BaFin warning from February 2026 – content and legal significance

On February 6, 2026, the BaFin A consumer notice pursuant to Section 37 Paragraph 4 of the German Banking Act (KWG) was issued, explicitly warning against blue-invest.org. The financial supervisory authority determined that the operators are offering banking services, financial services, and cryptocurrency services without the required authorization in Germany.

In Germany, offering financial services requiring a license without authorization from BaFin (the Federal Financial Supervisory Authority) is prohibited under the Banking Act (KWG) and the Securities Institutions Act (WpIG). This licensing requirement protects investors: Licensed providers are subject to ongoing supervision, minimum capital requirements, and binding codes of conduct towards their clients. Without authorization, all of these safeguards are lost. Investors who use an unauthorized platform have virtually no regulatory recourse in the event of a dispute.

Whether a provider actually has a BaFin license can be checked free of charge via BaFin's public company database at bafin.de. If an entry is missing there – as in the case of blue-invest.org – this is a clear warning sign, regardless of how professionally the provider's website is designed.

If you have deposited money at blue-invest.org and have not received a payout: Secure all documents now and have your case assessed by a lawyer.

How the scam behind blue-invest.org works

blue-invest.org follows a fraudulent scheme that operates in the field of... Crypto investment fraud The platform has been under international surveillance by law enforcement agencies for years. Victims report being contacted via social networks, messaging services, or advertisements. The platform itself presents itself with a professionally designed website, a structured user account, and a personal contact person – features intended to mimic reputable providers.

In its early stages, blue-invest.org displays fictitious profits that are technically almost indistinguishable from genuine trading profits for those affected. Cryptocurrency platforms can internally display price movements, account balances, and transactions without any real market activity behind them. The actual fraud only occurs when users attempt to withdraw their funds. Pattern It turns out that payments are blocked with reference to alleged tax obligations, processing fees, verification requirements, or minimum trading volumes. In many cases, all contact with blue-invest.org eventually ceases completely.

Legal classification under criminal and regulatory law of blue-invest.org

Unauthorized financial services under the German Banking Act (KWG)

Offering banking and financial services requiring a license without authorization from BaFin (the German Federal Financial Supervisory Authority) is a criminal offense under Section 54 of the German Banking Act (KWG) and can be punished with imprisonment of up to five years or a fine. The BaFin warning issued in February 2026 officially documents this suspicion and is therefore also relevant for civil proceedings against the operators of blue-invest.org: it proves that the platform was operating outside the regulated framework.

Fraud according to § 263 of the German Criminal Code

Regardless of any regulatory violations, the described practices of blue-invest.org generally constitute fraud under Section 263 of the German Criminal Code (StGB): Perpetrators deceive investors about the actual functioning of the platform, the existence of real trading transactions, and the availability of reported balances. Investors are thereby induced to make deposits that they would not have made had they been correctly informed. In cases of organized and cross-border activity, commercial fraud under Section 263 Paragraph 3 of the German Criminal Code (StGB) may apply, which is punishable by imprisonment of up to ten years.

A qualified criminal complaint, based on fully secured communication and payment data, significantly increases the likelihood of an investigation. Act before digital traces are lost.

Legal options for victims of blue-invest.org

Criminal complaint and securing of evidence

The most time-critical step is securing all available documentation: screenshots of the blue-invest.org platform and the user account, all communication with the provider and any intermediaries, payment receipts, transaction records, and wallet addresses. This documentation forms the basis for filing a criminal complaint with the relevant police station or the specialized public prosecutor's office for internet crime. The more structured and complete the documentation, the greater the chance of an actual investigation being launched.

Civil law claims for restitution

If deposits to blue-invest.org were made via identifiable bank accounts, credit cards, or regulated payment service providers, claims for reimbursement under Sections 812 et seq. of the German Civil Code (BGB) may be considered. For card payments, a chargeback procedure should be initiated immediately. If intermediary payment service providers or credit institutions have violated their duty of care, claims may also exist against them. For deposits via cryptocurrencies, a forensic blockchain analysis is required to document money flows and prepare them as a basis for official action.

Lost money at blue-invest.org – here's what to do now

Anyone who has deposited money with blue-invest.org and is experiencing withdrawal problems should refrain from making any further payments – regardless of what they are called. Each additional transfer increases the risk without improving the withdrawal situation. Likewise, do not grant any remote access to your devices offered in connection with blue-invest.org or alleged helpers.

All available documents must be fully secured and not deleted. Based on this, an initial legal assessment should be obtained promptly to clarify the facts, the chances of success, and sensible next steps. Anyone who is contacted by another provider after a loss at blue-invest.org should... Get your money back Anyone considering this contact should classify it as a potential recovery scam and have it reviewed by a lawyer first. Rogert & Ulbrich is available nationwide for an initial assessment.

Your lawyers for crypto fraud and blue-invest.org – Rogert & Ulbrich

The law firm Rogert & Ulbrich advises and represents clients nationwide in cases of cryptocurrency fraud, unauthorized financial services, and online investment fraud. The firm assists clients both out of court through consultation, document review, and correspondence with payment service providers, as well as in criminal proceedings and civil lawsuits. In cases involving cryptocurrency transactions, the firm collaborates with forensic specialists to prepare blockchain data for court admissibility and to identify perpetrator structures.

If you have been harmed by blue-invest.org or a similar platform, do not hesitate to contact us. Get in touch and secure your claims.

FAQs – Frequently Asked Questions about blue-invest.org

Der Beitrag BaFin Warnung: blue-invest.org – Was Geschädigte bei Krypto-Betrug jetzt tun können erschien zuerst auf R&U.

Current scams at Ledger & Ledger Live

1. Phishing emails / fake update requests

• Fake emails claiming to be from Ledger ask users to download a new version of Ledger Live or perform a “security update.”
• These messages often contain a button such as “Verify Now” or “Secure My Account,” which leads to a fake website where the 24-word phrase is then requested.
• Particularly dangerous: fake Ledger apps have been discovered on macOS that replace the real application and ask you to enter the phrase.
  

2. Physical mail (Ledger Letter Scam)

• Criminals send deceptively real letters to user addresses (some of which come from leaked data).
• The letter often contains QR codes or links to fake websites asking you to validate your wallet or perform security updates.
• Ledger itself confirms that they never Send letters with such requests.
  

3. Telephone calls / social engineering via hotline

• Victims receive calls claiming their Ledger account has been compromised. They are then asked to visit a website or enter their recovery phrase.
• Some cases report that details (name, email address) from data leaks have been used to inspire trust.
• Important: Ledger never calls users and will never ask for the recovery phrase.
  

4. Fake Ledger software / manipulated apps / malware

• Fraudsters offer a manipulated version of Ledger Live that appears legitimate but collects the seed phrase upon login.
• Browser plugins or external apps that mimic Ledger functionality are also in circulation.
• In some cases, malware is secretly installed on the computer and monitors actions in the background.
• A technically sophisticated variant: a manipulated hardware device (e.g., purchased, opened, or hardware components swapped) is resold as a genuine device. Thus, the creation of a seed on such a device is already compromised.
  

5. Address poisoning

• A more recent scam involves an attacker sending a small amount of cryptocurrency or NFT to a user's address. This so-called "poisoned address" can result in the next transaction automatically transmitting manipulated data or redirecting the user to a phishing website.
  

6. Clipboard manipulation (e.g. EthClipper attacks)

• A classic technique in which malware monitors the clipboard in the background and replaces the address with a manipulative one when copying crypto addresses. The user only notices a slight inaccuracy – and then unknowingly sends the message to the attacker.
  

7. Technical Support Scam / Fake Recovery Services

• Scammers offer repair or support services for wallet issues on social media or through advertisements. Users are redirected to a "support channel" where they systematically manipulate them into disclosing their keys or confirming transactions.
  

Legal perspective & options for victims

• File a criminal complaint: As soon as a loss occurs, a report should be filed with the police immediately, if possible with all evidence (email, letters, screenshots).
  
• Blockchain analysis / trace detection: With the help of on-chain analysis, it is often possible to trace where the stolen coins went.
  
• Civil law claims: In certain cases, it can be examined whether service providers, intermediaries or platforms can be held liable – for example, due to breaches of duty, incorrect security advice or culpable negligence.
  
• Immediate measures in case of suspicion:
  1 – Involve experts (IT forensics, crypto law)
  2 – No more access to compromised wallet / seed
  3 – Generate a new wallet with a fresh seed (offline)
  4 – Transfer any funds, if still available, immediately
  5 – Revoke access rights (dApp permissions)
  

Protective measures & best practices

• Buy Ledger devices only from the manufacturer or official resellers
• Firmware / software only from official sources / directly from Ledger
• Never enter the 24-word recovery phrase anywhere – only on the device itself
• Distrust of emails, calls or mail with urgent requests
• **Check domains carefully – look for minimal deviations (e.g. “legder”, “ledqer”) **
• Regular device checks / authenticity checks according to Ledger instructions
• Do not install third-party apps that imitate Ledger features
• Monitor clipboard / Use anti-malware
• Check permissions / smart contract authorizations and revoke them if necessary

Der Beitrag Achtung Ledger-Betrug: Aktuelle Angriffe & wie Sie Ihr Kryptoguthaben schützen erschien zuerst auf R&U.

We are here to help you with all questions about naturalization, residency rights, and the legal implications of the planned change in the law. Anyone currently planning to become a naturalized citizen after three years should seek advice in good time to meet deadlines and avoid potential disadvantages.

What exactly changes regarding naturalization?

The "supercharged naturalization" introduced in 2024, which allowed naturalization after just three years of residence, is about to be abolished. This regulation was aimed at particularly well-integrated individuals with German language skills at C1 level and active social engagement. The coalition agreement between the CDU, CSU, and SPD explicitly announces the abolition of "supercharged naturalization" for 2025.

Our immigration lawyers will assess whether accelerated naturalization is still possible and provide comprehensive advice on your options. Schedule a personal legal consultation now!

What remains in the naturalization law?

The reduction of the standard minimum residence period for naturalization from eight to five years, already introduced in 2024, remains unchanged. Dual citizenship will also continue to be possible and will remain the norm. According to the coalition agreement, other key components of the citizenship law reform will also be retained.

When will the abolition of turbo naturalization come into effect?

The coalition agreement between the CDU, CSU, and SPD initially represents a political declaration of intent and has no immediate legal effect. The planned abolition of naturalization after three years still has to be implemented through a legislative process in the Bundestag. Until then, the current regulation will remain in place. However, it is expected that the new government will soon present a draft bill amending citizenship law.

Act now: Naturalization after 3 years will soon be abolished

Anyone who currently meets all the requirements for naturalization after three years should consider whether a timely application makes sense. Due to the upcoming changes, it is advisable to seek advice from experienced immigration lawyers early on in order to meet deadlines and secure your chances of naturalization.

Our lawyers will assess your individual situation and show you how you can still benefit from "supercharged naturalization." Schedule a consultation now!

Der Beitrag Einbürgerung nach 3 Jahren: Geplante Abschaffung 2025 – Das sollten Betroffene wissen erschien zuerst auf R&U.

Following the first delivery in 2023, the tax authorities in North Rhine-Westphalia (NRW) again received structured user data from a German-based crypto platform in September 2025. These data sets contain information on account IDs, deposits and withdrawals, and movements between wallets. For the authorities, these are valuable pieces of the puzzle for identifying tax-relevant transactions. This is not an arbitrary search of all crypto accounts, but rather a request for information under the German Tax Code.

German tax rules for private crypto investors

The German tax regime is comparatively friendly for private investors: Anyone who holds crypto assets—whether currencies or other tokenized assets—for more than a year is generally exempt from taxation. There is also an exemption limit of €1,000 for private sales during the year.

Nevertheless, many investors run into trouble – often not out of malicious intent, but due to the underestimated complexity of the transactions. Coins change exchanges, are moved to hardware wallets, tokens are split, swapped, or loaned to protocols. The result: transaction chains that are almost impossible to reconstruct without proper documentation.

Special features of the attack

The attack was highly targetedThe attackers analyzed the victim's wallet structure in detail and tailored the attack precisely to their positions in the Venus Protocol. Evidence suggests that Deepfake videos were used to make fake identities appear credible.

Another feature: Despite using a Hardware wallet The attack was successful. The reason was the manipulation of the frontend, which caused the victim to sign correctly but unknowingly confirm a malicious transaction.

Specialized software for blockchain analysis

The tax authorities' analysis is no longer manual. Specialized software for blockchain analysis and AI-supported data processing clusters wallet movements, recognizes patterns, and links them with the KYC data collected by the platforms. Even peer-to-peer marketplaces, where not every counter-position is obvious, provide sufficient signals to filter out anomalies.

From 2026, new EU reporting requirements for crypto service providers will also standardize cross-border data flows.

Which transactions are interesting?

Tax authorities must weigh costs against benefits. Cases where the transaction volume is significant become particularly interesting. As a rule of thumb, the larger the flows, the higher the likelihood that an audit is worthwhile. Smaller investors aren't automatically off the hook, but realistically have a lower priority.

What is decisive is not just the absolute amount of profit, but often the sum of the movements and their structure: short holding times, frequent trades, transfers between many wallets and exchanges.

Test questions for crypto investors

Every investor should ask themselves the following questions:

• Holding periods: Have I held my crypto for more than a year? Can I document transfers between my wallets without a purchase or sale transaction?
• Prizes: What profits did I make in a calendar year? Losses from another year cannot be offset directly; they must be declared separately.
• Exemption limit: Am I exceeding the exemption limit of €1,000 per calendar year? This limit applies cumulatively, not per individual transaction.
• Completeness: Is it possible to compile a traceable transaction list for each tax year (deposits, withdrawals, purchases, sales, transfers, staking/lending/airdrops, etc.)?
• Plausibility: Does the chronological order make sense—especially for transfers between exchanges and wallets? Is there evidence of inventory, such as bank statements or platform exports?
• Consistency: Do statements, year-end balances, and declared profits/losses match, or are there unexplained gaps?

Transaction costs, splits, or defective exports are particularly critical. These require structured, traceable reports from available sources (exchange exports, wallet explorers, account statements, emails regarding deposits and withdrawals).

What should affected crypto investors do?

In cases of tax evasion, the tax office can make retroactive demands for up to ten years – in practice, this means that in 2025, offenses dating back to 2015 could still be affected.

Normally, the assessment period is four years (five years in the case of careless tax evasion), but in cases of suspected tax evasion, the ten-year period applies. In serious cases, criminal law threatens not only back payments but also severe penalties. Anyone who has not yet correctly declared the affected years should not underestimate the risk but should seek professional help immediately.

In this case, it is advisable to consult an experienced tax advisor and – if there are indications of criminal proceedings – a lawyer specialising in criminal tax law.

Der Beitrag Finanzamt prüft Krypto-Transaktionen: Was jetzt jeder Investor wissen muss erschien zuerst auf R&U.