Crypto account lookup in Germany: FIU freezes of five days

Which topics should we dive deeper into?

Select what genuinely interests you. Your picks feed directly into our editorial planning.

Crypto news that's actually worth your time.

Weekly. 60 seconds. Carefully curated by our editors: no hype, no promo flood, no spam.

Germany's account lookup system is set to cover crypto accounts in future. Under a ministerial draft from the Federal Ministry of Finance (BMF) dated October 28, 2026, crypto exchanges and other crypto-asset service providers would have to feed the master data of their customer accounts into the account lookup procedure under Section 24c of the German Banking Act (KWG). Authorities would then see which platform you hold an account with, since when, and whether it still exists. Balances and individual transactions are not part of this data. In addition, the Financial Intelligence Unit (FIU) would be allowed to have a crypto asset account frozen for up to five working days if money laundering is suspected, and an objection would not stop the freeze.

One point matters for context: this is a draft being coordinated between government departments, not law in force. The new Anti-Money Laundering Act (GwBG) is set to replace the current Money Laundering Act on July 10, 2027. If you hold bitcoin, ether or other coins on an exchange, nothing changes for you until then. Anyone who keeps crypto assets with a provider will, however, be easier for authorities to find, and an account freeze becomes a clearly regulated tool with a fixed maximum duration.

This guide explains which data goes into the account lookup, who may retrieve it, what the tax office actually learns this way and how an FIU freeze works. It is based on the draft as presented by Blocktrainer, the summary by the law firm ADVANT Beiten and the statutes currently in force.

What the BMF draft on the account lookup for crypto accounts provides

The draft is titled "Act implementing the Sixth EU Anti-Money Laundering Directive and strengthening money laundering prevention". It implements the EU anti-money laundering package of May 31, 2024. Its core is the EU Anti-Money Laundering Regulation (AMLR, Regulation (EU) 2024/1624), which applies directly in all member states from July 10, 2027. Added to this are the Sixth Anti-Money Laundering Directive (AMLD6, Directive (EU) 2024/1640) and an amendment to the Financial Information Directive that links national account registers across Europe.

Because most obligations for banks and exchanges will in future come directly from Brussels, the ministry is not proposing an amendment. It replaces the 2017 Money Laundering Act with a new framework law, the Anti-Money Laundering Act (Geldwäschebekämpfungsgesetz, GwBG). It keeps what has to be regulated nationally: authorities, powers of intervention, data access and fines. For crypto investors, three points are decisive.

Account lookup: the procedure under Section 24c KWG is extended to crypto asset accounts and virtual IBANs and connected to the registers of other EU states.
FIU emergency measures: the FIU can have the use of a bank, payment or crypto asset account suspended for up to five working days, and a single transaction for up to ten working days.
Data analysis: in its automated analyses, the FIU may expressly also process addresses of self-hosted wallets.

The change for crypto accounts sits in the Crypto Markets Supervision Act (KMAG). According to the draft quoted by Blocktrainer, it states that "crypto-asset service providers must also transmit master data on crypto asset accounts" into the account lookup procedure under Section 24c KWG. This refers to platforms authorised under the European MiCA regulation. Which providers already hold this licence is shown in our overview of regulated crypto exchanges with a MiCA licence.

Account lookup under Section 24c KWG: the account master data your exchange would report

The account lookup procedure is a central directory of account master data. Under Section 24c KWG, every credit institution in Germany maintains a file system in which it records without delay: the account number, the dates of opening and closing, the first name and surname, address and date of birth of the holder and of every authorised signatory, and the beneficial owner. BaFin, the financial supervisor, can retrieve this data automatically at any time. The law stipulates that the institution must not notice a retrieval.

The same is now set to apply to crypto exchanges. According to the draft, the account ID and the dates of opening and closing would be recorded. One particular point concerns platforms that do not keep a separate blockchain address per customer. Many exchanges hold their customers' coins in shared omnibus wallets and allocate holdings only in their internal accounting. In that case, the internal allocation number would count as the account ID. This means no customer account escapes the register, even if it does not exist on the blockchain as an address of its own.

What expressly does not belong in the account lookup: the balance, holdings of individual coins and account movements. Anyone who finds an account through the procedure therefore knows that it exists and who owns it. An authority only gets the transaction history in a second step, for example through a request for information to the exchange or a court order in criminal proceedings. Separate legal requirements apply to those.

The idea is not new. Banks and savings banks have been feeding this system for many years. According to Finance Ministry statistics reported by Börsen-Zeitung in January 2021, public bodies retrieved account master data via the Federal Central Tax Office around 1.01 million times in 2020, after around 915,000 retrievals the year before. Crypto accounts have so far been a blind spot in this count.

Who may use the account lookup: BaFin, FIU, investigators and tax authorities

The bank or exchange keeps the register itself; only authorities with a legal basis may query it. Under the current Section 24c KWG, these are BaFin for its supervision and the FIU for its tasks under the Money Laundering Act. Via BaFin, public prosecutors and courts, the Customs Criminological Office and the Central Office for Sanctions Enforcement also receive information on request. Private individuals have no access, not even a creditor or an ex-partner.

A second route runs through the German Fiscal Code (AO). Under Section 93b AO, credit institutions must also keep the file system from Section 24c KWG available for retrievals by the tax authorities. The Federal Central Tax Office then retrieves the data on behalf of the tax office. Under Section 93(8) AO, further bodies are added, such as job centres, social welfare offices, student-grant offices and bailiffs.

Whether the draft also expressly extends this tax route to crypto exchanges cannot be read from the excerpts published so far. The draft explicitly amends Section 24c KWG and the KMAG. Section 93b AO currently refers only to credit institutions. For now, the only reliable statement is that supervisors, the FIU and investigators get a direct route to crypto accounts. For the tax office, it remains to be seen what the government bill contains.

What is an account lookup by the tax office under Section 93(7) AO?

The account lookup under Section 93(7) AO is an automated retrieval of account master data that the tax office triggers via the Federal Central Tax Office. It is only permitted in cases defined by law, for example to collect taxes regulated by federal law. In most cases, the tax office may only retrieve data once a request for information to you as the taxpayer has failed or holds out no prospect of success. Under Section 93(9) AO, the office must inform you of this possibility beforehand, usually through information sheets and forms, and notify you of the retrieval afterwards.

What happens during an account lookup?

The result of an account lookup is a list of accounts with holder and duration, not account statements. If an authority finds an account at a crypto exchange this way that never appeared in your tax return, that gives an audit a starting point. It then has to request the amounts separately.

Account lookup, DAC8 and group requests: three routes to your crypto data

Many crypto investors mix up the various reporting channels. The routes interlock, but they deliver different data.

Account lookup (draft): master data. Authorities learn that an account exists at a crypto exchange, who owns it and since when.
DAC8 and the Crypto Asset Tax Transparency Act: transaction data. Under the EU directive DAC8, which implements the OECD's international Crypto-Asset Reporting Framework (CARF), exchanges have been recording their customers' purchases, sales and swaps since January 2026 and will report them to the Federal Central Tax Office from 2027. Details are in our article on DAC8 and the KStTG.
Group requests: tax authorities and the tax investigation service can already demand data from an exchange on a whole group of customers, for example everyone with turnover above a certain threshold.

The account lookup thus closes a gap between these routes. DAC8 covers providers that fall under the reporting obligation and delivers annual figures. The account lookup shows at any time, and without warning to the institution, where accounts exist at all.

For taxation itself, the draft changes nothing. Under Section 23 of the German Income Tax Act (EStG), gains from private disposals of crypto assets are tax-free if more than one year passes between purchase and sale. Within the holding period, gains of up to €1,000 a year remain tax-free under the exemption limit. If you document your purchases, sales and wallet transfers completely, you have the records ready for any query. Crypto tax software and portfolio trackers that combine exchange exports and blockchain data are suited to this.

FIU emergency measure: five working days of account freeze without suspensive effect

The second part of the draft affects you more directly than the account lookup. If the FIU has indications that a transaction is linked to money laundering, terrorist financing or a breach of foreign trade law, it can order emergency measures against the provider. Under Section 51 of the draft act (GwBG-E), two levels are available to it:

Suspend or prohibit a single transaction, for no more than ten working days (Section 51(1) GwBG-E).
Suspend the use of an entire bank, payment or crypto asset account, or the whole business relationship, for no more than five working days (Section 51(2) GwBG-E).

You can lodge an objection against both measures. According to the draft, however, it has no suspensive effect, so the freeze stays in place while the objection is decided. The FIU is also not to be liable for emergency measures (Section 51(8) GwBG-E). If you miss a sale at a better price during those days, the draft gives you no right to claim damages from the authority.

The power itself is not new. Section 40 of the current Money Laundering Act already allows the FIU to prohibit transactions from an account or securities account. What is new is the explicit mention of crypto asset accounts and the time limits. Today, FIU measures end no later than one month after the order or on the fifth working day after the case is handed to the public prosecutor. The draft sets a fixed upper limit of five working days for an account freeze. If the prosecutor wants to hold the funds longer, it then needs its own measures under the Code of Criminal Procedure, such as an asset freeze order.

Monitoring order under Section 52 GwBG-E: crypto transaction monitoring on instruction

Another new tool is the monitoring order. Under Section 52 GwBG-E, the FIU can instruct a provider to monitor transactions on certain accounts or business relationships specifically for a set period and to report on them. The condition is that the persons concerned pose a significant risk of money laundering, related offences or terrorist financing. Here too, an objection has no suspensive effect.

For customers of a crypto exchange, such an order is invisible. The ban on disclosing information, known as the tipping-off prohibition, already forbids providers from informing customers about a suspicious activity report or ongoing proceedings. A support agent who speaks only vaguely of a "compliance review" during a freeze is therefore often following a legal obligation. Our guide on account terminations over suspected money laundering describes which deadlines apply at banks after a suspicious activity report.

As a counterweight, the draft provides for an independent fundamental rights officer at the FIU (Section 48 GwBG-E), not bound by instructions. The officer is to monitor compliance with fundamental rights in the authority's work and flag possible violations. How much impact this post will have can only be judged once it is up and running.

Self-custodied wallets in the draft: what Section 65(5) GwBG-E allows

For advocates of self-custody, one detail in Section 65(5) GwBG-E is of interest. The provision lists the personal data the FIU may analyse with automated applications. Besides names, dates of birth, addresses, email addresses and account IDs of crypto asset accounts, it expressly includes "addresses of self-hosted crypto asset wallets".

This does not create an obligation to register private wallets with an authority. The provision governs what the FIU may do with data it already holds, for example from suspicious activity reports or from the travel rule for crypto transfers. Under that rule, exchanges already record recipients' wallet addresses for withdrawals. The privacy consequence is nevertheless real: once a wallet address is linked to a person, every payment flow of that address can be traced on a public blockchain such as Bitcoin's.

Self-custody therefore protects against a different risk than surveillance. If you hold your coins with your own keys on a hardware wallet, no FIU account freeze at an exchange can affect you, because there is no account a provider could suspend. It does not make you anonymous.

Frozen crypto account: proof of source of funds, objection and release

If your exchange suddenly stops showing withdrawals, it need not be an FIU measure. Internal reviews by the provider are more common, for example after a large deposit or a withdrawal to a conspicuous address. Our article on self-certification at a crypto exchange describes such a case. In both situations, the same documents help.

Keep proof of source of funds ready: a crypto source-of-funds statement shows where the money for your purchases came from and how the coins reached the account. It includes bank statements for the deposit, purchase records from earlier exchanges, tax reports and a list of your wallet addresses. For larger amounts, a confirmation of assets from a tax adviser can also help.
Ask the provider in writing: use a ticket to ask which documents the exchange needs, and submit them in full. Because of the tipping-off prohibition, the provider may not be allowed to give you a reason.
Keep an eye on deadlines: under the draft, an FIU account freeze is to end after five working days, and the freeze of a single transaction after ten working days. If a freeze lasts longer, either another legal basis is involved or a public prosecutor has taken over. At that point at the latest, the case belongs with a lawyer specialising in banking or criminal law.
Know about release for living costs: Section 40(5) of the current Money Laundering Act allows the FIU to release frozen assets on application to the extent that they cover essential living costs or maintenance payments. Whether the draft adopts this rule unchanged has not yet been published.

One practical conclusion holds regardless of the law: if you keep all your crypto assets at a single exchange, you have no access at all during any freeze. Splitting them between a regulated exchange for trading and a wallet of your own for long-term holdings limits this risk.

Timeline for the Anti-Money Laundering Act: cabinet, Bundestag, July 10, 2027

The draft is being coordinated between the ministries. According to ADVANT Beiten, a cabinet decision is planned before the end of the year. After that, the Bundesrat and Bundestag deliberate, and until then a good deal of the wording may change, including the time limits for account freezes. The European deadlines, by contrast, are fixed: the EU Anti-Money Laundering Regulation applies from July 10, 2027, and Germany must have implemented the Sixth Anti-Money Laundering Directive by that date.

A change that many overlook takes effect on the same date. From July 10, 2027, an EU-wide cap of €10,000 applies to cash payments in commercial transactions (Art. 80 AMLR). Payments between private individuals are exempt. The ban on paying for a property in Germany with cash or crypto assets already exists under Section 16a of the Money Laundering Act. The draft transfers it to Section 9 GwBG-E and extends it to the purchase of shares in companies that own property in Germany.

For crypto exchanges, the work starts earlier. Providers have to prepare their customer data so that it can be retrieved at any time by the time the procedure starts, including for accounts without their own blockchain address. Anyone who today holds an account with a provider without German or European authorisation is not covered by this reporting obligation, but loses the protection of European supervision, for example the segregation of customer and company assets.

Crypto account lookup: time to get organised before July 2027

The law will not arrive overnight, but the direction is clear: crypto accounts will become as easy for authorities to find as current accounts, and freezes will get fixed rules. Three steps put you in a good position.

Review your provider: keep your trading holdings on a platform with European authorisation that holds customer funds separately. A selection can be found among the regulated crypto exchanges compared. What MiCA requires of these providers is explained in our overview of the MiCA licence.
Self-custody your long-term holdings: coins you hold for years belong on a hardware wallet of your own, out of reach of an account freeze. Suitable devices are covered in our hardware wallet reviews.
Complete your records: export the history of all exchanges and wallets, including closed accounts, into a tax tool. That way you have proof of source of funds and a tax report from one source when an exchange or the tax office asks. Suitable tools are listed under crypto tax software.

(As of November 9, 2026. This article is not investment advice. Prices and fee structures change; check the terms with the provider before you buy.)

Frequently asked questions about Germany's account lookup for crypto accounts

Under the Federal Ministry of Finance draft of October 28, 2026, crypto exchanges would feed the master data of their customer accounts into the account lookup procedure under Section 24c of the German Banking Act. Authorities would then see account ID, holder and the dates of opening and closing, but no balances and no transactions.

No. The account lookup only delivers master data such as account ID, holder and the lifetime of the account. Transaction data from crypto exchanges reaches the Federal Central Tax Office through DAC8 and Germany's Crypto Asset Tax Transparency Act, for the first time in 2027 for the year 2026.

Under Section 51 of the draft Anti-Money Laundering Act, the FIU may suspend the use of a crypto asset account for no more than five working days, and a single transaction for no more than ten working days. According to the draft, an objection has no suspensive effect.

So far the account lookup for crypto accounts exists only in a ministerial draft that is being coordinated between government departments. The new Anti-Money Laundering Act is set to replace the current Money Laundering Act on July 10, 2027, and a cabinet decision is planned before the end of 2026.

The Finance Ministry draft contains no registration requirement for self-custodied wallets. However, Section 65(5) of the draft act allows the FIU to process addresses of self-hosted crypto wallets in automated analyses if it holds such data.

Transparency note: This article was produced with the assistance of artificial intelligence and reviewed by our editorial team before publication. All figures and claims were checked against the primary sources linked in the text. The feature image was generated with AI.

Which topics should we dive deeper into?

Select what genuinely interests you. Your picks feed directly into our editorial planning.

Crypto news that's actually worth your time.

Weekly. 60 seconds. Carefully curated by our editors: no hype, no promo flood, no spam.

Account terminated over a money laundering suspicion: the three working days cover only the transfer

On October 20, BaFin warned about job offers under which other people's money is to be exchanged for crypto assets through your own account. Those who go along with it often lose their bank account: this guide separates an account block, a termination and the three-working-day deadline in Germany's Money Laundering Act.

October 23, 2026 4:57 PM

South Korea Makes Stablecoins an Official Means of Payment: What the New Rule Really Says

South Korea is rewriting its forex law to classify stablecoins as a means of payment. Crypto Twitter calls it adoption. The fine print says surveillance.

October 21, 2026 7:16 AM

FinCEN crypto fraud report: what 33,904 filings and $12.7 billion actually show

FinCEN reviewed 33,904 suspicious activity filings covering $12.7 billion in activity. Why the data are a warning signal but not a confirmed loss statement.

October 20, 2026 10:27 PM

Ethereum from the Drift hack: the attacker moves up to $61 million into Tornado Cash

Wallets attributed to the Drift attacker forwarded between 13,400 and 25,700 ether to Tornado Cash on October 20 after two quiet months. Around 81,500 ether still sit with the attacker.

October 19, 2026 10:42 PM

Crypto GmbH: 25.6 percent tax from the first sale, nothing privately after a year: what matters now

A crypto GmbH pays 25.6 to 33.3 percent on every gain, from day one. Held privately, the same gain stays tax-free after a year. We work through both routes and show where the GmbH wins regardless.

October 19, 2026 4:34 PM

Loss certificate for crypto ETNs: “must reach the paying agent by December 15 of the current year”

Anyone holding crypto ETNs in a securities account at a German bank and sitting on a loss there has until December 15 to request the loss certificate. After that the loss stays in that one account, even when gains are waiting at a second bank.

October 18, 2026 7:15 PM

“To effectively combat cross-border tax evasion”: Bundestag opens crypto tax reporting to non-EU states

On 8 October 2026 the Bundestag passed the treaty act on the international reporting framework for crypto-assets, opening the exchange of tax data to states outside the EU. This piece sets out which details flow, from when they flow, and what records a data match requires.

October 16, 2026 7:25 PM

Crypto holding period for Bitcoin: “That remains to be seen,” says the finance ministry

The federal cabinet did not adopt the draft abolishing the one-year crypto holding period on October 14, 2026; it is still stuck in inter-ministerial consultation. This overview sets out what applies today, which dates follow and why the December 31, 2026 cutoff has no force of law so far.

October 16, 2026 4:19 PM

NEAR gains 15.9 percent as the confidential SOL vault cites a 5.12 percent yield: what to watch now

NEAR trades at $5.27, 15.87 percent above yesterday's level. The day before, NEAR launched a deposit service for Solana that hides the wallet address and cites an example yield of 5.12 percent. What of it is substantiated, and which EU rules apply to investors in Germany.

October 15, 2026 4:13 AM

Crypto holding period: the cabinet date passes without a decision, December 31 stays the cut-off

Germany's federal cabinet did not adopt the expected decision of October 14, 2026 to abolish the one-year crypto holding period; the draft is still in interdepartmental consultation. Until new rules arrive, gains stay tax free after one year of holding, and the December 31, 2026 cut-off named in the draft separates old holdings from new ones.

October 8, 2026 4:17 AM

Crypto Holding Period: Without a Purchase Record the Tax Withheld Runs Ten Times Too High

The consultation on Germany's crypto tax bill closed on October 6 and the cabinet is to adopt it on October 14, with tax advisers, banks and the Bitcoin Bundesverband having filed their objections. The sharpest concerns everyone whose purchase data the selling platform does not hold: one adviser calculates a withholding ten times the tax owed.

October 6, 2026 10:36 PM

Buying Monero in Germany: six major exchanges no longer list XMR

On October 5, 2026, of eight trading venues checked only two still carry an XMR pair, and neither is open to German customers. MiCA Article 76(3) explains the delistings, and Article 79 of the anti-money-laundering regulation sets the tougher limit from July 10, 2027.

September 30, 2026 4:15 PM

Zcash today: 2,746 ZEC from the Bitget hack vanish into the Ironwood pool

Wallets from the Bitget break-in pushed 2,746 ZEC into Zcash's Ironwood pool on Wednesday morning, roughly $3.9 million. What the shielding means for tracing, and what applies to your exchange account from July 2027.

September 29, 2026 7:12 PM

MEXC Refunds $340,000: The Attacker's API Key Survived the Account Freeze

During an account takeover at MEXC, an attacker created an API key with withdrawal rights that the exchange did not revoke when it restored the account. Twenty-seven minutes after the withdrawal freeze expired, roughly $340,000 was gone.

September 27, 2026 4:20 PM

Bybit's Counterparty List Runs to Over 50 Names: What to Check on Balances, Withdrawals and Custody

Bybit has published a list of more than 50 platforms, services and organisations whose involvement can, under its own rules, lead to an account freeze. What decides the outcome is not your next trade but the payment history you already have.

September 27, 2026 4:11 PM

Ripple Cannot Freeze 83 Million Dollars in Stolen XRP: What to Check in Custody and Deposits

The attacker from the Bitget incident has moved around 83 million dollars in XRP, and Ripple has no technical means to stop it. What can be frozen, what cannot, and why an account freeze also hits investors with no connection to the case.

September 26, 2026 7:29 PM

Coins Stolen in an Exchange Hack: What the German Tax Office Accepts as a Loss

After the attack on Bitget on September 24, a question the reports leave out arises for those affected in Germany: can a stolen balance be written off against tax? The answer hangs on a single term in the Income Tax Act, and it is decided by your records.

September 26, 2026 1:19 AM

Germany’s Crypto Holding Period Is Wobbling: What to Check Before December 31

A CDU member of the Bundestag makes it plain: the coalition agreement does not guarantee that the one-year holding period for crypto assets will survive. What that means for purchases made before the planned cutoff date of December 31, 2026.

September 24, 2026 10:29 AM

Bank Closed Your Account Over Crypto: Your Rights and the Route to a Replacement Account

After a withdrawal from a crypto exchange, banks repeatedly end the banking relationship, usually without giving a reason. What the German Payment Accounts Act guarantees you anyway, which notice period applies, and in what order you approach the supervisor, arbitration and the courts.

September 20, 2026 4:13 AM

Zcash Above $1,500: What ZEC Holders Should Check on Tax and Custody

Zcash rose above $1,500 on September 19 for the first time since 2016 and, after an intraday high of $1,590.80, trades back at around $1,474. For German holders three questions hang on that jump: the one-year holding period, the planned year-end cut-off and the EU anti-money-laundering regulation from July 2027.

September 18, 2026 10:13 AM

Bitcoin and the German Exit Tax: What Applies When You Move Abroad

Anyone emigrating with Bitcoin expects an exit tax on unrealised gains and finds nothing of the sort in the statute. Where the real risks sit is decided at four points: residence, the holding period, the legal form of your investment, and automatic reporting from 2026.

September 11, 2026 1:40 PM

Inactivity Fees at Crypto Exchanges: How to Check Whether Your Dormant Account Loses Money Every Month

Two providers have just raised their rates for dormant accounts, one of them to as much as 52 US dollars a month. Our own survey of 15 fee pages shows why you will almost never find the answer for your account without logging in.

September 9, 2026 7:11 PM

German Crypto Tax Return: Where to Enter Gains, Losses and Staking in Anlage SO

In Germany, crypto gains belong in Anlage SO, and staking and lending go in a separate section of the same form. Which lines of the 2025 form apply, when you do not have to enter anything, how to keep your losses and which deadlines are running now.

September 4, 2026 4:39 AM

Source of Funds at a Crypto Exchange: Why a Deposit Can Freeze Your Account for 15 Days

OKX chief Star Xu described on September 2 what an unusual deposit sets off: reviews of 15 days and longer, during which balances and account functions can be restricted. What that means for investors in Germany, and which documents you should keep to hand.

August 21, 2026 1:26 PM

Crypto Exchange Account Frozen: Why Nobody Tells You Why, and What Actually Helps

If you get no explanation after a freeze, it feels like arbitrary treatment. In fact the German Money Laundering Act forbids the provider from telling you. What happens in that time, which deadlines apply and which documents shorten the process.

August 21, 2026 4:24 AM

Forced Sale on a Crypto Exchange: Which Moment Counts for the Holding Period and What You Must Document

At Luno, Kraken and Valour the deadlines are running out, after which the provider realises the remaining holding itself. For tax purposes that is a disposal, and what governs it is the exchange's timestamp.

August 20, 2026 7:18 AM

Crypto Exchange Self-Certification: No Answer by 1 January 2027 and Trading Stops

The German Crypto Asset Tax Transparency Act obliges crypto providers to obtain a tax self-certification from every existing customer by 1 January 2027. Anyone who ignores the request, the reminder and the formal notice is barred from trading after 60 to 90 days.