BaFin (Federal Financial Supervisory Authority)

The Federal Financial Supervisory Authority (BaFin) is Germany's integrated financial supervisor. It was created on 1 May 2002 under the Financial Services Supervision Act (FinDAG), merging the three predecessor regulators for banking, insurance and securities. BaFin is a federal public-law institution with offices in Bonn (administration, insurance and securities supervision) and Frankfurt am Main (banking supervision, anti-money laundering).

With more than 2,700 staff and an annual budget of roughly €410 million, BaFin is the largest financial regulator in the German-speaking world — several times the size of Austria's FMA, reflecting the gap between the two financial centres. It oversees around 1,500 credit institutions, 525 insurers, 50,000 insurance intermediaries, every listed issuer in Germany and — since 2020 — crypto custodians, with MiCA-regulated crypto-asset service providers added in December 2024.

BaFin has been led since August 2021 by Mark Branson (President), appointed after the Wirecard scandal with a mandate to overhaul the supervisory architecture. Legal oversight of BaFin sits with the Federal Ministry of Finance.

Mandate and powers

BaFin is organised into five divisions:

• Banking supervision: jointly with the Deutsche Bundesbank, embedded in the ECB's Single Supervisory Mechanism for the 21 significant German institutions (Deutsche Bank, Commerzbank, DZ Bank and others).
• Insurance and pension fund supervision: solvency review under Solvency II.
• Securities supervision / asset management: market abuse (MAR), prospectus review, fund authorisation under the KAGB.
• Resolution: recovery and resolution planning for systemically important banks.
• Anti-money laundering: central point of contact under the Money Laundering Act (GwG).

For market manipulation or insider dealing, BaFin can impose administrative fines of up to €15 million or 15% of group revenue. In serious cases it can remove senior managers, withdraw licences or order moratoria — as it did in 2022 against several crypto exchanges and in 2023 against North Channel Bank.

A real-world example

In August 2024 BaFin fined a mid-sized Frankfurt asset manager €1.8 million for inadequate anti-money-laundering compliance. Several high-risk client relationships had been poorly documented for years, and internal suspicious-activity reports were never filed. BaFin also installed an external special commissioner for twelve months to oversee the rollout of new compliance processes. Sanctions of this kind are published in BaFin's quarterly sanctions register.

Common questions

How does BaFin differ from the Deutsche Bundesbank? BaFin is the supervisory authority with statutory powers; the Bundesbank runs ongoing analysis, conducts on-site inspections and represents Germany in the Eurosystem. The two institutions work closely together on banking supervision under a formal "supervisory directive".

What changed after the Wirecard scandal? The 2021 Financial Market Integrity Strengthening Act (FISG) transferred balance-sheet enforcement to BaFin, raised the upper limit on fines and broadened its powers for forensic special audits.