Germany (DE)

Licensing, Authorisation & Market Access

The German licensing and market-access environment is in a period of structured transition driven by the advancing PSD3 and Payment Services Regulation legislative package at the EU level and the continuing operation of the Zahlungsdiensteaufsichtsgesetz at the national level.

**PSD3/PSR Legislative Progression**

On 17 April 2026, the Council of the EU issued a formal 'I' Item Note circulating the final compromise texts of PSD3 and the PSR to COREPER for approval. This followed provisional political agreement between the Council and the European Parliament reached in November 2025. The issuance of the 'I' Item Note is a procedural signal of imminent formal adoption: 'I' Items are placed on the Council agenda for approval without debate, indicating that the text is considered settled at the political level. Formal adoption by both institutions is the next step before the package enters the Official Journal and the transposition clock begins for member states.

For Germany, the significance of this progression is immediate and operational. BaFin has flagged that PSD3 expectations will be reflected in new authorisation files from 2026 onward, meaning that firms currently in the authorisation pipeline — or planning to enter it — are already being assessed against a forward-looking standard that anticipates the PSD3 framework, even before formal transposition.

**EMI Reauthorisation: The End of the EMD2 Regime**

The most structurally significant licensing change embedded in PSD3 for the German non-bank payment sector is the elimination of the separate Electronic Money Directive 2 regime. Under PSD3, EMIs are reclassified as a sub-category of payment institutions, and existing EMIs are required to seek reauthorisation as PIs. This is not a grandfathering arrangement: it is a mandatory reauthorisation process that will require affected firms to demonstrate compliance with the PI authorisation standard, which carries different — and in several respects more demanding — requirements than the EMD2 track.

For Germany, where EMIs are currently authorised under the ZAG's EMI provisions, this creates a defined transition task. The ZAG transposes both PSD2 and EMD2 and governs BaFin's authorisation of both PIs and EMIs. The reauthorisation requirement means that the ZAG's EMI track will effectively be wound down as a standalone licensing category once PSD3 is transposed into German law. Firms that have built their operating models around the EMI licence — including those using the EMI framework for e-money issuance in conjunction with payment account services — will need to assess whether their current authorisation scope maps cleanly onto the PI sub-category structure or whether material changes to their regulatory perimeter are required.

The bank versus non-bank distinction is directly relevant here. Credit institutions authorised under the KWG are not affected by the EMI reauthorisation requirement; the structural change falls entirely on non-bank PIs and EMIs. This asymmetry reinforces the existing market-access differential between bank and non-bank payment service providers in Germany, at least during the transition period.

**BaFin Authorisation Practice**

BaFin's forward-signalling on PSD3 expectations in new authorisation files is assessed as a practical anticipatory measure rather than a formal regulatory instrument. The ZAG remains the operative licensing statute until PSD3 is transposed. However, the signal that BaFin is already calibrating its authorisation assessments to PSD3 expectations means that firms seeking new PI or EMI authorisations in Germany in 2026 are effectively operating in a dual-standard environment: formally assessed under ZAG, but with BaFin applying forward-looking PSD3 criteria in its substantive review. This creates planning complexity for applicants, particularly on substance requirements, governance standards, and the safeguarding architecture that PSD3 will mandate.

Outlook

The near-term outlook for W1a in Germany is one of accelerating transition. Formal PSD3/PSR adoption is expected to follow the COREPER approval process, after which the transposition period will begin. BaFin's anticipatory posture on authorisation files means the practical impact of PSD3 on German licensing is already being felt. The EMI reauthorisation requirement is the single most operationally significant change for the non-bank sector and will require affected firms to initiate transition planning well in advance of the transposition deadline. The coverage gap on DE-specific insolvency-law primary sources for PSD3 safeguarding ring-fencing provisions is noted; that gap is carried forward to the next cycle.

Prudential Standards & Capital Requirements

No material signal was identified for Germany under W2 (Prudential Standards and Capital Requirements) this cycle. The PSD3/PSR package carries prudential implications — including changes to own-funds requirements and safeguarding diversification obligations — but no Germany-specific prudential-standards development beyond what is captured under W1a and W12 was resolved this cycle.

Outlook

PSD3 transposition will carry prudential-standards implications for German PIs and EMIs. This module will be updated when DE-specific prudential-standards material is available.

Consumer Protection & Dispute Resolution

No material signal was identified for Germany under W3 (Consumer Protection and Dispute Resolution) this cycle beyond the APP-fraud reimbursement obligations captured under W1b, which carry direct consumer-protection implications. The BaFin consumer fraud warning (7 April 2026) is noted as a dashboard-tier enforcement signal.

Outlook

The PSR's APP-fraud reimbursement framework will be the primary consumer-protection development to track for Germany upon transposition. This module will be updated when DE-specific consumer-protection or dispute-resolution material is available.

Commercial Intelligence (M&A, Investment & Product)

This cycle's W13 signal for Germany is substantive across all three commercial-event categories: M&A, investment, and leadership/strategic signalling. The events are rendered from the commercial_events array and are distinct from structural market-analysis (W6) and regulatory product-access themes (W9).

**SBI Holdings / Solaris: Majority Acquisition (M&A, Completed)**

Japan's SBI Holdings acquired a majority stake exceeding 70 percent in Berlin-based Banking-as-a-Service provider Solaris via a EUR 140 million investment round. The transaction ends Solaris's run as an independent unicorn; the firm was previously valued at USD 1.6 billion. The deal is assessed as completed. The amount is publicly disclosed.

Solaris is a non-bank payment institution operating in the BaaS infrastructure segment — it provides banking and payment infrastructure to third-party fintechs and brands under a regulated licence. The SBI acquisition represents a strategic-investor buyout of a German non-bank BaaS infrastructure provider by a major Japanese financial group. The deal rationale is characterised as a majority buyout ending Solaris's independent-unicorn status. The transaction is the most significant German BaaS-sector consolidation event identified this cycle and is consistent with the broader pattern — noted in the key judgments — of German fintech consolidation proceeding through strategic-investor buyouts rather than public listings.

The bank versus non-bank distinction is relevant here: Solaris operates as a non-bank PI/EMI-adjacent infrastructure provider, and its acquisition by a bank-affiliated strategic investor (SBI Holdings operates banking and financial-services businesses in Japan) raises questions about how the regulatory perimeter and BaFin supervisory relationship will evolve post-acquisition.

**Trade Republic: Secondary Transaction (Investment, Completed)**

Trade Republic closed 2025 with a EUR 1.2 billion secondary transaction that valued the firm at EUR 12.5 billion, roughly double its 2022 valuation. The amount is publicly disclosed. Trade Republic is a non-bank neo-broker and financial-ecosystem platform. The secondary transaction — in which existing shareholders sell stakes to new investors rather than the company raising primary capital — signals continued high private-market appetite for German retail-investment platform businesses at elevated valuations, even in the absence of a near-term IPO pathway.

**N26: Leadership Transition (Strategic Signal)**

N26 appointed Mike Dargan, a former UBS executive, as incoming CEO effective April 2026. Both co-founders stepped back from operational roles. N26 is classified as a bank (it holds a full banking licence in Germany). The leadership transition signal is that a public listing for N26 is likely years away. The appointment of an executive with a traditional banking background — rather than a fintech-native or capital-markets-oriented CEO — is consistent with a strategic posture focused on operational consolidation and regulatory relationship management rather than near-term IPO preparation.

**German Fintech/Insurtech Sector: Annual Investment Total**

German fintech and insurtech investment reached approximately EUR 14.2 billion in 2026, proving resilient despite record insolvencies of approximately 24,000 in the broader economy — a ten-year high. Notable raises within this total include Scalable Capital's EUR 155 million Series E and Munich-based AML-technology provider Hawk's USD 56 million raise. The sector-level investment figure is assessed rather than confirmed from a primary source, and the underlying data is sourced from a T4 (industry/commercial) source.

The resilience of fintech investment against a backdrop of broader economic stress is a structural signal: capital continues to flow into German fintech and insurtech businesses even as the wider economy contracts. The Hawk raise — an AML-technology provider — is noted as a commercial event with potential cross-monitor relevance to the W11 AML/CFT module, though W11 analysis is reserved for the Sentinel feed.

Outlook

The German commercial-intelligence picture is characterised by consolidation through strategic-investor buyouts (SBI-Solaris), secondary-market liquidity rather than IPOs (Trade Republic, N26 signal), and continued sector-level investment resilience. The near-term outlook is for further consolidation activity as the BaaS and non-bank PI/EMI sector navigates the PSD3 transition. The W13 commercial-event surface will be updated as new M&A, investment, and product-launch events are identified.

Conduct, Safeguarding & Financial Promotions

The German conduct environment this cycle is shaped by two distinct but reinforcing developments: an imminent hard deadline on payment-for-order-flow and a substantive expansion of PSP obligations under the incoming PSR framework. A third, dashboard-tier item — BaFin's consumer fraud warning — illustrates the active enforcement-vector environment in which these structural changes are landing.

**PFOF Grandfathering Expiry: Germany's Compliance Cliff-Edge**

Germany is the only EU member state that has continued to exercise the domestic PFOF grandfathering exemption under Article 39a(2) of MiFIR. The EU-wide ban on payment for order flow took effect in March 2024; every other member state is already operating under the prohibition. Germany's exemption — the last one standing across the EU — expires on 30 June 2026. At the time of this cycle's synthesis date of 7 July 2026, that deadline has passed. German brokers and investment firms that were dependent on PFOF revenue are now operating under the EU-wide ban without any domestic carve-out.

The conduct implications are material. PFOF arrangements — under which brokers receive payments from trading venues or market makers in exchange for routing client orders — have been a significant revenue component for German retail-facing investment platforms. The removal of the exemption does not merely eliminate a revenue stream; it requires affected firms to restructure their order-routing arrangements, their best-execution frameworks, and their client-disclosure obligations. The compliance cliff-edge character of this transition — a hard expiry date rather than a phased wind-down — means that firms that delayed restructuring face immediate exposure.

This is a non-bank-sector-dominant issue. The PFOF arrangements at issue are primarily operated by non-bank investment firms and broker-dealers rather than credit institutions, though the distinction between bank and non-bank actors in the German retail-investment platform space is not always clean, particularly for neobanks that offer both payment accounts and investment products.

**PSR: Payee-Name Verification and APP-Fraud Reimbursement**

The Payment Services Regulation introduces two conduct obligations of direct relevance to German PSPs. First, PSPs will be required to verify payee names against IBANs or unique identifiers for credit payments not already covered by the instant-payments rules. This extends verification-of-payee-style checks — already required for euro instant credit transfers under the Amended SEPA Regulation — to the broader credit-transfer universe. The practical effect is that the VoP infrastructure and operational processes that PSPs have built for instant payments will need to be extended to cover standard credit transfers as well.

Second, the PSR introduces expanded APP-fraud reimbursement obligations. PSPs will bear expanded liability for authorised push-payment fraud losses, building on the payee-name verification obligation as a fraud-prevention mechanism. The reimbursement framework under PSR is designed to create stronger incentives for PSPs to invest in fraud-detection and prevention, since the cost of reimbursement falls on the PSP where the verification obligation was not met or where the fraud was not flagged.

Both obligations apply to bank and non-bank PSPs. The bank versus non-bank distinction matters here primarily in terms of operational capacity: credit institutions typically have more developed fraud-detection infrastructure than smaller non-bank PIs and EMIs, meaning the compliance burden of the VoP extension and the reimbursement obligation may fall disproportionately on the non-bank sector in terms of implementation cost relative to scale.

**BaFin Consumer Fraud Warning (Dashboard)**

On 7 April 2026, BaFin issued a consumer warning against a fraudulent identity-fraud application circulating under the name 'FPM MIN' via WhatsApp groups. This is a dashboard-tier item — a discrete enforcement-vector signal rather than a rulemaking or supervisory-policy development. It is noted here because it illustrates the active fraud-vector environment in which PSD3's expanded APP-fraud reimbursement obligations will operate. The Telekommunikationsgesetz section 120 requires telecom providers to block or anonymise spoofed numbers used in such schemes, providing a parallel enforcement mechanism at the network layer.

Outlook

The PFOF deadline has passed; the immediate compliance question for affected German firms is now one of post-deadline posture rather than preparation. The PSR conduct obligations — VoP extension and APP-fraud reimbursement — will become operative upon PSD3/PSR transposition, with BaFin's anticipatory authorisation posture suggesting that the supervisory expectation is already moving ahead of the formal transposition date. The active fraud-vector environment reinforces the operational urgency of the APP-fraud reimbursement framework.

AML/CFT Licensing Conditions & Fit-and-Proper

No material signal was identified for Germany under W4 (AML/CFT Licensing Conditions and Fit-and-Proper) this cycle. BaFin's PSD3-anticipatory posture on new authorisation files is noted as carrying implicit fit-and-proper and AML/CFT-condition implications, but no DE-specific W4 development was resolved.

Outlook

PSD3 transposition will carry AML/CFT licensing-condition implications. This module will be updated when DE-specific material is available.

Payment Rails, Settlement Infrastructure & Access

No Germany-specific mobile-money-equivalent rail delta was identified this cycle. The SEPA Instant compliance-assessment transition captured under W9 is the primary rail-adjacent development; it is carried there rather than duplicated here.

Outlook

The SEPA Instant compliance-assessment phase and the PSR's VoP extension are the primary rail-infrastructure developments to track for Germany. This module will be updated when DE-specific rail or settlement-infrastructure material is available.

Market Structure & Competition

No material signal was identified for Germany under W6 (Market Structure and Competition) this cycle as a standalone structural-analysis item. The SBI-Solaris acquisition and the broader German fintech consolidation pattern are commercial-intelligence events carried under W13. Structural M&A trend analysis for the German BaaS and fintech sector will be developed as the consolidation pattern accretes across cycles.

Outlook

The German fintech consolidation pattern — strategic-investor buyouts rather than IPOs — is a structural market-structure development to track. This module will be updated when DE-specific competition or market-structure regulatory material is available.

Cross-Border Payments & Remittances

No material signal was identified for Germany under W7 (Cross-Border Payments and Remittances) this cycle. No corridor-tracker entries were generated for DE this cycle.

Outlook

This module will be updated when DE-specific cross-border payments or remittances regulatory material is available.

Merchant Acquiring, Onboarding & Chargebacks

The German merchant-acquiring, onboarding, and chargeback vector was not resolved this cycle. This is an explicitly noted coverage gap. The absence of signal on W8 means this cycle is under-specified on a payments-operating-model area that can carry material risk and compliance posture implications for acquiring banks and non-bank payment institutions operating in the German market.

Outlook

This module will be prioritised for resolution in the next cycle. The gap is carried forward.

Product Innovation & Market Development

This cycle's W9 signal for Germany is anchored in two related but distinct developments: the transition of the EU Instant Payments Regulation into its compliance-assessment phase, and the PSR's extension of Verification of Payee to the full credit-transfer universe.

**IPR Compliance-Assessment Transition**

April 2026 marked a structural transition in the EU Instant Payments Regulation's lifecycle. The reporting cycle shifted from implementation tracking — in which PSPs were assessed on whether they had put in place the technical and operational infrastructure to send and receive instant credit transfers — to compliance assessment, in which PSPs are evaluated on whether they are meeting the IPR's substantive requirements in practice. This transition is significant for the German market because it signals that the SEPA Instant infrastructure is now treated as an operational baseline rather than a development project. The compliance-assessment phase enables the development of new real-time-settlement services and product propositions built on top of the SEPA Instant rail, since the rail's availability and reliability can now be assumed as a regulatory floor rather than a variable.

For German PSPs — both bank and non-bank — the compliance-assessment transition means that the focus of regulatory attention on instant payments shifts from 'have you built it' to 'are you using it correctly and consistently.' This creates both a compliance obligation and a product-development opportunity: PSPs that have invested in SEPA Instant infrastructure can now build differentiated services on top of a mandated, standardised rail.

**PSR: Verification of Payee Extension**

The Payment Services Regulation extends Verification of Payee to all credit transfers, building on the euro instant-credit-transfer VoP regime established under the Amended SEPA Regulation. The existing VoP obligation — which requires PSPs to check payee names against IBANs before executing instant credit transfers — was already a significant operational investment for German PSPs. The PSR's extension of that obligation to standard credit transfers broadens the scope of the VoP infrastructure requirement substantially.

The product-innovation dimension of this development is that VoP, once extended to all credit transfers, becomes a universal feature of the German payment account experience rather than a feature specific to instant-payment products. This creates a baseline expectation for payee-name verification across the full credit-transfer product range, which in turn shapes the product-design and user-experience requirements for German PSPs offering credit-transfer services.

The bank versus non-bank distinction is relevant here in terms of implementation capacity. Credit institutions with established SEPA Instant infrastructure are better positioned to extend VoP to standard credit transfers than smaller non-bank PIs and EMIs that may have built narrower instant-payment capabilities. The PSR's VoP extension therefore carries a disproportionate implementation burden for the non-bank sector.

Outlook

The SEPA Instant compliance-assessment phase and the PSR's VoP extension together define the near-term product-innovation regulatory environment for German PSPs. The compliance-assessment transition creates a stable rail baseline on which new services can be built; the VoP extension creates a universal verification requirement that will shape product design across the credit-transfer product range. Both developments are on a trajectory toward full operationalisation upon PSD3/PSR transposition.

Digital Assets, Stablecoins & CBDC

No material signal was identified for Germany under W10 (Digital Assets, Stablecoins and CBDC) this cycle. The MiCA framework continues to govern stablecoin and crypto-asset service provider activity in Germany, but no DE-specific W10 development was resolved this cycle.

Outlook

This module will be updated when DE-specific digital-assets, stablecoin, or CBDC regulatory material is available.

AML/CFT & Financial Crime (Sentinel Feed)

W11 intelligence for the World Payments Monitor is sourced from the Sentinel.gi feed. No Sentinel-fed AML/CFT delta for Germany was available this cycle. This is an explicitly noted coverage gap. W11 content will be carried and attributed to the Sentinel feed when DE-specific material is returned by that feed. No original AML/CFT analysis is conducted within this module; all W11 intelligence is provenance-linked to the Sentinel source.

Outlook

This module will be updated when the Sentinel feed returns DE-specific AML/CFT material.

Correspondent Banking, Settlement & Access

The analytical spine of W12 is the access asymmetry between bank and non-bank payment service providers in the correspondent-banking and settlement-account context. This cycle's signal for Germany is concentrated in the tension between PSD3's optional central-bank safeguarding account mechanism and the ECB's institutional scepticism about that mechanism — a tension that has direct implications for how the bank versus non-bank access asymmetry evolves under the new regulatory framework.

**The Bank vs Non-Bank Access Asymmetry**

Credit institutions in Germany have direct access to Bundesbank settlement accounts and the TARGET2/T2 infrastructure. Non-bank payment institutions — PIs and EMIs authorised under the ZAG — do not have equivalent direct access. They depend on credit institutions for correspondent-banking services, including the maintenance of safeguarding accounts in which client funds must be held. This structural dependency creates a persistent access asymmetry: non-bank PIs and EMIs are operationally dependent on the willingness of credit institutions to provide and maintain correspondent-banking relationships, and that willingness has been inconsistent across the German market.

PSD3 was designed in part to address this asymmetry. One of its headline access-improvement tools is the optional mechanism allowing payment institutions to safeguard client funds in a central-bank account, rather than relying exclusively on credit-institution accounts or qualifying liquid assets. If operationalised, this mechanism would reduce non-bank PIs' dependency on credit institutions for safeguarding purposes, partially addressing the access asymmetry.

**ECB Scepticism: Decision ECB/2025/2**

ECB Decision ECB/2025/2, issued on 27 January 2025, expressed institutional scepticism about whether central-bank safeguarding accounts could impact overall systemic safety. The ECB's concern appears to centre on the systemic implications of large-scale non-bank PI fund flows being held directly at central banks, which could affect the structure of central-bank balance sheets and the transmission of monetary policy. This is a substantive institutional position, not a procedural objection, and it creates a significant uncertainty about whether the Bundesbank — as the relevant national central bank for German PIs — will in practice offer safeguarding accounts to non-bank PIs under the PSD3 optional mechanism.

The PSD3 text does not require central banks to offer such accounts; the mechanism is optional for central banks as well as for PIs. The ECB's scepticism therefore operates as a practical constraint on the availability of the mechanism, even if PSD3 formally provides for it. For German non-bank PIs and EMIs, this means that the central-bank safeguarding account option — which appeared in the PSD3 text as a potential solution to the correspondent-banking access problem — may not be available in practice, at least not without further clarification of the ECB's and Bundesbank's operational posture.

The Bundesbank's existing arrangements carry conceptual precedent for safeguarding-adjacent structures, but that precedent does not resolve the ECB's systemic-safety concern. The tension between PSD3's access-improvement intent and the ECB's institutional position is unresolved as of this cycle and will need to be watched through the transposition process.

**Implications for German PI/EMI Operating Models**

For German non-bank PIs and EMIs, the practical implication of this tension is that the correspondent-banking access asymmetry is unlikely to be resolved by the central-bank safeguarding account mechanism in the near term. Firms should not plan their safeguarding architecture on the assumption that Bundesbank accounts will be available. The alternative safeguarding routes — credit-institution accounts and qualifying liquid assets — remain the operative options, with all the access-dependency risks that entails.

The coverage gap on DE-specific insolvency-law primary sources for PSD3 safeguarding ring-fencing provisions is noted. The analysis of safeguarding insolvency protection in this module relies on general PSD3/PSR secondary sources; no DE-specific insolvency-law primary source was located this cycle.

Outlook

The ECB-PSD3 safeguarding tension is the primary W12 development to track for Germany. Resolution will depend on the ECB and Bundesbank clarifying their operational posture on central-bank safeguarding accounts during the PSD3 transposition process. Until that clarification is available, the bank versus non-bank access asymmetry in the German correspondent-banking context remains structurally unresolved. The insolvency-law coverage gap is carried forward.