Key Points
- BaFin supervises approximately 2,700 banks, 800 financial services institutions, over 700 insurance undertakings, and numerous pension funds across Germany.
- In 2024, BaFin completed 46 financial reporting enforcement examinations and found accounting errors in 10 of them.
- BaFin does not directly oversee statutory auditors; PIE audit oversight sits with APAS (Abschlussprüferaufsichtsstelle) at BAFA.
- Listed companies that receive a BaFin error finding must publish it in the Bundesanzeiger, triggering restatement costs and market scrutiny.
What is BaFin (Federal Financial Supervisory Authority)?
BaFin merged three predecessor agencies on 1 May 2002, unifying banking, insurance, securities, and pension fund supervision under one roof. The FinDAG establishes its governance: an executive board of five members and an administrative council, with funding sourced from levies on supervised entities rather than from the federal budget. The Federal Ministry of Finance exercises legal and technical supervision over BaFin but does not direct individual supervisory decisions.
For auditors, BaFin's most relevant function is financial reporting enforcement (Bilanzkontrolle). Under WpHG section 107, BaFin examines whether listed companies' financial statements comply with applicable accounting standards (IFRS, or HGB for those not reporting under IFRS). BaFin can initiate an examination when concrete indications of a violation exist, or on a random sampling basis without specific cause. If BaFin identifies errors, WpHG section 109 requires the company to publish the finding. Until 2022, this process ran as a two-tier system with the private-sector Deutsche Prüfstelle für Rechnungslegung (DPR) as the first tier. After the Wirecard failure exposed that model's weaknesses, the Financial Reporting Enforcement Reform Act (Bilanzkontrollreformgesetz) abolished the DPR role and gave BaFin sole responsibility from 1 January 2022.
BaFin's 2025 enforcement focus targeted the recoverability of financial and non-financial assets, covering impairment testing under IAS 36 and expected credit loss measurement under IFRS 9. For 2026, the national focus shifts to management reports (Lageberichterstattung) in the context of macroeconomic change, while ESMA-coordinated priorities add geopolitical risk disclosures and segment reporting.
Worked example
Client: German electronics manufacturer, FY2025, revenue EUR 310M, IFRS reporter listed on the Frankfurt Stock Exchange. The statutory audit is performed by a mid-tier Wirtschaftsprüfer firm with 45 professionals.
Step 1 — Assess BaFin enforcement exposure
The engagement partner reviews BaFin's published 2025 focus areas. IAS 36 impairment and IFRS 9 expected credit losses are flagged as priorities. Schäfer holds EUR 38M in goodwill from two acquisitions and EUR 24M in trade receivables across four European markets. Both balances fall within BaFin's stated priorities.
Documentation note: record that BaFin's 2025 enforcement priorities were considered in the risk assessment. Identify goodwill impairment testing (IAS 36) and the trade receivables ECL model (IFRS 9) as areas of elevated enforcement scrutiny.
Step 2 — Design audit procedures responsive to enforcement risk
For the goodwill balance, the team obtains management's value-in-use model and tests the discount rate against independently sourced WACC data. The team then stress-tests terminal growth rate assumptions under two downside scenarios. For trade receivables, the team evaluates the provision matrix against actual historical loss rates by geographic segment and challenges the forward-looking overlay for the two markets showing deteriorating payment behaviour.
Documentation note: record the link between BaFin's published priorities and the additional procedures performed. Document the independent WACC source and the stress-test scenarios applied to the CGU model. Record separately the basis for accepting or challenging the forward-looking ECL adjustment.
Step 3 — Evaluate disclosure compliance
BaFin enforcement examinations extend beyond the numbers. In 2024, error findings concentrated on note disclosures, asset valuation, revenue recognition (IFRS 15), and cash flow statement presentation (IAS 7). The engagement partner reviews Schäfer's IAS 36.134 sensitivity disclosure and IFRS 7.35F credit risk disclosure against BaFin's published error patterns.
Documentation note: record the disclosure review performed and the specific paragraphs checked (IAS 36.134, IFRS 7.35F, IFRS 7.35G). State the conclusion on disclosure completeness and file a cross-reference to BaFin's published enforcement findings as the basis for the disclosure focus.
Conclusion: the approach is defensible because the engagement team traced BaFin's stated enforcement priorities into the risk assessment and designed specific procedures for both flagged balances. The disclosure review against BaFin's published error patterns completes the chain from risk identification to reporting.
Why it matters in practice
BaFin completed 46 financial reporting enforcement examinations in 2024, with 10 resulting in error findings. The error categories concentrated on note disclosures, asset valuation, revenue recognition under IFRS 15, and cash flow statement presentation under IAS 7. Auditors of listed German companies who do not map BaFin's published annual priorities into their risk assessment leave a gap that reviewers will question if the entity later receives a BaFin enforcement finding on that exact topic.
Practitioners sometimes confuse BaFin's financial reporting enforcement role with audit firm oversight. BaFin examines the financial statements of listed companies, not the work of the auditor directly. PIE audit oversight in Germany sits with APAS (Abschlussprüferaufsichtsstelle), housed at BAFA and operating under section 66a of the WPO. The WPK handles registration and professional discipline. Conflating these bodies in engagement documentation creates confusion during internal quality reviews.
BaFin vs. APAS (Abschlussprüferaufsichtsstelle)
| Dimension | BaFin | APAS |
|---|---|---|
| Legal basis | FinDAG, WpHG sections 107–113 | WPO section 66a, housed at BAFA |
| What it examines | Financial statements of listed companies | Audit firms that audit public interest entities |
| Focus | Whether the company's accounts comply with IFRS or HGB | Whether the auditor's work complies with ISA [DE] and professional standards |
| Enforcement outcome | Mandatory publication of errors by the company | Sanctions against the audit firm or individual Wirtschaftsprüfer |
| International affiliation | IOSCO, EBA, EIOPA, ESMA | IFIAR, CEAOB |
BaFin finds that a listed company misstated its goodwill impairment test. APAS then examines whether the auditor's procedures on that same impairment test were adequate. The two bodies operate sequentially: an adverse BaFin finding on a company's financial statements frequently triggers an APAS inquiry into the auditor's file.
Related terms
Frequently asked questions
Does BaFin directly supervise German audit firms?
No. BaFin supervises financial institutions and enforces financial reporting standards for listed companies. Audit firm oversight for PIE auditors belongs to APAS under section 66a of the WPO. Non-PIE audit quality reviews fall to the WPK. An auditor interacts with BaFin only indirectly, through the enforcement consequences that BaFin findings create for the audited entity.
What happens when BaFin finds an error in a listed company's financial statements?
WpHG section 109 requires the company to publish the error finding in the Bundesanzeiger (Federal Gazette). The publication identifies the specific accounting standard violated. This triggers analyst scrutiny, share price pressure, restatement of the affected financial statements, and board-level accountability questions. The statutory auditor faces reputational exposure and potential liability claims under HGB § 323 if the error fell within the scope of the audit opinion.
How does BaFin select companies for financial reporting enforcement examinations?
BaFin uses a risk-based selection model combined with random sampling. WpHG section 107 permits both cause-based examinations (where concrete indications of a violation exist) and sampling-based examinations without specific cause. BaFin publishes annual focus areas (recoverability of assets for 2025, management reports for 2026) that signal where scrutiny will concentrate, but any listed company can be selected in a given year.