BaFin Warns Against Unauthorized Banking and Crypto Services Offered via berlinbank(.)eu

Key Takeaways

• BaFin issued a public warning on September 14, 2026, that the operator of berlinbank(.)eu is offering banking and cryptocurrency services in Germany without the required authorization.
• The warning is a reminder that unlicensed activity, impersonation, and online investment fraud remain active threats.
• Compliance teams should use it to refresh screening, monitoring, and customer-protection controls.

Deep Dive

BaFin issued a public warning on September 14, 2026, that the operator of berlinbank(.)eu is offering banking and cryptocurrency services in Germany without the required authorization. The warning is a reminder that unlicensed activity, impersonation, and online investment fraud remain active threats. Compliance teams should use it to refresh screening, monitoring, and customer-protection controls.

BaFin states that the operator of berlinbank(.)eu is offering services such as opening bank accounts and investing in cryptocurrencies without the authorization German law requires. The notice is a warning, not a sanction against an authorized institution. It is published under Section 37 Paragraph 4 of the Banking Act (KWG) and Section 10 Paragraph 7 of the Crypto Markets Supervision Act (KMAG). Those provisions let BaFin inform the public about unauthorized business activity. The notice does not describe any fine, enforcement order, or remediation requirement. It also does not identify the operator beyond the website name, and it sets no deadlines.

For compliance teams, the main relevance is indirect but real. Domains like this are often used for fraud, mule account recruitment, and money laundering. The name "berlinbank" may also lead consumers to confuse the site with a legitimate German institution. Financial institutions may see payments to or from accounts linked to this entity, customer complaints, or attempts to open accounts connected to it. The reference to KMAG shows that BaFin is actively policing crypto-asset service providers operating without a license under the post-MiCA German framework.

Recommended actions:
- Add berlinbank(.)eu and related domains to internal watchlists, adverse media screening, and transaction monitoring rules.
- Review recent transactions, customer onboarding records, and payment flows for links to the domain or entity. Escalate suspicious activity and file suspicious activity reports (SARs) with the Financial Intelligence Unit where warranted.
- Make sure fraud and customer service teams can recognize this scheme and give customers consistent guidance.
- Confirm that counterparty and correspondent due diligence includes verification against BaFin's company database.
- Consider whether brand monitoring is needed if any of your own entities could be confused with the site.

The risk impact is moderate. There is no direct regulatory obligation, but failing to detect and report links to unlicensed operators can create AML exposure, reputational harm, and customer losses. BaFin, the Federal Criminal Police Office (BKA), and state criminal police offices are coordinating warnings on online financial fraud. This signals continued supervisory attention to unauthorized providers and to institutions' roles in detecting related flows. Teams should also verify that customer awareness materials reflect current BaFin fraud guidance.

Source: Federal Financial Supervisory Authority