026-09-13 #### Conduct, Safeguarding & Financial Promotions ZAG §§17-18 require PIs and EMIs to safeguard customer and e-money funds either by insolvency-proof segregation in a trust account or low-risk liquid assets, or by insurance or guarantee from an insurer or credit institution; §27 requires proper business organisation. PSD2 conduct rules (via ZAG and BGB §§675c ff.) cap payer card liability at EUR 50, mandate one-working-day refund for unauthorised payments, and impose a surcharge ban. MaRisk for PSPs has been put to BaFin consultation. The safeguarding-mechanism choice and the EUR 50 liability cap directly shape e-money operating cost and consumer-redress exposure for non-bank PSPs — the bank versus non-bank distinction matters here because deposit-taking credit institutions sit outside the §§17-18 safeguarding regime. #### Outlook Safeguarding under the May 2026 rules is the live W1b item, and the MaRisk-for-PSPs consultation signals further conduct-side codification ahead. A noted gap is that financial-promotion enforcement specific to payments has no German analogue to a UK-style approver regime; conduct rests on UWG and BGB, leaving the promotion-enforcement angle comparatively under-developed. Periodic update · new data 2026-09-13 #### Conduct, Safeguarding & Financial Promotions BaFin took two confirmed conduct-enforcement actions this cycle against nonbank capital-raising platforms for PRIIPs disclosure failures. On 30 July 2026, BaFin imposed an administrative fine of EUR 15,000 on Effecta GmbH and a separate fine of EUR 9,000 on Companisto Trust Service XXXV UG, both for breach of Article 13(1) read together with Article 14 of the PRIIPs Regulation, arising from the same underlying failure category: missing key information documents in profit-participation certificate offerings. Both actions are Tier 1, routine conduct-enforcement matters, and both fall within the nonbank-PI/EMI-adjacent segment of the German market rather than touching bank-PSP conduct directly. The fine amounts are modest in absolute terms, but the pairing of two separate entities fined for the same category of disclosure failure in the same enforcement window suggests BaFin is running a systematic review of key-information-document compliance across profit-participation-certificate offerings rather than acting on an isolated complaint. This conduct-enforcement activity should be read as a distinct compliance surface from the market-access developments in W1a: PRIIPs disclosure obligations apply to the content and completeness of pre-contractual retail disclosure, not to licensing or cross-border authorisation, and the enforcement pattern here says nothing about the entities underlying authorisation status. Both fined entities are being held to existing, unchanged disclosure standards, not to a newly tightened rule; the signal is supervisory attention and enforcement cadence, not regulatory change. #### Outlook The question for the coming cycle is whether this pair of PRIIPs actions represents an isolated pair of cases or the leading edge of a broader BaFin review of key-information-document compliance across the nonbank capital-raising and profit-participation-certificate segment. A third or fourth similar action in the next cycle would confirm a systematic sweep rather than coincidental timing. **2 earlier distinct update(s)** Periodic update · new data 2026-09-08 #### Conduct, Safeguarding & Financial Promotions Germany's non-bank payment institutions safeguard client funds under ZAG section 17, which permits a segregated account at the Bundesbank or another EU central bank as a compliant safeguarding mechanism distinct from the commercial-bank segregation route available to bank-affiliated providers. PSD3 is expected to standardise and tighten EU-wide safeguarding requirements once transposed, narrowing the divergence between member states on acceptable safeguarding structures. However, the ECB has voiced scepticism about central-bank-held safeguarding accounts under the incoming framework, a tension that leaves open how Germany's existing Bundesbank-account option will sit alongside a harmonised PSD3 safeguarding standard. No German-specific conduct or promotions rule change was identified this cycle beyond this safeguarding question; the item remains a standing watch point pending PSD3 transposition detail. #### Outlook Safeguarding is the live conduct-side item to track as PSD3 transposition progresses. Firms relying on the ZAG section 17 central-bank-account route should watch for signals on whether that option survives harmonisation, particularly given the ECB's stated reservations about central-bank-held accounts under the incoming EU framework. Periodic update · new data 2026-07-08 #### Conduct, Safeguarding & Financial Promotions The German conduct environment this cycle is shaped by two distinct but reinforcing developments: an imminent hard deadline on payment-for-order-flow and a substantive expansion of PSP obligations under the incoming PSR framework. A third, dashboard-tier item — BaFin's consumer fraud warning — illustrates the active enforcement-vector environment in which these structural changes are landing. **PFOF Grandfathering Expiry: Germany's Compliance Cliff-Edge** Germany is the only EU member state that has continued to exercise the domestic PFOF grandfathering exemption under Article 39a(2) of MiFIR. The EU-wide ban on payment for order flow took effect in March 2024; every other member state is already operating under the prohibition. Germany's exemption — the last one standing across the EU — expires on 30 June 2026. At the time of this cycle's synthesis date of 7 July 2026, that deadline has passed. German brokers and investment firms that were dependent on PFOF revenue are now operating under the EU-wide ban without any domestic carve-out. The conduct implications are material. PFOF arrangements — under which brokers receive payments from trading venues or market makers in exchange for routing client orders — have been a significant revenue component for German retail-facing investment platforms. The removal of the exemption does not merely eliminate a revenue stream; it requires affected firms to restructure their order-routing arrangements, their best-execution frameworks, and their client-disclosure obligations. The compliance cliff-edge character of this transition — a hard expiry date rather than a phased wind-down — means that firms that delayed restructuring face immediate exposure. This is a non-bank-sector-dominant issue. The PFOF arrangements at issue are primarily operated by non-bank investment firms and broker-dealers rather than credit institutions, though the distinction between bank and non-bank actors in the German retail-investment platform space is not always clean, particularly for neobanks that offer both payment accounts and investment products. **PSR: Payee-Name Verification and APP-Fraud Reimbursement** The Payment Services Regulation introduces two conduct obligations of direct relevance to German PSPs. First, PSPs will be required to verify payee names against IBANs or unique identifiers for credit payments not already covered by the instant-payments rules. This extends verification-of-payee-style checks — already required for euro instant credit transfers under the Amended SEPA Regulation — to the broader credit-transfer universe. The practical effect is that the VoP infrastructure and operational processes that PSPs have built for instant payments will need to be extended to cover standard credit transfers as well. Second, the PSR introduces expanded APP-fraud reimbursement obligations. PSPs will bear expanded liability for authorised push-payment fraud losses, building on the payee-name verification obligation as a fraud-prevention mechanism. The reimbursement framework under PSR is designed to create stronger incentives for PSPs to invest in fraud-detection and prevention, since the cost of reimbursement falls on the PSP where the verification obligation was not met or where the fraud was not flagged. Both obligations apply to bank and non-bank PSPs. The bank versus non-bank distinction matters here primarily in terms of operational capacity: credit institutions typically have more developed fraud-detection infrastructure than smaller non-bank PIs and EMIs, meaning the compliance burden of the VoP extension and the reimbursement obligation may fall disproportionately on the non-bank sector in terms of implementation cost relative to scale. **BaFin Consumer Fraud Warning (Dashboard)** On 7 April 2026, BaFin issued a consumer warning against a fraudulent identity-fraud application circulating under the name 'FPM MIN' via WhatsApp groups. This is a dashboard-tier item — a discrete enforcement-vector signal rather than a rulemaking or supervisory-policy development. It is noted here because it illustrates the active fraud-vector environment in which PSD3's expanded APP-fraud reimbursement obligations will operate. The Telekommunikationsgesetz section 120 requires telecom providers to block or anonymise spoofed numbers used in such schemes, providing a parallel enforcement mechanism at the network layer. #### Outlook The PFOF deadline has passed; the immediate compliance question for affected German firms is now one of post-deadline posture rather than preparation. The PSR conduct obligations — VoP extension and APP-fraud reimbursement — will become operative upon PSD3/PSR transposition, with BaFin's anticipatory authorisation posture suggesting that the supervisory expectation is already moving ahead of the formal transposition date. The active fraud-vector environment reinforces the operational urgency of the APP-fraud reimbursement framework. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (4)** 1. T3 [https://www.deloittelegal.de/en/services/legal/perspectives/micar-e-geld-token-crypto.html [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]](https://www.deloittelegal.de/en/services/legal/perspectives/micar-e-geld-token-crypto.html [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]) 2. T1 [https://www.bundesbank.de/en/tasks/payment-systems/psd2/psd2-775954](https://www.bundesbank.de/en/tasks/payment-systems/psd2/psd2-775954) retrieved 2026-06-23 3. T3 [https://stripe.com/resources/more/payments-in-germany-an-in-depth-guide [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]](https://stripe.com/resources/more/payments-in-germany-an-in-depth-guide [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]) 4. T3 [https://crassula.io/guides/licenses/germany-bafin-zag/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]](https://crassula.io/guides/licenses/germany-bafin-zag/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]) ### W2 Stablecoins & Digital Money limited signal Probable confirmed 2026-06-23 Euro stablecoins regulated as EMTs under MiCAR; KMAG implements MiCAR domestically arming BaFin name-and-warn powers; EURAU (AllUnity) first MiCA-authorised German euro stablecoin (1 July 2025); grandfathering closed end-2025. Standing sub-brief · as of 27 June 2026 240 words · last cycle 2026-07-07 #### Stablecoins & Digital Money MiCAR (Reg (EU) 2023/1114) is directly applicable, and Germany enacted the Kryptomaerkteaufsichtsgesetz (KMAG) to implement MiCAR domestically and arm BaFin with name-and-warn powers and authority to suspend or prohibit non-compliant offerings. Germany used a 12-month MiCAR grandfathering window that closed end-2025, against full 18-month windows in France, Malta and Luxembourg to July 2026; Ethena Labs ceased its German subsidiary and declined German MiCA authorisation after BaFin scrutiny. On 1 July 2025 BaFin granted AllUnity an EMI licence to issue EURAU (token launched 29 July 2025), positioned as the first euro stablecoin in Germany fully MiCA-authorised and 1:1 euro-collateralised with proof-of-reserves disclosures. E-money tokens are regulated as e-money under EMD2/ZAG and as crypto-assets under MiCAR simultaneously; per §11(1) ZAG only CRR credit institutions or licensed EMIs may issue, a position that bears on both bank and non-bank issuers. This first MiCA-authorised euro EMT under a German EMI licence sets a replicable authorisation template for the EEA. #### Outlook The module is held at Assessed. An ownership-structure discrepancy was flagged in challenge — DWS/Flow Traders/Galaxy per CoinDesk and AllUnity versus a Deutsche Boerse variant per Bullish — and there is no Tier-1 BaFin register or press citation in the findings, so the joint-venture parties are deliberately not asserted pending verification against the BaFin ZAG register. The closed grandfathering window and BaFin's enforcement posture create earlier compliance deadlines for crypto and stablecoin operators in Germany than in slower-transitioning member states. no periodic updates on record for this sub-brief ** 1 earlier update recorded under a different module label** An early cycle filed this entry under this module code with a heading naming another subject. Kept for the record; not this module's latest position. Periodic update · new data 2026-07-08 #### Prudential Standards & Capital Requirements No material signal was identified for Germany under W2 (Prudential Standards and Capital Requirements) this cycle. The PSD3/PSR package carries prudential implications — including changes to own-funds requirements and safeguarding diversification obligations — but no Germany-specific prudential-standards development beyond what is captured under W1a and W12 was resolved this cycle. #### Outlook PSD3 transposition will carry prudential-standards implications for German PIs and EMIs. This module will be updated when DE-specific prudential-standards material is available. **Sources and findings (5)** 1. T3 [https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/germany/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]](https://www.globallegalinsights.com/practice-areas/blockchain-cryptocurrency-laws-and-regulations/germany/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]) 2. T3 [https://www.deloittelegal.de/en/services/legal/perspectives/micar-e-geld-token-crypto.html [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]](https://www.deloittelegal.de/en/services/legal/perspectives/micar-e-geld-token-crypto.html [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]) 3. T3 [https://www.cryptoninjas.net/news/germany-approves-eurau-first-mica-compliant-euro-stablecoin-gets-green-light-from-bafin/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]](https://www.cryptoninjas.net/news/germany-approves-eurau-first-mica-compliant-euro-stablecoin-gets-green-light-from-bafin/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]) 4. T3 [https://coincub.com/blog/how-european-banks-are-building-on-mica/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]](https://coincub.com/blog/how-european-banks-are-building-on-mica/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]) 5. T3 [https://www.cyfrin.io/blog/mica-regulation-explained-a-guide-to-eu-crypto-compliance [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]](https://www.cyfrin.io/blog/mica-regulation-explained-a-guide-to-eu-crypto-compliance [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]) ### W3 Operational Resilience & Critical Infrastructure limited signal Confirmed confirmed 2026-06-23 DORA directly applicable since 17 Jan 2025 + FinmadiG; BaFin national ICT hub, 4-hour deadline; first DORA fine EUR 450k Q3 2025; 600+ incidents registered. Kept on Dataprotection.gi, not restated here: data and cloud switching obligations on service providers, including notice periods and charges. [Open this jurisdiction's page on Dataprotection.gi →](https://dataprotection.gi/jurisdictions/germany/) Horizon · 2027-01 (±year) National BAIT/VAIT/KAIT/ZAIT circulars phase-out into DORA standards_in_force_pending · T3_ Standing sub-brief · as of 27 June 2026 165 words · last cycle 2026-07-07 #### Operational Resilience & Critical Infrastructure DORA (Reg (EU) 2022/2554) has been directly applicable since 17 Jan 2025, supplemented domestically by the Finanzmarktdigitalisierungsgesetz (FinmadiG) amending KWG/KAGB/WpHG/ZAG. BaFin is Germany's national ICT incident reporting hub with a four-hour initial notification deadline via the BaFin-MVP portal; over 600 serious ICT incidents have been registered since Jan 2025, 63% of them third-party-linked. BaFin issued its first DORA enforcement notice in Q3 2025 — a EUR 450,000 fine for inadequate ICT third-party risk documentation — and the 2026 information register window ran 9-30 March 2026. The four-hour reporting deadline and the now-landed first fine materially raise ICT-resilience compliance cost for German PSPs and their third-party providers, across both bank and non-bank institutions. #### Outlook Resilience is on an escalating trajectory. National BAIT/VAIT/KAIT/ZAIT circulars are expected to transition into DORA unified standards, some to 1 Jan 2027, consolidating the German ICT supervisory stack into the EU framework. With the first enforcement notice issued, the supervisory pattern is now established rather than prospective. no periodic updates on record for this sub-brief ** 1 earlier update recorded under a different module label** An early cycle filed this entry under this module code with a heading naming another subject. Kept for the record; not this module's latest position. Periodic update · new data 2026-07-08 #### Consumer Protection & Dispute Resolution No material signal was identified for Germany under W3 (Consumer Protection and Dispute Resolution) this cycle beyond the APP-fraud reimbursement obligations captured under W1b, which carry direct consumer-protection implications. The BaFin consumer fraud warning (7 April 2026) is noted as a dashboard-tier enforcement signal. #### Outlook The PSR's APP-fraud reimbursement framework will be the primary consumer-protection development to track for Germany upon transposition. This module will be updated when DE-specific consumer-protection or dispute-resolution material is available. **Sources and findings (4)** 1. T3 [https://www.dlapiper.com/en/insights/publications/2025/02/application-of-the-digital-operational-resilience-act---dora [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]](https://www.dlapiper.com/en/insights/publications/2025/02/application-of-the-digital-operational-resilience-act---dora [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]) 2. T3 [https://www.pinsentmasons.com/out-law/news/bafin-provides-guidance-reporting-security-incidents [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]](https://www.pinsentmasons.com/out-law/news/bafin-provides-guidance-reporting-security-incidents [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]) 3. T3 [https://www.advisori.de/en/blog/dora-information-register-2026-bafin-reporting-deadline-is-running-what-financial-companies-have [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]](https://www.advisori.de/en/blog/dora-information-register-2026-bafin-reporting-deadline-is-running-what-financial-companies-have [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]) 4. T3 [https://matproof.com/blog/dora-ict-incident-reporting-bafin-mvp [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]](https://matproof.com/blog/dora-ict-incident-reporting-bafin-mvp [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]) ### W4 Scheme & Network Compliance limited signal Confirmed confirmed 2026-06-23 Germany operates the domestic girocard debit scheme (umbrella brand of the German Banking Industry Committee / DK, formerly 'electronic cash'), independently overseen by the Bundesbank under an MoU with the DK; international schemes (Visa Europe, Mastercard Europe) are overseen by Eurosystem teams. The DK sets technical terminal standards via Technical Annex (TA 7.2) and the DC POS 3.0 approval procedure. EU Interchange Fee Regulation (Reg (EU) 2015/751, in force 9 Dec 2015) caps consumer interchange at 0.3% (credit) / 0.2% (debit); PSD2 bans surcharging on regulated cards. PCI DSS 4.0.1 is mandatory since 31 March 2025 for entities handling card data; girocard processors operate to PCI DSS Level 1. Standing sub-brief · as of 27 June 2026 158 words · last cycle 2026-07-07 #### Scheme & Network Compliance The Bundesbank independently oversees the domestic girocard debit scheme — the umbrella brand of the German Banking Industry Committee (DK) — via an MoU with the DK, while international schemes (Visa Europe, Mastercard Europe) are overseen by Eurosystem expert teams. The DK sets terminal standards via Technical Annex TA 7.2 and the DC POS 3.0 approval procedure. The EU IFR caps interchange at 0.3% credit and 0.2% debit; girocard runs around 0.2-0.3%, well below the roughly 1% international level. PCI DSS 4.0.1 has been mandatory since 31 March 2025, and girocard processors operate at PCI DSS Level 1. girocard's sub-1% interchange and the DK terminal-approval regime shape merchant acceptance economics and POS hardware compliance for both bank and non-bank participants in Germany. #### Outlook Scheme and network compliance is stable. The standing pressures are incremental terminal-standard revisions through TA 7.2 and DC POS 3.0 and the ongoing PCI DSS 4.0.1 baseline, rather than structural change. no periodic updates on record for this sub-brief ** 1 earlier update recorded under a different module label** An early cycle filed this entry under this module code with a heading naming another subject. Kept for the record; not this module's latest position. Periodic update · new data 2026-07-08 #### AML/CFT Licensing Conditions & Fit-and-Proper No material signal was identified for Germany under W4 (AML/CFT Licensing Conditions and Fit-and-Proper) this cycle. BaFin's PSD3-anticipatory posture on new authorisation files is noted as carrying implicit fit-and-proper and AML/CFT-condition implications, but no DE-specific W4 development was resolved. #### Outlook PSD3 transposition will carry AML/CFT licensing-condition implications. This module will be updated when DE-specific material is available. **Sources and findings (4)** 1. T1 [https://www.bundesbank.de/en/tasks/payment-systems/oversight/card-payments-626460](https://www.bundesbank.de/en/tasks/payment-systems/oversight/card-payments-626460) retrieved 2026-06-23 2. T3 [https://hyperswitch.io/blog/popular-payment-methods-in-germany](https://hyperswitch.io/blog/popular-payment-methods-in-germany) retrieved 2026-06-23 3. T3 [https://secupay.com/en/knowledge/point-of-sale/new-regulations-for-pos-terminals-ta-7-2-and-dc-pos-3-0](https://secupay.com/en/knowledge/point-of-sale/new-regulations-for-pos-terminals-ta-7-2-and-dc-pos-3-0) retrieved 2026-06-23 4. T2 girocard.eu — Annual figures 2025 press release ### W5 Payment Corridor Dynamics Confirmed confirmed 2026-06-23 Germany remains a lead market for the European Payments Initiative's Wero wallet; a Bundesbank board member has publicly floated integrating the digital euro into Wero, and a February 2026 EuroPA interoperability MoU links Wero to Bizum, Bancomat, SIBS-MB WAY and Vipps MobilePay. Standing sub-brief · as of 27 June 2026 182 words · last cycle 2026-10-04 #### Payment Corridor Dynamics The EU Instant Payments Regulation (adopted 13 March 2024, amending the SEPA Regulation, the cross-border payments regulation, the Settlement Finality Directive and PSD2) requires euro PSPs to receive instant credit transfers from 9 Jan 2025 and to send from 9 Oct 2025; SCT Inst settles up to EUR 100,000 in around ten seconds. High-value and wholesale settlement runs through TARGET (T2 RTGS, T2S, TIPS, plus ECMS since June 2025). Non-SEPA flows route via SWIFT correspondent banking on ISO 20022, and German consumers face among the higher average eurozone remittance costs. The Eurosystem is exploring TIPS interlinking with India's UPI and the Swiss instant system. The outgoing instant-transfer mandate from October 2025 forces all euro PSPs to offer SCT Inst, reshaping retail rail economics and enabling A2A wallet build-out. #### Outlook The SEPA corridor is opening, with instant euro transfers now universal. The DE-Asia non-SEPA corridor remains thin in the evidence base — only directional SWIFT routing and cost statements are captured, with corridor-level pricing and volume granularity absent — though the explored TIPS-UPI interlinking could open that corridor over time. Periodic update · new data 2026-10-04 #### Payment Corridor Dynamics Germany remains a lead market for the European Payments Initiative's Wero wallet, and two developments this cycle extend its corridor significance beyond the domestic German market alone. First, at the Bundesbank's August 2026 payments symposium, board member Lutz Lienenkamper floated integrating a future digital euro into Wero rather than launching it as a parallel, standalone rail, arguing that Europe's newer payment offerings should be integrated with one another. This is a proposal from a senior Eurosystem figure, not a decision or a commitment, and the ECB's digital-euro pilot itself is not scheduled until September 2027, with issuance not expected before 2029. Its relevance to corridor dynamics is anticipatory: if a digital euro were eventually distributed through existing wallet infrastructure rather than a new standalone system, Wero's current position as Germany's leading instant-payment wallet would make it a natural candidate integration point, which would meaningfully expand the wallet's role beyond commercial payments into monetary-policy-adjacent infrastructure. Second, and more concretely, the European Payments Alliance (EuroPA) interoperability memorandum of understanding, signed in February 2026, technically links Wero to Bizum in Spain, Bancomat in Italy, SIBS-MB WAY in Portugal, and Vipps MobilePay across the Nordics. This agreement establishes the technical and commercial groundwork for cross-wallet interoperability among several of Europe's largest national instant-payment systems. For the German corridor specifically, this means the addressable reach of a Wero-based payment is no longer confined to Germany and other EPI member markets in the narrow sense, but potentially extends into some of the largest existing national wallet user bases in the EU, without requiring those users to adopt Wero directly. Rollout timelines for actual cross-wallet payment functionality following from the MoU were not established this cycle, so the practical corridor effect remains prospective rather than live. Taken together, these two developments describe a corridor that is actively being built outward in two directions simultaneously: upward toward potential integration with central-bank digital currency infrastructure, and outward toward interoperability with peer national wallet systems. Neither direction has yet produced a live, measurable change in cross-border payment volumes or corridor pricing, but both represent structural groundwork that, if realised, would materially change how euro-area instant payments move across borders. The absence of any near-term implementation date for either track is itself informative: Germany's corridor position is strengthening through architecture and positioning rather than through immediate transactional volume shifts. The practical constraint on any digital-euro integration path is temporal rather than architectural: the ECB has not yet begun its pilot, and the floated integration with Wero was raised as a suggestion by a Bundesbank board member rather than adopted as ECB or Eurosystem policy. Market participants should therefore treat the digital-euro dimension of Germany's payment-corridor story as a multi-year horizon item, while treating the EuroPA interoperability agreement as the more near-term-relevant development for assessing how German payment flows might extend across borders. #### Outlook The EuroPA interoperability agreement is the corridor development most likely to produce an observable change within the next several cycles, as technical implementation work between EPI and its EuroPA partners proceeds; any rollout milestone naming specific wallets or go-live dates would mark a meaningful shift from technical groundwork to live cross-border functionality. The digital-euro integration question is unlikely to resolve on a comparable timeline, remaining tied to the ECB's own pilot schedule through at least September 2027 and an issuance decision not expected before 2029. Firms with cross-border payment exposure to Germany should monitor the EuroPA implementation track as the nearer-term planning signal, while treating Bundesbank commentary on digital-euro distribution architecture as an indicator of institutional thinking rather than a scheduled change. **4 earlier distinct update(s)** Periodic update · new data 2026-09-28 #### Payment Corridor Dynamics April 2026 marked the first mandatory reporting cycle for German payment service providers under the Instant Payments Regulation, covering service availability, adoption rates and compliance. This reporting obligation follows German banks' October 2025 requirement to be capable of sending instant payments, and its arrival marks a shift in the German instant-payments corridor from an implementation phase, focused on building the technical and operational capability to send instant payments, to an assessment phase, in which regulators now hold a formal channel for monitoring how completely the sending mandate has translated into actual service availability and usage across the obligated population of German banks and payment institutions. Separately, N26, a German neobank, signed an agreement with the European Payments Initiative to integrate the Wero pan-European payment wallet, with availability targeted in Germany, France and the Netherlands in the second half of 2026. This is a single-institution commercial integration rather than a corridor-wide regulatory development, and the underlying evidence for it rests on a single lower-tier source; it should be read as an early signal of Wero's distribution footprint in the German market rather than as confirmation of a completed rollout. #### Outlook The next material marker for the German instant-payments corridor will be the substantive content of the April 2026 PSP reporting cycle once its results become visible, which should indicate whether German banks and payment institutions have moved from mere sending capability to material adoption and usage levels. On the wallet-integration side, confirmation of N26's Wero rollout reaching the targeted second-half-2026 availability window in Germany would corroborate the product-integration signal recorded this cycle from a currently thin evidentiary base. Periodic update · new data 2026-09-08 #### Payment Corridor Dynamics The EU Instant Payments Regulation mandates a ten-second processing response and EU-wide verification-of-payee name-matching checks, applicable in Germany. April 2026 reporting under that regime marks a transition for German payment service providers from implementation to assessment, a shift that coincides with the phase-out of the legacy DTAZV instant-payment arrangement in November 2026 as SEPA Instant Payments becomes the standing mechanism. #### Outlook Watch the DTAZV phase-out through the fourth quarter of 2026 as the definitive marker that SEPA Instant Payments has moved from build-out to business-as-usual assessment for German PSPs. Periodic update · new data 2026-08-11 #### Payment Corridor Dynamics Wero, the European Payments Initiative's pan-European digital wallet, added e-commerce acceptance among German retailers from late November 2025, reaching German merchants ahead of the equivalent French and Belgian e-commerce rollout, which followed in January 2026. This sequencing places Germany among Wero's lead markets for the e-commerce acceptance expansion, following its earlier peer-to-peer domestic rollout. The scheme's growth trajectory this cycle is substantial in scale, if held at Assessed rather than High confidence given single-source Tier 3 sourcing. Wero reported approximately 43.5 million registered users bloc-wide and more than EUR7.5 billion processed in its first year of operation. Within Germany specifically, registered users rose from roughly 1.3 million to 1.8 million across 2025 and 2026, a growth pattern consistent with, though smaller in absolute scale than, the bloc-wide trend. Wero's positioning in the German payment-corridor landscape is increasingly as a domestic account-to-account alternative to international card schemes, for both peer-to-peer transfers and, since November 2025, e-commerce transactions. Its growth this cycle sits alongside, and is reinforced by, a broadening commercial membership network in Germany, addressed separately in this cycle's commercial-intelligence coverage, and alongside the removal of instant-transfer cost and size friction under the Instant Payments Regulation described in this cycle's licensing and market-access coverage. The corridor dynamic this cycle is therefore one in which account-to-account rails, whether bank-operated instant transfers or the Wero overlay wallet, are gaining relative usability and reach against card-scheme alternatives in Germany, independent of any single actor's individual strategy. The German e-commerce launch preceding the French and Belgian equivalents by roughly two months is itself a minor but notable corridor-sequencing signal: it suggests Wero's German market build-out, which already includes an earlier peer-to-peer base, is being prioritised within EPI's broader rollout sequencing, potentially reflecting Germany's status as EPI's largest single national market by population and existing bank-shareholder representation. Sourcing for the growth figures rests on Banking.Vision and European Business Magazine, both Tier 3 secondary sources; no Tier 1 or Tier 2 primary EPI or Bundesbank publication of Wero's German user or transaction-volume figures was located this cycle, and the bloc-wide EUR7.5 billion processed figure in particular should be read as a single-source claim pending independent corroboration. The corridor dynamic here should also be read against the instant-payments cost and cap changes addressed under this cycle's licensing and market-access coverage: as bank-rail instant transfers become cheaper and lose their transaction-size ceiling, Wero's own value proposition as an overlay wallet on top of those same instant-transfer rails becomes, if anything, more attractive rather than less, since Wero's underlying settlement continues to depend on the same SEPA Instant infrastructure whose friction is falling. #### Outlook A targeted rollout of Wero point-of-sale acceptance beyond e-commerce is anticipated in Germany during 2026 and 2027, following the November 2025 e-commerce launch; this would be the clearest next signal of whether Wero extends into physical retail at the scale it has achieved in e-commerce and peer-to-peer use. Continued growth in German registered users, and whether the pace from 1.3 million to 1.8 million across the past reporting period continues, sustains, or accelerates, is the corridor-level metric most directly indicative of Wero's competitive trajectory against card-scheme incumbents in Germany. Periodic update · new data 2026-07-08 #### Payment Rails, Settlement Infrastructure & Access No Germany-specific mobile-money-equivalent rail delta was identified this cycle. The SEPA Instant compliance-assessment transition captured under W9 is the primary rail-adjacent development; it is carried there rather than duplicated here. #### Outlook The SEPA Instant compliance-assessment phase and the PSR's VoP extension are the primary rail-infrastructure developments to track for Germany. This module will be updated when DE-specific rail or settlement-infrastructure material is available. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (5)** 1. T1 [https://www.ecb.europa.eu/paym/retail/instant_payments/html/instant_payments_regulation.en.html](https://www.ecb.europa.eu/paym/retail/instant_payments/html/instant_payments_regulation.en.html) retrieved 2026-06-23 2. T3 [https://en.wikipedia.org/wiki/Single_Euro_Payments_Area](https://en.wikipedia.org/wiki/Single_Euro_Payments_Area) retrieved 2026-06-23 3. T1 [https://www.bundesbank.de/en/tasks/payment-systems/t2/target-balances-920752](https://www.bundesbank.de/en/tasks/payment-systems/t2/target-balances-920752) retrieved 2026-06-23 4. T3 [https://flow.db.com/Topics/cash-management/what-corporate-treasurers-should-know-about-cross-border-instant-payments](https://flow.db.com/Topics/cash-management/what-corporate-treasurers-should-know-about-cross-border-instant-payments) retrieved 2026-06-23 5. T1 Deutsche Bundesbank Rundschreiben 44/2024; EU Instant Payments Regulation (recv 9 Jan 2025, send 9 Oct 2025) ### W6 Industry Structure & Commercial Probable confirmed 2026-06-23 Germany is one of Europe's most fragmented retail banking markets, structured into commercial banks (Deutsche Bank/Postbank, Commerzbank, UniCredit HVB), savings banks (Sparkassen, DekaBank, Landesbanken) and cooperative banks. Payments are cash- and bank-transfer-heavy: cash still ~51% of POS purchases (2023), girocard the dominant domestic debit scheme (~100m cards), PayPal leading online wallets, and invoice/Rechnungskauf and BNPL (Klarna, Ratepay) culturally entrenched. The non-bank PSP layer includes 90+ PIs / 10+ EMIs plus BaaS players (Solaris), neobanks (N26) and acquirers (Unzer). Post-Wirecard, BaFin oversight tightened sharply. Standing sub-brief · as of 27 June 2026 142 words · last cycle 2026-10-12 #### Industry Structure & Commercial Dynamics Germany is one of Europe's most fragmented retail banking markets, spanning commercial banks, around 349 savings banks (Sparkassen) and Landesbanken, and cooperative banks. Payments are cash- and bank-transfer-heavy: cash accounted for around 51% of POS purchases in 2023, girocard is the dominant domestic debit scheme, PayPal leads online at around 46% preference, and invoice (Rechnungskauf) and BNPL (Klarna, Ratepay) methods are entrenched. The non-bank PSP layer includes 90+ PIs and 10+ EMIs plus BaaS (Solaris), neobanks (N26) and acquirers (Unzer). Post-Wirecard, BaFin oversight tightened sharply. This cash-heavy, fragmented structure plus entrenched invoice and BNPL methods shapes product-market fit for any payments entrant. #### Outlook The structural profile is stable as standing market analysis. Note that specific announced deals and funding rounds are carried as discrete events in W13; this module holds the structural read rather than individual transactions. Periodic update · new data 2026-10-12 #### Industry Structure & Commercial Dynamics UniCredit S.p.A. has formally applied for European Commission antitrust clearance of its proposed acquisition of Commerzbank AG, a filing announced 12 October 2026. UniCredit already holds an economic interest representing approximately 47.6 percent of Commerzbank's share capital, and the Commission's merger-control review will assess the transaction's effect on market power in corporate lending, including financing to the German Mittelstand, in deposit-taking, and in other banking products. The amount and currency terms of the underlying transaction have not been publicly disclosed. The filing moves a long-watched question about German banking-sector concentration from informal market speculation into a formal regulatory review track. Given UniCredit's already substantial economic interest in Commerzbank, the Commission's review is likely to focus less on whether the acquirer gains influence and more on the competitive effect of full consolidation on corporate-lending and deposit markets in which both institutions are active participants, with particular relevance to the German Mittelstand financing segment that both banks serve. #### Outlook The central development to watch is the progress and eventual outcome of the European Commission's merger-control review, including whether the Commission's market-power assessment in corporate lending and deposits results in any remedies or conditions attached to clearance. The pace of this review will be a significant indicator for German banking-sector structure through the remainder of 2026 and into 2027. **1 earlier distinct update(s)** Periodic update · new data 2026-07-08 #### Market Structure & Competition No material signal was identified for Germany under W6 (Market Structure and Competition) this cycle as a standalone structural-analysis item. The SBI-Solaris acquisition and the broader German fintech consolidation pattern are commercial-intelligence events carried under W13. Structural M&A trend analysis for the German BaaS and fintech sector will be developed as the consolidation pattern accretes across cycles. #### Outlook The German fintech consolidation pattern — strategic-investor buyouts rather than IPOs — is a structural market-structure development to track. This module will be updated when DE-specific competition or market-structure regulatory material is available. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (4)** 1. T3 [https://www.paymentyearbooks.com/yearbook/germany-2026/](https://www.paymentyearbooks.com/yearbook/germany-2026/) retrieved 2026-06-23 2. T3 [https://stripe.com/resources/more/payments-in-germany-an-in-depth-guide](https://stripe.com/resources/more/payments-in-germany-an-in-depth-guide) retrieved 2026-06-23 3. T3 [https://www.globallegalinsights.com/practice-areas/fintech-laws-and-regulations/germany/](https://www.globallegalinsights.com/practice-areas/fintech-laws-and-regulations/germany/) retrieved 2026-06-23 4. T2 KPMG Pulse of Fintech H2/2025 (Germany) ### W7 Legal & Litigation limited signal Confirmed confirmed 2026-06-23 The defining payments-litigation complex remains Wirecard: the 2020 insolvency (EUR 1.9bn missing) drove the Financial Market Integrity Strengthening Act (FISG, 2021) expanding BaFin powers; the Munich Regional Court found former board members liable for EUR 140m in 2024/2025 and criminal proceedings continue. Phishing/unauthorised-payment case law under BGB §§675u–675w (PSD2) is active, with the BGH (5 Mar 2024, XI ZR 107/22) placing the burden of proving authorisation/SCA on the bank. Enforcement intensified in 2025: BaFin levied a record EUR 45m AML fine and a EUR 25m greenwashing fine; 'Operation Chargeback' (Nov 2025) dismantled a EUR 300m card-fraud network routed partly through German gateways. Standing sub-brief · as of 27 June 2026 160 words · last cycle 2026-07-07 #### Legal & Litigation The defining German payments-litigation complex is Wirecard: the 2020 insolvency (EUR 1.9bn missing) drove the FISG (2021) expanding BaFin powers. The Munich Regional Court (5 Sept 2024, 5 HK O 17452/21) found three former board members liable for EUR 140m for negligent fiduciary breach, with criminal proceedings continuing. The BGH (5 March 2024, XI ZR 107/22) placed the burden of proving authorisation and SCA on the bank under BGB §§675u-675w. At end-2025 BaFin levied a record EUR 45m AML fine and a EUR 25m greenwashing fine, and 'Operation Chargeback' (Nov 2025) dismantled a EUR 300m card-fraud network across 193 countries. The BGH SCA burden-of-proof ruling and the FISG-empowered BaFin shape PSP liability exposure and supervisory risk for both bank and non-bank operators. #### Outlook The litigation environment is stable but consequential, anchored by the durable BGH SCA burden allocation. Operation Chargeback rests on a single lower-tier source and is carried as illustrative rather than as a load-bearing finding. no periodic updates on record for this sub-brief ** 1 earlier update recorded under a different module label** An early cycle filed this entry under this module code with a heading naming another subject. Kept for the record; not this module's latest position. Periodic update · new data 2026-07-08 #### Cross-Border Payments & Remittances No material signal was identified for Germany under W7 (Cross-Border Payments and Remittances) this cycle. No corridor-tracker entries were generated for DE this cycle. #### Outlook This module will be updated when DE-specific cross-border payments or remittances regulatory material is available. **Sources and findings (4)** 1. T3 [https://globallitigationnews.bakermckenzie.com/2025/01/03/germany-wirecard-board-members-liable-for-eur-140-million/](https://globallitigationnews.bakermckenzie.com/2025/01/03/germany-wirecard-board-members-liable-for-eur-140-million/) retrieved 2026-06-23 2. T3 [https://efri.io/phishing-in-germany-what-upper-courts-say/](https://efri.io/phishing-in-germany-what-upper-courts-say/) retrieved 2026-06-23 3. T3 [https://www.lexology.com/library/detail.aspx?g=15decca4-8204-44c2-ab0a-045f8ba514a4](https://www.lexology.com/library/detail.aspx?g=15decca4-8204-44c2-ab0a-045f8ba514a4) retrieved 2026-06-23 4. T4 [https://www.contextualsolutions.de/blog/operation-chargeback-wirecard-bafin-fintech-fraud [CAVEAT: Tier 4 commercial/blog source — Assessed; illustrative only]](https://www.contextualsolutions.de/blog/operation-chargeback-wirecard-bafin-fintech-fraud [CAVEAT: Tier 4 commercial/blog source — Assessed; illustrative only]) ### W8 Merchant Acquiring & Risk limited signal Probable confirmed 2026-06-23 Acquiring in Germany operates under the EU IFR (interchange caps) and PSD2/ZAG, with girocard acceptance handled via the DK/DC POS approval regime and international-scheme acquiring (Visa/Mastercard) processed by acquirers offering sub-1% effective rates post-IFR. Chargeback/dispute mechanics follow scheme rulebooks plus PSD2 refund rights. The market shows active consolidation among SME-focused 'tap-pack' acquirers (SumUp, myPOS, Teya, Unzer); high-risk-merchant practices were a central failure in the Wirecard third-party-acquirer model. PCI DSS 4.0.1 governs cardholder data handling for acquirers and processors. Standing sub-brief · as of 27 June 2026 127 words · last cycle 2026-07-07 #### Merchant Acquiring & Risk Acquiring in Germany operates under the EU IFR interchange caps and PSD2/ZAG, with girocard routed through the DK/DC POS regime and international-scheme acquiring at sub-1% effective rates post-IFR. SME 'tap-pack' acquirers (SumUp, Viva.com, myPOS, Square, Dojo, Flatpay) are taking share; myPOS bought Germany's Lavego (70,000 terminals, girocard acceptance) and Unzer is launching POS acceptance via Quickpay/Clearhaus. High-risk-merchant practices were central to the Wirecard third-party-acquirer failure, and PCI DSS 4.0.1 governs cardholder data handling. SME tap-pack consolidation is compressing acquiring margins and reshaping POS distribution, a dynamic concentrated in the non-bank PI/EMI layer. #### Outlook The acquiring market is escalating toward further consolidation. Specific deals — including Unzer's AllCash acquisition — are carried as discrete events in W13, while the structural margin-compression trend sits here. Periodic update · new data 2026-07-08 #### Merchant Acquiring, Onboarding & Chargebacks The German merchant-acquiring, onboarding, and chargeback vector was not resolved this cycle. This is an explicitly noted coverage gap. The absence of signal on W8 means this cycle is under-specified on a payments-operating-model area that can carry material risk and compliance posture implications for acquiring banks and non-bank payment institutions operating in the German market. #### Outlook This module will be prioritised for resolution in the next cycle. The gap is carried forward. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (4)** 1. T3 [https://refubium.fu-berlin.de/bitstream/handle/fub188/22957/M%20Yang%20-%20Card%20Payments%20in%20German%20Law%20-%20Refubium.pdf](https://refubium.fu-berlin.de/bitstream/handle/fub188/22957/M%20Yang%20-%20Card%20Payments%20in%20German%20Law%20-%20Refubium.pdf) 2. T3 [https://en.wikipedia.org/wiki/Wirecard_scandal](https://en.wikipedia.org/wiki/Wirecard_scandal) retrieved 2026-06-23 3. T4 [https://businessofpayments.com/ [CAVEAT: Tier 4 commercial/blog source — Assessed; illustrative only]](https://businessofpayments.com/ [CAVEAT: Tier 4 commercial/blog source — Assessed; illustrative only]) 4. T3 [https://hyperswitch.io/blog/popular-payment-methods-in-germany](https://hyperswitch.io/blog/popular-payment-methods-in-germany) retrieved 2026-06-23 ### W9 Product Innovation & Market Development Confirmed confirmed 2026-06-23 Two parallel innovation tracks dominate: (1) the bank-led Wero wallet (European Payments Initiative), live for P2P since 2024 and rolling into e-commerce from late 2025, with German issuers (Sparkassen, Postbank, Deutsche Bank, ING Germany, Commerzbank, Revolut) and acquirers joining; and (2) the ECB digital euro, which exited its preparation phase on 29 Oct 2025 and entered the next phase, targeting a possible first issuance in 2029 with pilots potentially from mid-2027. ECB selected five providers (incl. Giesecke+Devrient, equensWorldline) for core-component pilots in Oct 2025. Open banking is PSD2-mandated and moving toward PSD3/PSR. Tension exists between Wero/EPI and the digital euro over crowding-out. Horizon · 2029 (±multi_year) ECB digital euro potential first issuance_in_force_pending · T1_ Standing sub-brief · as of 27 June 2026 152 words · last cycle 2026-10-12 #### Product Innovation & Market Development On 29 October 2025 the ECB Governing Council moved the digital euro to its next phase, targeting a potential first issuance during 2029 (assuming Regulation adoption in 2026), with a pilot exercise and initial transactions potentially from mid-2027; five providers, including Giesecke+Devrient and equensWorldline, were selected in October 2025 to pilot core components (estimated EUR 1.3bn to issuance). In parallel, the bank-led Wero wallet (EPI, live for P2P since July 2024) expanded to online-shop payments from November 2025. EPI CEO Martina Weimert criticised the digital euro as risking crowding-out of private solutions like Wero. These parallel CBDC and bank-led wallet tracks create strategic crowding-out tension for German operators planning A2A and wallet roadmaps. #### Outlook Product development is escalating along two competing rails. The strategic uncertainty for operators turns on how the public digital euro and the private Wero proposition coexist as both mature toward broader retail use. Periodic update · new data 2026-10-12 #### Product Innovation & Market Development Wero, the instant-payments scheme operated by the European Payments Initiative, continues to expand its German footprint. Its e-commerce checkout product has been live in Germany since 17 November 2025, and Commerzbank's own integration of Wero was announced for February 2026. This cycle, Wero joined Nexo, a move that lets banks, payment providers and terminal manufacturers support Wero through a common integration approach, expanding the scheme's merchant-acceptance infrastructure beyond its initial e-commerce-only footprint toward broader point-of-sale acceptance. Germany's position as the first market with a live Wero e-commerce product, combined with Commerzbank's bank-level integration and the new Nexo merchant-acceptance partnership, reinforces Germany's role as the lead market for EPI's instant-payments rollout. The Nexo partnership is significant because it addresses a structural gap in instant-payment schemes generally: acceptance infrastructure at physical point-of-sale terminals has typically lagged e-commerce acceptance, and a common integration approach across terminal manufacturers lowers the barrier for merchants to add Wero acceptance without bespoke integration work for each terminal vendor. #### Outlook The development to watch is the pace at which Wero's Nexo-enabled merchant-acceptance infrastructure translates into actual point-of-sale acceptance by German merchants, which would mark the scheme's transition from an e-commerce-first product to a full omnichannel instant-payments instrument in its lead market. **3 earlier distinct update(s)** Periodic update · new data 2026-10-04 #### Product Innovation & Market Development ACI Worldwide's integration of the Wero wallet onto its Payments Orchestration Platform is the principal product-development signal for Germany this cycle. By joining the European Payments Initiative as a technical service provider, ACI Worldwide has positioned its orchestration platform to support Wero acceptance for merchants and payment intermediaries across Europe, with Germany named specifically as part of the covered footprint. Orchestration-platform integrations of this kind function as acceptance-infrastructure multipliers: rather than each merchant or payment service provider needing to build a bespoke integration to accept Wero payments, platform-level support allows any merchant already using that orchestration layer to add Wero acceptance with comparatively little incremental technical work. This matters for Wero's trajectory specifically because the wallet's usefulness as a payment product scales with acceptance breadth. A wallet with strong consumer adoption but limited merchant acceptance has a narrower set of practical use cases than one that is both widely held and widely accepted; orchestration-platform support addresses the acceptance side of that equation directly. The development should be read as evidence that commercial payment infrastructure providers are treating Wero as a rail worth investing integration effort in, rather than as a product whose future acceptance remains uncertain enough to defer that investment. The development sits within a broader pattern of commercial and technical build-out around Wero in the German market this cycle, running alongside the EuroPA interoperability agreement tracked under payment corridor dynamics. Where the EuroPA agreement extends Wero's reach toward other national wallet user bases, the ACI Worldwide integration extends Wero's reach toward merchant and intermediary acceptance within existing markets including Germany. The two developments are complementary rather than overlapping: one addresses who can be paid via Wero across borders, the other addresses who can accept a Wero payment at the point of sale or online. No pricing, volume, or adoption-rate data accompanying the ACI Worldwide integration was available this cycle, so the practical commercial impact of the integration cannot yet be assessed quantitatively. The development is best understood as an infrastructure-readiness signal: the technical capability for broader Wero acceptance via a major orchestration platform now exists, but the extent to which merchants actually activate that capability, and the resulting change in Wero transaction volumes, remains to be observed in subsequent cycles. #### Outlook The relevant indicator to watch in coming cycles is whether merchant-level Wero acceptance, enabled by the ACI Worldwide orchestration integration, translates into a measurable increase in reported Wero transaction volumes or merchant counts within Germany. Absent such data this cycle, the integration should be read as a necessary but not sufficient condition for broader Wero commercial adoption. Firms evaluating payment-product strategy for the German market may wish to note that major orchestration platforms are now treating Wero as a standard acceptance rail rather than a niche addition, which lowers the technical barrier for merchants considering Wero acceptance going forward. Periodic update · new data 2026-09-08 #### Product Innovation & Market Development The ECB's Digital Euro project remains on a circa 2028-2029 launch timeline, with commentary citing MiCA's restrictive treatment of private stablecoins as leaving an interim gap in the EU's digital-payments infrastructure that private-sector instruments have not yet filled. #### Outlook With the Digital Euro years away, the near-term digital-payments landscape in Germany and the wider euro area will continue to be shaped by MiCA-constrained private stablecoins rather than a central bank digital currency. Periodic update · new data 2026-07-08 #### Product Innovation & Market Development This cycle's W9 signal for Germany is anchored in two related but distinct developments: the transition of the EU Instant Payments Regulation into its compliance-assessment phase, and the PSR's extension of Verification of Payee to the full credit-transfer universe. **IPR Compliance-Assessment Transition** April 2026 marked a structural transition in the EU Instant Payments Regulation's lifecycle. The reporting cycle shifted from implementation tracking — in which PSPs were assessed on whether they had put in place the technical and operational infrastructure to send and receive instant credit transfers — to compliance assessment, in which PSPs are evaluated on whether they are meeting the IPR's substantive requirements in practice. This transition is significant for the German market because it signals that the SEPA Instant infrastructure is now treated as an operational baseline rather than a development project. The compliance-assessment phase enables the development of new real-time-settlement services and product propositions built on top of the SEPA Instant rail, since the rail's availability and reliability can now be assumed as a regulatory floor rather than a variable. For German PSPs — both bank and non-bank — the compliance-assessment transition means that the focus of regulatory attention on instant payments shifts from 'have you built it' to 'are you using it correctly and consistently.' This creates both a compliance obligation and a product-development opportunity: PSPs that have invested in SEPA Instant infrastructure can now build differentiated services on top of a mandated, standardised rail. **PSR: Verification of Payee Extension** The Payment Services Regulation extends Verification of Payee to all credit transfers, building on the euro instant-credit-transfer VoP regime established under the Amended SEPA Regulation. The existing VoP obligation — which requires PSPs to check payee names against IBANs before executing instant credit transfers — was already a significant operational investment for German PSPs. The PSR's extension of that obligation to standard credit transfers broadens the scope of the VoP infrastructure requirement substantially. The product-innovation dimension of this development is that VoP, once extended to all credit transfers, becomes a universal feature of the German payment account experience rather than a feature specific to instant-payment products. This creates a baseline expectation for payee-name verification across the full credit-transfer product range, which in turn shapes the product-design and user-experience requirements for German PSPs offering credit-transfer services. The bank versus non-bank distinction is relevant here in terms of implementation capacity. Credit institutions with established SEPA Instant infrastructure are better positioned to extend VoP to standard credit transfers than smaller non-bank PIs and EMIs that may have built narrower instant-payment capabilities. The PSR's VoP extension therefore carries a disproportionate implementation burden for the non-bank sector. #### Outlook The SEPA Instant compliance-assessment phase and the PSR's VoP extension together define the near-term product-innovation regulatory environment for German PSPs. The compliance-assessment transition creates a stable rail baseline on which new services can be built; the VoP extension creates a universal verification requirement that will shape product design across the credit-transfer product range. Both developments are on a trajectory toward full operationalisation upon PSD3/PSR transposition. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (5)** 1. T1 [https://www.ecb.europa.eu/euro/digital_euro/progress/html/ecb.deprp202510.en.html](https://www.ecb.europa.eu/euro/digital_euro/progress/html/ecb.deprp202510.en.html) retrieved 2026-06-23 2. T2 [https://www.db.com/news/detail/20251217-deutsche-bank-launches-wero-for-more-simple-and-sovereign-digital-payments-in-europe?language_id=1](https://www.db.com/news/detail/20251217-deutsche-bank-launches-wero-for-more-simple-and-sovereign-digital-payments-in-europe?language_id=1) retrieved 2026-06-23 3. T3 [https://www.openbankproject.com/blog/the-digital-euro-infrastructure/](https://www.openbankproject.com/blog/the-digital-euro-infrastructure/) retrieved 2026-06-23 4. T2 EPI Company / wero-wallet.eu — Wero; PAYONE e-commerce rollout Nov 2025 5. T3 [https://en.wikipedia.org/wiki/European_Payments_Initiative](https://en.wikipedia.org/wiki/European_Payments_Initiative) retrieved 2026-06-23 ### W10 Consumer Protection & APP Fraud Confirmed confirmed 2026-06-23 Germany enacted the Act implementing Directive (EU) 2023/2225 on consumer credit (BGBl. I 2026 Nr. 139, 18 May 2026); most provisions, including extension to BNPL, microcredit and interest-free financing, apply from 20 November 2026. Horizon · 2026-H2 (±year) PSR/PSD3 entry into force (spoofing-only APP reimbursement)_adopted · T2_ Standing sub-brief · as of 27 June 2026 157 words · last cycle 2026-10-06 #### Consumer Protection & APP Fraud German consumer protection rests on PSD2 (via ZAG and BGB §§675c ff.) and the UWG: unauthorised payments are refundable within one bank working day, and payer card liability is capped at EUR 50. APP/authorised-push-payment fraud has no general mandatory reimbursement regime, unlike the UK PSR model; the PSR/PSD3 deal concluded 27 November 2025 introduces only a narrow reimbursement duty limited to PSP-impersonation (spoofing) fraud, leaving most investment and pig-butchering scams outside mandatory reimbursement. The BGH 2024 ruling places the SCA burden of proof on the bank. The narrow spoofing-only scope leaves German PSPs with materially less APP-fraud liability than UK peers — a key cross-jurisdiction divergence for both bank and non-bank operators. #### Outlook Consumer protection is stable, with the PSR/PSD3 package expected to enter force in 2026-H2 carrying the spoofing-only reimbursement duty and broader PSD3 conduct changes. The absence of a general APP regime remains the defining feature relative to the UK. Periodic update · new data 2026-10-06 #### Consumer Protection & APP Fraud Germany has enacted the Act implementing Directive (EU) 2023/2225, the recast EU Consumer Credit Directive, extending the scope of general consumer-credit law to forms of credit that have historically sat outside mainstream consumer-credit regulation: microcredit, interest-free financing and Buy-Now-Pay-Later models. The Act was adopted and published as BGBl. 2026 I Nr. 139 on 18 May 2026. Its commencement clause provides that the Act enters into force, subject to a paragraph 2 exception, on 20 November 2026, which is when most of its substantive provisions take effect. The practical consequence for BNPL and microcredit providers active in the German market is that products which previously operated outside the general consumer-credit regime - precisely because they were structured as short-term, interest-free, or small-value credit - now fall within it. This is a scope extension rather than a wholesale rewrite of consumer-credit law: the existing general consumer-credit framework, with its established obligations around pre-contractual disclosure and creditworthiness assessment, is being applied to a wider set of credit products rather than a new, separate regime being built for BNPL specifically. Firms offering BNPL or microcredit to German consumers that have not previously treated themselves as subject to consumer-credit law will need to assess, ahead of 20 November 2026, whether their products now sit inside that scope. #### Outlook The operative date to track is 20 November 2026, when most provisions of the implementing Act become applicable. The paragraph 2 exceptions referenced in the commencement clause were not detailed in the material reviewed and should be treated as a residual area requiring separate confirmation before that date. No supervisory enforcement record yet exists under the extended scope, since the regime has not yet reached its main commencement date. **1 earlier update recorded under a different module label** An early cycle filed this entry under this module code with a heading naming another subject. Kept for the record; not this module's latest position. Periodic update · new data 2026-07-08 #### Digital Assets, Stablecoins & CBDC No material signal was identified for Germany under W10 (Digital Assets, Stablecoins and CBDC) this cycle. The MiCA framework continues to govern stablecoin and crypto-asset service provider activity in Germany, but no DE-specific W10 development was resolved this cycle. #### Outlook This module will be updated when DE-specific digital-assets, stablecoin, or CBDC regulatory material is available. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (4)** 1. T1 [https://www.bundesbank.de/en/tasks/payment-systems/psd2/psd2-775954](https://www.bundesbank.de/en/tasks/payment-systems/psd2/psd2-775954) retrieved 2026-06-23 2. T3 [https://www.biocatch.com/blog/psd3-proposal-fraud-risk-controls](https://www.biocatch.com/blog/psd3-proposal-fraud-risk-controls) retrieved 2026-06-23 3. T2 EU PSR/PSD3 proposal — impersonation-fraud reimbursement; EP trilogue 4. T3 [https://efri.io/phishing-in-germany-what-upper-courts-say/](https://efri.io/phishing-in-germany-what-upper-courts-say/) retrieved 2026-06-23 ### W11 AML/CFT & Financial Crime (Sentinel.gi-fed) [Sourced from Sentinel.gi ↗](https://sentinel.gi/jurisdictions/germany/#sec-dom-D7) limited signal Probable confirmed 2026-06-23 [SENTINEL.GI POSITION — payments context only] Germany's AML/CFT regime for the payments sector rests on the Geldwäschegesetz (GwG), implementing the EU AMLDs, supervised by BaFin. The new EU Anti-Money-Laundering Authority (AMLA) commenced operations in Frankfurt on 1 July 2025, directly overseeing high-risk institutions and coordinating national supervisors. Enforcement against payments-adjacent firms is active (e.g. BaFin's EUR 6.5m Solaris SE fine in 2024 for delayed SARs; a record EUR 45m AML fine at end-2025). Payment gateways remain a noted fraud choke point post-Wirecard. WPM carries the Sentinel position only; no original illicit-finance analysis performed. Standing sub-brief · as of 27 June 2026 161 words · last cycle 2026-07-07 #### AML/CFT & Financial Crime This module carries a Sentinel.gi-fed position for payments context only; no original illicit-finance analysis is performed here. Per the Sentinel feed, Germany hosts the EU Anti-Money-Laundering Authority (AMLA) in Frankfurt, operational from 1 July 2025, raising its strategic AML profile; AMLA directly oversees high-risk institutions and coordinates national supervisors. Germany's payments-sector AML rests on the Geldwaeschegesetz (GwG) supervised by BaFin. The Sentinel position notes persistent cash-economy and real-estate laundering exposure, a consolidated federal AML authority being stood up, FATF-compliant status with stable risk direction and a mixed enablement-versus-enforcement posture, and payment gateways remaining a noted fraud choke point post-Wirecard. AMLA's Frankfurt seat and direct-supervision remit raise AML compliance scrutiny for high-risk German payments institutions across bank and non-bank lines. Source: Sentinel.gi feed (sentinel.DE-W11-amla). #### Outlook The AML surface is escalating per the Sentinel feed. Any original illicit-finance assessment, sanctions-evasion analysis, or enforcement deep-dive beyond this carried position is routed to the Financial Intelligence Monitor rather than concluded here. Periodic update · new data 2026-07-08 #### AML/CFT & Financial Crime (Sentinel Feed) W11 intelligence for the World Payments Monitor is sourced from the Sentinel.gi feed. No Sentinel-fed AML/CFT delta for Germany was available this cycle. This is an explicitly noted coverage gap. W11 content will be carried and attributed to the Sentinel feed when DE-specific material is returned by that feed. No original AML/CFT analysis is conducted within this module; all W11 intelligence is provenance-linked to the Sentinel source. #### Outlook This module will be updated when the Sentinel feed returns DE-specific AML/CFT material. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (8)** 1. T? FIM (sentinel.gi) per-JID baseline profile — Germany — Germany operates a comprehensive AML/CFT framework (Geldwäschegesetz, Criminal Code, Banking Act) supervised by BaFin, the FIU (Zoll), and over 300 sector/Länder-level supervisors, with the EU's new AML Authority (AMLA) headquartered in Frankfurt. 2. T1 FIM (sentinel.gi) sanctions_change_register (issue FIM-BASE-SANC-002) — Sanctions: EU listing 3. T2 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-003) — Enforcement: Deutsche Bank AG (self-report to Deutsche Bundesbank) — Deutsche Bank AG / Russian clients 4. T2 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-004) — Enforcement: German Federal Prosecutor (Generalbundesanwalt) — Five individuals in an export network 5. T2 FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-002) — Enforcement: Frankfurt Public Prosecutor's Office — Deutsche Bank AG 6. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-003) — Gap: legal-gap 7. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: enforcement-absence 8. T? FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002) — Gap: capacity-deficit ### W12 Correspondent Banking, Settlement & Access Confirmed confirmed 2026-06-23 DTAZV is a legacy foreign-payment-instruction submission format (not an instant-payment arrangement); Bundesbank permits inbound DTAZV submissions only until November 2026, to be replaced by XAZV/ISO 20022. Standing sub-brief · as of 27 June 2026 191 words · last cycle 2026-10-06 #### Correspondent Banking, Settlement & Access The analytical spine of this module is the bank versus non-bank settlement-access asymmetry: direct settlement access is structured around Eurosystem participation, with non-bank PSPs reaching central bank money largely via sponsorship. Settlement access for German institutions runs through the Eurosystem TARGET family operated by the Bundesbank: T2 (CLM main cash accounts plus RTGS) replaced TARGET2 in March 2023, with T2S dedicated cash accounts and TIPS DCAs for instant payments, settling in central bank money under ISO 20022/HVPS+; the unified ECMS was added in June 2025. Germany runs a structurally large positive TARGET balance of around EUR 1.06 trillion as of 31 Aug 2025. Correspondent banking uses SWIFT on ISO 20022 (global since March 2023), and access criteria flow from Eurosystem participation rules and KWG/ZAG licensing. TARGET/T2 access and the ISO 20022 migration govern settlement reach and messaging compliance for German banks and, via sponsorship, non-bank PSPs. #### Outlook Settlement infrastructure is stable, with the ECMS addition completing the recent consolidation of the TARGET family. The standing question for operators remains the bank versus non-bank access divide that determines whether an institution settles directly or through a sponsor. Periodic update · new data 2026-10-06 #### Correspondent Banking, Settlement & Access Deutsche Bundesbank's technical specification for the HBV (Hausbankverfahren) individual data format confirms a retirement window for the legacy DTAZV format used for submitting foreign-payment instructions: on the submission side, the DTAZV format remains permitted only until November 2026. The specification states that inbound DTAZV submissions are being superseded by the XAZV format, aligned to ISO 20022 messaging. This is a change to the technical submission format through which foreign-payment instructions are lodged with the Bundesbank, not a change to the correspondent banking relationships or settlement arrangements that sit behind those instructions, and it should not be read as an instant-payment or scheme-access development. The exact cutover timing for individual customer-bank channels is not fully established from the Bundesbank specification alone; actual migration dates may vary by the specific Bundesbank or Deutsche Kreditwirtschaft (DK) channel a given institution uses to submit foreign-payment instructions. Institutions still relying on DTAZV-format submission for cross-border payment instructions into Germany have a November 2026 deadline to complete migration to the XAZV/ISO 20022 format to avoid disruption to inbound submission processing. #### Outlook The November 2026 DTAZV closure is a near-term operational deadline for any institution still submitting foreign-payment instructions in the legacy format. Firms relying on correspondent or sponsor-bank arrangements that route through Bundesbank channels using DTAZV should confirm their own channel-specific migration timeline directly with their settlement counterparty, since the general specification does not fix a single cutover date across all channels. **1 earlier distinct update(s)** Periodic update · new data 2026-07-08 #### Correspondent Banking, Settlement & Access The analytical spine of W12 is the access asymmetry between bank and non-bank payment service providers in the correspondent-banking and settlement-account context. This cycle's signal for Germany is concentrated in the tension between PSD3's optional central-bank safeguarding account mechanism and the ECB's institutional scepticism about that mechanism — a tension that has direct implications for how the bank versus non-bank access asymmetry evolves under the new regulatory framework. **The Bank vs Non-Bank Access Asymmetry** Credit institutions in Germany have direct access to Bundesbank settlement accounts and the TARGET2/T2 infrastructure. Non-bank payment institutions — PIs and EMIs authorised under the ZAG — do not have equivalent direct access. They depend on credit institutions for correspondent-banking services, including the maintenance of safeguarding accounts in which client funds must be held. This structural dependency creates a persistent access asymmetry: non-bank PIs and EMIs are operationally dependent on the willingness of credit institutions to provide and maintain correspondent-banking relationships, and that willingness has been inconsistent across the German market. PSD3 was designed in part to address this asymmetry. One of its headline access-improvement tools is the optional mechanism allowing payment institutions to safeguard client funds in a central-bank account, rather than relying exclusively on credit-institution accounts or qualifying liquid assets. If operationalised, this mechanism would reduce non-bank PIs' dependency on credit institutions for safeguarding purposes, partially addressing the access asymmetry. **ECB Scepticism: Decision ECB/2025/2** ECB Decision ECB/2025/2, issued on 27 January 2025, expressed institutional scepticism about whether central-bank safeguarding accounts could impact overall systemic safety. The ECB's concern appears to centre on the systemic implications of large-scale non-bank PI fund flows being held directly at central banks, which could affect the structure of central-bank balance sheets and the transmission of monetary policy. This is a substantive institutional position, not a procedural objection, and it creates a significant uncertainty about whether the Bundesbank — as the relevant national central bank for German PIs — will in practice offer safeguarding accounts to non-bank PIs under the PSD3 optional mechanism. The PSD3 text does not require central banks to offer such accounts; the mechanism is optional for central banks as well as for PIs. The ECB's scepticism therefore operates as a practical constraint on the availability of the mechanism, even if PSD3 formally provides for it. For German non-bank PIs and EMIs, this means that the central-bank safeguarding account option — which appeared in the PSD3 text as a potential solution to the correspondent-banking access problem — may not be available in practice, at least not without further clarification of the ECB's and Bundesbank's operational posture. The Bundesbank's existing arrangements carry conceptual precedent for safeguarding-adjacent structures, but that precedent does not resolve the ECB's systemic-safety concern. The tension between PSD3's access-improvement intent and the ECB's institutional position is unresolved as of this cycle and will need to be watched through the transposition process. **Implications for German PI/EMI Operating Models** For German non-bank PIs and EMIs, the practical implication of this tension is that the correspondent-banking access asymmetry is unlikely to be resolved by the central-bank safeguarding account mechanism in the near term. Firms should not plan their safeguarding architecture on the assumption that Bundesbank accounts will be available. The alternative safeguarding routes — credit-institution accounts and qualifying liquid assets — remain the operative options, with all the access-dependency risks that entails. The coverage gap on DE-specific insolvency-law primary sources for PSD3 safeguarding ring-fencing provisions is noted. The analysis of safeguarding insolvency protection in this module relies on general PSD3/PSR secondary sources; no DE-specific insolvency-law primary source was located this cycle. #### Outlook The ECB-PSD3 safeguarding tension is the primary W12 development to track for Germany. Resolution will depend on the ECB and Bundesbank clarifying their operational posture on central-bank safeguarding accounts during the PSD3 transposition process. Until that clarification is available, the bank versus non-bank access asymmetry in the German correspondent-banking context remains structurally unresolved. The insolvency-law coverage gap is carried forward. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (4)** 1. T1 [https://www.bundesbank.de/en/tasks/payment-systems/t2/what-is-t2--920746](https://www.bundesbank.de/en/tasks/payment-systems/t2/what-is-t2--920746) retrieved 2026-06-23 2. T1 [https://www.bundesbank.de/en/tasks/payment-systems/t2/target-balances-920752](https://www.bundesbank.de/en/tasks/payment-systems/t2/target-balances-920752) retrieved 2026-06-23 3. T1 [https://www.bundesbank.de/en/tasks/topics/asset-purchases-have-significant-impact-on-target2-balance-762952](https://www.bundesbank.de/en/tasks/topics/asset-purchases-have-significant-impact-on-target2-balance-762952) retrieved 2026-06-23 4. T1 [https://www.bundesbank.de/en/tasks/payment-systems/t2/t2-920746](https://www.bundesbank.de/en/tasks/payment-systems/t2/t2-920746) retrieved 2026-06-23 ### W13 Commercial Intelligence (M&A, Investment & Product) — trailing 12 months Probable confirmed 2026-06-23 DE commercial activity centres on acquiring consolidation and pan-European wallet build-out; key events Unzer-AllCash (Mar 2026), Mollie-GoCardless (EUR 1.1bn), Solaris Series G (EUR 140m), SumUp IPO prep. Standing sub-brief · as of 27 June 2026 176 words · last cycle 2026-10-12 #### Commercial Intelligence (M&A, Investment & Product) This module renders discrete commercial events. On 12 March 2026 Unzer Group completed the acquisition of AllCash's point-of-sale operations in Plauen, Germany, adding 500+ terminals and around 2.5m annual transactions to expand in eastern Germany; the deal value was not publicly disclosed. Mollie agreed (announced late 2025) to acquire London-based A2A specialist GoCardless for EUR 1.1bn in stock (around 7x 2024 revenue), valuing the combined group at EUR 4.1bn — a transaction that reshapes account-to-account in the German-relevant market. Berlin BaaS provider Solaris completed a Series G investment of EUR 140m in February 2025, bringing total funding above EUR 530m and supporting embedded-finance and payments infrastructure. Together these reinforce SME acquiring consolidation and pan-European A2A repositioning. #### Outlook Commercial activity is escalating. The Mollie-GoCardless terms and several other commercial signals rest substantially on Tier-4 commercial-blog sourcing and require primary-source verification before being treated as confirmed; the Unzer-AllCash event is anchored on the company's own press release. Private-company commercial signals carry a deal-announcement over-index risk that is flagged in the gaps register. Periodic update · new data 2026-10-12 #### Commercial Intelligence & Fintech German fintech Finmid secured a EUR 17 million Series A extension to expand its embedded-financing product into new sectors. The round was led by Big Pi Ventures, with Main Set and Earlybird Venture Capital also participating. The round size was publicly disclosed; the terms were not otherwise broken out beyond the amount and investor list. This funding event sits within a broader rebound in German fintech funding activity reported for the first half of 2026, which totalled EUR 1.2 billion across the market, an increase of 196 percent against the second half of 2025. Finmid's round is a discrete, named commercial event within that broader trend rather than the trend itself: it specifically concerns an embedded-financing (banking-as-a-service-adjacent) product expanding into new sectors, distinct from the structural market-wide funding recovery that provides its context. #### Outlook The item to watch is whether the German fintech funding rebound observed in the first half of 2026 continues through the second half of the year, and whether further discrete funding events in the embedded-finance and banking-as-a-service space follow the pattern set by Finmid's extension. **2 earlier distinct update(s)** Periodic update · new data 2026-08-11 #### Commercial Intelligence & Fintech Three discrete commercial events involving Wero landed in Germany this cycle. N26 signed a Wero membership agreement, announced in December 2025, committing to launch peer-to-peer and e-commerce Wero integration across Germany, France and the Netherlands in the second half of 2026; the financial terms of this agreement were not publicly disclosed. bunq separately joined Wero's member network, with rollout planned across Germany, Belgium, France and the Netherlands during 2026; again, no financial terms were publicly disclosed for this membership arrangement. Decathlon Germany became the first market within its retail group to launch Wero payment acceptance on its website, reported in July 2026, marking a completed product release rather than an announced-but-pending commitment, with in-store acceptance planned for later in 2026. These three events, taken together, describe a commercial pattern rather than three unconnected announcements: within a single reporting cycle, Wero added a challenger bank, a neobank, and a major sporting-goods retailer to its German commercial network. N26's and bunq's memberships are both categorised as partnership-restructuring commercial events at the announced stage, meaning the commitments are confirmed but the underlying integration work has not yet gone live in Germany; Decathlon's is a completed product release, meaning German consumers can already use Wero at checkout on Decathlon's website as of the reporting date. This monitor draws a distinction between this commercial-intelligence coverage and the structural market-analysis and product-access-regulation coverage carried elsewhere: the N26, bunq, and Decathlon events are discrete, dated, named-party commercial developments, not a structural market-share shift or a regulatory product-access theme, and they are surfaced here on that basis. The confidence rating attached to all three is Assessed rather than High, reflecting Tier 3, single-outlet sourcing, The Paypers for the N26 and bunq items, SGI Europe for Decathlon, without independent corroboration located this cycle. The absence of disclosed financial terms across both the N26 and bunq membership agreements is itself a data point worth noting for commercial-intelligence purposes: Wero's membership model with major banks and fintechs, at least as reported this cycle, does not appear to involve disclosed licence fees, equity stakes, or other quantified consideration, consistent with EPI's cooperative-scheme structure in which participating banks are themselves EPI shareholders or affiliated institutions rather than external commercial counterparties in the conventional sense. Where this monitor is unable to confirm terms, it records the item as not publicly disclosed rather than estimating a value. Decathlon's completed product release is the more commercially concrete of the three events: it represents a live, consumer-facing acceptance point rather than a committed-but-pending integration, and its status as the first market within Decathlon's own retail group to carry Wero suggests the retailer may be piloting acceptance in Germany specifically ahead of a wider group rollout, though no confirmation of that broader group strategy was located this cycle. Read alongside the two prior commercial developments, Decathlon's move suggests merchant-side Wero adoption in Germany is proceeding on two parallel tracks: bank and fintech-side membership commitments that expand the network of institutions capable of offering Wero to their own customers, and direct merchant-side acceptance deals that expand where German consumers can actually spend through Wero. Both tracks reinforce each other, but they are commercially distinct and are tracked as such here. #### Outlook Whether N26's and bunq's announced Wero integrations actually go live in Germany during the second half of 2026 as committed, and whether Decathlon's in-store Wero rollout follows its online launch on the timeline indicated, are the two clearest commercial-intelligence signals to track into the next cycle. A continuation of this pattern, additional named banks, fintechs, or retailers announcing or completing Wero integrations in Germany, would further reinforce the corridor-level reading, addressed separately in this cycle's payment-corridor coverage, that Wero is building a credible commercial network in Germany at pace. Periodic update · new data 2026-07-08 #### Commercial Intelligence (M&A, Investment & Product) This cycle's W13 signal for Germany is substantive across all three commercial-event categories: M&A, investment, and leadership/strategic signalling. The events are rendered from the commercial_events array and are distinct from structural market-analysis (W6) and regulatory product-access themes (W9). **SBI Holdings / Solaris: Majority Acquisition (M&A, Completed)** Japan's SBI Holdings acquired a majority stake exceeding 70 percent in Berlin-based Banking-as-a-Service provider Solaris via a EUR 140 million investment round. The transaction ends Solaris's run as an independent unicorn; the firm was previously valued at USD 1.6 billion. The deal is assessed as completed. The amount is publicly disclosed. Solaris is a non-bank payment institution operating in the BaaS infrastructure segment — it provides banking and payment infrastructure to third-party fintechs and brands under a regulated licence. The SBI acquisition represents a strategic-investor buyout of a German non-bank BaaS infrastructure provider by a major Japanese financial group. The deal rationale is characterised as a majority buyout ending Solaris's independent-unicorn status. The transaction is the most significant German BaaS-sector consolidation event identified this cycle and is consistent with the broader pattern — noted in the key judgments — of German fintech consolidation proceeding through strategic-investor buyouts rather than public listings. The bank versus non-bank distinction is relevant here: Solaris operates as a non-bank PI/EMI-adjacent infrastructure provider, and its acquisition by a bank-affiliated strategic investor (SBI Holdings operates banking and financial-services businesses in Japan) raises questions about how the regulatory perimeter and BaFin supervisory relationship will evolve post-acquisition. **Trade Republic: Secondary Transaction (Investment, Completed)** Trade Republic closed 2025 with a EUR 1.2 billion secondary transaction that valued the firm at EUR 12.5 billion, roughly double its 2022 valuation. The amount is publicly disclosed. Trade Republic is a non-bank neo-broker and financial-ecosystem platform. The secondary transaction — in which existing shareholders sell stakes to new investors rather than the company raising primary capital — signals continued high private-market appetite for German retail-investment platform businesses at elevated valuations, even in the absence of a near-term IPO pathway. **N26: Leadership Transition (Strategic Signal)** N26 appointed Mike Dargan, a former UBS executive, as incoming CEO effective April 2026. Both co-founders stepped back from operational roles. N26 is classified as a bank (it holds a full banking licence in Germany). The leadership transition signal is that a public listing for N26 is likely years away. The appointment of an executive with a traditional banking background — rather than a fintech-native or capital-markets-oriented CEO — is consistent with a strategic posture focused on operational consolidation and regulatory relationship management rather than near-term IPO preparation. **German Fintech/Insurtech Sector: Annual Investment Total** German fintech and insurtech investment reached approximately EUR 14.2 billion in 2026, proving resilient despite record insolvencies of approximately 24,000 in the broader economy — a ten-year high. Notable raises within this total include Scalable Capital's EUR 155 million Series E and Munich-based AML-technology provider Hawk's USD 56 million raise. The sector-level investment figure is assessed rather than confirmed from a primary source, and the underlying data is sourced from a T4 (industry/commercial) source. The resilience of fintech investment against a backdrop of broader economic stress is a structural signal: capital continues to flow into German fintech and insurtech businesses even as the wider economy contracts. The Hawk raise — an AML-technology provider — is noted as a commercial event with potential cross-monitor relevance to the W11 AML/CFT module, though W11 analysis is reserved for the Sentinel feed. #### Outlook The German commercial-intelligence picture is characterised by consolidation through strategic-investor buyouts (SBI-Solaris), secondary-market liquidity rather than IPOs (Trade Republic, N26 signal), and continued sector-level investment resilience. The near-term outlook is for further consolidation activity as the BaaS and non-bank PI/EMI sector navigates the PSD3 transition. The W13 commercial-event surface will be updated as new M&A, investment, and product-launch events are identified. 1 further periodic run re-emitted the standing brief unchanged and is not shown. **Sources and findings (5)** 1. T2 [https://www.unzer.com/en/press/articles/unzer-gruppe-uebernimmt-allcash-und-baut-geschaeft-in-ostdeutschland-aus/](https://www.unzer.com/en/press/articles/unzer-gruppe-uebernimmt-allcash-und-baut-geschaeft-in-ostdeutschland-aus/) retrieved 2026-06-23 2. T4 [https://businessofpayments.substack.com/p/business-of-payments-january-2026 [CAVEAT: Tier 4 commercial/blog source — Assessed; illustrative only]](https://businessofpayments.substack.com/p/business-of-payments-january-2026 [CAVEAT: Tier 4 commercial/blog source — Assessed; illustrative only]) 3. T4 [https://businessofpayments.substack.com/p/business-of-payments-january-2026 [CAVEAT: Tier 4 commercial/blog source — Assessed; illustrative only]](https://businessofpayments.substack.com/p/business-of-payments-january-2026 [CAVEAT: Tier 4 commercial/blog source — Assessed; illustrative only]) 4. T4 [https://businessofpayments.com/ [CAVEAT: Tier 4 commercial/blog source — Assessed; illustrative only]](https://businessofpayments.com/ [CAVEAT: Tier 4 commercial/blog source — Assessed; illustrative only]) 5. T2 KPMG Pulse of Fintech H2/2025 (Germany funding) **No modules match.** Filters combine as OR inside a group and AND across groups. ## Editorial metadata Provenance only. Nothing below gates publication or affects the render. Editorial metadata for Germany| Field | Value | |---|---| | `trust.lawyer_review.status` | never_reviewed | | `trust.lawyer_review.reviewer` | no reviewer on record | | ` trust.content_source` | ai_generated | ## Provenance and declared absence **Disclosure model:** module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is. **Sentinel-fed modules** receive no special rendering treatment. `sentinel_feed` is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page. **Family taxonomy** is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning. **Suppressed by doctrine:** derived risk score; per-module RAG traffic light; `derived_scores` = `{}`. **Band honesty:** uncertainty bands are computed against a frozen build clock of 2026-10-21. A year-precision row is never promoted into a tighter band. **Orphan deltas:** 1 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card. **Envelope:** baseline resolved at `jurisdiction_json.baseline`; 14 module(s), 65 finding(s), 128 source(s) in the cumulative register. Think something on this page is wrong? [Report an error](https://payments.gi/legal/#contact).