← Back to regulators

🇩🇪Germany · EU member

Bundesanstalt für Finanzdienstleistungsaufsicht

BaFin · Financial supervisory authority
Bonn / Frankfurtwww.bafin.de
Compare with another regulator
Activity Index
88/ 100
ProlificMethodology →

FY2025 · as of 31 December 2025Published figures unless marked

Employees3,084FY2025
Annual budget€514.7Mactual expenditure
Supervised entities2,415institutions

Overview

BaFin is the EU's largest national financial supervisor — 3,084 staff, fully levy-funded and independent of the federal budget, overseeing Europe's biggest financial market and, under MiCAR, more crypto-asset service providers than any other EU authority. In 2025 it fielded 951 licence enquiries, imposed roughly €81 million in fines, and dismantled more than 1,400 fraudulent domains in a single joint cybercrime operation. Everything below is BaFin's own data, from its Jahresbericht 2025.

Regulated sectors

8
BanksPayment institutionsE-money institutionsCrypto-asset service providersInvestment firmsAsset managersInsurance companiesSecurities markets

Figures as published by Bundesanstalt für Finanzdienstleistungsaufsicht for FY2025. Source: BaFin Jahresbericht 2025 (German). Data as of 31 December 2025.

Leadership

2
Mark Branson

Presidentsince 2021

Nikolas Speer

Executive Director, Banking Supervisionsince 2025

Full board

Organisation (FY2025)

Employees
3,084As at 31 Dec 2025; 192 hired during the year, 36 seconded to international institutions
Actual expenditure
€514.7m2024: €514.1m; fully levy-funded — planned income €520.5m from supervised firms plus €20.7m in fees
Levy split
Banks & financial services 47.7% · insurance 24.8% · securities 19.5%Resolution 5.2%, financial reporting control 2.8% (2024 levy base)

Activity 2025

Supervised institutions
2,415
Licence enquiries received
9512024: 833
Published measures
151
Fines imposed
~€81m
Estimate
New unauthorised-business cases
1,6452024: 1,325; 13 premises searched with police support
Licensed asset managers (KVGen)
145All audited; 16 special audits ordered
Financial reporting control
50 procedures closed429 companies in scope; errors found and published in 14 cases

Notable 2025

Operation Herakles
With the Karlsruhe cybercrime centre and state criminal police: over 1,400 fraudulent domains taken down in October, over 3,500 phone numbers disconnected in December
Strategic goals 2026–2029 (June 2025)
Complexity reduction, proportionality, stronger risk orientation
DORA applicable from 17 January 2025
BaFin retired its own IT circulars to avoid double regulation
Insurer licence revoked
March, following insolvency; a new-business ban had been imposed immediately upon notification
"Pop-up Embassy" walk-in format for fintech founders
Continued

Key legislation

4
KWG (Kreditwesengesetz)

Banking Act — the German transposition of CRD/CRR

ZAG (Zahlungsdiensteaufsichtsgesetz)

Payment Services Supervision Act (PSD2)

KMAG (Kryptomärkteaufsichtsgesetz)

MiCA implementation

WpHG

Securities Trading Act (MiFID II)

Registers, portals and publications

Application portals

MVP Portal

Recent publications

BaFin Jahresbericht 2025 (German)2026-05-12Annual Report 20242025-05-16
Data as of 31 December 2025 · Source: www.bafin.de (authority website) + ComplyBridge researchActivity Index methodology →