← Embedded Finance Index 2026

BaFin

“Can a post-Wirecard supervisor keep pace with embedded finance, BaaS and crypto while preserving Germany's status as a fintech-friendly market?”

Founded2002
HQBonn and Frankfurt, Germany
IndustryRegulator / Financial Supervisory Authority
The story

BaFin is Germany's integrated financial supervisor, not a fintech. Created in 2002 by merging Germany's banking, insurance and securities regulators, it supervises ~2,700 banks, 800 financial services institutions and 700+ insurers. Post-Wirecard (2020), BaFin reorganised toward more intrusive supervision of fintechs and BaaS providers — landmark actions include the N26 growth cap and the €6.5m Solaris AML fine. Under PSD2 it is the gatekeeper for German AISP/PISP, EMI and payment-institution licences, making it a structural counterparty to virtually every embedded-finance stack operating in Germany.

Last 12 months
2025-11
2024-05
2024
Product timeline
2002
BaFin established by merger of Germany's three federal supervisory offices for banking, insurance, and securities trading.· founding
2018
Implemented PSD2 in Germany via the Payment Services Supervision Act (ZAG), licensing AISPs and PISPs.· regulation
2020
Wirecard scandal triggered overhaul of BaFin's supervisory approach and stricter scrutiny of fintechs.· regulation
2021
Imposed growth cap on N26 (50,000 new customers/month) for AML deficiencies.· enforcement
2024
Fined Solaris SE €6.5m for delayed SARs; lifted N26 growth cap effective June 2024.· enforcement
2025
Granted NaroIQ subsidiary NaroAM investment-firm authorisation for ETF infrastructure platform.· licensing
The stack
0 layers disclosed in BaFin’s embedded-finance stack
Accounting gap: none