mgfdeutschland(.)com: Bafin warnt vor Website und weist auf Identitätsdiebstahl hin
RegCanary analysis of a BAFIN publication
Why it matters
RegCanary's analysis of what this means for regulated firms.
The site falsely claims affiliation with MGF S.A.S. Zweigniederlassung Deutschland, which has confirmed no connection—indicating identity theft. The warning is based on § 37(4) of the German Banking Act (KWG).
For compliance teams, this is a reminder to verify the authorisation status of counterparties and service providers via BaFin's company database and to monitor for impersonation of your own brand and domain. While the warning targets one website, it underscores broader risks of financial fraud and unauthorised activity. UK and EU firms operating in Germany must ensure they hold appropriate permissions for banking, financial, securities, crypto, or payment services.
Recommended actions: review third-party due diligence and onboarding processes, implement domain monitoring and takedown procedures, and educate clients on verifying authorised providers. The impersonated entity may need to issue a public clarification and report the fraud to authorities. RegCanary suggests treating this as a trigger to test impersonation response plans and consider RegTech solutions for continuous authorisation checks.
No new regulatory obligations arise, but the warning highlights supervisory focus on unauthorised business and consumer protection.
Who this affects
Sectors and firm types identified in the analysis.
- General Regulation
Source
BAFIN
Original publication, 13 October 2026
Read the original publication bafin.deThis is RegCanary's analysis, not the regulator's text. It summarises and interprets the publication above; it is not the BAFIN's original wording, and it is not legal advice. Always rely on the original source.