BaFin Warns Against Unauthorized Crypto Services Offered on 37mh.com

Key Takeaways

• BaFin has issued a public warning against the website 37mh(.)com, which is offering cryptocurrency services in Germany without the required authorization and falsely claiming BaFin supervision.
• This serves as a reminder to compliance teams of ongoing enforcement against unlicensed crypto operators and the importance of verifying regulatory claims made by third parties or counterparties.

Deep Dive

This action is a standard supervisory warning issued under Section 10 Paragraph 7 of the Crypto Markets Supervision Act, through which BaFin publicly identifies entities offering financial services—in this case, cryptocurrency services—without the required license. The website in question lacks a valid legal notice (Impressum) and falsely claims to be under BaFin supervision, both of which are hallmarks of fraudulent or unauthorized financial operations targeting German consumers and potentially cross-border investors.

For compliance teams, this warning underscores the critical importance of due diligence when onboarding counterparties, partners, or payment processors connected to cryptocurrency platforms. Firms with German operations or German clients should ensure their own licensing status is current and correctly represented, and should cross-check any third-party claims of BaFin authorization against BaFin's official company database before entering into business relationships.

No specific compliance deadline is attached to this warning, as it is informational and enforcement-driven rather than a new rule or policy change. However, it reflects BaFin's continued vigilance under Germany's Crypto Markets Supervision Act and signals that unauthorized crypto service providers remain a supervisory priority. Institutions should treat such warnings as part of an ongoing watchlist process rather than a one-time event.

Recommended actions include: (1) incorporating this and similar BaFin warnings into AML/fraud monitoring and vendor due diligence processes, (2) training customer-facing staff to recognize and report inquiries related to unauthorized platforms, (3) advising retail clients or counterparties who may have exposure to this website, and (4) maintaining updated screening against BaFin's warning list and company database as part of routine third-party risk management.

The risk implications are primarily reputational and consumer-protection related for institutions that might inadvertently process transactions linked to this website, as well as potential AML exposure if funds flow through unauthorized crypto channels. While the direct impact on regulated financial institutions is likely minimal, this case reinforces the broader regulatory expectation that firms actively monitor and screen for unauthorized financial service providers operating in their markets.

Source: Federal Financial Supervisory Authority