Germany's Crypto Accounts Would Join Automated AML Inquiries

Germany’s Federal Ministry of Finance wants crypto-asset accounts connected to the country’s automated anti-money-laundering inquiry system by July 10, 2027.

The ministry published the draft on Oct. 28. A consultation period ends Nov. 19. The document remains a draft, and its proposed implementation date could still change.

The proposal starts with a narrow bundle of records: account holders’ identities, account identifiers, and opening and closing dates. Crypto-asset service providers would supply those details as part of the automated inquiry system.

That is not the same as a blanket demand for transaction histories. The draft specifies account-level information for the inquiry system. It does not say authorities would continuously monitor every crypto account.

The draft authorizes the FIU to order targeted monitoring of “specified accounts” where there is a “significant risk” of money laundering, related crimes or terrorist financing.

The mechanism has two stages. First, providers submit identity and account data. Second, Germany’s Financial Intelligence Unit orders monitoring of specified accounts, and exchanges and other institutions report the results.

What does this change for crypto providers?

Compliance officers would need to treat the account file as a long-lived compliance record. It would contain the customer’s identity, the account identifier, and the dates that define when the relationship began and ended.

The retention requirement would last 10 years after an account closes. Providers would have to keep the information for a fixed period after closure, rather than release it when the customer relationship ends.

That distinction shapes both recordkeeping and system design. A provider would need searchable records that remain available for the full post-closure period, even if the account no longer appears active.

It also differs from a one-off response to an information request. Connecting crypto accounts to an automated inquiry system creates a standing channel for specified requests, while the FIU monitoring power adds a separate risk-based workflow.

“Targeted” is the operative word. Monitoring would follow an order focused on specified accounts and a stated significant-risk basis. Exchanges and other institutions would then have to return the results, creating a defined handoff between account records, surveillance and reporting.

For providers, the practical task is connecting those workflows without losing the distinction between routine data submission and a risk-specific monitoring order. The draft provides the categories of data and the reporting obligation, but its summary does not set out operating procedures.

That distinction matters because the draft names account-level fields rather than transaction-level ones. Providers would need to map those fields across internal systems without treating every inquiry as an opportunity for broader disclosure.

The published proposal summary does not announce transaction reporting, customer transaction limits, asset freezes or penalties. Its stated focus is identity and account data, targeted monitoring and the reporting of results.

For exchanges and other institutions, the preparation burden would extend beyond collecting names. They would also need a documented path for handling an FIU monitoring order and returning its findings.

The dates define the sequence. Publication came first, consultation remains open through Nov. 19, and implementation would follow on July 10, 2027.

The next fixed date is Nov. 19, when the consultation closes. If the draft advances unchanged, July 10, 2027 would become the implementation deadline for Germany’s new crypto-account inquiry and monitoring workflows.