BaFin Warns Against Unauthorized Financial and Crypto Offers on schelhammer-systems(.)com

Key Takeaways

• BaFin has issued a public warning about schelhammer-systems(.)com, whose unknown operators are suspected of offering banking, financial, and cryptocurrency services in Germany without the required authorization.
• The warning is a consumer-protection and fraud-prevention signal.
• Compliance teams should treat it as a trigger to update screening lists, monitor for related payment flows, and reinforce fraud awareness.

Deep Dive

BaFin has issued a public warning about schelhammer-systems(.)com, whose unknown operators are suspected of offering banking, financial, and cryptocurrency services in Germany without the required authorization. The warning is a consumer-protection and fraud-prevention signal. Compliance teams should treat it as a trigger to update screening lists, monitor for related payment flows, and reinforce fraud awareness.

The legal basis is Section 37 Paragraph 4 of the Banking Act (KWG) and Section 10 Paragraph 7 of the Crypto Markets Supervision Act (KMAG). These provisions let BaFin publicly identify companies suspected of conducting unauthorized business. The notice introduces no new requirements and sets no deadlines. The warning takes effect on publication (September 11, 2026), and no compliance filing or implementation period applies. BaFin also directs the public to its company database for verifying authorization status. It further references joint warnings with the Federal Criminal Police Office (BKA) and the state criminal police offices about online financial fraud.

For compliance teams, the primary exposure comes from customers who may send funds to this entity, or from accounts used to receive proceeds. Such activity may be a sign of investment fraud, a typical predicate offense for money laundering. Recommended actions:
- Add the domain and related names to adverse media and watch lists.
- Review transaction monitoring rules for payments or crypto transfers linked to the entity.
- Check whether any customers have transacted with it.
- Escalate suspicious activity, and file suspicious activity reports with the Financial Intelligence Unit where thresholds are met.
- Brief frontline and fraud staff to recognize scam patterns and to warn customers who attempt to make such payments.

The overall risk impact is moderate. The direct regulatory burden is low, but fraud losses, customer harm, and AML exposure could be significant if institutions overlook these flows. Institutions should also review their own marketing and onboarding controls to confirm that no affiliate or third-party channels reference the site. Because the operators are unknown, related domains or rebranded sites are likely, so monitoring should extend beyond the single URL. Teams should keep records of the actions taken in response, to show an effective control environment.

Source: Federal Financial Supervisory Authority