The German Transparenzregister — beneficial-owner reporting and discrepancy duties under the GwG

Germany’s Transparenzregister sits in two places in a payment firm’s life at once: the firm has to register its own beneficial owners in it, and — as an obliged entity — it has to consult it and flag discrepancies every time it onboards a German corporate customer. Miss either duty and the fines run to seven figures. Since 2021 the register is a full register: no more relying on the commercial register to speak for you. This piece explains who must report, who counts as a beneficial owner, the obliged-entity duties under the Geldwäschegesetz, and how a payments firm wires both sides into practice.

1. What the Transparenzregister is

The Transparenzregister is Germany’s central register of beneficial owners (wirtschaftlich Berechtigte), established under the Geldwäschegesetz (GwG) — the German anti-money-laundering act — in §§18–26. It implements the EU beneficial-ownership transparency requirements: the idea that behind every company there should be an identifiable natural person, recorded and findable, so that ownership chains cannot hide the people who actually control the money.

Two supervisory facts frame everything below. The register is kept by a designated register-keeping body (the registerführende Stelle), and enforcement sits with the Bundesverwaltungsamt (BVA), the Federal Office of Administration, which issues fines and publishes final penalty decisions on its website — a public naming that is itself a deterrent.

2. Since 2021, a full register

The switch to a full register came with staggered transition deadlines for entities that had previously relied on the fiction:

Those transition windows have long closed. For any entity formed today the duty is immediate: beneficial owners must be reported to the register without undue delay after formation, and updated whenever they change.

3. Who counts as a beneficial owner

Under §3 GwG, a beneficial owner is the natural person who ultimately owns or controls the entity. For a company that means a natural person who:

• holds more than 25% of the capital shares; or
• controls more than 25% of the voting rights; or
• exercises control in a comparable way (for example through agreements, veto rights or a controlling position higher up the ownership chain).

Where, after exhausting all means, no such natural person can be identified, the law falls back to the fiktiver wirtschaftlich Berechtigter (notional beneficial owner) — the legal representatives, managing directors or managing partners of the entity. This fallback is not a licence to skip the analysis; the firm must first genuinely try to find a real owner, document that it could not, and only then report the notional owner. The data reported for each beneficial owner includes name, date of birth, place of residence, nationality, and the nature and extent of the beneficial interest.

4. The obliged-entity duties — why this is a payments-firm issue

A bank, e-money institution, payment institution or crypto-asset service provider is not only a company that must register its own beneficial owners. It is also an obliged entity (Verpflichteter) under §2 GwG, and that adds two duties that touch the register directly:

• Consult the register in customer due diligence. When establishing a business relationship subject to CDD, the obliged entity must, among its verification steps, obtain proof of registration or an extract from the Transparenzregister for the customer entity. The register is a verification input, not a substitute for the firm’s own beneficial-ownership determination.
• Report discrepancies — the Unstimmigkeitsmeldung (§23a GwG). If the beneficial-owner information the firm gathers in its own CDD differs from what the register shows — a missing entry, a different person, a wrong shareholding — the firm must report that discrepancy to the register-keeping body. This is a mandatory duty, not a courtesy, and it is one of the most-missed obligations in practice because it sits at the boundary between the onboarding team and the AML function.

These duties run alongside the rest of the German AML stack — the CDD, monitoring and §43 GwG suspicious-activity reporting obligations a payments firm already carries. BaFin is the AML supervisor for financial-sector obliged entities; the BVA supervises the register itself.

5. Who can see it

Access changed after a 2022 ruling of the Court of Justice of the EU, which held that unrestricted general public access to beneficial-ownership registers went too far. Since then, access is available to competent authorities, to obliged entities in the course of their due diligence, and to members of the public who can demonstrate a legitimate interest — rather than to anyone at all without restriction. For a payments firm the practical point is unchanged: as an obliged entity you retain access for CDD purposes.

6. Three worked examples

Example 1 — registering your own German entity. Facts: an EU payments group incorporates a German GmbH to run local operations. Ownership is spread so that no single natural person holds more than 25% directly or indirectly. Rule: §§18–20 GwG require the GmbH to report a beneficial owner to the Transparenzregister; §3 GwG’s fallback applies where no real >25% owner exists. What the firm does: documents the exhaustive search that found no qualifying natural owner, then registers the managing directors as notional beneficial owners, and files without undue delay after formation. Outcome: the entity is compliant; leaving the entry blank because “there’s no >25% owner” would be the classic error — the fallback exists precisely for that case.

Example 2 — a discrepancy at onboarding. Facts: the firm onboards a German corporate customer. Its CDD establishes that a natural person holds 30% of the shares, but the Transparenzregister extract lists only a different individual at 20%. Rule: §23a GwG requires the obliged entity to report the discrepancy between its own findings and the register. What the firm does: completes its own beneficial-ownership determination for CDD, and separately files an Unstimmigkeitsmeldung to the register-keeping body flagging the mismatch. Outcome: the firm meets both duties; treating the register entry as authoritative and skipping the discrepancy report is a supervisable failing.

Example 3 — no entry at all. Facts: during onboarding, the firm finds the customer entity has no Transparenzregister entry whatsoever. Rule: a missing entry is itself a discrepancy under §23a GwG, and the firm cannot complete CDD without establishing the beneficial owner independently. What the firm does: establishes and verifies the beneficial owner through its own means, files the discrepancy report, and applies its risk policy to the gap before deciding to proceed. Outcome: the relationship is either properly documented or declined — the absence of a register entry is a red flag to act on, not a reason to wave the customer through.

7. How a payments firm operationalises both sides

• Register your own entities first, and keep them current. Every German legal entity in the group needs a live, accurate entry; changes in ownership or directors trigger an update duty. Put the entry on a change-controlled register alongside your corporate housekeeping.
• Build the register check into onboarding, not around it. The extract pull should be a step in the CDD workflow for German corporate customers, captured as evidence, with a date and a copy retained.
• Make the discrepancy report a routed task. When CDD findings and the register diverge, the workflow should generate an Unstimmigkeitsmeldung task with an owner — this is where the duty is lost when it lives only in an analyst’s head.
• Don’t treat the register as the source of truth. Your own beneficial-ownership determination governs CDD; the register is a cross-check that produces discrepancy reports, not a shortcut around your own analysis.
• Watch the fine exposure. Violations — non-registration, late or incomplete filing, or failing to report discrepancies — carry administrative fines of up to €150,000, rising to up to €1 million (or twice the economic benefit) for serious, repeated or systematic breaches, with final decisions published by the BVA.

8. FAQ

9. What to do, today

• Confirm every German legal entity in your group has a current, accurate Transparenzregister entry — and a process to update it when ownership or directors change.
• Where no >25% owner exists, make sure the notional beneficial owner is registered and the search that justified it is documented.
• Add the register-extract pull as an evidenced step in your German corporate-onboarding CDD workflow.
• Route Unstimmigkeitsmeldungen as owned tasks whenever CDD findings and the register diverge, including missing entries.
• Keep the register check subordinate to your own beneficial-ownership determination — the register cross-checks, it does not decide.

Related: Spain’s beneficial-ownership register (RTR) · §43 GwG suspicious-activity reporting · EMI licence in Germany (BaFin, ZAG) · AML representative across the EU