EU Passporting in Practice: From Notification to Operations

On paper, EU passporting is the most elegant idea in financial regulation: one authorisation, twenty-seven markets. In practice, the passport gets you through the door — and everything that determines commercial success happens after the door.

The mechanism itself is straightforward. A firm authorised in one member state — as a credit institution, payment institution, e-money institution, investment firm, or CASP under MiCA — can provide its services across the Union either on a freedom-of-services basis (cross-border, no local presence) or through the freedom of establishment (a branch or, in the payments world, agents and distributors). The home supervisor notifies the host supervisor; depending on the regime, this takes from around two weeks (crypto-asset service providers under MiCA) to roughly three months (payment institutions under PSD2); no second authorisation is required.

For a fintech planning DACH coverage from an EU hub, this is the architecture that makes a single licensing project economically rational. It is also where planning errors begin, because teams routinely read “no second authorisation” as “no second workstream”. The host market disagrees.

What the Passport Does Not Cover

• Conduct and consumer rules. General-good provisions, consumer-credit specifics, and national marketing rules apply locally. German consumer protection expectations differ from the home market's, and the burden of knowing them is yours.
• Language. Contracts, pre-contractual information, and complaints handling in Germany effectively require German. A passport does not translate your terms and conditions.
• AML obligations. Agents, branches, and certain distribution setups trigger local AML registration and reporting duties — including, in Germany, the interface to the FIU and, where applicable, a central contact point.
• Tax and employment. Permanent-establishment risk, VAT treatment, and local hiring rules sit entirely outside the passporting framework.
• Supervisory attention. Host authorities retain real powers — BaFin can and does intervene against passported firms whose local conduct raises concerns.

“

The passport is a legal key, not a commercial strategy. It opens the German market in weeks — and leaves you exactly as unknown, unranked, and untrusted as you were the day before.

Services or Establishment? The Question That Shapes Everything

The choice between cross-border services and a local establishment is less a legal question than an operating-model decision. Pure cross-border service provision keeps costs low and governance simple, but it caps distribution: German corporate clients expect local account management, procurement departments favour local contracting entities, and some partner banks treat services-only setups as elevated risk. A branch — or an agent network under PSD2 — creates local substance and local obligations in one move: registered agents must be vetted and notified, branches trigger fuller host-state AML expectations, and the home supervisor will ask how the head office controls what happens abroad.

For B2B fintechs entering Germany, there is much to be said for a staged pattern: launch cross-border to validate demand, then establish substance — sales presence first, regulatory establishment where product economics justify it. The inverse pattern, building a branch before revenue, mostly produces fixed costs and supervisory questions.

The Notification File Is a Quality Signal

Passport notifications are often delegated to the most junior person in the compliance team, on the theory that they are administrative. That theory is wrong. Host supervisors read notifications — the business description, the target clients, the volumes forecast — and inconsistencies surface later at the least convenient moments: during an audit, a partner-bank onboarding, or an intervention inquiry. A notification that says “no agents” while the website lists German distribution partners is a small document with large consequences.

The same discipline applies to updates. Material changes to services, volumes, or distribution setups require fresh notifications, and the gap between what was notified years ago and what the firm actually does today is one of the most common findings when passported firms get reviewed.

Switzerland: The Passport Stops at the Border

No EU passport reaches Switzerland. Serving Swiss clients means analysing FINMA's regime separately: purely cross-border business without a presence in Switzerland is in many cases possible without a FINMA licence; a branch, a representative office or staff working permanently in Switzerland triggers the licensing requirement, and financial services to Swiss clients come with the conduct and adviser-registration duties of the Financial Services Act (FinSA). Firms that treat Switzerland as “basically the EU with mountains” discover the difference in their legal bills. The practical approach is to segment the DACH plan: EU passport for Germany and Austria, a dedicated Swiss analysis with its own timeline and, often, its own product configuration.

Agents, Distributors, and the German Specifics

In the payments world, the establishment question often resolves into an agent network — and agents are where passporting meets the ground. A registered agent acts under the principal's licence and on the principal's liability: their conduct is your conduct, their AML failures are your findings. Germany adds its own texture — expectations around a central contact point for firms operating through local agents or distributors, German-language complaint handling, and FIU reporting lines that must function in practice, not just in the manual. E-money distributors, technically distinct from agents, raise parallel questions with their own registration logic.

The management lesson from the passporting cases of the past decade is unambiguous: agent networks scale distribution and risk at the same coefficient. The firms that thrive run agent oversight like a franchise system — selection criteria, training, monitoring, and exit mechanics — while the firms that stumble treated the register entry as the end of the process.

Choosing the Home State After Brexit

The relocation wave that followed the United Kingdom's exit rewrote the passporting map: Dublin, Amsterdam, Luxembourg, Vilnius, and Frankfurt each captured cohorts of licence seekers, and the choices those firms made are now a natural experiment in home-state selection. The observable pattern: speed of authorisation matters less over a decade than depth of supervisory relationship, talent availability, and credibility spillover onto the brand. A licence from a supervisor renowned for rigour is a sales document in the German enterprise market; a licence from a jurisdiction perceived as a shortcut invites exactly the due-diligence questions it was meant to avoid.

For firms designing their European structure today with DACH revenue as the goal, that argues for weighting the home-state decision toward supervisory reputation and operational fit — and treating headline processing times as the least durable variable in the equation.

A Sequencing Blueprint

1. 01Map every target service against the passportable activity catalogue of your licence — mismatches here invalidate the whole plan.
2. 02Decide services vs. establishment per market based on distribution reality, not legal elegance.
3. 03Prepare host-market compliance packs: language, consumer rules, complaints, AML interfaces.
4. 04File notifications with the same care as the original application; keep them current.
5. 05Run Switzerland as a separate project with FINMA-specific analysis.

Conclusion

Passporting compresses the regulatory cost of multi-market Europe like nothing else in global finance — and it rewards firms that understand exactly where its coverage ends. The winners plan the host-market workstreams with the same seriousness as the original licence. Aegiron Capital Group supports fintechs in structuring DACH market entry on an EU passport — from notification strategy to host-market operating readiness; legal advice comes from the law firm you engage.