In 2017 BaFin used its product intervention powers to prohibit the marketing, distribution and sale of contracts for difference to retail clients in Germany where the client could lose more than the money in the account. The rest of the EU followed a year later with the ESMA measures. The order of events matters for anyone reading German regulatory history: the negative balance rule was a German position first, and BaFin has kept it in place through every later revision.
BaFin is the Federal Financial Supervisory Authority. It supervises banks, insurers, investment firms and securities markets under one roof, and it works alongside the Bundesbank on prudential supervision of credit institutions. For a CFD broker the relevant statutes are the KWG, the German banking act, and the WpHG, the securities trading act, which carries the German implementation of MiFID II conduct rules.
What kind of authorisation a broker actually needs
A firm that deals in CFDs for its own account against clients is doing more than passing orders on. In German terms that is proprietary trading or dealing on own account, and it sits inside the licensable activities under the KWG. A firm that only receives and transmits orders to a third party sits lower down the ladder. The difference decides your capital, your reporting and how much of the German supervisory machinery applies to you.
Most non-German brokers serving German clients never apply to BaFin at all. They hold a licence in another EEA state, usually Cyprus, and passport in under the EU passporting regime. That is legitimate. It also means BaFin remains the host supervisor for conduct in Germany, so German marketing rules and German product intervention still bite even though the licence file sits in Nicosia. Firms that assume the home licence exempts them from German rules find out otherwise when a complaint reaches Bonn.
Third country firms without an EEA licence have a much narrower path. Serving a German retail client from outside the EEA on your own initiative is not a grey area, and reverse solicitation is far more limited than the marketing decks suggest. Read the MiFID II framework before you plan a German launch on the assumption that inbound clients are free to serve.
The product rules that shape the account
The German requirements a retail account must satisfy line up closely with the pan-EU measures, with the negative balance element having arrived earlier:
- No liability beyond the funds in the trading account. Negative balance protection is account level, not position level, and it must be real rather than a discretionary write-off after the fact.
- Leverage caps by asset class under the ESMA leverage limits, which BaFin applies in Germany.
- A standardised risk warning with the percentage of retail accounts that lost money at the firm, refreshed on the firm's own data.
- Margin close-out at 50 percent of required margin, calculated across the account.
- No monetary or non-monetary inducements to trade, which is where deposit bonuses die. See the bonus ban for how that plays out operationally.
Binary options are a separate matter. BaFin prohibited their marketing, distribution and sale to retail clients in Germany, and that prohibition has no expiry attached to a renewal cycle the way early CFD measures did. A firm planning a product mix should treat binaries as closed in Germany rather than as a licensing question.
Marketing, language and the complaint route
German conduct supervision pays close attention to how a product is presented. Advertising that emphasises returns while burying risk gets treated as unfair, and the risk warning is not decoration you can shrink into a footer. Affiliates count. If a partner running German language traffic publishes a page promising monthly income from CFD trading, the licensed firm answers for it. Our view is that any firm entering Germany should review affiliate creative in German before it goes live rather than after, because the supervisor and the trade press both read German faster than your compliance team does.
Complaints are also different in character. Germany has a well developed consumer protection sector, and disputes escalate through ombudsman schemes and consumer associations rather than dying in a support queue. Documented, timestamped records of what the client saw at sign up, what they agreed to and what the system did at close-out are the only defence that survives that process. This is a records problem before it is a legal one, which is why audit trails deserve architecture time.
Reporting and ongoing supervision
A BaFin licensed investment firm files regular prudential and conduct reporting, maintains an approved management body with demonstrated professional suitability, and undergoes an annual audit by a statutory auditor whose report goes to the supervisor. Transaction reporting runs under the EU regime, so MiFIR reporting obligations apply on the same terms as elsewhere in the EU, with German language correspondence as the practical default.
Management suitability is worth its own line. BaFin assesses individual directors before appointment, looks at prior roles and at time commitment, and it has refused appointments. Building the German entity around a nominee director who also sits on eight other boards is a plan that fails at the first review.
How to judge whether Germany is worth it
Germany has a large, wealthy retail base with a long trading culture and one of the most sceptical financial press environments in Europe. The clients are good. The cost of entry is a licence or a passport plus real German language operations: support, documents, complaint handling and marketing review. A firm that cannot staff German language support should not be running German ads, whatever the passport permits on paper.
For firms comparing entry points across Europe, the arithmetic in broker licence costs compared sets the frame. Germany is rarely the cheapest first licence. It is frequently the right second one once the operating model has proven itself somewhere with a lighter supervisory load, and the systems behind it, from onboarding to reporting, need to be built for that step rather than retrofitted. That is the part a broker CRM either supports or quietly blocks.
"Germany is not a market you enter by translating your website. The supervisor reads your product terms first, and if the terms allow a client to owe you money, nothing else in the file matters."
— Roman Onta, Executive Director, SINGUARD
Key Takeaways
- BaFin prohibited retail CFDs without account level negative balance protection in Germany before the ESMA measures applied across the EU.
- Dealing on own account against clients is a licensable activity under the KWG, and it carries heavier obligations than order transmission.
- Passporting in from another EEA state is legitimate, but German marketing rules, product intervention and complaint routes still apply.
- German language support, documents and affiliate review are operating requirements in practice, not optional polish.
Frequently Asked Questions
Is BaFin approval required to accept German clients?
Not always. A firm licensed in another EEA state can passport its services into Germany without a separate BaFin authorisation. It still has to follow German conduct and product rules, and BaFin acts as host supervisor for those. A firm outside the EEA generally cannot serve German retail clients without an EEA licence.
Are CFDs legal in Germany?
CFDs may be offered to German retail clients where the product cannot create a liability beyond the funds in the account, and where leverage caps, margin close-out and the standardised risk warning are respected. Binary options are prohibited for retail clients.
Does BaFin allow deposit bonuses?
No. Monetary and non-monetary inducements to trade are not permitted for retail CFD clients under the applicable rules, so deposit bonuses, cashback tied to volume and similar promotions are off the table for German retail.
About the Author
Roman Onta is an Executive Director at SINGUARD. He builds the Prop Firm CRM, the Broker CRM, Scalegram and CopySignals side by side with his brother Alex Onta, and he helped on the design of eTrader, the division Alex built and leads. His ground is worldwide payment processing, AML compliance and the corporate structures brokers are built on, work the two of them carry together, shaped by executive roles in the UAE and international corporates. He lives and works in Dubai for most of the year. Meet the executive duo leading Singuard's five divisions.