BaFin Warns Five Crypto Providers of Unauthorised Business

The Crypto Markets Supervision Act, or KMAG, is a German law that enforces the European regulation on markets in crypto-assets. The law requires providers of crypto-asset services in Germany to have a licence, and the Federal Financial Supervisory Authority (BaFin) is allowed to name providers that lack one. Between late September and early October, BaFin published nine consumer notices on unauthorised business, five of which concern crypto-asset services.

The KMAG is Germany's implementation of the MiCA regulation, which prescribes what applies for providers of crypto-asset services, including the licence they need and the information they have to publish. The KMAG governs who enforces that in Germany and with which instruments. An EU regulation takes effect without a national implementing act, but it contains no German procedural rules, which is why the KMAG was created to supplement it.

BaFin's warnings are based on section 10(7) of the KMAG, which allows the authority to name a company in public if there is a suspicion that it is providing unauthorised business. A suspicion is enough to trigger a warning, and BaFin does not have to wait until a court has ruled. The provision also covers firms that do no business at all but behave as though they did.