MiCA Crypto Rules in Germany: What Changes for German Users in 2026

BaFin oversight and EU MiCA rules are part of Germany's crypto regulatory framework. For German crypto users, the rules have direct consequences: which exchanges can legally serve you, which stablecoins remain available on regulated platforms, and what happens if you keep using a platform that never obtained a license. This article explains the rules that matter for ordinary German users, not the technical compliance burden on service providers.

Germany's Role in MiCA: Leading Europe

Germany was already one of the strictest crypto jurisdictions in Europe before MiCA came into effect. Since January 2020, crypto custody has been classified as a regulated financial service under the Kreditwesengesetz (KWG), requiring BaFin authorization for any provider to keep a client's private keys. That foundation meant German-based firms were better prepared for MiCA's broader licensing framework than most of their EU peers.

MiCA (the Markets in Crypto-Assets Regulation) is an EU-wide law that creates a single licensing category for crypto-asset service providers, called CASPs. Services covered include custody, exchange, brokerage, portfolio management, and platform operation. Germany's national competent authority under MiCA is BaFin, the Federal Financial Supervisory Authority. Under MiCA's passporting mechanism, a CASP authorized by BaFin can serve clients across all 30 EEA countries without a separate local license. The reverse also applies: a CASP authorized in another EEA country can legally serve German residents by passporting into Germany.

Before MiCA, Germany treated crypto custody and trading services as regulated financial services under domestic law. It adds consistent standards across the EU, but does not replace BaFin's role. BaFin continues to act as both the authorization body for German-based CASPs and their ongoing supervisor, coordinating with ESMA and EBA on cross-border oversight. The transitional window for legacy providers closed on 31 December 2025 for Germany, earlier than the wider EU deadline of 1 July 2026.

How BaFin Enforces MiCA in Germany

BaFin's enforcement role under MiCA goes beyond issuing licenses. Platforms serving the German market must comply with both BaFin rules and the EU MiCA regime, meaning identity verification and anti-money laundering checks are requirements for any licensed exchange, not optional add-ons.

The practical enforcement picture is sharper than the regulatory text suggests. From 1 July 2026, any crypto-asset service provider operating without a CASP authorization is acting illegally in the EU. BaFin is actively blocking access to unauthorized platforms. For German users, the consequences are concrete: platforms in breach must stop accepting new deposits, halt new orders, and begin off-boarding clients in an orderly wind-down.

Cross-border enforcement is where MiCA's architecture becomes visible. BaFin coordinates with ESMA and with the national competent authorities of other EEA states. A firm authorized in one EEA country but providing services to German residents without proper passporting notification is subject to BaFin scrutiny even if BaFin did not issue its license.

The available research does not establish a current primary-source KuCoin case or a BaFin cross-border measure. It therefore cannot support an enforcement conclusion for German users. Using a platform without German regulatory oversight carries a greater risk of loss, seizure, or weak recourse. That framing from Germany's exchange regulatory context is now sharper: after July 1, a user on an unlicensed exchange has no MiCA legal safeguards, no segregated-funds protection, and no compensation rights under EU law. The platform is clearly in breach; the user's holdings are not confiscated, but they are unprotected.

Minimum own funds for a MiCA CASP authorization typically start around €125,000, with application fees in the €10,000 to €10,750 range. Those thresholds are not directly relevant to users, but they signal that BaFin is issuing licenses to firms with genuine financial substance, not shell operators.

Which Exchanges Are Licensed to Operate in Germany

No single public register lists every exchange with confirmed access to German residents as of mid-2026. In practice, MiCA's passporting system means that a license from any EEA regulator is sufficient, provided the firm has completed the cross-border notification process.

No authoritative, exchange-by-exchange answers were found for the current MiCA authorization, the license country, passporting availability in Germany, and BaFin status. The firm's position is different. Binance withdrew its German license application in 2023. As of June 2026, Binance was not listed among MiCA-authorized providers in the EU, with reports indicating it was seeking authorization in Greece. German residents could still technically access Binance's platform as of June 2026, but the firm does not hold a German crypto authorization from BaFin, and the transitional period for German providers closed on 31 December 2025.

For residents choosing an exchange, the practical question is straightforward: does the platform hold a CASP authorization from an EEA regulator? If yes, it can legally serve you under MiCA's passporting rules. If not, you are using a platform outside the EU regulatory framework, without the protections that framework provides.

What German Users Cannot Do After July 1?

The July 1, 2026, deadline is the EU-wide hard stop. After that date, any crypto-asset service provider without a MiCA CASP authorization is operating illegally across the EU. For German users specifically, the transitional window already closed on 31 December 2025. That means German-based providers had a tighter deadline, but the July 1 date is when the EU-wide enforcement posture hardens for all providers serving EU clients.

Three practical restrictions follow from this.

Unlicensed exchanges must stop serving German residents. Platforms without CASP authorization must halt new deposits, block new orders, and offboard existing clients. Users who remain on such platforms after the deadline are in a regulatory grey zone: their holdings are not confiscated, but they have no statutory protection or recourse under MiCA.

USDT is effectively restricted on EU-regulated platforms. Tether, the issuer of USDT, does not hold an e-money token (EMT) authorization under MiCA. MiCA-licensed exchanges are required to delist stablecoins issued by entities that lack that authorization. Major EU exchanges have already delisted USDT. German users who hold USDT on a regulated platform will need to convert it to MiCA-compliant tokens, such as Circle's USDC or EURC, or move it to self-custody or to non-EU venues.

Using an unlicensed exchange removes your legal protections. MiCA's user safeguards, including segregated funds and compensation rights, apply only on authorized platforms. A platform that operates without a license cannot offer those protections, regardless of its terms of service.

Crypto Taxation in Germany Under MiCA

MiCA does not change German tax law. This is worth stating plainly because the two frameworks are often conflated. Germany classifies cryptocurrencies as private assets under §23 EStG. The Finanzamt administers tax on crypto gains. MiCA is a regulatory regime for service providers, not a tax reform, and it does not alter how gains are calculated or reported by individual investors.

The core German tax rules remain as follows. Gains on crypto held for more than 12 months are completely tax-free, regardless of the amount. Sales within 12 months are taxable only when total private-sale gains exceed €600 in a year. Crypto-to-crypto trades and spending crypto on goods or services are taxable events. Moving crypto between a user's own wallets is not taxable.

What MiCA does, indirectly, is change the reporting environment for service providers. Exchanges and wallets may face standardized tax-reporting requirements as EU rules develop, including obligations under the DAC8 directive, which requires crypto-asset service providers to report user transaction data to tax authorities. That enhanced reporting makes it harder for German users to under-report gains, but it does not change the underlying tax calculation.

The €600 threshold and the 12-month exemption are unchanged. A German user who has held Bitcoin for 13 months and sells it at a profit owes no tax on that gain under current law. A user who trades ETH for another token within 12 months and realizes a €700 gain owes tax on that amount. Neither outcome is affected by MiCA.

One practical implication of the improved reporting environment: German users who rely on regulated, MiCA-licensed exchanges will find their transaction history more systematically reported to the Finanzamt. Using a self-custody wallet for long-term holdings, where the user controls the record-keeping, remains an option that MiCA explicitly does not regulate.

Self-Custody for German Crypto Users

Personal key control sits outside MiCA's scope. That is not a loophole; it is an explicit design choice in the regulation.

Here's how the distinction works. MiCA licenses crypto-asset service providers, meaning entities that provide regulated services to third parties, such as custody, exchange, brokerage, and so on. A user who holds their own private keys with a hardware or self-custody wallet is not providing a service to anyone else. They fall entirely outside the CASP licensing scope, and no BaFin license is required for personal self-custody.

Under German law, crypto custody has required BaFin authorization since January 2020, but that requirement applies to providers conducting custody business in Germany, not to individuals securing their own assets. MiCA's explicit recognition of self-custody confirms that position at the EU level.

In a self-custodial setup, the user controls the private key. Transactions are signed locally and broadcast to the blockchain without passing through an intermediary. The wallet generates a public and private key pair; the private key authorizes transactions without leaving the user's control. That means no platform can freeze the account, no insolvency event can block access, and no regulatory action against a service provider affects the holdings.

The trade-off is real. Self-custody places the full responsibility for key security on the user. If the private key is lost and there is no backup, the funds are permanently inaccessible. Custodial storage carries platform hack, insolvency, regulatory action, and counterparty risks. Self-custody replaces those risks with user error and lost-key risk. Neither is zero.

A hardware wallet stores private keys offline and signs transactions internally, so the private key never touches an internet-connected device. For German users who want to hold crypto outside the MiCA-regulated exchange environment, a hardware wallet is the standard approach.

Tangem is one option in this category. Tangem Cold Wallet is a self-custodial hardware wallet that stores private keys offline on an NFC-enabled physical card. Private keys are generated in a Samsung S3D350A secure element chip certified to Common Criteria EAL6+, and cryptographic signing occurs on-chip. That key does not leave the device. To sign a transaction, the user taps the card to a phone; the app sends unsigned transaction data to the card, the secure element signs it internally, and the app broadcasts the signed transaction. The app has full German-language support and requires no account registration or KYC for basic wallet usage.

One concrete limitation: Tangem's default seedless setup uses a multi-card backup system rather than a seed phrase. If every backup card is lost and the user did not opt to generate a seed phrase during setup, the funds are permanently inaccessible. That is a meaningful responsibility for any user who chooses this path.

Self-custody does not exempt German users from tax obligations. Moving crypto between a user's own wallets is not a taxable event, but selling, trading, or spending crypto held in self-custody is subject to the same §23 EStG rules as exchange-held assets.