Germany is the third-largest crypto-scam victim country in the world by dollar volume — and yet the reporting system is fragmented across federal, state, and EU regulators. This is the order that actually works.
Stunde 1: bleeding stoppen
Stop sending. Refuse the "tax", "AML-Gebühr", "Auszahlungsverifizierung" — these are the second slaughter. Screenshot the full chat, dashboard, wallet addresses, names, and phone numbers before blocking.
Stunde 1–24: die vier Meldungen
### 1. Your bank — call the Sperrhotline
Call your bank's fraud line (not general support) and request a SEPA recall or wire recall on any payments in the last 48–72 hours. German banks operate under the EU PSD2 framework — when a payment was authorised under fraud (Authorised Push Payment fraud), banks are increasingly being held liable by the BGH (Federal Court of Justice) for failing to detect obvious red flags. Use the phrase *"Ich melde einen Betrugsfall und fordere die Rückbuchung"* and get the Vorgangsnummer in writing.
### 2. Your local police — *online Strafanzeige* via your state portal
Each Bundesland has an online Strafanzeige portal (Online-Wache). File at: - NRW → polizei.nrw → Online-Wache - Bayern → polizei.bayern.de → Online-Wache - Berlin → internetwache-polizei-berlin.de - Hamburg → polizei.hamburg → Online-Wache - Other Länder: search *"Online-Wache [Bundesland]"*
The Strafanzeige is required for the criminal case file. Get the Aktenzeichen — every subsequent filing will reference it.
### 3. BaFin — bafin.de/scam-platform-report
Report the platform via BaFin's unerlaubte Geschäfte (unauthorised business) form. This is what lands the platform on BaFin's public Investorenwarnung list — the single highest-traffic German-language warning page for scam brokers. This protects the next German victim.
### 4. The receiving exchange's compliance team
Trace the wallet on a block explorer to identify the exchange. Email compliance@, legal@, or law.enforcement@ with your Aktenzeichen. EU-MiCA-registered exchanges (Bitvavo, Coinbase Germany, Kraken EU, Bitpanda) move fastest because they have a regulated incentive to cooperate.
Tag 2–7: ergänzende Meldungen
- SCHUFA fraud lock — for identity-theft protection if the scammer has your ID/passport details.
- Verbraucherzentrale (verbraucherzentrale.de) — consumer-protection support and free initial legal advice, especially useful in NRW, Bayern, and Baden-Württemberg.
- The platform where contact began — Tinder, Hinge, Bumble, Facebook, Instagram, WhatsApp, LinkedIn. All have German fraud-reporting forms.
- GACS — gacs.app/report. Adds the platform, wallets, and phone numbers to the public blacklist serving German searches.
Die Steuer-Abschreibung
German victims of a fraudulent "investment" can typically claim losses under §23 EStG (private Veräußerungsgeschäfte) if the asset was held under one year, or as a Werbungskosten / Verlustabzug depending on the structure. For pure-fraud cases where no real asset ever existed, the Bundesfinanzhof has accepted total-loss claims in the year the fraud was discovered, supported by the Strafanzeige Aktenzeichen.
The treatment is more favourable for investment-style scams than for pure consumer fraud — talk to a Steuerberater with crypto-loss experience before filing. The recovery is typically 25–42% of the loss at marginal tax rates.
Was *nicht* funktioniert
- "Recovery-Anwälte" who contact you on WhatsApp/Telegram. 100% are the second scam. Real German lawyers do not cold-contact fraud victims.
- Filing only with the local Polizei via Streifenwagen — the online Strafanzeige is more useful because it routes to the LKA's cybercrime unit (ZAC) directly.
- "Die EU wird mein Geld zurückholen" — neither MiCA nor ESMA has direct recovery powers. They drive enforcement against the platform, not refund of your funds.
Die 72-Stunden-Regel
The SEPA recall window and the LKA's ZAC first-response window are both calibrated around 72 hours. Bank fraud line, Strafanzeige, BaFin, exchange — all four inside three days. Recovery rates outside the window collapse to almost zero.